$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft File: 1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft (raw, json) Hash identifier: cdLySzqqjGYuRZQ7a58Y+zJsYYW3QS+Q3UuUyImnvsc= Subject key identifier: A2:A9:ED:84:63:EA:6C:C9:2E:B9:25:6D:DC:8F:2E:DC:A3:B7:EB:D3 Authority key identifier: 1F:7F:72:49:A6:81:F8:CD:41:27:0B:50:D8:D7:E7:81:58:81:DA:36 Certificate issuer: /CN=23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd Certificate serial: 649CE615FBE6C73CDB3C08246B8A8DAB9A536C0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft Manifest number: 0146 Signing time: Mon 20 Oct 2025 15:18:56 +0000 Manifest this update: Mon 20 Oct 2025 15:13:56 +0000 Manifest next update: Tue 21 Oct 2025 15:52:56 +0000 Files and hashes: 1: 32332e3133362e32302e302f32342d3234203d3e20333936303634.roa (hash: l3PqR+UTXc6mZ6DH8HSVMsKTEDZ5iX5wYCsyCFY80r0=) 2: 1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl (hash: d/FovJ8Fp2kzpiotp6VD11XmzH7J7hNXiftYMpF/B5o=) 3: 323630323a663662613a3a2f34302d3430203d3e20323135323438.roa (hash: WDk8fhCZeFEuKhmy2R/ZRYllooWLJI27mELcMjoeqKI=) 4: 32332e3133362e32302e302f32342d3234203d3e20323135323438.roa (hash: qWICRkjmLt8+dNxxWBazesXDN3X2Ej4jtCp5CweB95Y=) 5: AS396064.asa (hash: fqRhtvWtcURp20FCViYFyofIrkmsG3+3CETZ3m5QbYs=) 6: 323630323a663662613a3a2f34302d3430203d3e20333936303634.roa (hash: EIvC4z2x/QLXwOGrYeC/F9aQ8OZAlzpbcTtxqtqMIxY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/383bd50b-b192-44bd-9349-351225a13a33.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/383bd50b-b192-44bd-9349-351225a13a33.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 15:52:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:9c:e6:15:fb:e6:c7:3c:db:3c:08:24:6b:8a:8d:ab:9a:53:6c:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd Validity Not Before: Oct 20 15:13:56 2025 GMT Not After : Oct 21 15:52:56 2025 GMT Subject: CN=A2A9ED8463EA6CC92EB9256DDC8F2EDCA3B7EBD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f8:fe:ea:91:8f:85:d3:69:4d:ab:1e:b7:34: e4:37:97:16:46:d3:0e:5a:7a:23:95:42:3c:dc:e4: 17:f7:6a:02:37:de:b4:45:21:72:be:7d:93:e8:13: 3c:e5:39:54:e5:1c:62:a8:3a:80:07:3e:41:4c:46: 15:f6:d5:21:22:1d:f5:8d:0c:7f:5d:31:ff:6c:b1: 57:88:18:61:42:e9:3e:cf:51:d3:9f:b4:5a:4c:de: 25:d9:24:08:78:91:bd:c1:ef:f0:80:5b:e3:b3:13: 6d:9f:f5:76:58:c6:09:15:ee:67:a8:90:3d:a7:5e: 8d:fa:de:27:cb:ee:17:23:12:09:6a:57:d3:2b:ad: 03:64:d8:ab:c9:0c:27:83:84:50:f5:d1:1b:d9:2d: e9:6a:5c:69:93:17:5f:dd:a5:46:dc:7e:96:cc:38: 0f:42:00:0c:38:2e:4b:59:66:75:5b:10:19:a0:a3: b3:cf:ad:42:5b:42:29:53:d6:38:94:98:73:83:ce: af:c0:8a:be:8c:18:24:c0:90:63:50:79:53:f0:7f: 70:b4:f9:dd:e6:1a:34:5d:6c:6e:63:0b:9f:e6:e1: 15:d8:83:6c:78:d3:00:ec:88:62:fc:e3:e0:db:95: 78:ce:cc:ca:74:93:75:bf:c4:97:b9:1d:78:c7:d8: 33:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A9:ED:84:63:EA:6C:C9:2E:B9:25:6D:DC:8F:2E:DC:A3:B7:EB:D3 X509v3 Authority Key Identifier: keyid:1F:7F:72:49:A6:81:F8:CD:41:27:0B:50:D8:D7:E7:81:58:81:DA:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:f4:00:67:fc:65:d9:cc:c7:6c:6d:52:62:7f:96:28:95:95: bf:48:15:98:45:0d:fa:e5:16:c9:77:7a:7e:9d:32:a0:db:13: 83:ef:6e:ef:fd:34:6a:90:15:6f:a7:81:3b:b8:b9:3c:df:b8: 9b:76:f3:33:62:29:01:19:2e:de:5d:8b:dd:3f:68:b7:52:8a: ec:b8:80:04:02:ed:e9:e1:9e:8c:49:e5:eb:89:ff:e5:58:a0: 4f:ec:dc:38:d0:c6:65:ab:12:42:9a:e9:43:10:b8:7c:a5:24: 8c:28:75:92:fc:c7:24:df:fa:27:d3:c6:e7:4c:a1:ab:f0:ae: da:5e:38:42:31:cf:1a:36:26:cd:b0:6c:db:33:ce:cb:a7:11: c9:8b:6c:4f:2d:2b:99:3f:be:0c:8a:8b:9f:2c:9c:91:68:cc: cf:e3:14:a0:20:1e:de:3a:62:d1:c9:41:2d:e6:2d:71:31:a5: dc:29:a3:27:c4:59:96:e0:5b:d6:40:a3:80:b6:05:53:be:ee: 45:2a:21:03:b7:cd:46:4c:01:de:da:c5:d4:f8:e7:ba:73:45: 4b:ae:ff:26:f4:07:81:65:f7:c3:9f:9d:16:98:70:0f:a8:d8: 92:80:e4:b3:51:3b:32:2f:09:79:5f:63:f8:d9:f0:f5:b4:d5: b6:25:29:cc -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUZJzmFfvmxzzbPAgka4qNq5pTbA4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMjNmYjNkMjllN2Y2N2M2MzRkZjNiN2Y0YTk2MDA4MmU0 NDI5ZjE2NmI2NTMwMWE5ZGQwHhcNMjUxMDIwMTUxMzU2WhcNMjUxMDIxMTU1MjU2 WjAzMTEwLwYDVQQDEyhBMkE5RUQ4NDYzRUE2Q0M5MkVCOTI1NkREQzhGMkVEQ0Ez QjdFQkQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/j+6pGPhdNp TasetzTkN5cWRtMOWnojlUI83OQX92oCN960RSFyvn2T6BM85TlU5RxiqDqABz5B TEYV9tUhIh31jQx/XTH/bLFXiBhhQuk+z1HTn7RaTN4l2SQIeJG9we/wgFvjsxNt n/V2WMYJFe5nqJA9p16N+t4ny+4XIxIJalfTK60DZNiryQwng4RQ9dEb2S3palxp kxdf3aVG3H6WzDgPQgAMOC5LWWZ1WxAZoKOzz61CW0IpU9Y4lJhzg86vwIq+jBgk wJBjUHlT8H9wtPnd5ho0XWxuYwuf5uEV2INseNMA7Ihi/OPg25V4zszKdJN1v8SX uR14x9gz/wIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFKKp7YRj6mzJLrklbdyPLtyj t+vTMB8GA1UdIwQYMBaAFB9/ckmmgfjNQScLUNjX54FYgdo2MA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2NkMTlkYjIwLTQ2NTMtNDhkNC04ZmM0 LTU4MGQxMzY5YjdjNC8xLzFGN0Y3MjQ5QTY4MUY4Q0Q0MTI3MEI1MEQ4RDdFNzgx NTg4MURBMzYuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMt NDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zODNiZDUwYi1iMTkyLTQ0YmQtOTM0OS0z NTEyMjVhMTNhMzMvMjNmYjNkMjllN2Y2N2M2MzRkZjNiN2Y0YTk2MDA4MmU0NDI5 ZjE2NmI2NTMwMWE5ZGQuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv Y2QxOWRiMjAtNDY1My00OGQ0LThmYzQtNTgwZDEzNjliN2M0LzEvMUY3RjcyNDlB NjgxRjhDRDQxMjcwQjUwRDhEN0U3ODE1ODgxREEzNi5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGr0AGf8 ZdnMx2xtUmJ/liiVlb9IFZhFDfrlFsl3en6dMqDbE4Pvbu/9NGqQFW+ngTu4uTzf uJt28zNiKQEZLt5di90/aLdSiuy4gAQC7enhnoxJ5euJ/+VYoE/s3DjQxmWrEkKa 6UMQuHylJIwodZL8xyTf+ifTxudMoavwrtpeOEIxzxo2Js2wbNszzsunEcmLbE8t K5k/vgyKi58snJFozM/jFKAgHt46YtHJQS3mLXExpdwpoyfEWZbgW9ZAo4C2BVO+ 7kUqIQO3zUZMAd7axdT457pzRUuu/yb0B4Fl98OfnRaYcA+o2JKA5LNROzIvCXlf Y/jZ8PW01bYlKcw= -----END CERTIFICATE-----Generated at Mon Oct 20 20:32:22 2025 by rpki-client