$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft File: 3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft (raw, json) Hash identifier: B3Kg2Jm3AmdmiTNHEf9fnsF7jK0sbSB4eV3aemqxYmc= Subject key identifier: 97:AB:D6:0F:A0:AD:85:B3:7E:0E:29:35:84:BF:51:23:03:D2:44:62 Authority key identifier: 3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A Certificate issuer: /CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b Certificate serial: 4DE8EA7BE50B48F57174DC16FFF822EF75CBE484 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft Manifest number: 01F0 Signing time: Fri 24 Oct 2025 18:43:32 +0000 Manifest this update: Fri 24 Oct 2025 18:38:32 +0000 Manifest next update: Sat 25 Oct 2025 22:29:32 +0000 Files and hashes: 1: 3133302e31322e39332e302f32342d3234203d3e203236393534.roa (hash: vVLMMj/up4t8BoR2x4+9T6jLFKzm1RRXCwaLQiGBGUU=) 2: 3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl (hash: KJZh6MboNhBCudt+8XDPHJ9S90rCJQyssXZIuZRoGqg=) 3: 323630323a663764653a3a2f34302d3438203d3e203236393534.roa (hash: nc0OfcCKdw/6xTqKkcylPBA4tjafxEa+iXIGeRNqKAA=) 4: 32332e3139312e34302e302f32342d3234203d3e203236393534.roa (hash: S3jzo3eG6y4PI2K8QRCs4He73uG95vDRz8jaxjn2rIA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 22:29:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:e8:ea:7b:e5:0b:48:f5:71:74:dc:16:ff:f8:22:ef:75:cb:e4:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b Validity Not Before: Oct 24 18:38:32 2025 GMT Not After : Oct 25 22:29:32 2025 GMT Subject: CN=97ABD60FA0AD85B37E0E293584BF512303D24462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:43:07:34:9c:13:e1:7e:97:09:9c:a6:72:aa: 6b:10:19:06:fd:75:3e:a0:08:2b:9e:a2:29:f9:23: 7a:4c:19:1e:47:a6:7e:99:60:a9:4c:86:4b:45:c9: 53:ad:16:22:e0:9c:44:1e:bc:06:96:b2:c3:89:37: d6:a2:94:2e:4b:49:a9:ba:04:69:75:d5:1c:2c:e9: 72:ae:85:8f:0d:f7:14:21:97:ee:84:3c:0c:48:2e: ec:a4:7e:2e:4e:4c:5e:23:53:f4:a4:01:70:d8:52: e7:06:99:04:9c:29:8d:d6:a9:91:53:8b:a0:03:3a: 01:7a:eb:a8:e5:09:67:2a:1b:ec:53:9b:24:36:c6: fd:cb:5f:28:c7:6a:74:7a:fa:5b:4d:39:29:1a:30: 19:26:3d:ea:9d:70:06:78:51:14:bf:7d:4f:1b:40: e3:6c:01:14:a7:5c:7c:2b:ab:bb:50:25:c5:9a:5e: 04:1b:45:e6:b5:97:e7:56:54:d6:03:9a:fb:0e:3e: 65:2e:b8:23:70:11:de:6a:55:43:6f:36:6e:9c:e5: 51:4b:fa:43:5b:3a:49:23:5c:8d:e8:ce:41:89:2b: 9c:6e:91:1e:0b:33:f8:7e:4c:37:2e:ee:92:b4:45: fe:62:2a:1f:fc:52:64:41:20:e9:a4:52:b3:80:9d: 11:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:AB:D6:0F:A0:AD:85:B3:7E:0E:29:35:84:BF:51:23:03:D2:44:62 X509v3 Authority Key Identifier: keyid:3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:1e:90:7f:2e:a9:f4:08:6a:30:50:fc:b1:10:a6:26:a2:e3: db:cf:6f:09:43:4d:b1:fe:0c:a2:d5:8f:82:09:1f:96:12:a1: d2:79:99:79:2a:96:03:0b:57:55:5c:c5:d8:84:9f:7a:6e:58: dd:5d:48:95:b5:4b:13:e5:04:09:65:ce:38:69:f8:4d:95:89: da:29:d5:b0:05:2d:1f:ab:8d:7e:e0:be:f2:73:17:68:1b:4d: ad:7f:c5:c7:13:8e:c8:92:c2:3a:b1:94:b7:d5:af:2e:ca:86: 1a:8d:9b:d5:32:ae:77:e8:09:95:09:51:d0:4f:7c:ac:89:57: 09:5f:c7:37:60:a6:de:4d:1c:63:0d:0b:63:67:b5:92:66:a4: e6:0a:24:df:23:d1:e5:70:5a:38:67:88:9d:c4:b3:6b:f9:90: 2b:34:ea:89:2d:e0:a7:5d:d7:0b:1a:25:ad:db:b4:f9:ad:d7: fe:1a:be:6b:f1:23:92:08:8c:e0:f6:99:3a:dc:b9:96:5c:3c: 66:6c:47:94:36:ae:8e:e0:e8:c1:72:3c:85:47:79:29:f9:56: 29:55:72:d6:18:1e:d9:69:5b:d9:65:2f:5d:cc:29:15:51:4f: 57:1b:e1:e1:c2:79:75:80:7e:02:a5:de:2b:c6:9f:38:bd:79: e0:ac:b4:c1 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUTejqe+ULSPVxdNwW//gi73XL5IQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMzI0ZmZlMzlhOThhMDE0NmI1MDNkOGEwMTVjYTJjMmU3 NjdjZjNkMGI5ZmRlNjIzMWIwHhcNMjUxMDI0MTgzODMyWhcNMjUxMDI1MjIyOTMy WjAzMTEwLwYDVQQDEyg5N0FCRDYwRkEwQUQ4NUIzN0UwRTI5MzU4NEJGNTEyMzAz RDI0NDYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUMHNJwT4X6X CZymcqprEBkG/XU+oAgrnqIp+SN6TBkeR6Z+mWCpTIZLRclTrRYi4JxEHrwGlrLD iTfWopQuS0mpugRpddUcLOlyroWPDfcUIZfuhDwMSC7spH4uTkxeI1P0pAFw2FLn BpkEnCmN1qmRU4ugAzoBeuuo5QlnKhvsU5skNsb9y18ox2p0evpbTTkpGjAZJj3q nXAGeFEUv31PG0DjbAEUp1x8K6u7UCXFml4EG0XmtZfnVlTWA5r7Dj5lLrgjcBHe alVDbzZunOVRS/pDWzpJI1yN6M5BiSucbpEeCzP4fkw3Lu6StEX+Yiof/FJkQSDp pFKzgJ0RhQIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFJer1g+grYWzfg4pNYS/USMD 0kRiMB8GA1UdIwQYMBaAFD/NOoOeoUF/2Yjz3f0EVBl/qvR6MA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5 LTBhYjcwZTQ4MTViYi8xLzNGQ0QzQTgzOUVBMTQxN0ZEOTg4RjNEREZEMDQ1NDE5 N0ZBQUY0N0EuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYt NDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81MWNkOTlmNy0yZjQyLTRkZWMtYjJjNi0w OWJhZmFhMzc4MGUvMzI0ZmZlMzlhOThhMDE0NmI1MDNkOGEwMTVjYTJjMmU3Njdj ZjNkMGI5ZmRlNjIzMWIuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv NzNiOGVjMDEtOGJhNS00NzlmLWEyMjktMGFiNzBlNDgxNWJiLzEvM0ZDRDNBODM5 RUExNDE3RkQ5ODhGM0RERkQwNDU0MTk3RkFBRjQ3QS5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHEekH8u qfQIajBQ/LEQpiai49vPbwlDTbH+DKLVj4IJH5YSodJ5mXkqlgMLV1VcxdiEn3pu WN1dSJW1SxPlBAllzjhp+E2Vidop1bAFLR+rjX7gvvJzF2gbTa1/xccTjsiSwjqx lLfVry7KhhqNm9UyrnfoCZUJUdBPfKyJVwlfxzdgpt5NHGMNC2NntZJmpOYKJN8j 0eVwWjhniJ3Es2v5kCs06okt4Kdd1wsaJa3btPmt1/4avmvxI5IIjOD2mTrcuZZc PGZsR5Q2ro7g6MFyPIVHeSn5VilVctYYHtlpW9llL13MKRVRT1cb4eHCeXWAfgKl 3ivGnzi9eeCstME= -----END CERTIFICATE-----Generated at Sat Oct 25 08:08:42 2025 by rpki-client