$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft File: D74983C1FABA0CC1566F0601AFE11423E11B5171.mft (raw, json) Hash identifier: UhoOPtXDnJrxVq9u0GR/Tg0pLE2I5eHMpvnp1rGxisc= Subject key identifier: 18:5C:A6:15:AB:83:65:5D:51:5A:BF:36:BE:06:D8:CF:B9:E0:D3:DF Authority key identifier: D7:49:83:C1:FA:BA:0C:C1:56:6F:06:01:AF:E1:14:23:E1:1B:51:71 Certificate issuer: /CN=4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c Certificate serial: 1ECCEE92ECE6BD0A52EA3DA65ABB505D350E7002 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft Manifest number: 0442 Signing time: Sun 19 Oct 2025 23:19:30 +0000 Manifest this update: Sun 19 Oct 2025 23:14:30 +0000 Manifest next update: Tue 21 Oct 2025 00:39:30 +0000 Files and hashes: 1: 323630323a666137613a3a2f34302d3438203d3e203539393933.roa (hash: xlMWcnMOkntkvkwmItiIw9KHDflxZx0Jsc2LELbETrw=) 2: D74983C1FABA0CC1566F0601AFE11423E11B5171.crl (hash: 6Sdo07E4a9Es5Rwcv/Sdjo2ZooGy1KRKZNxVhconUAo=) 3: 32332e3135332e3233322e302f32342d3234203d3e203539393933.roa (hash: mlyVBtqAxaep1RbpdRUfXUrnFdjKT6MGiKPIjo5bDE0=) 4: 323630323a666137613a3a2f34302d3438203d3e203537383730.roa (hash: KXZ5ssTmjUClZY+9bglfiLRlAhs+b4BWP1fzlqp7SIY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.crl rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:cc:ee:92:ec:e6:bd:0a:52:ea:3d:a6:5a:bb:50:5d:35:0e:70:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c Validity Not Before: Oct 19 23:14:30 2025 GMT Not After : Oct 21 00:39:30 2025 GMT Subject: CN=185CA615AB83655D515ABF36BE06D8CFB9E0D3DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ba:5e:1c:64:2d:60:33:2c:c6:3c:0d:d9:43: b2:9c:95:a3:c7:79:05:75:3d:cd:6c:c9:15:22:b9: 15:d4:46:ad:27:9c:93:cc:88:fc:e4:b5:a9:d7:12: 35:6c:49:1f:a7:23:57:c3:d5:8a:1f:d0:4c:98:26: 6e:08:97:31:46:8e:1e:3a:a9:7f:8c:86:36:da:7b: 24:60:a0:c8:9b:f6:2d:08:43:d8:af:cb:c9:b7:f5: e9:a3:0a:e5:d2:ff:a0:ea:82:9d:20:b5:8b:97:e7: 0c:9e:f1:0d:e9:bf:ef:13:cb:ff:07:d2:21:92:b1: fa:69:f8:c0:18:74:a1:66:a1:55:9e:49:89:7d:d8: f4:f2:1b:4e:5d:b4:9a:75:db:1c:42:ba:7d:90:8b: e1:4a:fb:0d:33:e1:f5:a9:18:7c:4f:dd:00:ae:fc: 64:1d:53:10:83:97:dc:42:92:4b:e0:0e:e7:7c:8c: a0:75:21:fc:15:01:f6:0d:c0:0d:ac:a4:41:5d:4a: a8:80:79:11:64:3d:02:8d:42:5e:70:dd:ec:9d:5b: 9f:a9:32:c7:12:c2:fe:d2:52:fc:d0:2b:55:fa:c8: d9:e1:5c:4a:83:98:ac:74:60:f8:12:2e:89:01:78: 6b:50:3b:80:ec:bb:14:29:8b:9b:f8:2a:d3:62:b8: 68:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:5C:A6:15:AB:83:65:5D:51:5A:BF:36:BE:06:D8:CF:B9:E0:D3:DF X509v3 Authority Key Identifier: keyid:D7:49:83:C1:FA:BA:0C:C1:56:6F:06:01:AF:E1:14:23:E1:1B:51:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:d4:1d:a3:e6:12:6a:c8:a6:3e:97:b5:fc:16:64:9d:34:bf: 0d:f6:bc:43:4d:e5:e3:2c:26:be:a3:c8:0a:e3:b5:99:08:73: 64:fc:8a:b6:8d:b7:50:89:46:5a:24:50:6a:00:d3:29:fb:dd: b8:25:3b:7c:24:1a:0c:55:72:b3:3f:84:eb:fe:b4:73:f0:f1: fb:ef:6f:14:fa:aa:98:17:9d:ab:f1:94:34:86:5d:fb:9a:58: 7a:16:e3:15:66:8c:90:09:05:54:21:ea:97:b6:fb:a6:78:7e: 37:44:b8:b4:92:c5:55:82:cd:a6:e0:2a:65:89:c6:30:f5:f6: f5:0c:7d:24:5b:73:2d:cb:2f:7a:0d:07:78:89:f2:ff:07:3b: 26:73:12:32:81:79:32:0d:c1:d0:76:53:cb:87:ff:f4:b4:57: 3d:65:90:08:a9:09:aa:43:cd:03:6a:18:a5:ae:9a:5b:51:ec: 33:d9:23:93:f1:a1:2d:3c:63:df:0c:09:1d:14:3c:99:20:ed: 8e:d7:d0:96:e6:68:ae:ab:80:c8:16:d0:93:a6:73:2d:39:b5: 19:fc:ae:2b:bf:7e:bc:9a:d3:82:bf:c8:2f:dd:95:26:52:18: f1:73:01:37:28:55:0f:50:e1:c3:55:16:49:ff:55:63:a9:50: aa:94:2e:dd -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUHszukuzmvQpS6j2mWrtQXTUOcAIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNGI0M2M2NGE2ODBlZmRjNTFhMDA0NjMxNzJiOGY1YWZm OTQ1ZTA3MzNmYzQ5YzJlNGMwHhcNMjUxMDE5MjMxNDMwWhcNMjUxMDIxMDAzOTMw WjAzMTEwLwYDVQQDEygxODVDQTYxNUFCODM2NTVENTE1QUJGMzZCRTA2RDhDRkI5 RTBEM0RGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbpeHGQtYDMs xjwN2UOynJWjx3kFdT3NbMkVIrkV1EatJ5yTzIj85LWp1xI1bEkfpyNXw9WKH9BM mCZuCJcxRo4eOql/jIY22nskYKDIm/YtCEPYr8vJt/Xpowrl0v+g6oKdILWLl+cM nvEN6b/vE8v/B9IhkrH6afjAGHShZqFVnkmJfdj08htOXbSaddscQrp9kIvhSvsN M+H1qRh8T90ArvxkHVMQg5fcQpJL4A7nfIygdSH8FQH2DcANrKRBXUqogHkRZD0C jUJecN3snVufqTLHEsL+0lL80CtV+sjZ4VxKg5isdGD4Ei6JAXhrUDuA7LsUKYub +CrTYrhoeQIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFBhcphWrg2VdUVq/Nr4G2M+5 4NPfMB8GA1UdIwQYMBaAFNdJg8H6ugzBVm8GAa/hFCPhG1FxMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FlNmVkZWVjLTA4YmEtNGNkZS04OTc5 LTRmYWVhNGIxYmMxMi83L0Q3NDk4M0MxRkFCQTBDQzE1NjZGMDYwMUFGRTExNDIz RTExQjUxNzEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2Mt NGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMTUwZTk4ZC04MGU5LTQ1ZjYtYmM2My02 YjQwYTNkNTllOWMvNGI0M2M2NGE2ODBlZmRjNTFhMDA0NjMxNzJiOGY1YWZmOTQ1 ZTA3MzNmYzQ5YzJlNGMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv YWU2ZWRlZWMtMDhiYS00Y2RlLTg5NzktNGZhZWE0YjFiYzEyLzcvRDc0OTgzQzFG QUJBMENDMTU2NkYwNjAxQUZFMTE0MjNFMTFCNTE3MS5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAILUHaPm EmrIpj6XtfwWZJ00vw32vENN5eMsJr6jyArjtZkIc2T8iraNt1CJRlokUGoA0yn7 3bglO3wkGgxVcrM/hOv+tHPw8fvvbxT6qpgXnavxlDSGXfuaWHoW4xVmjJAJBVQh 6pe2+6Z4fjdEuLSSxVWCzabgKmWJxjD19vUMfSRbcy3LL3oNB3iJ8v8HOyZzEjKB eTINwdB2U8uH//S0Vz1lkAipCapDzQNqGKWumltR7DPZI5PxoS08Y98MCR0UPJkg 7Y7X0JbmaK6rgMgW0JOmcy05tRn8riu/frya04K/yC/dlSZSGPFzATcoVQ9Q4cNV Fkn/VWOpUKqULt0= -----END CERTIFICATE-----Generated at Mon Oct 20 18:07:00 2025 by rpki-client