$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft File: 3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft (raw, json) Hash identifier: ctSnPJ/+g6+zX1SMyG4g4vRUWCBjL5HRzsl4gA3nJiI= Subject key identifier: 59:98:EB:51:0A:4A:5F:AA:B6:24:B7:20:51:9E:4E:60:7B:24:45:7F Authority key identifier: 3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A Certificate issuer: /CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b Certificate serial: EE6CD71FFB9D29E1EC90BE7AB35DA9DAE85F19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft Manifest number: 016E Signing time: Tue 22 Jul 2025 07:19:19 +0000 Manifest this update: Tue 22 Jul 2025 07:14:19 +0000 Manifest next update: Wed 23 Jul 2025 07:53:19 +0000 Files and hashes: 1: 32332e3139312e34302e302f32342d3234203d3e203236393534.roa (hash: lO4v+9qZpYNTU13Fx5YYbE7NTGKX+3JJpxrHn0W/uvQ=) 2: 3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl (hash: GPKT9mVdfgyvz5zrJCE1xd8Vy0WWV/GoN1K2RNaAfxo=) 3: 323630323a663764653a3a2f34302d3438203d3e203236393534.roa (hash: dVW6ZUsxUgXCaz0kq7P1NzZswddC3cxPIFG0EovOzUk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 07:53:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: ee:6c:d7:1f:fb:9d:29:e1:ec:90:be:7a:b3:5d:a9:da:e8:5f:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b Validity Not Before: Jul 22 07:14:19 2025 GMT Not After : Jul 23 07:53:19 2025 GMT Subject: CN=5998EB510A4A5FAAB624B720519E4E607B24457F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:cb:00:63:df:42:a0:5f:d3:dc:4e:9f:91:50: 79:fc:41:07:fe:16:74:8e:87:83:a6:71:29:8a:5b: 66:88:0f:9d:06:51:de:f5:d3:52:ae:a4:cc:55:08: b5:39:8a:fd:56:5c:dc:b2:7a:dd:68:62:12:32:bf: 22:36:60:7a:69:96:28:d4:34:52:90:84:8e:fd:23: 60:e8:3b:ac:1e:12:8f:c4:03:bc:d5:d3:4f:07:75: 09:9f:6e:93:85:59:6e:8e:1a:0e:20:2c:93:41:f5: 59:30:c1:7e:84:ab:0e:d2:2b:ff:55:59:0f:5f:11: 81:df:db:13:a0:c3:66:62:77:ef:72:42:04:c7:69: e5:1b:d0:30:43:9b:de:64:8b:85:b3:fe:e6:f2:49: 6d:0b:e2:9c:a2:31:a9:e2:4e:b4:09:58:a0:1f:34: 2f:b1:be:ab:10:78:5a:cd:e1:a3:92:44:e6:10:b0: b6:94:1d:d0:62:26:8b:0e:c0:ee:fb:04:4b:71:cf: 0f:7a:42:18:ef:2f:5d:32:9b:d9:ee:5b:6b:62:3c: e6:88:fa:f2:20:5a:04:ea:eb:5b:fe:21:5c:08:fc: e0:95:80:9a:46:11:72:c1:d4:66:ab:0d:d5:58:d5: 0d:ac:a8:ed:5b:f2:a3:e1:0b:a7:07:9f:10:d2:e6: 41:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:98:EB:51:0A:4A:5F:AA:B6:24:B7:20:51:9E:4E:60:7B:24:45:7F X509v3 Authority Key Identifier: keyid:3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:d6:87:24:53:f1:0c:a9:1d:14:ed:11:5f:b6:7b:08:2a:92: 06:2c:bf:5d:ee:88:77:e3:30:5d:4c:dc:68:13:5b:26:9e:fe: b7:96:f2:7d:bd:c2:4f:63:f4:20:39:c4:a4:a7:ea:5a:da:9b: e5:ef:2e:93:d0:0a:7b:0b:29:1e:8a:8d:fb:53:65:48:0b:fb: fb:3d:19:93:6f:ae:f2:6b:69:52:e7:50:2d:10:6e:3b:5d:4a: aa:5d:34:72:d6:32:c5:94:68:61:30:d0:66:60:52:c6:cb:fc: 71:fe:bb:f9:d3:82:b6:33:c1:ab:29:59:8b:b2:ce:e2:6f:f2: f9:9b:0f:c0:3c:75:7b:9a:0c:3b:2a:0f:3a:0d:fa:b3:93:7e: f0:b6:12:32:0e:13:92:47:e7:01:f6:77:21:d4:09:da:78:24: 07:44:d7:ac:a3:df:e6:47:a7:7e:b0:33:30:fb:5c:60:69:4d: 8c:56:cb:42:02:52:dd:d3:3f:be:c1:de:06:e4:94:22:26:e0: 34:e3:cd:7d:29:de:96:da:06:e7:13:92:77:8f:ab:c4:c7:d7: d4:d5:7c:84:82:c1:3c:6b:98:15:2f:63:62:68:f4:b5:3f:89: 67:3e:a7:8b:9e:5d:49:8c:e1:47:92:6a:27:38:40:a5:64:5a: c9:44:90:3f -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUAO5s1x/7nSnh7JC+erNdqdroXxkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMzI0ZmZlMzlhOThhMDE0NmI1MDNkOGEwMTVjYTJjMmU3 NjdjZjNkMGI5ZmRlNjIzMWIwHhcNMjUwNzIyMDcxNDE5WhcNMjUwNzIzMDc1MzE5 WjAzMTEwLwYDVQQDEyg1OTk4RUI1MTBBNEE1RkFBQjYyNEI3MjA1MTlFNEU2MDdC MjQ0NTdGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8sAY99CoF/T 3E6fkVB5/EEH/hZ0joeDpnEpiltmiA+dBlHe9dNSrqTMVQi1OYr9VlzcsnrdaGIS Mr8iNmB6aZYo1DRSkISO/SNg6DusHhKPxAO81dNPB3UJn26ThVlujhoOICyTQfVZ MMF+hKsO0iv/VVkPXxGB39sToMNmYnfvckIEx2nlG9AwQ5veZIuFs/7m8kltC+Kc ojGp4k60CVigHzQvsb6rEHhazeGjkkTmELC2lB3QYiaLDsDu+wRLcc8PekIY7y9d MpvZ7ltrYjzmiPryIFoE6utb/iFcCPzglYCaRhFywdRmqw3VWNUNrKjtW/Kj4Qun B58Q0uZBLQIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFFmY61EKSl+qtiS3IFGeTmB7 JEV/MB8GA1UdIwQYMBaAFD/NOoOeoUF/2Yjz3f0EVBl/qvR6MA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5 LTBhYjcwZTQ4MTViYi8xLzNGQ0QzQTgzOUVBMTQxN0ZEOTg4RjNEREZEMDQ1NDE5 N0ZBQUY0N0EuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYt NDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81MWNkOTlmNy0yZjQyLTRkZWMtYjJjNi0w OWJhZmFhMzc4MGUvMzI0ZmZlMzlhOThhMDE0NmI1MDNkOGEwMTVjYTJjMmU3Njdj ZjNkMGI5ZmRlNjIzMWIuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv NzNiOGVjMDEtOGJhNS00NzlmLWEyMjktMGFiNzBlNDgxNWJiLzEvM0ZDRDNBODM5 RUExNDE3RkQ5ODhGM0RERkQwNDU0MTk3RkFBRjQ3QS5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAA3WhyRT 8QypHRTtEV+2ewgqkgYsv13uiHfjMF1M3GgTWyae/reW8n29wk9j9CA5xKSn6lra m+XvLpPQCnsLKR6KjftTZUgL+/s9GZNvrvJraVLnUC0QbjtdSqpdNHLWMsWUaGEw 0GZgUsbL/HH+u/nTgrYzwaspWYuyzuJv8vmbD8A8dXuaDDsqDzoN+rOTfvC2EjIO E5JH5wH2dyHUCdp4JAdE16yj3+ZHp36wMzD7XGBpTYxWy0ICUt3TP77B3gbklCIm 4DTjzX0p3pbaBucTknePq8TH19TVfISCwTxrmBUvY2Jo9LU/iWc+p4ueXUmM4UeS aic4QKVkWslEkD8= -----END CERTIFICATE-----Generated at Tue Jul 22 20:57:04 2025 by rpki-client