$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft File: D74983C1FABA0CC1566F0601AFE11423E11B5171.mft (raw, json) Hash identifier: P1kwM7+cHWLkwmPkjRvTLBFCfmNljbMXPcpxTMu9Xbk= Subject key identifier: 79:8A:E7:96:23:4B:6E:F4:57:34:BA:72:79:2C:20:C4:D7:78:08:6B Authority key identifier: D7:49:83:C1:FA:BA:0C:C1:56:6F:06:01:AF:E1:14:23:E1:1B:51:71 Certificate issuer: /CN=4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c Certificate serial: 0148715CE1E5DC29C7301BB7972672863DB16A21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft Manifest number: 03DD Signing time: Mon 04 Aug 2025 13:43:40 +0000 Manifest this update: Mon 04 Aug 2025 13:38:40 +0000 Manifest next update: Tue 05 Aug 2025 15:28:40 +0000 Files and hashes: 1: 32332e3135332e3233322e302f32342d3234203d3e203539393933.roa (hash: mlyVBtqAxaep1RbpdRUfXUrnFdjKT6MGiKPIjo5bDE0=) 2: D74983C1FABA0CC1566F0601AFE11423E11B5171.crl (hash: GpmbpZVmX3ppnJx9WobpAXia88+vV20OP7T/VwthsIs=) 3: 323630323a666137613a3a2f34302d3438203d3e203539393933.roa (hash: xlMWcnMOkntkvkwmItiIw9KHDflxZx0Jsc2LELbETrw=) 4: 323630323a666137613a3a2f34302d3438203d3e203537383730.roa (hash: KXZ5ssTmjUClZY+9bglfiLRlAhs+b4BWP1fzlqp7SIY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.crl rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 15:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:48:71:5c:e1:e5:dc:29:c7:30:1b:b7:97:26:72:86:3d:b1:6a:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c Validity Not Before: Aug 4 13:38:40 2025 GMT Not After : Aug 5 15:28:40 2025 GMT Subject: CN=798AE796234B6EF45734BA72792C20C4D778086B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:49:8a:27:f3:db:58:1b:2e:b0:d2:e8:98:3a: 3d:8c:b7:1f:e4:99:42:49:b1:47:60:75:64:81:1d: 35:d4:71:bd:d6:28:87:8f:00:e8:24:5e:d8:43:bd: 83:49:cf:9e:27:56:c9:54:a1:bb:a7:9a:9e:19:9a: be:52:ba:d3:16:67:e1:67:65:48:12:9d:78:14:f6: 0d:c8:44:ec:43:f2:c8:67:67:5e:08:05:d2:8a:51: 0d:1b:9c:40:61:f1:24:12:e2:67:51:14:68:4a:21: 78:8d:61:5f:11:06:d9:e8:e5:fe:75:a2:7d:bf:f5: 84:74:00:8e:40:cb:df:83:8d:98:94:64:d5:7c:bb: 2c:64:1d:5d:35:10:52:71:47:10:0b:28:46:91:28: 4b:28:82:d1:bc:d0:7d:1b:97:2f:fe:68:77:a4:20: 7e:6e:1d:09:07:01:78:48:a1:50:08:e1:3b:a7:ea: 75:bf:37:d8:79:b5:53:31:bb:09:0c:61:5a:48:3a: 12:55:cc:6c:f6:74:b2:13:a9:e9:c6:7c:99:9a:79: 0f:59:5e:9a:94:6f:9c:f4:27:43:1a:1a:52:53:c3: 1a:4e:e1:96:a5:e3:ee:48:93:03:63:04:ff:4a:ec: 71:85:78:e3:33:42:37:00:0f:a3:50:21:91:f1:f4: 1a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:8A:E7:96:23:4B:6E:F4:57:34:BA:72:79:2C:20:C4:D7:78:08:6B X509v3 Authority Key Identifier: keyid:D7:49:83:C1:FA:BA:0C:C1:56:6F:06:01:AF:E1:14:23:E1:1B:51:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:c0:38:dd:b6:98:35:61:d4:3c:cd:4d:c3:6d:a4:ff:1f:16: 01:e3:e1:5f:28:95:b7:4d:02:77:49:6f:51:63:02:a8:0e:e1: a8:f3:c6:cd:a2:f4:4f:eb:1a:87:5c:fb:d0:63:4b:87:ce:d9: e7:d8:b3:e3:1b:61:14:8c:8e:48:89:66:ef:12:68:06:b6:5a: 64:b9:25:d1:b1:9b:0d:8e:da:ed:c5:c7:27:2f:3a:4d:dd:8f: db:ec:f4:49:38:fd:bf:17:a3:c6:4d:73:97:ee:ab:09:12:da: 9e:e9:1b:78:2f:bd:00:6b:55:af:02:ed:08:09:6d:3d:9e:d6: 0f:78:36:48:da:77:b6:b8:8a:ba:97:8e:b8:98:da:bb:1f:ae: f5:f8:fd:38:ce:36:3a:d1:bc:97:48:b5:ce:e0:45:fe:26:8c: f9:f5:6a:b4:34:cc:79:6d:8d:e7:a8:a5:b4:2d:08:cb:13:81: 51:e8:30:66:4d:37:62:a4:37:8d:08:04:ae:c5:b2:f2:10:6e: be:1e:30:a1:38:5d:81:c3:a8:84:d9:5a:3c:56:e3:40:5d:53: 25:36:71:25:3b:26:5f:79:a8:af:c0:e9:f3:c9:ab:e5:37:f6: e2:dc:97:c8:d8:b4:c0:07:7d:70:28:9f:2c:f5:d0:5b:bd:e7: 99:7a:85:1c -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUAUhxXOHl3CnHMBu3lyZyhj2xaiEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNGI0M2M2NGE2ODBlZmRjNTFhMDA0NjMxNzJiOGY1YWZm OTQ1ZTA3MzNmYzQ5YzJlNGMwHhcNMjUwODA0MTMzODQwWhcNMjUwODA1MTUyODQw WjAzMTEwLwYDVQQDEyg3OThBRTc5NjIzNEI2RUY0NTczNEJBNzI3OTJDMjBDNEQ3 NzgwODZCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUmKJ/PbWBsu sNLomDo9jLcf5JlCSbFHYHVkgR011HG91iiHjwDoJF7YQ72DSc+eJ1bJVKG7p5qe GZq+UrrTFmfhZ2VIEp14FPYNyETsQ/LIZ2deCAXSilENG5xAYfEkEuJnURRoSiF4 jWFfEQbZ6OX+daJ9v/WEdACOQMvfg42YlGTVfLssZB1dNRBScUcQCyhGkShLKILR vNB9G5cv/mh3pCB+bh0JBwF4SKFQCOE7p+p1vzfYebVTMbsJDGFaSDoSVcxs9nSy E6npxnyZmnkPWV6alG+c9CdDGhpSU8MaTuGWpePuSJMDYwT/SuxxhXjjM0I3AA+j UCGR8fQaAwIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFHmK55YjS270VzS6cnksIMTX eAhrMB8GA1UdIwQYMBaAFNdJg8H6ugzBVm8GAa/hFCPhG1FxMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FlNmVkZWVjLTA4YmEtNGNkZS04OTc5 LTRmYWVhNGIxYmMxMi83L0Q3NDk4M0MxRkFCQTBDQzE1NjZGMDYwMUFGRTExNDIz RTExQjUxNzEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2Mt NGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMTUwZTk4ZC04MGU5LTQ1ZjYtYmM2My02 YjQwYTNkNTllOWMvNGI0M2M2NGE2ODBlZmRjNTFhMDA0NjMxNzJiOGY1YWZmOTQ1 ZTA3MzNmYzQ5YzJlNGMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv YWU2ZWRlZWMtMDhiYS00Y2RlLTg5NzktNGZhZWE0YjFiYzEyLzcvRDc0OTgzQzFG QUJBMENDMTU2NkYwNjAxQUZFMTE0MjNFMTFCNTE3MS5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABzAON22 mDVh1DzNTcNtpP8fFgHj4V8olbdNAndJb1FjAqgO4ajzxs2i9E/rGodc+9BjS4fO 2efYs+MbYRSMjkiJZu8SaAa2WmS5JdGxmw2O2u3FxycvOk3dj9vs9Ek4/b8Xo8ZN c5fuqwkS2p7pG3gvvQBrVa8C7QgJbT2e1g94Nkjad7a4irqXjriY2rsfrvX4/TjO NjrRvJdItc7gRf4mjPn1arQ0zHltjeeopbQtCMsTgVHoMGZNN2KkN40IBK7FsvIQ br4eMKE4XYHDqITZWjxW40BdUyU2cSU7Jl95qK/A6fPJq+U39uLcl8jYtMAHfXAo nyz10Fu955l6hRw= -----END CERTIFICATE-----Generated at Mon Aug 4 18:28:20 2025 by rpki-client