$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/2/F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839.mft File: F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839.mft (raw, json) Hash identifier: rNjteWoAa64Wgna8sSIOCNP3avNOvIf+WFgqI3I2N6g= Subject key identifier: 0F:2E:03:C8:1D:63:0A:6E:F7:FD:22:51:3B:08:25:0B:E5:42:3B:3D Authority key identifier: F2:B8:38:F0:CA:DE:FE:12:B3:CD:B3:F6:DF:4D:B3:6E:FD:FC:68:39 Certificate issuer: /CN=F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839 Certificate serial: 047A697F42DD435A2D3D33568F5D1ABA60DFE392 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/2/F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839.mft Manifest number: 2A Signing time: Tue 04 Feb 2025 14:37:32 +0000 Manifest this update: Tue 04 Feb 2025 14:32:32 +0000 Manifest next update: Wed 05 Feb 2025 16:34:32 +0000 Files and hashes: 1: 326130613a363034343a613838303a3a2f34342d3434203d3e203533333433.roa (hash: ieiPXHb0LqnIe4Sb9oMzov9gsD9eBVnGkXmjDt9fNGY=) 2: 326130613a363034343a613865303a3a2f34342d3434203d3e203533333433.roa (hash: Nfg5ICrHLSu320VMBbCQ6TD7F+sbO30IAZl9Y/JlTG4=) 3: 326130613a363034343a613834303a3a2f34342d3434203d3e203533333433.roa (hash: k4P0iwy0chjlseBxsYFafLrVL8FxCd23XD2Nx0SaPpI=) 4: F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839.crl (hash: aJWs1hA16njfyhWiqjUvoBGs62YL0p23pVKyY7FG/F4=) 5: 326130613a363034343a613833303a3a2f34342d3434203d3e203533333433.roa (hash: fCZY5bHgmlHT0hgESRZYdq9+cB45WYSuCO2YIDu74c0=) 6: 326130613a363034343a613866303a3a2f34342d3434203d3e203533333433.roa (hash: FW30thSU/B4DifikxnnGU17OdvYzeKNmhH/gqj1T/5g=) Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/2/F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/2/F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839.mft rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839.cer rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Feb 2025 16:34:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:7a:69:7f:42:dd:43:5a:2d:3d:33:56:8f:5d:1a:ba:60:df:e3:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839 Validity Not Before: Feb 4 14:32:32 2025 GMT Not After : Feb 5 16:34:32 2025 GMT Subject: CN=0F2E03C81D630A6EF7FD22513B08250BE5423B3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:bf:65:fe:8a:cd:b4:8e:59:88:5e:bf:3c:89: b0:5a:c8:ec:cd:95:3e:21:90:ff:4d:7d:8c:a9:85: 1a:07:30:29:b7:61:7e:a6:ed:97:6d:9b:f1:b0:8e: e5:78:cf:70:d6:43:31:55:b9:f6:d2:8a:f4:8b:bb: 0f:b3:2f:c9:8e:1a:cc:4b:3a:62:c7:74:a8:26:e0: 0b:8a:a6:ec:c2:e3:7f:6f:61:3c:a1:c2:bb:75:9b: 28:32:1d:7b:d3:72:35:8a:7e:61:93:f6:2a:cb:cd: 73:2a:8b:5d:04:9f:4f:e1:18:ab:27:26:84:c5:e2: 17:e3:d7:cf:6c:6a:d0:e8:da:53:fc:ad:50:37:a5: f9:09:de:32:30:37:74:9f:fb:17:f7:99:24:2d:d9: f9:65:88:a1:a2:fd:39:63:27:25:f7:6c:d3:91:bb: a9:ba:d0:3d:ff:6d:b6:30:99:8e:8b:6e:d2:5d:03: 81:ca:bf:e0:ca:8f:01:e3:17:d9:04:55:41:b4:64: e7:b1:70:d5:12:1f:61:71:a2:43:97:75:76:37:b0: 0d:ce:6c:9c:57:19:06:54:26:b6:ea:18:6c:50:d9: 0d:0c:01:9a:9c:51:a2:50:07:e9:1b:c6:9c:ab:3e: 88:52:0e:a5:0f:91:eb:4b:98:9d:29:b6:be:77:e4: 2d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:2E:03:C8:1D:63:0A:6E:F7:FD:22:51:3B:08:25:0B:E5:42:3B:3D X509v3 Authority Key Identifier: keyid:F2:B8:38:F0:CA:DE:FE:12:B3:CD:B3:F6:DF:4D:B3:6E:FD:FC:68:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/2/F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/2/F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:1e:13:b9:8a:c7:86:52:fa:05:f0:08:63:a3:05:eb:92:96: 7f:fd:8f:60:3d:35:23:42:a8:cc:cd:b7:14:f9:e5:a5:45:fa: d6:a1:35:c2:b7:35:bd:0d:4f:b5:55:41:a5:1e:a8:ac:39:33: 91:7e:cf:6d:7b:52:f9:87:29:ee:1f:fe:f4:ec:40:bf:fb:ea: 8f:9d:0d:20:88:6b:65:d6:f0:2d:15:0b:f4:98:f4:54:bd:04: 93:5e:9d:52:a9:3b:b2:52:b9:b7:3c:8a:bd:d0:5e:c4:00:4b: 6a:8c:2f:64:4d:85:19:9e:05:f7:80:0f:cf:9c:e9:3a:50:47: 87:a0:36:23:14:db:be:9e:5f:5f:ff:da:8d:5b:51:33:96:91: cb:53:17:66:8e:df:38:d4:de:d5:e2:8d:f6:f4:c5:0c:8b:01: c1:35:e7:fa:4c:51:80:a1:9e:35:3c:79:c6:27:ee:3e:eb:58: 06:78:94:ca:c7:f3:f9:c1:c9:f3:c6:86:db:47:d7:d8:b6:f5: c5:b8:b7:46:b2:64:b6:fd:a2:3f:e7:af:9a:a8:0a:b5:bb:cb: 2c:0b:92:6b:48:48:ae:1d:c8:cc:d7:8a:e3:aa:b3:9d:40:d3: 8c:56:e5:c7:41:d4:27:44:02:7e:37:b1:ab:7a:60:e9:41:21: c6:b8:cb:be -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIUBHppf0LdQ1otPTNWj10aumDf45IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJCODM4RjBDQURFRkUxMkIzQ0RCM0Y2REY0REIzNkVG REZDNjgzOTAeFw0yNTAyMDQxNDMyMzJaFw0yNTAyMDUxNjM0MzJaMDMxMTAvBgNV BAMTKDBGMkUwM0M4MUQ2MzBBNkVGN0ZEMjI1MTNCMDgyNTBCRTU0MjNCM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOv2X+is20jlmIXr88ibBayOzN lT4hkP9NfYyphRoHMCm3YX6m7Zdtm/GwjuV4z3DWQzFVufbSivSLuw+zL8mOGsxL OmLHdKgm4AuKpuzC439vYTyhwrt1mygyHXvTcjWKfmGT9irLzXMqi10En0/hGKsn JoTF4hfj189satDo2lP8rVA3pfkJ3jIwN3Sf+xf3mSQt2flliKGi/TljJyX3bNOR u6m60D3/bbYwmY6LbtJdA4HKv+DKjwHjF9kEVUG0ZOexcNUSH2FxokOXdXY3sA3O bJxXGQZUJrbqGGxQ2Q0MAZqcUaJQB+kbxpyrPohSDqUPketLmJ0ptr535C3VAgMB AAGjggJnMIICYzAdBgNVHQ4EFgQUDy4DyB1jCm73/SJROwglC+VCOz0wHwYDVR0j BBgwFoAU8rg48Mre/hKzzbP2302zbv38aDkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTQzZDU4MzZmZjFiMjkvMi9GMkI4MzhGMENB REVGRTEyQjNDREIzRjZERjREQjM2RUZERkM2ODM5LmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzMyNTNkOTczLWQ1YmYtNDU0MS1iY2MxLTI3NjU0M2Ey NWM3ZC8wL0YyQjgzOEYwQ0FERUZFMTJCM0NEQjNGNkRGNERCMzZFRkRGQzY4Mzku Y2VyMIGTBggrBgEFBQcBCwSBhjCBgzCBgAYIKwYBBQUHMAuGdHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjkyZWU0ZDg0MDE5NDNk NTgzNmZmMWIyOS8yL0YyQjgzOEYwQ0FERUZFMTJCM0NEQjNGNkRGNERCMzZFRkRG QzY4MzkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcB Af8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0G CSqGSIb3DQEBCwUAA4IBAQCEHhO5iseGUvoF8AhjowXrkpZ//Y9gPTUjQqjMzbcU +eWlRfrWoTXCtzW9DU+1VUGlHqisOTORfs9te1L5hynuH/707EC/++qPnQ0giGtl 1vAtFQv0mPRUvQSTXp1SqTuyUrm3PIq90F7EAEtqjC9kTYUZngX3gA/PnOk6UEeH oDYjFNu+nl9f/9qNW1EzlpHLUxdmjt841N7V4o329MUMiwHBNef6TFGAoZ41PHnG J+4+61gGeJTKx/P5wcnzxobbR9fYtvXFuLdGsmS2/aI/56+aqAq1u8ssC5JrSEiu HcjM14rjqrOdQNOMVuXHQdQnRAJ+N7GremDpQSHGuMu+ -----END CERTIFICATE-----Generated at Wed Feb 5 08:40:08 2025 by rpki-client