$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft File: 10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft (raw, json) Hash identifier: 44xL9A6KKi+gHz10OnDG7Qa2ZYr4N7uRvHAUQhPIOIk= Subject key identifier: 3F:C8:9B:81:04:CA:62:5F:F9:7F:90:E5:8D:F6:45:92:53:E9:01:BF Authority key identifier: 10:FA:AD:7B:D8:08:78:1E:33:0C:17:FD:6D:0A:AB:1D:F1:C6:9E:D4 Certificate issuer: /CN=1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39 Certificate serial: 36FBA2B9FC55A3E583D84B7525E5B8AC9A974EF8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft Manifest number: 02D6 Signing time: Mon 30 Jun 2025 08:37:33 +0000 Manifest this update: Mon 30 Jun 2025 08:32:33 +0000 Manifest next update: Tue 01 Jul 2025 08:56:33 +0000 Files and hashes: 1: 323630323a663939653a3a2f33362d3336203d3e203233313235.roa (hash: MUrrdeivup2plAmve+o0OoigEU3cn15gDFCIWky2K2w=) 2: 32332e3133382e3232302e302f32342d3234203d3e203233313235.roa (hash: kPUalpUINJCiwObNYv9PpoOc/cSxsDyRMNiHLlMHUFE=) 3: 10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.crl (hash: 7j9hMycaR8uQmxCtIFyXgJNsF9ZPjp0qX6E/+IFvNQ0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.crl rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/4b92cbc5-48e6-4e59-b9e4-d0055609895d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/4b92cbc5-48e6-4e59-b9e4-d0055609895d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 08:56:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:fb:a2:b9:fc:55:a3:e5:83:d8:4b:75:25:e5:b8:ac:9a:97:4e:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39 Validity Not Before: Jun 30 08:32:33 2025 GMT Not After : Jul 1 08:56:33 2025 GMT Subject: CN=3FC89B8104CA625FF97F90E58DF6459253E901BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ac:ff:c7:25:4f:18:96:e4:11:54:04:1a:3e: e3:89:d7:3e:54:32:3a:01:9f:c8:ac:35:84:c2:89: f6:2e:60:d7:8b:0a:58:0c:50:4b:da:ff:64:f1:1e: 52:1b:5f:6d:85:a9:2a:d2:43:0c:a3:eb:28:cb:31: 3b:c5:34:5f:d5:09:2b:18:01:d3:66:37:af:2e:44: 65:18:25:56:f1:3a:ba:4e:25:57:5a:71:18:f1:f9: 3d:75:db:7a:87:dc:96:b1:b8:f8:02:4c:f8:ee:6a: 9f:cb:7a:52:f1:e3:a5:b2:e4:7d:c7:cd:a3:a9:2b: 50:cb:f6:29:38:d3:4c:57:32:e3:75:43:5e:4c:59: a4:5d:2c:14:dc:67:ee:31:98:64:3e:78:21:78:6d: 78:23:84:6a:4f:34:0c:00:96:fc:42:79:ed:b2:16: 34:5c:75:ef:2c:4c:e4:09:fc:e4:2a:d5:13:24:1b: e8:40:cd:6e:06:f0:6a:25:eb:57:23:28:44:79:42: 60:04:eb:70:b6:07:56:0d:74:0a:37:9f:20:b3:ae: fc:b3:ec:2b:3a:55:1a:db:ae:c4:fb:0d:99:33:d0: fa:b2:51:41:57:7f:8d:d0:6d:8c:ab:b3:c6:c7:80: bc:3c:52:d4:1c:55:f3:1e:46:8d:07:70:e5:8a:ec: 1a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:C8:9B:81:04:CA:62:5F:F9:7F:90:E5:8D:F6:45:92:53:E9:01:BF X509v3 Authority Key Identifier: keyid:10:FA:AD:7B:D8:08:78:1E:33:0C:17:FD:6D:0A:AB:1D:F1:C6:9E:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:83:9d:c0:aa:96:d6:c1:b9:91:f1:85:2c:df:ad:6d:68:3e: 9e:e5:fa:5a:70:0f:cf:fc:02:5f:f0:72:91:06:46:81:3e:cf: 82:79:44:d9:52:82:4d:99:23:4e:f2:49:c5:38:36:a1:b1:c6: 98:df:eb:10:c2:8d:6e:a0:36:cc:9f:14:9d:d3:ef:f2:bb:1a: e2:de:6b:ae:47:bd:d5:d7:2c:c7:5d:86:55:e8:4b:51:42:bd: f8:00:2d:dc:c0:50:5a:fd:2e:61:2a:b0:04:f6:e2:aa:63:7f: db:a6:d8:a4:24:c3:38:cf:85:05:bd:8f:fa:89:cb:3e:74:9c: 5b:af:18:6d:56:b4:33:36:ad:e7:72:48:5b:51:2c:5e:c6:cd: 8c:0c:ee:51:22:64:65:73:71:05:9a:71:9d:e5:98:d8:c9:83: 62:f6:8f:89:ae:11:50:16:8b:7f:b0:4d:5a:d4:d2:7a:2c:d7: 82:3f:97:d0:cd:6c:00:a3:29:34:d8:70:d8:39:8e:44:ba:ae: 37:e6:7b:d5:4f:d9:52:fa:d0:bf:93:6a:0f:bf:f7:fb:26:ac: a1:cd:17:3e:78:9e:68:80:92:fc:65:7c:46:23:3a:61:54:2f: ae:7b:01:71:07:2a:c8:ae:2c:82:e6:d3:84:9c:d2:fa:7d:4b: ea:d8:fd:b5 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUNvuiufxVo+WD2Et1JeW4rJqXTvgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWExZmViN2YwNWJiZDg3ZjAxMGYxOTE2NjdmYzViMjIz YzgzNjMyYjliYmNhMzNlMzkwHhcNMjUwNjMwMDgzMjMzWhcNMjUwNzAxMDg1NjMz WjAzMTEwLwYDVQQDEygzRkM4OUI4MTA0Q0E2MjVGRjk3RjkwRTU4REY2NDU5MjUz RTkwMUJGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaz/xyVPGJbk EVQEGj7jidc+VDI6AZ/IrDWEwon2LmDXiwpYDFBL2v9k8R5SG19thakq0kMMo+so yzE7xTRf1QkrGAHTZjevLkRlGCVW8Tq6TiVXWnEY8fk9ddt6h9yWsbj4Akz47mqf y3pS8eOlsuR9x82jqStQy/YpONNMVzLjdUNeTFmkXSwU3GfuMZhkPngheG14I4Rq TzQMAJb8QnntshY0XHXvLEzkCfzkKtUTJBvoQM1uBvBqJetXIyhEeUJgBOtwtgdW DXQKN58gs678s+wrOlUa267E+w2ZM9D6slFBV3+N0G2Mq7PGx4C8PFLUHFXzHkaN B3DliuwaWQIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFD/Im4EEymJf+X+Q5Y32RZJT 6QG/MB8GA1UdIwQYMBaAFBD6rXvYCHgeMwwX/W0Kqx3xxp7UMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzNkYTRkOGI0LWExNTctNDYzNC1hYjE4 LTNlZjlkMDk4MjM1Mi8zLzEwRkFBRDdCRDgwODc4MUUzMzBDMTdGRDZEMEFBQjFE RjFDNjlFRDQuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It NGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YjkyY2JjNS00OGU2LTRlNTktYjllNC1k MDA1NTYwOTg5NWQvMWExZmViN2YwNWJiZDg3ZjAxMGYxOTE2NjdmYzViMjIzYzgz NjMyYjliYmNhMzNlMzkuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv M2RhNGQ4YjQtYTE1Ny00NjM0LWFiMTgtM2VmOWQwOTgyMzUyLzMvMTBGQUFEN0JE ODA4NzgxRTMzMEMxN0ZENkQwQUFCMURGMUM2OUVENC5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHKDncCq ltbBuZHxhSzfrW1oPp7l+lpwD8/8Al/wcpEGRoE+z4J5RNlSgk2ZI07yScU4NqGx xpjf6xDCjW6gNsyfFJ3T7/K7GuLea65HvdXXLMddhlXoS1FCvfgALdzAUFr9LmEq sAT24qpjf9um2KQkwzjPhQW9j/qJyz50nFuvGG1WtDM2redySFtRLF7GzYwM7lEi ZGVzcQWacZ3lmNjJg2L2j4muEVAWi3+wTVrU0nos14I/l9DNbACjKTTYcNg5jkS6 rjfme9VP2VL60L+Tag+/9/smrKHNFz54nmiAkvxlfEYjOmFUL657AXEHKsiuLILm 04Sc0vp9S+rY/bU= -----END CERTIFICATE-----Generated at Mon Jun 30 11:24:20 2025 by rpki-client