$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft File: 3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft (raw, json) Hash identifier: yN1MZ2qkhtmUGIeUq4Lfq5h9WXUti2o51nWBA1BDbns= Subject key identifier: 4C:B9:67:1D:DA:DE:E0:AF:4A:32:F5:8F:30:96:A1:10:6D:6A:98:77 Authority key identifier: 3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A Certificate issuer: /CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b Certificate serial: 472C9813E11EDF3CDB4F0A13CCB8A7FD43725138 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft Manifest number: 040F Signing time: Tue 22 Sep 2026 09:49:28 +0000 Manifest this update: Tue 22 Sep 2026 09:44:28 +0000 Manifest next update: Wed 23 Sep 2026 10:10:28 +0000 Files and hashes: 1: 3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl (hash: u+M4/HWVUzzui6sNXmae8GQG2Ioo1vrQMBCk9ux/YPA=) 2: 323630323a663764653a3a2f34302d3438203d3e203236393534.roa (hash: huw/azfVtTuGJ+KiuQkTd/zUzlN/Io2KIFdebZxScmw=) 3: 32332e3139312e34302e302f32342d3234203d3e203236393534.roa (hash: uS9rqFKZ07mB8+YZnPlfGTxqPhMI6sgRdMjKP2z7h/I=) 4: 3133302e31322e39332e302f32342d3234203d3e203236393534.roa (hash: S/etqWBsJQE1xpnfTaF1R7YzxtdtexqAS5yykGH5s5A=) 5: AS402536.asa (hash: g8LGBbyfpAn2ClC4x/qVDuR3+weknmyrfoII4gG2Iug=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 10:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:2c:98:13:e1:1e:df:3c:db:4f:0a:13:cc:b8:a7:fd:43:72:51:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b Validity Not Before: Sep 22 09:44:28 2026 GMT Not After : Sep 23 10:10:28 2026 GMT Subject: CN=4CB9671DDADEE0AF4A32F58F3096A1106D6A9877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:31:2d:84:c0:61:b8:8e:a7:84:87:b5:d4:3c: 2e:9d:97:2f:c6:a3:8b:88:08:a1:1c:59:eb:33:2c: fa:ce:52:83:f9:f2:90:ae:64:bc:c3:61:2c:fa:d7: 01:c8:36:12:b4:97:9e:a1:78:e9:75:bf:b1:57:6f: 15:68:1c:12:61:f4:d1:e7:0d:93:f5:56:dc:86:58: 89:69:f1:43:f2:ef:80:11:98:28:a8:81:a2:4c:fd: 47:8b:8a:f9:0b:d3:07:2c:f6:8f:21:60:d3:0f:ea: 13:1a:97:c2:d6:72:74:b9:6c:ba:04:b0:96:63:fb: 81:e7:30:d3:c0:2f:f6:4a:30:67:79:66:fd:5b:c2: 05:41:48:8d:4e:47:d1:4c:46:bf:e8:31:43:8d:ad: 84:2c:b3:a3:9c:45:c9:63:28:c7:03:c7:5e:dc:61: d1:1a:4e:ff:63:f3:da:9b:59:dd:fb:f3:bf:59:ba: b5:d3:0f:4e:a3:5b:54:3d:1f:75:4a:50:08:d4:87: 06:4e:c6:f7:88:c5:bd:8b:17:e1:55:a6:2e:61:db: 43:2a:6b:f9:71:62:1a:ff:87:23:c6:6b:fc:11:b5: fc:d2:f6:dd:52:42:f2:68:b1:cd:7e:df:7b:43:97: bb:9a:c5:04:e7:d0:e8:bb:f6:63:25:19:80:bd:d7: 88:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:B9:67:1D:DA:DE:E0:AF:4A:32:F5:8F:30:96:A1:10:6D:6A:98:77 X509v3 Authority Key Identifier: keyid:3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:82:47:f4:c5:4f:26:42:e0:01:82:4f:62:92:8a:d8:45:20: e1:e1:3c:1a:2a:a2:53:d9:ae:15:f4:97:68:41:9c:5b:e8:79: 6f:e5:81:57:6b:11:7e:61:be:78:da:79:bc:cb:ae:67:3b:c7: aa:54:3a:c3:74:ad:89:55:63:33:4a:ff:fd:8c:8e:36:90:3b: 24:16:ac:fb:1d:43:fb:da:63:59:16:3f:0d:32:bb:3f:db:5b: b6:ea:f7:07:1d:e8:3d:b6:13:57:ab:fd:fe:73:61:56:80:6c: 36:ef:77:3f:8d:6f:fc:40:54:f3:27:72:ed:85:52:67:d5:98: b1:d3:a4:8c:28:e8:52:bd:5e:d0:7d:47:0d:4a:55:4d:e1:cd: 68:27:70:17:a3:67:f7:7a:af:11:04:c6:82:a9:15:c5:f0:64: 65:70:14:40:a6:28:0c:88:aa:18:ed:2e:09:37:e5:df:55:3c: 51:23:c7:a2:12:f0:de:81:8e:14:72:31:27:52:0e:4f:67:a4: 88:49:e0:a8:72:93:ca:a2:f1:f5:3f:ce:95:a7:d5:44:0f:2b: d1:87:d6:c4:c2:aa:b5:91:21:13:04:e0:38:20:ff:90:7a:d2: 44:99:ee:a1:cc:29:ff:60:d9:2e:a0:74:af:3a:d1:95:23:9c: 2f:9b:94:57 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIURyyYE+Ee3zzbTwoTzLin/UNyUTgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMzI0ZmZlMzlhOThhMDE0NmI1MDNkOGEwMTVjYTJjMmU3 NjdjZjNkMGI5ZmRlNjIzMWIwHhcNMjYwOTIyMDk0NDI4WhcNMjYwOTIzMTAxMDI4 WjAzMTEwLwYDVQQDEyg0Q0I5NjcxRERBREVFMEFGNEEzMkY1OEYzMDk2QTExMDZE NkE5ODc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTEthMBhuI6n hIe11DwunZcvxqOLiAihHFnrMyz6zlKD+fKQrmS8w2Es+tcByDYStJeeoXjpdb+x V28VaBwSYfTR5w2T9VbchliJafFD8u+AEZgoqIGiTP1Hi4r5C9MHLPaPIWDTD+oT GpfC1nJ0uWy6BLCWY/uB5zDTwC/2SjBneWb9W8IFQUiNTkfRTEa/6DFDja2ELLOj nEXJYyjHA8de3GHRGk7/Y/Pam1nd+/O/Wbq10w9Oo1tUPR91SlAI1IcGTsb3iMW9 ixfhVaYuYdtDKmv5cWIa/4cjxmv8EbX80vbdUkLyaLHNft97Q5e7msUE59Dou/Zj JRmAvdeI2wIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFEy5Zx3a3uCvSjL1jzCWoRBt aph3MB8GA1UdIwQYMBaAFD/NOoOeoUF/2Yjz3f0EVBl/qvR6MA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5 LTBhYjcwZTQ4MTViYi8xLzNGQ0QzQTgzOUVBMTQxN0ZEOTg4RjNEREZEMDQ1NDE5 N0ZBQUY0N0EuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYt NDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81MWNkOTlmNy0yZjQyLTRkZWMtYjJjNi0w OWJhZmFhMzc4MGUvMzI0ZmZlMzlhOThhMDE0NmI1MDNkOGEwMTVjYTJjMmU3Njdj ZjNkMGI5ZmRlNjIzMWIuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv NzNiOGVjMDEtOGJhNS00NzlmLWEyMjktMGFiNzBlNDgxNWJiLzEvM0ZDRDNBODM5 RUExNDE3RkQ5ODhGM0RERkQwNDU0MTk3RkFBRjQ3QS5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGqCR/TF TyZC4AGCT2KSithFIOHhPBoqolPZrhX0l2hBnFvoeW/lgVdrEX5hvnjaebzLrmc7 x6pUOsN0rYlVYzNK//2MjjaQOyQWrPsdQ/vaY1kWPw0yuz/bW7bq9wcd6D22E1er /f5zYVaAbDbvdz+Nb/xAVPMncu2FUmfVmLHTpIwo6FK9XtB9Rw1KVU3hzWgncBej Z/d6rxEExoKpFcXwZGVwFECmKAyIqhjtLgk35d9VPFEjx6IS8N6BjhRyMSdSDk9n pIhJ4Khyk8qi8fU/zpWn1UQPK9GH1sTCqrWRIRME4Dgg/5B60kSZ7qHMKf9g2S6g dK860ZUjnC+blFc= -----END CERTIFICATE-----Generated at Tue Sep 22 15:08:50 2026 by rpki-client