$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.mft File: D70A91D89E34C7A20009B1E160FB6C627063630C.mft (raw, json) Hash identifier: 1lvevSoQQ8O/TTGWbFoKLsLAVMmKEJi+aEMqnIvUauc= Subject key identifier: B0:CD:74:67:D8:7E:B2:D2:BC:6E:17:78:60:2C:FF:A3:83:F8:EB:2C Authority key identifier: D7:0A:91:D8:9E:34:C7:A2:00:09:B1:E1:60:FB:6C:62:70:63:63:0C Certificate issuer: /CN=ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d Certificate serial: 6377D181B3138304C5B031888E36238698BD64FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.mft Manifest number: 0238 Signing time: Fri 22 Aug 2025 18:42:19 +0000 Manifest this update: Fri 22 Aug 2025 18:37:19 +0000 Manifest next update: Sat 23 Aug 2025 21:31:19 +0000 Files and hashes: 1: 32332e3138332e3133362e302f32342d3234203d3e2030.roa (hash: swtuTdCu9qwtIFReZr0cVz+AYUZ4/a/i2nv3LPMJAJ8=) 2: 323630323a663838323a3a2f33362d3438203d3e20343031323138.roa (hash: Dizjuv2g3xNyGUDZ8X1oRA6GQacDJJP6dGAQzPkf04o=) 3: D70A91D89E34C7A20009B1E160FB6C627063630C.crl (hash: W8TS2ca42YX/coF/vqzvXx/hPsa/LLX6oCoi7wi0U5g=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.crl rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Aug 2025 21:31:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:77:d1:81:b3:13:83:04:c5:b0:31:88:8e:36:23:86:98:bd:64:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d Validity Not Before: Aug 22 18:37:19 2025 GMT Not After : Aug 23 21:31:19 2025 GMT Subject: CN=B0CD7467D87EB2D2BC6E1778602CFFA383F8EB2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:05:b3:36:45:7b:97:67:d2:b2:e4:50:06:a7: 80:a4:23:40:70:1c:76:cf:0d:d3:fb:3b:93:36:d1: bb:d7:0b:56:94:03:29:48:85:fa:14:2b:f7:7f:0e: 83:e1:9a:97:c5:99:44:98:ec:fa:aa:68:96:34:c4: 81:f5:25:fc:36:7b:79:32:22:b9:55:ba:fe:87:2d: 66:cc:41:dd:41:3d:cc:ec:33:42:78:52:75:5e:b9: 92:ce:0c:c7:5f:40:22:b1:0f:3b:1a:97:1f:21:71: a5:31:e0:e8:f6:e8:52:9c:0b:39:de:90:19:a6:98: 60:a4:56:4f:f9:48:37:81:c5:f2:fc:8f:62:e4:23: f2:cb:0a:29:a9:62:a7:34:5e:7a:a6:48:1c:2e:7e: c3:23:a5:39:01:08:a3:4c:af:99:7a:ff:00:e4:47: 62:c4:6e:51:d7:14:82:6e:a4:e5:ff:59:2d:24:f9: 1d:45:b3:5d:e9:d2:8f:44:54:a0:f1:ad:66:34:51: 81:24:ce:82:79:d4:88:52:7e:48:31:2c:a0:c2:73: 82:2a:ee:83:fe:10:01:87:2c:cb:bc:f0:30:d9:09: 90:0f:16:4d:c3:b8:33:66:82:22:0c:fe:ff:a8:bf: d2:6d:c2:a2:61:df:c4:db:33:a7:72:3f:7a:c7:a7: b3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:CD:74:67:D8:7E:B2:D2:BC:6E:17:78:60:2C:FF:A3:83:F8:EB:2C X509v3 Authority Key Identifier: keyid:D7:0A:91:D8:9E:34:C7:A2:00:09:B1:E1:60:FB:6C:62:70:63:63:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:b5:94:6b:65:fc:ad:86:2c:c4:ed:36:26:aa:e6:48:ec:cf: ad:f7:22:5b:ce:3c:87:c1:fb:00:9b:99:6f:bd:79:60:13:06: 78:87:05:51:8d:91:6e:70:55:2b:59:3b:ba:4c:71:be:5c:34: a4:6d:fc:50:46:41:4b:41:a4:b9:f6:8c:65:cb:77:3b:51:ab: 0e:47:5a:e8:e1:c3:0c:0e:e6:e3:1c:25:22:a9:a4:85:03:78: 49:c3:fa:6f:68:15:09:37:09:96:44:d0:04:d2:32:ec:71:0b: 05:72:b0:bf:c7:47:ff:31:12:54:af:bf:ac:65:ec:cc:42:30: a4:8d:4b:5e:bd:40:3c:0d:3c:f0:f6:7f:7d:72:c0:35:4c:64: a8:7e:f4:0e:eb:fa:16:f5:fe:5d:78:30:e3:42:df:de:26:08: bf:38:f7:95:44:31:84:8b:92:25:17:c6:15:0e:70:3f:a8:be: cf:80:50:ea:ce:3b:11:b2:74:d9:ba:a2:40:17:37:30:6f:b8: b9:f0:ca:36:0d:3f:19:e9:99:48:0d:7f:e5:26:00:4a:7a:6d: e3:d1:0d:e8:78:91:41:34:01:1d:9b:0a:63:fa:16:22:ec:bb: e7:0b:2f:55:36:e5:b2:57:0a:39:3e:ca:8b:16:56:33:2c:67: 56:3a:d0:27 -----BEGIN CERTIFICATE----- MIIF2zCCBMOgAwIBAgIUY3fRgbMTgwTFsDGIjjYjhpi9ZPswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYmE1OWMxNWI5Nzc3YTRhNTI3MGM5YjdhNTg0ZTQ2OTc4 ZTA5YTdiZDJkMTU0YmZhOWQwHhcNMjUwODIyMTgzNzE5WhcNMjUwODIzMjEzMTE5 WjAzMTEwLwYDVQQDEyhCMENENzQ2N0Q4N0VCMkQyQkM2RTE3Nzg2MDJDRkZBMzgz RjhFQjJDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQWzNkV7l2fS suRQBqeApCNAcBx2zw3T+zuTNtG71wtWlAMpSIX6FCv3fw6D4ZqXxZlEmOz6qmiW NMSB9SX8Nnt5MiK5Vbr+hy1mzEHdQT3M7DNCeFJ1XrmSzgzHX0AisQ87GpcfIXGl MeDo9uhSnAs53pAZpphgpFZP+Ug3gcXy/I9i5CPyywopqWKnNF56pkgcLn7DI6U5 AQijTK+Zev8A5EdixG5R1xSCbqTl/1ktJPkdRbNd6dKPRFSg8a1mNFGBJM6CedSI Un5IMSygwnOCKu6D/hABhyzLvPAw2QmQDxZNw7gzZoIiDP7/qL/SbcKiYd/E2zOn cj96x6ezZQIDAQABo4IC2zCCAtcwHQYDVR0OBBYEFLDNdGfYfrLSvG4XeGAs/6OD +OssMB8GA1UdIwQYMBaAFNcKkdieNMeiAAmx4WD7bGJwY2MMMA4GA1UdDwEB/wQE AwIHgDCBlwYDVR0fBIGPMIGMMIGJoIGGoIGDhoGAcnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZTZlZGVlYy0wOGJhLTRjZGUtODk3 OS00ZmFlYTRiMWJjMTIvMjAvRDcwQTkxRDg5RTM0QzdBMjAwMDlCMUUxNjBGQjZD NjI3MDYzNjMwQy5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB 03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlm MC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzMyNjE5ZmY5LTRhNDYtNGU5My1hOWI1 LWRkYTJhMzNhOWZmZC9iYTU5YzE1Yjk3NzdhNGE1MjcwYzliN2E1ODRlNDY5Nzhl MDlhN2JkMmQxNTRiZmE5ZC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEF BQcwC4aBgHJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvYWU2ZWRlZWMtMDhiYS00Y2RlLTg5NzktNGZhZWE0YjFiYzEyLzIwL0Q3MEE5 MUQ4OUUzNEM3QTIwMDA5QjFFMTYwRkI2QzYyNzA2MzYzMEMubWZ0MBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQC AAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAa tZRrZfythizE7TYmquZI7M+t9yJbzjyHwfsAm5lvvXlgEwZ4hwVRjZFucFUrWTu6 THG+XDSkbfxQRkFLQaS59oxly3c7UasOR1ro4cMMDubjHCUiqaSFA3hJw/pvaBUJ NwmWRNAE0jLscQsFcrC/x0f/MRJUr7+sZezMQjCkjUtevUA8DTzw9n99csA1TGSo fvQO6/oW9f5deDDjQt/eJgi/OPeVRDGEi5IlF8YVDnA/qL7PgFDqzjsRsnTZuqJA Fzcwb7i58Mo2DT8Z6ZlIDX/lJgBKem3j0Q3oeJFBNAEdmwpj+hYi7LvnCy9VNuWy Vwo5PsqLFlYzLGdWOtAn -----END CERTIFICATE-----Generated at Sat Aug 23 09:47:52 2025 by rpki-client