$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5291c7e6-a476-4217-bba3-a592b24d8eb9/2/FB5FF92BFD752A0E654B0ECC7B03A17DF99B87A8.mft File: FB5FF92BFD752A0E654B0ECC7B03A17DF99B87A8.mft (raw, json) Hash identifier: u64pCjfe6IJgqRbJxRTuV2Qvt1s1fHvbILfj60CENRo= Subject key identifier: CB:9F:17:C3:44:1F:4F:81:E4:44:0F:41:A3:97:CD:90:C2:4A:DB:36 Authority key identifier: FB:5F:F9:2B:FD:75:2A:0E:65:4B:0E:CC:7B:03:A1:7D:F9:9B:87:A8 Certificate issuer: /CN=d90d8aba2a1a07bad3fcf0845bb91d64fddd29022dbb5fe0ad Certificate serial: 4C60539CE5A14973FD0F238979A89505E5F63192 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a1a07bad3fcf0845bb91d64fddd29022dbb5fe0ad.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5291c7e6-a476-4217-bba3-a592b24d8eb9/2/FB5FF92BFD752A0E654B0ECC7B03A17DF99B87A8.mft Manifest number: 35 Signing time: Sun 27 Apr 2025 21:02:45 +0000 Manifest this update: Sun 27 Apr 2025 20:57:45 +0000 Manifest next update: Mon 28 Apr 2025 22:11:45 +0000 Files and hashes: 1: FB5FF92BFD752A0E654B0ECC7B03A17DF99B87A8.crl (hash: eZa/ER9MlkZEO2VLhBV8swwQxyQhkUIUJrBsaOX1GvM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5291c7e6-a476-4217-bba3-a592b24d8eb9/2/FB5FF92BFD752A0E654B0ECC7B03A17DF99B87A8.crl rsync://rsync.paas.rpki.ripe.net/repository/5291c7e6-a476-4217-bba3-a592b24d8eb9/2/FB5FF92BFD752A0E654B0ECC7B03A17DF99B87A8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a1a07bad3fcf0845bb91d64fddd29022dbb5fe0ad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 22:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:60:53:9c:e5:a1:49:73:fd:0f:23:89:79:a8:95:05:e5:f6:31:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d90d8aba2a1a07bad3fcf0845bb91d64fddd29022dbb5fe0ad Validity Not Before: Apr 27 20:57:45 2025 GMT Not After : Apr 28 22:11:45 2025 GMT Subject: CN=CB9F17C3441F4F81E4440F41A397CD90C24ADB36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:39:eb:7f:af:87:74:ab:a7:83:de:ef:27:43: d7:15:b1:0a:a7:eb:c9:6e:d9:0f:06:05:32:2b:e2: 39:11:38:f4:31:c2:46:4c:79:0b:b3:9a:f2:e6:a0: 89:24:22:50:0f:66:b7:72:8c:f5:b0:27:a1:33:c0: 6d:59:f1:8b:87:73:73:56:3b:ad:07:90:4e:82:6e: fd:22:14:2e:df:21:84:cc:56:a2:49:ad:e9:df:64: c0:85:8a:30:1a:8d:33:2e:cd:ed:ce:7a:31:14:8d: 2a:56:5a:a6:eb:04:8c:c2:5f:da:c0:f1:8e:7e:0d: 91:ec:60:fb:34:b0:7a:4d:9f:11:2a:08:92:73:11: 8d:2d:30:39:82:89:8d:32:96:b6:01:e7:65:e0:2e: 8b:7d:3f:e2:c4:2e:8d:69:d3:a3:65:94:03:f0:c8: 83:e5:63:cb:3f:c7:cc:69:0f:26:e1:55:95:a8:a5: be:95:8d:98:be:61:15:6f:fc:a1:7a:f1:18:d6:9f: 4c:e7:92:b0:dc:73:16:2e:ef:57:52:42:9d:36:38: 8b:03:45:c3:1d:9d:e2:b3:41:a7:e7:41:3e:5b:ab: df:46:77:fe:c0:34:86:52:fe:1c:c4:43:c8:40:00: 86:9f:eb:a3:7b:89:cd:03:94:c0:89:f7:ec:24:73: 4d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:9F:17:C3:44:1F:4F:81:E4:44:0F:41:A3:97:CD:90:C2:4A:DB:36 X509v3 Authority Key Identifier: keyid:FB:5F:F9:2B:FD:75:2A:0E:65:4B:0E:CC:7B:03:A1:7D:F9:9B:87:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5291c7e6-a476-4217-bba3-a592b24d8eb9/2/FB5FF92BFD752A0E654B0ECC7B03A17DF99B87A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a1a07bad3fcf0845bb91d64fddd29022dbb5fe0ad.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5291c7e6-a476-4217-bba3-a592b24d8eb9/2/FB5FF92BFD752A0E654B0ECC7B03A17DF99B87A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:e4:0a:42:56:d8:13:e1:dc:ff:96:f4:0d:29:c3:56:62:f2: 98:f5:b2:26:ff:8e:86:44:7c:d0:fe:fd:7e:c7:6e:7f:73:2e: 49:73:32:df:1e:b5:d6:31:37:e9:90:e4:3c:51:86:54:92:7a: da:a8:ed:db:38:28:b8:26:c4:d6:6f:52:de:84:32:a6:77:a0: 19:d0:01:8a:b4:d6:f9:b7:8f:bf:87:35:8c:6e:75:bd:f4:44: 42:57:81:4c:73:58:89:c3:d1:6f:81:d7:c5:14:67:cf:da:d0: 16:b6:6a:a3:d1:65:e6:c1:63:71:a8:23:e3:bd:70:7a:7d:58: 95:9e:2c:b9:a5:f5:4a:21:e5:d2:bb:2f:8e:0b:75:28:02:e4: d9:c5:bd:e1:ab:70:90:ee:75:c2:2c:1b:1e:09:ac:20:85:d5: 0b:7c:70:be:bf:3c:39:9e:ba:9f:0b:50:d5:7a:0a:76:30:6a: 76:f2:5a:ee:40:2c:87:62:6f:3a:74:4b:34:58:1a:a2:f4:49: f4:10:65:30:3a:f9:b3:de:6d:7b:be:c9:eb:07:72:41:6a:f2: 91:69:c6:d2:7e:43:f8:29:5b:86:1b:a0:46:d4:5d:6b:8e:b9: 86:d0:28:27:89:dc:14:3e:19:ea:50:04:b4:1a:a6:a5:ec:ae: 62:a0:8c:34 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUTGBTnOWhSXP9DyOJeaiVBeX2MZIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDkwZDhhYmEyYTFhMDdiYWQzZmNmMDg0NWJiOTFkNjRm ZGRkMjkwMjJkYmI1ZmUwYWQwHhcNMjUwNDI3MjA1NzQ1WhcNMjUwNDI4MjIxMTQ1 WjAzMTEwLwYDVQQDEyhDQjlGMTdDMzQ0MUY0RjgxRTQ0NDBGNDFBMzk3Q0Q5MEMy NEFEQjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Tnrf6+HdKun g97vJ0PXFbEKp+vJbtkPBgUyK+I5ETj0McJGTHkLs5ry5qCJJCJQD2a3coz1sCeh M8BtWfGLh3NzVjutB5BOgm79IhQu3yGEzFaiSa3p32TAhYowGo0zLs3tznoxFI0q Vlqm6wSMwl/awPGOfg2R7GD7NLB6TZ8RKgiScxGNLTA5gomNMpa2Aedl4C6LfT/i xC6NadOjZZQD8MiD5WPLP8fMaQ8m4VWVqKW+lY2YvmEVb/yhevEY1p9M55Kw3HMW Lu9XUkKdNjiLA0XDHZ3is0Gn50E+W6vfRnf+wDSGUv4cxEPIQACGn+uje4nNA5TA iffsJHNNbQIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFMufF8NEH0+B5EQPQaOXzZDC Sts2MB8GA1UdIwQYMBaAFPtf+Sv9dSoOZUsOzHsDoX35m4eoMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUyOTFjN2U2LWE0NzYtNDIxNy1iYmEz LWE1OTJiMjRkOGViOS8yL0ZCNUZGOTJCRkQ3NTJBMEU2NTRCMEVDQzdCMDNBMTdE Rjk5Qjg3QTguY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2Et NGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZWMxNzE1Ny02NmRlLTRhYWItODVlNy0y OGFmNGRlNDMwZTIvZDkwZDhhYmEyYTFhMDdiYWQzZmNmMDg0NWJiOTFkNjRmZGRk MjkwMjJkYmI1ZmUwYWQuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv NTI5MWM3ZTYtYTQ3Ni00MjE3LWJiYTMtYTU5MmIyNGQ4ZWI5LzIvRkI1RkY5MkJG RDc1MkEwRTY1NEIwRUNDN0IwM0ExN0RGOTlCODdBOC5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAI3kCkJW 2BPh3P+W9A0pw1Zi8pj1sib/joZEfND+/X7Hbn9zLklzMt8etdYxN+mQ5DxRhlSS etqo7ds4KLgmxNZvUt6EMqZ3oBnQAYq01vm3j7+HNYxudb30REJXgUxzWInD0W+B 18UUZ8/a0Ba2aqPRZebBY3GoI+O9cHp9WJWeLLml9Uoh5dK7L44LdSgC5NnFveGr cJDudcIsGx4JrCCF1Qt8cL6/PDmeup8LUNV6CnYwanbyWu5ALIdibzp0SzRYGqL0 SfQQZTA6+bPebXu+yesHckFq8pFpxtJ+Q/gpW4YboEbUXWuOuYbQKCeJ3BQ+GepQ BLQapqXsrmKgjDQ= -----END CERTIFICATE-----Generated at Mon Apr 28 09:17:46 2025 by rpki-client