$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft File: 10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft (raw, json) Hash identifier: lIdm2mFp7QHY2ynjg8AvEr6ntqZt/Ad/wOgNzXUd4qU= Subject key identifier: A2:EE:46:8A:CF:48:9C:17:4A:3D:99:30:18:EA:CA:BE:9F:50:DF:0E Authority key identifier: 10:FA:AD:7B:D8:08:78:1E:33:0C:17:FD:6D:0A:AB:1D:F1:C6:9E:D4 Certificate issuer: /CN=1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39 Certificate serial: 0D0B502C0D98C945C7CBD2F9C55973661353541D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft Manifest number: 0282 Signing time: Mon 28 Apr 2025 11:01:44 +0000 Manifest this update: Mon 28 Apr 2025 10:56:44 +0000 Manifest next update: Tue 29 Apr 2025 13:02:44 +0000 Files and hashes: 1: 10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.crl (hash: Zo69CiiKecKurEn6OtMW8kfFUTtt6UfQXZ0Rrc77UwU=) 2: 323630323a663939653a3a2f33362d3336203d3e203233313235.roa (hash: MUrrdeivup2plAmve+o0OoigEU3cn15gDFCIWky2K2w=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.crl rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/4b92cbc5-48e6-4e59-b9e4-d0055609895d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/4b92cbc5-48e6-4e59-b9e4-d0055609895d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 13:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:0b:50:2c:0d:98:c9:45:c7:cb:d2:f9:c5:59:73:66:13:53:54:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39 Validity Not Before: Apr 28 10:56:44 2025 GMT Not After : Apr 29 13:02:44 2025 GMT Subject: CN=A2EE468ACF489C174A3D993018EACABE9F50DF0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a0:1e:89:e7:15:c5:7b:fe:d6:00:7a:52:ab: 6b:e9:eb:c6:86:6b:fe:0b:6b:14:dd:22:ba:47:50: fd:18:86:aa:db:5f:f2:52:9f:fe:3c:8a:2b:e4:ea: 45:d5:7f:89:16:66:2f:06:91:07:91:16:f7:30:65: 60:94:9b:46:64:70:06:76:00:f5:80:ba:3e:8d:6b: c2:d4:19:ed:96:33:2e:f6:e6:f6:fc:d5:24:79:16: 39:e5:72:3b:64:af:ae:22:0f:42:a9:72:97:26:df: af:09:b0:63:50:47:b2:53:83:87:ad:29:98:73:55: cd:74:89:1a:ea:d7:0e:41:40:b5:40:7f:0c:b8:5d: 96:7a:b2:65:fb:bc:f2:5e:44:4b:2a:f4:1c:61:18: f7:eb:26:ba:13:d3:f4:34:ed:32:ce:dd:81:22:93: 5f:32:7a:3b:d6:04:d7:89:24:1e:3f:b5:91:0d:76: d9:06:d6:a1:b4:58:40:5f:f9:02:38:75:e3:09:f0: 37:40:9c:1e:2b:63:e2:4a:57:3b:68:7f:80:4f:ef: 87:d7:e9:81:b8:73:7e:9c:9a:d2:d1:25:d0:84:6b: 8e:bb:f3:7a:0c:6a:fe:2a:8a:90:fc:a6:62:c6:ba: 30:ec:3f:b7:54:0e:5d:b9:e1:b0:af:af:03:21:4b: 0c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:EE:46:8A:CF:48:9C:17:4A:3D:99:30:18:EA:CA:BE:9F:50:DF:0E X509v3 Authority Key Identifier: keyid:10:FA:AD:7B:D8:08:78:1E:33:0C:17:FD:6D:0A:AB:1D:F1:C6:9E:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:38:43:4b:ac:88:89:40:45:8b:45:2a:9f:c2:ce:46:11:bd: 51:f9:36:0b:30:f3:1b:c2:1b:50:4a:89:6b:20:97:bd:d3:39: e9:2a:2d:f3:e9:29:a0:ff:0b:b1:58:20:99:68:7b:09:b0:97: 24:90:8c:99:c4:49:d3:dd:e0:39:cc:b7:be:3b:da:ff:62:02: ab:92:8a:b8:aa:5d:65:89:29:e1:8e:98:27:1c:b3:bd:4b:3c: 85:57:40:87:ae:37:f3:5d:8a:ad:09:9e:7a:59:ec:46:06:cc: c2:cc:60:91:3d:2c:41:ef:d0:ba:ad:3e:52:1a:e3:7a:5d:10: 04:e1:f9:2b:a7:fb:5b:c0:7d:dd:95:51:27:43:17:14:99:2c: db:77:d8:2c:f2:c3:73:69:e9:75:3a:05:7f:0c:e2:9a:08:db: 4c:8d:8c:d5:3b:2b:35:8f:46:7d:73:f6:bb:d6:2f:0d:a5:ea: ef:06:31:68:23:aa:5b:2a:cd:46:82:41:ac:ba:da:60:70:0f: a7:92:06:c4:1e:0d:6f:26:cf:49:09:67:85:73:fd:7d:63:9e: 63:6f:ad:2b:1b:3a:11:76:32:eb:1e:f0:28:07:9c:11:6b:0b: d9:4d:b6:9f:4a:b2:f1:bb:d3:90:ef:d2:83:b9:3e:5f:32:41: ff:9d:06:e5 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUDQtQLA2YyUXHy9L5xVlzZhNTVB0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWExZmViN2YwNWJiZDg3ZjAxMGYxOTE2NjdmYzViMjIz YzgzNjMyYjliYmNhMzNlMzkwHhcNMjUwNDI4MTA1NjQ0WhcNMjUwNDI5MTMwMjQ0 WjAzMTEwLwYDVQQDEyhBMkVFNDY4QUNGNDg5QzE3NEEzRDk5MzAxOEVBQ0FCRTlG NTBERjBFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KAeiecVxXv+ 1gB6Uqtr6evGhmv+C2sU3SK6R1D9GIaq21/yUp/+PIor5OpF1X+JFmYvBpEHkRb3 MGVglJtGZHAGdgD1gLo+jWvC1BntljMu9ub2/NUkeRY55XI7ZK+uIg9CqXKXJt+v CbBjUEeyU4OHrSmYc1XNdIka6tcOQUC1QH8MuF2WerJl+7zyXkRLKvQcYRj36ya6 E9P0NO0yzt2BIpNfMno71gTXiSQeP7WRDXbZBtahtFhAX/kCOHXjCfA3QJweK2Pi Slc7aH+AT++H1+mBuHN+nJrS0SXQhGuOu/N6DGr+KoqQ/KZixrow7D+3VA5dueGw r68DIUsMmwIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFKLuRorPSJwXSj2ZMBjqyr6f UN8OMB8GA1UdIwQYMBaAFBD6rXvYCHgeMwwX/W0Kqx3xxp7UMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzNkYTRkOGI0LWExNTctNDYzNC1hYjE4 LTNlZjlkMDk4MjM1Mi8zLzEwRkFBRDdCRDgwODc4MUUzMzBDMTdGRDZEMEFBQjFE RjFDNjlFRDQuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It NGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YjkyY2JjNS00OGU2LTRlNTktYjllNC1k MDA1NTYwOTg5NWQvMWExZmViN2YwNWJiZDg3ZjAxMGYxOTE2NjdmYzViMjIzYzgz NjMyYjliYmNhMzNlMzkuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv M2RhNGQ4YjQtYTE1Ny00NjM0LWFiMTgtM2VmOWQwOTgyMzUyLzMvMTBGQUFEN0JE ODA4NzgxRTMzMEMxN0ZENkQwQUFCMURGMUM2OUVENC5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAG04Q0us iIlARYtFKp/CzkYRvVH5Ngsw8xvCG1BKiWsgl73TOekqLfPpKaD/C7FYIJloewmw lySQjJnESdPd4DnMt7472v9iAquSiriqXWWJKeGOmCccs71LPIVXQIeuN/Ndiq0J nnpZ7EYGzMLMYJE9LEHv0LqtPlIa43pdEATh+Sun+1vAfd2VUSdDFxSZLNt32Czy w3Np6XU6BX8M4poI20yNjNU7KzWPRn1z9rvWLw2l6u8GMWgjqlsqzUaCQay62mBw D6eSBsQeDW8mz0kJZ4Vz/X1jnmNvrSsbOhF2Muse8CgHnBFrC9lNtp9KsvG705Dv 0oO5Pl8yQf+dBuU= -----END CERTIFICATE-----Generated at Mon Apr 28 19:55:48 2025 by rpki-client