$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.mft File: FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.mft (raw, json) Hash identifier: cH02dANKL37B+0Xn+V993aL/s/JLXZOKJD8Tc42/ZhM= Subject key identifier: E0:85:4B:63:48:F3:6C:FE:E7:AC:8D:CA:08:A1:8D:DC:52:BF:87:3F Authority key identifier: FA:A6:C4:25:29:3C:8A:7F:9C:2F:C9:84:EF:0E:26:A2:76:3D:97:7D Certificate issuer: /CN=03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80 Certificate serial: 18F4C5A50DA5A82483110C3175FB964C93F6E5CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.mft Manifest number: 8E Signing time: Fri 04 Apr 2025 21:01:48 +0000 Manifest this update: Fri 04 Apr 2025 20:56:48 +0000 Manifest next update: Sun 06 Apr 2025 00:28:48 +0000 Files and hashes: 1: 32332e3133322e39322e302f32342d3234203d3e20333937373330.roa (hash: BrbquvaT7gSaBvF2dUV9AqKeXE06mRUUDpvsSUbe408=) 2: 323630323a663736313a33303a3a2f34342d3434203d3e20323134373638.roa (hash: 0zlxQTxh7vvfaeWuK2Hw3nih0UKatPrmAKiXcV1p/ig=) 3: FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.crl (hash: CtAToIq42WtAGCYvGoVDinZO+LiK3OBAu9W2mZnIsk4=) 4: 323630323a663736313a3a2f34302d3438203d3e20333937373330.roa (hash: UabIBDSP/jRxPjVYe42Rz6FfziQlrmtKMNVTrVjL1tk=) 5: 32332e3133322e39322e302f32342d3234203d3e20323134373638.roa (hash: NdlK1zYqdrKSuU5F6Cse146TEQ/3Wx9fQDxzRBJIZZw=) 6: 323630323a663736313a32303a3a2f34342d3434203d3e20323134373638.roa (hash: L5IT8JeK38uNLCiVqoJ/A1O+xsuyrDeUorstCcbnlko=) 7: 323630323a663736313a3a2f34302d3430203d3e20333937373330.roa (hash: nA09F4i7ezyxrO7OoVlToYHyYyAdhivh99ADt+i0fxw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.crl rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/da272869-5127-4af6-8053-b8617ccb9de3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/da272869-5127-4af6-8053-b8617ccb9de3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 00:28:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:f4:c5:a5:0d:a5:a8:24:83:11:0c:31:75:fb:96:4c:93:f6:e5:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80 Validity Not Before: Apr 4 20:56:48 2025 GMT Not After : Apr 6 00:28:48 2025 GMT Subject: CN=E0854B6348F36CFEE7AC8DCA08A18DDC52BF873F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:14:ce:65:e7:e3:e9:a4:cd:c8:b0:f4:4c:86: e2:d2:13:36:8c:af:54:fd:d8:83:8f:f3:b1:54:25: df:ba:8a:cb:13:0a:ed:64:68:94:74:c8:12:34:54: f9:35:56:0b:18:e4:2a:a4:c3:3e:36:df:db:78:14: e7:ff:e5:a9:83:72:04:d7:0f:eb:d1:f2:3d:d7:65: d9:27:7b:68:e3:cf:ae:b1:dc:6b:ba:a6:cb:b9:ab: 91:60:38:c0:ce:07:5a:3f:11:00:d0:30:5e:a3:d5: 0c:b0:08:83:2e:a1:79:a4:6b:13:63:cf:93:af:20: 3a:2a:ef:86:ed:0e:95:c1:3d:55:10:1f:84:6f:9c: 7e:64:00:94:76:c9:f3:6b:04:68:30:c9:e0:2d:a8: 56:69:4f:61:a8:72:44:e8:04:23:e5:91:f5:4d:cf: f5:92:03:06:94:0a:80:68:7f:13:b2:9c:59:3c:f2: 97:ef:44:6f:60:f9:1d:88:b0:50:f3:65:cc:c8:93: b1:ed:d9:6a:42:6c:80:e6:15:3a:97:c6:3b:d8:7b: 96:a0:a9:8c:49:d4:74:04:f3:9a:d1:8e:2d:5d:e5: 6f:e7:25:9a:7a:fe:80:0b:e2:1b:62:11:f7:94:11: 20:cc:d5:7a:9c:98:b1:c0:4e:22:df:c3:17:a4:5c: 93:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:85:4B:63:48:F3:6C:FE:E7:AC:8D:CA:08:A1:8D:DC:52:BF:87:3F X509v3 Authority Key Identifier: keyid:FA:A6:C4:25:29:3C:8A:7F:9C:2F:C9:84:EF:0E:26:A2:76:3D:97:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:8a:3e:72:d9:3b:f5:a1:38:9c:e1:da:91:c2:9e:0d:dc:f8: db:2c:d4:55:52:ca:94:6a:6e:97:b3:4e:8a:23:d4:2f:2e:04: 53:3b:d6:1a:76:f4:97:ce:ea:2b:80:c3:d4:b4:bf:2b:6b:c4: 78:2b:c2:8b:e3:b3:27:09:f8:d6:24:94:61:ec:48:06:01:a4: 51:fd:59:c1:6c:73:6d:5d:d1:93:a7:c5:fd:9c:e7:a2:f8:ad: 71:b9:6b:61:cc:6e:9f:d3:da:e1:1d:fa:46:db:3c:a6:6f:c1: db:f1:34:9e:ed:1b:f5:0a:49:95:36:ff:a2:7e:6e:e0:c3:5f: 41:cb:58:4d:58:bb:9d:5e:5c:65:2d:b3:ab:4e:45:a1:83:ec: 92:73:fe:2c:3d:d8:76:7d:25:9d:22:bd:04:f5:80:7f:62:9e: 7e:de:55:3b:1b:35:a2:e3:0c:a2:52:d9:52:d4:9f:68:51:5f: 6d:d9:6a:37:75:1f:e1:72:38:8a:d5:fa:c4:f3:f4:16:94:b9: 90:4a:06:9a:db:c4:c0:ef:2c:03:ea:0a:96:58:7e:66:e0:75: 37:52:cf:f7:77:78:39:11:1e:fd:19:6a:9f:b5:f5:81:7b:eb: 83:4f:31:d2:52:20:ce:41:a6:3c:b6:05:bf:99:ae:b0:be:75: fa:c8:af:1c -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUGPTFpQ2lqCSDEQwxdfuWTJP25c8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMDMwNjhjYmU4ODk0ZDVkNzM1ZjkxZWRiOWU0MzM3NWNj NTdjMzZkMTMyNDI4NWFhODAwHhcNMjUwNDA0MjA1NjQ4WhcNMjUwNDA2MDAyODQ4 WjAzMTEwLwYDVQQDEyhFMDg1NEI2MzQ4RjM2Q0ZFRTdBQzhEQ0EwOEExOEREQzUy QkY4NzNGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBTOZefj6aTN yLD0TIbi0hM2jK9U/diDj/OxVCXfuorLEwrtZGiUdMgSNFT5NVYLGOQqpMM+Nt/b eBTn/+Wpg3IE1w/r0fI912XZJ3to48+usdxruqbLuauRYDjAzgdaPxEA0DBeo9UM sAiDLqF5pGsTY8+TryA6Ku+G7Q6VwT1VEB+Eb5x+ZACUdsnzawRoMMngLahWaU9h qHJE6AQj5ZH1Tc/1kgMGlAqAaH8TspxZPPKX70RvYPkdiLBQ82XMyJOx7dlqQmyA 5hU6l8Y72HuWoKmMSdR0BPOa0Y4tXeVv5yWaev6AC+IbYhH3lBEgzNV6nJixwE4i 38MXpFyTowIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFOCFS2NI82z+56yNygihjdxS v4c/MB8GA1UdIwQYMBaAFPqmxCUpPIp/nC/JhO8OJqJ2PZd9MA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIzY2RmOWNhLWRkNjQtNGYzMS1hYmYz LTBmMzJiOGU3ZmU3OS8zL0ZBQTZDNDI1MjkzQzhBN0Y5QzJGQzk4NEVGMEUyNkEy NzYzRDk3N0QuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmIt NGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kYTI3Mjg2OS01MTI3LTRhZjYtODA1My1i ODYxN2NjYjlkZTMvMDMwNjhjYmU4ODk0ZDVkNzM1ZjkxZWRiOWU0MzM3NWNjNTdj MzZkMTMyNDI4NWFhODAuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv MjNjZGY5Y2EtZGQ2NC00ZjMxLWFiZjMtMGYzMmI4ZTdmZTc5LzMvRkFBNkM0MjUy OTNDOEE3RjlDMkZDOTg0RUYwRTI2QTI3NjNEOTc3RC5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAqKPnLZ O/WhOJzh2pHCng3c+Nss1FVSypRqbpezTooj1C8uBFM71hp29JfO6iuAw9S0vytr xHgrwovjsycJ+NYklGHsSAYBpFH9WcFsc21d0ZOnxf2c56L4rXG5a2HMbp/T2uEd +kbbPKZvwdvxNJ7tG/UKSZU2/6J+buDDX0HLWE1Yu51eXGUts6tORaGD7JJz/iw9 2HZ9JZ0ivQT1gH9inn7eVTsbNaLjDKJS2VLUn2hRX23Zajd1H+FyOIrV+sTz9BaU uZBKBprbxMDvLAPqCpZYfmbgdTdSz/d3eDkRHv0Zap+19YF764NPMdJSIM5Bpjy2 Bb+ZrrC+dfrIrxw= -----END CERTIFICATE-----Generated at Sat Apr 5 06:22:29 2025 by rpki-client