$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5291c7e6-a476-4217-bba3-a592b24d8eb9/2/FB5FF92BFD752A0E654B0ECC7B03A17DF99B87A8.mft File: FB5FF92BFD752A0E654B0ECC7B03A17DF99B87A8.mft (raw, json) Hash identifier: MNjCWsSNthr/9N/qMnTfDELHyCbI80giagHIJ0ZIh/o= Subject key identifier: 7B:9F:96:D0:1F:1A:76:AE:08:A4:8A:30:14:15:56:22:40:6A:9E:58 Authority key identifier: FB:5F:F9:2B:FD:75:2A:0E:65:4B:0E:CC:7B:03:A1:7D:F9:9B:87:A8 Certificate issuer: /CN=d90d8aba2a1a07bad3fcf0845bb91d64fddd29022dbb5fe0ad Certificate serial: 77289C642D9109F952A41E6FA52AB5445A44CFEC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a1a07bad3fcf0845bb91d64fddd29022dbb5fe0ad.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5291c7e6-a476-4217-bba3-a592b24d8eb9/2/FB5FF92BFD752A0E654B0ECC7B03A17DF99B87A8.mft Manifest number: FE Signing time: Fri 19 Sep 2025 22:42:21 +0000 Manifest this update: Fri 19 Sep 2025 22:37:21 +0000 Manifest next update: Sat 20 Sep 2025 23:44:21 +0000 Files and hashes: 1: FB5FF92BFD752A0E654B0ECC7B03A17DF99B87A8.crl (hash: g0IwgQTNXC2x1++ZAyBUi/noHcWABYIbdogc2MMiURo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5291c7e6-a476-4217-bba3-a592b24d8eb9/2/FB5FF92BFD752A0E654B0ECC7B03A17DF99B87A8.crl rsync://rsync.paas.rpki.ripe.net/repository/5291c7e6-a476-4217-bba3-a592b24d8eb9/2/FB5FF92BFD752A0E654B0ECC7B03A17DF99B87A8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a1a07bad3fcf0845bb91d64fddd29022dbb5fe0ad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 23:44:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:28:9c:64:2d:91:09:f9:52:a4:1e:6f:a5:2a:b5:44:5a:44:cf:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d90d8aba2a1a07bad3fcf0845bb91d64fddd29022dbb5fe0ad Validity Not Before: Sep 19 22:37:21 2025 GMT Not After : Sep 20 23:44:21 2025 GMT Subject: CN=7B9F96D01F1A76AE08A48A3014155622406A9E58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:62:04:14:b8:29:c0:b1:91:25:56:9a:c4:41: b6:0d:6b:85:36:cb:f7:40:f3:52:b2:4a:b9:87:53: ca:76:ad:ef:a9:9e:e4:71:9d:16:4d:a4:69:69:6e: 26:96:1c:da:31:a8:53:b7:96:d8:e9:f7:c3:19:58: ce:29:88:c6:82:85:52:0f:9f:20:3d:1a:fc:b2:6f: bd:51:49:8b:34:2b:14:63:72:36:8d:03:62:9a:38: e7:4e:6d:c2:1a:e1:61:e9:e1:3c:6b:e7:92:94:08: 93:d1:16:70:08:65:e4:50:1e:8d:6b:b0:b0:44:ba: d5:93:9d:0e:52:c6:f3:10:05:1b:56:e1:ef:1b:1b: 14:fe:d0:cf:d0:68:8c:21:19:a5:86:0b:66:a2:40: ab:75:bf:10:ea:1f:c2:b5:27:83:a5:e4:87:82:d6: b1:42:e0:84:42:d2:bd:2d:9e:f9:ef:99:9d:01:d0: 96:e0:97:7e:89:96:a4:57:99:a6:11:8a:6c:86:c9: 43:f8:35:af:40:e8:64:68:f7:33:c9:84:47:68:25: 85:78:60:d6:f7:5a:3c:c9:53:39:29:aa:f5:ca:f8: 66:de:fb:82:cf:7a:fd:ef:3f:c1:24:f3:17:69:e8: f5:c8:1b:f0:7b:24:f0:21:82:20:26:94:e9:12:15: ef:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:9F:96:D0:1F:1A:76:AE:08:A4:8A:30:14:15:56:22:40:6A:9E:58 X509v3 Authority Key Identifier: keyid:FB:5F:F9:2B:FD:75:2A:0E:65:4B:0E:CC:7B:03:A1:7D:F9:9B:87:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5291c7e6-a476-4217-bba3-a592b24d8eb9/2/FB5FF92BFD752A0E654B0ECC7B03A17DF99B87A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a1a07bad3fcf0845bb91d64fddd29022dbb5fe0ad.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5291c7e6-a476-4217-bba3-a592b24d8eb9/2/FB5FF92BFD752A0E654B0ECC7B03A17DF99B87A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:13:08:9f:b3:0c:73:14:73:b6:31:a3:2c:dd:aa:c8:0d:17: 5e:ad:43:d7:26:36:d2:e7:d2:21:a1:a4:75:b2:23:11:9c:7f: 52:6f:e0:a9:83:50:4f:29:46:7c:4b:52:27:d6:f1:e1:02:cf: 97:05:75:aa:90:9a:68:37:d6:65:a2:da:16:6d:6f:eb:31:fa: fc:a2:5d:5c:4c:c6:31:f9:22:d9:d2:94:b6:d3:47:f1:14:b5: 0e:b7:f1:5a:86:2c:4b:4a:08:40:cb:c0:f7:46:4d:b7:d6:d3: f5:50:96:e6:48:e3:3e:a3:c3:54:d3:fc:c0:6c:29:4d:e5:e8: bc:e5:11:44:f0:46:3a:65:9f:25:43:52:df:ab:90:ab:e6:50: e5:83:9a:78:64:d8:e7:08:47:64:85:63:61:ab:db:d3:40:4d: 1d:94:3a:98:0a:49:56:a0:bd:30:7f:e4:03:b6:22:c1:9d:2b: 62:f2:3f:2b:c2:db:28:6f:c9:46:e0:6b:ea:5e:03:c4:ad:42: 9c:e3:bf:4e:5b:2a:31:a9:26:d1:82:d6:10:91:c9:06:15:36: 25:53:77:4a:75:e1:a0:45:e9:cf:2c:64:b9:92:f9:97:7e:1c: 45:2e:27:12:3d:91:ac:6e:e3:7e:fc:e0:d4:91:8e:2a:b3:9f: c9:36:c9:98 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUdyicZC2RCflSpB5vpSq1RFpEz+wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDkwZDhhYmEyYTFhMDdiYWQzZmNmMDg0NWJiOTFkNjRm ZGRkMjkwMjJkYmI1ZmUwYWQwHhcNMjUwOTE5MjIzNzIxWhcNMjUwOTIwMjM0NDIx WjAzMTEwLwYDVQQDEyg3QjlGOTZEMDFGMUE3NkFFMDhBNDhBMzAxNDE1NTYyMjQw NkE5RTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGIEFLgpwLGR JVaaxEG2DWuFNsv3QPNSskq5h1PKdq3vqZ7kcZ0WTaRpaW4mlhzaMahTt5bY6ffD GVjOKYjGgoVSD58gPRr8sm+9UUmLNCsUY3I2jQNimjjnTm3CGuFh6eE8a+eSlAiT 0RZwCGXkUB6Na7CwRLrVk50OUsbzEAUbVuHvGxsU/tDP0GiMIRmlhgtmokCrdb8Q 6h/CtSeDpeSHgtaxQuCEQtK9LZ7575mdAdCW4Jd+iZakV5mmEYpshslD+DWvQOhk aPczyYRHaCWFeGDW91o8yVM5Kar1yvhm3vuCz3r97z/BJPMXaej1yBvweyTwIYIg JpTpEhXv4wIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFHufltAfGnauCKSKMBQVViJA ap5YMB8GA1UdIwQYMBaAFPtf+Sv9dSoOZUsOzHsDoX35m4eoMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUyOTFjN2U2LWE0NzYtNDIxNy1iYmEz LWE1OTJiMjRkOGViOS8yL0ZCNUZGOTJCRkQ3NTJBMEU2NTRCMEVDQzdCMDNBMTdE Rjk5Qjg3QTguY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2Et NGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZWMxNzE1Ny02NmRlLTRhYWItODVlNy0y OGFmNGRlNDMwZTIvZDkwZDhhYmEyYTFhMDdiYWQzZmNmMDg0NWJiOTFkNjRmZGRk MjkwMjJkYmI1ZmUwYWQuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv NTI5MWM3ZTYtYTQ3Ni00MjE3LWJiYTMtYTU5MmIyNGQ4ZWI5LzIvRkI1RkY5MkJG RDc1MkEwRTY1NEIwRUNDN0IwM0ExN0RGOTlCODdBOC5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEkTCJ+z DHMUc7YxoyzdqsgNF16tQ9cmNtLn0iGhpHWyIxGcf1Jv4KmDUE8pRnxLUifW8eEC z5cFdaqQmmg31mWi2hZtb+sx+vyiXVxMxjH5ItnSlLbTR/EUtQ638VqGLEtKCEDL wPdGTbfW0/VQluZI4z6jw1TT/MBsKU3l6LzlEUTwRjplnyVDUt+rkKvmUOWDmnhk 2OcIR2SFY2Gr29NATR2UOpgKSVagvTB/5AO2IsGdK2LyPyvC2yhvyUbga+peA8St Qpzjv05bKjGpJtGC1hCRyQYVNiVTd0p14aBF6c8sZLmS+Zd+HEUuJxI9kaxu4378 4NSRjiqzn8k2yZg= -----END CERTIFICATE-----Generated at Sat Sep 20 09:01:51 2025 by rpki-client