$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft File: 2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft (raw, json) Hash identifier: 8r+GA4z9z2+UedROUvN5lqgsw75Mp8eQnno7cbQtm8U= Subject key identifier: 92:B4:59:4F:2F:97:AD:4D:DD:F0:7E:F9:32:1A:DD:18:EB:4B:41:94 Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0 Certificate issuer: /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355 Certificate serial: 0410BBE74C6EFC766BDEED330A02CAFB170AF0A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft Manifest number: 03C3 Signing time: Sun 29 Jun 2025 07:08:22 +0000 Manifest this update: Sun 29 Jun 2025 07:03:22 +0000 Manifest next update: Mon 30 Jun 2025 10:34:22 +0000 Files and hashes: 1: 323630323a663939323a39303a3a2f34342d3438203d3e203236303432.roa (hash: MoXC/8DWDCDJNU7C3Mk26mgfoj92Dv/12Z/ZM6kBr4o=) 2: 323630323a663939323a66343a3a2f34382d3438203d3e20323038363939.roa (hash: mMm7sIXO5/HOrFuCVxMLtUjUW7H7tIPfaYADdGLvndY=) 3: 323630323a663939323a66373a3a2f34382d3438203d3e203534363030.roa (hash: mbxs/KyiiXCzMzovQkdebBf0tfpmu0WoGFLW/0GE3wA=) 4: 323630323a663939323a35303a3a2f34342d3438203d3e203430363736.roa (hash: izLerJCXQHRMj4EuHnpJKhCKBCsakjo+L9Seyo/D9Sg=) 5: 323630323a663939323a66333a3a2f34382d3438203d3e203333333837.roa (hash: H4rlObELQ4x8lFTYx1O62Ru3wMsX/PzI3uR609UHR+0=) 6: 323630323a663939323a66353a3a2f34382d3438203d3e20323134323538.roa (hash: fIYxXr7UvbVyg5ErbGlT+osMThoxVt1juRlayE+Ah94=) 7: 323630323a663939323a35303a3a2f34342d3438203d3e20313939393539.roa (hash: s0tjGNQz3a0IJwtqI+yV2w0ziifnk/CWeyQrn3w3/qg=) 8: 323630323a663939323a66613a3a2f34382d3439203d3e203430363736.roa (hash: sRvK25+z4/XzVzRz/NRjDVLoeu4AhidYEGZ8Z4be+vU=) 9: 323630323a663939323a61303a3a2f34342d3438203d3e2030.roa (hash: TsDzPexWiyW7o35YhRgMnmXGuAARZmgF1yTYqL8wkn4=) 10: 323630323a663939323a66363a3a2f34382d3438203d3e203533363637.roa (hash: sENJdG2CAk2ncOxoRbfpkGE6oUC5cWz8NGXE5l1PbdQ=) 11: 323630323a663939323a66663a3a2f34382d3438203d3e203633333930.roa (hash: ofYyhY8QxgV7oA+K00vYAeRxc4dVjV27+J0ru1bGCjk=) 12: 2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl (hash: OtwNe4CzRnNFeZAMvPdynom9Zly/QoSUuYZ033K+kdI=) 13: 323630323a663939323a36303a3a2f34342d3438203d3e20313532393030.roa (hash: HWpzvbc2LzEmXxoT+kul7X4owcauEKJHusM+Ir+9R/w=) 14: 323630323a663939323a66313a3a2f34382d3438203d3e2030.roa (hash: YTwFmzgbdVgh5MV70gadVkuqTLHlIUY2ZnBOY6D4sbY=) 15: 32332e3137302e3231362e302f32342d3234203d3e203538323032.roa (hash: GxalkmsKA3NBmKqpRbD10jaxIIxZkAYcIT4LC7UOrQU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 10:34:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:10:bb:e7:4c:6e:fc:76:6b:de:ed:33:0a:02:ca:fb:17:0a:f0:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355 Validity Not Before: Jun 29 07:03:22 2025 GMT Not After : Jun 30 10:34:22 2025 GMT Subject: CN=92B4594F2F97AD4DDDF07EF9321ADD18EB4B4194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:99:36:af:72:c6:4a:ca:60:5a:fc:bc:14:13: 69:e7:a8:72:e8:32:99:c0:62:6b:a4:ba:1f:d0:cb: 31:5c:25:e6:15:57:a1:a8:bb:0c:da:80:f7:a2:7c: d4:01:e7:b8:c7:3d:f8:01:20:8b:8c:c4:2e:c3:d7: a5:5e:0b:c6:83:0c:b8:aa:96:62:c8:8a:ae:b6:f5: 1f:2b:f4:14:2a:60:1a:70:6c:dc:31:b3:6b:08:86: ea:5f:78:56:b6:01:ca:bb:e3:08:cb:09:1b:ef:1f: a8:c8:f5:56:09:b6:79:91:ba:a5:7b:6b:7f:d9:91: 86:d4:4e:20:42:bb:86:d1:09:c3:6b:98:b7:ed:0e: 04:06:1d:b4:55:77:c9:4c:bb:47:76:f3:da:ec:d0: 07:6e:9f:48:d8:7c:d9:99:5c:ad:06:c1:99:94:cd: 21:ea:80:fc:2c:7a:07:2f:91:4c:2c:3e:36:e8:4a: 10:9c:8f:28:7a:9f:e7:dc:6c:3c:1c:f8:ce:e6:66: 26:4b:71:fb:f2:0f:81:08:78:98:38:0a:23:0d:dd: 36:19:19:51:2c:f9:99:a8:70:0f:42:59:09:47:f9: 5a:6c:96:97:30:1c:0f:7e:cf:57:ef:e7:15:88:5c: ad:de:b0:db:0a:cb:80:7d:ec:91:03:c4:44:4c:5c: ad:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:B4:59:4F:2F:97:AD:4D:DD:F0:7E:F9:32:1A:DD:18:EB:4B:41:94 X509v3 Authority Key Identifier: keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:98:93:11:6b:f0:2b:02:4e:00:c0:87:eb:78:66:36:f6:65: 40:ef:69:0f:5a:cc:6c:04:0d:9b:ef:51:57:22:3f:7e:ea:24: 8b:56:7b:f7:32:a8:1e:83:4a:46:73:f5:06:dc:2f:3d:0e:64: 65:81:04:51:fd:a5:67:c7:cb:95:58:51:3a:e2:ef:8f:06:59: 2d:38:e1:a3:f7:26:11:b7:12:15:57:8a:e5:71:e4:5b:05:ce: b0:f9:b4:d7:43:f3:0c:c7:09:5b:5b:d4:8d:5f:e9:af:95:55: 71:9d:f7:f2:85:6d:9e:ee:26:4e:b1:ce:d4:33:9c:b1:96:45: 44:b4:d8:d6:53:1f:1c:3c:d6:1a:11:8f:c0:9a:ca:a6:09:65: b6:eb:3a:93:90:35:7b:8e:4d:18:65:a2:c7:82:31:5d:49:66: 77:e7:5e:c0:f7:f5:7f:50:b8:8b:40:2a:03:e1:bf:68:02:8d: 38:59:eb:d8:02:34:d6:77:63:9f:ca:f1:13:a9:d6:d9:a5:46: 3d:12:e5:50:f7:e3:6d:a7:0b:9c:5c:98:60:17:30:38:fd:bc: 9b:22:17:65:28:17:37:20:46:3e:da:79:70:9a:1e:c0:f5:79: f2:d0:ec:38:da:a2:e1:85:df:39:4b:f0:02:a8:78:ba:ae:48: 61:d1:3c:85 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUBBC750xu/HZr3u0zCgLK+xcK8KgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFi ODI4MTc2ZmE0MzEwYjYzNTUwHhcNMjUwNjI5MDcwMzIyWhcNMjUwNjMwMTAzNDIy WjAzMTEwLwYDVQQDEyg5MkI0NTk0RjJGOTdBRDRERERGMDdFRjkzMjFBREQxOEVC NEI0MTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5k2r3LGSspg Wvy8FBNp56hy6DKZwGJrpLof0MsxXCXmFVehqLsM2oD3onzUAee4xz34ASCLjMQu w9elXgvGgwy4qpZiyIqutvUfK/QUKmAacGzcMbNrCIbqX3hWtgHKu+MIywkb7x+o yPVWCbZ5kbqle2t/2ZGG1E4gQruG0QnDa5i37Q4EBh20VXfJTLtHdvPa7NAHbp9I 2HzZmVytBsGZlM0h6oD8LHoHL5FMLD426EoQnI8oep/n3Gw8HPjO5mYmS3H78g+B CHiYOAojDd02GRlRLPmZqHAPQlkJR/labJaXMBwPfs9X7+cViFyt3rDbCsuAfeyR A8RETFytjQIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFJK0WU8vl61N3fB++TIa3Rjr S0GUMB8GA1UdIwQYMBaAFC8PG8Z90rmn4lRWOMFz1ewGDCfQMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5 LTMwOWVkOTdmMzgyNC8xLzJGMEYxQkM2N0REMkI5QTdFMjU0NTYzOEMxNzNENUVD MDYwQzI3RDAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It NGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iOTE1ODEwZC1iOTdhLTQ2OTYtOTU1ZC00 OTVkNWQxMmMzYjUvYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFiODI4 MTc2ZmE0MzEwYjYzNTUuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv ODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2YzODI0LzEvMkYwRjFCQzY3 REQyQjlBN0UyNTQ1NjM4QzE3M0Q1RUMwNjBDMjdEMC5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJKYkxFr 8CsCTgDAh+t4Zjb2ZUDvaQ9azGwEDZvvUVciP37qJItWe/cyqB6DSkZz9QbcLz0O ZGWBBFH9pWfHy5VYUTri748GWS044aP3JhG3EhVXiuVx5FsFzrD5tNdD8wzHCVtb 1I1f6a+VVXGd9/KFbZ7uJk6xztQznLGWRUS02NZTHxw81hoRj8CayqYJZbbrOpOQ NXuOTRhloseCMV1JZnfnXsD39X9QuItAKgPhv2gCjThZ69gCNNZ3Y5/K8ROp1tml Rj0S5VD3422nC5xcmGAXMDj9vJsiF2UoFzcgRj7aeXCaHsD1efLQ7DjaouGF3zlL 8AKoeLquSGHRPIU= -----END CERTIFICATE-----Generated at Sun Jun 29 10:20:27 2025 by rpki-client