$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/2/78739F607E14E11BD03439F7A388E78EDD031A1B.mft File: 78739F607E14E11BD03439F7A388E78EDD031A1B.mft (raw, json) Hash identifier: evjJCbUOLoxvlICY/l82v1SRrAxgpoRWcb3N14Hhl58= Subject key identifier: 85:23:02:C5:D4:A4:FF:B6:00:6E:04:BD:22:5A:F0:C8:D8:E2:2A:AC Authority key identifier: 78:73:9F:60:7E:14:E1:1B:D0:34:39:F7:A3:88:E7:8E:DD:03:1A:1B Certificate issuer: /CN=78739F607E14E11BD03439F7A388E78EDD031A1B Certificate serial: 4134EBBDED70FE73FABE035771E9C21B7DEBA632 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/78739F607E14E11BD03439F7A388E78EDD031A1B.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/2/78739F607E14E11BD03439F7A388E78EDD031A1B.mft Manifest number: 98 Signing time: Wed 18 Jun 2025 08:03:02 +0000 Manifest this update: Wed 18 Jun 2025 07:58:02 +0000 Manifest next update: Thu 19 Jun 2025 11:36:02 +0000 Files and hashes: 1: 326130363a313238313a393030303a3a2f33362d3336203d3e20313938303136.roa (hash: oLu7z117NCVwlvkWyPC9/0giT83Pr1XJzvMLvQVrMy0=) 2: 78739F607E14E11BD03439F7A388E78EDD031A1B.crl (hash: vdzEN+jbJlQBO3MOV+uYrmRhQq76MDF3dcxFkzI5jis=) Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/2/78739F607E14E11BD03439F7A388E78EDD031A1B.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/2/78739F607E14E11BD03439F7A388E78EDD031A1B.mft rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/78739F607E14E11BD03439F7A388E78EDD031A1B.cer rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 18 Jun 2025 21:18:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:34:eb:bd:ed:70:fe:73:fa:be:03:57:71:e9:c2:1b:7d:eb:a6:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78739F607E14E11BD03439F7A388E78EDD031A1B Validity Not Before: Jun 18 07:58:02 2025 GMT Not After : Jun 19 11:36:02 2025 GMT Subject: CN=852302C5D4A4FFB6006E04BD225AF0C8D8E22AAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d2:e4:6b:67:9c:cb:21:5c:25:c7:a4:17:f3: 28:52:31:dc:75:63:d0:36:5b:a2:54:06:3b:f0:19: 0a:8b:93:cb:db:0b:ca:08:28:76:fc:f1:8b:0d:bb: 24:fa:09:38:bb:ff:f3:90:14:b4:65:03:d9:89:c2: 26:e5:92:94:1b:eb:32:5b:25:93:e5:a7:13:20:db: ad:9a:5b:01:97:62:d1:91:0b:6a:e7:61:cc:d3:dd: a4:9e:85:5f:37:bc:8c:81:a6:67:22:5b:82:ff:5c: e9:75:6d:2a:b6:0a:15:73:38:c1:47:56:8d:39:04: 1e:06:21:dc:f7:12:1c:9e:77:73:34:04:6c:95:b5: 7b:a8:88:8a:45:3a:ed:ac:bc:59:4f:36:25:28:67: 42:c0:03:c0:3d:26:f3:8b:92:40:66:78:34:e5:0f: 59:4b:7f:2f:c3:83:8d:1d:3f:80:ae:b6:3e:36:ef: 0d:f4:12:68:50:1a:14:7d:d8:9f:5d:6c:06:95:21: b7:22:29:81:84:fc:26:1b:b0:71:94:ad:50:16:41: c4:61:51:cc:45:a9:36:24:72:ec:25:09:8b:b1:9b: 3a:ad:f9:db:91:e6:b3:1c:20:32:02:e8:a9:c9:5f: c9:3a:4c:29:d7:6b:0a:5f:15:b8:dd:af:1c:ba:6e: 2a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:23:02:C5:D4:A4:FF:B6:00:6E:04:BD:22:5A:F0:C8:D8:E2:2A:AC X509v3 Authority Key Identifier: keyid:78:73:9F:60:7E:14:E1:1B:D0:34:39:F7:A3:88:E7:8E:DD:03:1A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/2/78739F607E14E11BD03439F7A388E78EDD031A1B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/78739F607E14E11BD03439F7A388E78EDD031A1B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/2/78739F607E14E11BD03439F7A388E78EDD031A1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:9a:0a:0c:4b:34:0a:39:19:53:54:9c:79:33:10:77:24:42: 2a:9f:9b:02:a0:7a:08:a5:f3:0b:04:de:e3:7e:3c:4c:d5:0e: 3b:11:f7:a2:f7:fe:25:0f:43:18:d7:0e:47:5d:28:42:ed:e9: b5:5b:ca:f0:62:9f:3b:b2:b0:d4:0b:21:26:63:5b:58:35:55: 0e:d2:8c:6e:f7:5f:c3:cd:cb:dc:6b:1d:4e:43:b9:88:6f:c5: 66:cb:f0:f5:ec:6d:aa:29:b3:76:79:5f:13:09:68:87:47:66: 66:8b:94:95:16:2b:ae:e6:cc:49:20:b4:a9:24:56:46:3b:1a: 2b:95:93:7a:2e:8f:8f:a5:be:10:52:d2:09:4b:90:0c:87:85: af:dc:17:a6:9a:5c:a8:85:36:9d:65:19:1f:28:86:9b:f1:f9: 33:68:37:ee:44:b6:c4:7d:d6:c5:9a:82:4f:e1:1d:0c:0d:1e: 1f:bd:84:c2:12:77:2f:c7:ae:01:ec:d7:41:d4:3d:6e:d5:27: 18:ba:d6:58:f0:2b:d5:9b:87:98:cf:c4:a7:f6:fa:7a:79:b4: 73:be:f2:56:03:9c:52:fb:32:f7:1b:f2:d9:fb:f1:32:eb:13: bf:e6:85:cd:e6:bd:25:03:7b:7b:0c:24:1c:f0:70:62:db:c0: 84:4a:86:f4 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIUQTTrve1w/nP6vgNXcenCG33rpjIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg3MzlGNjA3RTE0RTExQkQwMzQzOUY3QTM4OEU3OEVE RDAzMUExQjAeFw0yNTA2MTgwNzU4MDJaFw0yNTA2MTkxMTM2MDJaMDMxMTAvBgNV BAMTKDg1MjMwMkM1RDRBNEZGQjYwMDZFMDRCRDIyNUFGMEM4RDhFMjJBQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCP0uRrZ5zLIVwlx6QX8yhSMdx1 Y9A2W6JUBjvwGQqLk8vbC8oIKHb88YsNuyT6CTi7//OQFLRlA9mJwiblkpQb6zJb JZPlpxMg262aWwGXYtGRC2rnYczT3aSehV83vIyBpmciW4L/XOl1bSq2ChVzOMFH Vo05BB4GIdz3Ehyed3M0BGyVtXuoiIpFOu2svFlPNiUoZ0LAA8A9JvOLkkBmeDTl D1lLfy/Dg40dP4Cutj427w30EmhQGhR92J9dbAaVIbciKYGE/CYbsHGUrVAWQcRh UcxFqTYkcuwlCYuxmzqt+duR5rMcIDIC6KnJX8k6TCnXawpfFbjdrxy6bir5AgMB AAGjggJnMIICYzAdBgNVHQ4EFgQUhSMCxdSk/7YAbgS9IlrwyNjiKqwwHwYDVR0j BBgwFoAUeHOfYH4U4RvQNDn3o4jnjt0DGhswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMi83ODczOUY2MDdF MTRFMTFCRDAzNDM5RjdBMzg4RTc4RUREMDMxQTFCLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUtNDlmOS05YjZjLTljOWYzODk4 OTk1ZC8zLzc4NzM5RjYwN0UxNEUxMUJEMDM0MzlGN0EzODhFNzhFREQwMzFBMUIu Y2VyMIGTBggrBgEFBQcBCwSBhjCBgzCBgAYIKwYBBQUHMAuGdHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84MWE0NDU2NjQ1OGU0NTc4YjY3ZWVk MzA1M2Y4MjBmNS8yLzc4NzM5RjYwN0UxNEUxMUJEMDM0MzlGN0EzODhFNzhFREQw MzFBMUIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcB Af8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0G CSqGSIb3DQEBCwUAA4IBAQCKmgoMSzQKORlTVJx5MxB3JEIqn5sCoHoIpfMLBN7j fjxM1Q47Efei9/4lD0MY1w5HXShC7em1W8rwYp87srDUCyEmY1tYNVUO0oxu91/D zcvcax1OQ7mIb8Vmy/D17G2qKbN2eV8TCWiHR2Zmi5SVFiuu5sxJILSpJFZGOxor lZN6Lo+Ppb4QUtIJS5AMh4Wv3BemmlyohTadZRkfKIab8fkzaDfuRLbEfdbFmoJP 4R0MDR4fvYTCEncvx64B7NdB1D1u1ScYutZY8CvVm4eYz8Sn9vp6ebRzvvJWA5xS +zL3G/LZ+/Ey6xO/5oXN5r0lA3t7DCQc8HBi28CESob0 -----END CERTIFICATE-----Generated at Wed Jun 18 14:44:59 2025 by rpki-client