$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft File: 3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft (raw, json) Hash identifier: HlNoz8f6WXkhQcfqNLH60N2RxovzmwXfgdJEXYM7ofg= Subject key identifier: 76:9B:DC:A6:C1:FC:E4:1C:1A:BE:D7:1F:E1:CF:29:FC:C2:BF:B6:20 Authority key identifier: 3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A Certificate issuer: /CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b Certificate serial: 7521A8E2133DCCEB65CDD9FB8322504F153F3DC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft Manifest number: D8 Signing time: Fri 04 Apr 2025 17:14:12 +0000 Manifest this update: Fri 04 Apr 2025 17:09:12 +0000 Manifest next update: Sat 05 Apr 2025 20:13:12 +0000 Files and hashes: 1: 3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl (hash: nZulAsvu+LmEbjlH2cFOEXYqhHWSYpHr0DoY+qTvufg=) 2: 32332e3139312e34302e302f32342d3234203d3e203236393534.roa (hash: lO4v+9qZpYNTU13Fx5YYbE7NTGKX+3JJpxrHn0W/uvQ=) 3: 323630323a663764653a3a2f34302d3438203d3e203236393534.roa (hash: dVW6ZUsxUgXCaz0kq7P1NzZswddC3cxPIFG0EovOzUk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 20:13:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:21:a8:e2:13:3d:cc:eb:65:cd:d9:fb:83:22:50:4f:15:3f:3d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b Validity Not Before: Apr 4 17:09:12 2025 GMT Not After : Apr 5 20:13:12 2025 GMT Subject: CN=769BDCA6C1FCE41C1ABED71FE1CF29FCC2BFB620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f0:a7:96:76:cf:be:69:12:8d:94:8c:0b:26: c3:e3:43:55:ba:de:cd:f0:f3:37:33:5b:69:41:c6: c1:23:68:cd:03:e8:23:39:70:7a:0d:d7:92:b9:60: 58:ab:e2:aa:4a:67:9b:ca:26:ca:39:a2:2d:9b:36: 63:9a:72:db:29:64:b9:92:a5:4b:69:fa:88:c3:6d: 09:21:ca:3f:b2:c9:76:5e:04:35:9c:74:79:b2:eb: 0e:51:dc:b6:97:7b:5a:30:74:85:6b:ef:d7:40:78: f0:01:59:c2:43:49:78:24:89:39:23:9d:33:ef:67: 91:96:45:46:3d:38:8d:4d:90:11:8d:38:d1:fb:ea: 3e:3a:98:8d:0b:aa:b5:f0:30:49:42:48:83:c6:e8: 6c:7b:5a:a4:f5:01:59:13:08:a0:8b:88:a8:b1:7a: 6e:41:bf:4d:df:c8:d2:d4:0a:bf:5f:32:6f:a4:2a: 53:1a:a9:8b:b1:8f:ce:54:ba:fb:56:46:97:7d:45: ea:56:92:1a:18:b3:e4:42:95:cb:0d:4a:26:dc:7d: 4f:4a:80:3f:81:f2:dc:b5:47:69:48:5d:45:f4:a0: 14:3c:19:5d:fd:9e:35:c9:4f:ee:b4:7d:9e:3c:89: f5:21:2e:cd:53:d2:4a:56:fe:82:13:70:cb:a8:bd: 65:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:9B:DC:A6:C1:FC:E4:1C:1A:BE:D7:1F:E1:CF:29:FC:C2:BF:B6:20 X509v3 Authority Key Identifier: keyid:3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:ea:4d:b7:27:57:c8:15:cb:55:f7:ac:c9:2a:d7:c7:d2:51: e2:d8:6d:6d:a0:cc:c9:0d:c2:5d:f5:ba:d8:c7:52:90:26:bb: 8a:e9:a0:44:04:45:b1:7a:f8:13:30:8b:53:1b:4a:b3:5b:ff: d6:23:9a:a6:be:28:a6:7d:6f:30:ec:0a:06:be:13:2a:c0:73: 75:f1:e3:ae:f9:f8:16:41:b6:34:4e:07:25:01:23:16:ce:00: 20:5d:64:6c:a3:17:4d:32:d4:65:a9:2b:4f:e0:85:98:d5:59: f4:75:3a:3b:33:4f:19:c7:8c:51:42:5e:7a:7c:74:37:65:8f: f1:d9:41:35:d6:1e:1d:19:4b:a2:79:79:6d:07:95:37:d4:7a: 8e:2e:e5:cc:0f:36:6a:a8:85:71:95:fd:84:ab:0a:c6:5d:e2: fc:13:b8:15:94:c6:99:60:de:15:d1:9e:e2:b2:42:e2:4d:17: e6:44:7f:c1:a4:a1:ec:98:93:88:1f:f7:02:8b:9e:65:b2:c0: 5a:6e:17:db:fb:5d:6e:db:fe:1f:ea:a1:e3:97:78:b6:25:a5: c0:83:a9:4d:75:0d:68:58:b4:15:32:6d:43:b7:63:a9:74:f1: 2e:47:c9:20:0e:32:43:0e:83:42:d3:4a:73:5d:2e:c1:e1:c9: 6e:d5:5b:d4 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUdSGo4hM9zOtlzdn7gyJQTxU/PcAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMzI0ZmZlMzlhOThhMDE0NmI1MDNkOGEwMTVjYTJjMmU3 NjdjZjNkMGI5ZmRlNjIzMWIwHhcNMjUwNDA0MTcwOTEyWhcNMjUwNDA1MjAxMzEy WjAzMTEwLwYDVQQDEyg3NjlCRENBNkMxRkNFNDFDMUFCRUQ3MUZFMUNGMjlGQ0My QkZCNjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvCnlnbPvmkS jZSMCybD40NVut7N8PM3M1tpQcbBI2jNA+gjOXB6DdeSuWBYq+KqSmebyibKOaIt mzZjmnLbKWS5kqVLafqIw20JIco/ssl2XgQ1nHR5susOUdy2l3taMHSFa+/XQHjw AVnCQ0l4JIk5I50z72eRlkVGPTiNTZARjTjR++o+OpiNC6q18DBJQkiDxuhse1qk 9QFZEwigi4iosXpuQb9N38jS1Aq/XzJvpCpTGqmLsY/OVLr7VkaXfUXqVpIaGLPk QpXLDUom3H1PSoA/gfLctUdpSF1F9KAUPBld/Z41yU/utH2ePIn1IS7NU9JKVv6C E3DLqL1ldQIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFHab3KbB/OQcGr7XH+HPKfzC v7YgMB8GA1UdIwQYMBaAFD/NOoOeoUF/2Yjz3f0EVBl/qvR6MA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5 LTBhYjcwZTQ4MTViYi8xLzNGQ0QzQTgzOUVBMTQxN0ZEOTg4RjNEREZEMDQ1NDE5 N0ZBQUY0N0EuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYt NDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81MWNkOTlmNy0yZjQyLTRkZWMtYjJjNi0w OWJhZmFhMzc4MGUvMzI0ZmZlMzlhOThhMDE0NmI1MDNkOGEwMTVjYTJjMmU3Njdj ZjNkMGI5ZmRlNjIzMWIuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv NzNiOGVjMDEtOGJhNS00NzlmLWEyMjktMGFiNzBlNDgxNWJiLzEvM0ZDRDNBODM5 RUExNDE3RkQ5ODhGM0RERkQwNDU0MTk3RkFBRjQ3QS5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAALqTbcn V8gVy1X3rMkq18fSUeLYbW2gzMkNwl31utjHUpAmu4rpoEQERbF6+BMwi1MbSrNb /9Yjmqa+KKZ9bzDsCga+EyrAc3Xx4675+BZBtjROByUBIxbOACBdZGyjF00y1GWp K0/ghZjVWfR1OjszTxnHjFFCXnp8dDdlj/HZQTXWHh0ZS6J5eW0HlTfUeo4u5cwP NmqohXGV/YSrCsZd4vwTuBWUxplg3hXRnuKyQuJNF+ZEf8GkoeyYk4gf9wKLnmWy wFpuF9v7XW7b/h/qoeOXeLYlpcCDqU11DWhYtBUybUO3Y6l08S5HySAOMkMOg0LT SnNdLsHhyW7VW9Q= -----END CERTIFICATE-----Generated at Sat Apr 5 06:23:44 2025 by rpki-client