$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft File: 1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft (raw, json) Hash identifier: ksyoISuSSWLHpWWKRssD1dpH7Xayug8YZJ/DT31NQ8g= Subject key identifier: CB:79:51:35:62:08:C3:2B:42:3A:3A:DE:A1:73:30:B8:29:35:B9:0A Authority key identifier: 1F:7F:72:49:A6:81:F8:CD:41:27:0B:50:D8:D7:E7:81:58:81:DA:36 Certificate issuer: /CN=23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd Certificate serial: 1F78E30ECB7CD2090784E2DAE660475F915BEAB4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft Manifest number: 015B Signing time: Wed 05 Nov 2025 03:44:16 +0000 Manifest this update: Wed 05 Nov 2025 03:39:16 +0000 Manifest next update: Thu 06 Nov 2025 03:44:16 +0000 Files and hashes: 1: 1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl (hash: JkTZ2+x2jc19wb3/8ImU7so6ng5q363PtSFQlFtNMw8=) 2: 323630323a663662613a3a2f34302d3430203d3e20323135323438.roa (hash: WDk8fhCZeFEuKhmy2R/ZRYllooWLJI27mELcMjoeqKI=) 3: 32332e3133362e32302e302f32342d3234203d3e20323135323438.roa (hash: qWICRkjmLt8+dNxxWBazesXDN3X2Ej4jtCp5CweB95Y=) 4: 323630323a663662613a3a2f34302d3430203d3e20333936303634.roa (hash: EIvC4z2x/QLXwOGrYeC/F9aQ8OZAlzpbcTtxqtqMIxY=) 5: AS396064.asa (hash: fqRhtvWtcURp20FCViYFyofIrkmsG3+3CETZ3m5QbYs=) 6: 32332e3133362e32302e302f32342d3234203d3e20333936303634.roa (hash: l3PqR+UTXc6mZ6DH8HSVMsKTEDZ5iX5wYCsyCFY80r0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/383bd50b-b192-44bd-9349-351225a13a33.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/383bd50b-b192-44bd-9349-351225a13a33.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 03:44:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:78:e3:0e:cb:7c:d2:09:07:84:e2:da:e6:60:47:5f:91:5b:ea:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd Validity Not Before: Nov 5 03:39:16 2025 GMT Not After : Nov 6 03:44:16 2025 GMT Subject: CN=CB7951356208C32B423A3ADEA17330B82935B90A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b2:3d:4c:51:8e:13:bc:a4:8b:d6:02:d6:4e: b7:c9:c3:7d:d9:31:9a:25:bf:60:86:40:3f:f2:cc: 36:2d:70:18:79:d1:4a:f4:59:89:d5:dc:a5:0b:8d: 93:d6:64:e8:a1:8b:6c:0a:b2:04:25:99:20:b9:d2: ad:4b:52:cd:2c:de:a8:6b:33:34:10:c3:a7:52:78: 0f:8a:7a:8b:0d:6d:a8:5c:21:13:92:4e:4f:87:b8: 2d:32:0f:c8:8b:85:be:7d:5a:c5:8a:d1:ae:bf:27: d5:2f:76:0d:6f:6e:91:ed:d6:10:12:80:91:34:4a: 49:91:2d:d2:00:80:c2:1f:3c:b0:b6:00:70:a4:58: a4:87:ac:d0:a9:e8:75:44:8a:a6:81:44:93:55:15: 8a:b0:c4:c6:db:1d:4d:54:54:e8:24:4b:7a:44:55: 68:41:4a:55:ef:39:7a:7c:87:18:4d:3f:47:d0:1f: 98:f4:ad:1d:97:33:ba:5e:1c:2f:63:c6:65:8b:2f: 29:a7:58:4c:2a:20:c4:fa:80:87:2e:ce:25:3e:8a: b7:bb:1c:56:d8:c6:74:88:dd:3c:c8:79:2e:2f:b3: 6c:ac:2c:c9:54:34:5b:2f:73:e4:96:2a:5c:79:a8: 7a:8d:86:6c:e8:c7:58:f0:25:66:eb:ed:82:43:cd: 8a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:79:51:35:62:08:C3:2B:42:3A:3A:DE:A1:73:30:B8:29:35:B9:0A X509v3 Authority Key Identifier: keyid:1F:7F:72:49:A6:81:F8:CD:41:27:0B:50:D8:D7:E7:81:58:81:DA:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:05:6a:0a:79:ab:b1:80:09:54:72:1b:96:78:83:6c:b1:c4: ee:9b:b9:8f:73:f8:fe:e5:20:41:34:a9:8e:01:44:f5:cf:0d: dc:de:cd:4d:72:b2:c6:b8:bd:26:e6:82:68:12:3b:60:c9:ff: 2d:66:9b:cf:2d:2a:d4:1c:8a:93:85:76:3b:10:b7:41:30:78: 63:eb:b1:6a:d2:b9:d4:53:3b:b3:52:ef:77:f5:07:16:c9:44: 5c:f4:9c:cb:6c:d1:45:c7:a0:6e:94:b2:33:20:b2:8d:47:aa: ec:d5:a6:90:61:d2:e3:02:41:8e:94:a1:92:37:2e:76:ab:bd: ae:53:15:b3:dc:1d:c3:d3:e5:c7:fe:49:2e:78:28:ad:49:fb: 32:2f:c6:29:e6:5b:d7:fd:1b:b0:1e:87:4d:69:4e:4a:f4:ec: 00:91:a9:e2:4b:bc:e7:c1:2c:e5:5d:cd:3f:a2:7d:7c:bc:73: 47:a8:ff:2b:d8:42:a3:fb:db:0f:4b:ec:4b:30:2c:a0:56:73: 1c:b5:5b:93:91:1e:2a:79:ac:6e:55:5f:b6:dc:f9:d5:2b:a4: 2b:71:71:da:11:67:66:ad:1b:5b:3d:72:41:22:54:af:f7:ba: f0:6f:08:d9:33:57:85:5b:2c:c4:06:12:54:52:17:18:67:82: 94:7a:e0:c7 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUH3jjDst80gkHhOLa5mBHX5Fb6rQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMjNmYjNkMjllN2Y2N2M2MzRkZjNiN2Y0YTk2MDA4MmU0 NDI5ZjE2NmI2NTMwMWE5ZGQwHhcNMjUxMTA1MDMzOTE2WhcNMjUxMTA2MDM0NDE2 WjAzMTEwLwYDVQQDEyhDQjc5NTEzNTYyMDhDMzJCNDIzQTNBREVBMTczMzBCODI5 MzVCOTBBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLI9TFGOE7yk i9YC1k63ycN92TGaJb9ghkA/8sw2LXAYedFK9FmJ1dylC42T1mTooYtsCrIEJZkg udKtS1LNLN6oazM0EMOnUngPinqLDW2oXCETkk5Ph7gtMg/Ii4W+fVrFitGuvyfV L3YNb26R7dYQEoCRNEpJkS3SAIDCHzywtgBwpFikh6zQqeh1RIqmgUSTVRWKsMTG 2x1NVFToJEt6RFVoQUpV7zl6fIcYTT9H0B+Y9K0dlzO6XhwvY8Zliy8pp1hMKiDE +oCHLs4lPoq3uxxW2MZ0iN08yHkuL7NsrCzJVDRbL3Pklipceah6jYZs6MdY8CVm 6+2CQ82KKQIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFMt5UTViCMMrQjo63qFzMLgp NbkKMB8GA1UdIwQYMBaAFB9/ckmmgfjNQScLUNjX54FYgdo2MA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2NkMTlkYjIwLTQ2NTMtNDhkNC04ZmM0 LTU4MGQxMzY5YjdjNC8xLzFGN0Y3MjQ5QTY4MUY4Q0Q0MTI3MEI1MEQ4RDdFNzgx NTg4MURBMzYuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMt NDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zODNiZDUwYi1iMTkyLTQ0YmQtOTM0OS0z NTEyMjVhMTNhMzMvMjNmYjNkMjllN2Y2N2M2MzRkZjNiN2Y0YTk2MDA4MmU0NDI5 ZjE2NmI2NTMwMWE5ZGQuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv Y2QxOWRiMjAtNDY1My00OGQ0LThmYzQtNTgwZDEzNjliN2M0LzEvMUY3RjcyNDlB NjgxRjhDRDQxMjcwQjUwRDhEN0U3ODE1ODgxREEzNi5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKQFagp5 q7GACVRyG5Z4g2yxxO6buY9z+P7lIEE0qY4BRPXPDdzezU1yssa4vSbmgmgSO2DJ /y1mm88tKtQcipOFdjsQt0EweGPrsWrSudRTO7NS73f1BxbJRFz0nMts0UXHoG6U sjMgso1HquzVppBh0uMCQY6UoZI3Lnarva5TFbPcHcPT5cf+SS54KK1J+zIvxinm W9f9G7Aeh01pTkr07ACRqeJLvOfBLOVdzT+ifXy8c0eo/yvYQqP72w9L7EswLKBW cxy1W5ORHip5rG5VX7bc+dUrpCtxcdoRZ2atG1s9ckEiVK/3uvBvCNkzV4VbLMQG ElRSFxhngpR64Mc= -----END CERTIFICATE-----Generated at Wed Nov 5 14:40:52 2025 by rpki-client