$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft File: 10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft (raw, json) Hash identifier: mK+hD4gCuiefGX0sK8ICArU/BTtVbsSb0c9f/lrA1No= Subject key identifier: 01:B0:46:0C:E2:7A:25:7C:E4:82:14:B8:07:96:FC:25:56:A3:AA:66 Authority key identifier: 10:FA:AD:7B:D8:08:78:1E:33:0C:17:FD:6D:0A:AB:1D:F1:C6:9E:D4 Certificate issuer: /CN=1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39 Certificate serial: 2DA8F6D8F702A70AB6C445B5110E2EEF100974D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft Manifest number: 0371 Signing time: Wed 22 Oct 2025 08:40:18 +0000 Manifest this update: Wed 22 Oct 2025 08:35:18 +0000 Manifest next update: Thu 23 Oct 2025 08:59:18 +0000 Files and hashes: 1: 32332e3133382e3232302e302f32342d3234203d3e203233313235.roa (hash: kPUalpUINJCiwObNYv9PpoOc/cSxsDyRMNiHLlMHUFE=) 2: 10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.crl (hash: 2tExBw+v44qkSey0z+3Kd3+ti7Usagy2smnxclm3qc8=) 3: 323630323a663939653a3a2f33362d3336203d3e203233313235.roa (hash: MUrrdeivup2plAmve+o0OoigEU3cn15gDFCIWky2K2w=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.crl rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/4b92cbc5-48e6-4e59-b9e4-d0055609895d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/4b92cbc5-48e6-4e59-b9e4-d0055609895d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 08:59:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:a8:f6:d8:f7:02:a7:0a:b6:c4:45:b5:11:0e:2e:ef:10:09:74:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39 Validity Not Before: Oct 22 08:35:18 2025 GMT Not After : Oct 23 08:59:18 2025 GMT Subject: CN=01B0460CE27A257CE48214B80796FC2556A3AA66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:4a:94:04:a2:9c:a6:a4:56:30:06:b0:12:9c: 81:c6:c1:38:b9:9c:78:ee:43:99:4e:e2:6b:cb:41: 2a:09:b4:05:c5:fd:a7:d3:fe:e1:5b:36:bf:b9:23: 5e:d4:9f:28:9d:e3:ce:d1:ea:a0:6e:2a:1d:6c:0f: 5f:cd:c8:b0:f3:9e:2c:64:13:2c:15:27:b4:69:69: 72:b7:73:7a:93:23:b8:03:b7:36:c0:52:cb:93:b6: 9e:56:6c:92:57:bb:5f:10:9a:6a:39:95:5f:43:97: 4c:91:e7:e7:17:41:9d:56:eb:7e:3f:e1:39:20:2c: ba:46:98:fb:3d:7c:89:bd:71:d1:95:84:46:7f:9e: 41:2b:41:77:11:4f:24:bc:87:7f:89:fd:99:f5:74: e9:48:fc:0e:bd:c3:17:59:0c:ea:ff:bb:8a:d1:c0: 52:83:81:4e:0a:cc:45:14:99:b1:07:ab:68:ba:8e: 01:4e:53:de:85:a1:ab:24:91:be:c0:78:d8:d3:75: 78:3a:93:64:06:cb:30:e6:9f:20:d2:c0:fb:25:80: cb:79:3e:6c:46:af:1c:75:9f:4c:93:3a:43:98:d3: 17:72:67:7f:95:4c:dc:34:e9:31:f7:65:dc:44:48: 21:4c:fa:d6:1e:50:03:e4:2f:0e:2f:29:76:20:72: a8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:B0:46:0C:E2:7A:25:7C:E4:82:14:B8:07:96:FC:25:56:A3:AA:66 X509v3 Authority Key Identifier: keyid:10:FA:AD:7B:D8:08:78:1E:33:0C:17:FD:6D:0A:AB:1D:F1:C6:9E:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:5d:e2:4d:09:c4:10:22:07:ce:b7:31:58:25:8d:e0:d2:48: 98:ff:21:d0:7b:0c:d7:07:fa:e6:bf:f3:56:d5:0e:74:2d:4b: 98:9e:ec:dc:80:74:21:93:b5:bd:4b:01:e0:ba:3c:c0:41:c4: d1:d3:b7:e6:4e:ae:70:42:10:15:7f:b5:14:2f:98:6a:f8:e2: 03:97:a8:23:36:40:7e:15:41:83:da:6d:05:a6:90:1d:eb:e9: 4c:77:2f:ab:86:d3:52:bd:1a:d9:f3:34:ba:8b:ac:d6:24:92: e5:49:e4:c4:b9:21:98:84:9d:45:84:c7:7e:b3:63:06:74:a7: 04:f2:d5:60:c7:b3:77:98:a7:1b:c8:7d:14:5d:cb:c5:9f:85: a3:8d:64:b3:14:5b:dc:76:f4:17:c8:62:c1:35:bb:3f:81:b3: 1e:de:27:8e:7f:7c:d6:c5:3c:3b:cd:59:b4:e8:1c:c6:e5:3a: 65:c6:c4:66:0d:a0:05:b0:e0:1e:e3:01:a5:1e:ad:43:6d:d9: 24:ce:40:2a:5c:d3:c8:a0:e5:05:f0:c7:d3:53:49:76:7d:55: 2c:1c:ae:c2:0d:4a:a0:fb:04:9e:d6:da:f2:b9:a6:dc:c4:ec: ec:25:20:03:26:b4:26:b4:ee:ed:e5:9f:a5:2f:31:84:a2:81: 01:3f:24:9d -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIULaj22PcCpwq2xEW1EQ4u7xAJdNgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWExZmViN2YwNWJiZDg3ZjAxMGYxOTE2NjdmYzViMjIz YzgzNjMyYjliYmNhMzNlMzkwHhcNMjUxMDIyMDgzNTE4WhcNMjUxMDIzMDg1OTE4 WjAzMTEwLwYDVQQDEygwMUIwNDYwQ0UyN0EyNTdDRTQ4MjE0QjgwNzk2RkMyNTU2 QTNBQTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40qUBKKcpqRW MAawEpyBxsE4uZx47kOZTuJry0EqCbQFxf2n0/7hWza/uSNe1J8onePO0eqgbiod bA9fzciw854sZBMsFSe0aWlyt3N6kyO4A7c2wFLLk7aeVmySV7tfEJpqOZVfQ5dM kefnF0GdVut+P+E5ICy6Rpj7PXyJvXHRlYRGf55BK0F3EU8kvId/if2Z9XTpSPwO vcMXWQzq/7uK0cBSg4FOCsxFFJmxB6touo4BTlPehaGrJJG+wHjY03V4OpNkBssw 5p8g0sD7JYDLeT5sRq8cdZ9MkzpDmNMXcmd/lUzcNOkx92XcREghTPrWHlAD5C8O Lyl2IHKoEQIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFAGwRgzieiV85IIUuAeW/CVW o6pmMB8GA1UdIwQYMBaAFBD6rXvYCHgeMwwX/W0Kqx3xxp7UMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzNkYTRkOGI0LWExNTctNDYzNC1hYjE4 LTNlZjlkMDk4MjM1Mi8zLzEwRkFBRDdCRDgwODc4MUUzMzBDMTdGRDZEMEFBQjFE RjFDNjlFRDQuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It NGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YjkyY2JjNS00OGU2LTRlNTktYjllNC1k MDA1NTYwOTg5NWQvMWExZmViN2YwNWJiZDg3ZjAxMGYxOTE2NjdmYzViMjIzYzgz NjMyYjliYmNhMzNlMzkuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv M2RhNGQ4YjQtYTE1Ny00NjM0LWFiMTgtM2VmOWQwOTgyMzUyLzMvMTBGQUFEN0JE ODA4NzgxRTMzMEMxN0ZENkQwQUFCMURGMUM2OUVENC5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGNd4k0J xBAiB863MVgljeDSSJj/IdB7DNcH+ua/81bVDnQtS5ie7NyAdCGTtb1LAeC6PMBB xNHTt+ZOrnBCEBV/tRQvmGr44gOXqCM2QH4VQYPabQWmkB3r6Ux3L6uG01K9Gtnz NLqLrNYkkuVJ5MS5IZiEnUWEx36zYwZ0pwTy1WDHs3eYpxvIfRRdy8WfhaONZLMU W9x29BfIYsE1uz+Bsx7eJ45/fNbFPDvNWbToHMblOmXGxGYNoAWw4B7jAaUerUNt 2STOQCpc08ig5QXwx9NTSXZ9VSwcrsINSqD7BJ7W2vK5ptzE7OwlIAMmtCa07u3l n6UvMYSigQE/JJ0= -----END CERTIFICATE-----Generated at Wed Oct 22 14:09:17 2025 by rpki-client