$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft File: 3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft (raw, json) Hash identifier: YYGxxOIIxMKoaidAbenBHujvSVMO5haUEKuSPio4n48= Subject key identifier: F3:89:61:FA:E5:5B:FC:7D:C3:52:D8:A2:B3:50:4B:95:91:65:43:FC Authority key identifier: 3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A Certificate issuer: /CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b Certificate serial: 6D68FEA69C1A4B517F79DB73DB62E243DC340A48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft Manifest number: FE Signing time: Tue 29 Apr 2025 03:34:36 +0000 Manifest this update: Tue 29 Apr 2025 03:29:36 +0000 Manifest next update: Wed 30 Apr 2025 06:48:36 +0000 Files and hashes: 1: 32332e3139312e34302e302f32342d3234203d3e203236393534.roa (hash: lO4v+9qZpYNTU13Fx5YYbE7NTGKX+3JJpxrHn0W/uvQ=) 2: 3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl (hash: SZcgrLnZU5QgRcOzGXM9gZj3O0HbECGDGnL9hZMYOPo=) 3: 323630323a663764653a3a2f34302d3438203d3e203236393534.roa (hash: dVW6ZUsxUgXCaz0kq7P1NzZswddC3cxPIFG0EovOzUk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:48:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:68:fe:a6:9c:1a:4b:51:7f:79:db:73:db:62:e2:43:dc:34:0a:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b Validity Not Before: Apr 29 03:29:36 2025 GMT Not After : Apr 30 06:48:36 2025 GMT Subject: CN=F38961FAE55BFC7DC352D8A2B3504B95916543FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:6d:ef:dd:88:54:34:7e:e5:0d:d8:20:75:2c: 1b:b0:15:ec:2c:e6:e2:e9:e7:65:09:32:dc:17:e5: 6f:71:53:fd:60:d4:65:a9:18:c0:3c:6d:52:15:0c: 8c:48:dd:c3:1d:af:35:71:df:87:97:4d:9c:d6:b4: 8d:b4:43:ba:9f:93:8c:81:26:76:53:c3:0c:c6:f4: 0c:41:6f:75:f1:5a:8c:6c:f6:68:82:49:37:f3:9b: 9b:5c:f6:4f:ab:f9:65:81:8a:e2:46:d9:e7:83:3b: 80:a7:89:0e:ab:96:7a:80:dc:b2:b0:b4:64:ff:28: fc:6a:ea:ea:e0:6b:74:c9:5a:13:52:4a:3c:4b:a2: 43:13:b5:51:54:8d:37:3f:92:88:e3:2a:f3:30:cc: 69:c9:3f:93:0e:7a:8e:61:5b:18:cc:75:97:63:cf: 3d:af:75:c5:2c:b4:c2:fa:fb:1a:d8:c6:10:64:83: 98:50:3d:87:3f:f8:5b:8c:1c:ea:b9:4f:00:31:ba: 03:9a:ab:0f:be:42:09:6c:17:0b:58:0f:57:cb:ea: df:23:8f:e4:b7:e3:29:82:f4:28:fc:31:c4:a1:3e: b4:a3:46:bf:f8:0e:6b:89:87:35:3d:7c:3c:4a:a4: 50:3f:56:87:6a:36:69:6f:11:02:83:bb:0a:c2:29: 65:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:89:61:FA:E5:5B:FC:7D:C3:52:D8:A2:B3:50:4B:95:91:65:43:FC X509v3 Authority Key Identifier: keyid:3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:ff:7c:49:1d:6e:6a:1e:c3:ce:39:00:2d:b1:80:82:03:cc: 7b:38:f4:d5:a8:4f:1a:ce:1c:1e:f3:72:eb:61:34:98:dc:ab: f0:d3:87:7b:53:6f:ba:26:3b:9a:b8:b1:e8:09:bd:7a:d0:24: e7:82:62:a2:33:e6:e4:a9:3f:2d:6b:51:38:a0:41:05:4e:42: c7:63:af:ec:c3:2d:fb:70:34:30:92:67:e0:94:77:d6:86:1d: bc:c8:e4:fb:63:68:46:dc:df:66:17:80:e8:f2:30:2d:e2:4f: 5b:a4:40:49:03:19:a9:c1:e5:70:47:96:70:2f:de:a2:4d:b0: 6d:32:63:85:7f:a8:8b:de:07:be:a0:25:ab:b8:9d:25:0b:5f: 1f:8f:7f:0f:b0:f8:ad:9c:ed:4d:af:fa:d6:c0:b0:52:47:c5: 24:be:98:2d:eb:97:c0:de:38:95:5c:78:9f:4f:95:15:1e:da: 00:79:2a:2f:12:3d:40:da:41:67:47:f6:7e:0c:54:92:fc:c8: 09:d1:76:1f:87:95:01:df:bd:cc:d2:5b:32:5f:05:fc:4e:36: 29:c2:1b:52:ce:7a:74:4f:b3:f9:aa:89:81:88:cf:18:5f:c8: df:03:9e:f2:64:47:64:7e:c6:a0:cd:73:de:58:45:4a:a4:b5: 66:33:89:2d -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUbWj+ppwaS1F/edtz22LiQ9w0CkgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMzI0ZmZlMzlhOThhMDE0NmI1MDNkOGEwMTVjYTJjMmU3 NjdjZjNkMGI5ZmRlNjIzMWIwHhcNMjUwNDI5MDMyOTM2WhcNMjUwNDMwMDY0ODM2 WjAzMTEwLwYDVQQDEyhGMzg5NjFGQUU1NUJGQzdEQzM1MkQ4QTJCMzUwNEI5NTkx NjU0M0ZDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2m3v3YhUNH7l DdggdSwbsBXsLObi6edlCTLcF+VvcVP9YNRlqRjAPG1SFQyMSN3DHa81cd+Hl02c 1rSNtEO6n5OMgSZ2U8MMxvQMQW918VqMbPZogkk385ubXPZPq/llgYriRtnngzuA p4kOq5Z6gNyysLRk/yj8aurq4Gt0yVoTUko8S6JDE7VRVI03P5KI4yrzMMxpyT+T DnqOYVsYzHWXY889r3XFLLTC+vsa2MYQZIOYUD2HP/hbjBzquU8AMboDmqsPvkIJ bBcLWA9Xy+rfI4/kt+MpgvQo/DHEoT60o0a/+A5riYc1PXw8SqRQP1aHajZpbxEC g7sKwill7QIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFPOJYfrlW/x9w1LYorNQS5WR ZUP8MB8GA1UdIwQYMBaAFD/NOoOeoUF/2Yjz3f0EVBl/qvR6MA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5 LTBhYjcwZTQ4MTViYi8xLzNGQ0QzQTgzOUVBMTQxN0ZEOTg4RjNEREZEMDQ1NDE5 N0ZBQUY0N0EuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYt NDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81MWNkOTlmNy0yZjQyLTRkZWMtYjJjNi0w OWJhZmFhMzc4MGUvMzI0ZmZlMzlhOThhMDE0NmI1MDNkOGEwMTVjYTJjMmU3Njdj ZjNkMGI5ZmRlNjIzMWIuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv NzNiOGVjMDEtOGJhNS00NzlmLWEyMjktMGFiNzBlNDgxNWJiLzEvM0ZDRDNBODM5 RUExNDE3RkQ5ODhGM0RERkQwNDU0MTk3RkFBRjQ3QS5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAD3/fEkd bmoew845AC2xgIIDzHs49NWoTxrOHB7zcuthNJjcq/DTh3tTb7omO5q4segJvXrQ JOeCYqIz5uSpPy1rUTigQQVOQsdjr+zDLftwNDCSZ+CUd9aGHbzI5PtjaEbc32YX gOjyMC3iT1ukQEkDGanB5XBHlnAv3qJNsG0yY4V/qIveB76gJau4nSULXx+Pfw+w +K2c7U2v+tbAsFJHxSS+mC3rl8DeOJVceJ9PlRUe2gB5Ki8SPUDaQWdH9n4MVJL8 yAnRdh+HlQHfvczSWzJfBfxONinCG1LOenRPs/mqiYGIzxhfyN8DnvJkR2R+xqDN c95YRUqktWYziS0= -----END CERTIFICATE-----Generated at Tue Apr 29 11:47:08 2025 by rpki-client