$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft File: 3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft (raw, json) Hash identifier: VZedNZq0VuxKlTia05wncoTDMzV2ILPgX0klWslzV64= Subject key identifier: 48:94:CF:23:4B:BD:3F:49:EA:1B:3E:4C:37:DE:40:82:72:DB:11:DB Authority key identifier: 3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A Certificate issuer: /CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b Certificate serial: 605BC14EB01CE0E6419930542867EBC0D6B21A62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft Manifest number: 01FF Signing time: Wed 05 Nov 2025 05:43:33 +0000 Manifest this update: Wed 05 Nov 2025 05:38:33 +0000 Manifest next update: Thu 06 Nov 2025 08:58:33 +0000 Files and hashes: 1: 3133302e31322e39332e302f32342d3234203d3e203236393534.roa (hash: vVLMMj/up4t8BoR2x4+9T6jLFKzm1RRXCwaLQiGBGUU=) 2: 323630323a663764653a3a2f34302d3438203d3e203236393534.roa (hash: nc0OfcCKdw/6xTqKkcylPBA4tjafxEa+iXIGeRNqKAA=) 3: 3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl (hash: BU+fHqGhQ9TiuFSnr75bhLaLJRmm7d9pmz2ge2Ys8lk=) 4: 32332e3139312e34302e302f32342d3234203d3e203236393534.roa (hash: S3jzo3eG6y4PI2K8QRCs4He73uG95vDRz8jaxjn2rIA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 08:58:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:5b:c1:4e:b0:1c:e0:e6:41:99:30:54:28:67:eb:c0:d6:b2:1a:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b Validity Not Before: Nov 5 05:38:33 2025 GMT Not After : Nov 6 08:58:33 2025 GMT Subject: CN=4894CF234BBD3F49EA1B3E4C37DE408272DB11DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e9:78:4e:0a:03:98:ef:e8:21:22:ee:ee:8f: 1e:bf:f9:77:be:47:5c:23:02:cd:6b:1c:70:21:a7: f7:36:95:8e:0e:d2:cc:a0:ee:35:c8:26:eb:8a:0d: f4:d2:38:98:a3:70:3c:62:72:cc:7b:d9:9b:f4:a3: 5c:a5:dd:5c:83:5c:9b:4c:29:c5:be:ee:0f:51:f3: b9:10:0c:28:2c:1a:4e:9a:ca:40:30:ce:42:f0:36: 8e:66:93:fa:f2:26:03:47:44:4b:01:a7:36:5b:33: 07:3c:0e:a8:14:5d:82:b1:37:0d:87:13:bd:7f:a7: c6:9a:fb:c3:93:14:e6:1e:00:a7:a2:7b:11:aa:1f: 2a:fc:d6:b4:2a:13:8c:d3:a4:15:a5:e9:95:8f:8d: bf:9e:e1:db:c7:18:4d:53:fe:ab:cd:1d:07:fa:32: ef:79:d2:5c:35:c3:fc:8f:a3:c8:cf:36:94:09:d6: aa:30:68:80:f5:85:ca:9a:0d:0e:98:7a:75:70:4a: 13:2c:62:16:ca:0d:8a:95:c8:a9:4f:23:54:cc:f1: 37:f6:3e:1f:5b:03:4c:b4:72:26:56:49:c7:8c:dd: da:01:e0:32:eb:90:1f:e7:17:00:1a:b7:3f:b7:db: 49:d8:e7:92:91:f7:e7:14:8e:9f:b6:a5:57:e3:80: ca:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:94:CF:23:4B:BD:3F:49:EA:1B:3E:4C:37:DE:40:82:72:DB:11:DB X509v3 Authority Key Identifier: keyid:3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:7d:5d:b6:e6:6f:02:4a:df:eb:3a:52:f5:8c:9b:f1:cf:07: e7:03:e8:f8:21:04:26:97:46:5d:6f:f8:33:5f:ff:71:d4:43: 69:d1:83:d1:e5:ac:73:11:90:b1:53:70:08:c4:53:a1:43:a6: 95:6f:2b:db:30:7a:cc:eb:04:91:85:a0:78:86:01:7b:a9:76: 9d:7f:92:de:a8:2a:6a:a9:e5:b4:9e:3f:43:88:21:93:8f:d6: 45:ea:b2:ba:e4:97:4d:b6:d4:d2:cb:67:a7:bd:59:2c:b9:90: 11:49:3c:a0:a8:1d:00:99:39:0c:51:b8:f4:90:27:99:4c:ba: 6d:70:f9:90:6b:f1:ec:e8:ee:bd:75:77:72:1a:cf:19:40:bc: 38:e7:0f:5b:30:ba:64:a3:69:39:59:f9:b5:13:d9:85:d9:df: 4d:d2:59:63:b0:07:56:71:d0:95:6b:4d:30:2c:a2:0b:5b:94: 73:e8:5b:49:02:c2:2a:43:43:63:e2:ca:21:03:a5:ae:d6:1e: f1:32:f6:6f:74:b5:41:92:99:4d:ab:90:9d:f6:98:19:e6:8b: 84:d5:7f:34:70:1e:e6:c8:4f:89:de:49:23:72:20:7a:e7:17: 79:e3:1a:e1:25:aa:75:95:ea:c6:9d:3c:5d:9b:50:2a:25:67: 08:1d:94:b8 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUYFvBTrAc4OZBmTBUKGfrwNayGmIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMzI0ZmZlMzlhOThhMDE0NmI1MDNkOGEwMTVjYTJjMmU3 NjdjZjNkMGI5ZmRlNjIzMWIwHhcNMjUxMTA1MDUzODMzWhcNMjUxMTA2MDg1ODMz WjAzMTEwLwYDVQQDEyg0ODk0Q0YyMzRCQkQzRjQ5RUExQjNFNEMzN0RFNDA4Mjcy REIxMURCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+l4TgoDmO/o ISLu7o8ev/l3vkdcIwLNaxxwIaf3NpWODtLMoO41yCbrig300jiYo3A8YnLMe9mb 9KNcpd1cg1ybTCnFvu4PUfO5EAwoLBpOmspAMM5C8DaOZpP68iYDR0RLAac2WzMH PA6oFF2CsTcNhxO9f6fGmvvDkxTmHgCnonsRqh8q/Na0KhOM06QVpemVj42/nuHb xxhNU/6rzR0H+jLvedJcNcP8j6PIzzaUCdaqMGiA9YXKmg0OmHp1cEoTLGIWyg2K lcipTyNUzPE39j4fWwNMtHImVknHjN3aAeAy65Af5xcAGrc/t9tJ2OeSkffnFI6f tqVX44DKMwIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFEiUzyNLvT9J6hs+TDfeQIJy 2xHbMB8GA1UdIwQYMBaAFD/NOoOeoUF/2Yjz3f0EVBl/qvR6MA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5 LTBhYjcwZTQ4MTViYi8xLzNGQ0QzQTgzOUVBMTQxN0ZEOTg4RjNEREZEMDQ1NDE5 N0ZBQUY0N0EuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYt NDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81MWNkOTlmNy0yZjQyLTRkZWMtYjJjNi0w OWJhZmFhMzc4MGUvMzI0ZmZlMzlhOThhMDE0NmI1MDNkOGEwMTVjYTJjMmU3Njdj ZjNkMGI5ZmRlNjIzMWIuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv NzNiOGVjMDEtOGJhNS00NzlmLWEyMjktMGFiNzBlNDgxNWJiLzEvM0ZDRDNBODM5 RUExNDE3RkQ5ODhGM0RERkQwNDU0MTk3RkFBRjQ3QS5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIx9Xbbm bwJK3+s6UvWMm/HPB+cD6PghBCaXRl1v+DNf/3HUQ2nRg9HlrHMRkLFTcAjEU6FD ppVvK9sweszrBJGFoHiGAXupdp1/kt6oKmqp5bSeP0OIIZOP1kXqsrrkl0221NLL Z6e9WSy5kBFJPKCoHQCZOQxRuPSQJ5lMum1w+ZBr8ezo7r11d3IazxlAvDjnD1sw umSjaTlZ+bUT2YXZ303SWWOwB1Zx0JVrTTAsogtblHPoW0kCwipDQ2PiyiEDpa7W HvEy9m90tUGSmU2rkJ32mBnmi4TVfzRwHubIT4neSSNyIHrnF3njGuElqnWV6sad PF2bUColZwgdlLg= -----END CERTIFICATE-----Generated at Wed Nov 5 08:53:28 2025 by rpki-client