$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft File: D74983C1FABA0CC1566F0601AFE11423E11B5171.mft (raw, json) Hash identifier: aYy1hjMrUvqjcdRbo2vz0p+yipyUduoW45EpgolQ6+o= Subject key identifier: 4F:A4:E3:3B:EC:1C:1A:FC:43:E2:05:41:73:64:83:DB:D3:62:F8:97 Authority key identifier: D7:49:83:C1:FA:BA:0C:C1:56:6F:06:01:AF:E1:14:23:E1:1B:51:71 Certificate issuer: /CN=4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c Certificate serial: 284BAE5DF5CF36F968C0A4D46193F60753CB311A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft Manifest number: 038E Signing time: Fri 06 Jun 2025 08:48:44 +0000 Manifest this update: Fri 06 Jun 2025 08:43:44 +0000 Manifest next update: Sat 07 Jun 2025 11:40:44 +0000 Files and hashes: 1: 323630323a666137613a3a2f34302d3438203d3e203537383730.roa (hash: KXZ5ssTmjUClZY+9bglfiLRlAhs+b4BWP1fzlqp7SIY=) 2: 32332e3135332e3233322e302f32342d3234203d3e203539393933.roa (hash: mlyVBtqAxaep1RbpdRUfXUrnFdjKT6MGiKPIjo5bDE0=) 3: 323630323a666137613a3a2f34302d3438203d3e203539393933.roa (hash: xlMWcnMOkntkvkwmItiIw9KHDflxZx0Jsc2LELbETrw=) 4: D74983C1FABA0CC1566F0601AFE11423E11B5171.crl (hash: LdePHy1RAUzWw7QgriCqUdFsYdrv0d60BvS9gwAixRI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.crl rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 11:40:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:4b:ae:5d:f5:cf:36:f9:68:c0:a4:d4:61:93:f6:07:53:cb:31:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c Validity Not Before: Jun 6 08:43:44 2025 GMT Not After : Jun 7 11:40:44 2025 GMT Subject: CN=4FA4E33BEC1C1AFC43E20541736483DBD362F897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c7:65:7e:25:34:d6:0b:99:59:1e:3d:80:5e: 31:91:a1:30:0d:a6:d1:a2:80:c3:0b:e7:6c:ff:44: 64:b2:29:d2:5c:21:06:91:06:21:b8:69:41:59:cd: 5b:cc:ed:cf:13:be:b7:22:e2:f4:3c:7c:9e:6e:f3: 94:bd:d8:12:49:e3:78:4c:79:61:6d:e4:c2:97:bc: fc:ae:e7:23:a9:90:34:54:05:f7:45:12:bd:87:5d: 83:ce:c3:ec:51:f6:f1:cb:09:e4:65:b2:f6:8c:22: a5:33:fc:b0:43:cd:99:ac:8c:db:b5:03:37:64:9b: e9:e7:99:72:fe:01:2a:86:10:5d:5e:46:c9:8b:90: a2:b5:57:34:a7:e8:dc:7b:ec:c9:cc:46:a1:ad:91: 12:b1:d1:3b:fe:81:20:5f:81:63:72:01:54:4f:76: 15:c1:70:4d:c2:f9:56:6b:e0:6a:1a:75:65:be:c5: bd:89:05:5a:94:04:e2:23:ba:35:8a:18:ae:cf:6d: 41:63:89:19:42:2b:7a:87:45:2e:1e:29:d3:54:16: 78:aa:59:6c:b4:87:32:1e:6a:ad:ce:0e:cc:2a:1e: 1f:6f:0a:69:4e:61:20:70:ba:7a:1f:d0:42:25:f8: 4d:6c:0e:b4:6a:74:0e:ba:4b:9c:34:23:7d:c4:0d: 50:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:A4:E3:3B:EC:1C:1A:FC:43:E2:05:41:73:64:83:DB:D3:62:F8:97 X509v3 Authority Key Identifier: keyid:D7:49:83:C1:FA:BA:0C:C1:56:6F:06:01:AF:E1:14:23:E1:1B:51:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:60:c0:70:a4:f1:36:ab:f9:92:ba:9f:14:b9:32:c9:b2:2b: c9:58:39:e9:45:52:32:27:94:ed:62:35:cf:d5:19:52:6e:d0: 64:a8:9c:df:f3:6e:fc:87:35:c1:80:b8:c7:03:74:93:92:ec: 11:d2:44:09:c1:23:39:e7:98:ce:2c:35:f6:9c:8c:fa:08:70: 85:95:f1:63:5d:d9:a3:f2:f9:31:7c:3b:30:ea:13:be:50:47: 85:fe:b5:fe:f1:18:bf:e4:f9:58:b3:3f:78:e7:ff:8b:9a:3c: 26:08:7b:5d:e5:b1:14:ee:53:0c:a7:b2:ee:60:56:2c:93:4e: e0:16:c5:37:34:09:48:83:44:ac:b0:7c:f0:7e:10:2e:09:c7: 35:6b:83:9d:f3:e2:98:01:7c:b2:7b:f1:59:dc:6e:86:60:cf: b6:8c:ff:ba:a1:d2:ea:13:cc:6b:08:e9:9c:51:ce:f5:f8:13: 4a:d4:95:35:f1:b1:99:be:c2:c0:d8:ca:22:d9:f4:61:5c:35: 02:f8:b2:1a:10:3b:c9:f6:b8:f1:ab:88:ee:dc:4f:05:d1:ff: 59:24:67:8a:e5:25:bd:a4:5c:07:d4:83:ed:0d:56:db:fa:06: 01:55:46:ca:41:8b:2e:2d:08:d3:e3:2d:66:6d:b9:89:b2:89: a1:40:5e:f6 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUKEuuXfXPNvlowKTUYZP2B1PLMRowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNGI0M2M2NGE2ODBlZmRjNTFhMDA0NjMxNzJiOGY1YWZm OTQ1ZTA3MzNmYzQ5YzJlNGMwHhcNMjUwNjA2MDg0MzQ0WhcNMjUwNjA3MTE0MDQ0 WjAzMTEwLwYDVQQDEyg0RkE0RTMzQkVDMUMxQUZDNDNFMjA1NDE3MzY0ODNEQkQz NjJGODk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsdlfiU01guZ WR49gF4xkaEwDabRooDDC+ds/0RksinSXCEGkQYhuGlBWc1bzO3PE763IuL0PHye bvOUvdgSSeN4THlhbeTCl7z8rucjqZA0VAX3RRK9h12DzsPsUfbxywnkZbL2jCKl M/ywQ82ZrIzbtQM3ZJvp55ly/gEqhhBdXkbJi5CitVc0p+jce+zJzEahrZESsdE7 /oEgX4FjcgFUT3YVwXBNwvlWa+BqGnVlvsW9iQValATiI7o1ihiuz21BY4kZQit6 h0UuHinTVBZ4qllstIcyHmqtzg7MKh4fbwppTmEgcLp6H9BCJfhNbA60anQOukuc NCN9xA1QIwIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFE+k4zvsHBr8Q+IFQXNkg9vT YviXMB8GA1UdIwQYMBaAFNdJg8H6ugzBVm8GAa/hFCPhG1FxMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FlNmVkZWVjLTA4YmEtNGNkZS04OTc5 LTRmYWVhNGIxYmMxMi83L0Q3NDk4M0MxRkFCQTBDQzE1NjZGMDYwMUFGRTExNDIz RTExQjUxNzEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2Mt NGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMTUwZTk4ZC04MGU5LTQ1ZjYtYmM2My02 YjQwYTNkNTllOWMvNGI0M2M2NGE2ODBlZmRjNTFhMDA0NjMxNzJiOGY1YWZmOTQ1 ZTA3MzNmYzQ5YzJlNGMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv YWU2ZWRlZWMtMDhiYS00Y2RlLTg5NzktNGZhZWE0YjFiYzEyLzcvRDc0OTgzQzFG QUJBMENDMTU2NkYwNjAxQUZFMTE0MjNFMTFCNTE3MS5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAI5gwHCk 8Tar+ZK6nxS5MsmyK8lYOelFUjInlO1iNc/VGVJu0GSonN/zbvyHNcGAuMcDdJOS 7BHSRAnBIznnmM4sNfacjPoIcIWV8WNd2aPy+TF8OzDqE75QR4X+tf7xGL/k+Viz P3jn/4uaPCYIe13lsRTuUwynsu5gViyTTuAWxTc0CUiDRKywfPB+EC4JxzVrg53z 4pgBfLJ78VncboZgz7aM/7qh0uoTzGsI6ZxRzvX4E0rUlTXxsZm+wsDYyiLZ9GFc NQL4shoQO8n2uPGriO7cTwXR/1kkZ4rlJb2kXAfUg+0NVtv6BgFVRspBiy4tCNPj LWZtuYmyiaFAXvY= -----END CERTIFICATE-----Generated at Fri Jun 6 22:25:20 2025 by rpki-client