
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft
File: D74983C1FABA0CC1566F0601AFE11423E11B5171.mft (raw, json)
Hash identifier: jx6Lae9MLjNGCIiq8abUJ7sDrOIP8y+LDSTEVuLiDzo=
Subject key identifier: AE:56:42:B3:D6:46:FF:7C:44:3A:49:6C:E7:57:BF:85:B1:EF:11:25
Authority key identifier: D7:49:83:C1:FA:BA:0C:C1:56:6F:06:01:AF:E1:14:23:E1:1B:51:71
Certificate issuer: /CN=4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c
Certificate serial: 395555225275A2E2762FDBD4D483C3ECFF9A3C13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft
Manifest number: 049E
Signing time: Sun 01 Mar 2026 10:42:40 +0000
Manifest this update: Sun 01 Mar 2026 10:37:40 +0000
Manifest next update: Mon 02 Mar 2026 11:54:40 +0000
Files and hashes: 1: 3139322e37352e3139362e302f32332d3234203d3e203539393933.roa (hash: KNSz4GsVtYNwvMtBZ3CvI93UcAzzIm+CEBGOCv59Ibc=)
2: 32332e3135332e3233322e302f32342d3234203d3e203539393933.roa (hash: Xa94VPXxaKxQavq41HUhZQOU53EjRewYZdqWNPMbOkI=)
3: 323630323a666137613a3a2f34302d3438203d3e203539393933.roa (hash: Lb+C3YJn54LxtUf0GyCu85JPoRsStAp6WFsAuvX2G+E=)
4: 3139322e37352e3139362e302f32332d3234203d3e20323131363635.roa (hash: EY02IPhkI+bUEpVH6oIXpq9tMDByZp2XBlblwJ3ORuk=)
5: 3139322e37352e3139372e302f32342d3234203d3e203530323234.roa (hash: XWa1v4ip3kV+r3f119VGt2tZ+jfePtDqCwe/xpwhK0k=)
6: D74983C1FABA0CC1566F0601AFE11423E11B5171.crl (hash: VZIuZTSIaYnrwLsvXD/IkHmz4AuFVWrNigRvSYQQbFg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.crl
rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 02 Mar 2026 11:54:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:55:55:22:52:75:a2:e2:76:2f:db:d4:d4:83:c3:ec:ff:9a:3c:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c
Validity
Not Before: Mar 1 10:37:40 2026 GMT
Not After : Mar 2 11:54:40 2026 GMT
Subject: CN=AE5642B3D646FF7C443A496CE757BF85B1EF1125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e3:ea:a9:28:d3:5d:ef:89:5c:46:03:c1:66:
a8:1c:a0:0b:2c:be:cf:ea:11:e1:50:dd:5e:4c:83:
8c:74:49:c4:fb:f8:ba:d9:f8:00:19:cd:a2:13:06:
f8:f8:cb:cc:4f:86:ee:1c:5b:cb:36:b7:f9:4a:c2:
b2:66:77:89:20:55:8e:ad:d4:ff:04:11:1f:48:9c:
d9:90:1d:68:3e:75:af:5d:ea:41:e2:60:60:d1:62:
39:36:d6:50:08:1f:d7:92:c7:a3:fa:f4:55:52:85:
3b:e2:fa:87:b3:ec:76:a2:18:e5:e7:a1:d0:ed:94:
84:9d:13:23:52:b8:2d:ec:17:18:c3:3d:b1:57:ef:
10:d7:8d:c9:60:b3:5e:a9:fd:e7:c3:d8:20:85:c3:
f6:5c:14:e0:b0:5b:dc:6e:f9:ed:d5:3a:da:ed:5b:
69:1c:09:3e:fe:2d:e3:27:2a:89:8b:30:1b:b5:e6:
c9:7c:a1:57:47:11:50:a2:19:4d:ea:11:2e:97:07:
5a:f3:e1:d6:ac:a0:21:8b:25:f6:b8:22:5c:43:fa:
40:6d:8e:cd:ba:db:c3:0c:7e:7c:b8:ac:1d:1f:9f:
2d:41:ee:4b:a8:66:35:ae:8c:2d:b4:c6:c4:a4:c0:
3e:32:20:c2:1b:ce:a7:75:be:d4:96:9b:af:1d:68:
c6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:56:42:B3:D6:46:FF:7C:44:3A:49:6C:E7:57:BF:85:B1:EF:11:25
X509v3 Authority Key Identifier:
keyid:D7:49:83:C1:FA:BA:0C:C1:56:6F:06:01:AF:E1:14:23:E1:1B:51:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:e4:82:a5:4e:37:f0:bb:0d:f0:05:50:37:af:db:cc:c0:9b:
cd:b7:9d:cc:16:47:df:78:14:41:e1:1f:df:f3:f5:1b:bf:2f:
2c:e7:a5:91:0f:54:e0:fa:2e:40:72:d5:9d:96:c5:cf:95:fd:
07:68:bf:ac:5b:6d:05:d4:e7:4b:ab:a3:90:c8:c0:5c:00:73:
ff:f6:d1:cd:1d:99:c8:c1:b7:d2:8a:e9:87:a6:9f:87:57:8c:
57:52:e9:b4:b2:1f:16:a6:51:80:6a:64:c0:b1:cd:4e:4b:16:
68:5c:8b:a1:96:84:2d:9c:0d:24:23:dd:f4:39:00:4f:da:81:
08:b3:ef:c6:ba:d1:70:41:f4:6d:c6:52:13:11:75:48:b7:75:
bf:7b:88:d2:2a:30:d1:45:f7:09:f4:dc:0b:d6:b8:d3:2f:ef:
3e:4f:7f:b5:f4:f3:13:66:d1:67:66:9a:a6:bf:09:a3:67:46:
30:10:d3:25:de:08:e0:75:3d:92:c9:cb:2a:b0:87:09:6f:05:
42:14:6f:17:2f:fc:e1:1a:fe:bc:71:31:93:f7:ea:ec:c7:cc:
c3:41:9c:90:0c:91:1a:19:e8:8d:1f:29:c8:0d:12:cb:c0:4f:
5f:bd:ec:14:b2:d9:1b:4e:b0:d8:b9:c8:24:d8:d8:9c:40:f8:
89:97:d0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:26:16 2026 by rpki-client