$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/B73B05971A1A76BDF1BC61A5178B00B4FF71BABB.mft File: B73B05971A1A76BDF1BC61A5178B00B4FF71BABB.mft (raw, json) Hash identifier: 9MGs1fBsLuJ1d3fMfcAfLKrwRIuKjZQQvyUR/DrpiFo= Subject key identifier: 36:64:B5:00:30:57:5B:A8:A4:79:3C:C5:5A:91:E6:8E:AA:BA:A8:2B Authority key identifier: B7:3B:05:97:1A:1A:76:BD:F1:BC:61:A5:17:8B:00:B4:FF:71:BA:BB Certificate issuer: /CN=d90d8aba2a52e658722522ec42c626f029750e015dbdba418f Certificate serial: 497475047603E8C4A0A77436CB0112D3EBA24B6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a52e658722522ec42c626f029750e015dbdba418f.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/B73B05971A1A76BDF1BC61A5178B00B4FF71BABB.mft Manifest number: 98 Signing time: Fri 04 Jul 2025 12:06:46 +0000 Manifest this update: Fri 04 Jul 2025 12:01:46 +0000 Manifest next update: Sat 05 Jul 2025 15:24:46 +0000 Files and hashes: 1: B73B05971A1A76BDF1BC61A5178B00B4FF71BABB.crl (hash: jzwO07B18BiSpYnvxlc6r3i2vAFjnVKRPhKO2aKd95g=) 2: 323630323a663966613a3a2f33362d3438203d3e203630383538.roa (hash: 5c3OaxW1qKZrY2FscDnJyFNXHvDxQCbXNLWzxHU/wc8=) 3: 32332e3136342e3135322e302f32342d3234203d3e203236353631.roa (hash: Ufvh495kVHTsvuscjFimK/5B3fifdcUwR5A1Uohco9k=) 4: 323630323a663966613a3a2f33362d3438203d3e203132383339.roa (hash: KB5IW4CbSuoOkgtd2rJCaS7SQDgxB1P+CSq45yfOs7s=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/B73B05971A1A76BDF1BC61A5178B00B4FF71BABB.crl rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/B73B05971A1A76BDF1BC61A5178B00B4FF71BABB.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a52e658722522ec42c626f029750e015dbdba418f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 15:24:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:74:75:04:76:03:e8:c4:a0:a7:74:36:cb:01:12:d3:eb:a2:4b:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d90d8aba2a52e658722522ec42c626f029750e015dbdba418f Validity Not Before: Jul 4 12:01:46 2025 GMT Not After : Jul 5 15:24:46 2025 GMT Subject: CN=3664B50030575BA8A4793CC55A91E68EAABAA82B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6b:cf:06:ed:a9:6d:1f:2e:07:0f:c1:6f:b7: b7:be:10:4a:c6:c1:71:26:33:98:7a:e7:65:77:4d: bf:4a:82:9b:18:72:2f:3d:e5:87:1d:70:3e:c5:43: 24:26:7c:c7:0c:d4:d6:a6:77:ef:1d:d6:bc:0e:5a: 87:f8:b3:23:a5:77:bf:ff:77:9f:70:0c:92:43:c4: 03:61:82:67:03:eb:08:b6:1e:9d:d8:a7:b0:6a:55: c9:72:d5:40:e3:e3:0c:6a:82:1a:33:47:fa:c4:7e: 06:84:11:13:7a:cb:fd:a2:b8:98:1f:54:ad:b4:7f: 95:85:83:9e:6a:ac:df:1f:70:af:a0:ef:97:8a:3d: 22:df:df:b8:15:4b:e0:57:09:c7:83:af:16:b3:3c: 06:0d:93:b4:4c:88:6f:13:5d:6e:df:f1:c7:06:5e: 26:7d:82:65:65:18:9b:85:f8:95:23:0a:ec:4c:6d: cc:46:f9:92:80:aa:51:f5:64:59:3c:1e:62:28:bb: a5:b0:e9:ff:b9:92:74:6d:fe:fa:7f:c8:64:46:cf: 7f:cf:b5:e3:b4:fb:cb:61:05:0f:56:1f:d6:64:d0: d3:05:26:d8:48:e2:8b:b0:df:c2:18:d0:43:6e:ec: 2e:c2:85:50:33:57:3e:e4:ad:77:60:0c:eb:a4:63: 55:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:64:B5:00:30:57:5B:A8:A4:79:3C:C5:5A:91:E6:8E:AA:BA:A8:2B X509v3 Authority Key Identifier: keyid:B7:3B:05:97:1A:1A:76:BD:F1:BC:61:A5:17:8B:00:B4:FF:71:BA:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/B73B05971A1A76BDF1BC61A5178B00B4FF71BABB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a52e658722522ec42c626f029750e015dbdba418f.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/B73B05971A1A76BDF1BC61A5178B00B4FF71BABB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:12:af:4d:7d:aa:c1:dd:b2:49:9d:d0:ad:db:fa:46:b6:10: f9:5d:25:7e:67:22:a7:ba:35:55:73:9c:72:95:f9:ce:72:5a: fe:d0:3c:43:55:01:d4:1f:63:9b:f2:e7:43:57:9d:ca:b7:93: d4:02:f7:3d:e5:cd:ee:16:da:a1:d0:ad:6a:9a:68:00:8a:b1: c3:45:94:d7:74:78:0e:20:f6:e5:99:0f:8d:51:94:d3:6c:b3: 6b:26:e5:40:59:cf:29:65:6d:8e:dc:a5:2a:b4:91:4f:46:7a: 8c:cc:72:94:4e:2a:a2:b9:2c:76:75:05:c6:41:ea:6e:08:d7: b4:e4:81:f6:26:e1:de:3d:0d:0a:fd:de:1c:87:96:1d:20:f2: bf:10:fd:86:a4:5d:76:85:8c:d6:4e:e7:32:5b:f5:6a:67:70: a8:fe:6c:b6:df:a4:65:25:9f:79:7e:f1:4d:b6:e4:a8:b1:87: e4:7e:23:fa:b2:e9:67:c2:43:94:8b:f8:fb:61:13:70:c5:3e: d8:01:89:77:42:69:a8:e4:85:e8:9a:c8:a0:ec:8c:ff:ed:a3: c6:8f:07:5c:d3:f6:0e:3c:de:77:8c:af:f9:fc:e7:34:09:d9: cc:ba:ba:36:4c:89:38:b1:5d:bb:b1:80:69:cc:ed:a0:e2:82: ce:89:11:a0 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUSXR1BHYD6MSgp3Q2ywES0+uiS2owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDkwZDhhYmEyYTUyZTY1ODcyMjUyMmVjNDJjNjI2ZjAy OTc1MGUwMTVkYmRiYTQxOGYwHhcNMjUwNzA0MTIwMTQ2WhcNMjUwNzA1MTUyNDQ2 WjAzMTEwLwYDVQQDEygzNjY0QjUwMDMwNTc1QkE4QTQ3OTNDQzU1QTkxRTY4RUFB QkFBODJCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWvPBu2pbR8u Bw/Bb7e3vhBKxsFxJjOYeudld02/SoKbGHIvPeWHHXA+xUMkJnzHDNTWpnfvHda8 DlqH+LMjpXe//3efcAySQ8QDYYJnA+sIth6d2KewalXJctVA4+MMaoIaM0f6xH4G hBETesv9oriYH1SttH+VhYOeaqzfH3CvoO+Xij0i39+4FUvgVwnHg68WszwGDZO0 TIhvE11u3/HHBl4mfYJlZRibhfiVIwrsTG3MRvmSgKpR9WRZPB5iKLulsOn/uZJ0 bf76f8hkRs9/z7XjtPvLYQUPVh/WZNDTBSbYSOKLsN/CGNBDbuwuwoVQM1c+5K13 YAzrpGNVeQIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFDZktQAwV1uopHk8xVqR5o6q uqgrMB8GA1UdIwQYMBaAFLc7BZcaGna98bxhpReLALT/cbq7MA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzNiODZjYjc3LTY5YWMtNDNkOS05ZjZj LWZjNTMwNjZiZWI4OC8yL0I3M0IwNTk3MUExQTc2QkRGMUJDNjFBNTE3OEIwMEI0 RkY3MUJBQkIuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2Et NGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZWMxNzE1Ny02NmRlLTRhYWItODVlNy0y OGFmNGRlNDMwZTIvZDkwZDhhYmEyYTUyZTY1ODcyMjUyMmVjNDJjNjI2ZjAyOTc1 MGUwMTVkYmRiYTQxOGYuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv M2I4NmNiNzctNjlhYy00M2Q5LTlmNmMtZmM1MzA2NmJlYjg4LzIvQjczQjA1OTcx QTFBNzZCREYxQkM2MUE1MTc4QjAwQjRGRjcxQkFCQi5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADkSr019 qsHdskmd0K3b+ka2EPldJX5nIqe6NVVznHKV+c5yWv7QPENVAdQfY5vy50NXncq3 k9QC9z3lze4W2qHQrWqaaACKscNFlNd0eA4g9uWZD41RlNNss2sm5UBZzyllbY7c pSq0kU9GeozMcpROKqK5LHZ1BcZB6m4I17TkgfYm4d49DQr93hyHlh0g8r8Q/Yak XXaFjNZO5zJb9WpncKj+bLbfpGUln3l+8U225Kixh+R+I/qy6WfCQ5SL+PthE3DF PtgBiXdCaajkheiayKDsjP/to8aPB1zT9g483neMr/n85zQJ2cy6ujZMiTixXbux gGnM7aDigs6JEaA= -----END CERTIFICATE-----Generated at Fri Jul 4 17:22:55 2025 by rpki-client