$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft File: 6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft (raw, json) Hash identifier: AE/B6n9NrqWDUntU/ZvQBQHuLEy1J7O8RWIUAIVGxLs= Subject key identifier: 25:E7:CD:2E:33:98:8F:47:6A:04:71:6E:EE:A2:24:A0:26:EA:9B:44 Authority key identifier: 6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA Certificate issuer: /CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7 Certificate serial: 319A5C348CA99AC163A08F1FA5EAE3595BFEC8B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft Manifest number: 02D6 Signing time: Fri 04 Apr 2025 20:48:08 +0000 Manifest this update: Fri 04 Apr 2025 20:43:08 +0000 Manifest next update: Sat 05 Apr 2025 22:36:08 +0000 Files and hashes: 1: 3139382e3133352e3136392e302f32342d3234203d3e20333936393933.roa (hash: ds98Ml9DDwJOnbFWnKuYftmXTBL5e6vB9e43egQhGMs=) 2: 6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl (hash: SfoLiHUbf0t+oCnHKiBJFU9O5Z7FYqTq/tu/9hAYHk8=) 3: EEF3EC40152A747D52835AE8973E7DC8C193A840.cer (hash: HGmIGZLAwtENWMckwsQ8hWTMC9jCNzhQYJENgR6PUlg=) 4: 32332e3137342e3230302e302f32342d3234203d3e203135333533.roa (hash: FFpmdrmFTQ1EwGGJtpsh2GlWAknLs7PduieofwpgPt8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 22:36:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:9a:5c:34:8c:a9:9a:c1:63:a0:8f:1f:a5:ea:e3:59:5b:fe:c8:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7 Validity Not Before: Apr 4 20:43:08 2025 GMT Not After : Apr 5 22:36:08 2025 GMT Subject: CN=25E7CD2E33988F476A04716EEEA224A026EA9B44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:57:8e:bd:ab:cf:43:e9:54:f9:33:5e:6d:4d: 25:b1:36:b2:0c:5c:75:28:b5:bb:c5:ff:54:1d:5c: 58:b3:e0:99:12:d8:0a:6c:f6:9a:ae:32:3d:5e:1a: af:31:dc:8b:c0:12:ef:68:e1:20:fa:fe:f8:f8:51: c1:db:cd:55:80:ec:cd:2c:aa:10:a4:6d:e0:7b:41: 40:82:b2:34:05:83:5d:3a:0f:06:c1:ac:43:01:ff: e7:99:c7:16:3c:b1:32:a3:6b:50:2e:b9:6a:bb:9b: eb:5b:34:fa:73:1e:1e:ec:4a:60:d9:9c:39:45:59: d1:88:53:eb:e6:8c:4d:e6:cf:43:e2:14:bf:a6:39: 6f:4c:6c:40:99:dc:53:b4:26:53:23:6a:62:69:54: 9c:23:02:10:66:2c:ec:78:46:7a:01:62:55:c9:39: 98:ae:96:f2:8f:0f:e7:76:bd:53:42:e1:13:9b:21: 6a:e6:2c:4f:07:55:90:b0:b0:bd:a5:1e:f6:43:97: 53:12:15:98:87:61:7d:ae:30:64:a3:71:69:ec:ea: 1f:e8:cd:79:fc:1e:09:ab:83:a3:09:4a:d6:61:71: 4f:ae:71:58:78:43:5f:05:d6:b5:21:e6:90:f0:d2: 7b:a2:54:bf:2d:10:4b:a7:38:89:38:a4:43:86:92: 3d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:E7:CD:2E:33:98:8F:47:6A:04:71:6E:EE:A2:24:A0:26:EA:9B:44 X509v3 Authority Key Identifier: keyid:6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:cd:87:8b:3c:f4:06:f7:f3:e6:3e:85:f1:25:b0:4a:2e:ba: 80:9f:13:2d:6b:da:55:61:ff:93:26:4c:4b:69:47:4d:e4:87: d7:91:d0:9e:16:21:ab:bd:5e:99:f2:67:8e:a6:8d:f0:3e:99: 6a:b9:48:aa:34:43:c7:71:83:39:8d:76:a1:1e:b9:56:ed:8a: e8:4c:77:0a:e1:e7:a9:1a:ac:46:4d:a2:f8:01:d8:f7:89:ed: 00:25:35:d7:c7:4d:1a:5c:91:e4:7f:8d:1f:8d:3a:87:79:36: 9b:8c:7e:90:52:29:c9:f2:85:24:0b:35:00:73:5d:a8:83:82: 41:38:36:3c:81:1b:02:11:8b:8b:6b:ed:75:e0:bd:23:56:76: 31:73:d7:40:87:7e:c1:8b:e1:82:a7:29:d3:92:1c:6e:6c:b0: e4:a9:98:56:df:db:2e:02:67:e5:03:0a:7d:4f:56:5e:c7:95: 3e:b8:00:3e:d8:80:ef:ac:01:96:9b:c7:be:3c:0c:4b:0a:d3: 8a:e8:93:21:a7:85:67:67:c3:ae:7b:b7:44:a0:8b:f3:fe:12: 0f:36:99:60:2f:60:d3:09:2c:64:ed:d6:9a:17:ef:b3:19:33: da:9a:45:e7:10:8f:da:f7:f7:94:be:bf:ae:ea:9f:80:c3:cb: de:25:1e:04 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUMZpcNIypmsFjoI8fperjWVv+yLEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDM3Mjk5OTcxNTJmZDg0ZmNkYTZkMTkwYzNiMzE5NWIw MjY3OTY2MDExMmJlOWEyZDcwHhcNMjUwNDA0MjA0MzA4WhcNMjUwNDA1MjIzNjA4 WjAzMTEwLwYDVQQDEygyNUU3Q0QyRTMzOTg4RjQ3NkEwNDcxNkVFRUEyMjRBMDI2 RUE5QjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4FeOvavPQ+lU +TNebU0lsTayDFx1KLW7xf9UHVxYs+CZEtgKbPaarjI9XhqvMdyLwBLvaOEg+v74 +FHB281VgOzNLKoQpG3ge0FAgrI0BYNdOg8GwaxDAf/nmccWPLEyo2tQLrlqu5vr WzT6cx4e7Epg2Zw5RVnRiFPr5oxN5s9D4hS/pjlvTGxAmdxTtCZTI2piaVScIwIQ ZizseEZ6AWJVyTmYrpbyjw/ndr1TQuETmyFq5ixPB1WQsLC9pR72Q5dTEhWYh2F9 rjBko3Fp7Oof6M15/B4Jq4OjCUrWYXFPrnFYeENfBda1IeaQ8NJ7olS/LRBLpziJ OKRDhpI9UwIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFCXnzS4zmI9HagRxbu6iJKAm 6ptEMB8GA1UdIwQYMBaAFGpvbsJypevcGCQcLITR2f6UwSWqMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzY2YmQ5MmYxLTQxNWItNDc2NS04YTE2 LWRiZmM0NTkzYzFhOC83LzZBNkY2RUMyNzJBNUVCREMxODI0MUMyQzg0RDFEOUZF OTRDMTI1QUEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTIt NDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84MjlmYjg3Mi0xNWJiLTRhNGUtOWVkOS0y NTk5NjBiMDQ5YmQvNDM3Mjk5OTcxNTJmZDg0ZmNkYTZkMTkwYzNiMzE5NWIwMjY3 OTY2MDExMmJlOWEyZDcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv NjZiZDkyZjEtNDE1Yi00NzY1LThhMTYtZGJmYzQ1OTNjMWE4LzcvNkE2RjZFQzI3 MkE1RUJEQzE4MjQxQzJDODREMUQ5RkU5NEMxMjVBQS5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACvNh4s8 9Ab38+Y+hfElsEouuoCfEy1r2lVh/5MmTEtpR03kh9eR0J4WIau9XpnyZ46mjfA+ mWq5SKo0Q8dxgzmNdqEeuVbtiuhMdwrh56karEZNovgB2PeJ7QAlNdfHTRpckeR/ jR+NOod5NpuMfpBSKcnyhSQLNQBzXaiDgkE4NjyBGwIRi4tr7XXgvSNWdjFz10CH fsGL4YKnKdOSHG5ssOSpmFbf2y4CZ+UDCn1PVl7HlT64AD7YgO+sAZabx748DEsK 04rokyGnhWdnw657t0Sgi/P+Eg82mWAvYNMJLGTt1poX77MZM9qaRecQj9r395S+ v67qn4DDy94lHgQ= -----END CERTIFICATE-----Generated at Sat Apr 5 04:34:24 2025 by rpki-client