$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/B73B05971A1A76BDF1BC61A5178B00B4FF71BABB.mft File: B73B05971A1A76BDF1BC61A5178B00B4FF71BABB.mft (raw, json) Hash identifier: NiyPs/nJ88RPXJjMjjSu7yugg1/gIGy+ZTO4KvHCOOM= Subject key identifier: E8:9C:10:91:3B:C3:11:F5:7C:4C:05:98:60:0A:7A:4A:B6:37:58:B6 Authority key identifier: B7:3B:05:97:1A:1A:76:BD:F1:BC:61:A5:17:8B:00:B4:FF:71:BA:BB Certificate issuer: /CN=d90d8aba2a52e658722522ec42c626f029750e015dbdba418f Certificate serial: 5BB9E7012A350127410EACB418717B4122A7D099 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a52e658722522ec42c626f029750e015dbdba418f.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/B73B05971A1A76BDF1BC61A5178B00B4FF71BABB.mft Manifest number: 1A Signing time: Fri 04 Apr 2025 12:52:36 +0000 Manifest this update: Fri 04 Apr 2025 12:47:36 +0000 Manifest next update: Sat 05 Apr 2025 15:23:36 +0000 Files and hashes: 1: 323630323a663966613a3a2f33362d3438203d3e203630383538.roa (hash: 5c3OaxW1qKZrY2FscDnJyFNXHvDxQCbXNLWzxHU/wc8=) 2: B73B05971A1A76BDF1BC61A5178B00B4FF71BABB.crl (hash: BXRArIqmwi61XSXJUvUMVDkTpRsEY46n7ell1OvJF1g=) 3: 32332e3136342e3135322e302f32342d3234203d3e203236353631.roa (hash: Ufvh495kVHTsvuscjFimK/5B3fifdcUwR5A1Uohco9k=) 4: 323630323a663966613a3a2f33362d3438203d3e203132383339.roa (hash: KB5IW4CbSuoOkgtd2rJCaS7SQDgxB1P+CSq45yfOs7s=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/B73B05971A1A76BDF1BC61A5178B00B4FF71BABB.crl rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/B73B05971A1A76BDF1BC61A5178B00B4FF71BABB.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a52e658722522ec42c626f029750e015dbdba418f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:23:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:b9:e7:01:2a:35:01:27:41:0e:ac:b4:18:71:7b:41:22:a7:d0:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d90d8aba2a52e658722522ec42c626f029750e015dbdba418f Validity Not Before: Apr 4 12:47:36 2025 GMT Not After : Apr 5 15:23:36 2025 GMT Subject: CN=E89C10913BC311F57C4C0598600A7A4AB63758B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:69:88:69:fe:55:f5:d4:6d:42:0f:c6:31:cb: 4e:68:48:be:a2:01:40:eb:50:a5:fa:56:95:63:3a: c4:d0:98:31:22:8a:06:7c:90:0b:8b:04:9d:5f:76: 42:7b:17:6f:be:9a:b7:c0:a7:56:e0:0f:d1:a7:bb: 07:25:30:40:96:c3:b1:3d:63:f5:76:da:a5:29:37: 6b:4a:72:5b:cf:7a:30:a7:ad:17:15:75:91:1f:d1: 24:b6:20:d2:ff:ae:23:71:ba:58:02:c9:a4:3c:34: 3a:a7:7d:29:bf:7a:86:2b:9b:08:b7:50:a5:9c:28: 9a:ce:44:e8:d4:03:d9:87:81:b9:8a:40:db:f3:45: c8:9a:64:99:b5:43:73:46:e0:2c:f1:85:47:8c:09: f0:49:02:3b:28:38:50:d7:b6:53:72:60:89:9d:69: a4:b9:b4:38:1b:9c:9e:e3:32:cc:1c:8a:bb:99:2d: 3c:bb:6c:4f:15:0b:df:8f:6b:cc:f3:26:f3:a5:93: e5:a1:26:6f:52:1d:eb:75:fd:30:02:dd:3b:2c:50: 2e:36:9f:2e:7f:34:ad:9f:71:f9:00:96:7d:13:d6: e3:35:9a:15:5f:b1:24:6c:65:63:f9:6f:7f:8f:a7: fb:f7:86:12:d5:0b:a5:40:3c:a0:c7:d6:91:ba:aa: 6b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:9C:10:91:3B:C3:11:F5:7C:4C:05:98:60:0A:7A:4A:B6:37:58:B6 X509v3 Authority Key Identifier: keyid:B7:3B:05:97:1A:1A:76:BD:F1:BC:61:A5:17:8B:00:B4:FF:71:BA:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/B73B05971A1A76BDF1BC61A5178B00B4FF71BABB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a52e658722522ec42c626f029750e015dbdba418f.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/B73B05971A1A76BDF1BC61A5178B00B4FF71BABB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:59:d0:e8:33:2f:f6:97:99:f1:87:2a:bb:dd:2f:2f:88:c9: 2a:f2:52:2d:94:07:26:e1:b3:07:58:49:ad:c1:40:ea:c5:6f: 55:b9:0a:42:74:56:e9:96:72:39:78:f9:1e:39:29:e1:ac:96: 9e:6b:2f:22:cb:14:56:b4:d2:1e:fc:5b:4c:1f:cd:17:08:e9: 13:19:74:45:77:3d:bd:42:fc:79:e9:62:4b:44:1f:4a:c8:5f: f6:6f:f6:9d:f6:b4:a2:98:6a:93:6c:6a:78:59:f6:9b:80:db: f8:28:fe:d9:4b:16:7a:9c:36:90:b6:7e:f4:76:77:3e:59:db: 81:15:98:6f:26:ff:f8:94:5c:9d:d9:31:b7:7a:27:d1:94:9a: cf:a0:8d:9f:2b:9d:fc:2d:62:e2:e8:45:86:da:99:cf:4c:ad: e7:0a:0f:31:57:34:76:89:7e:63:90:0e:ef:de:fb:bc:8d:53: 28:d6:20:68:99:f4:5e:ba:c8:41:af:59:3c:ec:2e:67:53:cc: cf:5d:3b:58:f2:60:d1:0b:c7:94:8b:da:11:db:62:59:b5:0c: b5:29:50:62:6a:e9:8b:12:e6:36:af:60:d4:f8:ab:e3:7a:52: 71:23:0d:c0:8e:5e:ab:7b:39:cc:f2:a0:96:9a:9a:53:32:f1: 8c:5b:7d:a5 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUW7nnASo1ASdBDqy0GHF7QSKn0JkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDkwZDhhYmEyYTUyZTY1ODcyMjUyMmVjNDJjNjI2ZjAy OTc1MGUwMTVkYmRiYTQxOGYwHhcNMjUwNDA0MTI0NzM2WhcNMjUwNDA1MTUyMzM2 WjAzMTEwLwYDVQQDEyhFODlDMTA5MTNCQzMxMUY1N0M0QzA1OTg2MDBBN0E0QUI2 Mzc1OEI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGmIaf5V9dRt Qg/GMctOaEi+ogFA61Cl+laVYzrE0JgxIooGfJALiwSdX3ZCexdvvpq3wKdW4A/R p7sHJTBAlsOxPWP1dtqlKTdrSnJbz3owp60XFXWRH9EktiDS/64jcbpYAsmkPDQ6 p30pv3qGK5sIt1ClnCiazkTo1APZh4G5ikDb80XImmSZtUNzRuAs8YVHjAnwSQI7 KDhQ17ZTcmCJnWmkubQ4G5ye4zLMHIq7mS08u2xPFQvfj2vM8ybzpZPloSZvUh3r df0wAt07LFAuNp8ufzStn3H5AJZ9E9bjNZoVX7EkbGVj+W9/j6f794YS1QulQDyg x9aRuqprVQIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFOicEJE7wxH1fEwFmGAKekq2 N1i2MB8GA1UdIwQYMBaAFLc7BZcaGna98bxhpReLALT/cbq7MA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzNiODZjYjc3LTY5YWMtNDNkOS05ZjZj LWZjNTMwNjZiZWI4OC8yL0I3M0IwNTk3MUExQTc2QkRGMUJDNjFBNTE3OEIwMEI0 RkY3MUJBQkIuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2Et NGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZWMxNzE1Ny02NmRlLTRhYWItODVlNy0y OGFmNGRlNDMwZTIvZDkwZDhhYmEyYTUyZTY1ODcyMjUyMmVjNDJjNjI2ZjAyOTc1 MGUwMTVkYmRiYTQxOGYuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv M2I4NmNiNzctNjlhYy00M2Q5LTlmNmMtZmM1MzA2NmJlYjg4LzIvQjczQjA1OTcx QTFBNzZCREYxQkM2MUE1MTc4QjAwQjRGRjcxQkFCQi5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIdZ0Ogz L/aXmfGHKrvdLy+IySryUi2UBybhswdYSa3BQOrFb1W5CkJ0VumWcjl4+R45KeGs lp5rLyLLFFa00h78W0wfzRcI6RMZdEV3Pb1C/HnpYktEH0rIX/Zv9p32tKKYapNs anhZ9puA2/go/tlLFnqcNpC2fvR2dz5Z24EVmG8m//iUXJ3ZMbd6J9GUms+gjZ8r nfwtYuLoRYbamc9MrecKDzFXNHaJfmOQDu/e+7yNUyjWIGiZ9F66yEGvWTzsLmdT zM9dO1jyYNELx5SL2hHbYlm1DLUpUGJq6YsS5javYNT4q+N6UnEjDcCOXqt7Oczy oJaamlMy8YxbfaU= -----END CERTIFICATE-----Generated at Sat Apr 5 03:49:39 2025 by rpki-client