$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5291c7e6-a476-4217-bba3-a592b24d8eb9/2/FB5FF92BFD752A0E654B0ECC7B03A17DF99B87A8.mft File: FB5FF92BFD752A0E654B0ECC7B03A17DF99B87A8.mft (raw, json) Hash identifier: BPfP6gaYXUulKIPRa7RbUkyTS7thYVLozoqfXPZjy8Q= Subject key identifier: BC:2E:C9:20:FB:AD:FB:41:E8:14:8F:4D:3C:DA:FE:A0:68:00:FF:FF Authority key identifier: FB:5F:F9:2B:FD:75:2A:0E:65:4B:0E:CC:7B:03:A1:7D:F9:9B:87:A8 Certificate issuer: /CN=d90d8aba2a1a07bad3fcf0845bb91d64fddd29022dbb5fe0ad Certificate serial: 5D030A8347503BB817F203B81D53A211547B2FD5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a1a07bad3fcf0845bb91d64fddd29022dbb5fe0ad.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5291c7e6-a476-4217-bba3-a592b24d8eb9/2/FB5FF92BFD752A0E654B0ECC7B03A17DF99B87A8.mft Manifest number: 15 Signing time: Fri 04 Apr 2025 12:52:35 +0000 Manifest this update: Fri 04 Apr 2025 12:47:35 +0000 Manifest next update: Sat 05 Apr 2025 14:14:35 +0000 Files and hashes: 1: FB5FF92BFD752A0E654B0ECC7B03A17DF99B87A8.crl (hash: 7iUjpsExgrKtXqNFzStanJ92ya1ypSYHXetCPArgAbY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5291c7e6-a476-4217-bba3-a592b24d8eb9/2/FB5FF92BFD752A0E654B0ECC7B03A17DF99B87A8.crl rsync://rsync.paas.rpki.ripe.net/repository/5291c7e6-a476-4217-bba3-a592b24d8eb9/2/FB5FF92BFD752A0E654B0ECC7B03A17DF99B87A8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a1a07bad3fcf0845bb91d64fddd29022dbb5fe0ad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 14:14:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:03:0a:83:47:50:3b:b8:17:f2:03:b8:1d:53:a2:11:54:7b:2f:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d90d8aba2a1a07bad3fcf0845bb91d64fddd29022dbb5fe0ad Validity Not Before: Apr 4 12:47:35 2025 GMT Not After : Apr 5 14:14:35 2025 GMT Subject: CN=BC2EC920FBADFB41E8148F4D3CDAFEA06800FFFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:eb:ba:55:f4:33:79:9a:b1:64:5f:eb:5f:1b: 1b:51:f1:b9:5c:90:30:5e:b1:31:a4:86:92:66:60: 7e:03:b5:76:ef:68:37:b6:b2:33:86:31:d6:34:42: 20:37:b5:a0:af:0a:82:ff:4c:8a:8a:0e:24:4c:d9: 13:aa:13:09:c5:90:43:a8:7f:1f:3c:99:02:0e:7e: b2:fd:c9:e2:c4:d4:f0:5e:cf:a7:ca:3e:d2:26:06: ef:4d:20:b2:55:3f:b8:12:4c:fe:d6:13:81:d7:47: c0:13:34:44:16:e8:d1:f5:5f:58:04:bb:d8:e0:8c: c4:68:9b:aa:5d:7e:c6:79:e3:ba:f6:84:b0:f3:f2: 27:ff:51:94:14:f2:0e:a9:7f:92:f7:1c:95:59:22: c2:0b:6c:71:f7:d0:4f:9a:da:8d:ad:30:ad:d5:d0: 19:40:5c:2d:a4:88:d4:47:25:97:02:39:54:68:23: 04:96:2d:5e:17:d2:c3:ff:36:2e:6b:70:8c:35:87: f4:18:24:3c:99:7b:d5:70:be:37:7e:35:a4:7c:c7: 5b:32:de:2f:3e:12:42:8f:11:ed:e4:48:11:2a:c1: 3f:ba:a6:47:b6:d6:d1:48:08:ea:8f:b2:93:21:cd: a4:a5:bb:7a:72:3f:08:ba:43:b5:69:59:47:0a:39: fc:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:2E:C9:20:FB:AD:FB:41:E8:14:8F:4D:3C:DA:FE:A0:68:00:FF:FF X509v3 Authority Key Identifier: keyid:FB:5F:F9:2B:FD:75:2A:0E:65:4B:0E:CC:7B:03:A1:7D:F9:9B:87:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5291c7e6-a476-4217-bba3-a592b24d8eb9/2/FB5FF92BFD752A0E654B0ECC7B03A17DF99B87A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a1a07bad3fcf0845bb91d64fddd29022dbb5fe0ad.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5291c7e6-a476-4217-bba3-a592b24d8eb9/2/FB5FF92BFD752A0E654B0ECC7B03A17DF99B87A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:83:24:75:06:e0:67:70:7b:9c:c9:f0:5c:63:4d:c3:40:85: 73:26:d6:41:15:d1:01:52:02:0e:d2:5e:7a:86:84:80:ab:14: 08:d5:f9:81:61:9b:9e:09:87:27:f6:34:26:5c:cf:ba:83:16: 9a:72:05:99:04:4d:df:b3:02:13:05:3a:0d:32:90:7b:42:60: b0:96:36:d9:09:f6:e4:be:5b:e1:ac:33:b0:53:5d:3e:c3:5e: b8:c7:61:96:d6:bc:34:81:b2:73:e6:41:da:f6:e0:fd:4c:75: e7:f5:29:52:bb:d2:ca:8a:14:0d:5f:25:29:dc:aa:b5:f7:d4: fd:8a:d2:24:4d:3c:cf:0c:4a:15:2a:f0:e9:11:34:ef:3a:e7: 90:37:1f:86:e2:f6:30:22:8d:85:36:49:3d:63:56:36:87:72: 94:a8:c9:1a:e6:94:b0:50:15:87:85:70:d0:e9:19:33:45:55: d8:05:65:ff:ae:1d:7d:98:7e:b7:e4:ac:28:e1:15:fa:4d:07: c6:e7:f2:2d:4a:51:29:10:5b:41:11:c7:84:00:2b:3f:b8:70: 23:41:c0:d5:df:1b:f5:6d:ca:a6:32:32:75:da:ad:ff:d6:58: c1:01:f9:53:5d:bd:19:89:4f:9c:2b:2e:59:ab:c4:5e:62:9c: 79:2f:88:4c -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUXQMKg0dQO7gX8gO4HVOiEVR7L9UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDkwZDhhYmEyYTFhMDdiYWQzZmNmMDg0NWJiOTFkNjRm ZGRkMjkwMjJkYmI1ZmUwYWQwHhcNMjUwNDA0MTI0NzM1WhcNMjUwNDA1MTQxNDM1 WjAzMTEwLwYDVQQDEyhCQzJFQzkyMEZCQURGQjQxRTgxNDhGNEQzQ0RBRkVBMDY4 MDBGRkZGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeu6VfQzeZqx ZF/rXxsbUfG5XJAwXrExpIaSZmB+A7V272g3trIzhjHWNEIgN7WgrwqC/0yKig4k TNkTqhMJxZBDqH8fPJkCDn6y/cnixNTwXs+nyj7SJgbvTSCyVT+4Ekz+1hOB10fA EzREFujR9V9YBLvY4IzEaJuqXX7GeeO69oSw8/In/1GUFPIOqX+S9xyVWSLCC2xx 99BPmtqNrTCt1dAZQFwtpIjURyWXAjlUaCMEli1eF9LD/zYua3CMNYf0GCQ8mXvV cL43fjWkfMdbMt4vPhJCjxHt5EgRKsE/uqZHttbRSAjqj7KTIc2kpbt6cj8IukO1 aVlHCjn8wQIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFLwuySD7rftB6BSPTTza/qBo AP//MB8GA1UdIwQYMBaAFPtf+Sv9dSoOZUsOzHsDoX35m4eoMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUyOTFjN2U2LWE0NzYtNDIxNy1iYmEz LWE1OTJiMjRkOGViOS8yL0ZCNUZGOTJCRkQ3NTJBMEU2NTRCMEVDQzdCMDNBMTdE Rjk5Qjg3QTguY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2Et NGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZWMxNzE1Ny02NmRlLTRhYWItODVlNy0y OGFmNGRlNDMwZTIvZDkwZDhhYmEyYTFhMDdiYWQzZmNmMDg0NWJiOTFkNjRmZGRk MjkwMjJkYmI1ZmUwYWQuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv NTI5MWM3ZTYtYTQ3Ni00MjE3LWJiYTMtYTU5MmIyNGQ4ZWI5LzIvRkI1RkY5MkJG RDc1MkEwRTY1NEIwRUNDN0IwM0ExN0RGOTlCODdBOC5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGSDJHUG 4Gdwe5zJ8FxjTcNAhXMm1kEV0QFSAg7SXnqGhICrFAjV+YFhm54Jhyf2NCZcz7qD FppyBZkETd+zAhMFOg0ykHtCYLCWNtkJ9uS+W+GsM7BTXT7DXrjHYZbWvDSBsnPm Qdr24P1Mdef1KVK70sqKFA1fJSncqrX31P2K0iRNPM8MShUq8OkRNO8655A3H4bi 9jAijYU2ST1jVjaHcpSoyRrmlLBQFYeFcNDpGTNFVdgFZf+uHX2YfrfkrCjhFfpN B8bn8i1KUSkQW0ERx4QAKz+4cCNBwNXfG/VtyqYyMnXarf/WWMEB+VNdvRmJT5wr LlmrxF5inHkviEw= -----END CERTIFICATE-----Generated at Sat Apr 5 06:20:36 2025 by rpki-client