$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.mft File: D70A91D89E34C7A20009B1E160FB6C627063630C.mft (raw, json) Hash identifier: GXwrGosDWPAp3O4V0JBmuYdMy00ReiK6quIC9c1VU0A= Subject key identifier: C1:59:86:FF:C9:D4:D9:06:5F:77:F5:DD:F4:0E:78:2F:15:07:4B:FC Authority key identifier: D7:0A:91:D8:9E:34:C7:A2:00:09:B1:E1:60:FB:6C:62:70:63:63:0C Certificate issuer: /CN=ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d Certificate serial: 64FAB7D8890100213F4B851C4C0DD99EE16A6081 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.mft Manifest number: 0298 Signing time: Wed 05 Nov 2025 01:28:20 +0000 Manifest this update: Wed 05 Nov 2025 01:23:20 +0000 Manifest next update: Thu 06 Nov 2025 01:50:20 +0000 Files and hashes: 1: 32332e3138332e3133362e302f32342d3234203d3e2030.roa (hash: swtuTdCu9qwtIFReZr0cVz+AYUZ4/a/i2nv3LPMJAJ8=) 2: 323630323a663838323a3a2f33362d3438203d3e20343031323138.roa (hash: Dizjuv2g3xNyGUDZ8X1oRA6GQacDJJP6dGAQzPkf04o=) 3: D70A91D89E34C7A20009B1E160FB6C627063630C.crl (hash: l2QthYA/z633KQe3fmKjCdLoGiA/TEtHIk4ZfPcRfQE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.crl rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:fa:b7:d8:89:01:00:21:3f:4b:85:1c:4c:0d:d9:9e:e1:6a:60:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d Validity Not Before: Nov 5 01:23:20 2025 GMT Not After : Nov 6 01:50:20 2025 GMT Subject: CN=C15986FFC9D4D9065F77F5DDF40E782F15074BFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:54:4c:ba:27:5a:cf:78:90:64:38:bc:2d:7a: 38:b1:51:7b:cd:cd:5a:8a:e6:ad:e8:a2:61:f8:6d: f8:4d:dc:f0:a7:92:85:7c:df:02:f3:d4:2c:77:d9: fe:5a:ba:4d:e1:74:c5:0d:a6:0f:6d:32:89:dc:52: 63:a4:13:e4:d8:7c:72:c2:0f:5b:ea:bf:a5:8a:06: 59:52:01:9d:a9:1c:2f:68:44:fb:9d:11:af:1c:43: eb:b1:c7:9a:6e:0f:f1:8d:e0:bd:c1:5c:c7:21:02: 04:65:51:be:9f:e6:5e:35:35:f2:19:19:42:ff:be: a5:56:5a:60:76:49:5b:88:11:ea:12:15:01:ec:b6: 3e:3e:1a:48:f1:f4:cf:14:0a:ae:ce:a3:40:17:99: 81:15:f1:4a:ee:3a:bf:3b:84:f0:0a:9d:33:e6:61: 59:74:47:97:1f:4a:7d:b3:6f:75:26:d4:16:6e:48: 19:eb:93:55:56:8d:90:05:f2:2c:6e:cf:5b:06:99: e0:55:45:5d:e8:9b:28:de:ac:9d:0c:fb:39:6b:6f: 6a:70:dd:97:82:14:05:03:6d:61:72:0b:ae:5b:fd: a5:81:d8:97:95:38:67:1e:fe:db:ec:af:88:e4:03: 75:5a:cb:49:a4:15:18:7b:14:1b:14:de:38:6c:5c: 06:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:59:86:FF:C9:D4:D9:06:5F:77:F5:DD:F4:0E:78:2F:15:07:4B:FC X509v3 Authority Key Identifier: keyid:D7:0A:91:D8:9E:34:C7:A2:00:09:B1:E1:60:FB:6C:62:70:63:63:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:ab:11:ff:fa:83:f0:03:0b:57:f2:52:1d:25:ba:94:a5:92: 18:8e:05:5f:0b:7b:e3:72:1b:66:aa:5c:87:c1:cf:0a:20:98: 4e:eb:c0:1e:82:73:fe:e3:81:54:8b:06:5b:ef:a0:67:04:0c: 17:cd:01:f7:33:1d:8e:95:ac:a3:e9:d9:4a:b3:e2:f5:09:c2: 3f:88:46:42:c3:28:dd:e2:65:89:de:90:be:ca:15:1e:03:6f: c6:77:a3:79:1c:6c:70:88:b6:b5:16:fb:d9:fc:54:d8:db:67: 2a:a5:a1:22:59:6c:44:e8:c6:75:a6:08:ce:56:79:5e:f8:59: a9:46:6c:c0:33:27:fb:8a:ea:f7:b5:b1:9a:43:ce:28:bb:f7: 92:c2:77:18:b9:bc:30:fd:71:25:86:70:ae:3e:f0:e1:4d:ec: 47:25:2f:bd:83:ce:5d:8a:33:4f:e3:0a:31:66:3b:c1:48:f1: 67:74:20:d9:47:13:61:25:f3:2b:1f:5e:4d:fc:03:51:7b:bb: 7c:5a:45:ba:a4:93:6f:b5:23:e6:5a:a0:80:b9:5c:df:25:8d: 74:b0:e8:6e:43:6a:23:44:c8:97:32:ef:ae:f0:57:8e:b5:0a: be:0c:f0:08:42:8b:84:1b:f0:37:f8:4c:84:43:94:eb:5c:11: 59:ff:22:09 -----BEGIN CERTIFICATE----- MIIF2zCCBMOgAwIBAgIUZPq32IkBACE/S4UcTA3ZnuFqYIEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYmE1OWMxNWI5Nzc3YTRhNTI3MGM5YjdhNTg0ZTQ2OTc4 ZTA5YTdiZDJkMTU0YmZhOWQwHhcNMjUxMTA1MDEyMzIwWhcNMjUxMTA2MDE1MDIw WjAzMTEwLwYDVQQDEyhDMTU5ODZGRkM5RDREOTA2NUY3N0Y1RERGNDBFNzgyRjE1 MDc0QkZDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4FRMuidaz3iQ ZDi8LXo4sVF7zc1aiuat6KJh+G34Tdzwp5KFfN8C89Qsd9n+WrpN4XTFDaYPbTKJ 3FJjpBPk2Hxywg9b6r+ligZZUgGdqRwvaET7nRGvHEPrsceabg/xjeC9wVzHIQIE ZVG+n+ZeNTXyGRlC/76lVlpgdklbiBHqEhUB7LY+PhpI8fTPFAquzqNAF5mBFfFK 7jq/O4TwCp0z5mFZdEeXH0p9s291JtQWbkgZ65NVVo2QBfIsbs9bBpngVUVd6Jso 3qydDPs5a29qcN2XghQFA21hcguuW/2lgdiXlThnHv7b7K+I5AN1WstJpBUYexQb FN44bFwGSwIDAQABo4IC2zCCAtcwHQYDVR0OBBYEFMFZhv/J1NkGX3f13fQOeC8V B0v8MB8GA1UdIwQYMBaAFNcKkdieNMeiAAmx4WD7bGJwY2MMMA4GA1UdDwEB/wQE AwIHgDCBlwYDVR0fBIGPMIGMMIGJoIGGoIGDhoGAcnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZTZlZGVlYy0wOGJhLTRjZGUtODk3 OS00ZmFlYTRiMWJjMTIvMjAvRDcwQTkxRDg5RTM0QzdBMjAwMDlCMUUxNjBGQjZD NjI3MDYzNjMwQy5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB 03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlm MC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzMyNjE5ZmY5LTRhNDYtNGU5My1hOWI1 LWRkYTJhMzNhOWZmZC9iYTU5YzE1Yjk3NzdhNGE1MjcwYzliN2E1ODRlNDY5Nzhl MDlhN2JkMmQxNTRiZmE5ZC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEF BQcwC4aBgHJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvYWU2ZWRlZWMtMDhiYS00Y2RlLTg5NzktNGZhZWE0YjFiYzEyLzIwL0Q3MEE5 MUQ4OUUzNEM3QTIwMDA5QjFFMTYwRkI2QzYyNzA2MzYzMEMubWZ0MBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQC AAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC+ qxH/+oPwAwtX8lIdJbqUpZIYjgVfC3vjchtmqlyHwc8KIJhO68AegnP+44FUiwZb 76BnBAwXzQH3Mx2Olayj6dlKs+L1CcI/iEZCwyjd4mWJ3pC+yhUeA2/Gd6N5HGxw iLa1FvvZ/FTY22cqpaEiWWxE6MZ1pgjOVnle+FmpRmzAMyf7iur3tbGaQ84ou/eS wncYubww/XElhnCuPvDhTexHJS+9g85dijNP4woxZjvBSPFndCDZRxNhJfMrH15N /ANRe7t8WkW6pJNvtSPmWqCAuVzfJY10sOhuQ2ojRMiXMu+u8FeOtQq+DPAIQouE G/A3+EyEQ5TrXBFZ/yIJ -----END CERTIFICATE-----Generated at Wed Nov 5 07:12:05 2025 by rpki-client