$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.mft File: D70A91D89E34C7A20009B1E160FB6C627063630C.mft (raw, json) Hash identifier: Pg5Xu9f0V0uAKVBXBfHL7byL1elOzoGzsRr7oodCMDU= Subject key identifier: 02:5D:31:4B:1A:77:AA:1C:E5:E2:66:7D:3E:5D:F9:F7:81:72:C3:B3 Authority key identifier: D7:0A:91:D8:9E:34:C7:A2:00:09:B1:E1:60:FB:6C:62:70:63:63:0C Certificate issuer: /CN=ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d Certificate serial: 1B6E103E35107B41496BB16B3DE09D4E3FAB0A5D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.mft Manifest number: 0222 Signing time: Tue 05 Aug 2025 21:43:46 +0000 Manifest this update: Tue 05 Aug 2025 21:38:46 +0000 Manifest next update: Thu 07 Aug 2025 00:00:46 +0000 Files and hashes: 1: 32332e3138332e3133362e302f32342d3234203d3e2030.roa (hash: swtuTdCu9qwtIFReZr0cVz+AYUZ4/a/i2nv3LPMJAJ8=) 2: 323630323a663838323a3a2f33362d3438203d3e20343031323138.roa (hash: Dizjuv2g3xNyGUDZ8X1oRA6GQacDJJP6dGAQzPkf04o=) 3: D70A91D89E34C7A20009B1E160FB6C627063630C.crl (hash: jmitYQf0nUQumvG3ClJogkVCm1aHLui6TZiYCJvEqoo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.crl rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 00:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:6e:10:3e:35:10:7b:41:49:6b:b1:6b:3d:e0:9d:4e:3f:ab:0a:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d Validity Not Before: Aug 5 21:38:46 2025 GMT Not After : Aug 7 00:00:46 2025 GMT Subject: CN=025D314B1A77AA1CE5E2667D3E5DF9F78172C3B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:2f:7a:fe:e7:01:a2:f9:be:f0:4e:4d:1f:a4: 61:c7:c7:cf:02:a2:46:02:cb:eb:50:90:a5:6f:4e: 6e:68:3f:4e:a8:f5:1e:fb:c5:4e:aa:20:55:8a:fe: 3a:fc:9d:1b:32:9e:49:95:a9:77:2d:52:73:74:8a: a1:8f:0b:53:a8:50:d2:a1:0f:0a:88:2c:42:a3:5d: 2b:a6:95:d4:0f:04:1c:c1:83:79:10:0d:7c:6f:de: c5:2f:2e:3e:7a:42:2b:f0:5c:b7:6f:54:62:14:88: d4:47:58:a1:2e:20:f6:fd:3e:3e:30:d5:0e:f6:a3: 69:e3:83:99:fb:ce:df:79:64:7f:03:bb:d5:40:5d: 0f:ab:9b:54:21:71:94:ed:ce:88:10:65:cd:7e:1f: 68:4e:e2:b1:03:fb:12:e8:ff:a7:77:09:38:05:0b: ed:86:68:fe:10:93:28:b1:30:de:cc:be:f6:77:e8: 04:51:37:19:46:4d:a1:b0:9f:02:cf:62:f3:2e:eb: 90:e3:e1:24:ef:81:61:6d:35:d3:47:e9:96:9c:f7: 08:e8:9e:bb:45:1c:fe:9b:b1:0c:32:1b:86:8f:96: ae:0f:72:64:b7:ff:69:d4:c2:28:8e:07:d8:2b:ee: 79:ce:fa:bf:fe:e2:65:8d:2d:ca:21:7c:19:da:85: a1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:5D:31:4B:1A:77:AA:1C:E5:E2:66:7D:3E:5D:F9:F7:81:72:C3:B3 X509v3 Authority Key Identifier: keyid:D7:0A:91:D8:9E:34:C7:A2:00:09:B1:E1:60:FB:6C:62:70:63:63:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:4b:3e:8b:74:cf:f6:b9:61:b4:a0:b1:b0:17:3d:62:4b:32: e2:38:e5:bd:99:27:77:0d:a4:c9:a4:d1:64:83:b6:34:89:cf: 4b:93:44:90:d2:98:f0:a8:3e:ab:50:23:d8:b4:b3:9c:85:d8: cf:1a:82:5c:91:68:16:fe:ac:bb:09:70:4a:d7:6c:33:8c:76: 17:6e:65:61:7e:58:63:8e:7b:99:ad:32:89:23:0d:ea:0d:27: f6:70:73:3f:46:91:2a:12:b7:94:bf:ee:d4:6d:01:95:07:47: 5c:fc:7b:64:53:0a:9c:77:57:63:e4:1c:d8:cd:74:30:43:5b: 98:da:0a:7c:91:6f:8a:16:a8:8f:4c:ae:2c:9f:f7:1e:4b:b7: 2e:1e:88:53:2c:d3:04:d8:ed:65:97:02:60:be:86:e3:af:6a: fb:b2:02:f1:7f:d3:e7:1b:09:ea:43:11:df:58:0e:39:04:11: dd:9c:91:e0:fa:62:72:fc:7a:35:a8:84:09:8f:b0:e0:31:c5: ae:37:0e:7d:3d:02:d0:28:1d:86:b8:6d:c5:26:24:d1:aa:d7: 87:59:67:62:5e:ef:8c:90:0c:59:86:25:68:57:6b:f5:00:99: bc:17:9e:a0:0f:c4:31:51:44:61:aa:ae:e0:2f:84:40:f0:c6: e0:c2:8a:0e -----BEGIN CERTIFICATE----- MIIF2zCCBMOgAwIBAgIUG24QPjUQe0FJa7FrPeCdTj+rCl0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYmE1OWMxNWI5Nzc3YTRhNTI3MGM5YjdhNTg0ZTQ2OTc4 ZTA5YTdiZDJkMTU0YmZhOWQwHhcNMjUwODA1MjEzODQ2WhcNMjUwODA3MDAwMDQ2 WjAzMTEwLwYDVQQDEygwMjVEMzE0QjFBNzdBQTFDRTVFMjY2N0QzRTVERjlGNzgx NzJDM0IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8i96/ucBovm+ 8E5NH6Rhx8fPAqJGAsvrUJClb05uaD9OqPUe+8VOqiBViv46/J0bMp5Jlal3LVJz dIqhjwtTqFDSoQ8KiCxCo10rppXUDwQcwYN5EA18b97FLy4+ekIr8Fy3b1RiFIjU R1ihLiD2/T4+MNUO9qNp44OZ+87feWR/A7vVQF0Pq5tUIXGU7c6IEGXNfh9oTuKx A/sS6P+ndwk4BQvthmj+EJMosTDezL72d+gEUTcZRk2hsJ8Cz2LzLuuQ4+Ek74Fh bTXTR+mWnPcI6J67RRz+m7EMMhuGj5auD3Jkt/9p1MIojgfYK+55zvq//uJljS3K IXwZ2oWhuwIDAQABo4IC2zCCAtcwHQYDVR0OBBYEFAJdMUsad6oc5eJmfT5d+feB csOzMB8GA1UdIwQYMBaAFNcKkdieNMeiAAmx4WD7bGJwY2MMMA4GA1UdDwEB/wQE AwIHgDCBlwYDVR0fBIGPMIGMMIGJoIGGoIGDhoGAcnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZTZlZGVlYy0wOGJhLTRjZGUtODk3 OS00ZmFlYTRiMWJjMTIvMjAvRDcwQTkxRDg5RTM0QzdBMjAwMDlCMUUxNjBGQjZD NjI3MDYzNjMwQy5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB 03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlm MC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzMyNjE5ZmY5LTRhNDYtNGU5My1hOWI1 LWRkYTJhMzNhOWZmZC9iYTU5YzE1Yjk3NzdhNGE1MjcwYzliN2E1ODRlNDY5Nzhl MDlhN2JkMmQxNTRiZmE5ZC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEF BQcwC4aBgHJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvYWU2ZWRlZWMtMDhiYS00Y2RlLTg5NzktNGZhZWE0YjFiYzEyLzIwL0Q3MEE5 MUQ4OUUzNEM3QTIwMDA5QjFFMTYwRkI2QzYyNzA2MzYzMEMubWZ0MBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQC AAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBL Sz6LdM/2uWG0oLGwFz1iSzLiOOW9mSd3DaTJpNFkg7Y0ic9Lk0SQ0pjwqD6rUCPY tLOchdjPGoJckWgW/qy7CXBK12wzjHYXbmVhflhjjnuZrTKJIw3qDSf2cHM/RpEq EreUv+7UbQGVB0dc/HtkUwqcd1dj5BzYzXQwQ1uY2gp8kW+KFqiPTK4sn/ceS7cu HohTLNME2O1llwJgvobjr2r7sgLxf9PnGwnqQxHfWA45BBHdnJHg+mJy/Ho1qIQJ j7DgMcWuNw59PQLQKB2GuG3FJiTRqteHWWdiXu+MkAxZhiVoV2v1AJm8F56gD8Qx UURhqq7gL4RA8MbgwooO -----END CERTIFICATE-----Generated at Wed Aug 6 04:09:17 2025 by rpki-client