$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5291c7e6-a476-4217-bba3-a592b24d8eb9/2/FB5FF92BFD752A0E654B0ECC7B03A17DF99B87A8.mft File: FB5FF92BFD752A0E654B0ECC7B03A17DF99B87A8.mft (raw, json) Hash identifier: HnDbAhTa+gcACyMTV58tbyYQLd2H6jfwvRwulPzOxhk= Subject key identifier: 54:67:B9:19:E2:7B:94:73:70:C7:80:7D:EE:8B:E1:7C:C4:65:65:99 Authority key identifier: FB:5F:F9:2B:FD:75:2A:0E:65:4B:0E:CC:7B:03:A1:7D:F9:9B:87:A8 Certificate issuer: /CN=d90d8aba2a1a07bad3fcf0845bb91d64fddd29022dbb5fe0ad Certificate serial: 401BA882D3664A72A24FC008DB9AA9731B016903 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a1a07bad3fcf0845bb91d64fddd29022dbb5fe0ad.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5291c7e6-a476-4217-bba3-a592b24d8eb9/2/FB5FF92BFD752A0E654B0ECC7B03A17DF99B87A8.mft Manifest number: 42 Signing time: Wed 07 May 2025 08:53:03 +0000 Manifest this update: Wed 07 May 2025 08:48:03 +0000 Manifest next update: Thu 08 May 2025 09:06:03 +0000 Files and hashes: 1: FB5FF92BFD752A0E654B0ECC7B03A17DF99B87A8.crl (hash: jo/GYyN2edBDcN0k7T/puK5VRz+eHxz1SpytZX2CZBs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5291c7e6-a476-4217-bba3-a592b24d8eb9/2/FB5FF92BFD752A0E654B0ECC7B03A17DF99B87A8.crl rsync://rsync.paas.rpki.ripe.net/repository/5291c7e6-a476-4217-bba3-a592b24d8eb9/2/FB5FF92BFD752A0E654B0ECC7B03A17DF99B87A8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a1a07bad3fcf0845bb91d64fddd29022dbb5fe0ad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 09:06:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:1b:a8:82:d3:66:4a:72:a2:4f:c0:08:db:9a:a9:73:1b:01:69:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d90d8aba2a1a07bad3fcf0845bb91d64fddd29022dbb5fe0ad Validity Not Before: May 7 08:48:03 2025 GMT Not After : May 8 09:06:03 2025 GMT Subject: CN=5467B919E27B947370C7807DEE8BE17CC4656599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:58:39:0e:26:e8:69:5f:45:59:3a:b8:98:82: d0:e4:3d:77:ae:c9:aa:1a:fd:78:9e:b6:fc:b9:2d: ad:f3:c6:a6:7a:3d:39:a9:61:79:96:d9:ec:6c:5e: 22:a5:83:e3:f5:e3:2d:bf:cb:7c:37:3f:1e:c2:7c: 1c:64:ad:ba:3c:fe:98:00:4f:fa:7a:2c:0d:5b:b8: 33:6b:1f:5d:af:a2:9a:e0:a5:9c:74:55:9e:8f:72: 58:a5:bc:6f:cc:95:57:1e:69:a6:92:be:17:bc:3e: d7:ff:76:02:e0:c8:bc:4a:8e:63:d4:a5:e7:63:f1: ff:cd:36:27:d8:15:8a:7a:65:2d:e0:f9:f8:46:68: 50:68:ef:7c:67:36:6c:09:80:03:5d:36:c5:f1:11: 92:76:f8:41:ea:b7:03:67:3d:f1:e6:dd:33:03:f7: 6c:6f:6f:0e:3c:86:42:d0:84:a6:e1:f8:44:89:05: a7:34:ca:de:1f:64:2b:53:d3:a8:94:5c:83:df:39: 0d:21:a3:c9:aa:ca:f8:69:03:6f:bd:a1:f1:38:e6: 94:11:c7:a8:79:92:25:4e:c8:ba:99:64:51:37:d4: a1:f3:d3:91:77:db:5e:b7:19:8d:92:51:6a:89:50: 92:bd:65:42:45:b7:3e:bf:2d:be:4f:6c:cb:6c:2a: 4b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:67:B9:19:E2:7B:94:73:70:C7:80:7D:EE:8B:E1:7C:C4:65:65:99 X509v3 Authority Key Identifier: keyid:FB:5F:F9:2B:FD:75:2A:0E:65:4B:0E:CC:7B:03:A1:7D:F9:9B:87:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5291c7e6-a476-4217-bba3-a592b24d8eb9/2/FB5FF92BFD752A0E654B0ECC7B03A17DF99B87A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a1a07bad3fcf0845bb91d64fddd29022dbb5fe0ad.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5291c7e6-a476-4217-bba3-a592b24d8eb9/2/FB5FF92BFD752A0E654B0ECC7B03A17DF99B87A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:d4:10:c2:5e:d0:2f:41:14:a6:a0:18:c3:90:6f:f5:7c:4c: 9c:10:df:f1:97:26:16:36:c1:04:c1:0b:57:15:07:2a:fc:e7: 86:66:a4:30:08:8b:e4:89:d7:c3:66:35:5e:d9:b6:5f:4a:b1: 51:48:27:b1:11:d4:e6:c2:5a:bc:6c:1a:de:14:bd:f7:bf:19: 4f:ab:88:1d:a6:14:d3:d2:bf:b3:a6:f7:87:81:e9:2a:0c:c1: 5e:2c:b7:25:2c:58:66:28:16:3d:4f:76:27:3c:4d:46:1b:4a: 7e:06:9d:62:11:41:91:3b:8b:2b:83:9c:2f:20:63:97:c8:3a: 02:e6:63:83:74:30:f3:f3:77:52:b6:ad:29:71:bf:ef:06:fa: 7d:22:b1:a5:b4:07:28:92:42:c8:6b:72:74:ea:7c:64:77:cc: 71:29:09:7e:48:7d:bb:19:06:75:7f:42:fc:15:d6:9c:8f:b3: 41:20:c5:a0:11:db:62:10:0a:66:1a:52:60:6f:6b:b1:05:26: 40:e8:83:c5:2c:48:30:a7:86:05:15:bd:1d:43:24:ee:49:33: 29:8c:fc:05:63:37:f0:60:df:aa:55:08:5d:0b:b5:cd:48:44: 34:01:cf:cb:ff:e3:06:e1:fe:0c:68:97:cc:c5:66:8c:3d:3a: 62:94:80:06 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUQBuogtNmSnKiT8AI25qpcxsBaQMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDkwZDhhYmEyYTFhMDdiYWQzZmNmMDg0NWJiOTFkNjRm ZGRkMjkwMjJkYmI1ZmUwYWQwHhcNMjUwNTA3MDg0ODAzWhcNMjUwNTA4MDkwNjAz WjAzMTEwLwYDVQQDEyg1NDY3QjkxOUUyN0I5NDczNzBDNzgwN0RFRThCRTE3Q0M0 NjU2NTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFg5DiboaV9F WTq4mILQ5D13rsmqGv14nrb8uS2t88amej05qWF5ltnsbF4ipYPj9eMtv8t8Nz8e wnwcZK26PP6YAE/6eiwNW7gzax9dr6Ka4KWcdFWej3JYpbxvzJVXHmmmkr4XvD7X /3YC4Mi8So5j1KXnY/H/zTYn2BWKemUt4Pn4RmhQaO98ZzZsCYADXTbF8RGSdvhB 6rcDZz3x5t0zA/dsb28OPIZC0ISm4fhEiQWnNMreH2QrU9OolFyD3zkNIaPJqsr4 aQNvvaHxOOaUEceoeZIlTsi6mWRRN9Sh89ORd9tetxmNklFqiVCSvWVCRbc+vy2+ T2zLbCpLewIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFFRnuRnie5RzcMeAfe6L4XzE ZWWZMB8GA1UdIwQYMBaAFPtf+Sv9dSoOZUsOzHsDoX35m4eoMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUyOTFjN2U2LWE0NzYtNDIxNy1iYmEz LWE1OTJiMjRkOGViOS8yL0ZCNUZGOTJCRkQ3NTJBMEU2NTRCMEVDQzdCMDNBMTdE Rjk5Qjg3QTguY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2Et NGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZWMxNzE1Ny02NmRlLTRhYWItODVlNy0y OGFmNGRlNDMwZTIvZDkwZDhhYmEyYTFhMDdiYWQzZmNmMDg0NWJiOTFkNjRmZGRk MjkwMjJkYmI1ZmUwYWQuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv NTI5MWM3ZTYtYTQ3Ni00MjE3LWJiYTMtYTU5MmIyNGQ4ZWI5LzIvRkI1RkY5MkJG RDc1MkEwRTY1NEIwRUNDN0IwM0ExN0RGOTlCODdBOC5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKXUEMJe 0C9BFKagGMOQb/V8TJwQ3/GXJhY2wQTBC1cVByr854ZmpDAIi+SJ18NmNV7Ztl9K sVFIJ7ER1ObCWrxsGt4Uvfe/GU+riB2mFNPSv7Om94eB6SoMwV4styUsWGYoFj1P dic8TUYbSn4GnWIRQZE7iyuDnC8gY5fIOgLmY4N0MPPzd1K2rSlxv+8G+n0isaW0 ByiSQshrcnTqfGR3zHEpCX5IfbsZBnV/QvwV1pyPs0EgxaAR22IQCmYaUmBva7EF JkDog8UsSDCnhgUVvR1DJO5JMymM/AVjN/Bg36pVCF0Ltc1IRDQBz8v/4wbh/gxo l8zFZow9OmKUgAY= -----END CERTIFICATE-----Generated at Wed May 7 22:21:57 2025 by rpki-client