$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft File: 3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft (raw, json) Hash identifier: 4C50EZj4F4kIJ3NrQ8kqyvngNxXqFNcGZhsRnEcOmoA= Subject key identifier: BF:1A:F5:05:34:59:A3:1F:73:D1:86:C4:08:95:B2:32:90:6D:06:50 Authority key identifier: 3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A Certificate issuer: /CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b Certificate serial: 20B05E3246AB307D014AEEB45AD7B96469EB5166 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft Manifest number: 0411 Signing time: Wed 23 Sep 2026 19:01:11 +0000 Manifest this update: Wed 23 Sep 2026 18:56:11 +0000 Manifest next update: Thu 24 Sep 2026 19:31:11 +0000 Files and hashes: 1: AS402536.asa (hash: g8LGBbyfpAn2ClC4x/qVDuR3+weknmyrfoII4gG2Iug=) 2: 32332e3139312e34302e302f32342d3234203d3e203236393534.roa (hash: uS9rqFKZ07mB8+YZnPlfGTxqPhMI6sgRdMjKP2z7h/I=) 3: 323630323a663764653a3a2f34302d3438203d3e203236393534.roa (hash: huw/azfVtTuGJ+KiuQkTd/zUzlN/Io2KIFdebZxScmw=) 4: 3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl (hash: 2dxdJTSesFOeKUiddfB0OUmy8fW8L1EIAb9Z1YpnL5Y=) 5: 3133302e31322e39332e302f32342d3234203d3e203236393534.roa (hash: S/etqWBsJQE1xpnfTaF1R7YzxtdtexqAS5yykGH5s5A=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 19:31:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:b0:5e:32:46:ab:30:7d:01:4a:ee:b4:5a:d7:b9:64:69:eb:51:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b Validity Not Before: Sep 23 18:56:11 2026 GMT Not After : Sep 24 19:31:11 2026 GMT Subject: CN=BF1AF5053459A31F73D186C40895B232906D0650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:69:ce:8d:b3:36:ae:90:de:c4:d3:4c:91:d4: fe:de:b9:77:d4:c1:2e:ec:b3:1e:e0:17:eb:5c:53: 0d:01:84:13:67:fd:14:63:b5:93:d5:f8:24:d3:25: c4:19:66:66:bd:d4:0b:6b:8e:34:f6:58:2b:89:6e: 20:0e:d9:56:bd:c5:0c:02:79:71:5c:23:12:56:b1: 44:96:80:06:54:de:18:fa:92:64:d2:91:53:61:3b: 04:23:bb:68:dc:53:0f:cd:5e:45:b4:07:05:ad:e5: e8:44:c8:11:90:b3:c0:54:00:16:4f:93:27:89:3c: 13:c6:57:4c:0e:54:e3:1a:5e:d8:3f:51:52:e6:8a: 9d:86:45:65:de:bd:b5:0e:84:b2:a4:8d:b6:82:7d: f0:62:87:3f:88:7c:4c:c3:b3:4c:c3:31:e8:36:16: 93:02:df:76:65:93:f5:49:b1:da:34:7a:71:19:07: cc:ee:33:fa:37:bc:ce:93:ce:1d:8d:57:67:42:2c: fc:22:c1:7a:90:d6:25:31:a8:94:7c:37:9c:32:cf: 14:1b:c0:2c:49:ec:3d:41:5f:d2:d4:56:1f:a2:61: 72:87:98:f4:8c:13:fd:8a:93:21:b8:dc:a1:01:6c: aa:aa:f3:38:64:b1:6c:18:e8:ba:56:6a:c4:4d:de: 4a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:1A:F5:05:34:59:A3:1F:73:D1:86:C4:08:95:B2:32:90:6D:06:50 X509v3 Authority Key Identifier: keyid:3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:05:ec:fa:a5:d0:52:c8:32:b8:93:c3:46:24:07:67:3b:0f: 9d:52:4f:94:16:6a:e2:89:56:ed:8c:3b:d2:9e:d8:10:43:e6: b7:1f:f5:b5:b5:eb:cc:1d:13:81:1d:bf:75:b8:0b:c8:f3:93: 07:db:ba:96:9d:e7:ff:7c:33:d4:f2:89:df:b0:de:75:fa:d4: 1c:21:72:65:f7:f8:92:34:17:a2:7b:a7:fa:3f:b4:0c:8d:e7: 1b:19:2f:4e:dd:87:6c:a3:f2:3a:44:d8:b4:e2:74:a0:3b:e0: 80:69:cd:03:b2:d2:6d:4c:07:b6:a6:86:83:b1:db:37:a7:53: 14:7f:cd:cd:17:21:9f:59:fb:87:55:0a:be:76:17:92:e5:1c: 66:f3:b2:5e:f7:bc:c6:8c:87:4e:1e:96:ab:8d:b7:1b:d8:47: d7:8e:94:de:f3:4a:8f:94:c0:b5:cf:7d:59:c4:19:98:a1:b9: 64:48:6e:6d:71:b8:dc:a9:84:95:79:f5:8a:06:ba:78:fd:b6: 1b:3c:dc:62:5d:fc:fe:27:90:88:55:f7:2e:9d:40:51:aa:b9: 66:53:86:0a:16:c1:92:95:97:fd:18:a7:d6:8e:15:18:d1:bd: 0b:a7:1a:cc:4f:6a:f7:3c:87:7e:ed:a1:00:38:79:05:e2:37: 19:cd:2d:52 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUILBeMkarMH0BSu60Wte5ZGnrUWYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMzI0ZmZlMzlhOThhMDE0NmI1MDNkOGEwMTVjYTJjMmU3 NjdjZjNkMGI5ZmRlNjIzMWIwHhcNMjYwOTIzMTg1NjExWhcNMjYwOTI0MTkzMTEx WjAzMTEwLwYDVQQDEyhCRjFBRjUwNTM0NTlBMzFGNzNEMTg2QzQwODk1QjIzMjkw NkQwNjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2nOjbM2rpDe xNNMkdT+3rl31MEu7LMe4BfrXFMNAYQTZ/0UY7WT1fgk0yXEGWZmvdQLa4409lgr iW4gDtlWvcUMAnlxXCMSVrFEloAGVN4Y+pJk0pFTYTsEI7to3FMPzV5FtAcFreXo RMgRkLPAVAAWT5MniTwTxldMDlTjGl7YP1FS5oqdhkVl3r21DoSypI22gn3wYoc/ iHxMw7NMwzHoNhaTAt92ZZP1SbHaNHpxGQfM7jP6N7zOk84djVdnQiz8IsF6kNYl MaiUfDecMs8UG8AsSew9QV/S1FYfomFyh5j0jBP9ipMhuNyhAWyqqvM4ZLFsGOi6 VmrETd5KEQIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFL8a9QU0WaMfc9GGxAiVsjKQ bQZQMB8GA1UdIwQYMBaAFD/NOoOeoUF/2Yjz3f0EVBl/qvR6MA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5 LTBhYjcwZTQ4MTViYi8xLzNGQ0QzQTgzOUVBMTQxN0ZEOTg4RjNEREZEMDQ1NDE5 N0ZBQUY0N0EuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYt NDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81MWNkOTlmNy0yZjQyLTRkZWMtYjJjNi0w OWJhZmFhMzc4MGUvMzI0ZmZlMzlhOThhMDE0NmI1MDNkOGEwMTVjYTJjMmU3Njdj ZjNkMGI5ZmRlNjIzMWIuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv NzNiOGVjMDEtOGJhNS00NzlmLWEyMjktMGFiNzBlNDgxNWJiLzEvM0ZDRDNBODM5 RUExNDE3RkQ5ODhGM0RERkQwNDU0MTk3RkFBRjQ3QS5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFEF7Pql 0FLIMriTw0YkB2c7D51ST5QWauKJVu2MO9Ke2BBD5rcf9bW168wdE4Edv3W4C8jz kwfbupad5/98M9Tyid+w3nX61BwhcmX3+JI0F6J7p/o/tAyN5xsZL07dh2yj8jpE 2LTidKA74IBpzQOy0m1MB7amhoOx2zenUxR/zc0XIZ9Z+4dVCr52F5LlHGbzsl73 vMaMh04elquNtxvYR9eOlN7zSo+UwLXPfVnEGZihuWRIbm1xuNyphJV59YoGunj9 ths83GJd/P4nkIhV9y6dQFGquWZThgoWwZKVl/0Yp9aOFRjRvQunGsxPavc8h37t oQA4eQXiNxnNLVI= -----END CERTIFICATE-----Generated at Wed Sep 23 20:25:55 2026 by rpki-client