$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.mft File: FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.mft (raw, json) Hash identifier: dfk5UAfXoI0zv+OefUimaKGt77PDUEU4GEffJQTXNb4= Subject key identifier: 1E:6F:8D:51:7E:89:45:E1:A7:61:54:F4:08:C5:D7:12:CE:DD:18:C1 Authority key identifier: FA:A6:C4:25:29:3C:8A:7F:9C:2F:C9:84:EF:0E:26:A2:76:3D:97:7D Certificate issuer: /CN=03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80 Certificate serial: 22534EF66B7C2EF2F3B5A235127A69EA91E5B176 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.mft Manifest number: E0 Signing time: Fri 06 Jun 2025 09:57:12 +0000 Manifest this update: Fri 06 Jun 2025 09:52:12 +0000 Manifest next update: Sat 07 Jun 2025 13:44:12 +0000 Files and hashes: 1: 323630323a663736313a3a2f34302d3430203d3e20333937373330.roa (hash: nA09F4i7ezyxrO7OoVlToYHyYyAdhivh99ADt+i0fxw=) 2: FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.crl (hash: C/KQqI6aan0yTGdKj8mQjQm0K7fk9rj/OXi4D+vMP/I=) 3: 323630323a663736313a3a2f34302d3438203d3e20333937373330.roa (hash: UabIBDSP/jRxPjVYe42Rz6FfziQlrmtKMNVTrVjL1tk=) 4: 32332e3133322e39322e302f32342d3234203d3e20333937373330.roa (hash: BrbquvaT7gSaBvF2dUV9AqKeXE06mRUUDpvsSUbe408=) 5: 323630323a663736313a33303a3a2f34342d3434203d3e20323134373638.roa (hash: 0zlxQTxh7vvfaeWuK2Hw3nih0UKatPrmAKiXcV1p/ig=) 6: 323630323a663736313a32303a3a2f34342d3434203d3e20323134373638.roa (hash: L5IT8JeK38uNLCiVqoJ/A1O+xsuyrDeUorstCcbnlko=) 7: 32332e3133322e39322e302f32342d3234203d3e20323134373638.roa (hash: NdlK1zYqdrKSuU5F6Cse146TEQ/3Wx9fQDxzRBJIZZw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.crl rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/da272869-5127-4af6-8053-b8617ccb9de3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/da272869-5127-4af6-8053-b8617ccb9de3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 13:44:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:53:4e:f6:6b:7c:2e:f2:f3:b5:a2:35:12:7a:69:ea:91:e5:b1:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80 Validity Not Before: Jun 6 09:52:12 2025 GMT Not After : Jun 7 13:44:12 2025 GMT Subject: CN=1E6F8D517E8945E1A76154F408C5D712CEDD18C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ac:cd:95:6d:96:a2:bd:89:5a:70:d6:a1:4b: 77:84:21:50:56:a4:68:ad:0b:10:8f:74:bc:b2:1c: 76:7d:a1:21:35:b2:6e:eb:17:08:df:a3:a9:3f:1d: de:91:3c:53:24:bf:2f:02:aa:65:2e:8d:70:29:4c: c9:cb:23:b9:06:64:7e:90:71:55:6d:9c:a7:1a:40: 73:bc:ad:da:bf:17:cf:75:c0:71:07:42:0a:a6:c4: 66:df:31:b3:ac:24:59:21:67:d5:2a:05:a8:8c:f2: 42:fc:0e:c3:10:95:84:51:fb:44:bd:b1:e7:99:f1: 49:d4:d3:27:9d:89:71:7c:9f:ca:88:1d:2d:29:69: a0:71:5b:93:4e:0a:0c:f4:0c:e7:5a:e6:9f:e0:27: 9b:5a:3d:51:a0:ff:3f:08:39:4b:52:25:dc:fd:f5: ce:07:dd:56:04:d3:6c:12:29:83:4b:db:0a:da:11: 16:1c:74:16:cb:c7:11:db:d9:72:ee:3b:3c:fc:33: b2:63:2b:99:3d:6b:cf:92:32:a2:69:92:2a:07:a0: 8f:56:32:1d:db:cf:1d:87:15:97:0f:a1:da:ba:a9: d4:61:d2:d7:e0:06:83:2a:31:26:4c:67:5e:08:9e: c5:13:a3:4d:24:35:9e:23:c1:7f:41:0b:19:14:ca: 4f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:6F:8D:51:7E:89:45:E1:A7:61:54:F4:08:C5:D7:12:CE:DD:18:C1 X509v3 Authority Key Identifier: keyid:FA:A6:C4:25:29:3C:8A:7F:9C:2F:C9:84:EF:0E:26:A2:76:3D:97:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:16:ea:2c:d2:6c:e0:21:81:f6:e9:24:ca:cc:4d:3e:11:89: ed:1a:26:db:3d:10:ec:a2:2e:f0:45:9e:04:d8:0f:3d:ad:84: 5f:29:7d:11:07:f4:fc:33:c7:ca:9d:ec:f4:85:49:9c:7a:8e: 27:3e:2c:88:a3:ee:d2:3b:23:b1:12:fa:60:bc:4c:37:0c:49: b0:98:96:00:aa:13:e3:b7:4a:01:5a:99:70:9b:79:49:a6:f6: fe:4c:46:2c:23:5b:f9:65:b6:14:d9:60:5a:57:90:69:d4:24: 82:47:b4:25:ed:56:5c:2f:ad:e2:b4:da:4d:85:5c:fc:e0:d6: 0f:21:a2:fc:f0:be:72:ff:d7:0c:3d:06:52:bd:88:1d:b0:45: 48:70:b8:59:99:fd:77:bc:c7:34:2b:69:2f:ae:57:79:f6:c9: 90:d9:82:cc:19:cb:98:55:ec:db:f9:32:2f:05:b1:3a:5d:12: 63:29:b6:fe:ed:d5:5e:28:a3:71:c7:d9:b2:05:e8:35:08:7f: c4:68:e6:3b:5a:2a:2d:81:0c:63:06:a6:34:22:04:3a:d5:9b: 6f:b1:9c:1e:ea:0c:e6:27:3c:7a:6d:71:13:ce:cc:ed:21:18: 43:d3:ec:20:7c:c2:d0:5c:6e:1d:d0:5e:54:d9:3e:53:07:7c: 76:00:49:73 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUIlNO9mt8LvLztaI1Enpp6pHlsXYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMDMwNjhjYmU4ODk0ZDVkNzM1ZjkxZWRiOWU0MzM3NWNj NTdjMzZkMTMyNDI4NWFhODAwHhcNMjUwNjA2MDk1MjEyWhcNMjUwNjA3MTM0NDEy WjAzMTEwLwYDVQQDEygxRTZGOEQ1MTdFODk0NUUxQTc2MTU0RjQwOEM1RDcxMkNF REQxOEMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqzNlW2Wor2J WnDWoUt3hCFQVqRorQsQj3S8shx2faEhNbJu6xcI36OpPx3ekTxTJL8vAqplLo1w KUzJyyO5BmR+kHFVbZynGkBzvK3avxfPdcBxB0IKpsRm3zGzrCRZIWfVKgWojPJC /A7DEJWEUftEvbHnmfFJ1NMnnYlxfJ/KiB0tKWmgcVuTTgoM9AznWuaf4CebWj1R oP8/CDlLUiXc/fXOB91WBNNsEimDS9sK2hEWHHQWy8cR29ly7js8/DOyYyuZPWvP kjKiaZIqB6CPVjId288dhxWXD6HauqnUYdLX4AaDKjEmTGdeCJ7FE6NNJDWeI8F/ QQsZFMpPjQIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFB5vjVF+iUXhp2FU9AjF1xLO 3RjBMB8GA1UdIwQYMBaAFPqmxCUpPIp/nC/JhO8OJqJ2PZd9MA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIzY2RmOWNhLWRkNjQtNGYzMS1hYmYz LTBmMzJiOGU3ZmU3OS8zL0ZBQTZDNDI1MjkzQzhBN0Y5QzJGQzk4NEVGMEUyNkEy NzYzRDk3N0QuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmIt NGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kYTI3Mjg2OS01MTI3LTRhZjYtODA1My1i ODYxN2NjYjlkZTMvMDMwNjhjYmU4ODk0ZDVkNzM1ZjkxZWRiOWU0MzM3NWNjNTdj MzZkMTMyNDI4NWFhODAuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv MjNjZGY5Y2EtZGQ2NC00ZjMxLWFiZjMtMGYzMmI4ZTdmZTc5LzMvRkFBNkM0MjUy OTNDOEE3RjlDMkZDOTg0RUYwRTI2QTI3NjNEOTc3RC5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEcW6izS bOAhgfbpJMrMTT4Rie0aJts9EOyiLvBFngTYDz2thF8pfREH9Pwzx8qd7PSFSZx6 jic+LIij7tI7I7ES+mC8TDcMSbCYlgCqE+O3SgFamXCbeUmm9v5MRiwjW/llthTZ YFpXkGnUJIJHtCXtVlwvreK02k2FXPzg1g8hovzwvnL/1ww9BlK9iB2wRUhwuFmZ /Xe8xzQraS+uV3n2yZDZgswZy5hV7Nv5Mi8FsTpdEmMptv7t1V4oo3HH2bIF6DUI f8Ro5jtaKi2BDGMGpjQiBDrVm2+xnB7qDOYnPHptcRPOzO0hGEPT7CB8wtBcbh3Q XlTZPlMHfHYASXM= -----END CERTIFICATE-----Generated at Fri Jun 6 23:21:03 2025 by rpki-client