$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft File: 3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft (raw, json) Hash identifier: OeURwv4B35AquRcvNN/dbT74T9dbe5FhARD+B/aLyV0= Subject key identifier: AD:C7:9A:D1:95:A3:C0:44:D8:16:3D:F3:97:DB:0A:1C:73:DD:AD:F0 Authority key identifier: 3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A Certificate issuer: /CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b Certificate serial: 423335B9AF03FE9E015D63DB486C3F1CB01DE553 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft Manifest number: 01EA Signing time: Mon 20 Oct 2025 06:43:32 +0000 Manifest this update: Mon 20 Oct 2025 06:38:32 +0000 Manifest next update: Tue 21 Oct 2025 09:41:32 +0000 Files and hashes: 1: 3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl (hash: 7HiAdSKDOBFKxBkcptYRTQ2aGHaC2r+TJshU6yO7jPE=) 2: 3133302e31322e39332e302f32342d3234203d3e203236393534.roa (hash: vVLMMj/up4t8BoR2x4+9T6jLFKzm1RRXCwaLQiGBGUU=) 3: 32332e3139312e34302e302f32342d3234203d3e203236393534.roa (hash: S3jzo3eG6y4PI2K8QRCs4He73uG95vDRz8jaxjn2rIA=) 4: 323630323a663764653a3a2f34302d3438203d3e203236393534.roa (hash: nc0OfcCKdw/6xTqKkcylPBA4tjafxEa+iXIGeRNqKAA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 09:41:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:33:35:b9:af:03:fe:9e:01:5d:63:db:48:6c:3f:1c:b0:1d:e5:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b Validity Not Before: Oct 20 06:38:32 2025 GMT Not After : Oct 21 09:41:32 2025 GMT Subject: CN=ADC79AD195A3C044D8163DF397DB0A1C73DDADF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5d:79:5e:50:f5:bf:cc:33:d2:40:81:36:bb: d8:52:15:83:1f:ac:d7:ee:59:63:cc:6d:5a:26:ec: 51:ca:df:aa:d7:36:d1:8f:6a:c5:9b:94:a6:5c:11: 50:ef:3d:14:5e:78:74:ce:87:a0:65:56:9e:1f:d3: 12:b4:c4:de:32:23:e3:0b:8a:a4:36:51:9e:a2:db: 51:28:99:54:ce:05:f9:03:42:56:92:37:b7:10:26: 95:7a:03:04:52:de:54:6d:bb:96:89:f5:7a:c2:48: 5e:8c:df:90:c3:e7:02:97:0d:e6:19:b1:b3:c3:59: a6:f0:0b:05:0e:09:a1:9c:c7:05:ea:7d:56:21:71: cc:8d:e7:cb:57:bd:ec:22:f6:9a:08:33:76:88:c8: 29:1d:8a:86:95:ff:5b:02:6b:55:f4:be:09:28:fb: a0:c1:80:bb:93:c3:de:29:50:90:81:98:dc:be:27: 0a:df:86:5e:0f:5d:33:a9:f6:6f:24:21:22:01:e8: 87:d2:0e:2d:81:4e:a9:71:d6:c3:ee:b5:47:f8:d1: 20:a8:d2:19:71:4d:8b:db:82:11:10:ca:35:33:63: a5:3d:b6:89:5b:5c:b5:0c:46:e7:76:9a:b0:96:77: 5e:a1:f7:3c:e3:15:3a:ab:00:4c:83:97:c9:88:8a: 2c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:C7:9A:D1:95:A3:C0:44:D8:16:3D:F3:97:DB:0A:1C:73:DD:AD:F0 X509v3 Authority Key Identifier: keyid:3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:ba:bb:28:63:87:a2:48:a6:11:dd:71:87:76:a4:18:a5:5d: da:e0:77:2b:28:b9:47:6d:39:8f:b3:0d:10:05:c3:5c:75:ec: d7:69:e6:ec:e2:e6:0f:d7:6b:67:12:f4:77:71:ad:45:3b:50: a9:a1:f4:8f:2c:46:93:70:c2:ae:c0:32:66:51:ce:3c:bb:ad: 76:5e:ed:91:c7:85:0f:e4:90:1c:7a:9a:c9:17:c7:df:90:eb: c5:94:2e:c1:7d:13:73:66:d9:95:c3:73:53:31:7e:ae:4a:37: 49:fc:2a:62:05:0f:2f:5d:ec:6c:1a:c4:69:2f:12:56:8e:28: 3b:b0:80:55:55:1b:b9:7d:30:55:65:a9:69:56:80:c6:d4:a1: 5d:6a:f4:38:ec:9f:b4:51:5c:7b:cd:73:23:6f:f4:87:52:bc: c2:75:6c:07:fb:cc:e9:5d:50:91:db:99:f2:ce:b9:1f:7e:15: 3e:5c:b8:5f:4c:c3:dc:df:ff:5c:a6:13:05:8f:24:ce:8b:d3: 64:57:60:23:c8:6b:4c:f6:14:fe:c1:62:bd:14:12:7d:e3:59: c5:d9:1e:78:13:3b:bb:b9:ce:cc:a3:6e:f0:9d:82:ea:d0:a1: c2:5b:64:0d:96:21:72:4b:b5:58:05:d3:43:1b:92:e5:49:22: 0b:4d:25:57 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUQjM1ua8D/p4BXWPbSGw/HLAd5VMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMzI0ZmZlMzlhOThhMDE0NmI1MDNkOGEwMTVjYTJjMmU3 NjdjZjNkMGI5ZmRlNjIzMWIwHhcNMjUxMDIwMDYzODMyWhcNMjUxMDIxMDk0MTMy WjAzMTEwLwYDVQQDEyhBREM3OUFEMTk1QTNDMDQ0RDgxNjNERjM5N0RCMEExQzcz RERBREYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuV15XlD1v8wz 0kCBNrvYUhWDH6zX7lljzG1aJuxRyt+q1zbRj2rFm5SmXBFQ7z0UXnh0zoegZVae H9MStMTeMiPjC4qkNlGeottRKJlUzgX5A0JWkje3ECaVegMEUt5UbbuWifV6wkhe jN+Qw+cClw3mGbGzw1mm8AsFDgmhnMcF6n1WIXHMjefLV73sIvaaCDN2iMgpHYqG lf9bAmtV9L4JKPugwYC7k8PeKVCQgZjcvicK34ZeD10zqfZvJCEiAeiH0g4tgU6p cdbD7rVH+NEgqNIZcU2L24IREMo1M2OlPbaJW1y1DEbndpqwlndeofc84xU6qwBM g5fJiIosqQIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFK3HmtGVo8BE2BY985fbChxz 3a3wMB8GA1UdIwQYMBaAFD/NOoOeoUF/2Yjz3f0EVBl/qvR6MA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5 LTBhYjcwZTQ4MTViYi8xLzNGQ0QzQTgzOUVBMTQxN0ZEOTg4RjNEREZEMDQ1NDE5 N0ZBQUY0N0EuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYt NDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81MWNkOTlmNy0yZjQyLTRkZWMtYjJjNi0w OWJhZmFhMzc4MGUvMzI0ZmZlMzlhOThhMDE0NmI1MDNkOGEwMTVjYTJjMmU3Njdj ZjNkMGI5ZmRlNjIzMWIuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv NzNiOGVjMDEtOGJhNS00NzlmLWEyMjktMGFiNzBlNDgxNWJiLzEvM0ZDRDNBODM5 RUExNDE3RkQ5ODhGM0RERkQwNDU0MTk3RkFBRjQ3QS5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFu6uyhj h6JIphHdcYd2pBilXdrgdysouUdtOY+zDRAFw1x17Ndp5uzi5g/Xa2cS9HdxrUU7 UKmh9I8sRpNwwq7AMmZRzjy7rXZe7ZHHhQ/kkBx6mskXx9+Q68WULsF9E3Nm2ZXD c1Mxfq5KN0n8KmIFDy9d7GwaxGkvElaOKDuwgFVVG7l9MFVlqWlWgMbUoV1q9Djs n7RRXHvNcyNv9IdSvMJ1bAf7zOldUJHbmfLOuR9+FT5cuF9Mw9zf/1ymEwWPJM6L 02RXYCPIa0z2FP7BYr0UEn3jWcXZHngTO7u5zsyjbvCdgurQocJbZA2WIXJLtVgF 00MbkuVJIgtNJVc= -----END CERTIFICATE-----Generated at Mon Oct 20 21:32:47 2025 by rpki-client