$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft File: 10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft (raw, json) Hash identifier: RBSCcgHWwIFRgDni2yoFPklNqzKIniT02B5U7X6OtK4= Subject key identifier: D3:0A:BF:05:05:4A:1C:F0:0C:F7:8A:48:1B:09:E5:C5:C6:C5:C6:53 Authority key identifier: 10:FA:AD:7B:D8:08:78:1E:33:0C:17:FD:6D:0A:AB:1D:F1:C6:9E:D4 Certificate issuer: /CN=1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39 Certificate serial: 25D09710CF543BD6512AB90CC30E010AF2D2D891 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft Manifest number: 0381 Signing time: Mon 03 Nov 2025 06:44:09 +0000 Manifest this update: Mon 03 Nov 2025 06:39:09 +0000 Manifest next update: Tue 04 Nov 2025 09:08:09 +0000 Files and hashes: 1: 10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.crl (hash: TqYaF9R0rned/zWIM2VzvsD7rhL1w5L0HVVhinvCrx4=) 2: 323630323a663939653a3a2f33362d3336203d3e203233313235.roa (hash: MUrrdeivup2plAmve+o0OoigEU3cn15gDFCIWky2K2w=) 3: 32332e3133382e3232302e302f32342d3234203d3e203233313235.roa (hash: kPUalpUINJCiwObNYv9PpoOc/cSxsDyRMNiHLlMHUFE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.crl rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/4b92cbc5-48e6-4e59-b9e4-d0055609895d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/4b92cbc5-48e6-4e59-b9e4-d0055609895d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 09:08:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:d0:97:10:cf:54:3b:d6:51:2a:b9:0c:c3:0e:01:0a:f2:d2:d8:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39 Validity Not Before: Nov 3 06:39:09 2025 GMT Not After : Nov 4 09:08:09 2025 GMT Subject: CN=D30ABF05054A1CF00CF78A481B09E5C5C6C5C653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b1:f3:ca:6d:f1:50:f4:9b:a4:1d:1e:d3:b6: ed:e3:6c:f0:49:f6:d3:d8:68:97:5c:b0:5c:a2:ee: b3:aa:75:a5:86:3f:d6:01:cf:f9:71:44:0d:c0:b5: a1:49:2e:db:c2:2c:3d:be:eb:c4:0f:ce:ea:72:d0: ca:c4:0b:86:35:e2:f3:d2:98:54:c5:45:53:7f:a2: 4a:d8:ef:bd:a6:cb:9d:24:c8:fe:7b:b3:ac:0f:9c: 52:10:c7:ce:bb:91:5f:0a:5f:76:6d:c0:a4:e6:61: fe:63:00:a9:86:00:db:e0:7d:33:df:7f:c6:de:f2: 82:d6:91:1f:2f:ef:d8:3f:21:31:ff:da:9c:75:f1: c9:39:65:69:3f:3f:e6:c4:ac:db:5c:e9:de:8e:43: 35:4e:5e:b9:a0:82:dc:5e:3a:ab:02:c9:2f:6d:5d: 3c:3d:f0:c2:16:3a:05:08:19:c6:b1:87:20:0c:77: 7f:e2:6a:bd:06:68:60:f9:ca:19:9f:13:38:f0:8c: 27:15:be:04:12:99:fa:b8:31:63:61:f6:2a:d5:36: a4:5c:d9:e3:89:1b:e2:d6:6b:34:e0:66:41:77:ad: d4:62:f0:1c:08:45:7a:de:41:e0:bb:ad:f3:fc:3f: a9:6f:78:2e:ce:92:cf:ce:83:10:6b:7a:40:9c:ff: d8:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:0A:BF:05:05:4A:1C:F0:0C:F7:8A:48:1B:09:E5:C5:C6:C5:C6:53 X509v3 Authority Key Identifier: keyid:10:FA:AD:7B:D8:08:78:1E:33:0C:17:FD:6D:0A:AB:1D:F1:C6:9E:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:42:bd:5d:07:8b:8d:92:8b:b6:c0:8d:7c:11:3c:11:c1:a1: 9e:44:3c:c6:9d:ad:ef:a1:26:bc:2b:57:7e:62:86:e5:af:b8: 63:ab:ac:30:bc:5f:d5:a5:f3:34:37:a6:c1:e0:71:ff:87:e6: cf:ee:77:e7:ae:0a:0a:be:db:87:c4:76:1e:f9:7e:19:66:de: d1:6b:db:33:4d:d6:18:d1:21:f7:e7:f0:37:63:1a:ac:de:b2: c3:ef:26:c9:5b:21:5c:d8:2a:4e:6d:f0:c1:5b:96:55:37:e6: 1f:15:7e:a4:77:53:2c:60:e0:23:a0:cd:56:9a:d8:e9:41:4f: 28:c5:22:f2:50:ac:bb:28:52:2e:bd:84:ec:cf:50:be:76:7e: 48:e9:f0:68:c0:2b:e3:6d:f9:5d:d3:59:6c:70:0e:47:78:d6: 7e:05:49:3b:2b:fc:58:35:2f:95:9e:09:e0:f2:9b:ae:c0:c2: a3:73:2f:ff:35:af:8a:a2:65:08:c1:62:92:f9:bc:01:9a:5c: f5:3e:e2:76:8f:a1:4c:c3:ea:35:1b:16:50:a1:bb:7f:6c:31: e7:92:5f:df:44:b5:73:71:5c:8a:f8:9a:25:41:50:eb:96:35: 01:b5:32:8f:be:e0:b9:cf:a8:2c:ba:0b:63:c2:76:72:c9:91: cf:b7:18:21 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUJdCXEM9UO9ZRKrkMww4BCvLS2JEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWExZmViN2YwNWJiZDg3ZjAxMGYxOTE2NjdmYzViMjIz YzgzNjMyYjliYmNhMzNlMzkwHhcNMjUxMTAzMDYzOTA5WhcNMjUxMTA0MDkwODA5 WjAzMTEwLwYDVQQDEyhEMzBBQkYwNTA1NEExQ0YwMENGNzhBNDgxQjA5RTVDNUM2 QzVDNjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7Hzym3xUPSb pB0e07bt42zwSfbT2GiXXLBcou6zqnWlhj/WAc/5cUQNwLWhSS7bwiw9vuvED87q ctDKxAuGNeLz0phUxUVTf6JK2O+9psudJMj+e7OsD5xSEMfOu5FfCl92bcCk5mH+ YwCphgDb4H0z33/G3vKC1pEfL+/YPyEx/9qcdfHJOWVpPz/mxKzbXOnejkM1Tl65 oILcXjqrAskvbV08PfDCFjoFCBnGsYcgDHd/4mq9Bmhg+coZnxM48IwnFb4EEpn6 uDFjYfYq1TakXNnjiRvi1ms04GZBd63UYvAcCEV63kHgu63z/D+pb3guzpLPzoMQ a3pAnP/YDwIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFNMKvwUFShzwDPeKSBsJ5cXG xcZTMB8GA1UdIwQYMBaAFBD6rXvYCHgeMwwX/W0Kqx3xxp7UMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzNkYTRkOGI0LWExNTctNDYzNC1hYjE4 LTNlZjlkMDk4MjM1Mi8zLzEwRkFBRDdCRDgwODc4MUUzMzBDMTdGRDZEMEFBQjFE RjFDNjlFRDQuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It NGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YjkyY2JjNS00OGU2LTRlNTktYjllNC1k MDA1NTYwOTg5NWQvMWExZmViN2YwNWJiZDg3ZjAxMGYxOTE2NjdmYzViMjIzYzgz NjMyYjliYmNhMzNlMzkuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv M2RhNGQ4YjQtYTE1Ny00NjM0LWFiMTgtM2VmOWQwOTgyMzUyLzMvMTBGQUFEN0JE ODA4NzgxRTMzMEMxN0ZENkQwQUFCMURGMUM2OUVENC5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHhCvV0H i42Si7bAjXwRPBHBoZ5EPMadre+hJrwrV35ihuWvuGOrrDC8X9Wl8zQ3psHgcf+H 5s/ud+euCgq+24fEdh75fhlm3tFr2zNN1hjRIffn8DdjGqzessPvJslbIVzYKk5t 8MFbllU35h8VfqR3Uyxg4COgzVaa2OlBTyjFIvJQrLsoUi69hOzPUL52fkjp8GjA K+Nt+V3TWWxwDkd41n4FSTsr/Fg1L5WeCeDym67AwqNzL/81r4qiZQjBYpL5vAGa XPU+4naPoUzD6jUbFlChu39sMeeSX99EtXNxXIr4miVBUOuWNQG1Mo++4LnPqCy6 C2PCdnLJkc+3GCE= -----END CERTIFICATE-----Generated at Mon Nov 3 15:26:44 2025 by rpki-client