$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft File: 3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft (raw, json) Hash identifier: XE8vR+1cWzFcWujkXPwhv9MC0MGlZ/YhEL+TOFf5lds= Subject key identifier: D6:F8:91:A3:A3:59:A8:9C:3A:77:E1:FF:6E:3D:2C:F1:8F:C1:25:95 Authority key identifier: 3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A Certificate issuer: /CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b Certificate serial: 088A94006AD532B03629784E0807858B95C73729 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft Manifest number: 02ED Signing time: Fri 17 Apr 2026 00:16:32 +0000 Manifest this update: Fri 17 Apr 2026 00:11:32 +0000 Manifest next update: Sat 18 Apr 2026 01:47:32 +0000 Files and hashes: 1: 3133302e31322e39332e302f32342d3234203d3e203236393534.roa (hash: vVLMMj/up4t8BoR2x4+9T6jLFKzm1RRXCwaLQiGBGUU=) 2: 32332e3139312e34302e302f32342d3234203d3e203236393534.roa (hash: uS9rqFKZ07mB8+YZnPlfGTxqPhMI6sgRdMjKP2z7h/I=) 3: 32332e3139312e34302e302f32342d3234203d3e203331383938.roa (hash: BIc+hyQ1qBCFYW6xfCJ2KWm2W3zeUtGnxmH5EdT5vpY=) 4: 323630323a663764653a3a2f34302d3438203d3e203331383938.roa (hash: D9VdjvhOYF09b5z9awGHcc1wRjsMlbsTgh+JB0uGMwY=) 5: 3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl (hash: cfotl4Mgsm3xcQ4kPWEi2lOod82tYqq4noqK4PtsDXw=) 6: 323630323a663764653a3a2f34302d3438203d3e203236393534.roa (hash: huw/azfVtTuGJ+KiuQkTd/zUzlN/Io2KIFdebZxScmw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 01:47:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:8a:94:00:6a:d5:32:b0:36:29:78:4e:08:07:85:8b:95:c7:37:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b Validity Not Before: Apr 17 00:11:32 2026 GMT Not After : Apr 18 01:47:32 2026 GMT Subject: CN=D6F891A3A359A89C3A77E1FF6E3D2CF18FC12595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b1:62:ce:a9:2e:8e:46:30:50:ad:5b:f6:6d: 29:f2:09:eb:3f:e8:a2:b3:5f:f3:42:66:8a:db:87: a9:6c:03:87:e6:57:2a:38:2c:58:a1:e8:82:f3:fd: fd:20:4a:97:d9:ac:ff:b2:26:cc:4d:f8:d1:23:7d: 38:87:e5:64:e2:7b:30:6f:ef:3d:6b:7d:f3:96:84: 2f:48:56:4c:55:a9:11:d5:8b:ca:5a:05:02:0c:8c: 7a:e8:8a:96:0a:71:0c:50:e5:f2:7d:2d:9b:7e:97: 96:ba:84:a6:56:62:14:25:8b:70:aa:f0:40:b9:91: 56:b6:87:b5:ec:6a:0b:8c:6a:a4:f9:28:e0:3e:75: 84:17:78:7a:49:c9:19:47:56:41:6a:36:f4:b8:16: 15:c6:ba:22:52:95:52:b2:ce:67:2b:54:c9:20:32: 90:91:ab:a8:87:30:4a:ce:91:dc:4c:17:a4:15:ae: ec:0f:37:26:ce:4f:f3:2d:dd:71:01:50:18:1f:59: b0:0c:02:61:61:bd:cb:a0:0a:c0:87:54:4d:66:52: b7:6b:96:fe:19:51:38:e5:cf:4c:21:af:b4:44:7c: 27:a9:91:cf:a9:ec:c6:9b:a6:17:74:c6:96:b4:5f: 39:fa:83:3d:98:63:d6:21:8a:d0:c6:69:9d:8c:c6: 55:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:F8:91:A3:A3:59:A8:9C:3A:77:E1:FF:6E:3D:2C:F1:8F:C1:25:95 X509v3 Authority Key Identifier: keyid:3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:e1:b4:49:9a:f5:59:b8:b5:69:83:69:e8:8e:9b:d7:4f:99: bd:bf:2c:3b:8c:56:3c:9d:76:3a:3f:8b:ea:4c:b4:62:00:15: fc:82:77:56:73:ed:52:97:41:7c:0a:d7:e9:74:4d:ea:c5:b7: 9e:c6:50:89:69:ad:d2:65:66:0d:5f:e0:1e:37:f9:c9:b7:7d: ed:07:31:5c:3c:a3:08:4a:fb:d1:40:af:01:f5:f7:ef:9a:88: 2c:69:47:20:58:3e:b2:3c:82:2f:37:6b:d4:61:ef:15:2b:4c: ad:00:50:04:8b:e4:df:38:49:0f:79:39:d6:e3:4d:bd:49:54: 72:56:61:7e:69:fa:60:07:02:af:a9:db:e0:ea:f6:1a:17:ac: 6f:96:20:6d:e7:89:9e:ab:01:df:37:19:21:ab:7a:90:0b:af: 85:f6:0d:12:c7:87:a5:ce:cf:db:61:71:ee:49:10:28:80:82: ef:7c:5b:76:ae:0d:1a:d0:63:36:07:e9:a0:ce:e0:91:bf:b1: 3f:a6:e0:c8:00:76:73:56:fd:4a:74:75:c7:7b:7f:e9:62:2c: 97:01:5d:32:ba:c8:66:58:c5:0f:8d:8b:bd:54:1e:10:cd:19: c7:fc:78:7b:85:2b:96:9e:5b:02:58:04:50:18:fa:ea:01:d0: 75:bd:aa:ce -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUCIqUAGrVMrA2KXhOCAeFi5XHNykwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMzI0ZmZlMzlhOThhMDE0NmI1MDNkOGEwMTVjYTJjMmU3 NjdjZjNkMGI5ZmRlNjIzMWIwHhcNMjYwNDE3MDAxMTMyWhcNMjYwNDE4MDE0NzMy WjAzMTEwLwYDVQQDEyhENkY4OTFBM0EzNTlBODlDM0E3N0UxRkY2RTNEMkNGMThG QzEyNTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprFizqkujkYw UK1b9m0p8gnrP+iis1/zQmaK24epbAOH5lcqOCxYoeiC8/39IEqX2az/sibMTfjR I304h+Vk4nswb+89a33zloQvSFZMVakR1YvKWgUCDIx66IqWCnEMUOXyfS2bfpeW uoSmVmIUJYtwqvBAuZFWtoe17GoLjGqk+SjgPnWEF3h6SckZR1ZBajb0uBYVxroi UpVSss5nK1TJIDKQkauohzBKzpHcTBekFa7sDzcmzk/zLd1xAVAYH1mwDAJhYb3L oArAh1RNZlK3a5b+GVE45c9MIa+0RHwnqZHPqezGm6YXdMaWtF85+oM9mGPWIYrQ xmmdjMZV/QIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFNb4kaOjWaicOnfh/249LPGP wSWVMB8GA1UdIwQYMBaAFD/NOoOeoUF/2Yjz3f0EVBl/qvR6MA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5 LTBhYjcwZTQ4MTViYi8xLzNGQ0QzQTgzOUVBMTQxN0ZEOTg4RjNEREZEMDQ1NDE5 N0ZBQUY0N0EuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYt NDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81MWNkOTlmNy0yZjQyLTRkZWMtYjJjNi0w OWJhZmFhMzc4MGUvMzI0ZmZlMzlhOThhMDE0NmI1MDNkOGEwMTVjYTJjMmU3Njdj ZjNkMGI5ZmRlNjIzMWIuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv NzNiOGVjMDEtOGJhNS00NzlmLWEyMjktMGFiNzBlNDgxNWJiLzEvM0ZDRDNBODM5 RUExNDE3RkQ5ODhGM0RERkQwNDU0MTk3RkFBRjQ3QS5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHnhtEma 9Vm4tWmDaeiOm9dPmb2/LDuMVjyddjo/i+pMtGIAFfyCd1Zz7VKXQXwK1+l0TerF t57GUIlprdJlZg1f4B43+cm3fe0HMVw8owhK+9FArwH19++aiCxpRyBYPrI8gi83 a9Rh7xUrTK0AUASL5N84SQ95OdbjTb1JVHJWYX5p+mAHAq+p2+Dq9hoXrG+WIG3n iZ6rAd83GSGrepALr4X2DRLHh6XOz9thce5JECiAgu98W3auDRrQYzYH6aDO4JG/ sT+m4MgAdnNW/Up0dcd7f+liLJcBXTK6yGZYxQ+Ni71UHhDNGcf8eHuFK5aeWwJY BFAY+uoB0HW9qs4= -----END CERTIFICATE-----Generated at Fri Apr 17 16:32:29 2026 by rpki-client