$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.mft File: D70A91D89E34C7A20009B1E160FB6C627063630C.mft (raw, json) Hash identifier: SWfXVOsCTxyl7NbZ9kll6GLU3kDHcLm5ewOybFTlLwA= Subject key identifier: 76:CC:29:4D:90:B7:F3:C6:8E:C2:C6:E4:AD:8B:0C:79:82:EC:01:B2 Authority key identifier: D7:0A:91:D8:9E:34:C7:A2:00:09:B1:E1:60:FB:6C:62:70:63:63:0C Certificate issuer: /CN=ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d Certificate serial: 190BFE0E38399C14795ABF541693C6791EA3687C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.mft Manifest number: 01D2 Signing time: Fri 06 Jun 2025 10:25:22 +0000 Manifest this update: Fri 06 Jun 2025 10:20:22 +0000 Manifest next update: Sat 07 Jun 2025 13:34:22 +0000 Files and hashes: 1: 323630323a663838323a3a2f33362d3438203d3e20343031323138.roa (hash: Dizjuv2g3xNyGUDZ8X1oRA6GQacDJJP6dGAQzPkf04o=) 2: D70A91D89E34C7A20009B1E160FB6C627063630C.crl (hash: tpABSMp4r+QLRPMzlwI4mVqZaxaJ1iYNqRyKfUfEr0U=) 3: 32332e3138332e3133362e302f32342d3234203d3e2030.roa (hash: swtuTdCu9qwtIFReZr0cVz+AYUZ4/a/i2nv3LPMJAJ8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.crl rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 13:34:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:0b:fe:0e:38:39:9c:14:79:5a:bf:54:16:93:c6:79:1e:a3:68:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d Validity Not Before: Jun 6 10:20:22 2025 GMT Not After : Jun 7 13:34:22 2025 GMT Subject: CN=76CC294D90B7F3C68EC2C6E4AD8B0C7982EC01B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:bb:4a:94:7a:d4:19:e5:b4:7c:ad:9d:2b:28: 0e:4c:44:60:ac:c7:27:cd:e8:f5:bc:4c:96:b3:fb: 81:88:4b:9a:b2:3d:a8:87:85:00:06:d3:db:54:fc: 59:87:c0:f3:c5:aa:b3:38:e4:17:d8:e2:af:e1:cc: ab:ad:af:84:7b:17:a7:07:5e:7b:db:7d:ad:8a:5d: 5e:63:2d:d2:90:c2:3b:a9:3a:90:e8:73:2a:a3:12: 1e:41:19:46:64:9e:25:38:d7:7e:9a:4c:31:39:fc: a4:b7:c4:47:f8:93:4b:ba:d1:eb:5a:8e:04:02:d8: 1d:d9:37:3b:44:0c:62:a9:4d:77:86:07:3c:88:6a: 72:ba:be:27:28:14:e1:a6:25:af:77:0a:a1:a9:02: 49:a2:5c:6d:3f:47:38:14:15:1c:db:25:29:e0:8b: c4:36:40:30:ed:10:b1:da:4d:72:21:23:15:02:47: 79:e9:3d:53:42:0d:4d:7a:f8:1f:0e:65:81:4b:c6: 4d:02:5e:cd:99:90:02:68:82:18:cb:41:e5:7c:66: b8:6d:8b:7c:95:26:58:10:a7:fe:69:7d:df:fb:1c: 59:a7:66:76:18:45:0e:7d:07:eb:4d:09:0d:af:57: f5:6f:36:b4:2a:d3:bf:0d:a2:cb:7a:57:f6:bc:6a: dc:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:CC:29:4D:90:B7:F3:C6:8E:C2:C6:E4:AD:8B:0C:79:82:EC:01:B2 X509v3 Authority Key Identifier: keyid:D7:0A:91:D8:9E:34:C7:A2:00:09:B1:E1:60:FB:6C:62:70:63:63:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:ab:24:48:21:77:52:f3:95:3a:c5:26:1e:d1:71:d1:08:b9: 36:70:29:97:e6:81:1f:bb:e6:b0:d0:fc:82:3f:5c:b6:7a:14: ab:0c:e0:89:e2:0c:29:76:58:ce:a3:43:b0:58:40:57:7b:db: 8b:ed:97:84:aa:12:b0:81:60:fe:47:f1:c4:82:3a:60:09:ed: 9d:32:92:a0:8b:27:8e:3c:52:03:d1:ad:db:9c:d9:c0:fe:b9: 2e:4b:f4:07:ea:8f:be:d3:2f:5c:66:3d:80:79:eb:7b:7e:0e: d9:21:50:75:02:3e:5a:d3:3a:eb:b5:0d:1e:c2:fa:88:05:58: c7:0e:0a:4a:d8:25:be:d3:fe:d6:fa:60:bb:dc:2c:bd:a3:9b: 27:8b:3d:4e:9a:52:39:ad:de:db:00:f3:a7:2d:51:4d:a5:d3: bd:e5:14:5d:b4:f3:46:69:08:32:48:78:88:2f:5b:4e:17:3b: 1a:b1:35:ce:b5:25:0c:25:76:1a:11:50:f8:d5:fb:32:08:d0: 2a:bc:b5:2f:81:c2:42:17:46:d6:c5:34:6b:ae:90:a0:bf:ff: 65:7d:00:2e:2f:db:bc:57:e5:0a:58:cd:df:d3:d1:70:f9:48: 56:c6:e3:c8:fc:ab:d6:b4:50:b6:4d:e8:46:9f:23:bf:d9:c9: 34:19:fd:8a -----BEGIN CERTIFICATE----- MIIF2zCCBMOgAwIBAgIUGQv+Djg5nBR5Wr9UFpPGeR6jaHwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYmE1OWMxNWI5Nzc3YTRhNTI3MGM5YjdhNTg0ZTQ2OTc4 ZTA5YTdiZDJkMTU0YmZhOWQwHhcNMjUwNjA2MTAyMDIyWhcNMjUwNjA3MTMzNDIy WjAzMTEwLwYDVQQDEyg3NkNDMjk0RDkwQjdGM0M2OEVDMkM2RTRBRDhCMEM3OTgy RUMwMUIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7LtKlHrUGeW0 fK2dKygOTERgrMcnzej1vEyWs/uBiEuasj2oh4UABtPbVPxZh8DzxaqzOOQX2OKv 4cyrra+EexenB157232til1eYy3SkMI7qTqQ6HMqoxIeQRlGZJ4lONd+mkwxOfyk t8RH+JNLutHrWo4EAtgd2Tc7RAxiqU13hgc8iGpyur4nKBThpiWvdwqhqQJJolxt P0c4FBUc2yUp4IvENkAw7RCx2k1yISMVAkd56T1TQg1NevgfDmWBS8ZNAl7NmZAC aIIYy0HlfGa4bYt8lSZYEKf+aX3f+xxZp2Z2GEUOfQfrTQkNr1f1bza0KtO/DaLL elf2vGrcpQIDAQABo4IC2zCCAtcwHQYDVR0OBBYEFHbMKU2Qt/PGjsLG5K2LDHmC 7AGyMB8GA1UdIwQYMBaAFNcKkdieNMeiAAmx4WD7bGJwY2MMMA4GA1UdDwEB/wQE AwIHgDCBlwYDVR0fBIGPMIGMMIGJoIGGoIGDhoGAcnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZTZlZGVlYy0wOGJhLTRjZGUtODk3 OS00ZmFlYTRiMWJjMTIvMjAvRDcwQTkxRDg5RTM0QzdBMjAwMDlCMUUxNjBGQjZD NjI3MDYzNjMwQy5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB 03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlm MC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzMyNjE5ZmY5LTRhNDYtNGU5My1hOWI1 LWRkYTJhMzNhOWZmZC9iYTU5YzE1Yjk3NzdhNGE1MjcwYzliN2E1ODRlNDY5Nzhl MDlhN2JkMmQxNTRiZmE5ZC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEF BQcwC4aBgHJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvYWU2ZWRlZWMtMDhiYS00Y2RlLTg5NzktNGZhZWE0YjFiYzEyLzIwL0Q3MEE5 MUQ4OUUzNEM3QTIwMDA5QjFFMTYwRkI2QzYyNzA2MzYzMEMubWZ0MBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQC AAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCr qyRIIXdS85U6xSYe0XHRCLk2cCmX5oEfu+aw0PyCP1y2ehSrDOCJ4gwpdljOo0Ow WEBXe9uL7ZeEqhKwgWD+R/HEgjpgCe2dMpKgiyeOPFID0a3bnNnA/rkuS/QH6o++ 0y9cZj2Aeet7fg7ZIVB1Aj5a0zrrtQ0ewvqIBVjHDgpK2CW+0/7W+mC73Cy9o5sn iz1OmlI5rd7bAPOnLVFNpdO95RRdtPNGaQgySHiIL1tOFzsasTXOtSUMJXYaEVD4 1fsyCNAqvLUvgcJCF0bWxTRrrpCgv/9lfQAuL9u8V+UKWM3f09Fw+UhWxuPI/KvW tFC2TehGnyO/2ck0Gf2K -----END CERTIFICATE-----Generated at Fri Jun 6 19:32:41 2025 by rpki-client