$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5291c7e6-a476-4217-bba3-a592b24d8eb9/2/FB5FF92BFD752A0E654B0ECC7B03A17DF99B87A8.mft File: FB5FF92BFD752A0E654B0ECC7B03A17DF99B87A8.mft (raw, json) Hash identifier: IpttZod0PBbJqT/VJ0drMq+JYK/o6FAkpmv5iybfjr0= Subject key identifier: AF:50:C6:BC:A1:1B:D9:17:1E:8A:42:91:59:36:44:33:5A:3B:E0:9E Authority key identifier: FB:5F:F9:2B:FD:75:2A:0E:65:4B:0E:CC:7B:03:A1:7D:F9:9B:87:A8 Certificate issuer: /CN=d90d8aba2a1a07bad3fcf0845bb91d64fddd29022dbb5fe0ad Certificate serial: 110678FE01D33E2FA0D26398F7824EDD12599AA2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a1a07bad3fcf0845bb91d64fddd29022dbb5fe0ad.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5291c7e6-a476-4217-bba3-a592b24d8eb9/2/FB5FF92BFD752A0E654B0ECC7B03A17DF99B87A8.mft Manifest number: 6C Signing time: Fri 06 Jun 2025 13:26:06 +0000 Manifest this update: Fri 06 Jun 2025 13:21:06 +0000 Manifest next update: Sat 07 Jun 2025 16:26:06 +0000 Files and hashes: 1: FB5FF92BFD752A0E654B0ECC7B03A17DF99B87A8.crl (hash: BwjPv3GaVCFxy2IMTzFomny7Uk/Nph5NeA/N1TDvs28=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5291c7e6-a476-4217-bba3-a592b24d8eb9/2/FB5FF92BFD752A0E654B0ECC7B03A17DF99B87A8.crl rsync://rsync.paas.rpki.ripe.net/repository/5291c7e6-a476-4217-bba3-a592b24d8eb9/2/FB5FF92BFD752A0E654B0ECC7B03A17DF99B87A8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a1a07bad3fcf0845bb91d64fddd29022dbb5fe0ad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 16:26:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:06:78:fe:01:d3:3e:2f:a0:d2:63:98:f7:82:4e:dd:12:59:9a:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d90d8aba2a1a07bad3fcf0845bb91d64fddd29022dbb5fe0ad Validity Not Before: Jun 6 13:21:06 2025 GMT Not After : Jun 7 16:26:06 2025 GMT Subject: CN=AF50C6BCA11BD9171E8A4291593644335A3BE09E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:28:d0:54:f0:e7:c9:b6:10:32:43:d8:3c:3c: 67:9a:f8:1b:b6:cf:1b:aa:5d:16:f3:dc:70:55:85: 23:6e:73:4f:67:3d:2f:51:ef:69:9d:f0:72:e8:6c: d0:61:c4:bd:f7:82:34:43:01:68:69:a6:05:6a:7e: 11:1d:4f:5f:e7:83:6a:d7:77:4b:74:6b:0d:95:92: c6:1c:24:33:02:4c:d5:47:41:a2:39:1c:f2:fe:87: 37:e1:cc:12:50:86:17:8b:50:45:69:be:53:ae:a8: 46:47:6c:18:dd:7e:c0:27:a6:8b:70:aa:5d:0c:16: 91:5a:ee:fe:19:51:a8:ac:4e:0f:19:3a:4c:30:41: af:9e:a8:20:e1:fe:f6:95:21:2f:f9:2c:5e:72:c1: fc:d2:9b:2d:45:66:d6:46:f3:98:f9:44:c1:a3:1a: 31:14:59:4f:4a:7d:6a:cb:0b:db:5c:72:71:ac:e3: 55:6b:f6:dc:d5:c5:c8:8c:99:34:50:ee:07:9e:c4: 59:33:68:06:77:f6:09:0a:fe:bb:b3:eb:f6:68:2e: d2:20:96:2e:70:2a:a0:bb:ff:46:64:3d:84:63:10: ee:57:b2:4e:0e:95:4a:68:03:6d:22:92:bd:6f:bf: 4f:7f:d0:81:0f:73:3b:50:4f:a9:89:e2:4c:6d:b8: 14:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:50:C6:BC:A1:1B:D9:17:1E:8A:42:91:59:36:44:33:5A:3B:E0:9E X509v3 Authority Key Identifier: keyid:FB:5F:F9:2B:FD:75:2A:0E:65:4B:0E:CC:7B:03:A1:7D:F9:9B:87:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5291c7e6-a476-4217-bba3-a592b24d8eb9/2/FB5FF92BFD752A0E654B0ECC7B03A17DF99B87A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a1a07bad3fcf0845bb91d64fddd29022dbb5fe0ad.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5291c7e6-a476-4217-bba3-a592b24d8eb9/2/FB5FF92BFD752A0E654B0ECC7B03A17DF99B87A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:24:be:0a:5e:51:9d:0f:bb:c5:44:8b:d4:95:95:fb:72:8c: cd:fa:7f:fa:d3:ed:cf:da:b7:0d:35:d0:21:ea:68:2e:95:d8: c8:0f:7b:3a:6a:62:83:b8:21:d6:24:b3:8e:21:c3:fc:a4:ac: 5e:82:b8:9e:31:47:2a:72:7d:80:be:e3:27:44:1c:4a:18:0c: 0e:ff:1c:1e:04:27:46:18:ad:10:47:c6:64:21:5e:5a:41:cd: 3f:ee:4c:30:b7:71:27:57:24:b3:23:84:d4:c9:7a:3a:cd:9b: 50:4b:0b:cc:0c:8e:0c:ad:48:70:56:42:e7:80:b6:c5:95:34: 04:83:af:9c:c2:79:d7:6f:60:10:6e:7c:1c:0e:a5:4c:2a:e6: d9:7b:a9:21:80:43:6f:25:ea:06:a9:a6:ab:89:23:b3:64:f7: 0e:15:a4:4c:d0:59:18:99:c1:68:e4:7c:74:c5:43:1c:e7:1a: 7a:de:c5:fd:6d:ba:fa:b3:81:a1:f1:82:bd:02:14:b1:55:ef: 30:39:3b:40:9c:00:41:fe:c8:5b:f5:1c:4a:38:a3:4e:36:ac: d0:6c:4f:da:ab:de:13:f4:43:e8:7c:1e:11:60:9a:43:fa:c7: c5:97:d2:3b:8a:d3:11:24:c3:29:98:af:26:0d:87:6a:36:ae: 17:20:92:c3 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUEQZ4/gHTPi+g0mOY94JO3RJZmqIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDkwZDhhYmEyYTFhMDdiYWQzZmNmMDg0NWJiOTFkNjRm ZGRkMjkwMjJkYmI1ZmUwYWQwHhcNMjUwNjA2MTMyMTA2WhcNMjUwNjA3MTYyNjA2 WjAzMTEwLwYDVQQDEyhBRjUwQzZCQ0ExMUJEOTE3MUU4QTQyOTE1OTM2NDQzMzVB M0JFMDlFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CjQVPDnybYQ MkPYPDxnmvgbts8bql0W89xwVYUjbnNPZz0vUe9pnfBy6GzQYcS994I0QwFoaaYF an4RHU9f54Nq13dLdGsNlZLGHCQzAkzVR0GiORzy/oc34cwSUIYXi1BFab5TrqhG R2wY3X7AJ6aLcKpdDBaRWu7+GVGorE4PGTpMMEGvnqgg4f72lSEv+SxecsH80pst RWbWRvOY+UTBoxoxFFlPSn1qywvbXHJxrONVa/bc1cXIjJk0UO4HnsRZM2gGd/YJ Cv67s+v2aC7SIJYucCqgu/9GZD2EYxDuV7JODpVKaANtIpK9b79Pf9CBD3M7UE+p ieJMbbgUQQIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFK9QxryhG9kXHopCkVk2RDNa O+CeMB8GA1UdIwQYMBaAFPtf+Sv9dSoOZUsOzHsDoX35m4eoMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUyOTFjN2U2LWE0NzYtNDIxNy1iYmEz LWE1OTJiMjRkOGViOS8yL0ZCNUZGOTJCRkQ3NTJBMEU2NTRCMEVDQzdCMDNBMTdE Rjk5Qjg3QTguY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2Et NGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZWMxNzE1Ny02NmRlLTRhYWItODVlNy0y OGFmNGRlNDMwZTIvZDkwZDhhYmEyYTFhMDdiYWQzZmNmMDg0NWJiOTFkNjRmZGRk MjkwMjJkYmI1ZmUwYWQuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv NTI5MWM3ZTYtYTQ3Ni00MjE3LWJiYTMtYTU5MmIyNGQ4ZWI5LzIvRkI1RkY5MkJG RDc1MkEwRTY1NEIwRUNDN0IwM0ExN0RGOTlCODdBOC5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHkkvgpe UZ0Pu8VEi9SVlftyjM36f/rT7c/atw010CHqaC6V2MgPezpqYoO4IdYks44hw/yk rF6CuJ4xRypyfYC+4ydEHEoYDA7/HB4EJ0YYrRBHxmQhXlpBzT/uTDC3cSdXJLMj hNTJejrNm1BLC8wMjgytSHBWQueAtsWVNASDr5zCeddvYBBufBwOpUwq5tl7qSGA Q28l6gappquJI7Nk9w4VpEzQWRiZwWjkfHTFQxznGnrexf1tuvqzgaHxgr0CFLFV 7zA5O0CcAEH+yFv1HEo4o042rNBsT9qr3hP0Q+h8HhFgmkP6x8WX0juK0xEkwymY ryYNh2o2rhcgksM= -----END CERTIFICATE-----Generated at Fri Jun 6 22:10:16 2025 by rpki-client