$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft File: 6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft (raw, json) Hash identifier: O//Qbe2ibpVugs+rKn5ixZLyH2O5Su+gkeytPTGv9jw= Subject key identifier: 25:79:6F:CB:F7:29:D2:3A:A6:04:12:76:82:02:95:A8:78:C8:01:0D Authority key identifier: 6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA Certificate issuer: /CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7 Certificate serial: 55BC6E895040775B568133DBAF08D49F3D354511 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft Manifest number: 03AA Signing time: Sat 23 Aug 2025 16:10:26 +0000 Manifest this update: Sat 23 Aug 2025 16:05:26 +0000 Manifest next update: Sun 24 Aug 2025 17:28:26 +0000 Files and hashes: 1: 3139382e3133352e3136392e302f32342d3234203d3e20333936393933.roa (hash: ds98Ml9DDwJOnbFWnKuYftmXTBL5e6vB9e43egQhGMs=) 2: 6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl (hash: 8nlcg8PSvd5AS9HLlW6YN6tYV4Ryl+fsqYude7rm4rc=) 3: EEF3EC40152A747D52835AE8973E7DC8C193A840.cer (hash: HGmIGZLAwtENWMckwsQ8hWTMC9jCNzhQYJENgR6PUlg=) 4: 323630323a666136653a3a2f33362d3336203d3e203133363436.roa (hash: VGLKsgogi2I3ngbX4zz98KwF+ce4xUWbXael6VtJ/R8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 17:28:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:bc:6e:89:50:40:77:5b:56:81:33:db:af:08:d4:9f:3d:35:45:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7 Validity Not Before: Aug 23 16:05:26 2025 GMT Not After : Aug 24 17:28:26 2025 GMT Subject: CN=25796FCBF729D23AA6041276820295A878C8010D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a4:f4:d8:bc:de:cb:32:6b:89:81:93:42:bc: 5c:d7:60:18:ba:14:c3:c1:e3:ba:3f:0f:18:b7:cd: 07:06:7f:99:24:6f:ef:97:ed:e9:3d:0d:17:3c:ac: 75:c9:62:f8:bc:8d:4d:a8:d8:e1:52:89:de:35:e0: c7:f5:e8:03:bc:ed:53:0b:d3:ba:49:b0:17:3e:17: 30:71:39:c5:37:9f:e0:2a:0d:db:65:64:7c:0e:c0: 55:cb:e7:e6:05:3c:14:fd:c8:65:8f:6b:72:cf:f3: 3d:ad:0a:50:0d:a5:36:2a:31:40:ef:26:98:39:77: 23:90:f4:ce:03:7f:4d:16:4a:e9:23:27:e3:52:b3: 95:4f:2a:b3:96:b7:86:4e:74:a7:b6:9c:1d:0a:ca: 16:52:e9:96:1c:f5:96:c1:a4:da:ca:f4:43:5c:51: da:da:23:53:a5:d3:a2:0b:82:57:62:d4:b4:14:54: 8f:78:ec:d9:8b:90:28:35:b9:3a:41:a0:ee:91:a1: c9:29:14:1a:7e:18:2e:03:60:f5:4b:b3:07:bf:ea: 48:b3:2e:26:a2:e8:6f:b3:af:b4:24:c8:42:29:7e: 12:84:89:33:be:dd:af:32:d5:08:5c:f4:94:3e:e4: 3c:4b:b9:31:dd:77:23:47:a4:74:54:41:40:1e:5e: af:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:79:6F:CB:F7:29:D2:3A:A6:04:12:76:82:02:95:A8:78:C8:01:0D X509v3 Authority Key Identifier: keyid:6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:73:82:b4:ad:41:5f:1f:b0:ae:77:e5:92:92:14:51:78:72: 2b:d9:63:59:88:75:fa:b3:23:54:8b:e1:2b:0d:e8:16:0b:60: 50:2b:0a:65:d8:10:84:e6:c9:5b:27:ab:23:10:09:26:78:fe: bd:64:01:3f:c1:6f:95:c7:19:99:63:94:32:cb:2f:18:bc:c9: ba:23:ef:28:e6:24:c7:94:84:b6:e0:6a:1b:8a:6c:cc:2d:e1: b9:65:69:12:ff:98:6d:dd:3d:24:7d:59:c8:df:93:bd:12:c1: b8:f3:98:8f:05:5a:49:ac:d8:fa:3a:b2:bc:fd:71:7c:30:6d: db:e1:b1:e1:58:57:1a:96:cd:62:b7:a4:29:d8:78:f2:28:97: 4c:c8:6e:80:c3:9b:d2:c6:d0:12:f8:84:1a:d1:e4:e1:43:ed: 2a:38:16:45:c4:fb:55:b6:04:95:20:28:c8:af:88:07:e6:9b: d1:52:1f:f0:22:82:c2:1c:51:cf:57:27:59:e1:c8:89:b1:5a: 88:22:0e:91:d1:b9:41:ea:84:9c:49:81:20:e5:c1:db:75:76: 14:3a:57:72:40:5c:66:3a:0a:3e:78:e6:8f:b7:45:81:ee:99: 41:55:51:2e:16:c4:a7:b6:d0:ed:a0:84:10:a4:cb:00:89:17: 6e:1f:b6:5a -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUVbxuiVBAd1tWgTPbrwjUnz01RREwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDM3Mjk5OTcxNTJmZDg0ZmNkYTZkMTkwYzNiMzE5NWIw MjY3OTY2MDExMmJlOWEyZDcwHhcNMjUwODIzMTYwNTI2WhcNMjUwODI0MTcyODI2 WjAzMTEwLwYDVQQDEygyNTc5NkZDQkY3MjlEMjNBQTYwNDEyNzY4MjAyOTVBODc4 QzgwMTBEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKT02LzeyzJr iYGTQrxc12AYuhTDweO6Pw8Yt80HBn+ZJG/vl+3pPQ0XPKx1yWL4vI1NqNjhUone NeDH9egDvO1TC9O6SbAXPhcwcTnFN5/gKg3bZWR8DsBVy+fmBTwU/chlj2tyz/M9 rQpQDaU2KjFA7yaYOXcjkPTOA39NFkrpIyfjUrOVTyqzlreGTnSntpwdCsoWUumW HPWWwaTayvRDXFHa2iNTpdOiC4JXYtS0FFSPeOzZi5AoNbk6QaDukaHJKRQafhgu A2D1S7MHv+pIsy4mouhvs6+0JMhCKX4ShIkzvt2vMtUIXPSUPuQ8S7kx3XcjR6R0 VEFAHl6vDwIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFCV5b8v3KdI6pgQSdoIClah4 yAENMB8GA1UdIwQYMBaAFGpvbsJypevcGCQcLITR2f6UwSWqMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzY2YmQ5MmYxLTQxNWItNDc2NS04YTE2 LWRiZmM0NTkzYzFhOC83LzZBNkY2RUMyNzJBNUVCREMxODI0MUMyQzg0RDFEOUZF OTRDMTI1QUEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTIt NDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84MjlmYjg3Mi0xNWJiLTRhNGUtOWVkOS0y NTk5NjBiMDQ5YmQvNDM3Mjk5OTcxNTJmZDg0ZmNkYTZkMTkwYzNiMzE5NWIwMjY3 OTY2MDExMmJlOWEyZDcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv NjZiZDkyZjEtNDE1Yi00NzY1LThhMTYtZGJmYzQ1OTNjMWE4LzcvNkE2RjZFQzI3 MkE1RUJEQzE4MjQxQzJDODREMUQ5RkU5NEMxMjVBQS5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJFzgrSt QV8fsK535ZKSFFF4civZY1mIdfqzI1SL4SsN6BYLYFArCmXYEITmyVsnqyMQCSZ4 /r1kAT/Bb5XHGZljlDLLLxi8yboj7yjmJMeUhLbgahuKbMwt4bllaRL/mG3dPSR9 Wcjfk70SwbjzmI8FWkms2Po6srz9cXwwbdvhseFYVxqWzWK3pCnYePIol0zIboDD m9LG0BL4hBrR5OFD7So4FkXE+1W2BJUgKMiviAfmm9FSH/AigsIcUc9XJ1nhyImx WogiDpHRuUHqhJxJgSDlwdt1dhQ6V3JAXGY6Cj545o+3RYHumUFVUS4WxKe20O2g hBCkywCJF24ftlo= -----END CERTIFICATE-----Generated at Sun Aug 24 08:43:24 2025 by rpki-client