$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft File: 2472949B3C234930DBE99B1B5CD5196AB16D151B.mft (raw, json) Hash identifier: Hfw8OL+ssjo2Ag3uqHYqJyGJ6LOF9I0mT5K1QszG16c= Subject key identifier: FD:EB:26:88:3E:CE:0B:D5:E8:86:A1:01:A9:46:D5:50:CC:6A:0D:1D Authority key identifier: 24:72:94:9B:3C:23:49:30:DB:E9:9B:1B:5C:D5:19:6A:B1:6D:15:1B Certificate issuer: /CN=89d4f40fed1166159109937674aef0279ad039550feccf8d61 Certificate serial: 670C8C370398D769EAF02615AB726BC1233119A1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft Manifest number: 0290 Signing time: Wed 23 Jul 2025 09:27:46 +0000 Manifest this update: Wed 23 Jul 2025 09:22:46 +0000 Manifest next update: Thu 24 Jul 2025 09:55:46 +0000 Files and hashes: 1: 323630323a663961323a35353a3a2f34382d3438203d3e20313939353138.roa (hash: Lmh4khK9jqfGM7AgqtrinnAM2ubStxsQ/YZSUwbqCvU=) 2: 323630323a663961323a32303a3a2f34382d3438203d3e203436373636.roa (hash: LOHxn0RgwORnxWPoX7PgNpofW2yqHK4ri4vHvhFnLZQ=) 3: 323630323a663961323a31303a3a2f34382d3438203d3e203436373636.roa (hash: 4IHJsjfC0Zoq18aE2FFzAMYZQpT6YF+Y54OUnxbTiPM=) 4: 2472949B3C234930DBE99B1B5CD5196AB16D151B.crl (hash: NomXlY+Xqq1Hzxz608BSaB3A3LFaNGylVpDdK+Wa06g=) 5: 323630323a663961323a3a2f34382d3438203d3e203436373636.roa (hash: dNvxw0+R2mi2yZ7yZ+PkpHw5t4IMqFyhS0zsCoWaY88=) 6: 32332e3137302e37322e302f32342d3234203d3e203436373636.roa (hash: FghA8Zz7QbzObKv2ia/HqFgnN9W82bmOSCIz6G2zFuE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 09:55:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:0c:8c:37:03:98:d7:69:ea:f0:26:15:ab:72:6b:c1:23:31:19:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89d4f40fed1166159109937674aef0279ad039550feccf8d61 Validity Not Before: Jul 23 09:22:46 2025 GMT Not After : Jul 24 09:55:46 2025 GMT Subject: CN=FDEB26883ECE0BD5E886A101A946D550CC6A0D1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:72:03:65:fb:67:65:72:07:9d:f9:2b:77:8a: 82:36:9c:38:47:5f:52:79:12:ca:8c:c7:89:13:ff: 3d:36:84:36:0f:e5:73:48:bd:71:76:2d:ab:c9:f9: 7b:13:bb:16:b6:2f:33:43:27:86:1f:1d:99:2c:be: 82:ae:a4:e8:e5:3a:02:e6:bf:31:f0:87:71:0e:99: 95:a4:e4:ed:a2:48:22:5c:02:b2:d2:58:60:a2:5e: a1:21:5c:f4:cf:15:67:bf:32:58:3b:f1:1d:1e:dc: 83:54:31:2c:21:0d:b8:f1:52:42:f2:e0:18:d3:ac: 8c:f7:d1:e7:61:47:65:b2:df:19:b8:e5:fc:81:35: 0b:ef:2a:a2:a0:27:85:2e:db:3d:fb:33:e2:ae:4b: 9b:e4:bf:ad:16:83:86:e3:a2:6a:80:8f:9e:dd:06: 76:aa:ff:3e:9a:a7:2e:19:e8:f3:e5:b6:72:e7:47: 1b:53:f1:89:94:bf:93:1a:66:31:4f:d8:86:1f:7e: 0c:fb:0b:04:37:24:70:57:81:c2:7c:f7:8a:56:ef: 82:61:bf:e7:91:1f:47:14:0c:87:8d:97:f0:55:50: e5:9a:ad:c5:84:e4:22:43:99:59:3c:e8:8f:76:df: dc:06:cd:2d:c2:e4:66:d6:d6:26:8a:a3:3c:8d:20: 0c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:EB:26:88:3E:CE:0B:D5:E8:86:A1:01:A9:46:D5:50:CC:6A:0D:1D X509v3 Authority Key Identifier: keyid:24:72:94:9B:3C:23:49:30:DB:E9:9B:1B:5C:D5:19:6A:B1:6D:15:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:3b:fd:ff:95:0b:b5:3b:2d:7f:03:47:8a:6e:4c:87:6f:98: f9:7a:7f:a2:e8:75:68:cb:9b:cd:7d:b4:00:16:4f:2c:63:48: 1b:e6:98:d7:67:b8:0b:b2:0a:41:f5:fd:fc:01:4b:aa:a7:af: 2f:4f:7e:05:5a:15:05:2e:cd:3b:c1:61:0a:4d:45:fd:6b:77: 99:09:de:79:f2:92:c8:4d:6e:40:1f:24:e7:45:46:0d:50:3d: 57:77:85:b9:a9:b9:99:b5:bb:a4:8f:dd:2a:aa:b4:29:82:51: bb:f3:45:9c:27:6b:35:cc:bc:fb:82:9d:d1:4a:92:62:a6:07: ff:e6:47:53:2e:5a:2a:fc:8e:28:d6:5e:cd:8d:e3:0e:c3:eb: 6e:74:29:1c:2b:92:06:0d:7a:8b:de:ba:8d:ee:1e:aa:03:88: d4:02:71:24:f9:10:27:6c:ba:60:8b:21:04:2a:93:21:b4:1e: 6f:41:5f:85:04:dc:d4:33:6d:a1:64:68:22:7b:03:e9:06:93: 06:69:b4:f0:1c:9c:c2:bb:d5:e5:87:3f:08:23:fd:3d:ba:32: 88:3a:da:d3:22:bd:3f:78:4b:6e:c6:9e:c5:ba:a3:12:71:b4: b4:2e:f2:b0:64:84:7d:e2:24:a2:7e:74:12:e9:bf:8d:f6:ce: a7:cb:18:a3 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUZwyMNwOY12nq8CYVq3JrwSMxGaEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODlkNGY0MGZlZDExNjYxNTkxMDk5Mzc2NzRhZWYwMjc5 YWQwMzk1NTBmZWNjZjhkNjEwHhcNMjUwNzIzMDkyMjQ2WhcNMjUwNzI0MDk1NTQ2 WjAzMTEwLwYDVQQDEyhGREVCMjY4ODNFQ0UwQkQ1RTg4NkExMDFBOTQ2RDU1MEND NkEwRDFEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnIDZftnZXIH nfkrd4qCNpw4R19SeRLKjMeJE/89NoQ2D+VzSL1xdi2ryfl7E7sWti8zQyeGHx2Z LL6CrqTo5ToC5r8x8IdxDpmVpOTtokgiXAKy0lhgol6hIVz0zxVnvzJYO/EdHtyD VDEsIQ248VJC8uAY06yM99HnYUdlst8ZuOX8gTUL7yqioCeFLts9+zPirkub5L+t FoOG46JqgI+e3QZ2qv8+mqcuGejz5bZy50cbU/GJlL+TGmYxT9iGH34M+wsENyRw V4HCfPeKVu+CYb/nkR9HFAyHjZfwVVDlmq3FhOQiQ5lZPOiPdt/cBs0twuRm1tYm iqM8jSAMYwIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFP3rJog+zgvV6IahAalG1VDM ag0dMB8GA1UdIwQYMBaAFCRylJs8I0kw2+mbG1zVGWqxbRUbMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3 LWI0MjgxOGNmNTBlOC82LzI0NzI5NDlCM0MyMzQ5MzBEQkU5OUIxQjVDRDUxOTZB QjE2RDE1MUIuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It NGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZDk4NzlkYS0xNDVmLTRmMjEtYTdjMy1k YTZiNTlhMDE2MjUvODlkNGY0MGZlZDExNjYxNTkxMDk5Mzc2NzRhZWYwMjc5YWQw Mzk1NTBmZWNjZjhkNjEuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv ZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1MGU4LzYvMjQ3Mjk0OUIz QzIzNDkzMERCRTk5QjFCNUNENTE5NkFCMTZEMTUxQi5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEA7/f+V C7U7LX8DR4puTIdvmPl6f6LodWjLm819tAAWTyxjSBvmmNdnuAuyCkH1/fwBS6qn ry9PfgVaFQUuzTvBYQpNRf1rd5kJ3nnykshNbkAfJOdFRg1QPVd3hbmpuZm1u6SP 3SqqtCmCUbvzRZwnazXMvPuCndFKkmKmB//mR1MuWir8jijWXs2N4w7D6250KRwr kgYNeoveuo3uHqoDiNQCcST5ECdsumCLIQQqkyG0Hm9BX4UE3NQzbaFkaCJ7A+kG kwZptPAcnMK71eWHPwgj/T26Mog62tMivT94S27GnsW6oxJxtLQu8rBkhH3iJKJ+ dBLpv432zqfLGKM= -----END CERTIFICATE-----Generated at Wed Jul 23 11:38:11 2025 by rpki-client