$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft File: 3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft (raw, json) Hash identifier: sfZ8UL8U8fVuLQqvG+XTLOZp8ZtH2Tunm3ubBoRuxGw= Subject key identifier: CE:DA:D5:AE:E5:0C:EF:FF:37:82:A0:65:CA:6C:79:CB:97:83:54:28 Authority key identifier: 3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A Certificate issuer: /CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b Certificate serial: 3ADB19242BE67823125D9F77002C8F671AED4DAC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft Manifest number: 01AE Signing time: Sat 06 Sep 2025 12:01:17 +0000 Manifest this update: Sat 06 Sep 2025 11:56:17 +0000 Manifest next update: Sun 07 Sep 2025 15:02:17 +0000 Files and hashes: 1: 3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl (hash: 6HJkk7T8jcykVHa6bb4YF10NM/QI5LaK509bR2j16F8=) 2: 32332e3139312e34302e302f32342d3234203d3e203236393534.roa (hash: lO4v+9qZpYNTU13Fx5YYbE7NTGKX+3JJpxrHn0W/uvQ=) 3: 323630323a663764653a3a2f34302d3438203d3e203236393534.roa (hash: dVW6ZUsxUgXCaz0kq7P1NzZswddC3cxPIFG0EovOzUk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 15:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:db:19:24:2b:e6:78:23:12:5d:9f:77:00:2c:8f:67:1a:ed:4d:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b Validity Not Before: Sep 6 11:56:17 2025 GMT Not After : Sep 7 15:02:17 2025 GMT Subject: CN=CEDAD5AEE50CEFFF3782A065CA6C79CB97835428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c5:c0:30:e5:1c:f3:7f:7e:ad:d2:7a:1f:2e: 18:58:c2:7b:40:70:a1:ff:4b:4e:65:2f:44:ff:57: 98:25:ca:73:a8:32:54:49:f5:53:c4:42:2d:84:f1: bc:52:72:c8:b0:79:22:7d:f6:1a:6d:ae:43:59:81: 49:95:fe:15:8b:25:77:ca:be:94:43:61:d0:00:28: 8d:3f:5f:bb:9f:9d:91:59:37:88:2d:f7:ee:0a:d8: 28:9d:13:f9:fa:8c:11:cd:dd:31:21:27:fc:11:dd: 5a:58:c1:da:07:bc:c3:0d:b3:86:63:b6:06:6e:19: 5b:73:96:a6:4d:bf:48:10:a9:12:c2:9a:14:90:75: d8:08:81:82:a0:da:e9:11:d6:fe:c3:68:85:0f:f8: d2:fe:f7:68:78:3d:3b:8a:79:98:2c:2e:13:f7:95: 6e:a1:5d:f8:d4:34:ab:05:ce:26:6f:38:ae:5c:50: 07:dc:d9:c4:f9:01:23:bc:dc:a6:ff:60:79:02:2c: ef:23:3a:73:3f:0e:2c:23:29:49:a3:dc:8f:30:ac: 18:b2:3f:c2:6a:4e:f3:ee:54:13:d6:06:b0:dc:06: ee:2c:87:d1:dd:a1:57:b2:47:1b:45:c8:f4:9c:00: d8:01:57:d2:51:d3:3a:7d:76:06:dc:2b:17:8c:0b: a2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:DA:D5:AE:E5:0C:EF:FF:37:82:A0:65:CA:6C:79:CB:97:83:54:28 X509v3 Authority Key Identifier: keyid:3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:52:7d:39:1c:ac:53:ee:e5:e4:e5:bb:24:38:1a:57:e4:14: 00:22:1a:a9:b7:bb:47:d9:02:ab:be:90:36:14:92:ff:01:9d: 45:24:bc:76:16:c7:28:f0:ee:7c:d0:bb:c6:3a:ae:cb:d3:6c: ef:7b:cf:32:aa:e2:20:91:e7:bb:a4:ce:1e:40:8f:22:49:c1: c4:98:78:fb:56:78:2e:24:39:b7:db:c6:44:77:83:84:22:17: c3:60:df:36:d1:56:5e:32:44:e0:aa:d2:c6:1a:17:d4:ed:b2: 1e:25:c4:7f:9a:a6:e3:9e:54:53:2d:7d:91:ab:d7:1a:16:9b: 04:af:aa:e3:71:90:f3:12:ca:fd:ee:02:cf:02:a4:5d:4c:0b: 53:df:07:17:0b:db:f6:c7:40:33:91:86:91:1f:d8:fe:c6:e4: df:81:2f:bc:ad:12:52:d0:47:0f:3d:3f:fd:91:8e:3f:a9:52: de:35:82:6a:6c:4c:33:26:3e:fd:6f:1c:40:9e:8b:6b:98:8d: ea:03:ea:45:3b:56:4f:62:d0:99:a5:cb:36:94:77:ad:85:8c: 45:f9:73:d5:b7:3a:54:09:fd:87:cd:ff:3b:d7:38:a8:7c:e4: e2:8d:12:81:f4:80:57:cf:02:49:b5:1c:ad:9c:11:12:05:42: 0c:84:6c:ab -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUOtsZJCvmeCMSXZ93ACyPZxrtTawwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMzI0ZmZlMzlhOThhMDE0NmI1MDNkOGEwMTVjYTJjMmU3 NjdjZjNkMGI5ZmRlNjIzMWIwHhcNMjUwOTA2MTE1NjE3WhcNMjUwOTA3MTUwMjE3 WjAzMTEwLwYDVQQDEyhDRURBRDVBRUU1MENFRkZGMzc4MkEwNjVDQTZDNzlDQjk3 ODM1NDI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosXAMOUc839+ rdJ6Hy4YWMJ7QHCh/0tOZS9E/1eYJcpzqDJUSfVTxEIthPG8UnLIsHkiffYaba5D WYFJlf4ViyV3yr6UQ2HQACiNP1+7n52RWTeILffuCtgonRP5+owRzd0xISf8Ed1a WMHaB7zDDbOGY7YGbhlbc5amTb9IEKkSwpoUkHXYCIGCoNrpEdb+w2iFD/jS/vdo eD07inmYLC4T95VuoV341DSrBc4mbziuXFAH3NnE+QEjvNym/2B5AizvIzpzPw4s IylJo9yPMKwYsj/Cak7z7lQT1gaw3AbuLIfR3aFXskcbRcj0nADYAVfSUdM6fXYG 3CsXjAuiQwIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFM7a1a7lDO//N4KgZcpsecuX g1QoMB8GA1UdIwQYMBaAFD/NOoOeoUF/2Yjz3f0EVBl/qvR6MA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5 LTBhYjcwZTQ4MTViYi8xLzNGQ0QzQTgzOUVBMTQxN0ZEOTg4RjNEREZEMDQ1NDE5 N0ZBQUY0N0EuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYt NDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81MWNkOTlmNy0yZjQyLTRkZWMtYjJjNi0w OWJhZmFhMzc4MGUvMzI0ZmZlMzlhOThhMDE0NmI1MDNkOGEwMTVjYTJjMmU3Njdj ZjNkMGI5ZmRlNjIzMWIuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv NzNiOGVjMDEtOGJhNS00NzlmLWEyMjktMGFiNzBlNDgxNWJiLzEvM0ZDRDNBODM5 RUExNDE3RkQ5ODhGM0RERkQwNDU0MTk3RkFBRjQ3QS5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEhSfTkc rFPu5eTluyQ4GlfkFAAiGqm3u0fZAqu+kDYUkv8BnUUkvHYWxyjw7nzQu8Y6rsvT bO97zzKq4iCR57ukzh5AjyJJwcSYePtWeC4kObfbxkR3g4QiF8Ng3zbRVl4yROCq 0sYaF9Ttsh4lxH+apuOeVFMtfZGr1xoWmwSvquNxkPMSyv3uAs8CpF1MC1PfBxcL 2/bHQDORhpEf2P7G5N+BL7ytElLQRw89P/2Rjj+pUt41gmpsTDMmPv1vHECei2uY jeoD6kU7Vk9i0JmlyzaUd62FjEX5c9W3OlQJ/YfN/zvXOKh85OKNEoH0gFfPAkm1 HK2cERIFQgyEbKs= -----END CERTIFICATE-----Generated at Sun Sep 7 01:20:32 2025 by rpki-client