$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft File: 10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft (raw, json) Hash identifier: Wcpcm/7P1ngKRxPCN2QdVzdQY7/x2X1fuu7H1SGwZvY= Subject key identifier: 4E:E6:47:BA:85:B5:0B:85:8D:3C:6C:00:C4:B6:7D:08:46:24:AF:47 Authority key identifier: 10:FA:AD:7B:D8:08:78:1E:33:0C:17:FD:6D:0A:AB:1D:F1:C6:9E:D4 Certificate issuer: /CN=1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39 Certificate serial: 2B8464A4F4F5118BD9DDBC26E8CDC36C0D556D95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft Manifest number: 0292 Signing time: Sat 10 May 2025 11:51:58 +0000 Manifest this update: Sat 10 May 2025 11:46:58 +0000 Manifest next update: Sun 11 May 2025 14:38:58 +0000 Files and hashes: 1: 323630323a663939653a3a2f33362d3336203d3e203233313235.roa (hash: MUrrdeivup2plAmve+o0OoigEU3cn15gDFCIWky2K2w=) 2: 10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.crl (hash: uHVYxXA2Rk6baneILsNq8a+NMWUW43MhlVrdV24PCF4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.crl rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/4b92cbc5-48e6-4e59-b9e4-d0055609895d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/4b92cbc5-48e6-4e59-b9e4-d0055609895d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 14:38:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:84:64:a4:f4:f5:11:8b:d9:dd:bc:26:e8:cd:c3:6c:0d:55:6d:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39 Validity Not Before: May 10 11:46:58 2025 GMT Not After : May 11 14:38:58 2025 GMT Subject: CN=4EE647BA85B50B858D3C6C00C4B67D084624AF47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5c:fe:2f:92:3c:3e:69:51:8d:7c:73:9b:19: b2:a2:f9:f4:76:fd:58:a4:f1:36:15:b2:15:de:0b: 8e:8b:53:a4:ed:fc:b7:7f:52:c6:4f:ef:f4:9d:7c: ce:57:3b:bd:9c:bb:43:05:1a:ff:e3:74:98:51:bc: c6:72:df:8f:db:c5:a2:26:13:e7:5e:76:05:af:d2: 49:6f:17:0e:87:2b:ca:b2:6d:ba:e7:e4:63:f5:43: fa:20:63:76:f0:fb:35:54:f7:27:1d:a5:0e:61:e2: 3e:12:6d:06:e6:10:16:a7:15:48:b6:db:7e:cb:15: 97:ca:dd:76:46:58:fa:2c:35:0f:8e:34:51:50:7b: 88:20:54:4e:e8:95:6b:81:fb:a7:bf:a7:04:22:d5: 8d:99:ec:5a:65:cc:60:33:71:bc:0b:d0:6b:7e:5e: 12:d1:c1:6d:d0:3e:75:12:4d:12:50:1b:b1:14:29: 42:38:dc:bc:4f:c6:67:68:ab:3c:60:fa:c4:bd:97: 3a:82:dd:6a:b5:bc:70:74:4a:ad:9c:f8:72:b8:e3: 74:46:a4:2c:4e:b4:25:2a:69:56:12:7b:9d:2b:a1: 92:92:c4:ff:9c:d6:c4:6d:e3:8c:8c:f1:3c:ee:ae: 40:c6:c4:23:ed:60:ab:2d:d1:25:f7:cc:fd:d1:aa: 58:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:E6:47:BA:85:B5:0B:85:8D:3C:6C:00:C4:B6:7D:08:46:24:AF:47 X509v3 Authority Key Identifier: keyid:10:FA:AD:7B:D8:08:78:1E:33:0C:17:FD:6D:0A:AB:1D:F1:C6:9E:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:7a:ef:c0:00:bf:a7:a9:57:81:25:09:91:0a:18:78:20:5e: 36:e7:ce:63:70:5c:a5:ff:fd:00:de:cb:f0:c5:3b:89:c0:da: 90:37:49:0d:bb:f5:7a:85:c2:56:5e:61:81:89:66:35:6f:05: 35:0c:31:31:f0:b3:eb:4c:66:ec:cf:72:54:01:8c:c4:de:5e: 1a:34:9d:7b:7c:f5:28:5b:77:87:55:05:85:1f:59:61:f0:a5: 2c:94:98:dd:6a:02:25:00:5a:03:9f:05:1e:b9:9d:72:d8:5c: ac:de:a2:c5:92:7e:3c:13:e7:57:b9:43:7d:8a:ca:53:a9:e9: 40:a0:29:9c:ea:c4:e7:be:75:eb:7e:ff:a3:99:88:6e:fd:96: 6e:27:38:95:96:ba:cd:7d:db:3a:a5:11:27:31:31:f4:b8:ed: 9b:ae:68:db:8a:33:51:4f:83:f4:41:22:7c:95:36:1e:3d:3c: 46:f6:53:0c:59:ff:3c:45:eb:83:37:5c:f4:82:a9:f6:db:16: 86:d4:0b:94:23:8b:cd:8d:f3:97:07:ad:34:35:4c:91:cb:d0: f4:28:48:08:d8:e8:9e:eb:92:b9:77:ac:46:5b:67:dd:d7:af: b0:13:11:e8:bc:a9:11:ce:9d:c4:c2:46:8a:7b:2a:af:1d:78: 6b:0c:71:c9 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUK4RkpPT1EYvZ3bwm6M3DbA1VbZUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWExZmViN2YwNWJiZDg3ZjAxMGYxOTE2NjdmYzViMjIz YzgzNjMyYjliYmNhMzNlMzkwHhcNMjUwNTEwMTE0NjU4WhcNMjUwNTExMTQzODU4 WjAzMTEwLwYDVQQDEyg0RUU2NDdCQTg1QjUwQjg1OEQzQzZDMDBDNEI2N0QwODQ2 MjRBRjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1z+L5I8PmlR jXxzmxmyovn0dv1YpPE2FbIV3guOi1Ok7fy3f1LGT+/0nXzOVzu9nLtDBRr/43SY UbzGct+P28WiJhPnXnYFr9JJbxcOhyvKsm265+Rj9UP6IGN28Ps1VPcnHaUOYeI+ Em0G5hAWpxVIttt+yxWXyt12Rlj6LDUPjjRRUHuIIFRO6JVrgfunv6cEItWNmexa ZcxgM3G8C9Brfl4S0cFt0D51Ek0SUBuxFClCONy8T8ZnaKs8YPrEvZc6gt1qtbxw dEqtnPhyuON0RqQsTrQlKmlWEnudK6GSksT/nNbEbeOMjPE87q5AxsQj7WCrLdEl 98z90apY8wIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFE7mR7qFtQuFjTxsAMS2fQhG JK9HMB8GA1UdIwQYMBaAFBD6rXvYCHgeMwwX/W0Kqx3xxp7UMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzNkYTRkOGI0LWExNTctNDYzNC1hYjE4 LTNlZjlkMDk4MjM1Mi8zLzEwRkFBRDdCRDgwODc4MUUzMzBDMTdGRDZEMEFBQjFE RjFDNjlFRDQuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It NGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YjkyY2JjNS00OGU2LTRlNTktYjllNC1k MDA1NTYwOTg5NWQvMWExZmViN2YwNWJiZDg3ZjAxMGYxOTE2NjdmYzViMjIzYzgz NjMyYjliYmNhMzNlMzkuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv M2RhNGQ4YjQtYTE1Ny00NjM0LWFiMTgtM2VmOWQwOTgyMzUyLzMvMTBGQUFEN0JE ODA4NzgxRTMzMEMxN0ZENkQwQUFCMURGMUM2OUVENC5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAx678AA v6epV4ElCZEKGHggXjbnzmNwXKX//QDey/DFO4nA2pA3SQ279XqFwlZeYYGJZjVv BTUMMTHws+tMZuzPclQBjMTeXho0nXt89Shbd4dVBYUfWWHwpSyUmN1qAiUAWgOf BR65nXLYXKzeosWSfjwT51e5Q32KylOp6UCgKZzqxOe+det+/6OZiG79lm4nOJWW us192zqlEScxMfS47ZuuaNuKM1FPg/RBInyVNh49PEb2UwxZ/zxF64M3XPSCqfbb FobUC5Qji82N85cHrTQ1TJHL0PQoSAjY6J7rkrl3rEZbZ93Xr7ATEei8qRHOncTC Rop7Kq8deGsMcck= -----END CERTIFICATE-----Generated at Sun May 11 08:35:22 2025 by rpki-client