$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.mft File: D70A91D89E34C7A20009B1E160FB6C627063630C.mft (raw, json) Hash identifier: vS7Ew8DN6ELXuWK4rGoK6JUBwSVbgyAMi4zl5KjEEoc= Subject key identifier: 39:CF:18:B3:46:65:8B:87:FD:8A:74:AC:13:78:31:ED:2E:37:96:A3 Authority key identifier: D7:0A:91:D8:9E:34:C7:A2:00:09:B1:E1:60:FB:6C:62:70:63:63:0C Certificate issuer: /CN=ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d Certificate serial: 747C59E4B8EBB8120D36F7B85A5164F473468F43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.mft Manifest number: 021D Signing time: Sat 02 Aug 2025 03:38:24 +0000 Manifest this update: Sat 02 Aug 2025 03:33:24 +0000 Manifest next update: Sun 03 Aug 2025 06:34:24 +0000 Files and hashes: 1: D70A91D89E34C7A20009B1E160FB6C627063630C.crl (hash: 95vhq7l+wfzL6tsBKEwGFF7eIoKROr40srAjBchE9Lo=) 2: 32332e3138332e3133362e302f32342d3234203d3e2030.roa (hash: swtuTdCu9qwtIFReZr0cVz+AYUZ4/a/i2nv3LPMJAJ8=) 3: 323630323a663838323a3a2f33362d3438203d3e20343031323138.roa (hash: Dizjuv2g3xNyGUDZ8X1oRA6GQacDJJP6dGAQzPkf04o=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.crl rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 03 Aug 2025 06:34:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:7c:59:e4:b8:eb:b8:12:0d:36:f7:b8:5a:51:64:f4:73:46:8f:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d Validity Not Before: Aug 2 03:33:24 2025 GMT Not After : Aug 3 06:34:24 2025 GMT Subject: CN=39CF18B346658B87FD8A74AC137831ED2E3796A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:09:61:4a:47:ae:ad:f9:2c:f4:f7:eb:b9:6d: 43:c5:65:5b:1d:aa:d5:dc:a3:34:51:70:3c:06:28: 06:aa:af:b6:48:13:6b:e6:77:1f:c0:28:1f:43:c4: b1:2a:7b:dc:86:a3:70:15:a5:82:0e:ba:4c:7e:72: b8:93:94:82:7b:01:12:69:28:b9:e6:a7:fe:9b:84: e9:53:a8:83:bb:f2:27:da:c3:d3:fd:cc:95:d7:ca: b6:27:8e:6e:a1:01:f1:96:77:ae:e0:5e:e1:63:b0: 29:c8:1e:aa:18:4f:5d:c1:f7:85:33:67:b9:c6:19: 52:46:0d:3a:8c:99:32:2a:47:c1:aa:7b:b8:01:1e: b4:a0:fa:74:dd:46:15:b8:72:72:8a:39:e3:48:6d: 31:15:c3:69:ff:46:3f:23:a9:73:67:1e:5d:80:29: a7:48:69:f8:78:7e:38:64:df:6b:0e:95:c6:ce:d4: 4f:87:b0:73:e1:78:54:4f:03:d6:53:d1:12:03:45: 2e:2f:66:cb:4c:55:fa:60:f3:4a:f3:cd:2c:75:de: b3:a9:50:71:9c:14:8a:05:8c:d7:78:1d:da:72:dd: 62:01:22:4f:9e:66:53:cb:fd:58:4f:bb:d0:c4:81: da:9c:dc:52:21:49:aa:85:33:eb:39:f2:c6:96:ec: b6:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:CF:18:B3:46:65:8B:87:FD:8A:74:AC:13:78:31:ED:2E:37:96:A3 X509v3 Authority Key Identifier: keyid:D7:0A:91:D8:9E:34:C7:A2:00:09:B1:E1:60:FB:6C:62:70:63:63:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:f5:72:8a:3e:1c:38:eb:18:cb:56:e1:2b:aa:76:4b:d1:b3: f8:09:1b:f5:47:8b:b5:78:44:a5:34:5d:6b:46:04:96:14:42: 6e:99:4e:e4:99:ee:e2:7a:13:62:58:69:11:5e:6a:be:5b:d0: 9d:a9:96:8e:f8:51:a2:c1:83:c9:c5:e8:e5:23:48:d1:9c:cb: 74:6a:74:21:8b:d7:55:52:9b:ff:68:ea:5e:08:e9:5c:92:de: 33:32:67:e1:92:a0:11:a6:7b:27:33:0b:f4:1a:c7:8a:1b:e3: 56:e9:23:d4:0a:1a:52:6e:00:91:40:d9:d5:cb:59:93:65:72: a7:76:9d:39:88:13:57:d9:13:8b:91:41:db:1b:9b:16:f7:e4: 02:c6:e9:4c:b4:f0:bf:35:b6:d4:dc:e5:ab:3d:da:aa:bc:63: c6:78:7d:4a:0e:dd:5a:5d:e5:d7:ec:51:9e:0b:d8:fc:b9:e0: 5d:f4:c7:e4:dc:21:35:2f:25:6d:46:76:72:51:69:23:80:f8: 3d:74:3c:af:32:ba:9f:28:fb:97:d1:fb:48:1d:16:d3:38:bf: cd:e7:85:a5:d7:2f:42:4b:6a:9e:62:86:cc:db:b0:4c:05:8f: e7:06:a2:e4:b8:9b:f3:73:3e:3a:32:e4:0d:9b:9d:58:bd:3b: c5:05:88:d5 -----BEGIN CERTIFICATE----- MIIF2zCCBMOgAwIBAgIUdHxZ5LjruBINNve4WlFk9HNGj0MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYmE1OWMxNWI5Nzc3YTRhNTI3MGM5YjdhNTg0ZTQ2OTc4 ZTA5YTdiZDJkMTU0YmZhOWQwHhcNMjUwODAyMDMzMzI0WhcNMjUwODAzMDYzNDI0 WjAzMTEwLwYDVQQDEygzOUNGMThCMzQ2NjU4Qjg3RkQ4QTc0QUMxMzc4MzFFRDJF Mzc5NkEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1glhSkeurfks 9PfruW1DxWVbHarV3KM0UXA8BigGqq+2SBNr5ncfwCgfQ8SxKnvchqNwFaWCDrpM fnK4k5SCewESaSi55qf+m4TpU6iDu/In2sPT/cyV18q2J45uoQHxlneu4F7hY7Ap yB6qGE9dwfeFM2e5xhlSRg06jJkyKkfBqnu4AR60oPp03UYVuHJyijnjSG0xFcNp /0Y/I6lzZx5dgCmnSGn4eH44ZN9rDpXGztRPh7Bz4XhUTwPWU9ESA0UuL2bLTFX6 YPNK880sdd6zqVBxnBSKBYzXeB3act1iASJPnmZTy/1YT7vQxIHanNxSIUmqhTPr OfLGluy2CQIDAQABo4IC2zCCAtcwHQYDVR0OBBYEFDnPGLNGZYuH/Yp0rBN4Me0u N5ajMB8GA1UdIwQYMBaAFNcKkdieNMeiAAmx4WD7bGJwY2MMMA4GA1UdDwEB/wQE AwIHgDCBlwYDVR0fBIGPMIGMMIGJoIGGoIGDhoGAcnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZTZlZGVlYy0wOGJhLTRjZGUtODk3 OS00ZmFlYTRiMWJjMTIvMjAvRDcwQTkxRDg5RTM0QzdBMjAwMDlCMUUxNjBGQjZD NjI3MDYzNjMwQy5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB 03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlm MC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzMyNjE5ZmY5LTRhNDYtNGU5My1hOWI1 LWRkYTJhMzNhOWZmZC9iYTU5YzE1Yjk3NzdhNGE1MjcwYzliN2E1ODRlNDY5Nzhl MDlhN2JkMmQxNTRiZmE5ZC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEF BQcwC4aBgHJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvYWU2ZWRlZWMtMDhiYS00Y2RlLTg5NzktNGZhZWE0YjFiYzEyLzIwL0Q3MEE5 MUQ4OUUzNEM3QTIwMDA5QjFFMTYwRkI2QzYyNzA2MzYzMEMubWZ0MBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQC AAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBy 9XKKPhw46xjLVuErqnZL0bP4CRv1R4u1eESlNF1rRgSWFEJumU7kme7iehNiWGkR Xmq+W9CdqZaO+FGiwYPJxejlI0jRnMt0anQhi9dVUpv/aOpeCOlckt4zMmfhkqAR pnsnMwv0GseKG+NW6SPUChpSbgCRQNnVy1mTZXKndp05iBNX2ROLkUHbG5sW9+QC xulMtPC/NbbU3OWrPdqqvGPGeH1KDt1aXeXX7FGeC9j8ueBd9Mfk3CE1LyVtRnZy UWkjgPg9dDyvMrqfKPuX0ftIHRbTOL/N54Wl1y9CS2qeYobM27BMBY/nBqLkuJvz cz46MuQNm51YvTvFBYjV -----END CERTIFICATE-----Generated at Sun Aug 3 00:45:09 2025 by rpki-client