$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.mft File: D70A91D89E34C7A20009B1E160FB6C627063630C.mft (raw, json) Hash identifier: sgD+wf3FDkkeg4MkAWENQjxmiyfXlr1Vam4G/YeRV30= Subject key identifier: 36:9A:48:A7:06:20:AB:14:00:08:5E:1B:59:74:3D:BC:59:20:39:92 Authority key identifier: D7:0A:91:D8:9E:34:C7:A2:00:09:B1:E1:60:FB:6C:62:70:63:63:0C Certificate issuer: /CN=ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d Certificate serial: 421926671089CA8BEDCE4CC5488B7352BBF42F29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.mft Manifest number: 0284 Signing time: Sun 19 Oct 2025 19:27:34 +0000 Manifest this update: Sun 19 Oct 2025 19:22:34 +0000 Manifest next update: Mon 20 Oct 2025 22:46:34 +0000 Files and hashes: 1: 323630323a663838323a3a2f33362d3438203d3e20343031323138.roa (hash: Dizjuv2g3xNyGUDZ8X1oRA6GQacDJJP6dGAQzPkf04o=) 2: 32332e3138332e3133362e302f32342d3234203d3e2030.roa (hash: swtuTdCu9qwtIFReZr0cVz+AYUZ4/a/i2nv3LPMJAJ8=) 3: D70A91D89E34C7A20009B1E160FB6C627063630C.crl (hash: mni2GZx4L7Qs/DqZD41izERjHeev2++qB86BAYBRQsM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.crl rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 22:46:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:19:26:67:10:89:ca:8b:ed:ce:4c:c5:48:8b:73:52:bb:f4:2f:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d Validity Not Before: Oct 19 19:22:34 2025 GMT Not After : Oct 20 22:46:34 2025 GMT Subject: CN=369A48A70620AB1400085E1B59743DBC59203992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:72:ad:4f:5c:f7:83:bc:1d:74:4a:e5:b3:b9: 97:46:28:8e:6c:dd:51:9c:58:5d:cb:bb:d3:12:ce: fd:f1:90:15:e0:48:d6:5d:da:80:a4:8d:3b:c9:e0: 47:6f:9a:70:81:fb:b0:4f:57:75:cf:d6:9a:55:d3: 92:36:12:39:13:c3:8f:b7:56:2e:45:a4:59:f1:41: c9:f6:5f:cb:5c:05:eb:99:ad:98:6d:1f:71:57:25: d9:e7:01:d3:00:84:72:c5:15:98:f9:cb:7d:8f:58: 57:03:76:38:3f:55:f4:05:fd:ec:4e:54:04:a6:cb: 32:ce:9e:de:3f:88:cc:7e:19:9b:b6:90:fb:4f:f3: d8:23:eb:e6:1e:94:b2:44:02:f2:3c:56:70:0f:02: eb:46:93:6c:2a:24:91:0e:99:c2:b8:cb:36:8b:0a: 20:2b:79:f8:fc:37:64:7c:5f:fa:3a:25:6b:65:84: f4:4f:53:25:85:d6:a4:e0:4d:3a:2d:31:9d:19:70: ba:04:5e:2f:b8:39:f4:e9:16:e0:e0:c9:24:0c:4f: e6:de:12:30:5e:6b:b4:b2:63:fd:ec:d3:11:e3:2a: e3:d8:64:e5:77:84:05:da:b5:ac:f1:3d:36:51:d3: 9b:59:0b:5f:41:38:d5:cb:25:a0:00:fb:6d:29:6b: 4f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:9A:48:A7:06:20:AB:14:00:08:5E:1B:59:74:3D:BC:59:20:39:92 X509v3 Authority Key Identifier: keyid:D7:0A:91:D8:9E:34:C7:A2:00:09:B1:E1:60:FB:6C:62:70:63:63:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:11:82:00:77:34:d2:99:bc:1e:c9:04:5e:19:a2:38:b2:83: eb:9f:d4:ef:ff:35:04:97:3c:b3:a4:a8:76:c8:4b:0b:a6:9e: 26:b6:7e:72:e3:ea:95:44:a4:aa:27:e3:d9:42:d1:1e:78:4d: f3:da:69:56:9a:3e:57:5d:04:10:ed:ac:1c:15:ec:1f:b6:b8: 04:b1:9f:e2:9e:cd:97:ca:17:15:ba:ee:e7:70:4e:a0:72:ab: 90:f0:2f:63:dc:ef:11:4d:0f:ee:d7:08:d6:29:53:17:d9:79: c1:d9:2f:55:8b:75:25:7e:26:bd:fe:51:42:91:d7:79:dc:eb: 9a:6e:03:fa:62:79:34:36:8a:0c:33:f5:70:1c:ca:e2:e7:80: f9:d7:f9:6f:46:36:3f:f9:e7:2e:66:ed:f1:80:36:01:e2:36: 90:67:77:95:55:45:6d:f9:16:12:9c:16:8f:8b:36:5c:ee:92: 7f:1d:fa:44:8b:6e:2a:a8:2b:fc:44:57:ce:5f:aa:19:55:d2: 6f:85:1f:93:26:00:db:0d:43:85:8c:ed:fd:7a:34:52:b0:ee: b6:3f:fb:f5:39:f7:31:84:af:e1:7b:d3:8e:51:72:f9:ed:d2: ca:21:85:2e:ec:e1:49:7f:41:7a:30:ae:6c:71:27:4a:a5:ac: 91:63:8f:97 -----BEGIN CERTIFICATE----- MIIF2zCCBMOgAwIBAgIUQhkmZxCJyovtzkzFSItzUrv0LykwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYmE1OWMxNWI5Nzc3YTRhNTI3MGM5YjdhNTg0ZTQ2OTc4 ZTA5YTdiZDJkMTU0YmZhOWQwHhcNMjUxMDE5MTkyMjM0WhcNMjUxMDIwMjI0NjM0 WjAzMTEwLwYDVQQDEygzNjlBNDhBNzA2MjBBQjE0MDAwODVFMUI1OTc0M0RCQzU5 MjAzOTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnKtT1z3g7wd dErls7mXRiiObN1RnFhdy7vTEs798ZAV4EjWXdqApI07yeBHb5pwgfuwT1d1z9aa VdOSNhI5E8OPt1YuRaRZ8UHJ9l/LXAXrma2YbR9xVyXZ5wHTAIRyxRWY+ct9j1hX A3Y4P1X0Bf3sTlQEpssyzp7eP4jMfhmbtpD7T/PYI+vmHpSyRALyPFZwDwLrRpNs KiSRDpnCuMs2iwogK3n4/DdkfF/6OiVrZYT0T1Mlhdak4E06LTGdGXC6BF4vuDn0 6Rbg4MkkDE/m3hIwXmu0smP97NMR4yrj2GTld4QF2rWs8T02UdObWQtfQTjVyyWg APttKWtP8wIDAQABo4IC2zCCAtcwHQYDVR0OBBYEFDaaSKcGIKsUAAheG1l0PbxZ IDmSMB8GA1UdIwQYMBaAFNcKkdieNMeiAAmx4WD7bGJwY2MMMA4GA1UdDwEB/wQE AwIHgDCBlwYDVR0fBIGPMIGMMIGJoIGGoIGDhoGAcnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZTZlZGVlYy0wOGJhLTRjZGUtODk3 OS00ZmFlYTRiMWJjMTIvMjAvRDcwQTkxRDg5RTM0QzdBMjAwMDlCMUUxNjBGQjZD NjI3MDYzNjMwQy5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB 03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlm MC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzMyNjE5ZmY5LTRhNDYtNGU5My1hOWI1 LWRkYTJhMzNhOWZmZC9iYTU5YzE1Yjk3NzdhNGE1MjcwYzliN2E1ODRlNDY5Nzhl MDlhN2JkMmQxNTRiZmE5ZC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEF BQcwC4aBgHJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvYWU2ZWRlZWMtMDhiYS00Y2RlLTg5NzktNGZhZWE0YjFiYzEyLzIwL0Q3MEE5 MUQ4OUUzNEM3QTIwMDA5QjFFMTYwRkI2QzYyNzA2MzYzMEMubWZ0MBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQC AAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB6 EYIAdzTSmbweyQReGaI4soPrn9Tv/zUElzyzpKh2yEsLpp4mtn5y4+qVRKSqJ+PZ QtEeeE3z2mlWmj5XXQQQ7awcFewftrgEsZ/ins2XyhcVuu7ncE6gcquQ8C9j3O8R TQ/u1wjWKVMX2XnB2S9Vi3Ulfia9/lFCkdd53OuabgP6Ynk0NooMM/VwHMri54D5 1/lvRjY/+ecuZu3xgDYB4jaQZ3eVVUVt+RYSnBaPizZc7pJ/HfpEi24qqCv8RFfO X6oZVdJvhR+TJgDbDUOFjO39ejRSsO62P/v1OfcxhK/he9OOUXL57dLKIYUu7OFJ f0F6MK5scSdKpayRY4+X -----END CERTIFICATE-----Generated at Mon Oct 20 10:26:13 2025 by rpki-client