$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft File: 10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft (raw, json) Hash identifier: yok7iadIYJiL4Z+UWJNumjQ6a4Kj+aacy4lhVvr3BU8= Subject key identifier: 15:35:92:60:D1:43:CD:78:5A:85:6B:0C:C1:B2:61:CB:47:E5:03:0F Authority key identifier: 10:FA:AD:7B:D8:08:78:1E:33:0C:17:FD:6D:0A:AB:1D:F1:C6:9E:D4 Certificate issuer: /CN=1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39 Certificate serial: 7DFA628DF49FE835B22A3411A77DF9A0B4112AF4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft Manifest number: 0383 Signing time: Tue 04 Nov 2025 20:54:10 +0000 Manifest this update: Tue 04 Nov 2025 20:49:10 +0000 Manifest next update: Wed 05 Nov 2025 22:57:10 +0000 Files and hashes: 1: 10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.crl (hash: XxEiOHYdvbEb34hEUIohdiCaa37S06m2pkFjl/YTPNU=) 2: 323630323a663939653a3a2f33362d3336203d3e203233313235.roa (hash: MUrrdeivup2plAmve+o0OoigEU3cn15gDFCIWky2K2w=) 3: 32332e3133382e3232302e302f32342d3234203d3e203233313235.roa (hash: kPUalpUINJCiwObNYv9PpoOc/cSxsDyRMNiHLlMHUFE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.crl rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/4b92cbc5-48e6-4e59-b9e4-d0055609895d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/4b92cbc5-48e6-4e59-b9e4-d0055609895d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:57:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:fa:62:8d:f4:9f:e8:35:b2:2a:34:11:a7:7d:f9:a0:b4:11:2a:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39 Validity Not Before: Nov 4 20:49:10 2025 GMT Not After : Nov 5 22:57:10 2025 GMT Subject: CN=15359260D143CD785A856B0CC1B261CB47E5030F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f4:53:86:17:c3:18:e7:ac:07:e1:ac:30:e3: ab:c0:ed:0e:e4:c9:84:5f:3f:3c:f1:1c:08:3e:7b: e3:2e:98:5f:ef:e5:68:ae:b4:bc:54:77:4f:c3:5d: 1d:c4:33:d6:01:bb:ef:86:55:ab:e2:fd:e8:bd:13: 4b:79:70:3a:d6:b1:b2:10:54:cf:0c:0f:2a:25:f3: bf:57:6e:67:e7:4b:ce:94:cd:db:5d:b9:5a:73:ad: 1a:4f:09:0b:c1:f6:bc:e8:6d:be:f3:1f:a0:25:5c: c6:5e:6f:54:2e:a8:1b:cd:98:65:45:4e:17:0f:34: 5c:b0:47:16:25:d7:03:0a:f4:bb:e8:f0:96:ed:96: 7b:23:21:c4:67:33:85:9a:00:d3:5a:f2:dc:c7:95: 65:bc:22:2b:b5:b6:37:b5:10:ec:a7:a2:01:9b:82: 37:95:7c:80:7c:45:d9:d0:6c:e6:10:94:03:f8:35: dd:e4:33:9d:7f:ef:2b:5a:05:5a:16:f9:03:a1:83: 16:ba:5d:d2:55:cf:30:30:0f:a4:ae:df:f5:cb:8d: 98:48:aa:2f:a2:c0:6c:b9:c4:d0:91:be:0b:c4:f6: d5:9e:35:6f:d6:db:a1:e6:c9:04:1d:7a:ae:a2:95: 4a:52:8e:bd:aa:b5:6a:93:02:1e:67:cd:95:c3:d6: 6e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:35:92:60:D1:43:CD:78:5A:85:6B:0C:C1:B2:61:CB:47:E5:03:0F X509v3 Authority Key Identifier: keyid:10:FA:AD:7B:D8:08:78:1E:33:0C:17:FD:6D:0A:AB:1D:F1:C6:9E:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:fc:d9:7a:b8:4d:3a:52:74:ed:9f:47:54:57:1e:37:0e:81: 31:d7:d1:b1:8c:1c:cf:37:ee:1c:c0:2e:b1:0c:6b:5a:92:78: 44:16:50:a0:f5:ce:0d:f6:83:38:ab:92:e2:10:d1:26:a8:47: 68:4f:5f:81:04:db:88:19:5e:83:ce:f5:05:e0:70:97:06:b5: b6:68:85:ac:72:6e:7c:1c:30:87:52:98:f1:35:b1:e3:2d:f6: 4a:c4:70:64:54:49:3c:ee:60:81:19:44:f5:7b:ef:4f:95:81: 08:e7:af:cf:b1:ca:71:1d:e5:cc:e9:fc:6b:f2:1b:7a:7e:a2: 6b:ec:d1:5d:34:7a:91:66:6a:1d:ed:08:c6:d3:65:4d:e0:8b: 58:e0:5e:19:9d:d8:6b:ab:29:5d:7b:69:e6:4b:ad:9b:d3:ba: 3c:0f:ee:c9:c6:cf:77:04:16:7f:e3:de:76:ed:54:b4:24:b9: a0:33:33:33:c2:43:ef:a9:0b:c9:51:13:85:5f:15:ab:a8:ec: 73:26:1c:f9:67:ef:7d:d4:e5:42:3c:49:a7:cf:c3:ed:19:a4: 94:ec:ff:ef:df:4f:c8:50:e3:e2:67:7e:1e:a5:91:a6:c4:19: f6:69:ca:2a:c7:1b:27:01:7b:b5:3a:45:10:00:cb:9f:a5:e1: ad:32:f6:3c -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUffpijfSf6DWyKjQRp335oLQRKvQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWExZmViN2YwNWJiZDg3ZjAxMGYxOTE2NjdmYzViMjIz YzgzNjMyYjliYmNhMzNlMzkwHhcNMjUxMTA0MjA0OTEwWhcNMjUxMTA1MjI1NzEw WjAzMTEwLwYDVQQDEygxNTM1OTI2MEQxNDNDRDc4NUE4NTZCMENDMUIyNjFDQjQ3 RTUwMzBGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovRThhfDGOes B+GsMOOrwO0O5MmEXz888RwIPnvjLphf7+VorrS8VHdPw10dxDPWAbvvhlWr4v3o vRNLeXA61rGyEFTPDA8qJfO/V25n50vOlM3bXblac60aTwkLwfa86G2+8x+gJVzG Xm9ULqgbzZhlRU4XDzRcsEcWJdcDCvS76PCW7ZZ7IyHEZzOFmgDTWvLcx5VlvCIr tbY3tRDsp6IBm4I3lXyAfEXZ0GzmEJQD+DXd5DOdf+8rWgVaFvkDoYMWul3SVc8w MA+krt/1y42YSKovosBsucTQkb4LxPbVnjVv1tuh5skEHXquopVKUo69qrVqkwIe Z82Vw9ZuIQIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFBU1kmDRQ814WoVrDMGyYctH 5QMPMB8GA1UdIwQYMBaAFBD6rXvYCHgeMwwX/W0Kqx3xxp7UMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzNkYTRkOGI0LWExNTctNDYzNC1hYjE4 LTNlZjlkMDk4MjM1Mi8zLzEwRkFBRDdCRDgwODc4MUUzMzBDMTdGRDZEMEFBQjFE RjFDNjlFRDQuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It NGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YjkyY2JjNS00OGU2LTRlNTktYjllNC1k MDA1NTYwOTg5NWQvMWExZmViN2YwNWJiZDg3ZjAxMGYxOTE2NjdmYzViMjIzYzgz NjMyYjliYmNhMzNlMzkuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv M2RhNGQ4YjQtYTE1Ny00NjM0LWFiMTgtM2VmOWQwOTgyMzUyLzMvMTBGQUFEN0JE ODA4NzgxRTMzMEMxN0ZENkQwQUFCMURGMUM2OUVENC5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABj82Xq4 TTpSdO2fR1RXHjcOgTHX0bGMHM837hzALrEMa1qSeEQWUKD1zg32gzirkuIQ0Sao R2hPX4EE24gZXoPO9QXgcJcGtbZohaxybnwcMIdSmPE1seMt9krEcGRUSTzuYIEZ RPV770+VgQjnr8+xynEd5czp/GvyG3p+omvs0V00epFmah3tCMbTZU3gi1jgXhmd 2GurKV17aeZLrZvTujwP7snGz3cEFn/j3nbtVLQkuaAzMzPCQ++pC8lRE4VfFauo 7HMmHPln733U5UI8SafPw+0ZpJTs/+/fT8hQ4+Jnfh6lkabEGfZpyirHGycBe7U6 RRAAy5+l4a0y9jw= -----END CERTIFICATE-----Generated at Wed Nov 5 07:58:53 2025 by rpki-client