$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft File: 10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft (raw, json) Hash identifier: hnoZSF/9pDiSMiAoPlS/U+bUYMjvZRHi6CfJju5Yvig= Subject key identifier: F0:F0:B8:3B:03:C8:F2:22:48:0B:82:10:1B:D1:5B:6A:86:69:F9:4E Authority key identifier: 10:FA:AD:7B:D8:08:78:1E:33:0C:17:FD:6D:0A:AB:1D:F1:C6:9E:D4 Certificate issuer: /CN=1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39 Certificate serial: 01CF783F8AD88FEDDD12E1C84D53F79A51B4A822 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft Manifest number: 0308 Signing time: Tue 05 Aug 2025 07:24:24 +0000 Manifest this update: Tue 05 Aug 2025 07:19:24 +0000 Manifest next update: Wed 06 Aug 2025 10:05:24 +0000 Files and hashes: 1: 323630323a663939653a3a2f33362d3336203d3e203233313235.roa (hash: MUrrdeivup2plAmve+o0OoigEU3cn15gDFCIWky2K2w=) 2: 32332e3133382e3232302e302f32342d3234203d3e203233313235.roa (hash: kPUalpUINJCiwObNYv9PpoOc/cSxsDyRMNiHLlMHUFE=) 3: 10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.crl (hash: x9wDpnkb7fb/Nag6RocS365bPTKoJtznPvG6CrA1GWk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.crl rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/4b92cbc5-48e6-4e59-b9e4-d0055609895d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/4b92cbc5-48e6-4e59-b9e4-d0055609895d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 10:05:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:cf:78:3f:8a:d8:8f:ed:dd:12:e1:c8:4d:53:f7:9a:51:b4:a8:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39 Validity Not Before: Aug 5 07:19:24 2025 GMT Not After : Aug 6 10:05:24 2025 GMT Subject: CN=F0F0B83B03C8F222480B82101BD15B6A8669F94E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fb:c1:9c:29:3f:a2:0a:3f:45:e0:40:5e:fd: f8:81:a4:89:9d:bb:c0:63:f5:f5:d7:de:4e:e5:fb: 52:b9:13:bd:5e:e6:d2:17:ad:2f:8b:39:e5:95:f1: 8d:ac:66:a3:36:dc:a2:fb:c6:8d:e0:6a:b3:ef:8a: 79:0e:94:7f:94:7f:36:18:71:84:0d:c4:02:86:fe: 4b:d2:8e:7f:95:a4:ee:a5:74:6d:f4:0b:87:30:74: 51:82:da:55:03:b2:02:6a:c7:50:0d:5c:39:05:1f: e1:86:90:9e:13:df:60:15:1c:cf:f0:84:68:3a:44: 41:11:7f:e5:0c:9d:3e:ed:0f:50:f9:4b:c0:09:31: 01:2a:b2:2f:77:0c:53:0a:19:d3:51:3e:ab:19:20: e4:49:09:03:8a:ce:fc:0a:39:90:c0:58:3f:1f:e9: 25:84:7e:fb:bd:4c:52:cc:6f:10:98:8a:a5:25:42: ec:9b:fe:3e:0f:60:e3:9c:fa:83:e3:11:d1:6b:12: 35:f0:4e:e0:0c:df:c4:4c:98:b9:e1:d2:6a:24:7e: eb:c3:48:7c:1f:17:49:b2:26:bf:6c:74:b3:48:ce: a9:50:9d:f0:24:cf:b2:09:16:2d:06:8c:62:4d:04: 06:89:3f:96:c4:00:e0:4d:66:f0:3d:59:87:c3:97: d3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:F0:B8:3B:03:C8:F2:22:48:0B:82:10:1B:D1:5B:6A:86:69:F9:4E X509v3 Authority Key Identifier: keyid:10:FA:AD:7B:D8:08:78:1E:33:0C:17:FD:6D:0A:AB:1D:F1:C6:9E:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:8f:40:4c:ed:a0:d1:fe:2f:5b:59:94:0e:af:e5:54:e8:cf: 21:18:11:3e:fa:a2:7a:3a:92:08:85:e8:bc:fd:80:d2:22:0e: f3:11:0f:92:56:b0:21:90:1b:bd:d2:68:b8:84:d3:ae:c9:12: 62:cb:d2:11:34:2a:08:bd:6c:1a:a0:c8:92:bd:4e:30:5f:68: 0a:4d:c5:76:0e:bf:5e:49:81:aa:bb:d4:e6:ab:3c:14:6e:23: ba:ec:0f:e1:e8:63:0b:ba:56:74:ec:ea:60:39:31:3b:96:94: ce:05:8a:14:2d:e6:50:76:1d:f2:d8:e9:24:78:cf:bb:49:8a: 76:f5:30:97:57:a9:e9:d6:4c:39:04:a3:2f:23:44:b6:ad:7b: 82:52:a4:b4:00:5b:c1:24:bc:66:91:2e:e9:19:bc:d4:ea:c2: a7:54:48:be:46:f7:3f:59:03:45:72:1a:8b:78:c1:80:04:17: 8a:f3:8c:2a:2d:7e:f5:f9:97:13:9c:60:8d:f2:83:02:dd:8f: 61:5c:1a:d5:87:4e:ea:b4:af:91:c2:91:8f:0b:1b:4b:af:24: 93:f7:9b:4d:17:91:26:48:b7:68:03:ad:49:5b:33:76:14:39: 14:1e:db:b9:6b:91:40:73:0f:b5:5a:e0:81:86:0b:d1:6b:22: 7b:e5:bc:cd -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUAc94P4rYj+3dEuHITVP3mlG0qCIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWExZmViN2YwNWJiZDg3ZjAxMGYxOTE2NjdmYzViMjIz YzgzNjMyYjliYmNhMzNlMzkwHhcNMjUwODA1MDcxOTI0WhcNMjUwODA2MTAwNTI0 WjAzMTEwLwYDVQQDEyhGMEYwQjgzQjAzQzhGMjIyNDgwQjgyMTAxQkQxNUI2QTg2 NjlGOTRFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PvBnCk/ogo/ ReBAXv34gaSJnbvAY/X1195O5ftSuRO9XubSF60viznllfGNrGajNtyi+8aN4Gqz 74p5DpR/lH82GHGEDcQChv5L0o5/laTupXRt9AuHMHRRgtpVA7ICasdQDVw5BR/h hpCeE99gFRzP8IRoOkRBEX/lDJ0+7Q9Q+UvACTEBKrIvdwxTChnTUT6rGSDkSQkD is78CjmQwFg/H+klhH77vUxSzG8QmIqlJULsm/4+D2DjnPqD4xHRaxI18E7gDN/E TJi54dJqJH7rw0h8HxdJsia/bHSzSM6pUJ3wJM+yCRYtBoxiTQQGiT+WxADgTWbw PVmHw5fTnQIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFPDwuDsDyPIiSAuCEBvRW2qG aflOMB8GA1UdIwQYMBaAFBD6rXvYCHgeMwwX/W0Kqx3xxp7UMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzNkYTRkOGI0LWExNTctNDYzNC1hYjE4 LTNlZjlkMDk4MjM1Mi8zLzEwRkFBRDdCRDgwODc4MUUzMzBDMTdGRDZEMEFBQjFE RjFDNjlFRDQuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It NGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YjkyY2JjNS00OGU2LTRlNTktYjllNC1k MDA1NTYwOTg5NWQvMWExZmViN2YwNWJiZDg3ZjAxMGYxOTE2NjdmYzViMjIzYzgz NjMyYjliYmNhMzNlMzkuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv M2RhNGQ4YjQtYTE1Ny00NjM0LWFiMTgtM2VmOWQwOTgyMzUyLzMvMTBGQUFEN0JE ODA4NzgxRTMzMEMxN0ZENkQwQUFCMURGMUM2OUVENC5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAECPQEzt oNH+L1tZlA6v5VTozyEYET76ono6kgiF6Lz9gNIiDvMRD5JWsCGQG73SaLiE067J EmLL0hE0Kgi9bBqgyJK9TjBfaApNxXYOv15Jgaq71OarPBRuI7rsD+HoYwu6VnTs 6mA5MTuWlM4FihQt5lB2HfLY6SR4z7tJinb1MJdXqenWTDkEoy8jRLate4JSpLQA W8EkvGaRLukZvNTqwqdUSL5G9z9ZA0VyGot4wYAEF4rzjCotfvX5lxOcYI3ygwLd j2FcGtWHTuq0r5HCkY8LG0uvJJP3m00XkSZIt2gDrUlbM3YUORQe27lrkUBzD7Va 4IGGC9FrInvlvM0= -----END CERTIFICATE-----Generated at Wed Aug 6 00:43:58 2025 by rpki-client