$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft File: 10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft (raw, json) Hash identifier: XxmhTFkwxXYP70/oP6m68TJHtYhH2a4bsb0T9uNnSaY= Subject key identifier: BF:6E:8D:73:03:4B:55:90:9C:38:A6:37:B5:3A:B7:A4:C7:D0:61:CB Authority key identifier: 10:FA:AD:7B:D8:08:78:1E:33:0C:17:FD:6D:0A:AB:1D:F1:C6:9E:D4 Certificate issuer: /CN=1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39 Certificate serial: 25F6E427627E8359B52FFC7AD6928E9A438E1D48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft Manifest number: 02C3 Signing time: Sun 15 Jun 2025 22:42:32 +0000 Manifest this update: Sun 15 Jun 2025 22:37:32 +0000 Manifest next update: Tue 17 Jun 2025 02:29:32 +0000 Files and hashes: 1: 32332e3133382e3232302e302f32342d3234203d3e203233313235.roa (hash: kPUalpUINJCiwObNYv9PpoOc/cSxsDyRMNiHLlMHUFE=) 2: 323630323a663939653a3a2f33362d3336203d3e203233313235.roa (hash: MUrrdeivup2plAmve+o0OoigEU3cn15gDFCIWky2K2w=) 3: 10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.crl (hash: yumAaPF1Xrcwkde1Kz3+eDHxaMCeLbxFdaFCQKAEWVA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.crl rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/4b92cbc5-48e6-4e59-b9e4-d0055609895d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/4b92cbc5-48e6-4e59-b9e4-d0055609895d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 02:29:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:f6:e4:27:62:7e:83:59:b5:2f:fc:7a:d6:92:8e:9a:43:8e:1d:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39 Validity Not Before: Jun 15 22:37:32 2025 GMT Not After : Jun 17 02:29:32 2025 GMT Subject: CN=BF6E8D73034B55909C38A637B53AB7A4C7D061CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5a:80:bc:7a:56:de:86:09:c2:a4:e3:7c:f4: 52:e3:c6:6c:5a:78:c6:51:27:35:67:b2:c0:e1:96: 5f:99:ca:7d:3f:95:42:27:b3:0a:23:43:d5:ed:6b: cd:98:da:51:c3:5e:d4:c3:34:54:fe:57:d4:f8:7c: fb:9a:80:8b:c6:8a:55:f6:d1:57:8d:65:d1:18:c0: bf:b8:3d:16:8f:ab:78:25:83:ce:b0:f6:f4:f0:01: 89:4d:2f:09:62:b7:fa:76:82:af:c4:18:d7:79:40: 94:f7:78:b2:0f:88:04:1f:a3:89:a6:21:b6:a9:f4: b1:42:08:3c:46:2d:54:6c:97:82:f1:34:3d:2d:a8: 12:aa:37:a9:eb:db:bc:25:20:f1:9f:28:be:03:47: 01:e8:31:f4:fa:f2:ab:2b:5e:d4:8c:b7:ed:30:43: 37:5a:a7:d7:00:1c:a5:27:37:74:01:ad:98:83:a3: 0b:1b:dc:4d:b4:3f:62:16:27:7f:d6:dc:33:8a:43: f6:b3:bd:02:75:ea:a3:e8:82:d8:34:db:69:9a:5d: b1:fc:da:57:0c:ce:92:09:7e:2e:67:a9:82:db:7f: b9:c2:85:27:10:81:d4:9f:3a:47:6a:90:2a:12:51: 13:a2:31:64:77:7a:1b:01:ff:bb:a9:75:95:99:7c: 26:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:6E:8D:73:03:4B:55:90:9C:38:A6:37:B5:3A:B7:A4:C7:D0:61:CB X509v3 Authority Key Identifier: keyid:10:FA:AD:7B:D8:08:78:1E:33:0C:17:FD:6D:0A:AB:1D:F1:C6:9E:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:44:f8:0e:8b:ec:09:3c:8d:54:ae:06:08:82:dc:0c:28:07: 97:a2:95:c9:1a:42:1a:01:78:98:54:77:44:aa:e0:55:4f:fd: 33:42:e5:66:95:47:f1:67:a4:4b:57:3f:96:c0:ca:8b:50:ec: 14:91:b6:7c:86:00:87:59:3b:87:a6:03:b1:e7:d3:9e:12:36: 69:0e:7a:29:cd:28:85:8a:a8:d7:e3:e8:02:88:00:01:ee:de: b0:53:54:c1:bb:54:5d:3c:25:66:94:d7:01:13:af:7a:40:a0: df:79:2e:5b:be:4e:f7:4c:fe:f7:88:b6:02:e3:26:86:d2:5c: 38:b8:03:62:7a:7d:9d:e7:d0:d6:7e:1f:54:1c:7d:1e:7e:c2: b2:c0:f7:6d:c4:4c:4a:f5:de:df:db:48:01:90:af:a6:00:08: d7:fc:bb:d8:51:4d:b4:59:e0:06:05:1e:93:12:d2:87:f1:11: af:8e:62:77:0c:68:e4:d4:32:d1:44:11:ce:34:ea:e2:66:b4: 66:14:63:c5:c1:5a:f7:50:32:3a:cc:fd:09:68:19:4d:2a:81: 33:46:b7:60:ed:24:db:e2:8e:16:53:07:8b:a5:69:ed:4c:03: 51:f5:8a:87:fd:df:0f:4c:88:d6:7e:c0:6a:e9:a4:b1:42:5c: 8e:39:dd:21 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUJfbkJ2J+g1m1L/x61pKOmkOOHUgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWExZmViN2YwNWJiZDg3ZjAxMGYxOTE2NjdmYzViMjIz YzgzNjMyYjliYmNhMzNlMzkwHhcNMjUwNjE1MjIzNzMyWhcNMjUwNjE3MDIyOTMy WjAzMTEwLwYDVQQDEyhCRjZFOEQ3MzAzNEI1NTkwOUMzOEE2MzdCNTNBQjdBNEM3 RDA2MUNCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1qAvHpW3oYJ wqTjfPRS48ZsWnjGUSc1Z7LA4ZZfmcp9P5VCJ7MKI0PV7WvNmNpRw17UwzRU/lfU +Hz7moCLxopV9tFXjWXRGMC/uD0Wj6t4JYPOsPb08AGJTS8JYrf6doKvxBjXeUCU 93iyD4gEH6OJpiG2qfSxQgg8Ri1UbJeC8TQ9LagSqjep69u8JSDxnyi+A0cB6DH0 +vKrK17UjLftMEM3WqfXABylJzd0Aa2Yg6MLG9xNtD9iFid/1twzikP2s70Cdeqj 6ILYNNtpml2x/NpXDM6SCX4uZ6mC23+5woUnEIHUnzpHapAqElETojFkd3obAf+7 qXWVmXwmWwIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFL9ujXMDS1WQnDimN7U6t6TH 0GHLMB8GA1UdIwQYMBaAFBD6rXvYCHgeMwwX/W0Kqx3xxp7UMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzNkYTRkOGI0LWExNTctNDYzNC1hYjE4 LTNlZjlkMDk4MjM1Mi8zLzEwRkFBRDdCRDgwODc4MUUzMzBDMTdGRDZEMEFBQjFE RjFDNjlFRDQuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It NGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YjkyY2JjNS00OGU2LTRlNTktYjllNC1k MDA1NTYwOTg5NWQvMWExZmViN2YwNWJiZDg3ZjAxMGYxOTE2NjdmYzViMjIzYzgz NjMyYjliYmNhMzNlMzkuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv M2RhNGQ4YjQtYTE1Ny00NjM0LWFiMTgtM2VmOWQwOTgyMzUyLzMvMTBGQUFEN0JE ODA4NzgxRTMzMEMxN0ZENkQwQUFCMURGMUM2OUVENC5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJxE+A6L 7Ak8jVSuBgiC3AwoB5eilckaQhoBeJhUd0Sq4FVP/TNC5WaVR/FnpEtXP5bAyotQ 7BSRtnyGAIdZO4emA7Hn054SNmkOeinNKIWKqNfj6AKIAAHu3rBTVMG7VF08JWaU 1wETr3pAoN95Llu+TvdM/veItgLjJobSXDi4A2J6fZ3n0NZ+H1QcfR5+wrLA923E TEr13t/bSAGQr6YACNf8u9hRTbRZ4AYFHpMS0ofxEa+OYncMaOTUMtFEEc406uJm tGYUY8XBWvdQMjrM/QloGU0qgTNGt2DtJNvijhZTB4ulae1MA1H1iof93w9MiNZ+ wGrppLFCXI453SE= -----END CERTIFICATE-----Generated at Mon Jun 16 05:17:25 2025 by rpki-client