$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft File: 10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft (raw, json) Hash identifier: 6osONXQaPrSUcATE/vqSRPDdnfvcyajv3vRvbTbzEe0= Subject key identifier: 7D:BB:DC:9E:A5:55:EA:71:1A:A6:B3:75:D6:8F:D2:EB:F8:25:A0:09 Authority key identifier: 10:FA:AD:7B:D8:08:78:1E:33:0C:17:FD:6D:0A:AB:1D:F1:C6:9E:D4 Certificate issuer: /CN=1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39 Certificate serial: 612634A654DE01797A00C47DE3279C4761E58725 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft Manifest number: 0321 Signing time: Sun 24 Aug 2025 02:14:36 +0000 Manifest this update: Sun 24 Aug 2025 02:09:36 +0000 Manifest next update: Mon 25 Aug 2025 04:07:36 +0000 Files and hashes: 1: 32332e3133382e3232302e302f32342d3234203d3e203233313235.roa (hash: kPUalpUINJCiwObNYv9PpoOc/cSxsDyRMNiHLlMHUFE=) 2: 10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.crl (hash: r9D0/QSTI+/4rc8A0Ss5yQ4NwoH5q6Ouj+pUDyx3fxA=) 3: 323630323a663939653a3a2f33362d3336203d3e203233313235.roa (hash: MUrrdeivup2plAmve+o0OoigEU3cn15gDFCIWky2K2w=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.crl rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/4b92cbc5-48e6-4e59-b9e4-d0055609895d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/4b92cbc5-48e6-4e59-b9e4-d0055609895d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 04:07:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:26:34:a6:54:de:01:79:7a:00:c4:7d:e3:27:9c:47:61:e5:87:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39 Validity Not Before: Aug 24 02:09:36 2025 GMT Not After : Aug 25 04:07:36 2025 GMT Subject: CN=7DBBDC9EA555EA711AA6B375D68FD2EBF825A009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:38:b4:0e:54:f2:9e:bd:f3:42:67:0b:0c:2d: cb:42:cc:6c:83:6b:b9:56:b6:58:e6:fe:bd:3a:40: 02:25:8a:a6:a3:3e:de:eb:9e:75:59:e6:69:47:bd: 21:a1:72:4f:21:71:8d:1f:00:d5:ef:ce:93:00:f4: e3:48:a1:32:51:b1:df:6a:7a:68:0e:2b:b3:64:e5: 21:05:1f:dd:25:6e:45:c4:d7:73:3b:08:2b:f8:71: b6:2e:f1:24:a0:eb:e6:f2:4d:9d:a0:5f:53:28:e4: fe:81:61:53:89:8b:28:7c:7a:1e:c2:9c:77:0a:7c: 1a:3b:3c:84:bb:b8:73:17:85:03:74:11:a4:f3:ba: db:93:82:aa:a1:71:bc:fc:72:dd:c3:1a:e6:f6:bd: bb:36:95:be:e8:10:51:bd:72:1a:29:86:d1:33:7e: 60:2a:da:32:06:a0:4e:77:bc:ba:dd:a5:78:46:db: 62:f0:bd:84:c2:12:f1:62:b1:bf:00:e8:61:8f:3d: 1f:7b:e6:e1:ac:0e:f7:fd:9d:4b:82:14:b7:fb:b2: 83:3f:03:c7:77:8b:a7:cc:33:20:81:79:d6:b8:50: a6:3c:a6:e1:e3:b4:80:d7:b2:bf:f9:8a:b6:45:9c: d6:6a:0c:cd:7b:97:44:f9:f0:c2:f6:a4:35:2e:cf: 66:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:BB:DC:9E:A5:55:EA:71:1A:A6:B3:75:D6:8F:D2:EB:F8:25:A0:09 X509v3 Authority Key Identifier: keyid:10:FA:AD:7B:D8:08:78:1E:33:0C:17:FD:6D:0A:AB:1D:F1:C6:9E:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:a4:17:4e:10:52:47:aa:29:79:8d:ff:5c:8e:cc:5f:90:a4: cd:7b:05:29:b5:be:ce:b8:b3:29:db:c2:c1:0c:5f:25:32:d7: 34:c6:3f:f1:d1:06:b9:ef:14:2c:38:10:80:1a:5f:a4:23:13: 5a:f8:43:3b:6e:e4:b2:9d:f0:f1:ef:26:be:f2:83:29:c1:1d: 67:62:0b:e6:17:72:90:f0:37:31:ae:75:19:92:d2:b3:24:09: 17:52:6c:79:07:fc:ed:77:fa:10:a9:a6:71:4d:ab:bd:8e:59: 4b:78:b1:d7:11:59:ed:5a:ce:e1:45:e2:bd:37:8d:f0:c0:f7: 44:e6:5a:1c:a2:6a:c2:23:3c:d0:7f:10:1d:b3:2f:b0:55:33: 19:c9:f9:0f:2c:fd:a4:f0:28:3e:fd:5c:84:1a:08:62:e6:13: 0e:44:77:92:ac:e1:0c:b1:83:e0:a1:f5:66:49:94:96:81:df: 97:45:ab:3e:75:35:f6:d0:a6:fe:95:c0:77:31:e4:ca:0e:da: 36:28:f8:3d:81:79:49:1b:a1:c9:d9:1a:c3:c3:6d:18:14:fb: d7:7a:13:58:50:e5:03:e5:4a:37:9e:1e:fc:7c:c4:08:01:ba: b1:8b:19:70:bc:ee:55:b6:f5:a7:71:03:56:09:b2:e4:cd:b5: 98:e6:8d:ee -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUYSY0plTeAXl6AMR94yecR2HlhyUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWExZmViN2YwNWJiZDg3ZjAxMGYxOTE2NjdmYzViMjIz YzgzNjMyYjliYmNhMzNlMzkwHhcNMjUwODI0MDIwOTM2WhcNMjUwODI1MDQwNzM2 WjAzMTEwLwYDVQQDEyg3REJCREM5RUE1NTVFQTcxMUFBNkIzNzVENjhGRDJFQkY4 MjVBMDA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzi0DlTynr3z QmcLDC3LQsxsg2u5VrZY5v69OkACJYqmoz7e6551WeZpR70hoXJPIXGNHwDV786T APTjSKEyUbHfanpoDiuzZOUhBR/dJW5FxNdzOwgr+HG2LvEkoOvm8k2doF9TKOT+ gWFTiYsofHoewpx3CnwaOzyEu7hzF4UDdBGk87rbk4KqoXG8/HLdwxrm9r27NpW+ 6BBRvXIaKYbRM35gKtoyBqBOd7y63aV4Rtti8L2EwhLxYrG/AOhhjz0fe+bhrA73 /Z1LghS3+7KDPwPHd4unzDMggXnWuFCmPKbh47SA17K/+Yq2RZzWagzNe5dE+fDC 9qQ1Ls9mmwIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFH273J6lVepxGqazddaP0uv4 JaAJMB8GA1UdIwQYMBaAFBD6rXvYCHgeMwwX/W0Kqx3xxp7UMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzNkYTRkOGI0LWExNTctNDYzNC1hYjE4 LTNlZjlkMDk4MjM1Mi8zLzEwRkFBRDdCRDgwODc4MUUzMzBDMTdGRDZEMEFBQjFE RjFDNjlFRDQuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It NGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YjkyY2JjNS00OGU2LTRlNTktYjllNC1k MDA1NTYwOTg5NWQvMWExZmViN2YwNWJiZDg3ZjAxMGYxOTE2NjdmYzViMjIzYzgz NjMyYjliYmNhMzNlMzkuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv M2RhNGQ4YjQtYTE1Ny00NjM0LWFiMTgtM2VmOWQwOTgyMzUyLzMvMTBGQUFEN0JE ODA4NzgxRTMzMEMxN0ZENkQwQUFCMURGMUM2OUVENC5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKOkF04Q UkeqKXmN/1yOzF+QpM17BSm1vs64synbwsEMXyUy1zTGP/HRBrnvFCw4EIAaX6Qj E1r4Qztu5LKd8PHvJr7ygynBHWdiC+YXcpDwNzGudRmS0rMkCRdSbHkH/O13+hCp pnFNq72OWUt4sdcRWe1azuFF4r03jfDA90TmWhyiasIjPNB/EB2zL7BVMxnJ+Q8s /aTwKD79XIQaCGLmEw5Ed5Ks4Qyxg+Ch9WZJlJaB35dFqz51NfbQpv6VwHcx5MoO 2jYo+D2BeUkbocnZGsPDbRgU+9d6E1hQ5QPlSjeeHvx8xAgBurGLGXC87lW29adx A1YJsuTNtZjmje4= -----END CERTIFICATE-----Generated at Sun Aug 24 08:44:32 2025 by rpki-client