$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft File: 10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft (raw, json) Hash identifier: PcBUrkq8zeTKd73p35Hyn0LGhiVQAnsZALJcorOIHT0= Subject key identifier: 6C:22:68:EA:13:4F:03:8E:02:F2:9F:72:FA:E9:DC:73:A9:03:83:FB Authority key identifier: 10:FA:AD:7B:D8:08:78:1E:33:0C:17:FD:6D:0A:AB:1D:F1:C6:9E:D4 Certificate issuer: /CN=1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39 Certificate serial: 55843A4EB7D0134899C68D2454E74FEF768EBBCE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft Manifest number: 0304 Signing time: Sat 02 Aug 2025 04:54:18 +0000 Manifest this update: Sat 02 Aug 2025 04:49:18 +0000 Manifest next update: Sun 03 Aug 2025 06:44:18 +0000 Files and hashes: 1: 323630323a663939653a3a2f33362d3336203d3e203233313235.roa (hash: MUrrdeivup2plAmve+o0OoigEU3cn15gDFCIWky2K2w=) 2: 32332e3133382e3232302e302f32342d3234203d3e203233313235.roa (hash: kPUalpUINJCiwObNYv9PpoOc/cSxsDyRMNiHLlMHUFE=) 3: 10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.crl (hash: nVqqSvWLbwMK2Q5IYaVfEz492U/7FVHCzUdAUITgRqw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.crl rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/4b92cbc5-48e6-4e59-b9e4-d0055609895d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/4b92cbc5-48e6-4e59-b9e4-d0055609895d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 03 Aug 2025 06:44:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:84:3a:4e:b7:d0:13:48:99:c6:8d:24:54:e7:4f:ef:76:8e:bb:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39 Validity Not Before: Aug 2 04:49:18 2025 GMT Not After : Aug 3 06:44:18 2025 GMT Subject: CN=6C2268EA134F038E02F29F72FAE9DC73A90383FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:89:04:f7:64:6a:dd:b7:a8:c3:3b:42:7a:d5: ae:68:c1:56:ae:75:09:f1:36:9b:4c:57:f6:56:b0: f7:4f:6f:26:4c:1b:84:78:eb:a5:74:d1:20:fe:bb: c7:b2:9f:16:aa:d6:01:c0:1e:23:f0:5b:c0:24:d2: e9:a9:39:8d:71:69:1a:0d:a7:7b:55:af:f7:2d:65: 23:08:02:6b:ce:03:1f:71:38:ef:b0:fe:2d:40:49: 47:70:d3:d6:95:c9:b8:b6:c1:99:79:d8:1a:7b:cb: 7f:ef:46:f7:ce:06:0e:3a:fb:d8:8a:c9:1d:db:25: ff:e4:59:40:df:aa:28:68:d2:dd:4c:75:b0:cc:e5: 78:9b:aa:f0:35:ee:37:68:4b:01:e6:8a:5d:3e:c7: 62:95:32:bf:39:75:85:68:aa:0a:e7:81:59:ae:46: f4:68:c7:6c:a2:68:69:ce:49:0a:aa:81:e4:8d:f5: 03:da:a8:85:97:86:1f:41:b9:e5:35:59:3e:d4:c9: 52:5e:70:6d:6b:c9:75:c4:fc:98:0d:d6:c8:b2:b2: d8:49:fc:58:d2:18:94:42:48:fe:4a:3e:ab:58:2d: 0e:45:1f:8d:c9:ea:27:2a:7a:4f:a3:62:19:a6:b7: 1a:57:21:b0:0a:57:7c:b1:56:3b:e0:2c:e9:f2:b8: 3d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:22:68:EA:13:4F:03:8E:02:F2:9F:72:FA:E9:DC:73:A9:03:83:FB X509v3 Authority Key Identifier: keyid:10:FA:AD:7B:D8:08:78:1E:33:0C:17:FD:6D:0A:AB:1D:F1:C6:9E:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:95:29:69:0b:3b:a5:d9:83:a8:89:b6:ec:6f:94:13:f1:cf: 65:95:f1:cf:a6:1c:38:54:b8:a5:da:5d:32:ba:c2:b4:50:f2: 28:40:77:f4:51:f1:04:0b:92:fa:21:d3:6f:94:eb:51:cd:9a: 93:08:e4:85:2a:95:e3:95:fe:21:19:ac:fb:f8:cb:1e:48:ff: 8c:03:93:92:7e:0c:b0:55:cf:e0:99:06:d9:84:08:4a:89:02: 56:13:95:3c:9b:a3:ce:e2:44:06:90:7f:c6:37:7c:36:8d:c6: 96:08:1d:4a:7a:d1:9e:9c:f1:4b:88:d5:c7:1b:d8:01:35:25: af:e8:58:f8:15:86:36:45:42:de:2f:9a:6e:87:bd:54:b1:ca: 88:18:79:40:ec:49:60:ac:cb:73:84:2b:50:f7:93:74:0e:69: d9:b6:23:ea:a5:8f:3e:68:60:72:d1:7f:da:d4:83:1d:8c:3d: fc:fa:b6:2e:3f:f7:1c:20:46:1f:8a:a7:86:29:fe:63:a9:af: 1f:f4:c6:f4:83:67:18:ee:23:52:8d:4f:66:e5:11:af:5a:39: 27:6f:ed:7e:fa:20:40:4f:c9:a0:93:9e:76:d2:37:ce:26:7b: 10:f2:89:6d:0b:7f:d4:8c:de:30:74:5e:f6:9b:7e:b3:c1:0f: 2d:20:7b:3f -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUVYQ6TrfQE0iZxo0kVOdP73aOu84wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWExZmViN2YwNWJiZDg3ZjAxMGYxOTE2NjdmYzViMjIz YzgzNjMyYjliYmNhMzNlMzkwHhcNMjUwODAyMDQ0OTE4WhcNMjUwODAzMDY0NDE4 WjAzMTEwLwYDVQQDEyg2QzIyNjhFQTEzNEYwMzhFMDJGMjlGNzJGQUU5REM3M0E5 MDM4M0ZCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4kE92Rq3beo wztCetWuaMFWrnUJ8TabTFf2VrD3T28mTBuEeOuldNEg/rvHsp8WqtYBwB4j8FvA JNLpqTmNcWkaDad7Va/3LWUjCAJrzgMfcTjvsP4tQElHcNPWlcm4tsGZedgae8t/ 70b3zgYOOvvYiskd2yX/5FlA36ooaNLdTHWwzOV4m6rwNe43aEsB5opdPsdilTK/ OXWFaKoK54FZrkb0aMdsomhpzkkKqoHkjfUD2qiFl4YfQbnlNVk+1MlSXnBta8l1 xPyYDdbIsrLYSfxY0hiUQkj+Sj6rWC0ORR+NyeonKnpPo2IZprcaVyGwCld8sVY7 4Czp8rg9EwIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFGwiaOoTTwOOAvKfcvrp3HOp A4P7MB8GA1UdIwQYMBaAFBD6rXvYCHgeMwwX/W0Kqx3xxp7UMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzNkYTRkOGI0LWExNTctNDYzNC1hYjE4 LTNlZjlkMDk4MjM1Mi8zLzEwRkFBRDdCRDgwODc4MUUzMzBDMTdGRDZEMEFBQjFE RjFDNjlFRDQuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It NGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YjkyY2JjNS00OGU2LTRlNTktYjllNC1k MDA1NTYwOTg5NWQvMWExZmViN2YwNWJiZDg3ZjAxMGYxOTE2NjdmYzViMjIzYzgz NjMyYjliYmNhMzNlMzkuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv M2RhNGQ4YjQtYTE1Ny00NjM0LWFiMTgtM2VmOWQwOTgyMzUyLzMvMTBGQUFEN0JE ODA4NzgxRTMzMEMxN0ZENkQwQUFCMURGMUM2OUVENC5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJ+VKWkL O6XZg6iJtuxvlBPxz2WV8c+mHDhUuKXaXTK6wrRQ8ihAd/RR8QQLkvoh02+U61HN mpMI5IUqleOV/iEZrPv4yx5I/4wDk5J+DLBVz+CZBtmECEqJAlYTlTybo87iRAaQ f8Y3fDaNxpYIHUp60Z6c8UuI1ccb2AE1Ja/oWPgVhjZFQt4vmm6HvVSxyogYeUDs SWCsy3OEK1D3k3QOadm2I+qljz5oYHLRf9rUgx2MPfz6ti4/9xwgRh+Kp4Yp/mOp rx/0xvSDZxjuI1KNT2blEa9aOSdv7X76IEBPyaCTnnbSN84mexDyiW0Lf9SM3jB0 XvabfrPBDy0gez8= -----END CERTIFICATE-----Generated at Sat Aug 2 13:55:09 2025 by rpki-client