$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.mft File: D70A91D89E34C7A20009B1E160FB6C627063630C.mft (raw, json) Hash identifier: Za6hw3q3iYKtjuhAIfHjvIUgLkHykHG8BfI1HhZwWB0= Subject key identifier: 0C:E6:DC:8B:99:49:65:5E:A7:57:7C:39:6F:CF:55:43:5F:D8:CA:11 Authority key identifier: D7:0A:91:D8:9E:34:C7:A2:00:09:B1:E1:60:FB:6C:62:70:63:63:0C Certificate issuer: /CN=ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d Certificate serial: 5E703B33672318C082956890B6FB4A2A5B24CBD1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.mft Manifest number: 01AB Signing time: Thu 08 May 2025 21:58:39 +0000 Manifest this update: Thu 08 May 2025 21:53:39 +0000 Manifest next update: Fri 09 May 2025 22:38:39 +0000 Files and hashes: 1: D70A91D89E34C7A20009B1E160FB6C627063630C.crl (hash: cFTLLZC8VAoi74rUNz7GxVxD3Gt+yoZxusxzI/G0HWU=) 2: 323630323a663838323a3a2f33362d3438203d3e20343031323138.roa (hash: 7+OQpnNul6GvEz/TmHkQD01IKA9VIbWseT8LVp2j0nw=) 3: 32332e3138332e3133362e302f32342d3234203d3e2030.roa (hash: swtuTdCu9qwtIFReZr0cVz+AYUZ4/a/i2nv3LPMJAJ8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.crl rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 22:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:70:3b:33:67:23:18:c0:82:95:68:90:b6:fb:4a:2a:5b:24:cb:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d Validity Not Before: May 8 21:53:39 2025 GMT Not After : May 9 22:38:39 2025 GMT Subject: CN=0CE6DC8B9949655EA7577C396FCF55435FD8CA11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e7:76:36:4a:6b:dd:c9:be:93:07:aa:e4:a7: 05:73:4a:ad:75:78:d4:6d:b2:1f:a9:dc:15:de:3c: e9:6c:52:a7:57:b2:38:3a:63:25:7b:bc:30:98:93: cd:0f:d8:7f:59:c0:93:a0:60:53:48:26:7c:4c:4f: 6b:f9:51:2d:c4:db:11:9c:89:4e:2b:20:f4:44:c1: ac:f3:6a:b6:7d:94:63:88:d2:db:0e:25:84:7c:6c: 98:d9:15:2e:a2:14:c5:b1:e9:80:98:76:45:f3:28: a3:4b:4b:21:85:9a:1e:6e:a2:71:68:ea:db:8c:b1: 8f:f5:13:a8:b1:70:c5:90:53:7e:24:18:20:dc:c8: 90:6c:f5:23:fd:3e:75:20:c5:1a:8d:0c:66:62:62: 6e:24:0d:2f:18:a9:1d:6d:fc:34:32:55:1e:b5:fd: 9f:25:c1:aa:45:34:d1:2e:c4:ba:61:fb:1e:bc:e4: b8:06:5b:ba:79:f3:51:3e:a6:66:83:74:bb:ac:fc: 21:f5:15:39:7a:21:f8:0a:46:ce:40:5e:60:05:fe: 09:30:45:64:2e:fa:ab:3c:39:db:80:e9:ba:c6:6b: cf:9c:42:a3:1a:f7:3d:78:e6:12:eb:44:02:01:5d: 9d:94:2a:b6:6a:01:00:15:d7:11:ac:9c:c5:9d:60: b0:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:E6:DC:8B:99:49:65:5E:A7:57:7C:39:6F:CF:55:43:5F:D8:CA:11 X509v3 Authority Key Identifier: keyid:D7:0A:91:D8:9E:34:C7:A2:00:09:B1:E1:60:FB:6C:62:70:63:63:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:bf:af:ed:78:13:b2:6e:7c:59:bd:07:04:e5:bd:ba:bc:dd: b6:fa:f5:0e:83:ff:df:99:24:84:24:6d:c9:15:2b:ee:13:22: 06:4e:e1:97:43:5b:5e:32:52:14:71:67:3c:0d:a6:53:a5:38: 50:2e:6c:14:cd:a0:ac:92:d1:4c:03:9c:c1:70:8d:5a:f3:75: 53:6b:44:6a:af:6e:94:5b:30:e0:0c:55:e5:84:51:73:af:3e: 47:f7:31:ce:4c:72:a7:86:a9:c8:ec:3e:2c:75:ae:9a:8e:71: 36:8f:57:81:f9:0b:a5:4a:e2:e3:f0:e1:6b:a3:fe:b8:a5:13: d8:d7:9c:f7:c3:4c:4c:ae:7e:b1:3d:52:a1:75:3b:85:b2:fb: 70:cb:a1:e6:79:83:34:71:d3:19:1e:e5:98:f7:c4:97:0a:9b: 88:c0:65:8a:96:34:09:76:65:2c:95:f2:e0:1c:ee:e8:9b:d5: 37:08:19:98:d8:4a:a4:9e:65:5d:51:0b:58:ed:6f:1d:0f:86: 77:73:fd:ba:47:90:f1:cf:07:dc:55:8b:71:cd:38:ab:86:36: 67:3c:6e:43:66:e0:11:6b:7e:bc:f0:a2:c3:c3:52:33:17:48: 58:38:3e:f4:de:da:a2:7f:85:3f:86:55:06:10:6e:9a:32:a3: 6c:6c:9d:1f -----BEGIN CERTIFICATE----- MIIF2zCCBMOgAwIBAgIUXnA7M2cjGMCClWiQtvtKKlsky9EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYmE1OWMxNWI5Nzc3YTRhNTI3MGM5YjdhNTg0ZTQ2OTc4 ZTA5YTdiZDJkMTU0YmZhOWQwHhcNMjUwNTA4MjE1MzM5WhcNMjUwNTA5MjIzODM5 WjAzMTEwLwYDVQQDEygwQ0U2REM4Qjk5NDk2NTVFQTc1NzdDMzk2RkNGNTU0MzVG RDhDQTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOd2Nkpr3cm+ kweq5KcFc0qtdXjUbbIfqdwV3jzpbFKnV7I4OmMle7wwmJPND9h/WcCToGBTSCZ8 TE9r+VEtxNsRnIlOKyD0RMGs82q2fZRjiNLbDiWEfGyY2RUuohTFsemAmHZF8yij S0shhZoebqJxaOrbjLGP9ROosXDFkFN+JBgg3MiQbPUj/T51IMUajQxmYmJuJA0v GKkdbfw0MlUetf2fJcGqRTTRLsS6YfsevOS4Blu6efNRPqZmg3S7rPwh9RU5eiH4 CkbOQF5gBf4JMEVkLvqrPDnbgOm6xmvPnEKjGvc9eOYS60QCAV2dlCq2agEAFdcR rJzFnWCwawIDAQABo4IC2zCCAtcwHQYDVR0OBBYEFAzm3IuZSWVep1d8OW/PVUNf 2MoRMB8GA1UdIwQYMBaAFNcKkdieNMeiAAmx4WD7bGJwY2MMMA4GA1UdDwEB/wQE AwIHgDCBlwYDVR0fBIGPMIGMMIGJoIGGoIGDhoGAcnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZTZlZGVlYy0wOGJhLTRjZGUtODk3 OS00ZmFlYTRiMWJjMTIvMjAvRDcwQTkxRDg5RTM0QzdBMjAwMDlCMUUxNjBGQjZD NjI3MDYzNjMwQy5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB 03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlm MC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzMyNjE5ZmY5LTRhNDYtNGU5My1hOWI1 LWRkYTJhMzNhOWZmZC9iYTU5YzE1Yjk3NzdhNGE1MjcwYzliN2E1ODRlNDY5Nzhl MDlhN2JkMmQxNTRiZmE5ZC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEF BQcwC4aBgHJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvYWU2ZWRlZWMtMDhiYS00Y2RlLTg5NzktNGZhZWE0YjFiYzEyLzIwL0Q3MEE5 MUQ4OUUzNEM3QTIwMDA5QjFFMTYwRkI2QzYyNzA2MzYzMEMubWZ0MBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQC AAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCI v6/teBOybnxZvQcE5b26vN22+vUOg//fmSSEJG3JFSvuEyIGTuGXQ1teMlIUcWc8 DaZTpThQLmwUzaCsktFMA5zBcI1a83VTa0Rqr26UWzDgDFXlhFFzrz5H9zHOTHKn hqnI7D4sda6ajnE2j1eB+QulSuLj8OFro/64pRPY15z3w0xMrn6xPVKhdTuFsvtw y6HmeYM0cdMZHuWY98SXCpuIwGWKljQJdmUslfLgHO7om9U3CBmY2EqknmVdUQtY 7W8dD4Z3c/26R5DxzwfcVYtxzTirhjZnPG5DZuARa3688KLDw1IzF0hYOD703tqi f4U/hlUGEG6aMqNsbJ0f -----END CERTIFICATE-----Generated at Fri May 9 06:47:20 2025 by rpki-client