$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.mft File: FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.mft (raw, json) Hash identifier: ZxObj/KYT8Sv1pJub+t2I0/SdQ6KkdUS0VqN+XsLGQU= Subject key identifier: 78:9C:05:0C:A3:42:D6:6E:E6:20:7F:FC:CF:35:CE:6E:58:3C:49:DB Authority key identifier: FA:A6:C4:25:29:3C:8A:7F:9C:2F:C9:84:EF:0E:26:A2:76:3D:97:7D Certificate issuer: /CN=03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80 Certificate serial: 4576BEEFFFD01BC9E13E6E3E9F1F4E0A490BE80F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.mft Manifest number: ED Signing time: Mon 16 Jun 2025 01:04:10 +0000 Manifest this update: Mon 16 Jun 2025 00:59:10 +0000 Manifest next update: Tue 17 Jun 2025 02:42:10 +0000 Files and hashes: 1: 323630323a663736313a3a2f34302d3438203d3e20333937373330.roa (hash: UabIBDSP/jRxPjVYe42Rz6FfziQlrmtKMNVTrVjL1tk=) 2: FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.crl (hash: jfL4v+bozI2kejhIL1ij1GUMNoa2KAIkkxp2rNjZTJ4=) 3: 32332e3133322e39322e302f32342d3234203d3e20333937373330.roa (hash: BrbquvaT7gSaBvF2dUV9AqKeXE06mRUUDpvsSUbe408=) 4: 32332e3133322e39322e302f32342d3234203d3e20323134373638.roa (hash: NdlK1zYqdrKSuU5F6Cse146TEQ/3Wx9fQDxzRBJIZZw=) 5: 323630323a663736313a32303a3a2f34342d3434203d3e20323134373638.roa (hash: L5IT8JeK38uNLCiVqoJ/A1O+xsuyrDeUorstCcbnlko=) 6: 323630323a663736313a33303a3a2f34342d3434203d3e20323134373638.roa (hash: 0zlxQTxh7vvfaeWuK2Hw3nih0UKatPrmAKiXcV1p/ig=) 7: 323630323a663736313a3a2f34302d3430203d3e20333937373330.roa (hash: nA09F4i7ezyxrO7OoVlToYHyYyAdhivh99ADt+i0fxw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.crl rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/da272869-5127-4af6-8053-b8617ccb9de3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/da272869-5127-4af6-8053-b8617ccb9de3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 02:42:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:76:be:ef:ff:d0:1b:c9:e1:3e:6e:3e:9f:1f:4e:0a:49:0b:e8:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80 Validity Not Before: Jun 16 00:59:10 2025 GMT Not After : Jun 17 02:42:10 2025 GMT Subject: CN=789C050CA342D66EE6207FFCCF35CE6E583C49DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0d:e9:43:bc:a5:1f:db:ec:43:f0:26:a8:d1: 25:f9:d7:eb:fe:21:57:e0:8f:16:02:a6:a0:e6:63: 63:26:b1:ab:e1:4b:b0:d3:17:12:05:7e:f2:67:07: 3a:31:0a:6c:c7:9e:c6:c9:ae:d7:cd:4e:b8:55:bc: c0:e1:4f:c2:a4:57:a6:71:a5:91:f5:cc:1b:57:5c: a5:16:d6:79:33:f1:1a:6b:05:a7:10:ba:33:a6:1e: ea:02:0b:46:72:82:fc:bf:52:38:86:d3:4e:43:87: 72:c8:f0:8d:a1:5b:58:6d:3a:8a:3a:47:06:6b:1e: dc:ae:88:34:70:90:0a:5b:58:08:31:3a:ec:cb:d1: b9:d9:f6:20:38:0a:58:a1:d6:29:33:18:53:6a:e1: ea:97:c5:58:57:16:fe:1e:42:b2:4a:68:06:f5:db: d4:aa:eb:dd:55:69:a0:ce:3a:5a:b1:08:5f:82:03: c8:cd:37:93:51:19:11:22:f9:9a:73:24:4e:17:7c: c1:23:ec:45:8f:b0:d6:28:f3:ac:86:f9:77:24:12: 87:88:98:62:fc:e1:f0:67:84:d8:28:99:ad:db:90: cc:22:3c:57:39:9f:70:33:d8:95:33:3f:0a:f2:50: a8:5e:2e:07:de:ad:31:fd:67:7f:af:42:98:4a:cd: 02:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:9C:05:0C:A3:42:D6:6E:E6:20:7F:FC:CF:35:CE:6E:58:3C:49:DB X509v3 Authority Key Identifier: keyid:FA:A6:C4:25:29:3C:8A:7F:9C:2F:C9:84:EF:0E:26:A2:76:3D:97:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:40:34:0f:bd:63:90:23:a9:45:7f:cd:ce:fe:a6:de:74:bf: 04:d5:96:41:17:2a:f8:6d:7d:3e:99:dc:6c:de:51:78:ea:f0: 7a:f6:14:e7:ea:1c:a2:4b:5e:40:7c:5a:4e:63:e3:2a:e7:6f: bf:84:0a:4c:ec:4a:9e:a9:c8:db:89:23:2e:a0:21:70:d9:51: e2:aa:d8:66:e7:9e:f8:a6:a3:c9:b3:8b:f3:0d:a8:f2:88:22: 21:30:19:17:68:4b:46:8f:7e:fa:0d:0b:f5:86:b4:6b:7b:35: 3f:8f:24:7a:48:bc:eb:19:17:d3:4f:1b:4d:9e:23:74:24:f4: d5:ad:e4:51:7a:46:54:b4:79:2c:80:4c:e1:ec:62:09:31:52: d3:3c:f0:b3:a8:91:c7:4e:76:17:9c:6c:a4:c8:e2:bd:76:90: 62:3b:16:cf:ff:67:27:de:b9:50:8f:0e:2e:bf:8f:ef:6c:f2: e0:b4:63:e4:c0:ae:8a:cd:f3:da:76:78:05:50:54:f9:f2:57: 3e:5e:d5:9e:f0:f9:5a:97:41:f9:22:28:59:01:41:fc:0e:fd: 37:aa:c2:d5:06:19:87:a3:68:21:10:22:57:db:f0:ba:c0:2c: d7:72:b2:77:02:c6:ae:5b:65:1e:70:04:75:69:30:c3:dd:3c: c8:3c:f6:af -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIURXa+7//QG8nhPm4+nx9OCkkL6A8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMDMwNjhjYmU4ODk0ZDVkNzM1ZjkxZWRiOWU0MzM3NWNj NTdjMzZkMTMyNDI4NWFhODAwHhcNMjUwNjE2MDA1OTEwWhcNMjUwNjE3MDI0MjEw WjAzMTEwLwYDVQQDEyg3ODlDMDUwQ0EzNDJENjZFRTYyMDdGRkNDRjM1Q0U2RTU4 M0M0OURCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQ3pQ7ylH9vs Q/AmqNEl+dfr/iFX4I8WAqag5mNjJrGr4Uuw0xcSBX7yZwc6MQpsx57Gya7XzU64 VbzA4U/CpFemcaWR9cwbV1ylFtZ5M/EaawWnELozph7qAgtGcoL8v1I4htNOQ4dy yPCNoVtYbTqKOkcGax7crog0cJAKW1gIMTrsy9G52fYgOApYodYpMxhTauHql8VY Vxb+HkKySmgG9dvUquvdVWmgzjpasQhfggPIzTeTURkRIvmacyROF3zBI+xFj7DW KPOshvl3JBKHiJhi/OHwZ4TYKJmt25DMIjxXOZ9wM9iVMz8K8lCoXi4H3q0x/Wd/ r0KYSs0CywIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFHicBQyjQtZu5iB//M81zm5Y PEnbMB8GA1UdIwQYMBaAFPqmxCUpPIp/nC/JhO8OJqJ2PZd9MA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIzY2RmOWNhLWRkNjQtNGYzMS1hYmYz LTBmMzJiOGU3ZmU3OS8zL0ZBQTZDNDI1MjkzQzhBN0Y5QzJGQzk4NEVGMEUyNkEy NzYzRDk3N0QuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmIt NGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kYTI3Mjg2OS01MTI3LTRhZjYtODA1My1i ODYxN2NjYjlkZTMvMDMwNjhjYmU4ODk0ZDVkNzM1ZjkxZWRiOWU0MzM3NWNjNTdj MzZkMTMyNDI4NWFhODAuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv MjNjZGY5Y2EtZGQ2NC00ZjMxLWFiZjMtMGYzMmI4ZTdmZTc5LzMvRkFBNkM0MjUy OTNDOEE3RjlDMkZDOTg0RUYwRTI2QTI3NjNEOTc3RC5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAI5ANA+9 Y5AjqUV/zc7+pt50vwTVlkEXKvhtfT6Z3GzeUXjq8Hr2FOfqHKJLXkB8Wk5j4yrn b7+ECkzsSp6pyNuJIy6gIXDZUeKq2Gbnnvimo8mzi/MNqPKIIiEwGRdoS0aPfvoN C/WGtGt7NT+PJHpIvOsZF9NPG02eI3Qk9NWt5FF6RlS0eSyATOHsYgkxUtM88LOo kcdOdhecbKTI4r12kGI7Fs//ZyfeuVCPDi6/j+9s8uC0Y+TArorN89p2eAVQVPny Vz5e1Z7w+VqXQfkiKFkBQfwO/TeqwtUGGYejaCEQIlfb8LrALNdysncCxq5bZR5w BHVpMMPdPMg89q8= -----END CERTIFICATE-----Generated at Mon Jun 16 04:29:09 2025 by rpki-client