$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft File: 6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft (raw, json) Hash identifier: 48kjzX2Zz1/tlk5VffqyNlylH81QmdChQpZVvhZAc0A= Subject key identifier: 51:15:19:49:DD:B9:5A:BC:98:B5:65:84:62:B7:67:68:CA:67:CE:5F Authority key identifier: 6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA Certificate issuer: /CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7 Certificate serial: 0EE0B57533E383EAA3D960ECACDFE145649C3C9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft Manifest number: 03C0 Signing time: Tue 09 Sep 2025 04:40:41 +0000 Manifest this update: Tue 09 Sep 2025 04:35:41 +0000 Manifest next update: Wed 10 Sep 2025 05:11:41 +0000 Files and hashes: 1: 6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl (hash: hwFWH3rCoJ1PN/tYmt7uRy/NvPJsNX25uK7aPHn76cg=) 2: 323630323a666136653a3a2f33362d3336203d3e203133363436.roa (hash: VGLKsgogi2I3ngbX4zz98KwF+ce4xUWbXael6VtJ/R8=) 3: EEF3EC40152A747D52835AE8973E7DC8C193A840.cer (hash: HGmIGZLAwtENWMckwsQ8hWTMC9jCNzhQYJENgR6PUlg=) 4: 3139382e3133352e3136392e302f32342d3234203d3e20333936393933.roa (hash: ds98Ml9DDwJOnbFWnKuYftmXTBL5e6vB9e43egQhGMs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Sep 2025 05:11:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:e0:b5:75:33:e3:83:ea:a3:d9:60:ec:ac:df:e1:45:64:9c:3c:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7 Validity Not Before: Sep 9 04:35:41 2025 GMT Not After : Sep 10 05:11:41 2025 GMT Subject: CN=51151949DDB95ABC98B5658462B76768CA67CE5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:59:e6:3a:57:69:dc:8d:29:10:b2:30:f9:b1: 83:45:3a:14:e3:db:6c:5a:3c:9d:6c:66:aa:82:7f: c4:a6:37:f5:b5:f4:74:63:b9:e2:4d:35:f5:8c:0c: ce:a4:86:b6:cb:bc:d8:d7:8a:fa:ee:e6:46:85:1a: 73:e3:56:14:03:e3:5d:a7:dd:bf:44:f3:90:f9:1f: 04:e0:ac:53:ef:91:81:12:b5:3f:a5:fa:5c:c0:b8: 94:e1:64:68:62:b0:92:91:d4:9d:9a:39:79:a9:da: 3c:e9:95:28:c0:be:08:22:21:07:f1:ae:48:50:b6: 3c:61:39:b7:de:cc:83:f0:90:9d:1f:76:7f:55:9c: e0:80:0f:58:66:a3:50:da:21:15:09:af:e3:d2:42: 69:89:be:d0:54:81:54:d9:b4:f3:c5:fb:9e:a1:3e: 5f:d3:2b:51:7e:25:fe:62:02:05:55:48:e3:55:1b: a4:a4:98:30:e3:11:e9:44:4c:ae:ea:6c:6a:39:34: f2:80:f2:b9:2b:81:e7:1d:93:05:57:18:41:0b:b0: 19:9d:f5:0f:9f:83:77:64:24:b6:dd:80:37:11:29: 07:25:f3:f3:f7:87:40:e2:6c:ca:bc:9b:4a:10:39: 60:98:8f:b4:58:a6:28:3a:2e:7e:ce:11:52:66:92: c3:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:15:19:49:DD:B9:5A:BC:98:B5:65:84:62:B7:67:68:CA:67:CE:5F X509v3 Authority Key Identifier: keyid:6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:7d:c0:68:cd:e4:1f:8c:7e:ad:4f:96:f5:72:0b:9c:64:ee: c3:4b:97:9e:60:7d:c0:e3:80:9f:d2:4b:35:e2:8c:11:3b:f8: f2:3a:57:ef:c2:98:b1:b7:26:24:77:03:f8:e7:30:32:d8:77: 66:83:f8:ac:eb:79:0b:37:53:97:ac:a4:be:0d:5a:bc:40:59: e7:ba:84:6a:d6:32:21:2f:af:43:60:b5:5b:01:df:a4:80:3f: c0:3e:3f:2d:6f:ff:be:c6:34:17:87:8d:9b:2d:f2:69:f4:bf: ec:20:16:4e:ac:e3:ba:02:00:da:3f:a3:a4:06:af:50:a3:11: e5:e2:50:cf:ec:cc:bf:3a:95:ec:f3:e7:71:f4:d1:91:4a:dc: 99:a9:e6:fc:fb:4f:c5:62:07:1a:b9:66:75:e4:ac:cd:4b:aa: e2:d4:4e:34:a7:e7:08:65:63:6e:a0:88:3b:14:6b:ca:df:ca: 27:da:1c:5f:c8:58:4d:e0:72:e5:31:6e:1f:f0:1f:1b:f0:f5: 19:3c:19:9a:d2:32:9a:72:e0:0e:f4:3e:60:68:f1:12:98:60: 80:15:82:89:9b:8c:73:18:c7:cd:87:95:ca:a0:a4:29:71:b3: 0f:19:fb:a3:da:57:b1:45:39:f5:e7:9c:7c:23:f9:41:2f:a3: 91:73:a5:a4 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUDuC1dTPjg+qj2WDsrN/hRWScPJ4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDM3Mjk5OTcxNTJmZDg0ZmNkYTZkMTkwYzNiMzE5NWIw MjY3OTY2MDExMmJlOWEyZDcwHhcNMjUwOTA5MDQzNTQxWhcNMjUwOTEwMDUxMTQx WjAzMTEwLwYDVQQDEyg1MTE1MTk0OUREQjk1QUJDOThCNTY1ODQ2MkI3Njc2OENB NjdDRTVGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVnmOldp3I0p ELIw+bGDRToU49tsWjydbGaqgn/Epjf1tfR0Y7niTTX1jAzOpIa2y7zY14r67uZG hRpz41YUA+Ndp92/RPOQ+R8E4KxT75GBErU/pfpcwLiU4WRoYrCSkdSdmjl5qdo8 6ZUowL4IIiEH8a5IULY8YTm33syD8JCdH3Z/VZzggA9YZqNQ2iEVCa/j0kJpib7Q VIFU2bTzxfueoT5f0ytRfiX+YgIFVUjjVRukpJgw4xHpREyu6mxqOTTygPK5K4Hn HZMFVxhBC7AZnfUPn4N3ZCS23YA3ESkHJfPz94dA4mzKvJtKEDlgmI+0WKYoOi5+ zhFSZpLD1wIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFFEVGUnduVq8mLVlhGK3Z2jK Z85fMB8GA1UdIwQYMBaAFGpvbsJypevcGCQcLITR2f6UwSWqMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzY2YmQ5MmYxLTQxNWItNDc2NS04YTE2 LWRiZmM0NTkzYzFhOC83LzZBNkY2RUMyNzJBNUVCREMxODI0MUMyQzg0RDFEOUZF OTRDMTI1QUEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTIt NDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84MjlmYjg3Mi0xNWJiLTRhNGUtOWVkOS0y NTk5NjBiMDQ5YmQvNDM3Mjk5OTcxNTJmZDg0ZmNkYTZkMTkwYzNiMzE5NWIwMjY3 OTY2MDExMmJlOWEyZDcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv NjZiZDkyZjEtNDE1Yi00NzY1LThhMTYtZGJmYzQ1OTNjMWE4LzcvNkE2RjZFQzI3 MkE1RUJEQzE4MjQxQzJDODREMUQ5RkU5NEMxMjVBQS5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAG59wGjN 5B+Mfq1PlvVyC5xk7sNLl55gfcDjgJ/SSzXijBE7+PI6V+/CmLG3JiR3A/jnMDLY d2aD+KzreQs3U5espL4NWrxAWee6hGrWMiEvr0NgtVsB36SAP8A+Py1v/77GNBeH jZst8mn0v+wgFk6s47oCANo/o6QGr1CjEeXiUM/szL86lezz53H00ZFK3Jmp5vz7 T8ViBxq5ZnXkrM1LquLUTjSn5whlY26giDsUa8rfyifaHF/IWE3gcuUxbh/wHxvw 9Rk8GZrSMppy4A70PmBo8RKYYIAVgombjHMYx82HlcqgpClxsw8Z+6PaV7FFOfXn nHwj+UEvo5FzpaQ= -----END CERTIFICATE-----Generated at Tue Sep 9 18:50:01 2025 by rpki-client