
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft
File: 1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft (raw, json)
Hash identifier: mOyY0xKpf9/N6ljFJkBWyZ0NVMDRlfVc03PnaAN4FHI=
Subject key identifier: 44:86:25:79:8E:3C:AD:8C:8B:0C:ED:2D:D4:B1:04:44:03:7E:F5:53
Authority key identifier: 1F:7F:72:49:A6:81:F8:CD:41:27:0B:50:D8:D7:E7:81:58:81:DA:36
Certificate issuer: /CN=23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd
Certificate serial: 6601ED529F85E675C6B902DD0A4018111F95AD2A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft
Manifest number: 0204
Signing time: Sun 01 Mar 2026 04:30:33 +0000
Manifest this update: Sun 01 Mar 2026 04:25:33 +0000
Manifest next update: Mon 02 Mar 2026 04:50:33 +0000
Files and hashes: 1: 3135352e3130332e3235302e302f32342d3234203d3e20323132303334.roa (hash: vFsfLtXifEPclvz93gDK73bkEeIrvx8m8FwVJdoxlHk=)
2: AS396064.asa (hash: djFXHfa2rXK9kZIpu8Ef90RQVXdsC+vkaTA2daMwG3A=)
3: 1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl (hash: S6TgXOD5fgjoVoMoikjWnmi1Q784ILcoBZxMVqrhtYg=)
4: 32332e3133362e32302e302f32342d3234203d3e20333936303634.roa (hash: uT+NwPbVKc5sZXDTfAnZ7NBSduHWPZF9xzdlVQV9EOs=)
5: 323630323a663662613a3a2f34302d3430203d3e20323135323438.roa (hash: Kk9CSrNwPsOKUe+v4ZVIi4qEv+Arhq2bOgPkVNwdmaU=)
6: 323630323a663662613a3a2f34302d3430203d3e20333936303634.roa (hash: 5NqZHrqVruAMz6KYjbzv903TP3Du/TFRNl5Uu+JLsuw=)
7: 32332e3133362e32302e302f32342d3234203d3e20323135323438.roa (hash: UEvy/Fk/6V0NUZWmLYAvbYkSNSZ7wnUqypnNnCctoPE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl
rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/383bd50b-b192-44bd-9349-351225a13a33.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/383bd50b-b192-44bd-9349-351225a13a33.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 02 Mar 2026 04:50:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:01:ed:52:9f:85:e6:75:c6:b9:02:dd:0a:40:18:11:1f:95:ad:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd
Validity
Not Before: Mar 1 04:25:33 2026 GMT
Not After : Mar 2 04:50:33 2026 GMT
Subject: CN=448625798E3CAD8C8B0CED2DD4B10444037EF553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c6:8c:21:e0:c6:1b:85:15:d2:70:c7:be:3e:
a1:03:66:0c:ea:60:ee:52:94:1a:54:72:cc:f1:f4:
9b:b0:7b:f3:5e:56:59:01:07:86:21:16:4e:9d:df:
a7:ab:b0:63:fd:9c:ee:de:eb:6c:a5:79:10:a6:6a:
53:62:4f:38:eb:a9:5e:18:e7:b5:74:c1:02:4f:46:
53:f9:14:c2:c9:f3:af:a5:17:19:b4:f4:42:ea:e4:
cf:9a:1d:2a:b9:d3:cc:12:9c:05:bf:c7:aa:18:1b:
91:76:02:35:7c:15:7c:41:1d:fc:15:e3:88:1a:e3:
ec:3e:3f:67:5e:e7:9d:33:9b:e5:0f:86:e8:a0:a8:
71:90:a9:87:af:5b:ee:88:4f:47:ad:65:64:82:0f:
ff:4e:63:c1:5c:c1:6b:fd:36:2d:e0:3e:bd:f1:a4:
93:f8:d7:4a:43:77:c8:72:7b:51:f2:dc:e3:4c:69:
53:08:63:32:91:e5:49:6b:cf:90:33:6b:2f:50:87:
db:ad:3e:89:69:37:cd:db:f5:2f:3d:20:5e:5b:93:
a9:3c:87:44:e8:bc:91:23:62:9f:b6:ce:f6:b7:1c:
62:03:3e:3f:27:df:c9:b5:6d:42:1f:6a:ea:8e:8b:
55:b9:7b:f7:a8:9c:28:1e:5c:e6:d0:34:7e:49:96:
1a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:86:25:79:8E:3C:AD:8C:8B:0C:ED:2D:D4:B1:04:44:03:7E:F5:53
X509v3 Authority Key Identifier:
keyid:1F:7F:72:49:A6:81:F8:CD:41:27:0B:50:D8:D7:E7:81:58:81:DA:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:c7:d2:fa:82:e8:c4:8e:87:c7:76:88:45:81:d6:3d:d3:ec:
fd:b0:4f:1f:d7:40:89:32:5b:8a:ba:42:c4:68:de:55:7b:17:
8e:bf:a5:88:71:0a:59:e8:ab:18:ba:92:ea:3a:32:38:be:23:
db:2c:e1:1c:d6:ce:6a:bc:04:54:7f:37:2b:e1:cb:18:73:36:
a6:ff:03:be:cb:b1:dc:c9:87:67:e1:84:05:f1:85:05:92:66:
cf:67:ca:62:e4:b4:0d:dd:2f:fc:7f:d2:6b:48:9a:63:df:d0:
ba:70:51:de:7b:57:a6:0f:40:e2:9f:a7:90:95:14:2c:20:45:
ce:b6:3b:76:22:86:65:fd:17:32:0b:02:cc:31:a2:12:d7:aa:
cc:79:5a:dd:59:e2:22:ee:36:bd:6a:c9:dc:46:13:70:4d:60:
75:9c:1e:fc:d0:ac:9c:94:77:27:d2:1b:a0:70:9e:a6:7c:44:
73:7b:6b:c6:33:8d:83:0b:d8:6d:44:77:ff:05:23:bd:5d:32:
90:fc:47:52:37:d5:76:5c:6b:92:51:a9:10:73:b4:53:00:64:
5d:f2:d8:c1:1e:74:50:78:63:a9:1c:31:a9:af:5d:7a:f9:31:
b0:5b:00:06:db:70:d2:21:d2:65:cd:d6:2c:d5:5d:b1:5c:36:
ba:85:2a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:23:57 2026 by rpki-client