$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft File: 1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft (raw, json) Hash identifier: c/5lbnGfU8oPLcq3v6jiCZIwjUs7KxpHxX6vhCFgdrE= Subject key identifier: 86:BF:1F:63:31:D1:AB:DB:29:C0:1C:3C:61:7A:BB:DF:7D:80:E1:75 Authority key identifier: 1F:7F:72:49:A6:81:F8:CD:41:27:0B:50:D8:D7:E7:81:58:81:DA:36 Certificate issuer: /CN=23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd Certificate serial: 5E5DF9C31FFC34E945FBA7E6297E6DA05C30EB4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft Manifest number: 024D Signing time: Fri 17 Apr 2026 12:04:20 +0000 Manifest this update: Fri 17 Apr 2026 11:59:20 +0000 Manifest next update: Sat 18 Apr 2026 14:19:20 +0000 Files and hashes: 1: 1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl (hash: UW8dCCbuS92kX+jM8YCIZHU75qQ1DJuqEjKlja5k7Z4=) 2: 32332e3133362e32302e302f32342d3234203d3e20333936303634.roa (hash: uT+NwPbVKc5sZXDTfAnZ7NBSduHWPZF9xzdlVQV9EOs=) 3: 323630323a663662613a3a2f34302d3430203d3e20333936303634.roa (hash: 5NqZHrqVruAMz6KYjbzv903TP3Du/TFRNl5Uu+JLsuw=) 4: 323630323a663662613a3a2f34302d3430203d3e20323135323438.roa (hash: Kk9CSrNwPsOKUe+v4ZVIi4qEv+Arhq2bOgPkVNwdmaU=) 5: 3135352e3130332e3235302e302f32342d3234203d3e20323132303334.roa (hash: vFsfLtXifEPclvz93gDK73bkEeIrvx8m8FwVJdoxlHk=) 6: AS396064.asa (hash: mQsN9770JUq0f98VJKRKaULimT8PKtTj9Ipreo9GTqU=) 7: 32332e3133362e32302e302f32342d3234203d3e20323135323438.roa (hash: UEvy/Fk/6V0NUZWmLYAvbYkSNSZ7wnUqypnNnCctoPE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/383bd50b-b192-44bd-9349-351225a13a33.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/383bd50b-b192-44bd-9349-351225a13a33.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 14:19:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:5d:f9:c3:1f:fc:34:e9:45:fb:a7:e6:29:7e:6d:a0:5c:30:eb:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd Validity Not Before: Apr 17 11:59:20 2026 GMT Not After : Apr 18 14:19:20 2026 GMT Subject: CN=86BF1F6331D1ABDB29C01C3C617ABBDF7D80E175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f2:c6:32:44:80:d5:d7:85:ed:ce:af:c1:4d: f3:5d:c0:cf:a0:ab:3a:d3:08:12:c8:fc:8d:41:20: 6a:d6:4c:07:81:1c:ad:de:fc:cb:5f:55:e8:fa:23: 11:65:a5:00:96:43:8f:11:49:c2:29:6d:1a:b1:9d: 89:2b:40:32:08:62:61:18:72:11:53:4e:39:ee:ce: 12:7a:aa:d6:71:01:86:06:00:ba:6f:f9:75:db:cc: d2:c2:0e:19:09:68:a3:26:97:98:a4:19:c6:41:57: 49:90:84:00:5a:86:2b:cf:40:6e:c9:76:6d:8f:f5: f8:23:74:71:71:76:fe:b7:db:11:d8:16:4b:b4:23: 02:a7:15:4a:c8:9e:60:a4:0b:8c:2e:21:70:d2:bd: 4c:06:9c:12:11:ee:97:24:a0:37:1e:0f:24:56:9f: 0a:ca:65:4f:d0:aa:7b:cd:03:4d:f2:00:c7:e1:8a: ec:c4:97:df:b2:22:bc:1e:59:5c:d7:e0:95:b0:37: 76:6b:a1:f9:6d:26:58:9e:a8:00:bd:cc:7d:eb:6f: 95:05:41:4a:54:8e:29:d3:40:42:09:fa:ed:c2:fa: 9d:c7:68:b7:25:a8:b1:ca:13:6c:33:88:29:4d:7c: 9f:6e:4b:7d:8f:40:9c:fa:05:b1:58:c4:1e:ae:17: 8d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:BF:1F:63:31:D1:AB:DB:29:C0:1C:3C:61:7A:BB:DF:7D:80:E1:75 X509v3 Authority Key Identifier: keyid:1F:7F:72:49:A6:81:F8:CD:41:27:0B:50:D8:D7:E7:81:58:81:DA:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:74:0d:44:16:09:74:38:d1:00:a5:18:0b:16:5e:b7:08:4f: d9:46:47:dd:40:04:cf:a0:d5:14:ac:b2:b7:39:2a:2e:37:b2: 90:a4:10:7a:c0:66:68:64:b1:64:ee:4b:34:8c:28:3b:71:be: 51:e1:ad:1d:f2:88:10:f5:06:cf:41:b6:17:43:25:8d:85:f7: 7d:30:05:49:fe:3e:14:a3:6c:c3:21:5b:ff:24:b6:1e:74:a5: 30:e8:7e:e5:cf:63:87:dc:68:05:ee:4c:c5:fd:d3:76:bb:ec: d0:dc:a9:2f:61:a8:5b:42:d8:bb:74:41:bc:17:cf:4c:92:67: 13:c0:03:cb:dd:04:81:55:ef:e2:78:e4:2b:31:07:8b:53:3e: 7e:2f:4e:08:ec:7b:8f:67:d3:bb:30:3c:ca:c2:47:19:b6:73: 8e:dc:22:c2:66:dc:a8:28:70:d8:f9:14:89:78:09:af:08:1b: 86:9a:15:a9:75:6f:e5:84:2b:a0:f1:77:81:bf:8d:9b:c6:aa: 94:42:ba:52:f8:70:61:e4:37:42:0d:30:cb:3c:41:22:b9:54: 32:c7:42:49:05:47:b1:23:e7:2e:40:0d:22:9d:8e:ce:64:56: 01:ca:bc:a7:f7:fa:20:22:39:6e:82:c0:28:23:13:19:29:8c: dc:35:9a:37 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUXl35wx/8NOlF+6fmKX5toFww60wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMjNmYjNkMjllN2Y2N2M2MzRkZjNiN2Y0YTk2MDA4MmU0 NDI5ZjE2NmI2NTMwMWE5ZGQwHhcNMjYwNDE3MTE1OTIwWhcNMjYwNDE4MTQxOTIw WjAzMTEwLwYDVQQDEyg4NkJGMUY2MzMxRDFBQkRCMjlDMDFDM0M2MTdBQkJERjdE ODBFMTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/LGMkSA1deF 7c6vwU3zXcDPoKs60wgSyPyNQSBq1kwHgRyt3vzLX1Xo+iMRZaUAlkOPEUnCKW0a sZ2JK0AyCGJhGHIRU0457s4SeqrWcQGGBgC6b/l128zSwg4ZCWijJpeYpBnGQVdJ kIQAWoYrz0BuyXZtj/X4I3RxcXb+t9sR2BZLtCMCpxVKyJ5gpAuMLiFw0r1MBpwS Ee6XJKA3Hg8kVp8KymVP0Kp7zQNN8gDH4YrsxJffsiK8Hllc1+CVsDd2a6H5bSZY nqgAvcx962+VBUFKVI4p00BCCfrtwvqdx2i3JaixyhNsM4gpTXyfbkt9j0Cc+gWx WMQerheNewIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFIa/H2Mx0avbKcAcPGF6u999 gOF1MB8GA1UdIwQYMBaAFB9/ckmmgfjNQScLUNjX54FYgdo2MA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2NkMTlkYjIwLTQ2NTMtNDhkNC04ZmM0 LTU4MGQxMzY5YjdjNC8xLzFGN0Y3MjQ5QTY4MUY4Q0Q0MTI3MEI1MEQ4RDdFNzgx NTg4MURBMzYuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMt NDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zODNiZDUwYi1iMTkyLTQ0YmQtOTM0OS0z NTEyMjVhMTNhMzMvMjNmYjNkMjllN2Y2N2M2MzRkZjNiN2Y0YTk2MDA4MmU0NDI5 ZjE2NmI2NTMwMWE5ZGQuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv Y2QxOWRiMjAtNDY1My00OGQ0LThmYzQtNTgwZDEzNjliN2M0LzEvMUY3RjcyNDlB NjgxRjhDRDQxMjcwQjUwRDhEN0U3ODE1ODgxREEzNi5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHB0DUQW CXQ40QClGAsWXrcIT9lGR91ABM+g1RSssrc5Ki43spCkEHrAZmhksWTuSzSMKDtx vlHhrR3yiBD1Bs9BthdDJY2F930wBUn+PhSjbMMhW/8kth50pTDofuXPY4fcaAXu TMX903a77NDcqS9hqFtC2Lt0QbwXz0ySZxPAA8vdBIFV7+J45CsxB4tTPn4vTgjs e49n07swPMrCRxm2c47cIsJm3KgocNj5FIl4Ca8IG4aaFal1b+WEK6Dxd4G/jZvG qpRCulL4cGHkN0INMMs8QSK5VDLHQkkFR7Ej5y5ADSKdjs5kVgHKvKf3+iAiOW6C wCgjExkpjNw1mjc= -----END CERTIFICATE-----Generated at Sat Apr 18 02:31:16 2026 by rpki-client