$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft File: 2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft (raw, json) Hash identifier: mRbOCNzQPOrv2RCPDa6tFWJIx3iVjTT844EpsWF8cWA= Subject key identifier: A2:28:4F:4F:47:52:05:65:3D:73:04:33:D5:EA:B1:88:26:4E:20:71 Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0 Certificate issuer: /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355 Certificate serial: 6CE0A481B4EBC7AAEC32DCF37E42ED0B8B302FF5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft Manifest number: 03F8 Signing time: Tue 22 Jul 2025 17:27:05 +0000 Manifest this update: Tue 22 Jul 2025 17:22:05 +0000 Manifest next update: Wed 23 Jul 2025 18:44:05 +0000 Files and hashes: 1: 323630323a663939323a35303a3a2f34342d3438203d3e20313939393539.roa (hash: s0tjGNQz3a0IJwtqI+yV2w0ziifnk/CWeyQrn3w3/qg=) 2: 323630323a663939323a66313a3a2f34382d3438203d3e2030.roa (hash: YTwFmzgbdVgh5MV70gadVkuqTLHlIUY2ZnBOY6D4sbY=) 3: 323630323a663939323a35303a3a2f34342d3438203d3e203430363736.roa (hash: izLerJCXQHRMj4EuHnpJKhCKBCsakjo+L9Seyo/D9Sg=) 4: 323630323a663939323a66663a3a2f34382d3438203d3e203633333930.roa (hash: ofYyhY8QxgV7oA+K00vYAeRxc4dVjV27+J0ru1bGCjk=) 5: 323630323a663939323a36303a3a2f34342d3438203d3e20313532393030.roa (hash: HWpzvbc2LzEmXxoT+kul7X4owcauEKJHusM+Ir+9R/w=) 6: 323630323a663939323a61303a3a2f34342d3438203d3e2030.roa (hash: TsDzPexWiyW7o35YhRgMnmXGuAARZmgF1yTYqL8wkn4=) 7: 323630323a663939323a66353a3a2f34382d3438203d3e20323134323538.roa (hash: fIYxXr7UvbVyg5ErbGlT+osMThoxVt1juRlayE+Ah94=) 8: 323630323a663939323a66333a3a2f34382d3438203d3e203333333837.roa (hash: NUE/UX3oXJFnmyAE2FoTGPVQs404K4mf9BK/aBACO14=) 9: 323630323a663939323a66343a3a2f34382d3438203d3e20323038363939.roa (hash: tl8M/rg4fzRj4HcLbXbMPjG2fJQE/fLu0oqk+/bvTJ4=) 10: 32332e3137302e3231362e302f32342d3234203d3e203538323032.roa (hash: GxalkmsKA3NBmKqpRbD10jaxIIxZkAYcIT4LC7UOrQU=) 11: 2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl (hash: E3fVUWN6mRfq1TYsx60TdZfzgX77lij+c6wSwyPNNvw=) 12: 323630323a663939323a66373a3a2f34382d3438203d3e203534363030.roa (hash: mbxs/KyiiXCzMzovQkdebBf0tfpmu0WoGFLW/0GE3wA=) 13: 323630323a663939323a66613a3a2f34382d3439203d3e203430363736.roa (hash: sRvK25+z4/XzVzRz/NRjDVLoeu4AhidYEGZ8Z4be+vU=) 14: 323630323a663939323a66363a3a2f34382d3438203d3e203533363637.roa (hash: sENJdG2CAk2ncOxoRbfpkGE6oUC5cWz8NGXE5l1PbdQ=) 15: 323630323a663939323a39303a3a2f34342d3438203d3e203236303432.roa (hash: MoXC/8DWDCDJNU7C3Mk26mgfoj92Dv/12Z/ZM6kBr4o=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 18:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:e0:a4:81:b4:eb:c7:aa:ec:32:dc:f3:7e:42:ed:0b:8b:30:2f:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355 Validity Not Before: Jul 22 17:22:05 2025 GMT Not After : Jul 23 18:44:05 2025 GMT Subject: CN=A2284F4F475205653D730433D5EAB188264E2071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:68:7d:72:4a:8e:10:b6:16:b0:bf:9b:e7:48: cd:2e:84:96:31:d1:37:4c:76:0f:f2:2f:e2:05:74: 33:21:0a:ab:ba:a1:39:d0:1b:73:60:7a:88:af:f9: 0d:2f:09:95:81:07:9f:58:e4:3a:11:31:03:e4:f6: 10:36:a3:76:1d:cc:29:4b:51:e7:38:5b:37:15:c1: 2e:d2:14:e4:6d:3a:5b:c6:c8:e8:7b:15:4d:14:30: df:ae:02:ee:2d:b9:93:9c:11:a0:3b:28:74:7e:52: ed:24:ff:21:ff:f0:27:09:dc:bc:df:66:13:82:aa: 1a:6a:bf:e4:96:3c:bc:10:f7:b0:37:a9:2e:41:07: 8a:31:4e:a9:27:b1:55:e0:05:4e:87:22:d1:02:76: 7f:58:2c:99:20:c6:1a:9a:d2:c6:eb:5f:b9:50:34: e0:66:e2:9c:93:02:75:9a:b7:8f:80:b0:cd:65:7a: bb:eb:78:04:d2:1e:c9:00:9c:aa:5c:80:44:12:69: 9d:33:44:92:d4:4e:82:34:3a:57:39:a4:c0:88:d5: a3:7e:b2:4f:b2:c0:9f:c2:e0:d5:0e:bf:69:ca:73: d3:1e:6c:42:35:01:4e:7a:b1:16:3e:c9:79:4e:32: 97:9e:26:2b:12:e5:07:70:6d:e8:1d:ba:a1:1c:e7: 87:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:28:4F:4F:47:52:05:65:3D:73:04:33:D5:EA:B1:88:26:4E:20:71 X509v3 Authority Key Identifier: keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:a6:ff:72:09:51:96:a0:c0:71:c7:7b:83:8f:e6:23:b4:cb: 8d:57:33:ca:2d:39:83:75:dc:39:f2:90:ff:33:ae:ad:f9:e4: 76:f8:23:0f:74:50:cb:e2:59:6d:f2:65:d0:53:c2:ea:e5:bf: 0f:a4:98:69:ce:a3:48:a3:1d:72:06:66:b0:77:cc:d6:e8:a5: 4e:c6:b7:ae:ef:02:3c:ec:eb:88:d3:1b:26:b7:b5:57:dd:28: 23:e1:90:93:ef:dc:1d:ab:f6:39:65:84:7d:95:6b:d0:46:69: 4c:84:1f:c8:35:1d:bd:7a:b7:a4:f9:e2:6a:32:fc:82:c5:a8: 67:dc:de:87:71:6b:47:7b:33:4c:c1:52:34:88:a3:45:57:98: 41:56:0b:42:54:b3:9c:5b:1a:6e:23:fd:c1:1d:0a:8e:31:92: a2:2f:a5:e0:27:ca:16:65:a9:02:f8:84:82:7d:e5:4a:bb:ef: 90:39:a4:66:8f:05:b5:dc:30:47:8f:fc:a1:b9:32:df:17:4d: 68:39:da:e5:71:91:29:bd:95:22:11:58:d3:cb:39:32:ed:11: 40:0e:ba:f8:dd:e9:45:0b:e2:9b:9e:0e:22:18:a3:cd:99:2f: 2e:de:98:75:e6:2f:2a:31:65:ca:ea:2f:cd:df:90:83:32:95: f3:c4:28:0b -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUbOCkgbTrx6rsMtzzfkLtC4swL/UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFi ODI4MTc2ZmE0MzEwYjYzNTUwHhcNMjUwNzIyMTcyMjA1WhcNMjUwNzIzMTg0NDA1 WjAzMTEwLwYDVQQDEyhBMjI4NEY0RjQ3NTIwNTY1M0Q3MzA0MzNENUVBQjE4ODI2 NEUyMDcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWh9ckqOELYW sL+b50jNLoSWMdE3THYP8i/iBXQzIQqruqE50BtzYHqIr/kNLwmVgQefWOQ6ETED 5PYQNqN2HcwpS1HnOFs3FcEu0hTkbTpbxsjoexVNFDDfrgLuLbmTnBGgOyh0flLt JP8h//AnCdy832YTgqoaar/kljy8EPewN6kuQQeKMU6pJ7FV4AVOhyLRAnZ/WCyZ IMYamtLG61+5UDTgZuKckwJ1mrePgLDNZXq763gE0h7JAJyqXIBEEmmdM0SS1E6C NDpXOaTAiNWjfrJPssCfwuDVDr9pynPTHmxCNQFOerEWPsl5TjKXniYrEuUHcG3o HbqhHOeHuQIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFKIoT09HUgVlPXMEM9XqsYgm TiBxMB8GA1UdIwQYMBaAFC8PG8Z90rmn4lRWOMFz1ewGDCfQMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5 LTMwOWVkOTdmMzgyNC8xLzJGMEYxQkM2N0REMkI5QTdFMjU0NTYzOEMxNzNENUVD MDYwQzI3RDAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It NGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iOTE1ODEwZC1iOTdhLTQ2OTYtOTU1ZC00 OTVkNWQxMmMzYjUvYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFiODI4 MTc2ZmE0MzEwYjYzNTUuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv ODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2YzODI0LzEvMkYwRjFCQzY3 REQyQjlBN0UyNTQ1NjM4QzE3M0Q1RUMwNjBDMjdEMC5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJ2m/3IJ UZagwHHHe4OP5iO0y41XM8otOYN13DnykP8zrq355Hb4Iw90UMviWW3yZdBTwurl vw+kmGnOo0ijHXIGZrB3zNbopU7Gt67vAjzs64jTGya3tVfdKCPhkJPv3B2r9jll hH2Va9BGaUyEH8g1Hb16t6T54moy/ILFqGfc3odxa0d7M0zBUjSIo0VXmEFWC0JU s5xbGm4j/cEdCo4xkqIvpeAnyhZlqQL4hIJ95Uq775A5pGaPBbXcMEeP/KG5Mt8X TWg52uVxkSm9lSIRWNPLOTLtEUAOuvjd6UUL4pueDiIYo82ZLy7emHXmLyoxZcrq L83fkIMylfPEKAs= -----END CERTIFICATE-----Generated at Tue Jul 22 20:56:26 2025 by rpki-client