$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft File: 6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft (raw, json) Hash identifier: JKjbWqTht+JKcntj2Ez4acI76Qnq1y8ldHYK9d1uhJU= Subject key identifier: 35:92:4A:5D:C7:4E:C9:D6:FD:59:DF:C0:11:7A:0B:F7:38:1D:14:AC Authority key identifier: 6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA Certificate issuer: /CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7 Certificate serial: 2EAEC33B2DB60A1A69F01587311E7BA298B69D82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft Manifest number: 036F Signing time: Wed 16 Jul 2025 04:34:53 +0000 Manifest this update: Wed 16 Jul 2025 04:29:53 +0000 Manifest next update: Thu 17 Jul 2025 04:51:53 +0000 Files and hashes: 1: EEF3EC40152A747D52835AE8973E7DC8C193A840.cer (hash: HGmIGZLAwtENWMckwsQ8hWTMC9jCNzhQYJENgR6PUlg=) 2: 323630323a666136653a3a2f33362d3336203d3e203133363436.roa (hash: VGLKsgogi2I3ngbX4zz98KwF+ce4xUWbXael6VtJ/R8=) 3: 3139382e3133352e3136392e302f32342d3234203d3e20333936393933.roa (hash: ds98Ml9DDwJOnbFWnKuYftmXTBL5e6vB9e43egQhGMs=) 4: 6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl (hash: 0/K9K8F4goXvyqOpm4HtvNho36XbKcYLOscgDeKmXq4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Jul 2025 04:51:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:ae:c3:3b:2d:b6:0a:1a:69:f0:15:87:31:1e:7b:a2:98:b6:9d:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7 Validity Not Before: Jul 16 04:29:53 2025 GMT Not After : Jul 17 04:51:53 2025 GMT Subject: CN=35924A5DC74EC9D6FD59DFC0117A0BF7381D14AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3d:a3:9a:dc:a9:a3:56:64:8b:37:46:be:60: 2f:43:95:d2:b4:bc:27:9c:e0:fd:9f:77:6e:20:db: 13:b0:10:52:74:26:12:7e:2b:cc:5e:03:f4:06:04: 2a:10:ac:65:e2:69:3b:38:8a:da:b2:54:48:16:58: 47:96:4e:a1:99:96:8f:70:81:6a:28:e3:cc:b7:a5: 7b:47:c8:97:ea:27:c2:ad:e4:cd:4c:e4:fb:b6:60: 0f:4e:f8:b7:9d:89:ee:7d:85:7a:0d:42:60:05:1a: 5d:93:d0:21:09:ee:f9:35:fb:9c:13:67:f4:eb:61: bd:e0:ef:43:f6:d2:13:2c:fe:9c:10:39:7e:42:ce: b1:b2:56:cb:d2:4d:e6:b7:d6:da:15:20:da:d0:51: f6:82:78:64:36:f2:29:25:cf:ad:3d:49:a1:38:94: 1d:30:97:a9:00:95:20:af:b7:60:da:a7:e1:58:60: 4d:ab:f4:94:f9:97:57:e9:1c:69:93:7a:8d:33:2a: f1:b5:3a:6b:b6:9d:cd:18:17:23:27:d6:cf:07:e7: 58:81:df:1d:ac:a0:4f:03:5a:b6:34:f9:f8:b6:ed: 78:21:a0:72:d9:97:7e:7b:f3:85:86:e6:75:c6:67: e7:df:ef:8c:04:78:47:87:9d:74:d9:f8:90:9a:07: a6:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:92:4A:5D:C7:4E:C9:D6:FD:59:DF:C0:11:7A:0B:F7:38:1D:14:AC X509v3 Authority Key Identifier: keyid:6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:13:ec:c4:41:92:7c:36:54:69:d0:d8:64:29:a8:e1:ad:62: bf:01:35:9d:c5:fb:4c:08:ad:33:ef:99:1f:04:36:11:90:1d: ab:c5:30:df:a7:a2:a5:73:71:0a:e9:31:83:12:95:1f:1b:86: 90:73:e9:91:77:f9:73:e6:8c:82:77:fa:16:36:ba:42:10:89: 71:f5:00:90:cc:75:45:7a:62:bc:4a:82:eb:72:f9:08:92:28: ec:2e:63:7e:7d:47:b5:30:25:96:a1:66:22:08:e0:9e:0c:3c: cf:ea:01:fa:d3:e7:97:50:31:e2:2d:fc:b2:2f:8f:3b:53:7f: bd:64:e2:2f:bb:67:61:9b:78:cc:98:be:cc:2f:41:d8:3c:e7: 97:4a:a6:4e:1b:e8:96:cb:ce:4d:16:d7:f7:b7:89:3e:31:2f: d9:26:27:5e:e9:f3:f8:eb:5f:17:d0:44:d9:fb:2c:8e:27:89: 34:9e:9d:a4:c4:16:c6:a1:7d:51:a0:0c:bc:d2:37:b4:71:43: e3:3e:2c:a4:8b:8f:fb:ea:f6:be:7a:ab:00:4c:64:d0:80:07: 3f:d2:02:ab:8c:42:99:8b:39:84:5e:d3:9b:47:98:cd:ea:25: b0:0f:a2:b1:25:d7:4b:37:f7:75:68:23:01:01:5d:cf:05:bd: 81:f5:0c:53 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIULq7DOy22Chpp8BWHMR57opi2nYIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDM3Mjk5OTcxNTJmZDg0ZmNkYTZkMTkwYzNiMzE5NWIw MjY3OTY2MDExMmJlOWEyZDcwHhcNMjUwNzE2MDQyOTUzWhcNMjUwNzE3MDQ1MTUz WjAzMTEwLwYDVQQDEygzNTkyNEE1REM3NEVDOUQ2RkQ1OURGQzAxMTdBMEJGNzM4 MUQxNEFDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwT2jmtypo1Zk izdGvmAvQ5XStLwnnOD9n3duINsTsBBSdCYSfivMXgP0BgQqEKxl4mk7OIraslRI FlhHlk6hmZaPcIFqKOPMt6V7R8iX6ifCreTNTOT7tmAPTvi3nYnufYV6DUJgBRpd k9AhCe75NfucE2f062G94O9D9tITLP6cEDl+Qs6xslbL0k3mt9baFSDa0FH2gnhk NvIpJc+tPUmhOJQdMJepAJUgr7dg2qfhWGBNq/SU+ZdX6Rxpk3qNMyrxtTprtp3N GBcjJ9bPB+dYgd8drKBPA1q2NPn4tu14IaBy2Zd+e/OFhuZ1xmfn3++MBHhHh510 2fiQmgemtQIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFDWSSl3HTsnW/VnfwBF6C/c4 HRSsMB8GA1UdIwQYMBaAFGpvbsJypevcGCQcLITR2f6UwSWqMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzY2YmQ5MmYxLTQxNWItNDc2NS04YTE2 LWRiZmM0NTkzYzFhOC83LzZBNkY2RUMyNzJBNUVCREMxODI0MUMyQzg0RDFEOUZF OTRDMTI1QUEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTIt NDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84MjlmYjg3Mi0xNWJiLTRhNGUtOWVkOS0y NTk5NjBiMDQ5YmQvNDM3Mjk5OTcxNTJmZDg0ZmNkYTZkMTkwYzNiMzE5NWIwMjY3 OTY2MDExMmJlOWEyZDcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv NjZiZDkyZjEtNDE1Yi00NzY1LThhMTYtZGJmYzQ1OTNjMWE4LzcvNkE2RjZFQzI3 MkE1RUJEQzE4MjQxQzJDODREMUQ5RkU5NEMxMjVBQS5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFUT7MRB knw2VGnQ2GQpqOGtYr8BNZ3F+0wIrTPvmR8ENhGQHavFMN+noqVzcQrpMYMSlR8b hpBz6ZF3+XPmjIJ3+hY2ukIQiXH1AJDMdUV6YrxKguty+QiSKOwuY359R7UwJZah ZiII4J4MPM/qAfrT55dQMeIt/LIvjztTf71k4i+7Z2GbeMyYvswvQdg855dKpk4b 6JbLzk0W1/e3iT4xL9kmJ17p8/jrXxfQRNn7LI4niTSenaTEFsahfVGgDLzSN7Rx Q+M+LKSLj/vq9r56qwBMZNCABz/SAquMQpmLOYRe05tHmM3qJbAPorEl10s393Vo IwEBXc8FvYH1DFM= -----END CERTIFICATE-----Generated at Wed Jul 16 11:05:43 2025 by rpki-client