$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.mft File: FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.mft (raw, json) Hash identifier: lu3eEKFKLnRmS2gTi+RuQevkfUjvjGzlBbXCyIcflT8= Subject key identifier: B8:63:41:91:FC:E0:89:52:47:BE:D5:68:D0:9E:AD:04:AD:44:A2:8E Authority key identifier: FA:A6:C4:25:29:3C:8A:7F:9C:2F:C9:84:EF:0E:26:A2:76:3D:97:7D Certificate issuer: /CN=03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80 Certificate serial: 4B4F21936D49B828287B91E757A372D6FEA3536C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.mft Manifest number: BA Signing time: Thu 08 May 2025 22:47:46 +0000 Manifest this update: Thu 08 May 2025 22:42:46 +0000 Manifest next update: Sat 10 May 2025 01:37:46 +0000 Files and hashes: 1: 32332e3133322e39322e302f32342d3234203d3e20333937373330.roa (hash: BrbquvaT7gSaBvF2dUV9AqKeXE06mRUUDpvsSUbe408=) 2: 323630323a663736313a3a2f34302d3430203d3e20333937373330.roa (hash: nA09F4i7ezyxrO7OoVlToYHyYyAdhivh99ADt+i0fxw=) 3: FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.crl (hash: 46JdARWeoExQ8jv1xleIPzgvA8pN6una8q0hxwt5Ua4=) 4: 32332e3133322e39322e302f32342d3234203d3e20323134373638.roa (hash: NdlK1zYqdrKSuU5F6Cse146TEQ/3Wx9fQDxzRBJIZZw=) 5: 323630323a663736313a3a2f34302d3438203d3e20333937373330.roa (hash: UabIBDSP/jRxPjVYe42Rz6FfziQlrmtKMNVTrVjL1tk=) 6: 323630323a663736313a32303a3a2f34342d3434203d3e20323134373638.roa (hash: L5IT8JeK38uNLCiVqoJ/A1O+xsuyrDeUorstCcbnlko=) 7: 323630323a663736313a33303a3a2f34342d3434203d3e20323134373638.roa (hash: 0zlxQTxh7vvfaeWuK2Hw3nih0UKatPrmAKiXcV1p/ig=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.crl rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/da272869-5127-4af6-8053-b8617ccb9de3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/da272869-5127-4af6-8053-b8617ccb9de3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 01:37:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:4f:21:93:6d:49:b8:28:28:7b:91:e7:57:a3:72:d6:fe:a3:53:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80 Validity Not Before: May 8 22:42:46 2025 GMT Not After : May 10 01:37:46 2025 GMT Subject: CN=B8634191FCE0895247BED568D09EAD04AD44A28E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:47:fd:ff:36:a0:35:f8:11:07:b4:5f:22:b6: b0:b5:7f:82:27:a5:a5:21:53:99:a8:95:11:60:05: 59:70:ac:62:c7:2d:87:c0:7c:99:76:4a:48:7e:9d: 32:9c:c0:99:dd:7b:5f:1c:ac:d9:24:6c:ec:a0:e1: 56:88:cf:d7:6a:9f:0c:ed:cf:2b:9b:58:f7:2b:e5: 82:45:24:9c:b9:9e:e5:5f:d2:bd:bb:b5:c0:b5:5c: 68:7f:65:c1:ab:1d:6e:b2:c4:65:93:12:b8:b2:87: 89:06:db:37:94:97:37:b0:ce:17:85:a6:bc:0c:20: 7d:d5:c4:99:6b:db:2e:29:55:74:b1:6e:e1:d8:f3: e4:5f:69:0c:b6:fb:22:a8:d1:dd:db:5d:a9:e5:15: 29:cb:65:92:75:bc:b3:3c:d3:b2:51:9f:d0:05:4b: b9:a0:b4:78:84:81:df:ff:f3:98:2d:88:34:29:ed: da:9d:79:98:b3:b2:c2:66:5d:cb:92:dd:c7:76:8e: 8e:0e:44:8d:c0:f4:67:f6:a7:06:f0:bb:bb:73:60: 91:28:c7:dd:27:a5:86:ad:a7:4a:29:40:05:bb:3d: 87:5c:7c:72:45:53:d5:ee:aa:6c:4e:ac:ee:26:4f: 8b:c9:73:43:57:ff:98:39:ba:41:68:00:b9:53:e6: d5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:63:41:91:FC:E0:89:52:47:BE:D5:68:D0:9E:AD:04:AD:44:A2:8E X509v3 Authority Key Identifier: keyid:FA:A6:C4:25:29:3C:8A:7F:9C:2F:C9:84:EF:0E:26:A2:76:3D:97:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:b8:39:23:95:9d:d6:32:b2:f6:61:cc:27:1e:df:9e:cc:0e: 58:c3:a6:8f:77:be:5f:47:27:b0:4d:c6:c5:06:71:bb:93:54: fe:4f:5d:1b:8c:aa:08:4b:62:0c:1a:92:11:3a:ed:a2:4f:5a: 3a:40:d6:00:88:6c:59:89:0d:13:a9:ae:90:2d:ca:09:e5:92: 95:fb:7b:77:3e:f9:6c:b7:a6:22:a8:6e:c9:2a:be:16:f1:85: 6d:16:5d:fe:59:ac:f2:26:92:91:b4:c9:ff:20:d2:42:2f:90: eb:4d:ae:31:2b:a1:a1:bb:cb:9b:37:f4:bf:1e:ab:2c:40:59: 93:ce:3e:55:66:4b:7c:02:40:4d:7d:bd:4b:49:73:43:ee:cb: be:ce:65:33:6d:af:f1:4f:2b:92:09:e5:f1:ae:c6:25:bf:fd: 4e:2c:77:80:7d:f8:76:86:a5:30:97:f3:10:ca:ca:32:d8:89: 35:93:86:c6:3b:3f:96:08:5c:10:ba:53:31:fd:0c:66:d2:38: 79:9f:90:1e:d5:73:a5:2e:13:8d:8b:14:53:61:cc:81:0f:9e: 95:6f:fd:ec:a6:2f:dd:d7:ad:fa:75:a6:60:60:7b:28:74:05: 17:d6:f5:5e:ee:39:7d:c0:5b:b0:d6:e8:10:75:c3:35:b9:e4: 59:e5:7a:0a -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUS08hk21JuCgoe5HnV6Ny1v6jU2wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMDMwNjhjYmU4ODk0ZDVkNzM1ZjkxZWRiOWU0MzM3NWNj NTdjMzZkMTMyNDI4NWFhODAwHhcNMjUwNTA4MjI0MjQ2WhcNMjUwNTEwMDEzNzQ2 WjAzMTEwLwYDVQQDEyhCODYzNDE5MUZDRTA4OTUyNDdCRUQ1NjhEMDlFQUQwNEFE NDRBMjhFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUf9/zagNfgR B7RfIrawtX+CJ6WlIVOZqJURYAVZcKxixy2HwHyZdkpIfp0ynMCZ3XtfHKzZJGzs oOFWiM/Xap8M7c8rm1j3K+WCRSScuZ7lX9K9u7XAtVxof2XBqx1ussRlkxK4soeJ Bts3lJc3sM4Xhaa8DCB91cSZa9suKVV0sW7h2PPkX2kMtvsiqNHd212p5RUpy2WS dbyzPNOyUZ/QBUu5oLR4hIHf//OYLYg0Ke3anXmYs7LCZl3Lkt3Hdo6ODkSNwPRn 9qcG8Lu7c2CRKMfdJ6WGradKKUAFuz2HXHxyRVPV7qpsTqzuJk+LyXNDV/+YObpB aAC5U+bVPwIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFLhjQZH84IlSR77VaNCerQSt RKKOMB8GA1UdIwQYMBaAFPqmxCUpPIp/nC/JhO8OJqJ2PZd9MA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIzY2RmOWNhLWRkNjQtNGYzMS1hYmYz LTBmMzJiOGU3ZmU3OS8zL0ZBQTZDNDI1MjkzQzhBN0Y5QzJGQzk4NEVGMEUyNkEy NzYzRDk3N0QuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmIt NGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kYTI3Mjg2OS01MTI3LTRhZjYtODA1My1i ODYxN2NjYjlkZTMvMDMwNjhjYmU4ODk0ZDVkNzM1ZjkxZWRiOWU0MzM3NWNjNTdj MzZkMTMyNDI4NWFhODAuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv MjNjZGY5Y2EtZGQ2NC00ZjMxLWFiZjMtMGYzMmI4ZTdmZTc5LzMvRkFBNkM0MjUy OTNDOEE3RjlDMkZDOTg0RUYwRTI2QTI3NjNEOTc3RC5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIm4OSOV ndYysvZhzCce357MDljDpo93vl9HJ7BNxsUGcbuTVP5PXRuMqghLYgwakhE67aJP WjpA1gCIbFmJDROprpAtygnlkpX7e3c++Wy3piKobskqvhbxhW0WXf5ZrPImkpG0 yf8g0kIvkOtNrjEroaG7y5s39L8eqyxAWZPOPlVmS3wCQE19vUtJc0Puy77OZTNt r/FPK5IJ5fGuxiW//U4sd4B9+HaGpTCX8xDKyjLYiTWThsY7P5YIXBC6UzH9DGbS OHmfkB7Vc6UuE42LFFNhzIEPnpVv/eymL93Xrfp1pmBgeyh0BRfW9V7uOX3AW7DW 6BB1wzW55Fnlego= -----END CERTIFICATE-----Generated at Fri May 9 11:21:35 2025 by rpki-client