$ rpki-client -vvf rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/D4700D8E6F022571A0B26FCD4C70C0408EA4FFC9.mft File: D4700D8E6F022571A0B26FCD4C70C0408EA4FFC9.mft (raw, json) Hash identifier: ldSZIqZH6CVrvp5cw7sjYnXto5ws7nyBU2Z9KgsCwN4= Subject key identifier: 52:49:E1:8E:79:77:9B:BD:2F:DA:B4:63:92:6F:CF:B2:A6:19:D8:00 Authority key identifier: D4:70:0D:8E:6F:02:25:71:A0:B2:6F:CD:4C:70:C0:40:8E:A4:FF:C9 Certificate issuer: /CN=d4700d8e6f022571a0b26fcd4c70c0408ea4ffc9 Certificate serial: 154ACCF19A6C364FF5676C44609D3E28CD43DC99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HANjm8CJXGgsm_NTHDAQI6k_8k.cer Subject info access: rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/D4700D8E6F022571A0B26FCD4C70C0408EA4FFC9.mft Manifest number: 29 Signing time: Wed 02 Jul 2025 07:37:51 +0000 Manifest this update: Wed 02 Jul 2025 07:32:51 +0000 Manifest next update: Thu 03 Jul 2025 08:25:51 +0000 Files and hashes: 1: 326131333a633030373a393030303a3a2f33362d3438203d3e2030.roa (hash: IpqOgnJCnuHs3dbg22KA9hao6/QT7x8yp0d5Q6WeR40=) 2: 3138352e3135352e37352e302f32342d3234203d3e20393435.roa (hash: WPn5J0ZJyOxbzpBehWL9SeR3ZFEYJFenOXb3iX/q+Zc=) 3: 326131333a633030373a383031383a3a2f34372d3438203d3e2030.roa (hash: /XizzDEjWfHtXHc0Ab5o0ZbY35Db7SjtES+r1/OhmjA=) 4: 326131333a633030373a383038303a3a2f34312d3438203d3e2030.roa (hash: F3j42vEXuR9TD5CGRl6IWwbxl3bjJmLrzfF1Jm3xeG8=) 5: D4700D8E6F022571A0B26FCD4C70C0408EA4FFC9.crl (hash: g+UpcRhq6emEaSR913KozS7MEQjTnzB48PSNbR7H8IY=) 6: 326131333a633030373a383031303a3a2f34352d3438203d3e2030.roa (hash: jXSyObdaIfoxdZWPXkVrtrLjNc9eUeccuHBi6nz0ja4=) 7: 326131333a633030373a613030303a3a2f33352d3438203d3e2030.roa (hash: t1VC4uavhMwi+rLajyzifqq7lHEKSJvbn1aUAzhK6Vw=) 8: 326131333a633030363a3a2f33322d3438203d3e2030.roa (hash: PEHCNRXMCXL+HEcUr83e5fTmiot0KdUcnmEHSoSVK1I=) 9: 326131333a633030373a383032303a3a2f34332d3438203d3e2030.roa (hash: lS/+eqejkM/rl3fdhtwfs2NHf4fMlzt/WaaRv3PSNX8=) 10: 326131333a633030373a383230303a3a2f33392d3438203d3e2030.roa (hash: hhEj2TPgfyTRfuPypwsku9jubrEB+Go1ofo7gyUb+jE=) 11: 326131333a633030343a3a2f33312d3438203d3e2030.roa (hash: VTk49chKjpiGUIW6naR7NDQ2bm7mg+x/mnjZWs6qxJ8=) 12: 326131333a633030373a383034303a3a2f34322d3438203d3e2030.roa (hash: mKh9yX+9Ow/gLw9uVu5d28cdHUwWXdzVGDlkC7RkriM=) 13: 326131333a633030373a383830303a3a2f33372d3438203d3e2030.roa (hash: qwC4gOoNRPJmvwdKsOW1qnXkKg6zUfo4tNiu1ZwNGIw=) 14: 326131333a633030373a3a2f33332d3438203d3e2030.roa (hash: 4ogO7FSYIWTMHa7NHAKjnemXmD5Q4AEg/2Lor8ugtNI=) 15: 326131333a633030303a3a2f33302d3438203d3e2030.roa (hash: O6U7denQKZOkjD1O7JC+xkyevhCiAPrAfcyp00txZ7M=) 16: 326131333a633030373a633030303a3a2f33342d3438203d3e2030.roa (hash: /v4SqfX+BigD9dMYATYfyaCFabkOlXsoTeJ2iudcdLE=) 17: 3138352e3135352e37352e302f32342d3234203d3e203439383637.roa (hash: 2BM7Up/uRpC2kGUw5rjIZjF1FqK6q9BWKbfrDV6CTuE=) 18: 326131333a633030373a383031613a3a2f34382d3438203d3e2030.roa (hash: IG+vZ/fPQSrx47BMYI7QMTGbob3LNGJ8H7YniLo/348=) 19: 326131333a633030373a383130303a3a2f34302d3438203d3e2030.roa (hash: 9TmRdtFuh9L1/cYO0eIjBNXNZCtbMYGiVPpJ+wymmgs=) 20: 326131333a633030373a383430303a3a2f33382d3438203d3e2030.roa (hash: d6N0+0TZNxx3tF0UVuD1QxzSk1b8yaiVA5XlfyW++pE=) Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/D4700D8E6F022571A0B26FCD4C70C0408EA4FFC9.crl rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/D4700D8E6F022571A0B26FCD4C70C0408EA4FFC9.mft rsync://rpki.ripe.net/repository/DEFAULT/1HANjm8CJXGgsm_NTHDAQI6k_8k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:4a:cc:f1:9a:6c:36:4f:f5:67:6c:44:60:9d:3e:28:cd:43:dc:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4700d8e6f022571a0b26fcd4c70c0408ea4ffc9 Validity Not Before: Jul 2 07:32:51 2025 GMT Not After : Jul 3 08:25:51 2025 GMT Subject: CN=5249E18E79779BBD2FDAB463926FCFB2A619D800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:5c:35:47:ef:26:06:72:bf:66:56:f4:96:4a: bd:b6:9f:35:f5:83:c7:67:9d:b8:c7:19:a8:11:63: df:23:f8:1d:55:2b:f3:6e:90:e2:14:77:fe:ef:09: 18:ca:d6:09:97:6c:88:bc:6b:d4:7c:9b:3a:dd:8d: 27:f7:05:91:97:87:98:41:36:04:f6:3f:78:a6:9b: fc:af:5f:0d:dd:73:df:6c:1f:b0:07:51:39:64:ea: 0f:e2:20:2d:3a:2e:1e:c5:4d:75:a8:1e:39:96:74: e1:38:dd:c9:af:e4:f0:29:7b:29:9c:b3:7d:8e:8a: d3:96:c6:20:61:ac:8b:dd:3b:25:e8:66:ae:5e:82: 1a:69:7a:b1:68:d3:65:17:c7:5c:b1:a5:af:c0:34: 01:90:61:fe:3c:31:b2:61:3d:87:df:e3:18:40:cc: 2c:0d:41:a0:03:f6:f4:cc:3c:a7:18:04:f6:3b:8a: 74:64:a9:e1:01:26:f6:d4:4b:75:15:e4:ab:54:8a: 11:cc:78:5f:4c:35:0f:6c:5d:90:42:78:40:79:16: 20:14:e7:21:97:7b:14:81:f5:94:b2:2a:a7:ac:b7: fd:a4:bc:4d:a6:91:45:0a:b2:f0:89:ce:f3:48:99: 9e:49:d6:bb:8c:ad:92:eb:ce:1f:0c:5b:97:33:21: e1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:49:E1:8E:79:77:9B:BD:2F:DA:B4:63:92:6F:CF:B2:A6:19:D8:00 X509v3 Authority Key Identifier: keyid:D4:70:0D:8E:6F:02:25:71:A0:B2:6F:CD:4C:70:C0:40:8E:A4:FF:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/D4700D8E6F022571A0B26FCD4C70C0408EA4FFC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HANjm8CJXGgsm_NTHDAQI6k_8k.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/D4700D8E6F022571A0B26FCD4C70C0408EA4FFC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:6d:c8:da:c3:85:85:75:77:b2:0b:fc:45:be:9d:ef:be:1d: a9:50:68:fe:7f:82:f2:bd:92:c7:43:a9:7a:ec:c6:ff:21:d9: fa:47:05:0e:09:b4:c8:ce:ca:9c:03:be:a5:20:db:d0:dc:e0: 0e:ae:57:fd:47:e0:41:ea:ac:7f:0e:9e:65:bf:a4:be:2a:08: 9f:7d:c1:0f:bb:b5:f0:fe:a4:c1:38:45:50:76:91:32:56:26: 36:da:7e:8a:29:75:32:ed:e0:8d:ae:a0:57:68:d6:50:56:bc: 60:3f:00:57:17:24:ea:e2:ef:ac:ab:f8:04:30:ee:ea:82:12: 46:50:5d:0a:ce:9e:d8:b5:67:5e:bb:2b:41:e4:d5:f5:c4:df: 60:0d:3c:d8:6e:6e:4d:f6:40:01:8e:20:ad:c8:63:b7:be:21: af:bc:a0:39:3b:f6:d6:03:a8:fa:59:5c:80:e8:2e:ff:25:55: c1:a7:46:35:e6:72:24:c8:b8:31:0b:4a:b4:ca:a6:bc:75:e5: a7:c0:c8:cb:0e:2b:27:07:cf:e3:d9:56:6e:4f:5f:6b:07:2c: e2:5b:33:4d:92:6a:98:b9:c4:39:e7:18:26:f5:6e:c2:4f:aa: da:af:50:bc:f3:4d:a4:f0:bb:ce:e0:83:41:12:e1:4f:c8:d6: 0e:a5:f2:d8 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIUFUrM8ZpsNk/1Z2xEYJ0+KM1D3JkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDQ3MDBkOGU2ZjAyMjU3MWEwYjI2ZmNkNGM3MGMwNDA4 ZWE0ZmZjOTAeFw0yNTA3MDIwNzMyNTFaFw0yNTA3MDMwODI1NTFaMDMxMTAvBgNV BAMTKDUyNDlFMThFNzk3NzlCQkQyRkRBQjQ2MzkyNkZDRkIyQTYxOUQ4MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXXDVH7yYGcr9mVvSWSr22nzX1 g8dnnbjHGagRY98j+B1VK/NukOIUd/7vCRjK1gmXbIi8a9R8mzrdjSf3BZGXh5hB NgT2P3imm/yvXw3dc99sH7AHUTlk6g/iIC06Lh7FTXWoHjmWdOE43cmv5PApeymc s32OitOWxiBhrIvdOyXoZq5eghpperFo02UXx1yxpa/ANAGQYf48MbJhPYff4xhA zCwNQaAD9vTMPKcYBPY7inRkqeEBJvbUS3UV5KtUihHMeF9MNQ9sXZBCeEB5FiAU 5yGXexSB9ZSyKqest/2kvE2mkUUKsvCJzvNImZ5J1ruMrZLrzh8MW5czIeGRAgMB AAGjggIuMIICKjAdBgNVHQ4EFgQUUknhjnl3m70v2rRjkm/PsqYZ2AAwHwYDVR0j BBgwFoAU1HANjm8CJXGgsm/NTHDAQI6k/8kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvNmFiOTZlN2E2MTMwNDk4YWE5ODEzZDdlZTViYmVkMzEvMTEvRDQ3MDBEOEU2 RjAyMjU3MUEwQjI2RkNENEM3MEMwNDA4RUE0RkZDOS5jcmwwZAYIKwYBBQUHAQEE WDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxULzFIQU5qbThDSlhHZ3NtX05USERBUUk2a184ay5jZXIwgZQGCCsG AQUFBwELBIGHMIGEMIGBBggrBgEFBQcwC4Z1cnN5bmM6Ly9ycGtpLXJwcy5hcmlu Lm5ldC9yZXBvc2l0b3J5LzZhYjk2ZTdhNjEzMDQ5OGFhOTgxM2Q3ZWU1YmJlZDMx LzExL0Q0NzAwRDhFNkYwMjI1NzFBMEIyNkZDRDRDNzBDMDQwOEVBNEZGQzkubWZ0 MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYE AgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIbcjaw4WFdXeyC/xFvp3vvh2pUGj+f4LyvZLHQ6l67Mb/Idn6RwUO CbTIzsqcA76lINvQ3OAOrlf9R+BB6qx/Dp5lv6S+KgiffcEPu7Xw/qTBOEVQdpEy ViY22n6KKXUy7eCNrqBXaNZQVrxgPwBXFyTq4u+sq/gEMO7qghJGUF0Kzp7YtWde uytB5NX1xN9gDTzYbm5N9kABjiCtyGO3viGvvKA5O/bWA6j6WVyA6C7/JVXBp0Y1 5nIkyLgxC0q0yqa8deWnwMjLDisnB8/j2VZuT19rByziWzNNkmqYucQ55xgm9W7C T6rar1C8802k8LvO4INBEuFPyNYOpfLY -----END CERTIFICATE-----Generated at Wed Jul 2 11:19:49 2025 by rpki-client