$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft File: 10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft (raw, json) Hash identifier: XC6/Tz1YAOOPAgKbZDK4172+P+xTxBLYdUCWYIeQAGM= Subject key identifier: C7:CD:7E:2C:E7:4F:06:9F:3E:10:E0:A5:39:34:F8:98:7F:E4:DE:6F Authority key identifier: 10:FA:AD:7B:D8:08:78:1E:33:0C:17:FD:6D:0A:AB:1D:F1:C6:9E:D4 Certificate issuer: /CN=1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39 Certificate serial: 401EDFB92037A3F364D661AB0446AB38AB9E79F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft Manifest number: 02B7 Signing time: Sat 07 Jun 2025 01:27:31 +0000 Manifest this update: Sat 07 Jun 2025 01:22:31 +0000 Manifest next update: Sun 08 Jun 2025 03:08:31 +0000 Files and hashes: 1: 32332e3133382e3232302e302f32342d3234203d3e203233313235.roa (hash: kPUalpUINJCiwObNYv9PpoOc/cSxsDyRMNiHLlMHUFE=) 2: 323630323a663939653a3a2f33362d3336203d3e203233313235.roa (hash: MUrrdeivup2plAmve+o0OoigEU3cn15gDFCIWky2K2w=) 3: 10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.crl (hash: Z9S/i+/UK6zA0OqfSclKjbg1Ff3QE2sjA6Zbpvr9qXQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.crl rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/4b92cbc5-48e6-4e59-b9e4-d0055609895d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/4b92cbc5-48e6-4e59-b9e4-d0055609895d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 03:08:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:1e:df:b9:20:37:a3:f3:64:d6:61:ab:04:46:ab:38:ab:9e:79:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39 Validity Not Before: Jun 7 01:22:31 2025 GMT Not After : Jun 8 03:08:31 2025 GMT Subject: CN=C7CD7E2CE74F069F3E10E0A53934F8987FE4DE6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:88:17:51:d1:c0:3d:c3:b5:ac:9c:e3:17:45: ee:38:98:63:3d:f2:c2:af:12:88:23:84:2b:b0:4a: 65:35:71:25:79:fa:88:60:e2:c3:a7:6c:79:c0:4d: 6b:d9:f2:d6:0d:76:0b:ed:58:d4:67:5e:12:87:d9: 67:fb:37:9c:c1:93:95:cd:c6:2e:42:61:87:e8:77: ca:21:7e:d1:65:b6:0a:53:44:97:3f:5a:2d:a2:da: b1:5d:24:93:2b:e4:18:50:3f:cb:38:35:0d:ab:ed: 81:2a:98:d0:ca:8e:5c:f3:76:c9:be:81:ff:89:47: c0:4c:38:4e:3a:e2:e3:dd:b2:0a:05:6c:d2:15:49: 3e:68:c4:3e:4c:f8:28:9d:f6:a2:dd:aa:2a:19:e9: 96:73:b0:d3:fe:95:e5:9d:a1:06:e0:cb:2a:2c:ca: 17:51:25:cb:5a:36:ed:57:15:62:21:4e:d6:df:25: f7:4d:3b:00:09:4e:06:84:0f:08:92:e9:c3:5a:03: cb:c0:f9:7b:70:82:6a:3e:c7:54:8b:15:94:94:96: 9e:2c:3b:08:be:5d:58:e7:36:8c:cd:94:d8:a9:f4: 6e:b8:53:d9:ef:f6:e8:b5:3e:2d:e2:25:4e:10:d9: b8:39:47:61:59:6d:42:d1:31:a7:09:7c:69:dc:aa: 54:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:CD:7E:2C:E7:4F:06:9F:3E:10:E0:A5:39:34:F8:98:7F:E4:DE:6F X509v3 Authority Key Identifier: keyid:10:FA:AD:7B:D8:08:78:1E:33:0C:17:FD:6D:0A:AB:1D:F1:C6:9E:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:5d:96:a7:d5:e8:04:45:a7:95:ee:f3:28:38:93:e7:18:e2: 58:11:aa:f9:84:d2:e0:f5:04:b1:57:b7:ab:e9:b7:b5:57:99: 8e:77:06:ed:08:3e:d4:06:ae:ff:c4:b9:99:a4:3e:ce:c2:fa: 16:cf:ef:f8:f9:31:d1:60:10:0a:86:43:5f:41:9d:c7:c4:e7: 1c:5f:cb:bb:bf:b5:48:ac:3a:8e:04:7e:ba:72:56:fd:00:b4: 21:2b:1e:76:68:fd:83:92:63:db:b6:aa:34:f5:4e:bb:a0:38: 72:26:4b:7b:38:7e:79:61:85:4b:0f:71:74:2e:a0:a6:aa:91: b4:6e:1a:54:77:68:51:13:5f:4e:b9:04:9c:12:20:d0:64:de: ca:35:e7:be:49:91:21:6a:09:16:17:ef:68:19:90:00:71:e9: 59:f7:64:ec:95:38:62:e8:ab:5f:d8:f6:4d:84:8e:51:46:5e: a8:c4:4c:76:13:75:ee:2d:39:37:7f:e1:8d:68:e4:0b:52:86: 29:f4:c9:c3:b9:e1:fb:f1:8c:0a:ad:63:7d:b8:43:18:38:f4: ff:09:ce:9b:59:ea:f5:b1:46:54:eb:50:28:92:04:24:99:96: b4:b3:1e:e7:0b:92:bf:b5:07:e0:f5:1e:68:fc:30:32:fc:33: a0:f6:67:32 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUQB7fuSA3o/Nk1mGrBEarOKueefgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWExZmViN2YwNWJiZDg3ZjAxMGYxOTE2NjdmYzViMjIz YzgzNjMyYjliYmNhMzNlMzkwHhcNMjUwNjA3MDEyMjMxWhcNMjUwNjA4MDMwODMx WjAzMTEwLwYDVQQDEyhDN0NEN0UyQ0U3NEYwNjlGM0UxMEUwQTUzOTM0Rjg5ODdG RTRERTZGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYgXUdHAPcO1 rJzjF0XuOJhjPfLCrxKII4QrsEplNXElefqIYOLDp2x5wE1r2fLWDXYL7VjUZ14S h9ln+zecwZOVzcYuQmGH6HfKIX7RZbYKU0SXP1ototqxXSSTK+QYUD/LODUNq+2B KpjQyo5c83bJvoH/iUfATDhOOuLj3bIKBWzSFUk+aMQ+TPgonfai3aoqGemWc7DT /pXlnaEG4MsqLMoXUSXLWjbtVxViIU7W3yX3TTsACU4GhA8IkunDWgPLwPl7cIJq PsdUixWUlJaeLDsIvl1Y5zaMzZTYqfRuuFPZ7/botT4t4iVOENm4OUdhWW1C0TGn CXxp3KpUzwIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFMfNfiznTwafPhDgpTk0+Jh/ 5N5vMB8GA1UdIwQYMBaAFBD6rXvYCHgeMwwX/W0Kqx3xxp7UMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzNkYTRkOGI0LWExNTctNDYzNC1hYjE4 LTNlZjlkMDk4MjM1Mi8zLzEwRkFBRDdCRDgwODc4MUUzMzBDMTdGRDZEMEFBQjFE RjFDNjlFRDQuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It NGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YjkyY2JjNS00OGU2LTRlNTktYjllNC1k MDA1NTYwOTg5NWQvMWExZmViN2YwNWJiZDg3ZjAxMGYxOTE2NjdmYzViMjIzYzgz NjMyYjliYmNhMzNlMzkuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv M2RhNGQ4YjQtYTE1Ny00NjM0LWFiMTgtM2VmOWQwOTgyMzUyLzMvMTBGQUFEN0JE ODA4NzgxRTMzMEMxN0ZENkQwQUFCMURGMUM2OUVENC5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIxdlqfV 6ARFp5Xu8yg4k+cY4lgRqvmE0uD1BLFXt6vpt7VXmY53Bu0IPtQGrv/EuZmkPs7C +hbP7/j5MdFgEAqGQ19BncfE5xxfy7u/tUisOo4EfrpyVv0AtCErHnZo/YOSY9u2 qjT1TrugOHImS3s4fnlhhUsPcXQuoKaqkbRuGlR3aFETX065BJwSINBk3so1575J kSFqCRYX72gZkABx6Vn3ZOyVOGLoq1/Y9k2EjlFGXqjETHYTde4tOTd/4Y1o5AtS hin0ycO54fvxjAqtY324Qxg49P8JzptZ6vWxRlTrUCiSBCSZlrSzHucLkr+1B+D1 Hmj8MDL8M6D2ZzI= -----END CERTIFICATE-----Generated at Sat Jun 7 07:53:03 2025 by rpki-client