$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft File: 2472949B3C234930DBE99B1B5CD5196AB16D151B.mft (raw, json) Hash identifier: W35n42k69Z+m5ISG3MMwdisgGGMy9WAGb/Chhi8ljgk= Subject key identifier: 12:C5:B4:CE:B6:51:EE:B8:74:A7:3A:3A:0A:11:A5:61:E3:BE:4A:B3 Authority key identifier: 24:72:94:9B:3C:23:49:30:DB:E9:9B:1B:5C:D5:19:6A:B1:6D:15:1B Certificate issuer: /CN=89d4f40fed1166159109937674aef0279ad039550feccf8d61 Certificate serial: 542450BD368EBBEBCE83FD6B3147FCCD3BFE2991 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft Manifest number: 030D Signing time: Thu 23 Oct 2025 08:11:46 +0000 Manifest this update: Thu 23 Oct 2025 08:06:46 +0000 Manifest next update: Fri 24 Oct 2025 09:53:46 +0000 Files and hashes: 1: 323630323a663961323a31303a3a2f34382d3438203d3e203436373636.roa (hash: 4IHJsjfC0Zoq18aE2FFzAMYZQpT6YF+Y54OUnxbTiPM=) 2: 2472949B3C234930DBE99B1B5CD5196AB16D151B.crl (hash: FlcICD382s1yGPG5u9gM0xYokda0wb2k7/E1vtRPET4=) 3: 32332e3137302e37322e302f32342d3234203d3e203436373636.roa (hash: FghA8Zz7QbzObKv2ia/HqFgnN9W82bmOSCIz6G2zFuE=) 4: 323630323a663961323a3a2f34382d3438203d3e203436373636.roa (hash: dNvxw0+R2mi2yZ7yZ+PkpHw5t4IMqFyhS0zsCoWaY88=) 5: 323630323a663961323a32303a3a2f34382d3438203d3e203436373636.roa (hash: LOHxn0RgwORnxWPoX7PgNpofW2yqHK4ri4vHvhFnLZQ=) 6: 3139392e3234312e36302e302f32342d3234203d3e203436373636.roa (hash: 4ZYkW/+NAwrD1ELCwQxEXepcoE4Wv3XF1vCdQrX3iE0=) 7: 323630323a663961323a35353a3a2f34382d3438203d3e20313939353138.roa (hash: Lmh4khK9jqfGM7AgqtrinnAM2ubStxsQ/YZSUwbqCvU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Oct 2025 09:53:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:24:50:bd:36:8e:bb:eb:ce:83:fd:6b:31:47:fc:cd:3b:fe:29:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89d4f40fed1166159109937674aef0279ad039550feccf8d61 Validity Not Before: Oct 23 08:06:46 2025 GMT Not After : Oct 24 09:53:46 2025 GMT Subject: CN=12C5B4CEB651EEB874A73A3A0A11A561E3BE4AB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:aa:09:89:0d:0e:4e:66:cc:cf:70:c5:97:d8: f4:60:d9:a3:04:cb:2b:68:54:16:dd:c3:c2:91:79: 54:bf:49:b2:12:11:aa:e5:6f:6c:fc:89:cf:37:3d: 45:45:54:c6:a9:3a:59:69:96:26:69:e3:9e:03:a2: 5f:e5:ff:e0:94:e7:23:78:45:f3:60:d2:e0:dd:f0: 72:71:1b:bd:13:8a:02:a0:2e:a7:0d:d0:81:82:f3: d7:f7:23:48:3b:2a:39:01:54:7d:ed:4c:36:69:da: 32:d5:16:1e:8c:e9:dd:64:7b:5c:3d:a9:39:ff:cb: 9d:d2:3b:f6:79:68:04:90:f1:a8:8f:3e:ba:6a:a2: 7f:42:57:8a:77:a2:1a:7e:b8:5b:28:7b:07:44:fe: 63:9d:51:0d:72:64:70:34:60:8d:07:ab:8c:64:7c: 8c:2d:32:7f:db:ff:82:b0:d6:cd:a2:28:5b:4c:50: 9e:80:db:b7:71:7b:5a:25:7e:df:a4:8b:f3:0b:ab: fe:c1:35:3d:2f:81:bb:9b:9b:17:6d:b5:0f:df:f6: 7e:3d:ba:bb:33:5c:97:76:17:34:c2:07:ea:bf:6d: bb:36:7c:d4:e1:bf:54:21:b8:a5:72:30:87:79:1f: a1:48:3d:d4:d8:e9:f7:fd:3b:a6:b5:b3:8f:1a:f9: 89:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:C5:B4:CE:B6:51:EE:B8:74:A7:3A:3A:0A:11:A5:61:E3:BE:4A:B3 X509v3 Authority Key Identifier: keyid:24:72:94:9B:3C:23:49:30:DB:E9:9B:1B:5C:D5:19:6A:B1:6D:15:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:8f:68:b3:8a:67:54:8d:20:02:7d:e0:12:91:80:ce:aa:59: 79:7e:ae:01:79:74:80:20:61:a7:ad:58:c6:86:d8:94:69:b2: 66:af:1f:a4:19:29:7e:89:d6:ff:da:30:69:2d:06:d8:2f:a6: 4a:46:aa:8d:b6:91:d6:29:25:97:2f:c1:82:49:44:db:d8:93: 1f:ad:d7:0d:20:56:76:b6:05:39:07:45:a3:d4:a9:75:56:45: 93:9e:57:30:12:bf:54:9f:07:f1:8d:76:8f:8d:d1:7b:18:bb: 1f:12:7b:68:42:6a:fd:54:9b:04:86:62:61:2e:27:c1:b4:88: bc:db:60:83:13:9b:54:2f:83:22:e9:6e:68:9e:83:8e:02:d5: 5b:83:da:f9:fd:b5:a9:9a:b7:bf:7d:c7:c2:ce:b5:58:6d:e3: 21:1a:ac:62:c2:96:65:6e:11:ef:e4:69:05:57:d2:50:2d:cf: 70:80:18:c0:86:7d:5a:60:b9:58:c7:4f:37:52:45:ed:ce:e6: 39:1b:3b:cf:22:0b:32:28:2e:b7:59:c5:73:cc:41:f9:2f:52: d8:70:81:35:0d:21:14:53:2b:5a:df:57:33:da:3b:e2:f3:dc: fb:73:18:32:a8:10:4d:81:7e:9d:35:c0:50:87:d5:c5:8c:c2: 48:6e:98:85 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUVCRQvTaOu+vOg/1rMUf8zTv+KZEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODlkNGY0MGZlZDExNjYxNTkxMDk5Mzc2NzRhZWYwMjc5 YWQwMzk1NTBmZWNjZjhkNjEwHhcNMjUxMDIzMDgwNjQ2WhcNMjUxMDI0MDk1MzQ2 WjAzMTEwLwYDVQQDEygxMkM1QjRDRUI2NTFFRUI4NzRBNzNBM0EwQTExQTU2MUUz QkU0QUIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqoJiQ0OTmbM z3DFl9j0YNmjBMsraFQW3cPCkXlUv0myEhGq5W9s/InPNz1FRVTGqTpZaZYmaeOe A6Jf5f/glOcjeEXzYNLg3fBycRu9E4oCoC6nDdCBgvPX9yNIOyo5AVR97Uw2adoy 1RYejOndZHtcPak5/8ud0jv2eWgEkPGojz66aqJ/QleKd6IafrhbKHsHRP5jnVEN cmRwNGCNB6uMZHyMLTJ/2/+CsNbNoihbTFCegNu3cXtaJX7fpIvzC6v+wTU9L4G7 m5sXbbUP3/Z+Pbq7M1yXdhc0wgfqv227NnzU4b9UIbilcjCHeR+hSD3U2On3/Tum tbOPGvmJvQIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFBLFtM62Ue64dKc6OgoRpWHj vkqzMB8GA1UdIwQYMBaAFCRylJs8I0kw2+mbG1zVGWqxbRUbMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3 LWI0MjgxOGNmNTBlOC82LzI0NzI5NDlCM0MyMzQ5MzBEQkU5OUIxQjVDRDUxOTZB QjE2RDE1MUIuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It NGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZDk4NzlkYS0xNDVmLTRmMjEtYTdjMy1k YTZiNTlhMDE2MjUvODlkNGY0MGZlZDExNjYxNTkxMDk5Mzc2NzRhZWYwMjc5YWQw Mzk1NTBmZWNjZjhkNjEuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv ZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1MGU4LzYvMjQ3Mjk0OUIz QzIzNDkzMERCRTk5QjFCNUNENTE5NkFCMTZEMTUxQi5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAGPaLOK Z1SNIAJ94BKRgM6qWXl+rgF5dIAgYaetWMaG2JRpsmavH6QZKX6J1v/aMGktBtgv pkpGqo22kdYpJZcvwYJJRNvYkx+t1w0gVna2BTkHRaPUqXVWRZOeVzASv1SfB/GN do+N0XsYux8Se2hCav1UmwSGYmEuJ8G0iLzbYIMTm1QvgyLpbmieg44C1VuD2vn9 tamat799x8LOtVht4yEarGLClmVuEe/kaQVX0lAtz3CAGMCGfVpguVjHTzdSRe3O 5jkbO88iCzIoLrdZxXPMQfkvUthwgTUNIRRTK1rfVzPaO+Lz3PtzGDKoEE2Bfp01 wFCH1cWMwkhumIU= -----END CERTIFICATE-----Generated at Thu Oct 23 12:58:38 2025 by rpki-client