$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/B73B05971A1A76BDF1BC61A5178B00B4FF71BABB.mft File: B73B05971A1A76BDF1BC61A5178B00B4FF71BABB.mft (raw, json) Hash identifier: 5MxDwFEAXrnTz/mPui8g2nbTORSdq6IK33Q+2a9JkVw= Subject key identifier: E4:1C:73:D8:7F:45:4B:E6:97:A7:4F:F8:74:C0:40:32:44:1D:82:FE Authority key identifier: B7:3B:05:97:1A:1A:76:BD:F1:BC:61:A5:17:8B:00:B4:FF:71:BA:BB Certificate issuer: /CN=d90d8aba2a52e658722522ec42c626f029750e015dbdba418f Certificate serial: 440E279D203FDF0BA66E9AFF08E52BFA4BE7F778 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a52e658722522ec42c626f029750e015dbdba418f.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/B73B05971A1A76BDF1BC61A5178B00B4FF71BABB.mft Manifest number: 38 Signing time: Sat 26 Apr 2025 08:22:00 +0000 Manifest this update: Sat 26 Apr 2025 08:17:00 +0000 Manifest next update: Sun 27 Apr 2025 11:05:00 +0000 Files and hashes: 1: B73B05971A1A76BDF1BC61A5178B00B4FF71BABB.crl (hash: AIxlU4p5sI3YDq/yLsJPUhEHpULQYD6L9JtDfvDZsqw=) 2: 32332e3136342e3135322e302f32342d3234203d3e203236353631.roa (hash: Ufvh495kVHTsvuscjFimK/5B3fifdcUwR5A1Uohco9k=) 3: 323630323a663966613a3a2f33362d3438203d3e203630383538.roa (hash: 5c3OaxW1qKZrY2FscDnJyFNXHvDxQCbXNLWzxHU/wc8=) 4: 323630323a663966613a3a2f33362d3438203d3e203132383339.roa (hash: KB5IW4CbSuoOkgtd2rJCaS7SQDgxB1P+CSq45yfOs7s=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/B73B05971A1A76BDF1BC61A5178B00B4FF71BABB.crl rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/B73B05971A1A76BDF1BC61A5178B00B4FF71BABB.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a52e658722522ec42c626f029750e015dbdba418f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 11:05:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:0e:27:9d:20:3f:df:0b:a6:6e:9a:ff:08:e5:2b:fa:4b:e7:f7:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d90d8aba2a52e658722522ec42c626f029750e015dbdba418f Validity Not Before: Apr 26 08:17:00 2025 GMT Not After : Apr 27 11:05:00 2025 GMT Subject: CN=E41C73D87F454BE697A74FF874C04032441D82FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:74:23:17:8a:1c:18:da:67:7c:70:f3:e6:66: 44:74:53:ef:2d:30:85:cd:c1:2c:e0:9a:96:f5:3d: ed:f4:91:76:37:26:ad:99:41:fd:1d:97:87:59:a4: 14:5c:97:32:a8:bb:1a:8e:dc:6f:93:95:68:27:77: 24:76:02:91:61:76:b4:ce:40:64:29:08:b3:dc:8c: 0d:12:96:e7:e1:7a:71:53:0c:04:89:2a:43:9d:59: b1:29:9f:ad:3d:dd:63:b8:e3:8d:10:d9:57:fd:b4: 9d:69:5f:d1:d6:79:03:20:85:3d:69:4e:c6:62:99: 60:b3:eb:8e:a6:d8:50:06:6c:45:67:b8:83:e7:16: 1e:ef:5f:27:74:30:02:12:df:6d:d7:8c:dd:0a:12: bb:42:be:c6:46:8f:a4:b9:a0:34:2e:12:c8:46:e4: 34:2b:74:cc:2d:cb:ab:01:b3:7d:71:53:8a:29:45: 69:0c:26:a0:bb:46:e6:fe:f0:67:1f:f9:bf:57:25: ec:c0:5b:ac:40:c5:28:9c:59:ae:e1:41:81:d9:82: 2e:4f:b5:80:0f:2d:91:56:3b:dc:e2:5a:da:e9:d5: e1:e5:5e:4f:22:5a:b6:a5:10:eb:5f:64:8c:5a:b6: 6e:0d:e8:e2:75:3c:8f:0f:c9:9f:43:55:97:b0:25: a9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:1C:73:D8:7F:45:4B:E6:97:A7:4F:F8:74:C0:40:32:44:1D:82:FE X509v3 Authority Key Identifier: keyid:B7:3B:05:97:1A:1A:76:BD:F1:BC:61:A5:17:8B:00:B4:FF:71:BA:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/B73B05971A1A76BDF1BC61A5178B00B4FF71BABB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a52e658722522ec42c626f029750e015dbdba418f.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/B73B05971A1A76BDF1BC61A5178B00B4FF71BABB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:89:e3:9c:c9:f3:65:e2:b5:eb:57:1c:ec:7f:05:79:93:22: a2:fd:ec:04:8d:b6:a0:bf:59:ec:f5:5c:0c:ef:13:ef:1f:39: 0b:4e:e9:c6:00:fa:5d:d5:b0:34:20:9b:ae:0b:b9:dd:0b:f5: 4c:53:4c:7b:30:d6:d9:bb:df:26:ed:82:90:2c:31:5f:50:31: 1c:f7:f0:c3:08:b5:c2:57:7d:2e:86:21:59:e4:0b:7f:f5:ee: 7a:82:f3:c1:49:32:83:56:d8:ab:1b:b3:52:6e:a1:7c:ee:57: 10:70:65:f4:bd:80:9f:c6:ee:49:b4:2b:b9:47:40:b8:7e:1d: 98:8b:0c:91:13:64:64:8d:95:ea:de:bd:0c:75:84:3a:7f:eb: e5:3d:79:78:07:c6:30:fc:cb:45:f0:67:55:7e:f0:8f:3f:69: 52:82:59:4f:81:f4:9f:5c:43:49:94:87:8b:f6:75:1d:c2:e1: 8c:e5:48:a0:e4:c5:81:83:ec:90:fc:f2:33:95:8c:ca:8a:61: b4:5a:8a:01:f3:cf:16:d7:0c:80:6f:1d:d3:27:6c:9f:1a:a8: 4c:df:2c:82:b1:48:29:54:43:39:cb:11:b7:b4:09:0d:2a:e3: 13:3c:f0:a7:61:4f:42:4e:14:dd:bd:33:e5:6a:ae:9f:84:f0: 31:b3:d8:42 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIURA4nnSA/3wumbpr/COUr+kvn93gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDkwZDhhYmEyYTUyZTY1ODcyMjUyMmVjNDJjNjI2ZjAy OTc1MGUwMTVkYmRiYTQxOGYwHhcNMjUwNDI2MDgxNzAwWhcNMjUwNDI3MTEwNTAw WjAzMTEwLwYDVQQDEyhFNDFDNzNEODdGNDU0QkU2OTdBNzRGRjg3NEMwNDAzMjQ0 MUQ4MkZFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3QjF4ocGNpn fHDz5mZEdFPvLTCFzcEs4JqW9T3t9JF2NyatmUH9HZeHWaQUXJcyqLsajtxvk5Vo J3ckdgKRYXa0zkBkKQiz3IwNEpbn4XpxUwwEiSpDnVmxKZ+tPd1juOONENlX/bSd aV/R1nkDIIU9aU7GYplgs+uOpthQBmxFZ7iD5xYe718ndDACEt9t14zdChK7Qr7G Ro+kuaA0LhLIRuQ0K3TMLcurAbN9cVOKKUVpDCagu0bm/vBnH/m/VyXswFusQMUo nFmu4UGB2YIuT7WADy2RVjvc4lra6dXh5V5PIlq2pRDrX2SMWrZuDejidTyPD8mf Q1WXsCWpwwIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFOQcc9h/RUvml6dP+HTAQDJE HYL+MB8GA1UdIwQYMBaAFLc7BZcaGna98bxhpReLALT/cbq7MA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzNiODZjYjc3LTY5YWMtNDNkOS05ZjZj LWZjNTMwNjZiZWI4OC8yL0I3M0IwNTk3MUExQTc2QkRGMUJDNjFBNTE3OEIwMEI0 RkY3MUJBQkIuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2Et NGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZWMxNzE1Ny02NmRlLTRhYWItODVlNy0y OGFmNGRlNDMwZTIvZDkwZDhhYmEyYTUyZTY1ODcyMjUyMmVjNDJjNjI2ZjAyOTc1 MGUwMTVkYmRiYTQxOGYuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv M2I4NmNiNzctNjlhYy00M2Q5LTlmNmMtZmM1MzA2NmJlYjg4LzIvQjczQjA1OTcx QTFBNzZCREYxQkM2MUE1MTc4QjAwQjRGRjcxQkFCQi5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIOJ45zJ 82XitetXHOx/BXmTIqL97ASNtqC/Wez1XAzvE+8fOQtO6cYA+l3VsDQgm64Lud0L 9UxTTHsw1tm73ybtgpAsMV9QMRz38MMItcJXfS6GIVnkC3/17nqC88FJMoNW2Ksb s1JuoXzuVxBwZfS9gJ/G7km0K7lHQLh+HZiLDJETZGSNlerevQx1hDp/6+U9eXgH xjD8y0XwZ1V+8I8/aVKCWU+B9J9cQ0mUh4v2dR3C4YzlSKDkxYGD7JD88jOVjMqK YbRaigHzzxbXDIBvHdMnbJ8aqEzfLIKxSClUQznLEbe0CQ0q4xM88KdhT0JOFN29 M+Vqrp+E8DGz2EI= -----END CERTIFICATE-----Generated at Sun Apr 27 02:18:56 2025 by rpki-client