$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft File: 3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft (raw, json) Hash identifier: uZK0WQ+euFbmDdlkNPMQv+Nti3A0FyyMoRHikyS2kGk= Subject key identifier: 0F:EB:15:BA:C9:8C:2C:86:4B:BB:3A:90:97:19:DC:D9:2C:26:10:24 Authority key identifier: 3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A Certificate issuer: /CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b Certificate serial: 0F06A5BAB6E58EAF33CC5FA9FC06B3E7A3F9E947 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft Manifest number: 0150 Signing time: Sun 29 Jun 2025 10:04:01 +0000 Manifest this update: Sun 29 Jun 2025 09:59:01 +0000 Manifest next update: Mon 30 Jun 2025 13:05:01 +0000 Files and hashes: 1: 3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl (hash: UnfSWwZ8H84XUtvm1RqLQZXe3I5mgKczuSKiQ9qqTcE=) 2: 323630323a663764653a3a2f34302d3438203d3e203236393534.roa (hash: dVW6ZUsxUgXCaz0kq7P1NzZswddC3cxPIFG0EovOzUk=) 3: 32332e3139312e34302e302f32342d3234203d3e203236393534.roa (hash: lO4v+9qZpYNTU13Fx5YYbE7NTGKX+3JJpxrHn0W/uvQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 13:05:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:06:a5:ba:b6:e5:8e:af:33:cc:5f:a9:fc:06:b3:e7:a3:f9:e9:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b Validity Not Before: Jun 29 09:59:01 2025 GMT Not After : Jun 30 13:05:01 2025 GMT Subject: CN=0FEB15BAC98C2C864BBB3A909719DCD92C261024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:0a:27:90:6b:ac:dd:e1:0c:c2:df:86:fe:de: 9d:7e:7d:c0:e6:47:5c:32:40:5c:e5:90:f7:a5:39: cc:e4:40:84:38:8b:a1:6e:2d:f3:45:53:10:03:75: 62:52:5d:7f:8e:96:7f:43:ad:13:a3:77:d8:c6:b8: 16:90:d4:33:d8:df:43:ae:80:8c:e4:90:d6:df:a9: c9:2d:76:cd:96:ab:d8:84:d9:ee:c5:e9:6d:c6:c6: b8:b1:4b:a8:43:54:7c:43:41:bb:e7:de:b4:dc:9e: 94:c5:3c:5a:ff:c8:cf:b6:74:6d:75:38:24:fa:c2: 8f:c6:9a:5a:85:cc:69:51:2e:87:24:a2:87:ac:78: 8d:00:b0:ef:de:2c:f9:25:e4:70:1e:f1:28:59:91: ee:ea:42:00:4a:50:03:6c:ab:b7:10:69:9a:ef:50: 0f:b5:7b:0a:8d:ea:c1:90:80:e9:be:8c:02:c6:73: 7a:92:c9:ca:9c:2a:35:c5:ba:34:d9:0f:a9:a8:fa: ad:b1:54:7b:31:b9:ad:07:e4:22:db:fc:ab:04:29: 03:c8:e0:9f:b4:c2:14:f8:4a:9a:0f:1b:c6:60:d1: 48:39:e6:8c:b1:12:77:18:f3:80:7a:4d:dd:89:38: e4:ad:7f:af:3d:4b:6e:a7:cd:5f:0c:98:af:f0:56: f9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:EB:15:BA:C9:8C:2C:86:4B:BB:3A:90:97:19:DC:D9:2C:26:10:24 X509v3 Authority Key Identifier: keyid:3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:cc:26:d8:8f:34:75:e6:7a:2b:32:3b:75:8c:33:31:4b:e6: de:b3:77:02:f6:43:5e:51:6b:1a:c1:65:0e:c7:51:68:51:ee: 0a:d6:cf:81:9e:a1:41:70:07:22:35:ea:0c:4e:d0:7a:dd:37: 76:dc:a0:d4:6d:d9:cf:e6:d0:64:2f:9e:a1:53:83:fe:6a:13: 9f:d2:d7:a4:03:02:d7:7a:a3:21:1d:9a:2c:59:4a:d0:2a:cf: 3d:7a:1e:4f:83:01:11:62:4e:86:f9:99:69:ea:7d:2c:a9:82: 5b:86:9f:10:ed:7e:1c:ab:96:5c:f9:91:9e:dc:ef:d8:27:de: 7e:71:b6:41:d5:6c:66:3a:b2:41:f6:db:6b:b2:d6:b2:4a:1f: b8:c6:7c:d6:bd:9b:4f:3a:70:f5:93:42:dd:03:b0:06:ed:99: 16:9e:ec:41:49:cb:06:87:68:af:ae:b1:69:3c:2e:06:db:fb: 7d:2b:79:f6:38:f3:5f:53:a3:57:8a:88:05:1d:dd:64:77:6c: d1:73:45:74:58:d8:30:65:1b:21:44:51:51:f9:87:82:9e:40: c2:6d:10:8e:cc:33:a2:3d:61:f3:34:18:39:c0:a1:3d:32:62: 93:ea:49:2f:73:c6:b1:86:97:ff:97:dc:9a:96:70:5d:fb:6d: ec:64:dd:46 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUDwalurbljq8zzF+p/Aaz56P56UcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMzI0ZmZlMzlhOThhMDE0NmI1MDNkOGEwMTVjYTJjMmU3 NjdjZjNkMGI5ZmRlNjIzMWIwHhcNMjUwNjI5MDk1OTAxWhcNMjUwNjMwMTMwNTAx WjAzMTEwLwYDVQQDEygwRkVCMTVCQUM5OEMyQzg2NEJCQjNBOTA5NzE5RENEOTJD MjYxMDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwonkGus3eEM wt+G/t6dfn3A5kdcMkBc5ZD3pTnM5ECEOIuhbi3zRVMQA3ViUl1/jpZ/Q60To3fY xrgWkNQz2N9DroCM5JDW36nJLXbNlqvYhNnuxeltxsa4sUuoQ1R8Q0G759603J6U xTxa/8jPtnRtdTgk+sKPxppahcxpUS6HJKKHrHiNALDv3iz5JeRwHvEoWZHu6kIA SlADbKu3EGma71APtXsKjerBkIDpvowCxnN6ksnKnCo1xbo02Q+pqPqtsVR7Mbmt B+Qi2/yrBCkDyOCftMIU+EqaDxvGYNFIOeaMsRJ3GPOAek3diTjkrX+vPUtup81f DJiv8Fb5IQIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFA/rFbrJjCyGS7s6kJcZ3Nks JhAkMB8GA1UdIwQYMBaAFD/NOoOeoUF/2Yjz3f0EVBl/qvR6MA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5 LTBhYjcwZTQ4MTViYi8xLzNGQ0QzQTgzOUVBMTQxN0ZEOTg4RjNEREZEMDQ1NDE5 N0ZBQUY0N0EuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYt NDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81MWNkOTlmNy0yZjQyLTRkZWMtYjJjNi0w OWJhZmFhMzc4MGUvMzI0ZmZlMzlhOThhMDE0NmI1MDNkOGEwMTVjYTJjMmU3Njdj ZjNkMGI5ZmRlNjIzMWIuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv NzNiOGVjMDEtOGJhNS00NzlmLWEyMjktMGFiNzBlNDgxNWJiLzEvM0ZDRDNBODM5 RUExNDE3RkQ5ODhGM0RERkQwNDU0MTk3RkFBRjQ3QS5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHzMJtiP NHXmeisyO3WMMzFL5t6zdwL2Q15RaxrBZQ7HUWhR7grWz4GeoUFwByI16gxO0Hrd N3bcoNRt2c/m0GQvnqFTg/5qE5/S16QDAtd6oyEdmixZStAqzz16Hk+DARFiTob5 mWnqfSypgluGnxDtfhyrllz5kZ7c79gn3n5xtkHVbGY6skH222uy1rJKH7jGfNa9 m086cPWTQt0DsAbtmRae7EFJywaHaK+usWk8Lgbb+30refY4819To1eKiAUd3WR3 bNFzRXRY2DBlGyFEUVH5h4KeQMJtEI7MM6I9YfM0GDnAoT0yYpPqSS9zxrGGl/+X 3JqWcF37bexk3UY= -----END CERTIFICATE-----Generated at Sun Jun 29 18:45:03 2025 by rpki-client