$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft File: 2472949B3C234930DBE99B1B5CD5196AB16D151B.mft (raw, json) Hash identifier: K3CRW1TFS5g4yAM/eQcnzQza5Hc3/EP6BeT3v/U3HFQ= Subject key identifier: E6:46:BF:C3:49:59:6D:EB:3A:46:EC:72:C5:C0:41:23:AE:F2:E9:59 Authority key identifier: 24:72:94:9B:3C:23:49:30:DB:E9:9B:1B:5C:D5:19:6A:B1:6D:15:1B Certificate issuer: /CN=89d4f40fed1166159109937674aef0279ad039550feccf8d61 Certificate serial: 31BA0FE3E3E25F9F88716370AD5E97BC069FEE13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft Manifest number: 02A1 Signing time: Tue 05 Aug 2025 07:24:24 +0000 Manifest this update: Tue 05 Aug 2025 07:19:24 +0000 Manifest next update: Wed 06 Aug 2025 07:24:24 +0000 Files and hashes: 1: 323630323a663961323a32303a3a2f34382d3438203d3e203436373636.roa (hash: LOHxn0RgwORnxWPoX7PgNpofW2yqHK4ri4vHvhFnLZQ=) 2: 32332e3137302e37322e302f32342d3234203d3e203436373636.roa (hash: FghA8Zz7QbzObKv2ia/HqFgnN9W82bmOSCIz6G2zFuE=) 3: 323630323a663961323a31303a3a2f34382d3438203d3e203436373636.roa (hash: 4IHJsjfC0Zoq18aE2FFzAMYZQpT6YF+Y54OUnxbTiPM=) 4: 323630323a663961323a3a2f34382d3438203d3e203436373636.roa (hash: dNvxw0+R2mi2yZ7yZ+PkpHw5t4IMqFyhS0zsCoWaY88=) 5: 323630323a663961323a35353a3a2f34382d3438203d3e20313939353138.roa (hash: Lmh4khK9jqfGM7AgqtrinnAM2ubStxsQ/YZSUwbqCvU=) 6: 2472949B3C234930DBE99B1B5CD5196AB16D151B.crl (hash: ej0OabocVCX9iopinpSUIDRWWvZ3ZR4Vk2pKH6oeYuQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 07:24:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:ba:0f:e3:e3:e2:5f:9f:88:71:63:70:ad:5e:97:bc:06:9f:ee:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89d4f40fed1166159109937674aef0279ad039550feccf8d61 Validity Not Before: Aug 5 07:19:24 2025 GMT Not After : Aug 6 07:24:24 2025 GMT Subject: CN=E646BFC349596DEB3A46EC72C5C04123AEF2E959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:2d:36:fe:00:8b:b5:0f:22:32:de:37:96:f1: af:65:6e:5a:53:d8:c1:dc:55:63:aa:d0:3d:00:67: c0:1d:df:7e:c4:d4:26:75:7a:49:ec:bc:f0:56:c8: 6b:ae:c9:e7:ce:ab:93:fc:71:d8:af:3d:09:e6:b7: d9:29:2e:50:87:22:02:87:ec:0d:37:ac:46:57:71: 6a:51:a5:73:e5:26:82:12:10:82:92:28:76:98:98: ce:ae:e6:a5:8d:ce:9f:df:5e:da:30:67:38:bc:2c: 85:63:02:d6:e0:d0:9d:58:d6:67:4a:ef:bb:1f:1b: 50:a2:11:31:0c:cc:76:0f:39:85:47:dc:0f:b7:01: 59:16:b2:83:5c:d0:fa:7c:7b:0f:5e:79:d0:4d:07: 3c:4c:19:7d:0a:36:f1:69:53:ee:80:6e:72:db:d2: ef:6f:1b:30:4e:e8:f5:4c:3c:e7:2f:c4:e5:04:b0: 59:b8:c2:d7:44:7f:45:de:3e:aa:b7:b4:06:87:44: cb:f9:1d:e6:55:c2:c9:67:d0:f0:f5:7d:39:f7:e2: 3b:1b:f2:50:22:1b:8a:47:f1:5a:1b:28:6c:ca:2d: 15:c6:74:d5:39:c0:34:5d:7f:8a:b4:62:8d:34:ca: e9:1c:3d:50:02:d9:e7:95:b6:92:b8:4f:03:c7:0c: 06:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:46:BF:C3:49:59:6D:EB:3A:46:EC:72:C5:C0:41:23:AE:F2:E9:59 X509v3 Authority Key Identifier: keyid:24:72:94:9B:3C:23:49:30:DB:E9:9B:1B:5C:D5:19:6A:B1:6D:15:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:e5:8f:37:4c:2e:20:ea:a7:a4:da:64:59:f6:e2:76:0e:ca: 83:aa:0d:8a:ff:d7:b8:32:68:40:29:1d:ac:76:03:42:94:08: f9:9a:c3:2c:59:a5:25:d0:4d:b0:ff:51:e3:78:4b:70:d6:73: 21:50:8a:de:8e:8c:11:9c:c0:b7:c4:7b:fb:4e:ea:b9:b5:32: 82:ae:58:09:ef:e6:00:d4:95:98:a5:37:cf:5d:34:b5:7a:69: ea:16:ef:5a:6e:4b:a5:cf:3d:2a:f5:0e:c5:64:fc:7f:a6:17: e6:f7:bd:66:21:4f:d1:7f:b1:46:ba:90:c6:e3:16:db:69:14: 26:79:8d:bb:df:d1:f8:e7:38:49:9e:75:8e:ea:a6:85:da:59: e4:cc:b8:8c:e4:a4:5f:ff:68:93:5f:2f:bd:0a:f4:c9:76:40: 88:5f:eb:80:b8:6b:73:9b:3b:11:f6:0b:96:d3:06:e6:28:f5: 12:50:f7:a7:29:a6:57:20:3a:a7:e0:a0:25:00:c7:bc:f3:98: 32:4c:0a:c5:03:86:14:14:25:1e:03:99:91:b4:37:73:ef:4c: 8a:16:5d:bd:98:7c:45:74:fd:ed:a8:b5:61:e0:1c:cf:d3:f5: 94:01:d1:84:d6:01:da:08:d1:e0:a1:5a:d2:8c:82:db:d8:69: 99:dd:86:db -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUMboP4+PiX5+IcWNwrV6XvAaf7hMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODlkNGY0MGZlZDExNjYxNTkxMDk5Mzc2NzRhZWYwMjc5 YWQwMzk1NTBmZWNjZjhkNjEwHhcNMjUwODA1MDcxOTI0WhcNMjUwODA2MDcyNDI0 WjAzMTEwLwYDVQQDEyhFNjQ2QkZDMzQ5NTk2REVCM0E0NkVDNzJDNUMwNDEyM0FF RjJFOTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjC02/gCLtQ8i Mt43lvGvZW5aU9jB3FVjqtA9AGfAHd9+xNQmdXpJ7LzwVshrrsnnzquT/HHYrz0J 5rfZKS5QhyICh+wNN6xGV3FqUaVz5SaCEhCCkih2mJjOrualjc6f317aMGc4vCyF YwLW4NCdWNZnSu+7HxtQohExDMx2DzmFR9wPtwFZFrKDXND6fHsPXnnQTQc8TBl9 CjbxaVPugG5y29LvbxswTuj1TDznL8TlBLBZuMLXRH9F3j6qt7QGh0TL+R3mVcLJ Z9Dw9X059+I7G/JQIhuKR/FaGyhsyi0VxnTVOcA0XX+KtGKNNMrpHD1QAtnnlbaS uE8DxwwGFQIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFOZGv8NJWW3rOkbscsXAQSOu 8ulZMB8GA1UdIwQYMBaAFCRylJs8I0kw2+mbG1zVGWqxbRUbMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3 LWI0MjgxOGNmNTBlOC82LzI0NzI5NDlCM0MyMzQ5MzBEQkU5OUIxQjVDRDUxOTZB QjE2RDE1MUIuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It NGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZDk4NzlkYS0xNDVmLTRmMjEtYTdjMy1k YTZiNTlhMDE2MjUvODlkNGY0MGZlZDExNjYxNTkxMDk5Mzc2NzRhZWYwMjc5YWQw Mzk1NTBmZWNjZjhkNjEuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv ZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1MGU4LzYvMjQ3Mjk0OUIz QzIzNDkzMERCRTk5QjFCNUNENTE5NkFCMTZEMTUxQi5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGDljzdM LiDqp6TaZFn24nYOyoOqDYr/17gyaEApHax2A0KUCPmawyxZpSXQTbD/UeN4S3DW cyFQit6OjBGcwLfEe/tO6rm1MoKuWAnv5gDUlZilN89dNLV6aeoW71puS6XPPSr1 DsVk/H+mF+b3vWYhT9F/sUa6kMbjFttpFCZ5jbvf0fjnOEmedY7qpoXaWeTMuIzk pF//aJNfL70K9Ml2QIhf64C4a3ObOxH2C5bTBuYo9RJQ96cpplcgOqfgoCUAx7zz mDJMCsUDhhQUJR4DmZG0N3PvTIoWXb2YfEV0/e2otWHgHM/T9ZQB0YTWAdoI0eCh WtKMgtvYaZndhts= -----END CERTIFICATE-----Generated at Tue Aug 5 16:39:13 2025 by rpki-client