$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft File: 1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft (raw, json) Hash identifier: 2wpFTXcBZfBlv1mdZT3IqOSI35/9EaE6b6Yyb0BZvpQ= Subject key identifier: 38:C7:AF:69:8A:66:2C:B7:80:A2:FA:7E:AC:C8:CF:12:9B:05:AE:65 Authority key identifier: 1F:7F:72:49:A6:81:F8:CD:41:27:0B:50:D8:D7:E7:81:58:81:DA:36 Certificate issuer: /CN=23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd Certificate serial: 3CA7BB8156278FE80045530B1CA685698514A745 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft Manifest number: A0 Signing time: Mon 30 Jun 2025 15:48:33 +0000 Manifest this update: Mon 30 Jun 2025 15:43:33 +0000 Manifest next update: Tue 01 Jul 2025 17:36:33 +0000 Files and hashes: 1: 32332e3133362e32302e302f32342d3234203d3e20333936303634.roa (hash: l3PqR+UTXc6mZ6DH8HSVMsKTEDZ5iX5wYCsyCFY80r0=) 2: 32332e3133362e32302e302f32342d3234203d3e20323135323438.roa (hash: qWICRkjmLt8+dNxxWBazesXDN3X2Ej4jtCp5CweB95Y=) 3: AS396064.asa (hash: BgBdhE51d0PcdCCEaNdGHNNOZ+j5ZvOia2rtj0bFIK8=) 4: 323630323a663662613a3a2f34302d3430203d3e20323135323438.roa (hash: WDk8fhCZeFEuKhmy2R/ZRYllooWLJI27mELcMjoeqKI=) 5: 1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl (hash: mlq+SBM8WUj5pHyFwXdXsbvmdKWf7gIpbAR+VPhRl+M=) 6: 323630323a663662613a3a2f34302d3430203d3e20333936303634.roa (hash: EIvC4z2x/QLXwOGrYeC/F9aQ8OZAlzpbcTtxqtqMIxY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/383bd50b-b192-44bd-9349-351225a13a33.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/383bd50b-b192-44bd-9349-351225a13a33.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 17:36:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:a7:bb:81:56:27:8f:e8:00:45:53:0b:1c:a6:85:69:85:14:a7:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd Validity Not Before: Jun 30 15:43:33 2025 GMT Not After : Jul 1 17:36:33 2025 GMT Subject: CN=38C7AF698A662CB780A2FA7EACC8CF129B05AE65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:1d:bc:f6:3c:27:62:96:be:46:f8:17:e4:cc: 4a:e7:94:4f:d8:3d:86:21:49:fb:c8:d9:4b:48:00: 78:17:2f:0f:79:c8:19:73:80:b1:86:09:7b:a5:47: bd:98:4d:9b:c8:45:22:b6:2f:3a:09:87:50:6c:0f: 84:d3:ec:7e:4d:1c:ed:39:58:5c:1f:b1:47:55:ec: ed:1b:92:3c:50:07:32:78:c9:04:06:6d:3d:6d:3b: e9:b7:f4:5a:31:80:96:69:18:b5:8c:0e:aa:02:0c: 79:56:94:02:37:b9:89:2c:d9:df:20:34:f8:54:ea: c9:91:a5:4d:2a:62:99:75:80:a9:ee:3d:60:62:eb: b0:8c:4a:cf:53:61:1d:79:f3:f8:cb:3a:5c:c4:e9: 2b:92:80:e7:1d:61:76:0c:be:d5:87:54:e2:9c:10: 73:87:8b:36:7c:36:55:ed:43:b8:4c:8a:ad:4f:21: 10:06:5b:7d:1c:81:e2:f3:cc:49:31:60:34:55:7c: 9b:c7:55:32:db:4b:fd:05:28:87:15:4f:06:04:62: 21:a5:04:08:ce:b0:01:b2:87:b2:64:8d:c4:c3:29: 2b:6f:b5:49:a1:3e:0c:42:a4:98:5e:ff:5d:13:83: 3e:21:81:83:94:17:c6:8a:a1:bf:a5:c8:84:bd:cc: e7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:C7:AF:69:8A:66:2C:B7:80:A2:FA:7E:AC:C8:CF:12:9B:05:AE:65 X509v3 Authority Key Identifier: keyid:1F:7F:72:49:A6:81:F8:CD:41:27:0B:50:D8:D7:E7:81:58:81:DA:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:ee:a7:ce:d4:df:46:a1:a4:60:aa:37:24:ec:cc:32:bc:dc: 80:b1:8e:85:16:18:d5:c9:1d:fc:0d:88:94:72:10:26:92:77: bf:4f:62:36:13:3d:09:60:60:e7:4d:18:d9:6b:14:6e:2a:f0: 91:b5:20:26:eb:b7:a5:ef:b1:f9:f1:ef:bc:57:b5:7f:bc:48: 96:56:6a:3c:64:bf:35:48:04:d6:37:3c:16:a4:b0:40:99:29: b5:7b:6b:4c:29:f7:cf:1b:94:38:77:c3:78:d5:7e:94:07:bc: 85:a8:a6:af:9f:cc:a2:43:47:34:06:a4:6d:e0:57:9b:19:b9: 18:1f:65:f6:56:5d:0e:98:34:a0:3e:08:8b:23:57:75:38:f2: 8b:d7:8f:f1:71:54:8c:86:35:e6:08:51:83:43:0e:c6:06:f4: 4e:56:e2:86:6f:62:3e:0c:e7:06:d7:fb:60:d7:c9:53:af:50: 34:fa:f1:b4:73:42:4c:1d:b1:77:68:0d:21:6f:f7:f3:ab:93: e0:1c:a3:bc:55:f7:2b:b1:e4:b5:07:d8:55:4a:71:97:51:c7: 4d:d3:5d:47:16:e0:31:ed:de:c4:9a:46:42:13:fb:5a:33:da: 25:01:59:a4:ba:e2:94:d9:91:94:cd:e4:c3:86:c6:8c:de:2d: b8:2e:83:72 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUPKe7gVYnj+gARVMLHKaFaYUUp0UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMjNmYjNkMjllN2Y2N2M2MzRkZjNiN2Y0YTk2MDA4MmU0 NDI5ZjE2NmI2NTMwMWE5ZGQwHhcNMjUwNjMwMTU0MzMzWhcNMjUwNzAxMTczNjMz WjAzMTEwLwYDVQQDEygzOEM3QUY2OThBNjYyQ0I3ODBBMkZBN0VBQ0M4Q0YxMjlC MDVBRTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1x289jwnYpa+ RvgX5MxK55RP2D2GIUn7yNlLSAB4Fy8PecgZc4Cxhgl7pUe9mE2byEUiti86CYdQ bA+E0+x+TRztOVhcH7FHVeztG5I8UAcyeMkEBm09bTvpt/RaMYCWaRi1jA6qAgx5 VpQCN7mJLNnfIDT4VOrJkaVNKmKZdYCp7j1gYuuwjErPU2EdefP4yzpcxOkrkoDn HWF2DL7Vh1TinBBzh4s2fDZV7UO4TIqtTyEQBlt9HIHi88xJMWA0VXybx1Uy20v9 BSiHFU8GBGIhpQQIzrABsoeyZI3Ewykrb7VJoT4MQqSYXv9dE4M+IYGDlBfGiqG/ pciEvcznSwIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFDjHr2mKZiy3gKL6fqzIzxKb Ba5lMB8GA1UdIwQYMBaAFB9/ckmmgfjNQScLUNjX54FYgdo2MA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2NkMTlkYjIwLTQ2NTMtNDhkNC04ZmM0 LTU4MGQxMzY5YjdjNC8xLzFGN0Y3MjQ5QTY4MUY4Q0Q0MTI3MEI1MEQ4RDdFNzgx NTg4MURBMzYuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMt NDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zODNiZDUwYi1iMTkyLTQ0YmQtOTM0OS0z NTEyMjVhMTNhMzMvMjNmYjNkMjllN2Y2N2M2MzRkZjNiN2Y0YTk2MDA4MmU0NDI5 ZjE2NmI2NTMwMWE5ZGQuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv Y2QxOWRiMjAtNDY1My00OGQ0LThmYzQtNTgwZDEzNjliN2M0LzEvMUY3RjcyNDlB NjgxRjhDRDQxMjcwQjUwRDhEN0U3ODE1ODgxREEzNi5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJXup87U 30ahpGCqNyTszDK83ICxjoUWGNXJHfwNiJRyECaSd79PYjYTPQlgYOdNGNlrFG4q 8JG1ICbrt6Xvsfnx77xXtX+8SJZWajxkvzVIBNY3PBaksECZKbV7a0wp988blDh3 w3jVfpQHvIWopq+fzKJDRzQGpG3gV5sZuRgfZfZWXQ6YNKA+CIsjV3U48ovXj/Fx VIyGNeYIUYNDDsYG9E5W4oZvYj4M5wbX+2DXyVOvUDT68bRzQkwdsXdoDSFv9/Or k+Aco7xV9yux5LUH2FVKcZdRx03TXUcW4DHt3sSaRkIT+1oz2iUBWaS64pTZkZTN 5MOGxozeLbgug3I= -----END CERTIFICATE-----Generated at Tue Jul 1 00:44:35 2025 by rpki-client