$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft File: 3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft (raw, json) Hash identifier: k8tTL49d+uf+XhLzOCptf1Es+ixGwnABMx36SJhvi0k= Subject key identifier: BD:03:72:28:09:F4:85:C9:8D:5F:11:92:BD:8E:3F:49:AC:13:2B:25 Authority key identifier: 3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A Certificate issuer: /CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b Certificate serial: 42CA2CFBD6DBAECE5426AF03FD3F237DA0E5787B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft Manifest number: 02A1 Signing time: Sun 01 Mar 2026 20:44:41 +0000 Manifest this update: Sun 01 Mar 2026 20:39:41 +0000 Manifest next update: Mon 02 Mar 2026 22:43:41 +0000 Files and hashes: 1: 32332e3139312e34302e302f32342d3234203d3e203236393534.roa (hash: uS9rqFKZ07mB8+YZnPlfGTxqPhMI6sgRdMjKP2z7h/I=) 2: 3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl (hash: lqxGTvY0KvFeFja/Ij9Xyz3rOisV/mh68zaBzl14Wl0=) 3: 323630323a663764653a3a2f34302d3438203d3e203331383938.roa (hash: D9VdjvhOYF09b5z9awGHcc1wRjsMlbsTgh+JB0uGMwY=) 4: 323630323a663764653a3a2f34302d3438203d3e203236393534.roa (hash: huw/azfVtTuGJ+KiuQkTd/zUzlN/Io2KIFdebZxScmw=) 5: 3133302e31322e39332e302f32342d3234203d3e203236393534.roa (hash: vVLMMj/up4t8BoR2x4+9T6jLFKzm1RRXCwaLQiGBGUU=) 6: 32332e3139312e34302e302f32342d3234203d3e203331383938.roa (hash: BIc+hyQ1qBCFYW6xfCJ2KWm2W3zeUtGnxmH5EdT5vpY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 22:43:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:ca:2c:fb:d6:db:ae:ce:54:26:af:03:fd:3f:23:7d:a0:e5:78:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b Validity Not Before: Mar 1 20:39:41 2026 GMT Not After : Mar 2 22:43:41 2026 GMT Subject: CN=BD03722809F485C98D5F1192BD8E3F49AC132B25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:36:38:03:22:35:3f:f9:47:de:dd:0b:d8:fe: b6:5c:c9:2d:c2:6c:39:8d:96:16:40:a4:82:6e:e4: 6d:57:2b:24:84:d2:c2:25:6f:e0:f8:22:1e:05:06: 29:f5:39:16:4e:f6:6d:40:a2:34:92:9d:0e:01:5e: 82:63:1b:01:ed:b6:2b:37:b3:c6:82:8d:66:11:3d: 9d:e9:e8:04:45:2f:ed:23:c4:6d:5f:8c:e6:cd:49: 80:40:b1:98:43:8a:0a:64:bc:f7:f8:01:62:64:86: 6c:b8:88:f7:fa:32:44:23:78:2b:7e:66:af:0e:50: 3e:a1:39:e9:ef:8a:79:c2:78:71:66:1e:7b:14:00: 65:53:7e:1c:7f:d1:cc:7c:5f:45:71:30:e0:62:b2: 65:0d:75:1f:c5:a6:75:e8:be:82:7d:1f:d2:ea:71: ef:d4:2f:ba:63:75:96:57:9b:a7:5a:3a:1c:a0:30: 78:54:5b:51:82:51:5c:b1:60:90:74:47:df:e3:32: 51:7e:41:5b:88:d3:60:e6:13:74:ce:fc:5a:9e:f7: 9c:aa:9c:ec:0a:b1:bb:2b:f6:58:1b:66:d7:3b:56: 79:d7:80:94:3d:39:d9:0a:5b:de:37:40:22:ca:14: 25:d8:d9:62:14:26:61:5b:83:fd:2f:84:f4:04:7d: e0:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:03:72:28:09:F4:85:C9:8D:5F:11:92:BD:8E:3F:49:AC:13:2B:25 X509v3 Authority Key Identifier: keyid:3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:91:b6:78:20:4e:63:46:b5:0b:53:8d:58:d4:3a:95:22:25: 92:98:10:aa:62:d4:51:82:60:8a:7d:79:1a:12:cb:a8:88:15: d3:e5:5b:ff:ad:3c:9c:5c:d5:83:48:ec:49:fe:86:f0:05:9b: 58:54:bd:cd:be:7b:eb:7a:48:a9:05:fa:25:11:68:58:fc:f8: 41:ab:ee:d8:21:d2:9d:b6:d4:3c:1d:c8:e3:b9:52:ea:fe:f4: 80:ae:aa:ca:4f:09:fe:d6:c2:7a:36:6b:18:55:24:2d:ca:60: 3b:2e:bf:82:4f:31:a6:5b:65:cf:7a:8e:3e:0e:13:1d:bd:01: e9:4e:a4:cc:6f:e1:68:57:c2:eb:49:2d:15:2b:0c:3d:61:70: fd:de:46:e1:ba:f6:69:bf:66:80:5d:af:7c:fd:55:3e:49:2d: 07:b1:d9:a3:b2:18:cf:f0:ba:f1:ac:5f:1a:2c:d7:4e:a0:61: 31:07:40:d1:c1:cf:1a:f4:82:d8:1b:81:d9:0f:88:17:16:c4: 26:b3:6f:d2:59:40:63:cd:1a:08:df:b4:2e:71:79:eb:f6:46: 26:84:a4:a9:24:f7:bd:2b:db:fc:ce:3f:15:78:a8:02:53:a9: f0:4b:b1:89:3c:e1:7f:72:8a:56:43:48:ef:79:a3:fb:36:77: 43:83:7e:84 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUQsos+9bbrs5UJq8D/T8jfaDleHswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMzI0ZmZlMzlhOThhMDE0NmI1MDNkOGEwMTVjYTJjMmU3 NjdjZjNkMGI5ZmRlNjIzMWIwHhcNMjYwMzAxMjAzOTQxWhcNMjYwMzAyMjI0MzQx WjAzMTEwLwYDVQQDEyhCRDAzNzIyODA5RjQ4NUM5OEQ1RjExOTJCRDhFM0Y0OUFD MTMyQjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDY4AyI1P/lH 3t0L2P62XMktwmw5jZYWQKSCbuRtVyskhNLCJW/g+CIeBQYp9TkWTvZtQKI0kp0O AV6CYxsB7bYrN7PGgo1mET2d6egERS/tI8RtX4zmzUmAQLGYQ4oKZLz3+AFiZIZs uIj3+jJEI3grfmavDlA+oTnp74p5wnhxZh57FABlU34cf9HMfF9FcTDgYrJlDXUf xaZ16L6CfR/S6nHv1C+6Y3WWV5unWjocoDB4VFtRglFcsWCQdEff4zJRfkFbiNNg 5hN0zvxanvecqpzsCrG7K/ZYG2bXO1Z514CUPTnZClveN0AiyhQl2NliFCZhW4P9 L4T0BH3gBQIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFL0DcigJ9IXJjV8Rkr2OP0ms EyslMB8GA1UdIwQYMBaAFD/NOoOeoUF/2Yjz3f0EVBl/qvR6MA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5 LTBhYjcwZTQ4MTViYi8xLzNGQ0QzQTgzOUVBMTQxN0ZEOTg4RjNEREZEMDQ1NDE5 N0ZBQUY0N0EuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYt NDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81MWNkOTlmNy0yZjQyLTRkZWMtYjJjNi0w OWJhZmFhMzc4MGUvMzI0ZmZlMzlhOThhMDE0NmI1MDNkOGEwMTVjYTJjMmU3Njdj ZjNkMGI5ZmRlNjIzMWIuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv NzNiOGVjMDEtOGJhNS00NzlmLWEyMjktMGFiNzBlNDgxNWJiLzEvM0ZDRDNBODM5 RUExNDE3RkQ5ODhGM0RERkQwNDU0MTk3RkFBRjQ3QS5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEmRtngg TmNGtQtTjVjUOpUiJZKYEKpi1FGCYIp9eRoSy6iIFdPlW/+tPJxc1YNI7En+hvAF m1hUvc2+e+t6SKkF+iURaFj8+EGr7tgh0p221DwdyOO5Uur+9ICuqspPCf7Wwno2 axhVJC3KYDsuv4JPMaZbZc96jj4OEx29AelOpMxv4WhXwutJLRUrDD1hcP3eRuG6 9mm/ZoBdr3z9VT5JLQex2aOyGM/wuvGsXxos106gYTEHQNHBzxr0gtgbgdkPiBcW xCazb9JZQGPNGgjftC5xeev2RiaEpKkk970r2/zOPxV4qAJTqfBLsYk84X9yilZD SO95o/s2d0ODfoQ= -----END CERTIFICATE-----Generated at Mon Mar 2 02:12:43 2026 by rpki-client