$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft File: 3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft (raw, json) Hash identifier: lVe2lTSyuv6BCJefaLh+3eSOlFT/jaqcTz2xjRMVyqE= Subject key identifier: C6:65:21:E8:CE:38:16:6E:ED:5F:C1:FC:5C:D1:30:F2:1F:D0:FB:FE Authority key identifier: 3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A Certificate issuer: /CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b Certificate serial: 7197BDB1DA613CBFF4692AE7A382F18D84C13FB7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft Manifest number: 0132 Signing time: Fri 06 Jun 2025 15:07:22 +0000 Manifest this update: Fri 06 Jun 2025 15:02:22 +0000 Manifest next update: Sat 07 Jun 2025 16:39:22 +0000 Files and hashes: 1: 323630323a663764653a3a2f34302d3438203d3e203236393534.roa (hash: dVW6ZUsxUgXCaz0kq7P1NzZswddC3cxPIFG0EovOzUk=) 2: 32332e3139312e34302e302f32342d3234203d3e203236393534.roa (hash: lO4v+9qZpYNTU13Fx5YYbE7NTGKX+3JJpxrHn0W/uvQ=) 3: 3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl (hash: T6mi6NyNHp1FmTK4ygc4F2PtVy17yfUbp1XW1LbfLB4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 16:39:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:97:bd:b1:da:61:3c:bf:f4:69:2a:e7:a3:82:f1:8d:84:c1:3f:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b Validity Not Before: Jun 6 15:02:22 2025 GMT Not After : Jun 7 16:39:22 2025 GMT Subject: CN=C66521E8CE38166EED5FC1FC5CD130F21FD0FBFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ee:d3:bb:0a:ae:fa:b4:b3:40:ef:33:5a:3e: 42:a0:d9:9f:a5:23:82:41:72:b9:67:e4:9a:40:be: 20:17:34:28:7e:40:a2:d3:c5:92:04:f8:94:a8:9e: 59:75:32:c0:f8:c8:55:76:78:18:40:f3:b6:e8:57: 0d:52:46:74:5d:df:c8:2e:c2:73:18:4c:7f:da:1c: 6d:e8:d6:bf:2c:e9:6e:0b:e4:cc:50:65:f6:f5:b2: bc:a7:cf:c7:1c:0a:32:53:69:c0:92:91:03:8e:46: d6:47:de:0d:5e:93:31:2c:cd:db:8c:d9:09:6a:d3: ce:13:5c:83:ff:41:bc:e0:df:b7:3f:42:aa:cf:a8: 24:2c:4f:04:8c:1f:ae:30:80:70:86:f1:65:d9:68: 15:10:6d:d9:06:3c:3c:22:10:6c:f2:de:94:fe:ac: 75:c1:0e:b3:85:bd:5b:5f:74:b8:a2:08:cd:5c:98: 57:db:d8:d2:12:39:ed:58:03:64:1b:07:fd:34:bb: 30:f4:fa:8c:71:f7:3f:03:78:e1:00:de:32:e7:8e: 36:b6:f7:49:02:08:14:f4:76:ca:c1:62:16:c1:dd: a5:5b:9f:84:f3:9a:bd:23:c9:22:2f:cd:4f:4c:2d: aa:77:01:c3:e1:e7:06:c1:a7:9b:2d:21:16:d1:23: 40:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:65:21:E8:CE:38:16:6E:ED:5F:C1:FC:5C:D1:30:F2:1F:D0:FB:FE X509v3 Authority Key Identifier: keyid:3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:32:08:f0:29:16:0d:26:01:f0:2c:88:f2:78:7a:68:b0:5d: c0:c9:67:da:7a:47:59:25:71:44:2c:5f:9c:76:05:84:2a:75: 6f:81:d3:ef:5b:b3:51:a2:73:e9:8f:40:dc:f8:d7:e1:6b:7c: 4b:cd:3a:f6:75:d2:46:6c:78:dc:8b:b9:f7:ea:7e:f0:14:c9: da:68:cd:76:99:4c:2b:ae:69:c2:cd:23:e4:8a:1e:de:d6:4a: 01:2c:5c:2b:e9:63:e5:0e:01:4a:09:39:06:15:a0:d9:8a:bf: 89:a1:1a:31:56:e0:ef:f9:9b:d9:71:5e:70:23:9c:54:89:ba: 97:ef:98:ab:5c:36:87:2d:a6:c4:46:c8:85:76:23:8b:4e:f9: 84:c2:33:02:c6:eb:da:d3:2e:53:34:4c:49:ef:21:06:f1:20: f7:d0:12:2e:23:71:70:0b:40:4a:74:c2:df:41:50:d1:fb:de: 72:46:51:65:24:27:59:e9:e8:6c:4f:53:b6:34:9c:11:df:71: f7:c2:3f:cd:5e:4a:0c:31:8f:84:a7:f6:2b:57:bf:3c:8f:63: 69:a8:fa:b3:4c:b6:2a:38:88:00:74:72:77:1d:3c:c2:73:ca: d3:f4:4d:9c:ef:02:dc:31:46:9e:8d:61:c0:38:a6:e5:98:e3: 1d:b3:ed:ea -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUcZe9sdphPL/0aSrno4LxjYTBP7cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMzI0ZmZlMzlhOThhMDE0NmI1MDNkOGEwMTVjYTJjMmU3 NjdjZjNkMGI5ZmRlNjIzMWIwHhcNMjUwNjA2MTUwMjIyWhcNMjUwNjA3MTYzOTIy WjAzMTEwLwYDVQQDEyhDNjY1MjFFOENFMzgxNjZFRUQ1RkMxRkM1Q0QxMzBGMjFG RDBGQkZFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4O7Tuwqu+rSz QO8zWj5CoNmfpSOCQXK5Z+SaQL4gFzQofkCi08WSBPiUqJ5ZdTLA+MhVdngYQPO2 6FcNUkZ0Xd/ILsJzGEx/2hxt6Na/LOluC+TMUGX29bK8p8/HHAoyU2nAkpEDjkbW R94NXpMxLM3bjNkJatPOE1yD/0G84N+3P0Kqz6gkLE8EjB+uMIBwhvFl2WgVEG3Z Bjw8IhBs8t6U/qx1wQ6zhb1bX3S4ogjNXJhX29jSEjntWANkGwf9NLsw9PqMcfc/ A3jhAN4y5442tvdJAggU9HbKwWIWwd2lW5+E85q9I8kiL81PTC2qdwHD4ecGwaeb LSEW0SNAtQIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFMZlIejOOBZu7V/B/FzRMPIf 0Pv+MB8GA1UdIwQYMBaAFD/NOoOeoUF/2Yjz3f0EVBl/qvR6MA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5 LTBhYjcwZTQ4MTViYi8xLzNGQ0QzQTgzOUVBMTQxN0ZEOTg4RjNEREZEMDQ1NDE5 N0ZBQUY0N0EuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYt NDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81MWNkOTlmNy0yZjQyLTRkZWMtYjJjNi0w OWJhZmFhMzc4MGUvMzI0ZmZlMzlhOThhMDE0NmI1MDNkOGEwMTVjYTJjMmU3Njdj ZjNkMGI5ZmRlNjIzMWIuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv NzNiOGVjMDEtOGJhNS00NzlmLWEyMjktMGFiNzBlNDgxNWJiLzEvM0ZDRDNBODM5 RUExNDE3RkQ5ODhGM0RERkQwNDU0MTk3RkFBRjQ3QS5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACYyCPAp Fg0mAfAsiPJ4emiwXcDJZ9p6R1klcUQsX5x2BYQqdW+B0+9bs1Gic+mPQNz41+Fr fEvNOvZ10kZseNyLuffqfvAUydpozXaZTCuuacLNI+SKHt7WSgEsXCvpY+UOAUoJ OQYVoNmKv4mhGjFW4O/5m9lxXnAjnFSJupfvmKtcNoctpsRGyIV2I4tO+YTCMwLG 69rTLlM0TEnvIQbxIPfQEi4jcXALQEp0wt9BUNH73nJGUWUkJ1np6GxPU7Y0nBHf cffCP81eSgwxj4Sn9itXvzyPY2mo+rNMtio4iAB0cncdPMJzytP0TZzvAtwxRp6N YcA4puWY4x2z7eo= -----END CERTIFICATE-----Generated at Fri Jun 6 23:24:05 2025 by rpki-client