$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.mft File: D70A91D89E34C7A20009B1E160FB6C627063630C.mft (raw, json) Hash identifier: d2jxVwg5QyO+Il0H7TSMMMu8UPv/I7ZP/3Y88oRUXxE= Subject key identifier: 68:98:5D:25:4F:55:D1:BC:BA:18:33:60:A5:F0:AB:BE:D2:F0:48:67 Authority key identifier: D7:0A:91:D8:9E:34:C7:A2:00:09:B1:E1:60:FB:6C:62:70:63:63:0C Certificate issuer: /CN=ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d Certificate serial: 6EAA5BACD1F8744D380BFF6ECE999218ED20C947 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.mft Manifest number: 019A Signing time: Sat 26 Apr 2025 10:47:00 +0000 Manifest this update: Sat 26 Apr 2025 10:42:00 +0000 Manifest next update: Sun 27 Apr 2025 13:18:00 +0000 Files and hashes: 1: 32332e3138332e3133362e302f32342d3234203d3e2030.roa (hash: swtuTdCu9qwtIFReZr0cVz+AYUZ4/a/i2nv3LPMJAJ8=) 2: 323630323a663838323a3a2f33362d3438203d3e20343031323138.roa (hash: 7+OQpnNul6GvEz/TmHkQD01IKA9VIbWseT8LVp2j0nw=) 3: D70A91D89E34C7A20009B1E160FB6C627063630C.crl (hash: RquNJ8f1UCr9GagvnMW0oSuxrabvjjY3nwMVzdpp6Lg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.crl rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 13:18:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:aa:5b:ac:d1:f8:74:4d:38:0b:ff:6e:ce:99:92:18:ed:20:c9:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d Validity Not Before: Apr 26 10:42:00 2025 GMT Not After : Apr 27 13:18:00 2025 GMT Subject: CN=68985D254F55D1BCBA183360A5F0ABBED2F04867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f1:fe:e3:0c:0f:a7:ed:46:26:cb:f4:47:c7: 63:3e:50:c4:5e:f5:7a:1f:f5:64:b0:99:ba:96:b7: bc:26:66:be:e1:5f:0a:99:95:11:37:e8:56:e3:e6: 1c:84:02:46:62:ce:31:fb:e2:28:25:bf:76:a0:d2: b9:c3:43:16:4e:a6:6e:04:e1:88:49:4a:6a:2c:4d: a3:94:0f:ae:63:bd:03:9d:7c:69:da:02:c0:80:d7: 63:11:4b:68:1e:c2:a1:7f:37:ec:8b:c1:8c:ba:c3: 9a:bf:5a:64:d8:a0:db:93:32:6d:e4:b8:7a:85:54: a7:67:1a:4b:e0:1f:91:ad:37:75:84:b9:69:9f:d6: ce:4a:84:db:8f:e4:d8:d6:ee:db:f6:d3:e9:34:0e: 58:24:ce:3b:90:8b:65:35:b4:83:d5:2b:fd:bf:b1: 68:6f:b9:3c:82:55:9a:e6:b9:ae:fe:bd:6f:ed:af: a7:0a:58:4c:7c:e9:3f:93:87:64:68:51:f1:60:fb: 48:96:b0:57:09:25:da:e6:af:d3:22:1c:49:33:51: 74:4d:96:34:17:6f:b2:66:ee:4b:62:7d:7b:ce:89: 6d:70:50:a7:66:c1:9c:7f:1d:0b:b5:0d:a8:9b:34: d7:88:bc:91:1d:ee:36:d4:98:bf:60:66:15:e0:3c: 9a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:98:5D:25:4F:55:D1:BC:BA:18:33:60:A5:F0:AB:BE:D2:F0:48:67 X509v3 Authority Key Identifier: keyid:D7:0A:91:D8:9E:34:C7:A2:00:09:B1:E1:60:FB:6C:62:70:63:63:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:23:75:83:43:a5:47:7e:44:25:d1:2a:29:6c:6c:20:a1:5e: 9a:95:bc:72:3e:de:0d:ec:e7:78:4e:63:c0:42:bb:a9:9a:e9: ad:63:dd:05:40:f9:ef:5c:66:25:14:ab:a0:36:7f:f5:ef:d8: 64:b3:67:51:7f:58:ac:5c:f5:6e:76:02:c5:ae:2d:b8:c8:85: f4:e7:46:39:eb:a3:99:24:2e:b7:ad:15:c1:9d:13:6a:64:41: 13:0f:f2:78:01:9b:2c:ff:26:ee:b8:24:16:cf:3d:27:b0:cb: dd:df:b4:70:85:2a:ba:8c:76:d0:f6:9f:20:98:06:db:54:50: 4c:e5:2c:26:b6:be:ff:a7:af:ec:b1:0b:2c:b3:8a:a2:d2:f4: 4a:e1:f0:36:85:e9:77:54:61:25:b7:94:93:85:af:91:d3:6a: 62:22:41:20:03:e9:b1:7c:40:33:c3:67:d6:76:cf:35:29:28: 5e:12:5e:36:9c:3e:3d:07:be:f7:bb:84:75:cf:7b:0a:f6:bc: 05:97:33:18:c9:1d:5f:5a:a6:c8:a8:b7:43:ca:17:a2:47:22: dd:72:bf:3f:a8:63:3d:45:19:1a:1c:05:8c:ad:0d:bc:a9:7c: 88:b7:2e:13:e3:4a:61:b3:ea:6a:1a:5b:11:6e:a9:98:c2:bf: 55:d7:68:00 -----BEGIN CERTIFICATE----- MIIF2zCCBMOgAwIBAgIUbqpbrNH4dE04C/9uzpmSGO0gyUcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYmE1OWMxNWI5Nzc3YTRhNTI3MGM5YjdhNTg0ZTQ2OTc4 ZTA5YTdiZDJkMTU0YmZhOWQwHhcNMjUwNDI2MTA0MjAwWhcNMjUwNDI3MTMxODAw WjAzMTEwLwYDVQQDEyg2ODk4NUQyNTRGNTVEMUJDQkExODMzNjBBNUYwQUJCRUQy RjA0ODY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfH+4wwPp+1G Jsv0R8djPlDEXvV6H/VksJm6lre8Jma+4V8KmZURN+hW4+YchAJGYs4x++IoJb92 oNK5w0MWTqZuBOGISUpqLE2jlA+uY70DnXxp2gLAgNdjEUtoHsKhfzfsi8GMusOa v1pk2KDbkzJt5Lh6hVSnZxpL4B+RrTd1hLlpn9bOSoTbj+TY1u7b9tPpNA5YJM47 kItlNbSD1Sv9v7Fob7k8glWa5rmu/r1v7a+nClhMfOk/k4dkaFHxYPtIlrBXCSXa 5q/TIhxJM1F0TZY0F2+yZu5LYn17zoltcFCnZsGcfx0LtQ2omzTXiLyRHe421Ji/ YGYV4DyaqQIDAQABo4IC2zCCAtcwHQYDVR0OBBYEFGiYXSVPVdG8uhgzYKXwq77S 8EhnMB8GA1UdIwQYMBaAFNcKkdieNMeiAAmx4WD7bGJwY2MMMA4GA1UdDwEB/wQE AwIHgDCBlwYDVR0fBIGPMIGMMIGJoIGGoIGDhoGAcnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZTZlZGVlYy0wOGJhLTRjZGUtODk3 OS00ZmFlYTRiMWJjMTIvMjAvRDcwQTkxRDg5RTM0QzdBMjAwMDlCMUUxNjBGQjZD NjI3MDYzNjMwQy5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB 03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlm MC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzMyNjE5ZmY5LTRhNDYtNGU5My1hOWI1 LWRkYTJhMzNhOWZmZC9iYTU5YzE1Yjk3NzdhNGE1MjcwYzliN2E1ODRlNDY5Nzhl MDlhN2JkMmQxNTRiZmE5ZC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEF BQcwC4aBgHJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvYWU2ZWRlZWMtMDhiYS00Y2RlLTg5NzktNGZhZWE0YjFiYzEyLzIwL0Q3MEE5 MUQ4OUUzNEM3QTIwMDA5QjFFMTYwRkI2QzYyNzA2MzYzMEMubWZ0MBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQC AAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB5 I3WDQ6VHfkQl0SopbGwgoV6albxyPt4N7Od4TmPAQrupmumtY90FQPnvXGYlFKug Nn/179hks2dRf1isXPVudgLFri24yIX050Y566OZJC63rRXBnRNqZEETD/J4AZss /ybuuCQWzz0nsMvd37RwhSq6jHbQ9p8gmAbbVFBM5Swmtr7/p6/ssQsss4qi0vRK 4fA2hel3VGElt5STha+R02piIkEgA+mxfEAzw2fWds81KSheEl42nD49B773u4R1 z3sK9rwFlzMYyR1fWqbIqLdDyheiRyLdcr8/qGM9RRkaHAWMrQ28qXyIty4T40ph s+pqGlsRbqmYwr9V12gA -----END CERTIFICATE-----Generated at Sat Apr 26 20:22:59 2025 by rpki-client