$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft File: 6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft (raw, json) Hash identifier: VHB7T/dkCEDV+1UM299jJvOgC14acrLNhGCzef0sJwg= Subject key identifier: B9:15:B3:C9:9A:6B:AC:4C:DB:EE:5F:CA:CC:21:28:D4:D3:69:A3:22 Authority key identifier: 6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA Certificate issuer: /CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7 Certificate serial: 23D061E50F4478A0F2C0B5DFEC03A6D7D68ECE94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft Manifest number: 0403 Signing time: Mon 27 Oct 2025 10:32:35 +0000 Manifest this update: Mon 27 Oct 2025 10:27:35 +0000 Manifest next update: Tue 28 Oct 2025 12:56:35 +0000 Files and hashes: 1: EEF3EC40152A747D52835AE8973E7DC8C193A840.cer (hash: b9uDQIv17Mqj0faPNTNtrEIHppsSxn28riugd1hAwe4=) 2: 3139382e3133352e3136392e302f32342d3234203d3e20333936393933.roa (hash: ds98Ml9DDwJOnbFWnKuYftmXTBL5e6vB9e43egQhGMs=) 3: 6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl (hash: Pfxx1nIOy6RilzwV2/+leFm1lJjxEIk2f/1MM63xjlA=) 4: 323630323a666136653a3a2f33362d3336203d3e203133363436.roa (hash: VGLKsgogi2I3ngbX4zz98KwF+ce4xUWbXael6VtJ/R8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Oct 2025 12:56:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:d0:61:e5:0f:44:78:a0:f2:c0:b5:df:ec:03:a6:d7:d6:8e:ce:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7 Validity Not Before: Oct 27 10:27:35 2025 GMT Not After : Oct 28 12:56:35 2025 GMT Subject: CN=B915B3C99A6BAC4CDBEE5FCACC2128D4D369A322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:11:75:18:5a:25:b5:fc:a1:c4:f5:c6:fe:73: 3a:79:1a:6f:0d:57:9b:56:47:b1:47:ee:d8:9c:73: 2c:9a:31:96:3d:9c:65:e3:5a:63:75:e3:ee:ed:25: 32:1c:d8:60:fc:98:e7:31:de:9d:c7:b0:e8:d8:95: 68:35:88:76:42:92:82:9f:1b:3e:86:32:26:ef:23: a2:0b:42:53:91:b9:97:12:84:e5:e6:e9:b9:e6:f8: f3:1d:97:74:45:db:97:2f:0b:f8:f5:97:73:01:06: 7b:0c:74:9e:bc:c3:a5:e7:c1:0c:40:59:42:18:0e: af:da:de:9c:61:3e:ab:e0:a2:78:a3:96:97:d4:1c: 0d:a4:a0:36:70:f9:18:c5:1a:4e:b7:76:36:3d:19: 4f:17:22:c6:c7:47:54:25:09:56:c1:8a:77:a1:e6: bb:cf:a6:83:92:c0:33:0e:6b:1d:2f:2d:90:d3:ca: 9f:0d:e9:1d:9c:25:a7:9e:95:bc:e4:37:74:e5:d6: 74:2b:cf:b6:4f:4f:87:c7:39:70:2e:74:e3:79:b7: d2:56:e3:cf:7d:98:64:6b:0a:cf:de:e2:bd:ab:fb: 87:4c:a9:f8:fb:68:4e:bd:b2:6e:65:dc:31:c9:6e: 9a:6f:58:59:82:42:19:ef:f0:b5:5e:bd:25:82:ee: 3f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:15:B3:C9:9A:6B:AC:4C:DB:EE:5F:CA:CC:21:28:D4:D3:69:A3:22 X509v3 Authority Key Identifier: keyid:6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:b2:ff:4b:c1:d6:a9:e4:69:36:a7:45:45:ae:75:64:75:b9: e2:69:ab:02:ee:ce:bb:c5:d6:b0:3d:b4:8f:22:b6:08:d2:65: 7b:c7:ba:e8:15:e1:43:64:e7:72:66:00:ae:5a:3f:83:a3:7d: 8a:53:ad:da:85:5f:22:6e:fa:75:51:c6:6f:23:64:d4:90:c2: 8d:d9:58:df:2b:f2:3e:3c:6b:b1:b1:81:70:63:30:51:92:66: 2c:2d:0e:5c:aa:ef:bf:03:7b:cc:46:e8:64:1f:10:77:ee:b7: 94:a8:34:9f:ad:4d:14:4c:d6:0b:08:ca:7a:2f:0d:0d:bd:33: b8:2b:34:6f:2e:e4:f7:5a:7e:50:ee:4d:84:65:55:c7:d0:78: 3f:3a:2c:fd:61:b3:79:09:ce:b3:0c:52:f0:0e:aa:e5:63:16: b3:20:92:c8:2c:28:58:fa:3a:9e:f7:6e:78:d1:fc:78:c6:e9: 4a:8a:f4:19:59:01:e6:5f:95:5f:e3:77:b6:a6:cf:c4:18:2e: aa:23:81:cc:eb:f2:a8:f6:9b:c3:0c:74:f9:74:da:8b:d7:09: f7:c3:fd:d0:c2:52:c3:3d:a9:1a:ae:20:63:df:a6:98:a2:21: 6a:9f:44:2a:58:02:db:70:7f:5b:9f:bd:a8:e7:72:b7:1a:b7: b2:fb:7a:a3 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUI9Bh5Q9EeKDywLXf7AOm19aOzpQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDM3Mjk5OTcxNTJmZDg0ZmNkYTZkMTkwYzNiMzE5NWIw MjY3OTY2MDExMmJlOWEyZDcwHhcNMjUxMDI3MTAyNzM1WhcNMjUxMDI4MTI1NjM1 WjAzMTEwLwYDVQQDEyhCOTE1QjNDOTlBNkJBQzRDREJFRTVGQ0FDQzIxMjhENEQz NjlBMzIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBF1GFoltfyh xPXG/nM6eRpvDVebVkexR+7YnHMsmjGWPZxl41pjdePu7SUyHNhg/JjnMd6dx7Do 2JVoNYh2QpKCnxs+hjIm7yOiC0JTkbmXEoTl5um55vjzHZd0RduXLwv49ZdzAQZ7 DHSevMOl58EMQFlCGA6v2t6cYT6r4KJ4o5aX1BwNpKA2cPkYxRpOt3Y2PRlPFyLG x0dUJQlWwYp3oea7z6aDksAzDmsdLy2Q08qfDekdnCWnnpW85Dd05dZ0K8+2T0+H xzlwLnTjebfSVuPPfZhkawrP3uK9q/uHTKn4+2hOvbJuZdwxyW6ab1hZgkIZ7/C1 Xr0lgu4/+wIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFLkVs8maa6xM2+5fyswhKNTT aaMiMB8GA1UdIwQYMBaAFGpvbsJypevcGCQcLITR2f6UwSWqMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzY2YmQ5MmYxLTQxNWItNDc2NS04YTE2 LWRiZmM0NTkzYzFhOC83LzZBNkY2RUMyNzJBNUVCREMxODI0MUMyQzg0RDFEOUZF OTRDMTI1QUEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTIt NDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84MjlmYjg3Mi0xNWJiLTRhNGUtOWVkOS0y NTk5NjBiMDQ5YmQvNDM3Mjk5OTcxNTJmZDg0ZmNkYTZkMTkwYzNiMzE5NWIwMjY3 OTY2MDExMmJlOWEyZDcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv NjZiZDkyZjEtNDE1Yi00NzY1LThhMTYtZGJmYzQ1OTNjMWE4LzcvNkE2RjZFQzI3 MkE1RUJEQzE4MjQxQzJDODREMUQ5RkU5NEMxMjVBQS5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEmy/0vB 1qnkaTanRUWudWR1ueJpqwLuzrvF1rA9tI8itgjSZXvHuugV4UNk53JmAK5aP4Oj fYpTrdqFXyJu+nVRxm8jZNSQwo3ZWN8r8j48a7GxgXBjMFGSZiwtDlyq778De8xG 6GQfEHfut5SoNJ+tTRRM1gsIynovDQ29M7grNG8u5PdaflDuTYRlVcfQeD86LP1h s3kJzrMMUvAOquVjFrMgksgsKFj6Op73bnjR/HjG6UqK9BlZAeZflV/jd7amz8QY Lqojgczr8qj2m8MMdPl02ovXCffD/dDCUsM9qRquIGPfppiiIWqfRCpYAttwf1uf vajncrcat7L7eqM= -----END CERTIFICATE-----Generated at Mon Oct 27 18:55:00 2025 by rpki-client