$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/B73B05971A1A76BDF1BC61A5178B00B4FF71BABB.mft File: B73B05971A1A76BDF1BC61A5178B00B4FF71BABB.mft (raw, json) Hash identifier: ZQ5FNcAFw7PuCubYk0O8Cy28RUAbcPdT8PmgYCd8rHY= Subject key identifier: 4A:9F:30:B8:01:F1:E6:F2:B8:43:97:64:8D:D3:1F:DF:C3:1E:B1:E6 Authority key identifier: B7:3B:05:97:1A:1A:76:BD:F1:BC:61:A5:17:8B:00:B4:FF:71:BA:BB Certificate issuer: /CN=d90d8aba2a52e658722522ec42c626f029750e015dbdba418f Certificate serial: 684C99C2C5FC84E86F803F4CC285F5932E49D928 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a52e658722522ec42c626f029750e015dbdba418f.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/B73B05971A1A76BDF1BC61A5178B00B4FF71BABB.mft Manifest number: 4B Signing time: Sat 10 May 2025 04:05:02 +0000 Manifest this update: Sat 10 May 2025 04:00:02 +0000 Manifest next update: Sun 11 May 2025 07:54:02 +0000 Files and hashes: 1: 323630323a663966613a3a2f33362d3438203d3e203132383339.roa (hash: KB5IW4CbSuoOkgtd2rJCaS7SQDgxB1P+CSq45yfOs7s=) 2: 32332e3136342e3135322e302f32342d3234203d3e203236353631.roa (hash: Ufvh495kVHTsvuscjFimK/5B3fifdcUwR5A1Uohco9k=) 3: 323630323a663966613a3a2f33362d3438203d3e203630383538.roa (hash: 5c3OaxW1qKZrY2FscDnJyFNXHvDxQCbXNLWzxHU/wc8=) 4: B73B05971A1A76BDF1BC61A5178B00B4FF71BABB.crl (hash: I9GWIsUnd44quzZT7w3HzVhtekTHC+4NomjrcEMi1zM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/B73B05971A1A76BDF1BC61A5178B00B4FF71BABB.crl rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/B73B05971A1A76BDF1BC61A5178B00B4FF71BABB.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a52e658722522ec42c626f029750e015dbdba418f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 07:54:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:4c:99:c2:c5:fc:84:e8:6f:80:3f:4c:c2:85:f5:93:2e:49:d9:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d90d8aba2a52e658722522ec42c626f029750e015dbdba418f Validity Not Before: May 10 04:00:02 2025 GMT Not After : May 11 07:54:02 2025 GMT Subject: CN=4A9F30B801F1E6F2B84397648DD31FDFC31EB1E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:03:e4:10:a0:09:32:d6:63:e1:2d:4e:62:5d: d4:c0:67:72:6e:95:49:44:7c:d1:1b:a0:31:d4:e9: bf:45:f0:de:b0:67:90:75:85:50:7e:68:4d:32:31: f0:f1:eb:78:fc:02:b9:66:b3:2f:ea:ed:02:ae:c8: f8:4d:d2:87:c0:99:0d:69:12:c7:ae:c3:b3:6e:62: 95:2e:56:ab:c8:85:cb:4c:32:07:4b:dd:ef:14:e3: ce:f5:e1:60:63:89:91:11:8a:4e:f1:d2:1c:7e:a3: bd:d9:6d:25:f1:2a:ca:32:d3:e6:76:32:27:29:2e: 01:00:de:95:f5:ab:f0:39:0e:43:03:1a:fc:48:7b: 4a:32:a7:5b:51:15:5b:b8:04:35:41:e4:f6:61:1a: 54:94:f2:d2:07:f6:b5:bf:17:51:f3:f8:79:70:78: 8e:2c:30:e4:a6:f3:a9:47:f4:46:87:45:ce:dd:ea: 87:d2:9b:af:16:b2:7c:94:eb:ce:8f:d5:21:45:57: a5:55:5f:2e:ad:91:fa:89:a5:6b:96:6d:19:a4:26: 13:e9:12:83:8b:d5:dc:24:cd:d0:c9:b3:52:5a:06: 15:96:89:9f:71:17:5a:76:71:e6:a6:a9:ef:99:98: 2f:86:93:8f:55:ea:5f:f8:a3:87:0b:f8:de:f7:85: b8:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:9F:30:B8:01:F1:E6:F2:B8:43:97:64:8D:D3:1F:DF:C3:1E:B1:E6 X509v3 Authority Key Identifier: keyid:B7:3B:05:97:1A:1A:76:BD:F1:BC:61:A5:17:8B:00:B4:FF:71:BA:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/B73B05971A1A76BDF1BC61A5178B00B4FF71BABB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a52e658722522ec42c626f029750e015dbdba418f.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/B73B05971A1A76BDF1BC61A5178B00B4FF71BABB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:67:e7:33:fd:7a:c3:12:6a:96:21:9d:06:70:18:0c:db:79: 6f:ce:14:e3:e1:13:0e:89:a1:45:da:0c:04:04:a7:a2:6b:f3: 4d:0f:26:34:dc:52:9b:48:d9:b1:82:74:28:0a:8c:a1:fd:a6: 15:15:d7:e8:db:be:4e:c9:4f:7b:67:d8:8e:ae:99:eb:87:11: 8f:3a:2d:40:e1:1e:85:78:f7:13:59:20:e3:77:2d:31:c2:c3: 11:9b:12:25:f2:46:7d:2e:69:e3:7c:83:41:5d:9e:3c:b4:34: cf:9c:ae:c2:83:32:aa:35:67:f4:43:85:66:05:5c:33:2f:47: 57:f6:81:23:8b:25:c0:18:31:5b:2c:b2:18:df:d1:29:61:f0: 66:36:ce:7f:f0:8e:84:cd:07:b3:2c:42:3d:72:97:94:65:0e: a4:15:e6:54:4e:23:8b:75:16:ab:31:15:fa:df:d8:44:2d:47: ef:e7:2f:55:3a:3d:b0:4b:0c:3d:43:47:08:7f:e2:8c:d1:3e: 2e:ae:23:d3:6e:32:d4:78:38:02:63:ab:e9:6d:b1:32:11:84: 07:24:0b:83:a8:63:dc:d4:08:6e:11:4f:61:f7:fc:be:c2:cc: 78:41:f3:47:de:3e:28:ed:b6:ef:e8:4f:68:4e:82:a4:0a:7f: 4b:a2:e6:71 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUaEyZwsX8hOhvgD9MwoX1ky5J2SgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDkwZDhhYmEyYTUyZTY1ODcyMjUyMmVjNDJjNjI2ZjAy OTc1MGUwMTVkYmRiYTQxOGYwHhcNMjUwNTEwMDQwMDAyWhcNMjUwNTExMDc1NDAy WjAzMTEwLwYDVQQDEyg0QTlGMzBCODAxRjFFNkYyQjg0Mzk3NjQ4REQzMUZERkMz MUVCMUU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwPkEKAJMtZj 4S1OYl3UwGdybpVJRHzRG6Ax1Om/RfDesGeQdYVQfmhNMjHw8et4/AK5ZrMv6u0C rsj4TdKHwJkNaRLHrsOzbmKVLlaryIXLTDIHS93vFOPO9eFgY4mREYpO8dIcfqO9 2W0l8SrKMtPmdjInKS4BAN6V9avwOQ5DAxr8SHtKMqdbURVbuAQ1QeT2YRpUlPLS B/a1vxdR8/h5cHiOLDDkpvOpR/RGh0XO3eqH0puvFrJ8lOvOj9UhRVelVV8urZH6 iaVrlm0ZpCYT6RKDi9XcJM3QybNSWgYVlomfcRdadnHmpqnvmZgvhpOPVepf+KOH C/je94W4XQIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFEqfMLgB8ebyuEOXZI3TH9/D HrHmMB8GA1UdIwQYMBaAFLc7BZcaGna98bxhpReLALT/cbq7MA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzNiODZjYjc3LTY5YWMtNDNkOS05ZjZj LWZjNTMwNjZiZWI4OC8yL0I3M0IwNTk3MUExQTc2QkRGMUJDNjFBNTE3OEIwMEI0 RkY3MUJBQkIuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2Et NGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZWMxNzE1Ny02NmRlLTRhYWItODVlNy0y OGFmNGRlNDMwZTIvZDkwZDhhYmEyYTUyZTY1ODcyMjUyMmVjNDJjNjI2ZjAyOTc1 MGUwMTVkYmRiYTQxOGYuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv M2I4NmNiNzctNjlhYy00M2Q5LTlmNmMtZmM1MzA2NmJlYjg4LzIvQjczQjA1OTcx QTFBNzZCREYxQkM2MUE1MTc4QjAwQjRGRjcxQkFCQi5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADJn5zP9 esMSapYhnQZwGAzbeW/OFOPhEw6JoUXaDAQEp6Jr800PJjTcUptI2bGCdCgKjKH9 phUV1+jbvk7JT3tn2I6umeuHEY86LUDhHoV49xNZION3LTHCwxGbEiXyRn0uaeN8 g0Fdnjy0NM+crsKDMqo1Z/RDhWYFXDMvR1f2gSOLJcAYMVssshjf0Slh8GY2zn/w joTNB7MsQj1yl5RlDqQV5lROI4t1FqsxFfrf2EQtR+/nL1U6PbBLDD1DRwh/4ozR Pi6uI9NuMtR4OAJjq+ltsTIRhAckC4OoY9zUCG4RT2H3/L7CzHhB80fePijttu/o T2hOgqQKf0ui5nE= -----END CERTIFICATE-----Generated at Sat May 10 07:38:10 2025 by rpki-client