$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft File: 1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft (raw, json) Hash identifier: iLazp3sq6cpX5DJv1H9AC/r26OxUVuZN/6fF3jfJOL0= Subject key identifier: 5B:FC:34:1F:C1:2B:3A:33:21:0C:86:05:05:DC:28:2D:27:7E:AE:49 Authority key identifier: 1F:7F:72:49:A6:81:F8:CD:41:27:0B:50:D8:D7:E7:81:58:81:DA:36 Certificate issuer: /CN=23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd Certificate serial: 7A3420A27D647B2D23E65D681E1DA915A4C73EE1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft Manifest number: 40 Signing time: Wed 30 Apr 2025 02:50:31 +0000 Manifest this update: Wed 30 Apr 2025 02:45:31 +0000 Manifest next update: Thu 01 May 2025 04:11:31 +0000 Files and hashes: 1: 323630323a663662613a3a2f34302d3430203d3e20333936303634.roa (hash: EIvC4z2x/QLXwOGrYeC/F9aQ8OZAlzpbcTtxqtqMIxY=) 2: 1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl (hash: xuLqVbAcFS6M8dsXH8hhMMH5kHbThxYVHKKx5TrrvvE=) 3: 32332e3133362e32302e302f32342d3234203d3e20333936303634.roa (hash: l3PqR+UTXc6mZ6DH8HSVMsKTEDZ5iX5wYCsyCFY80r0=) 4: AS396064.asa (hash: rEvWsH7IPHmZ6JtnftcZ89TNHLyVqBtvtmQBe/t7BjY=) 5: 32332e3133362e32302e302f32342d3234203d3e20323135323438.roa (hash: qWICRkjmLt8+dNxxWBazesXDN3X2Ej4jtCp5CweB95Y=) 6: 323630323a663662613a3a2f34302d3430203d3e20323135323438.roa (hash: WDk8fhCZeFEuKhmy2R/ZRYllooWLJI27mELcMjoeqKI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/383bd50b-b192-44bd-9349-351225a13a33.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/383bd50b-b192-44bd-9349-351225a13a33.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 04:11:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:34:20:a2:7d:64:7b:2d:23:e6:5d:68:1e:1d:a9:15:a4:c7:3e:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd Validity Not Before: Apr 30 02:45:31 2025 GMT Not After : May 1 04:11:31 2025 GMT Subject: CN=5BFC341FC12B3A33210C860505DC282D277EAE49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:54:3f:9e:f8:52:1d:98:52:85:d6:95:df:18: 1b:20:89:48:9e:37:96:94:bd:cb:72:05:b8:64:eb: 0c:cb:fa:83:5d:16:a5:00:1a:0b:2d:b4:91:35:0a: 95:af:98:d5:71:d0:d8:f0:94:71:a3:e2:af:38:9f: cd:d2:1d:1c:13:ad:ac:f1:5f:a8:28:4a:62:70:84: c3:43:17:db:e2:a2:31:37:9a:97:1e:73:e4:ae:9f: 38:23:64:5a:bd:37:1d:bd:cd:b5:d0:89:49:13:da: 91:54:6a:ab:26:78:2e:46:41:e8:8c:ad:ad:73:d8: 33:2e:e9:8a:e9:5c:1a:36:04:fd:58:00:80:e7:9b: 68:42:ef:89:fe:e0:0d:3d:c6:35:e8:94:2d:08:13: 08:59:79:73:26:57:4a:50:2c:e6:2e:be:f4:90:80: e8:97:68:d5:a3:af:ff:e6:dd:cc:d9:ea:f7:b9:b8: ab:28:c0:db:ed:4c:70:35:6d:a2:55:3f:d2:a3:5e: a4:08:54:ee:3b:61:cd:ed:3c:d0:fd:c3:9d:3a:c7: 7c:3b:55:b8:58:19:4f:29:e2:aa:7d:08:0f:a6:e8: bb:33:08:0a:20:69:15:16:51:f2:68:50:1b:a1:77: c4:38:6d:bd:64:c8:54:f6:df:d6:1b:5f:ef:c3:0e: 06:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:FC:34:1F:C1:2B:3A:33:21:0C:86:05:05:DC:28:2D:27:7E:AE:49 X509v3 Authority Key Identifier: keyid:1F:7F:72:49:A6:81:F8:CD:41:27:0B:50:D8:D7:E7:81:58:81:DA:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:e6:74:41:21:a3:4b:46:82:99:8e:56:0a:ca:c9:ae:9b:03: 41:56:7c:6b:e3:f0:92:03:91:00:d8:9e:11:10:5c:8a:e3:a2: 38:da:49:b2:bb:c0:c1:ec:b2:a0:3d:b9:55:09:89:d6:cf:5a: e7:f5:0c:31:75:d8:87:de:cd:7f:45:ef:1d:a1:28:27:80:ef: a7:79:97:7c:2f:69:ae:5f:08:5a:0a:0d:91:01:ac:08:7d:a4: 74:78:20:e8:42:78:81:b3:c9:53:8e:05:70:03:4f:f5:33:61: c6:d7:f6:a7:7b:d6:7c:da:29:d1:e4:ab:c7:6c:03:4b:26:61: e0:e1:22:1f:92:43:5c:4a:d4:1a:a6:f3:2d:28:28:c4:c4:31: a6:8b:e9:57:df:8b:db:46:c5:b9:64:8d:94:2f:f3:86:56:83: 17:9e:de:55:7a:01:b2:c3:1a:d0:a2:8a:f8:9c:1f:a4:73:8c: 96:24:4b:0d:95:36:20:fe:11:16:2f:b1:ae:c7:86:17:5b:e4: d8:24:c8:18:6f:e3:2b:26:27:cb:fc:f0:a8:9d:0f:5b:33:2b: eb:80:9e:17:62:83:76:43:02:d7:de:ae:4b:00:a5:64:a0:b8: f0:d3:1b:10:6b:0d:d2:85:99:82:14:73:2e:bf:2e:d6:f3:9b: c9:1c:dc:f4 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUejQgon1key0j5l1oHh2pFaTHPuEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMjNmYjNkMjllN2Y2N2M2MzRkZjNiN2Y0YTk2MDA4MmU0 NDI5ZjE2NmI2NTMwMWE5ZGQwHhcNMjUwNDMwMDI0NTMxWhcNMjUwNTAxMDQxMTMx WjAzMTEwLwYDVQQDEyg1QkZDMzQxRkMxMkIzQTMzMjEwQzg2MDUwNURDMjgyRDI3 N0VBRTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVQ/nvhSHZhS hdaV3xgbIIlInjeWlL3LcgW4ZOsMy/qDXRalABoLLbSRNQqVr5jVcdDY8JRxo+Kv OJ/N0h0cE62s8V+oKEpicITDQxfb4qIxN5qXHnPkrp84I2RavTcdvc210IlJE9qR VGqrJnguRkHojK2tc9gzLumK6VwaNgT9WACA55toQu+J/uANPcY16JQtCBMIWXlz JldKUCzmLr70kIDol2jVo6//5t3M2er3ubirKMDb7UxwNW2iVT/So16kCFTuO2HN 7TzQ/cOdOsd8O1W4WBlPKeKqfQgPpui7MwgKIGkVFlHyaFAboXfEOG29ZMhU9t/W G1/vww4G1QIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFFv8NB/BKzozIQyGBQXcKC0n fq5JMB8GA1UdIwQYMBaAFB9/ckmmgfjNQScLUNjX54FYgdo2MA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2NkMTlkYjIwLTQ2NTMtNDhkNC04ZmM0 LTU4MGQxMzY5YjdjNC8xLzFGN0Y3MjQ5QTY4MUY4Q0Q0MTI3MEI1MEQ4RDdFNzgx NTg4MURBMzYuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMt NDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zODNiZDUwYi1iMTkyLTQ0YmQtOTM0OS0z NTEyMjVhMTNhMzMvMjNmYjNkMjllN2Y2N2M2MzRkZjNiN2Y0YTk2MDA4MmU0NDI5 ZjE2NmI2NTMwMWE5ZGQuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv Y2QxOWRiMjAtNDY1My00OGQ0LThmYzQtNTgwZDEzNjliN2M0LzEvMUY3RjcyNDlB NjgxRjhDRDQxMjcwQjUwRDhEN0U3ODE1ODgxREEzNi5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAC3mdEEh o0tGgpmOVgrKya6bA0FWfGvj8JIDkQDYnhEQXIrjojjaSbK7wMHssqA9uVUJidbP Wuf1DDF12IfezX9F7x2hKCeA76d5l3wvaa5fCFoKDZEBrAh9pHR4IOhCeIGzyVOO BXADT/UzYcbX9qd71nzaKdHkq8dsA0smYeDhIh+SQ1xK1Bqm8y0oKMTEMaaL6Vff i9tGxblkjZQv84ZWgxee3lV6AbLDGtCiivicH6RzjJYkSw2VNiD+ERYvsa7Hhhdb 5NgkyBhv4ysmJ8v88KidD1szK+uAnhdig3ZDAtferksApWSguPDTGxBrDdKFmYIU cy6/Ltbzm8kc3PQ= -----END CERTIFICATE-----Generated at Wed Apr 30 15:09:29 2025 by rpki-client