$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft File: 2472949B3C234930DBE99B1B5CD5196AB16D151B.mft (raw, json) Hash identifier: jn8FAN3axGCS54e/yu1hKUjYOEd4L7Kbh2xwcV/nyMM= Subject key identifier: A2:8C:21:84:65:74:A3:D8:AB:9F:73:0C:F1:B4:79:58:FD:38:A3:A9 Authority key identifier: 24:72:94:9B:3C:23:49:30:DB:E9:9B:1B:5C:D5:19:6A:B1:6D:15:1B Certificate issuer: /CN=89d4f40fed1166159109937674aef0279ad039550feccf8d61 Certificate serial: 1CCCB9FE8488D973107727117CE1767903DB3FC4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft Manifest number: 02CF Signing time: Sun 07 Sep 2025 23:41:57 +0000 Manifest this update: Sun 07 Sep 2025 23:36:57 +0000 Manifest next update: Tue 09 Sep 2025 03:29:57 +0000 Files and hashes: 1: 323630323a663961323a32303a3a2f34382d3438203d3e203436373636.roa (hash: LOHxn0RgwORnxWPoX7PgNpofW2yqHK4ri4vHvhFnLZQ=) 2: 2472949B3C234930DBE99B1B5CD5196AB16D151B.crl (hash: 6CmyvblnpKUmP6nGhGeEyZf0vDBMm3huza64fwKbg8U=) 3: 323630323a663961323a3a2f34382d3438203d3e203436373636.roa (hash: dNvxw0+R2mi2yZ7yZ+PkpHw5t4IMqFyhS0zsCoWaY88=) 4: 32332e3137302e37322e302f32342d3234203d3e203436373636.roa (hash: FghA8Zz7QbzObKv2ia/HqFgnN9W82bmOSCIz6G2zFuE=) 5: 323630323a663961323a31303a3a2f34382d3438203d3e203436373636.roa (hash: 4IHJsjfC0Zoq18aE2FFzAMYZQpT6YF+Y54OUnxbTiPM=) 6: 323630323a663961323a35353a3a2f34382d3438203d3e20313939353138.roa (hash: Lmh4khK9jqfGM7AgqtrinnAM2ubStxsQ/YZSUwbqCvU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 03:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:cc:b9:fe:84:88:d9:73:10:77:27:11:7c:e1:76:79:03:db:3f:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89d4f40fed1166159109937674aef0279ad039550feccf8d61 Validity Not Before: Sep 7 23:36:57 2025 GMT Not After : Sep 9 03:29:57 2025 GMT Subject: CN=A28C21846574A3D8AB9F730CF1B47958FD38A3A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:1f:c2:b2:70:dc:24:d4:27:89:e4:3a:0f:f4: 49:a9:7b:6e:4d:ac:05:90:ff:d3:0d:70:5d:1b:7a: 99:17:17:6b:01:c4:8a:f2:7d:9f:91:c0:85:bc:cb: 34:8b:ca:85:ec:35:09:5c:4a:71:63:6a:dc:bb:e7: ef:3e:1c:db:b4:82:ec:76:a8:80:84:43:61:43:20: 12:bd:18:5c:76:b7:37:e4:7f:23:b6:08:5e:8d:1e: 18:8b:85:3e:11:c5:d6:b4:14:48:ab:0b:3e:c5:e2: 18:25:80:6b:a5:96:28:a5:d3:67:44:4d:20:3e:d1: 15:73:27:0a:aa:18:1c:30:b1:73:de:c0:95:7d:c9: 88:71:37:8e:9a:b9:45:16:e6:81:04:4a:db:b5:bd: 4a:d5:62:cf:70:58:ad:db:03:ba:fd:13:51:1b:5f: 2a:ee:f1:88:d7:d0:6e:39:fb:26:4c:0c:76:12:61: 91:dc:32:96:27:99:14:d2:04:e1:4b:a2:72:50:ff: 5f:4d:24:17:23:31:5d:d4:e8:7e:16:8f:52:84:a4: 83:56:a7:28:85:40:73:23:1d:37:60:0c:5e:1f:46: 6b:4f:ca:79:f3:31:35:68:55:e6:f5:3a:ac:cc:88: a2:15:6c:9f:fd:43:36:db:9b:6b:60:7f:f3:97:17: cc:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:8C:21:84:65:74:A3:D8:AB:9F:73:0C:F1:B4:79:58:FD:38:A3:A9 X509v3 Authority Key Identifier: keyid:24:72:94:9B:3C:23:49:30:DB:E9:9B:1B:5C:D5:19:6A:B1:6D:15:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:e1:e6:82:a1:ad:ed:57:b8:d1:77:50:21:89:7a:a0:61:d7: 64:b5:79:d5:8f:de:f6:08:08:d7:b4:c4:2d:48:4f:d4:f1:05: 27:f5:30:7b:73:80:49:5c:f3:f2:49:29:61:b7:d8:48:60:9a: 53:93:9b:65:fd:20:84:ea:f0:1d:8a:ce:b6:37:8b:e2:ae:69: eb:b2:2b:a7:44:13:f6:8d:67:4e:84:86:c1:f8:1f:f3:5d:ef: 73:d6:08:99:0e:0d:98:61:99:23:c0:55:ee:52:c1:41:b5:d1: 83:69:06:b2:f1:ad:12:80:2b:ff:cc:ed:8f:f5:50:85:bd:7a: f7:f2:1a:5f:4e:ab:eb:38:80:58:8b:16:8e:50:36:28:cb:69: 4c:66:2b:c8:85:2d:1d:80:50:25:a2:c2:c5:9d:13:bb:e9:ea: 9c:2e:38:2c:35:fa:49:5f:7f:b7:f2:f1:95:ba:68:ed:dd:3e: d3:82:f6:1c:dd:3f:46:05:db:08:ca:ca:c3:1a:61:0b:21:9c: a2:55:60:0a:84:86:1b:40:63:70:41:1a:c9:e5:65:5a:17:f1: c4:ff:15:0b:71:9a:ad:c0:c5:1e:04:79:87:bc:a8:83:8a:29: bc:d5:5f:da:5d:6d:d0:83:fb:a2:d7:2a:59:0f:3d:d9:63:0d: 5a:e5:e9:c5 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUHMy5/oSI2XMQdycRfOF2eQPbP8QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODlkNGY0MGZlZDExNjYxNTkxMDk5Mzc2NzRhZWYwMjc5 YWQwMzk1NTBmZWNjZjhkNjEwHhcNMjUwOTA3MjMzNjU3WhcNMjUwOTA5MDMyOTU3 WjAzMTEwLwYDVQQDEyhBMjhDMjE4NDY1NzRBM0Q4QUI5RjczMENGMUI0Nzk1OEZE MzhBM0E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9h/CsnDcJNQn ieQ6D/RJqXtuTawFkP/TDXBdG3qZFxdrAcSK8n2fkcCFvMs0i8qF7DUJXEpxY2rc u+fvPhzbtILsdqiAhENhQyASvRhcdrc35H8jtghejR4Yi4U+EcXWtBRIqws+xeIY JYBrpZYopdNnRE0gPtEVcycKqhgcMLFz3sCVfcmIcTeOmrlFFuaBBErbtb1K1WLP cFit2wO6/RNRG18q7vGI19BuOfsmTAx2EmGR3DKWJ5kU0gThS6JyUP9fTSQXIzFd 1Oh+Fo9ShKSDVqcohUBzIx03YAxeH0ZrT8p58zE1aFXm9TqszIiiFWyf/UM225tr YH/zlxfM2QIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFKKMIYRldKPYq59zDPG0eVj9 OKOpMB8GA1UdIwQYMBaAFCRylJs8I0kw2+mbG1zVGWqxbRUbMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3 LWI0MjgxOGNmNTBlOC82LzI0NzI5NDlCM0MyMzQ5MzBEQkU5OUIxQjVDRDUxOTZB QjE2RDE1MUIuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It NGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZDk4NzlkYS0xNDVmLTRmMjEtYTdjMy1k YTZiNTlhMDE2MjUvODlkNGY0MGZlZDExNjYxNTkxMDk5Mzc2NzRhZWYwMjc5YWQw Mzk1NTBmZWNjZjhkNjEuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv ZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1MGU4LzYvMjQ3Mjk0OUIz QzIzNDkzMERCRTk5QjFCNUNENTE5NkFCMTZEMTUxQi5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAL/h5oKh re1XuNF3UCGJeqBh12S1edWP3vYICNe0xC1IT9TxBSf1MHtzgElc8/JJKWG32Ehg mlOTm2X9IITq8B2KzrY3i+KuaeuyK6dEE/aNZ06EhsH4H/Nd73PWCJkODZhhmSPA Ve5SwUG10YNpBrLxrRKAK//M7Y/1UIW9evfyGl9Oq+s4gFiLFo5QNijLaUxmK8iF LR2AUCWiwsWdE7vp6pwuOCw1+klff7fy8ZW6aO3dPtOC9hzdP0YF2wjKysMaYQsh nKJVYAqEhhtAY3BBGsnlZVoX8cT/FQtxmq3AxR4EeYe8qIOKKbzVX9pdbdCD+6LX KlkPPdljDVrl6cU= -----END CERTIFICATE-----Generated at Mon Sep 8 10:10:17 2025 by rpki-client