$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft File: 6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft (raw, json) Hash identifier: 43MriBRqJhaxCW4bPFm9BACZLFcZ2cW2B2IMDkeTar4= Subject key identifier: 07:9E:CC:FE:DF:EF:0C:1E:E5:3A:43:16:12:C0:D0:5F:62:46:8F:A5 Authority key identifier: 6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA Certificate issuer: /CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7 Certificate serial: 3CDD31219121F05323201B446511EF9E519425BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft Manifest number: 040F Signing time: Wed 05 Nov 2025 09:42:44 +0000 Manifest this update: Wed 05 Nov 2025 09:37:44 +0000 Manifest next update: Thu 06 Nov 2025 12:31:44 +0000 Files and hashes: 1: 6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl (hash: Tswu5LZF5qm3qSNrnd5+Ss3GiszBrO/9gDsF8dlZd9E=) 2: 3139382e3133352e3136392e302f32342d3234203d3e20333936393933.roa (hash: ds98Ml9DDwJOnbFWnKuYftmXTBL5e6vB9e43egQhGMs=) 3: EEF3EC40152A747D52835AE8973E7DC8C193A840.cer (hash: b9uDQIv17Mqj0faPNTNtrEIHppsSxn28riugd1hAwe4=) 4: 323630323a666136653a3a2f33362d3336203d3e203133363436.roa (hash: VGLKsgogi2I3ngbX4zz98KwF+ce4xUWbXael6VtJ/R8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:31:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:dd:31:21:91:21:f0:53:23:20:1b:44:65:11:ef:9e:51:94:25:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7 Validity Not Before: Nov 5 09:37:44 2025 GMT Not After : Nov 6 12:31:44 2025 GMT Subject: CN=079ECCFEDFEF0C1EE53A431612C0D05F62468FA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:14:c9:a7:07:e5:cc:86:38:52:00:7b:4b:d5: 82:58:c2:e5:49:31:bf:a8:30:fa:83:26:c1:78:c8: 02:bf:b4:84:2a:8b:56:14:8b:35:13:98:30:2b:f2: b0:39:86:2d:e0:45:3f:2a:4b:d0:7e:9a:e6:ea:7e: ad:49:bc:05:cf:04:eb:97:60:b5:62:18:63:98:68: a5:a6:8d:18:ed:ea:ea:d8:83:1a:c6:89:17:bb:51: b5:9e:81:8a:76:2f:fe:8d:ee:75:62:21:bc:a2:46: 3f:9f:f1:9c:84:71:6f:c9:99:2c:dc:9b:10:2c:89: ad:1b:9d:d5:76:da:b4:29:93:0c:9a:c9:ec:39:a7: 2c:b0:ea:9f:d7:b6:23:6b:b7:c4:da:02:70:ea:a5: a3:99:b0:86:bb:0a:8e:a5:2e:5e:af:98:07:bd:41: 06:15:d0:48:ff:58:93:3d:ff:fb:55:33:0f:c2:f7: b8:56:33:06:c2:27:ad:6d:f0:0f:ef:7b:b4:56:ad: cb:67:c3:6f:49:e8:cc:5a:db:c4:db:9e:1c:1a:08: 38:51:29:d2:ca:72:8e:ba:ff:a3:4c:40:f8:ea:55: 94:b2:e7:c1:00:85:61:9e:a4:fd:dc:68:a0:ca:a6: 73:8b:bc:69:4d:f8:0f:0c:01:95:b3:08:7e:aa:88: 69:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:9E:CC:FE:DF:EF:0C:1E:E5:3A:43:16:12:C0:D0:5F:62:46:8F:A5 X509v3 Authority Key Identifier: keyid:6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:95:1e:3e:34:f1:f8:2c:36:99:2a:03:47:06:df:99:35:57: 11:d5:38:4f:13:3d:1e:22:e2:e2:41:4f:73:3b:76:b8:4c:62: 77:d1:0b:d6:65:3f:13:22:c9:86:64:65:3a:88:51:4a:fd:02: b5:3d:dc:30:17:8c:f6:b4:4f:08:50:64:af:59:df:bc:96:f3: b7:29:0b:ce:62:74:82:f9:26:97:4b:68:19:c5:0c:c5:7b:83: 98:8d:1b:f5:dd:f5:44:c2:ac:4d:91:f4:4b:3a:ee:3d:e5:4c: e3:6a:eb:15:35:22:e6:92:c7:6e:e9:50:0d:78:41:2d:e4:b4: 0a:1b:33:b5:08:2e:34:4c:9c:f9:34:7c:dc:21:22:77:c5:91: ae:f4:6e:78:c3:01:63:06:d5:8a:ac:ed:e4:f2:5d:5b:ab:65: 65:5a:dc:85:c6:60:5d:3a:83:13:66:5b:45:c2:a7:93:73:a9: 90:80:fa:1c:40:83:19:97:c7:01:de:c1:74:54:bb:50:71:63: 97:a0:73:5b:fc:17:fb:ee:1a:ee:d7:d9:3e:16:6e:62:96:c0: cf:b8:4b:3d:ab:42:1a:fa:c9:5b:b7:cf:7e:fc:7b:03:4c:81: ef:d5:10:37:ed:6a:e1:52:84:5f:77:9c:44:16:4b:e8:e5:f0: e3:46:e5:0a -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUPN0xIZEh8FMjIBtEZRHvnlGUJbswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDM3Mjk5OTcxNTJmZDg0ZmNkYTZkMTkwYzNiMzE5NWIw MjY3OTY2MDExMmJlOWEyZDcwHhcNMjUxMTA1MDkzNzQ0WhcNMjUxMTA2MTIzMTQ0 WjAzMTEwLwYDVQQDEygwNzlFQ0NGRURGRUYwQzFFRTUzQTQzMTYxMkMwRDA1RjYy NDY4RkE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxTJpwflzIY4 UgB7S9WCWMLlSTG/qDD6gybBeMgCv7SEKotWFIs1E5gwK/KwOYYt4EU/KkvQfprm 6n6tSbwFzwTrl2C1YhhjmGilpo0Y7erq2IMaxokXu1G1noGKdi/+je51YiG8okY/ n/GchHFvyZks3JsQLImtG53Vdtq0KZMMmsnsOacssOqf17Yja7fE2gJw6qWjmbCG uwqOpS5er5gHvUEGFdBI/1iTPf/7VTMPwve4VjMGwietbfAP73u0Vq3LZ8NvSejM WtvE254cGgg4USnSynKOuv+jTED46lWUsufBAIVhnqT93GigyqZzi7xpTfgPDAGV swh+qohpPQIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFAeezP7f7wwe5TpDFhLA0F9i Ro+lMB8GA1UdIwQYMBaAFGpvbsJypevcGCQcLITR2f6UwSWqMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzY2YmQ5MmYxLTQxNWItNDc2NS04YTE2 LWRiZmM0NTkzYzFhOC83LzZBNkY2RUMyNzJBNUVCREMxODI0MUMyQzg0RDFEOUZF OTRDMTI1QUEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTIt NDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84MjlmYjg3Mi0xNWJiLTRhNGUtOWVkOS0y NTk5NjBiMDQ5YmQvNDM3Mjk5OTcxNTJmZDg0ZmNkYTZkMTkwYzNiMzE5NWIwMjY3 OTY2MDExMmJlOWEyZDcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv NjZiZDkyZjEtNDE1Yi00NzY1LThhMTYtZGJmYzQ1OTNjMWE4LzcvNkE2RjZFQzI3 MkE1RUJEQzE4MjQxQzJDODREMUQ5RkU5NEMxMjVBQS5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEWVHj40 8fgsNpkqA0cG35k1VxHVOE8TPR4i4uJBT3M7drhMYnfRC9ZlPxMiyYZkZTqIUUr9 ArU93DAXjPa0TwhQZK9Z37yW87cpC85idIL5JpdLaBnFDMV7g5iNG/Xd9UTCrE2R 9Es67j3lTONq6xU1IuaSx27pUA14QS3ktAobM7UILjRMnPk0fNwhInfFka70bnjD AWMG1Yqs7eTyXVurZWVa3IXGYF06gxNmW0XCp5NzqZCA+hxAgxmXxwHewXRUu1Bx Y5egc1v8F/vuGu7X2T4WbmKWwM+4Sz2rQhr6yVu3z378ewNMge/VEDftauFShF93 nEQWS+jl8ONG5Qo= -----END CERTIFICATE-----Generated at Wed Nov 5 17:42:15 2025 by rpki-client