$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft File: 3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft (raw, json) Hash identifier: R8SYprcJ8JiV9+qe+GMAuZj3q+dFP5KJCPnLPTq/dgU= Subject key identifier: 0F:83:CB:02:E4:DB:FA:A6:21:0A:56:18:59:A8:1A:77:19:0E:56:2B Authority key identifier: 3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A Certificate issuer: /CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b Certificate serial: 6BF98AA1CD9C0156B46DBDCE2D8626D4B72EA0A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft Manifest number: 019B Signing time: Sat 23 Aug 2025 11:21:17 +0000 Manifest this update: Sat 23 Aug 2025 11:16:17 +0000 Manifest next update: Sun 24 Aug 2025 14:24:17 +0000 Files and hashes: 1: 323630323a663764653a3a2f34302d3438203d3e203236393534.roa (hash: dVW6ZUsxUgXCaz0kq7P1NzZswddC3cxPIFG0EovOzUk=) 2: 32332e3139312e34302e302f32342d3234203d3e203236393534.roa (hash: lO4v+9qZpYNTU13Fx5YYbE7NTGKX+3JJpxrHn0W/uvQ=) 3: 3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl (hash: nUYvDIDxIEMIs5ybOL9VWp9MPZyHHPlkqvCHIRmzmQA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:24:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:f9:8a:a1:cd:9c:01:56:b4:6d:bd:ce:2d:86:26:d4:b7:2e:a0:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b Validity Not Before: Aug 23 11:16:17 2025 GMT Not After : Aug 24 14:24:17 2025 GMT Subject: CN=0F83CB02E4DBFAA6210A561859A81A77190E562B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f6:d0:8c:14:a1:9e:36:47:42:a5:54:55:ef: 8f:fc:93:ec:78:63:27:bb:7d:b5:49:1c:17:4e:ba: 44:c5:e6:8c:7c:c0:b8:bf:67:e5:0a:76:32:8f:06: ab:3f:2d:f0:4f:15:c6:1c:b5:09:02:75:ae:51:13: 3d:6f:3f:ac:41:20:0b:d2:8e:2f:21:aa:77:33:7c: 83:b0:37:26:bd:cc:c5:a9:c0:6b:97:99:07:e8:10: 7c:3e:6b:0f:6a:fa:1d:64:a6:8c:c6:28:ac:05:8f: a3:2c:7b:d1:62:16:dd:f7:e9:eb:86:89:73:e2:cf: fe:45:4e:dc:5c:b9:e2:bd:cb:7b:5d:60:a6:82:42: 22:87:22:ba:5f:ff:35:07:b9:03:e2:99:b8:ee:28: 27:9c:42:8f:e2:ad:cc:25:2f:05:53:ff:f6:78:ae: 88:4d:df:a8:66:b5:18:b3:4e:b6:f6:d6:c2:92:c9: d7:c4:68:3f:ad:6d:0c:9e:c1:53:cf:63:fd:c0:57: bb:47:ca:4b:21:e7:e6:cc:85:cc:44:c0:76:a2:29: a6:83:7a:35:68:fc:ec:19:2d:5a:8e:0d:82:cb:60: ca:c8:d2:9c:da:ac:1d:ff:42:f2:ca:d3:43:41:7f: dd:e0:27:cd:6b:aa:3d:32:40:fe:4b:38:0a:a5:a7: 78:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:83:CB:02:E4:DB:FA:A6:21:0A:56:18:59:A8:1A:77:19:0E:56:2B X509v3 Authority Key Identifier: keyid:3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:56:4f:4a:7b:c1:35:ed:dc:e7:b1:88:c9:62:45:a0:b5:82: ae:b7:a2:62:f0:69:95:9c:ce:aa:f0:2f:7c:0f:18:8e:83:2b: c3:d2:d4:f4:c5:2b:4c:41:51:ea:17:42:04:b7:25:58:c3:2d: 88:97:33:d1:34:16:8a:6b:48:f9:0b:84:e7:3e:84:9b:12:26: f4:d1:87:ee:e8:9a:40:ce:7c:19:f6:2e:1d:e2:19:1e:c0:26: 55:a2:46:9e:2f:ff:8c:1d:d8:f8:b9:dd:bf:53:34:2d:99:d9: fa:a8:ef:0b:6d:f6:49:6d:60:7f:c9:eb:1a:fd:3e:45:15:82: 8a:f0:79:e2:0c:56:c3:d1:b0:62:65:ba:3e:53:fe:0c:68:25: ef:af:dc:64:97:dc:a2:40:60:46:be:74:eb:79:6b:39:ef:41: aa:5d:b3:fc:88:95:36:a0:c6:a7:a1:ad:69:60:5f:f7:33:ed: 8e:a2:cd:57:e7:38:89:1d:8a:42:42:c0:cd:a4:36:17:19:da: ec:20:5a:2f:6c:eb:79:d6:33:fb:86:53:c4:fa:e1:7a:b9:e5: e8:b5:a9:44:2c:a0:b2:57:32:7a:4f:ef:22:4f:fa:4e:cf:ed: f4:1a:28:b2:7a:c0:85:c6:2c:cb:db:d7:40:c1:90:ec:36:a3: 4e:91:2d:88 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUa/mKoc2cAVa0bb3OLYYm1LcuoKQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMzI0ZmZlMzlhOThhMDE0NmI1MDNkOGEwMTVjYTJjMmU3 NjdjZjNkMGI5ZmRlNjIzMWIwHhcNMjUwODIzMTExNjE3WhcNMjUwODI0MTQyNDE3 WjAzMTEwLwYDVQQDEygwRjgzQ0IwMkU0REJGQUE2MjEwQTU2MTg1OUE4MUE3NzE5 MEU1NjJCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/bQjBShnjZH QqVUVe+P/JPseGMnu321SRwXTrpExeaMfMC4v2flCnYyjwarPy3wTxXGHLUJAnWu URM9bz+sQSAL0o4vIap3M3yDsDcmvczFqcBrl5kH6BB8PmsPavodZKaMxiisBY+j LHvRYhbd9+nrholz4s/+RU7cXLnivct7XWCmgkIihyK6X/81B7kD4pm47ignnEKP 4q3MJS8FU//2eK6ITd+oZrUYs0629tbCksnXxGg/rW0MnsFTz2P9wFe7R8pLIefm zIXMRMB2oimmg3o1aPzsGS1ajg2Cy2DKyNKc2qwd/0LyytNDQX/d4CfNa6o9MkD+ SzgKpad4jwIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFA+DywLk2/qmIQpWGFmoGncZ DlYrMB8GA1UdIwQYMBaAFD/NOoOeoUF/2Yjz3f0EVBl/qvR6MA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5 LTBhYjcwZTQ4MTViYi8xLzNGQ0QzQTgzOUVBMTQxN0ZEOTg4RjNEREZEMDQ1NDE5 N0ZBQUY0N0EuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYt NDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81MWNkOTlmNy0yZjQyLTRkZWMtYjJjNi0w OWJhZmFhMzc4MGUvMzI0ZmZlMzlhOThhMDE0NmI1MDNkOGEwMTVjYTJjMmU3Njdj ZjNkMGI5ZmRlNjIzMWIuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv NzNiOGVjMDEtOGJhNS00NzlmLWEyMjktMGFiNzBlNDgxNWJiLzEvM0ZDRDNBODM5 RUExNDE3RkQ5ODhGM0RERkQwNDU0MTk3RkFBRjQ3QS5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAtWT0p7 wTXt3OexiMliRaC1gq63omLwaZWczqrwL3wPGI6DK8PS1PTFK0xBUeoXQgS3JVjD LYiXM9E0FoprSPkLhOc+hJsSJvTRh+7omkDOfBn2Lh3iGR7AJlWiRp4v/4wd2Pi5 3b9TNC2Z2fqo7wtt9kltYH/J6xr9PkUVgorweeIMVsPRsGJluj5T/gxoJe+v3GSX 3KJAYEa+dOt5aznvQapds/yIlTagxqehrWlgX/cz7Y6izVfnOIkdikJCwM2kNhcZ 2uwgWi9s63nWM/uGU8T64Xq55ei1qUQsoLJXMnpP7yJP+k7P7fQaKLJ6wIXGLMvb 10DBkOw2o06RLYg= -----END CERTIFICATE-----Generated at Sun Aug 24 02:53:16 2025 by rpki-client