$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft File: 3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft (raw, json) Hash identifier: cMSJ6e2NTykYNsL7rsvSx5cQM5RGPadPCQir4XEzevs= Subject key identifier: 3B:3B:F0:D0:29:1D:95:B4:D1:13:C2:B5:25:15:09:A0:CD:8F:74:DC Authority key identifier: 3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A Certificate issuer: /CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b Certificate serial: 4FB58D5BF6C7BACAB00201C263F6527F0B2129FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft Manifest number: 0182 Signing time: Mon 04 Aug 2025 16:09:37 +0000 Manifest this update: Mon 04 Aug 2025 16:04:37 +0000 Manifest next update: Tue 05 Aug 2025 16:35:37 +0000 Files and hashes: 1: 3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl (hash: tzoVWBO4AVn4LIm0qzg06ea4DEfrw9wYdEuxzEuUYP0=) 2: 323630323a663764653a3a2f34302d3438203d3e203236393534.roa (hash: dVW6ZUsxUgXCaz0kq7P1NzZswddC3cxPIFG0EovOzUk=) 3: 32332e3139312e34302e302f32342d3234203d3e203236393534.roa (hash: lO4v+9qZpYNTU13Fx5YYbE7NTGKX+3JJpxrHn0W/uvQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:35:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:b5:8d:5b:f6:c7:ba:ca:b0:02:01:c2:63:f6:52:7f:0b:21:29:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b Validity Not Before: Aug 4 16:04:37 2025 GMT Not After : Aug 5 16:35:37 2025 GMT Subject: CN=3B3BF0D0291D95B4D113C2B5251509A0CD8F74DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:19:df:19:c4:59:fc:6f:b5:63:fc:47:bd:e4: bf:7a:75:46:a6:d4:ff:1c:9b:ce:12:03:45:bd:de: 02:8a:7f:fa:b3:d3:bf:6e:c5:b4:b2:6f:16:b8:94: 61:2a:22:74:0a:cc:d5:8c:ed:bf:a4:3d:a6:37:9a: aa:84:c7:92:29:9c:7f:49:01:d0:0a:b3:34:1c:c1: 98:8e:9d:55:e4:14:6c:5e:1e:96:52:e6:92:8c:ba: a5:ff:03:46:31:2f:68:5b:c2:2c:d2:f8:1d:75:8c: 6f:2e:e6:f9:74:5e:17:f0:65:2f:85:fd:8e:c5:18: 99:2a:01:09:a4:ad:d7:8b:05:9c:2d:9d:bb:b9:77: 05:99:23:d1:3e:a6:10:fc:88:90:ab:c6:51:46:47: 1a:e0:ea:8a:3e:e7:23:e8:d5:18:26:6f:08:1b:21: a7:c9:4b:48:60:df:1f:06:60:16:1e:20:06:05:3f: 47:54:8c:ac:13:97:cd:e2:cd:4c:33:77:98:36:f2: 7e:db:dd:93:04:e2:67:85:5a:81:14:22:d5:b6:09: d6:78:94:4a:4c:5b:41:b8:7d:63:5d:e9:3f:dc:d7: eb:a4:62:ed:14:e6:72:a5:fe:9d:df:b6:fe:38:3f: f8:f4:a6:87:4d:ec:22:f1:38:ac:7c:34:b8:15:46: 88:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:3B:F0:D0:29:1D:95:B4:D1:13:C2:B5:25:15:09:A0:CD:8F:74:DC X509v3 Authority Key Identifier: keyid:3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:1f:34:85:1f:43:fc:78:f1:53:1c:8c:84:aa:40:33:d5:16: 2a:82:30:17:92:02:61:a0:08:71:04:a7:15:ca:e5:86:72:92: ff:66:30:04:79:df:81:5a:db:ee:5a:66:50:ec:3a:60:68:4a: 70:60:ce:56:a3:f0:d3:73:88:d8:77:5e:46:0d:94:25:5a:69: 93:61:01:be:62:9c:a1:22:14:b4:78:db:3a:56:b7:e1:63:72: 29:6b:6a:e1:f8:ee:84:a2:94:6a:88:02:31:f6:9a:2e:64:70: a9:51:e6:8a:a6:67:b9:f8:99:eb:d5:59:0d:18:6b:9c:4d:19: 0c:48:99:8a:3c:c6:35:c9:21:35:75:68:b8:d2:05:c9:52:4e: 71:2c:20:1e:88:17:59:0d:66:01:11:20:7b:1b:ce:a8:be:9c: d5:26:d3:01:be:cb:db:c8:fb:7f:db:6c:e1:ba:dd:ea:00:74: 16:95:ef:e1:33:e7:71:65:47:f4:13:68:b1:90:ea:b5:43:7b: 12:ca:e0:69:8d:c2:8a:53:92:6a:3f:08:c5:a3:ea:4c:d9:7f: 1c:e4:74:fb:5f:57:cb:08:f6:7a:91:30:49:94:4e:71:a4:c0: e9:a1:b5:67:a3:b4:9c:e5:f3:d6:c4:25:f7:1a:32:be:b6:5b: 0c:aa:33:c6 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUT7WNW/bHusqwAgHCY/ZSfwshKfwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMzI0ZmZlMzlhOThhMDE0NmI1MDNkOGEwMTVjYTJjMmU3 NjdjZjNkMGI5ZmRlNjIzMWIwHhcNMjUwODA0MTYwNDM3WhcNMjUwODA1MTYzNTM3 WjAzMTEwLwYDVQQDEygzQjNCRjBEMDI5MUQ5NUI0RDExM0MyQjUyNTE1MDlBMENE OEY3NERDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBnfGcRZ/G+1 Y/xHveS/enVGptT/HJvOEgNFvd4Cin/6s9O/bsW0sm8WuJRhKiJ0CszVjO2/pD2m N5qqhMeSKZx/SQHQCrM0HMGYjp1V5BRsXh6WUuaSjLql/wNGMS9oW8Is0vgddYxv Lub5dF4X8GUvhf2OxRiZKgEJpK3XiwWcLZ27uXcFmSPRPqYQ/IiQq8ZRRkca4OqK Pucj6NUYJm8IGyGnyUtIYN8fBmAWHiAGBT9HVIysE5fN4s1MM3eYNvJ+292TBOJn hVqBFCLVtgnWeJRKTFtBuH1jXek/3NfrpGLtFOZypf6d37b+OD/49KaHTewi8Tis fDS4FUaIVwIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFDs78NApHZW00RPCtSUVCaDN j3TcMB8GA1UdIwQYMBaAFD/NOoOeoUF/2Yjz3f0EVBl/qvR6MA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5 LTBhYjcwZTQ4MTViYi8xLzNGQ0QzQTgzOUVBMTQxN0ZEOTg4RjNEREZEMDQ1NDE5 N0ZBQUY0N0EuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYt NDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81MWNkOTlmNy0yZjQyLTRkZWMtYjJjNi0w OWJhZmFhMzc4MGUvMzI0ZmZlMzlhOThhMDE0NmI1MDNkOGEwMTVjYTJjMmU3Njdj ZjNkMGI5ZmRlNjIzMWIuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv NzNiOGVjMDEtOGJhNS00NzlmLWEyMjktMGFiNzBlNDgxNWJiLzEvM0ZDRDNBODM5 RUExNDE3RkQ5ODhGM0RERkQwNDU0MTk3RkFBRjQ3QS5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFAfNIUf Q/x48VMcjISqQDPVFiqCMBeSAmGgCHEEpxXK5YZykv9mMAR534Fa2+5aZlDsOmBo SnBgzlaj8NNziNh3XkYNlCVaaZNhAb5inKEiFLR42zpWt+FjcilrauH47oSilGqI AjH2mi5kcKlR5oqmZ7n4mevVWQ0Ya5xNGQxImYo8xjXJITV1aLjSBclSTnEsIB6I F1kNZgERIHsbzqi+nNUm0wG+y9vI+3/bbOG63eoAdBaV7+Ez53FlR/QTaLGQ6rVD exLK4GmNwopTkmo/CMWj6kzZfxzkdPtfV8sI9nqRMEmUTnGkwOmhtWejtJzl89bE JfcaMr62WwyqM8Y= -----END CERTIFICATE-----Generated at Tue Aug 5 08:13:09 2025 by rpki-client