$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft File: D74983C1FABA0CC1566F0601AFE11423E11B5171.mft (raw, json) Hash identifier: SxzAbs7rq6Ku8ueUhUnaPUN0VhkhsSw6qVnKaWOpcXc= Subject key identifier: F5:D8:23:17:E8:54:54:FC:EB:94:E1:A2:99:38:2C:9E:B7:08:AF:1B Authority key identifier: D7:49:83:C1:FA:BA:0C:C1:56:6F:06:01:AF:E1:14:23:E1:1B:51:71 Certificate issuer: /CN=4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c Certificate serial: 0788A8E5D63224C17EB0A391E0EE7E63B7BA48EE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft Manifest number: 03CC Signing time: Tue 22 Jul 2025 20:01:20 +0000 Manifest this update: Tue 22 Jul 2025 19:56:20 +0000 Manifest next update: Wed 23 Jul 2025 23:29:20 +0000 Files and hashes: 1: 323630323a666137613a3a2f34302d3438203d3e203537383730.roa (hash: KXZ5ssTmjUClZY+9bglfiLRlAhs+b4BWP1fzlqp7SIY=) 2: 323630323a666137613a3a2f34302d3438203d3e203539393933.roa (hash: xlMWcnMOkntkvkwmItiIw9KHDflxZx0Jsc2LELbETrw=) 3: D74983C1FABA0CC1566F0601AFE11423E11B5171.crl (hash: xnfUR0z283WbLx79L8droZWamROHcLx9nupKb3zJv9c=) 4: 32332e3135332e3233322e302f32342d3234203d3e203539393933.roa (hash: mlyVBtqAxaep1RbpdRUfXUrnFdjKT6MGiKPIjo5bDE0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.crl rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 23:29:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:88:a8:e5:d6:32:24:c1:7e:b0:a3:91:e0:ee:7e:63:b7:ba:48:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c Validity Not Before: Jul 22 19:56:20 2025 GMT Not After : Jul 23 23:29:20 2025 GMT Subject: CN=F5D82317E85454FCEB94E1A299382C9EB708AF1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:5d:be:b8:e9:4e:50:8f:35:f3:53:99:7f:08: c0:32:30:e8:77:34:de:d9:26:0f:a7:99:e5:ec:f0: a8:25:6f:bb:09:c1:b3:ae:a3:9e:8e:52:af:54:75: 25:c7:d6:49:b7:9d:7d:5d:aa:96:e1:95:f9:44:4c: c2:5e:56:0a:90:3f:c6:db:52:eb:6e:22:1f:56:55: 59:de:48:48:01:c2:63:e2:c1:a2:56:9c:13:93:0e: 1e:84:f0:3c:6e:18:c6:97:92:dd:11:c3:7d:22:1f: b2:5c:b8:fa:bd:80:e2:69:b3:a6:54:0a:0f:75:7c: 4c:26:b6:86:19:25:1a:4a:40:88:44:e2:dc:d7:e5: 02:32:85:87:5f:20:47:0d:4e:77:69:9a:22:c0:6c: 17:cf:39:e5:2d:ac:00:5e:4f:44:7d:57:ec:bf:3e: 8a:ee:c1:42:b1:47:14:23:a2:3b:4d:4b:28:ae:83: 5a:2a:ea:79:f1:41:35:ec:14:b0:f7:16:0a:09:66: dc:53:1f:24:6d:5b:07:f5:4d:46:7e:bf:6b:df:c2: 16:66:9c:90:a8:e5:07:b4:14:79:98:f9:8c:9b:0b: 5c:46:94:a7:22:11:c7:67:fc:95:74:3b:45:77:5d: b5:02:84:75:0f:f4:b2:8f:d9:67:4d:ea:1a:c7:fc: af:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:D8:23:17:E8:54:54:FC:EB:94:E1:A2:99:38:2C:9E:B7:08:AF:1B X509v3 Authority Key Identifier: keyid:D7:49:83:C1:FA:BA:0C:C1:56:6F:06:01:AF:E1:14:23:E1:1B:51:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:86:dc:0f:bd:98:39:f2:9b:b8:81:b1:e1:cb:e5:00:17:7c: b2:86:06:86:14:79:b6:21:58:b5:06:b5:e9:7d:84:a7:b0:2e: f7:eb:59:48:96:c4:ae:42:b9:e6:b0:29:dc:33:24:73:aa:82: 97:63:bb:a7:9f:93:dc:67:91:f3:2b:ce:f3:6e:2d:43:b2:9d: 42:0b:19:c3:18:15:63:9c:e3:e1:e2:27:27:25:29:54:e1:62: de:73:10:36:d6:fa:22:d7:30:b5:51:89:bf:bb:c6:99:81:68: 39:e8:83:65:08:65:e2:f2:57:a8:0e:8c:c4:08:8c:48:00:89: 2b:78:02:f3:31:fd:0c:bd:3f:63:58:eb:79:6e:12:e8:a2:ef: 55:60:4e:39:8c:fc:63:76:48:a8:0d:a7:b0:e6:c8:d0:69:30: 84:f5:4c:e5:62:2d:fe:87:7c:b7:b3:34:1c:ce:59:20:d6:bd: 02:01:bc:61:c0:66:72:bd:b8:27:ee:08:e9:71:08:20:7d:3c: 85:2f:e5:c8:91:a7:40:a5:e5:fc:c6:e7:1c:d9:63:ab:ce:7b: 66:7f:07:cf:73:2e:0d:ce:b9:4e:5b:e8:51:b1:61:15:42:b1: 12:22:db:85:86:be:9c:cc:5d:9c:32:bc:26:4c:4c:6b:a2:7a: 96:c2:9f:56 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUB4io5dYyJMF+sKOR4O5+Y7e6SO4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNGI0M2M2NGE2ODBlZmRjNTFhMDA0NjMxNzJiOGY1YWZm OTQ1ZTA3MzNmYzQ5YzJlNGMwHhcNMjUwNzIyMTk1NjIwWhcNMjUwNzIzMjMyOTIw WjAzMTEwLwYDVQQDEyhGNUQ4MjMxN0U4NTQ1NEZDRUI5NEUxQTI5OTM4MkM5RUI3 MDhBRjFCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3l2+uOlOUI81 81OZfwjAMjDodzTe2SYPp5nl7PCoJW+7CcGzrqOejlKvVHUlx9ZJt519XaqW4ZX5 REzCXlYKkD/G21LrbiIfVlVZ3khIAcJj4sGiVpwTkw4ehPA8bhjGl5LdEcN9Ih+y XLj6vYDiabOmVAoPdXxMJraGGSUaSkCIROLc1+UCMoWHXyBHDU53aZoiwGwXzznl LawAXk9EfVfsvz6K7sFCsUcUI6I7TUsoroNaKup58UE17BSw9xYKCWbcUx8kbVsH 9U1Gfr9r38IWZpyQqOUHtBR5mPmMmwtcRpSnIhHHZ/yVdDtFd121AoR1D/Syj9ln Teoax/yvTQIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFPXYIxfoVFT865Thopk4LJ63 CK8bMB8GA1UdIwQYMBaAFNdJg8H6ugzBVm8GAa/hFCPhG1FxMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FlNmVkZWVjLTA4YmEtNGNkZS04OTc5 LTRmYWVhNGIxYmMxMi83L0Q3NDk4M0MxRkFCQTBDQzE1NjZGMDYwMUFGRTExNDIz RTExQjUxNzEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2Mt NGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMTUwZTk4ZC04MGU5LTQ1ZjYtYmM2My02 YjQwYTNkNTllOWMvNGI0M2M2NGE2ODBlZmRjNTFhMDA0NjMxNzJiOGY1YWZmOTQ1 ZTA3MzNmYzQ5YzJlNGMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv YWU2ZWRlZWMtMDhiYS00Y2RlLTg5NzktNGZhZWE0YjFiYzEyLzcvRDc0OTgzQzFG QUJBMENDMTU2NkYwNjAxQUZFMTE0MjNFMTFCNTE3MS5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAECG3A+9 mDnym7iBseHL5QAXfLKGBoYUebYhWLUGtel9hKewLvfrWUiWxK5CueawKdwzJHOq gpdju6efk9xnkfMrzvNuLUOynUILGcMYFWOc4+HiJyclKVThYt5zEDbW+iLXMLVR ib+7xpmBaDnog2UIZeLyV6gOjMQIjEgAiSt4AvMx/Qy9P2NY63luEuii71VgTjmM /GN2SKgNp7DmyNBpMIT1TOViLf6HfLezNBzOWSDWvQIBvGHAZnK9uCfuCOlxCCB9 PIUv5ciRp0Cl5fzG5xzZY6vOe2Z/B89zLg3OuU5b6FGxYRVCsRIi24WGvpzMXZwy vCZMTGuiepbCn1Y= -----END CERTIFICATE-----Generated at Wed Jul 23 01:23:45 2025 by rpki-client