$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5291c7e6-a476-4217-bba3-a592b24d8eb9/2/FB5FF92BFD752A0E654B0ECC7B03A17DF99B87A8.mft File: FB5FF92BFD752A0E654B0ECC7B03A17DF99B87A8.mft (raw, json) Hash identifier: d5x5yc0JGhTjPylaZiF6s9+tbx3vXD1j2p+TQ1uHXjM= Subject key identifier: C3:31:FD:C7:37:1D:77:9C:1A:A6:C2:1E:44:6E:CE:B9:B6:27:2D:53 Authority key identifier: FB:5F:F9:2B:FD:75:2A:0E:65:4B:0E:CC:7B:03:A1:7D:F9:9B:87:A8 Certificate issuer: /CN=d90d8aba2a1a07bad3fcf0845bb91d64fddd29022dbb5fe0ad Certificate serial: 1578C0CA62816BD30BF63823FFB819151BACFA37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a1a07bad3fcf0845bb91d64fddd29022dbb5fe0ad.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5291c7e6-a476-4217-bba3-a592b24d8eb9/2/FB5FF92BFD752A0E654B0ECC7B03A17DF99B87A8.mft Manifest number: D9 Signing time: Sun 24 Aug 2025 02:11:46 +0000 Manifest this update: Sun 24 Aug 2025 02:06:46 +0000 Manifest next update: Mon 25 Aug 2025 06:04:46 +0000 Files and hashes: 1: FB5FF92BFD752A0E654B0ECC7B03A17DF99B87A8.crl (hash: oTJF7pHr7S0c9+0fOQJf1UtEQkeE4BGlM3NFvsGyAZE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5291c7e6-a476-4217-bba3-a592b24d8eb9/2/FB5FF92BFD752A0E654B0ECC7B03A17DF99B87A8.crl rsync://rsync.paas.rpki.ripe.net/repository/5291c7e6-a476-4217-bba3-a592b24d8eb9/2/FB5FF92BFD752A0E654B0ECC7B03A17DF99B87A8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a1a07bad3fcf0845bb91d64fddd29022dbb5fe0ad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 06:04:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:78:c0:ca:62:81:6b:d3:0b:f6:38:23:ff:b8:19:15:1b:ac:fa:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d90d8aba2a1a07bad3fcf0845bb91d64fddd29022dbb5fe0ad Validity Not Before: Aug 24 02:06:46 2025 GMT Not After : Aug 25 06:04:46 2025 GMT Subject: CN=C331FDC7371D779C1AA6C21E446ECEB9B6272D53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c5:ef:a3:cd:8a:6b:8b:01:6b:86:c8:5c:0a: 7d:dc:6c:f7:d6:21:3a:f9:ec:1f:d0:84:c0:34:42: 15:70:df:7c:43:b7:5b:e8:ed:7e:a9:ba:6f:83:14: e6:90:00:93:96:0a:65:88:34:1e:91:17:41:b8:96: 93:ef:a4:bc:d1:3d:16:8e:82:86:d5:bd:fe:c8:51: 65:8e:68:2e:11:f2:dc:06:08:c3:7e:c2:a6:ff:da: 39:66:f6:57:fe:18:c3:83:f6:f1:14:10:8b:42:e1: 8f:e5:79:73:61:79:4a:16:be:6e:39:04:57:b5:7e: 50:40:6f:42:b2:48:da:c1:67:dc:58:43:a0:fa:c9: e1:ac:b3:74:72:70:86:47:53:99:49:59:f7:3f:97: 4d:39:90:bc:82:ed:a1:99:10:25:f4:bd:89:0c:ab: 8a:18:78:76:4e:55:71:16:36:9c:eb:aa:50:02:c0: da:71:7c:96:b6:64:dd:6f:b9:d8:5f:09:74:f7:06: 1c:cf:66:5d:5e:0f:82:ae:17:b8:b3:23:4c:fb:a5: fe:28:41:5c:9b:76:15:e8:90:69:f7:24:aa:c9:5a: 2a:d0:f8:f4:0f:56:d1:e6:aa:15:7e:4a:13:27:a7: 7d:83:2c:f5:72:ee:1d:68:c6:8f:dd:e4:12:74:35: b1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:31:FD:C7:37:1D:77:9C:1A:A6:C2:1E:44:6E:CE:B9:B6:27:2D:53 X509v3 Authority Key Identifier: keyid:FB:5F:F9:2B:FD:75:2A:0E:65:4B:0E:CC:7B:03:A1:7D:F9:9B:87:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5291c7e6-a476-4217-bba3-a592b24d8eb9/2/FB5FF92BFD752A0E654B0ECC7B03A17DF99B87A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a1a07bad3fcf0845bb91d64fddd29022dbb5fe0ad.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5291c7e6-a476-4217-bba3-a592b24d8eb9/2/FB5FF92BFD752A0E654B0ECC7B03A17DF99B87A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:c6:0c:fb:5e:10:f8:01:70:d6:5a:46:dd:3c:00:aa:55:96: cf:d4:79:87:b5:5e:02:31:3b:d4:6b:2b:74:5d:2e:6e:8a:66: c0:a2:91:70:3e:ea:53:39:2c:1f:92:1e:da:4b:63:b7:b8:3f: bd:92:20:b1:6b:6f:07:86:47:7b:f0:3f:2e:41:4f:d7:ef:0e: 0b:fd:35:fd:48:ae:dd:93:04:b7:27:eb:7b:4f:66:e4:03:a9: 5f:d9:a0:f7:e0:d3:df:aa:f0:51:d7:55:5c:40:b2:34:e6:86: 7a:1d:86:37:b4:68:96:35:76:b1:8d:e9:18:d4:da:24:7a:5f: 8e:3e:cc:0a:74:86:e5:a3:86:08:17:d1:87:e4:f9:d5:b5:ad: 7b:11:6f:99:2c:1d:60:aa:a0:d7:e0:c0:87:42:d2:2c:58:a3: 30:cb:ac:84:49:24:ea:1c:45:55:fe:c8:42:74:48:f5:0b:da: 53:b9:ec:f6:77:de:ab:a1:29:74:4f:fe:a3:24:cd:7a:fc:43: 50:c8:d6:0b:1c:42:ee:95:70:46:c7:a3:1c:9b:ec:66:87:f6: 81:ce:39:bc:d5:09:56:19:4c:fe:01:fa:c7:75:7a:e4:82:e0: 91:4c:b7:23:07:50:bd:df:6a:bd:d4:51:7b:e9:a2:d1:bd:57: d8:49:38:38 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUFXjAymKBa9ML9jgj/7gZFRus+jcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDkwZDhhYmEyYTFhMDdiYWQzZmNmMDg0NWJiOTFkNjRm ZGRkMjkwMjJkYmI1ZmUwYWQwHhcNMjUwODI0MDIwNjQ2WhcNMjUwODI1MDYwNDQ2 WjAzMTEwLwYDVQQDEyhDMzMxRkRDNzM3MUQ3NzlDMUFBNkMyMUU0NDZFQ0VCOUI2 MjcyRDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscXvo82Ka4sB a4bIXAp93Gz31iE6+ewf0ITANEIVcN98Q7db6O1+qbpvgxTmkACTlgpliDQekRdB uJaT76S80T0WjoKG1b3+yFFljmguEfLcBgjDfsKm/9o5ZvZX/hjDg/bxFBCLQuGP 5XlzYXlKFr5uOQRXtX5QQG9CskjawWfcWEOg+snhrLN0cnCGR1OZSVn3P5dNOZC8 gu2hmRAl9L2JDKuKGHh2TlVxFjac66pQAsDacXyWtmTdb7nYXwl09wYcz2ZdXg+C rhe4syNM+6X+KEFcm3YV6JBp9ySqyVoq0Pj0D1bR5qoVfkoTJ6d9gyz1cu4daMaP 3eQSdDWx4QIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFMMx/cc3HXecGqbCHkRuzrm2 Jy1TMB8GA1UdIwQYMBaAFPtf+Sv9dSoOZUsOzHsDoX35m4eoMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUyOTFjN2U2LWE0NzYtNDIxNy1iYmEz LWE1OTJiMjRkOGViOS8yL0ZCNUZGOTJCRkQ3NTJBMEU2NTRCMEVDQzdCMDNBMTdE Rjk5Qjg3QTguY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2Et NGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZWMxNzE1Ny02NmRlLTRhYWItODVlNy0y OGFmNGRlNDMwZTIvZDkwZDhhYmEyYTFhMDdiYWQzZmNmMDg0NWJiOTFkNjRmZGRk MjkwMjJkYmI1ZmUwYWQuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv NTI5MWM3ZTYtYTQ3Ni00MjE3LWJiYTMtYTU5MmIyNGQ4ZWI5LzIvRkI1RkY5MkJG RDc1MkEwRTY1NEIwRUNDN0IwM0ExN0RGOTlCODdBOC5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHDGDPte EPgBcNZaRt08AKpVls/UeYe1XgIxO9RrK3RdLm6KZsCikXA+6lM5LB+SHtpLY7e4 P72SILFrbweGR3vwPy5BT9fvDgv9Nf1Irt2TBLcn63tPZuQDqV/ZoPfg09+q8FHX VVxAsjTmhnodhje0aJY1drGN6RjU2iR6X44+zAp0huWjhggX0Yfk+dW1rXsRb5ks HWCqoNfgwIdC0ixYozDLrIRJJOocRVX+yEJ0SPUL2lO57PZ33quhKXRP/qMkzXr8 Q1DI1gscQu6VcEbHoxyb7GaH9oHOObzVCVYZTP4B+sd1euSC4JFMtyMHUL3far3U UXvpotG9V9hJODg= -----END CERTIFICATE-----Generated at Sun Aug 24 08:55:47 2025 by rpki-client