$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft File: D74983C1FABA0CC1566F0601AFE11423E11B5171.mft (raw, json) Hash identifier: 0QG+YkpgA7CHU02CloK5OsH/F2XBY/6k8okhMYR/zVM= Subject key identifier: 8E:0C:40:0A:2D:BD:49:B1:3B:60:0E:01:18:31:41:90:E1:3E:5A:0E Authority key identifier: D7:49:83:C1:FA:BA:0C:C1:56:6F:06:01:AF:E1:14:23:E1:1B:51:71 Certificate issuer: /CN=4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c Certificate serial: 11E118AA39927A79A46F00C1EA8109D5BAE020CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft Manifest number: 0409 Signing time: Sat 06 Sep 2025 11:36:48 +0000 Manifest this update: Sat 06 Sep 2025 11:31:48 +0000 Manifest next update: Sun 07 Sep 2025 12:18:48 +0000 Files and hashes: 1: 323630323a666137613a3a2f34302d3438203d3e203539393933.roa (hash: xlMWcnMOkntkvkwmItiIw9KHDflxZx0Jsc2LELbETrw=) 2: D74983C1FABA0CC1566F0601AFE11423E11B5171.crl (hash: pTWxiFIy7wTCI5InkjAKYYMxn7sXI/F/jlpDnRN4Vek=) 3: 323630323a666137613a3a2f34302d3438203d3e203537383730.roa (hash: KXZ5ssTmjUClZY+9bglfiLRlAhs+b4BWP1fzlqp7SIY=) 4: 32332e3135332e3233322e302f32342d3234203d3e203539393933.roa (hash: mlyVBtqAxaep1RbpdRUfXUrnFdjKT6MGiKPIjo5bDE0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.crl rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 12:18:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:e1:18:aa:39:92:7a:79:a4:6f:00:c1:ea:81:09:d5:ba:e0:20:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c Validity Not Before: Sep 6 11:31:48 2025 GMT Not After : Sep 7 12:18:48 2025 GMT Subject: CN=8E0C400A2DBD49B13B600E0118314190E13E5A0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c9:25:15:b0:b0:0f:9a:36:33:48:c3:a3:72: e6:d7:37:97:82:ca:30:e2:c7:dd:c0:72:38:8c:88: f0:24:6d:c7:f5:97:2f:b2:0f:55:9a:88:63:1f:ae: 3b:dc:3e:2c:b2:41:82:d9:15:5b:7a:f8:28:3b:b5: 89:e2:36:83:ea:3d:36:6f:32:14:e4:ef:d1:13:d7: f6:a2:34:1a:02:6c:48:b5:39:2e:22:be:28:33:ac: d6:fd:62:d4:76:1a:bd:0b:54:6f:60:c2:b8:ae:e2: ea:74:f9:28:7a:7d:78:3f:16:e9:cb:a8:75:34:68: 91:46:b6:92:be:c2:6c:88:26:5e:2c:c3:5a:b0:cf: 94:27:1c:60:8a:f0:75:66:9c:a2:0e:a3:f0:51:f7: a4:e5:0e:e9:c9:b8:fa:84:34:60:38:53:8c:e2:85: cb:ca:5d:55:4d:41:71:99:2d:70:f2:96:51:60:ea: 35:50:94:62:b4:e0:2b:d6:39:a0:a4:f2:53:35:2c: 89:9e:66:65:0c:6e:77:57:a0:e5:c4:93:ed:43:33: c9:9f:dc:36:ba:43:7e:e3:92:f8:fb:24:6e:93:98: 3b:1c:4d:f5:68:9e:e6:b9:82:df:e9:cd:3e:58:61: 6f:e7:21:62:50:40:0e:ab:b8:22:78:8c:9c:bd:06: 66:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:0C:40:0A:2D:BD:49:B1:3B:60:0E:01:18:31:41:90:E1:3E:5A:0E X509v3 Authority Key Identifier: keyid:D7:49:83:C1:FA:BA:0C:C1:56:6F:06:01:AF:E1:14:23:E1:1B:51:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:e3:b7:68:dc:7f:8c:7c:01:6c:e9:b8:6b:33:74:fe:dd:69: b4:a4:28:b1:86:a0:bd:d1:36:3a:87:b9:55:91:ee:35:56:b0: 04:9f:bb:ae:fe:91:23:93:03:1c:81:5f:cd:1a:be:c7:2c:5f: cb:e5:2c:4a:c7:f6:49:4d:6e:7b:6f:ec:ee:c0:fe:ec:09:51: 70:4f:60:84:da:ef:83:00:a9:9e:4f:3c:ad:00:29:4d:d1:4d: f1:5c:2d:c3:83:5d:82:8b:37:05:6a:15:55:72:22:c8:93:14: 8c:aa:95:98:92:6d:32:6e:08:ba:f7:d4:d5:d2:2a:57:f1:97: 67:5c:d3:1b:41:ea:cc:6e:98:79:53:60:ff:95:4f:12:04:c8: 0c:eb:4e:7b:87:21:dc:5b:05:55:04:ce:73:64:3d:75:07:ac: 6f:a0:34:a0:cb:69:17:f0:b8:9a:ae:c7:aa:2b:5d:71:96:a3: 63:93:dd:ab:a5:92:96:0c:97:1c:76:d0:b9:aa:fa:17:a4:ac: 06:2e:57:60:7f:89:8e:a8:b1:42:e9:39:e1:63:54:93:8e:91: da:32:76:2b:cc:de:27:92:c6:38:02:f8:cf:3b:73:4f:d9:a9: b7:3a:b8:0f:ef:dd:70:1f:c0:54:34:10:0e:5f:32:97:d2:ad: b7:4b:0b:c7 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUEeEYqjmSenmkbwDB6oEJ1brgIMswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNGI0M2M2NGE2ODBlZmRjNTFhMDA0NjMxNzJiOGY1YWZm OTQ1ZTA3MzNmYzQ5YzJlNGMwHhcNMjUwOTA2MTEzMTQ4WhcNMjUwOTA3MTIxODQ4 WjAzMTEwLwYDVQQDEyg4RTBDNDAwQTJEQkQ0OUIxM0I2MDBFMDExODMxNDE5MEUx M0U1QTBFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMklFbCwD5o2 M0jDo3Lm1zeXgsow4sfdwHI4jIjwJG3H9Zcvsg9VmohjH6473D4sskGC2RVbevgo O7WJ4jaD6j02bzIU5O/RE9f2ojQaAmxItTkuIr4oM6zW/WLUdhq9C1RvYMK4ruLq dPkoen14Pxbpy6h1NGiRRraSvsJsiCZeLMNasM+UJxxgivB1ZpyiDqPwUfek5Q7p ybj6hDRgOFOM4oXLyl1VTUFxmS1w8pZRYOo1UJRitOAr1jmgpPJTNSyJnmZlDG53 V6DlxJPtQzPJn9w2ukN+45L4+yRuk5g7HE31aJ7muYLf6c0+WGFv5yFiUEAOq7gi eIycvQZmJwIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFI4MQAotvUmxO2AOARgxQZDh PloOMB8GA1UdIwQYMBaAFNdJg8H6ugzBVm8GAa/hFCPhG1FxMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FlNmVkZWVjLTA4YmEtNGNkZS04OTc5 LTRmYWVhNGIxYmMxMi83L0Q3NDk4M0MxRkFCQTBDQzE1NjZGMDYwMUFGRTExNDIz RTExQjUxNzEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2Mt NGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMTUwZTk4ZC04MGU5LTQ1ZjYtYmM2My02 YjQwYTNkNTllOWMvNGI0M2M2NGE2ODBlZmRjNTFhMDA0NjMxNzJiOGY1YWZmOTQ1 ZTA3MzNmYzQ5YzJlNGMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv YWU2ZWRlZWMtMDhiYS00Y2RlLTg5NzktNGZhZWE0YjFiYzEyLzcvRDc0OTgzQzFG QUJBMENDMTU2NkYwNjAxQUZFMTE0MjNFMTFCNTE3MS5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFbjt2jc f4x8AWzpuGszdP7dabSkKLGGoL3RNjqHuVWR7jVWsASfu67+kSOTAxyBX80avscs X8vlLErH9klNbntv7O7A/uwJUXBPYITa74MAqZ5PPK0AKU3RTfFcLcODXYKLNwVq FVVyIsiTFIyqlZiSbTJuCLr31NXSKlfxl2dc0xtB6sxumHlTYP+VTxIEyAzrTnuH IdxbBVUEznNkPXUHrG+gNKDLaRfwuJqux6orXXGWo2OT3aulkpYMlxx20Lmq+hek rAYuV2B/iY6osULpOeFjVJOOkdoydivM3ieSxjgC+M87c0/Zqbc6uA/v3XAfwFQ0 EA5fMpfSrbdLC8c= -----END CERTIFICATE-----Generated at Sat Sep 6 17:09:22 2025 by rpki-client