$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft File: 6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft (raw, json) Hash identifier: Ye0ZCaHSuuI2nRg6XpvV5uCFBttT6PFYGsXnB/P5B5s= Subject key identifier: 35:77:FB:F9:07:DB:D6:38:0A:DD:03:33:46:CB:64:21:5D:FF:31:39 Authority key identifier: 6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA Certificate issuer: /CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7 Certificate serial: 04A3A4FE1D6B7FD771FCD336DFCB5E7DB60872FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft Manifest number: 0377 Signing time: Mon 21 Jul 2025 19:44:58 +0000 Manifest this update: Mon 21 Jul 2025 19:39:58 +0000 Manifest next update: Tue 22 Jul 2025 21:10:58 +0000 Files and hashes: 1: EEF3EC40152A747D52835AE8973E7DC8C193A840.cer (hash: HGmIGZLAwtENWMckwsQ8hWTMC9jCNzhQYJENgR6PUlg=) 2: 6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl (hash: Moh/EvtvVBXl4z1MxtVT0UfDLVVLh2jnZzfZwrJwI9E=) 3: 323630323a666136653a3a2f33362d3336203d3e203133363436.roa (hash: VGLKsgogi2I3ngbX4zz98KwF+ce4xUWbXael6VtJ/R8=) 4: 3139382e3133352e3136392e302f32342d3234203d3e20333936393933.roa (hash: ds98Ml9DDwJOnbFWnKuYftmXTBL5e6vB9e43egQhGMs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 21:10:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:a3:a4:fe:1d:6b:7f:d7:71:fc:d3:36:df:cb:5e:7d:b6:08:72:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7 Validity Not Before: Jul 21 19:39:58 2025 GMT Not After : Jul 22 21:10:58 2025 GMT Subject: CN=3577FBF907DBD6380ADD033346CB64215DFF3139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b4:87:8b:42:80:59:51:7c:18:2a:b4:2c:0d: c8:24:3b:87:fe:d9:96:e9:5f:1b:90:eb:44:fc:af: 6a:6d:d5:40:be:cc:2f:3a:4d:dc:05:c3:2c:f3:ba: d2:f9:e9:e2:d4:21:b3:67:bb:24:72:1f:92:94:9c: 0c:e3:08:e2:47:4e:43:09:b6:e9:0c:90:38:81:33: eb:44:a9:ab:a9:97:2e:20:2a:19:1d:cc:54:24:64: 36:c7:62:b0:90:74:ee:23:91:f8:80:3d:e7:52:5d: 32:31:a1:48:42:4e:58:fd:55:bd:2e:b8:cf:74:7a: 96:d0:4f:d6:dc:eb:7b:13:30:79:ed:70:2f:74:ab: dd:08:f0:8a:7d:7f:8d:75:1a:90:c3:8a:67:7d:4c: 7d:f7:2e:a9:be:21:4b:d4:ad:b1:ee:ca:b2:61:eb: 93:f5:f3:3c:95:e7:15:4f:3a:75:58:4b:2e:00:a7: 3a:71:6a:8f:c4:ff:f3:ce:f7:02:69:e6:90:da:57: 73:3a:87:6e:97:21:19:46:ae:11:f3:cd:6a:2c:35: b4:c4:82:af:2d:d4:b8:3a:f8:1d:83:2f:5a:e8:6e: 3e:1c:b4:9b:40:87:41:f6:5f:ee:f9:b4:78:22:4a: 40:da:b7:79:65:83:cc:e5:21:0f:97:9e:c4:7e:c1: 46:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:77:FB:F9:07:DB:D6:38:0A:DD:03:33:46:CB:64:21:5D:FF:31:39 X509v3 Authority Key Identifier: keyid:6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:5a:05:90:5b:1d:47:10:36:d3:44:67:09:9e:69:a6:ae:ec: af:95:ae:b9:03:1d:22:2c:6c:75:86:44:12:21:44:e9:d9:1e: a3:f5:fc:bf:02:51:56:19:e7:55:33:ff:21:ad:f3:f9:b2:fc: 4b:51:d2:1b:10:64:3e:25:c7:3c:9a:d7:8b:7c:00:96:44:22: a4:cb:19:eb:08:7b:d1:c9:b6:15:ae:d1:6c:e5:e8:e8:30:37: 38:5c:ce:ba:e2:3d:ae:b8:58:00:c8:b9:a7:3f:7a:e8:45:bd: 02:84:71:d0:66:a7:30:c3:ab:e0:39:6c:b2:92:6f:3d:9a:41: fb:7e:de:ca:2e:2f:39:e2:97:ef:e7:2c:ff:9b:7d:0c:b6:c1: 9d:7b:55:bb:b8:b6:5c:1a:aa:bc:6f:ee:58:06:c9:e5:d8:07: 8c:0c:5a:d8:e1:87:50:1e:a1:db:02:55:6d:80:53:49:d9:e3: b0:b3:e3:05:de:e5:3c:f4:79:6d:dc:98:97:6d:3f:4d:cd:38: bf:60:6c:39:44:5d:8a:cb:de:47:33:f7:1b:32:1e:44:c3:59: 11:3a:4d:5b:57:64:a7:83:51:63:36:b8:d5:37:f9:46:22:27: 8b:3b:89:71:f9:5b:3a:32:14:d2:27:4d:f2:fd:a7:45:76:f4: 2f:b0:2e:d4 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUBKOk/h1rf9dx/NM238tefbYIcv8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDM3Mjk5OTcxNTJmZDg0ZmNkYTZkMTkwYzNiMzE5NWIw MjY3OTY2MDExMmJlOWEyZDcwHhcNMjUwNzIxMTkzOTU4WhcNMjUwNzIyMjExMDU4 WjAzMTEwLwYDVQQDEygzNTc3RkJGOTA3REJENjM4MEFERDAzMzM0NkNCNjQyMTVE RkYzMTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LSHi0KAWVF8 GCq0LA3IJDuH/tmW6V8bkOtE/K9qbdVAvswvOk3cBcMs87rS+eni1CGzZ7skch+S lJwM4wjiR05DCbbpDJA4gTPrRKmrqZcuICoZHcxUJGQ2x2KwkHTuI5H4gD3nUl0y MaFIQk5Y/VW9LrjPdHqW0E/W3Ot7EzB57XAvdKvdCPCKfX+NdRqQw4pnfUx99y6p viFL1K2x7sqyYeuT9fM8lecVTzp1WEsuAKc6cWqPxP/zzvcCaeaQ2ldzOodulyEZ Rq4R881qLDW0xIKvLdS4Ovgdgy9a6G4+HLSbQIdB9l/u+bR4IkpA2rd5ZYPM5SEP l57EfsFG5wIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFDV3+/kH29Y4Ct0DM0bLZCFd /zE5MB8GA1UdIwQYMBaAFGpvbsJypevcGCQcLITR2f6UwSWqMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzY2YmQ5MmYxLTQxNWItNDc2NS04YTE2 LWRiZmM0NTkzYzFhOC83LzZBNkY2RUMyNzJBNUVCREMxODI0MUMyQzg0RDFEOUZF OTRDMTI1QUEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTIt NDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84MjlmYjg3Mi0xNWJiLTRhNGUtOWVkOS0y NTk5NjBiMDQ5YmQvNDM3Mjk5OTcxNTJmZDg0ZmNkYTZkMTkwYzNiMzE5NWIwMjY3 OTY2MDExMmJlOWEyZDcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv NjZiZDkyZjEtNDE1Yi00NzY1LThhMTYtZGJmYzQ1OTNjMWE4LzcvNkE2RjZFQzI3 MkE1RUJEQzE4MjQxQzJDODREMUQ5RkU5NEMxMjVBQS5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJpaBZBb HUcQNtNEZwmeaaau7K+VrrkDHSIsbHWGRBIhROnZHqP1/L8CUVYZ51Uz/yGt8/my /EtR0hsQZD4lxzya14t8AJZEIqTLGesIe9HJthWu0Wzl6OgwNzhczrriPa64WADI uac/euhFvQKEcdBmpzDDq+A5bLKSbz2aQft+3souLznil+/nLP+bfQy2wZ17Vbu4 tlwaqrxv7lgGyeXYB4wMWtjhh1AeodsCVW2AU0nZ47Cz4wXe5Tz0eW3cmJdtP03N OL9gbDlEXYrL3kcz9xsyHkTDWRE6TVtXZKeDUWM2uNU3+UYiJ4s7iXH5WzoyFNIn TfL9p0V29C+wLtQ= -----END CERTIFICATE-----Generated at Tue Jul 22 04:44:56 2025 by rpki-client