$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft File: 1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft (raw, json) Hash identifier: AwDj25Rn1uas2ud7CqG+lBceGGnT/tgzqk5424qk/4U= Subject key identifier: 54:23:13:19:FF:AA:49:0F:53:E4:64:A7:67:FD:78:B1:7E:CC:89:D5 Authority key identifier: 1F:7F:72:49:A6:81:F8:CD:41:27:0B:50:D8:D7:E7:81:58:81:DA:36 Certificate issuer: /CN=23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd Certificate serial: 760BAEB15F56C932FDEA1AABBA9B98B5CB197062 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft Manifest number: 4E Signing time: Thu 08 May 2025 18:01:23 +0000 Manifest this update: Thu 08 May 2025 17:56:23 +0000 Manifest next update: Fri 09 May 2025 20:30:23 +0000 Files and hashes: 1: 1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl (hash: I1Y89mHInV6IGFYKimsUk+rnp+VMz1hWqdgxxWKT0Ig=) 2: 323630323a663662613a3a2f34302d3430203d3e20333936303634.roa (hash: EIvC4z2x/QLXwOGrYeC/F9aQ8OZAlzpbcTtxqtqMIxY=) 3: AS396064.asa (hash: DeFbBTjTorvH1GXqqw8n40RL8nNTE2I7IJIzhVLZvyI=) 4: 32332e3133362e32302e302f32342d3234203d3e20323135323438.roa (hash: qWICRkjmLt8+dNxxWBazesXDN3X2Ej4jtCp5CweB95Y=) 5: 32332e3133362e32302e302f32342d3234203d3e20333936303634.roa (hash: l3PqR+UTXc6mZ6DH8HSVMsKTEDZ5iX5wYCsyCFY80r0=) 6: 323630323a663662613a3a2f34302d3430203d3e20323135323438.roa (hash: WDk8fhCZeFEuKhmy2R/ZRYllooWLJI27mELcMjoeqKI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/383bd50b-b192-44bd-9349-351225a13a33.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/383bd50b-b192-44bd-9349-351225a13a33.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:30:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:0b:ae:b1:5f:56:c9:32:fd:ea:1a:ab:ba:9b:98:b5:cb:19:70:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd Validity Not Before: May 8 17:56:23 2025 GMT Not After : May 9 20:30:23 2025 GMT Subject: CN=54231319FFAA490F53E464A767FD78B17ECC89D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c0:2f:20:a1:85:37:02:b7:c1:ed:10:91:b3: 28:e2:82:57:96:3a:56:60:e8:77:44:c4:92:fa:c6: 14:4d:b3:e7:4d:82:f2:21:8a:c7:36:f4:0c:45:92: f0:b0:0f:f2:13:2e:6e:ca:14:02:80:2b:a0:c7:d8: 09:71:f8:1e:f0:bb:9c:6d:e3:bb:f5:2e:3a:ed:89: 81:b6:3b:81:24:d7:ac:d2:50:cf:87:b8:82:5e:4d: d1:f5:c0:00:d2:d9:ac:65:67:2e:91:00:e8:97:95: 49:53:5c:5a:2d:f2:f8:08:12:9c:c2:b0:bf:2e:a8: a4:09:30:2d:2d:b1:9c:bd:3e:07:4a:b5:95:6a:36: 6a:ea:05:3d:d1:e0:0f:63:f6:96:16:74:0d:1e:6c: 5e:69:71:ee:f5:76:3f:4a:89:07:3f:89:1a:02:35: c0:af:90:08:78:89:ba:30:60:ca:e5:2a:76:31:88: cd:48:07:bd:d9:5e:5a:e7:d4:ff:b0:ec:62:82:67: 68:92:0c:0c:8a:21:2c:40:39:6c:3b:15:11:72:bb: 1a:d4:19:20:55:9c:08:d7:ac:7a:86:61:fc:6d:16: 9d:b5:1b:6e:82:2f:de:c6:5e:a5:f4:b6:d2:3a:e7: 1e:d0:c1:15:5b:6f:8d:47:29:c7:b5:5a:a5:5e:c0: 1c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:23:13:19:FF:AA:49:0F:53:E4:64:A7:67:FD:78:B1:7E:CC:89:D5 X509v3 Authority Key Identifier: keyid:1F:7F:72:49:A6:81:F8:CD:41:27:0B:50:D8:D7:E7:81:58:81:DA:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:3e:70:2a:0d:10:70:a3:61:e4:c5:eb:b7:ea:5b:b2:82:4b: d9:f4:28:f9:c1:47:a4:8c:0f:79:67:42:96:be:4e:33:2b:f0: 53:52:3c:52:4f:66:69:b9:7a:0c:81:dc:48:47:4e:73:47:01: 1d:0f:a1:44:be:67:18:25:d3:d9:dc:e2:cc:d5:ee:1b:84:08: 7e:aa:f1:0b:7b:53:32:68:a2:4c:90:ca:4d:a6:46:98:96:ab: bc:c7:94:3f:2c:5e:a1:cf:cc:1f:56:13:7d:97:03:e6:4f:ec: 18:e3:af:ac:18:c7:de:a9:47:48:fe:20:bf:63:6b:0d:6e:5a: dc:c8:4e:06:3a:a6:d4:f5:f3:eb:4a:8b:8b:d9:33:5a:98:5c: 1d:3c:91:e5:d0:9c:d0:76:be:73:af:f6:55:5d:e0:83:19:38: 2a:76:49:dc:eb:2e:14:b5:3d:b2:1f:f5:d6:b6:87:9c:1b:0c: 16:dd:57:fc:09:4e:fb:15:e6:72:4a:45:ab:e8:49:d1:b9:d2: a5:aa:fd:28:e9:e1:71:93:f9:0e:e1:14:fb:fb:f4:e2:97:10: 04:81:d7:c7:9b:8a:ca:7f:c8:c7:aa:97:21:8d:42:9f:bd:6f: 88:37:93:bf:5a:e9:0f:90:83:90:4a:26:41:a9:f6:0a:3c:87: 32:9e:f1:10 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUdguusV9WyTL96hqrupuYtcsZcGIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMjNmYjNkMjllN2Y2N2M2MzRkZjNiN2Y0YTk2MDA4MmU0 NDI5ZjE2NmI2NTMwMWE5ZGQwHhcNMjUwNTA4MTc1NjIzWhcNMjUwNTA5MjAzMDIz WjAzMTEwLwYDVQQDEyg1NDIzMTMxOUZGQUE0OTBGNTNFNDY0QTc2N0ZENzhCMTdF Q0M4OUQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28AvIKGFNwK3 we0QkbMo4oJXljpWYOh3RMSS+sYUTbPnTYLyIYrHNvQMRZLwsA/yEy5uyhQCgCug x9gJcfge8LucbeO79S467YmBtjuBJNes0lDPh7iCXk3R9cAA0tmsZWcukQDol5VJ U1xaLfL4CBKcwrC/LqikCTAtLbGcvT4HSrWVajZq6gU90eAPY/aWFnQNHmxeaXHu 9XY/SokHP4kaAjXAr5AIeIm6MGDK5Sp2MYjNSAe92V5a59T/sOxigmdokgwMiiEs QDlsOxURcrsa1BkgVZwI16x6hmH8bRadtRtugi/exl6l9LbSOuce0MEVW2+NRynH tVqlXsAcUQIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFFQjExn/qkkPU+Rkp2f9eLF+ zInVMB8GA1UdIwQYMBaAFB9/ckmmgfjNQScLUNjX54FYgdo2MA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2NkMTlkYjIwLTQ2NTMtNDhkNC04ZmM0 LTU4MGQxMzY5YjdjNC8xLzFGN0Y3MjQ5QTY4MUY4Q0Q0MTI3MEI1MEQ4RDdFNzgx NTg4MURBMzYuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMt NDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zODNiZDUwYi1iMTkyLTQ0YmQtOTM0OS0z NTEyMjVhMTNhMzMvMjNmYjNkMjllN2Y2N2M2MzRkZjNiN2Y0YTk2MDA4MmU0NDI5 ZjE2NmI2NTMwMWE5ZGQuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv Y2QxOWRiMjAtNDY1My00OGQ0LThmYzQtNTgwZDEzNjliN2M0LzEvMUY3RjcyNDlB NjgxRjhDRDQxMjcwQjUwRDhEN0U3ODE1ODgxREEzNi5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEU+cCoN EHCjYeTF67fqW7KCS9n0KPnBR6SMD3lnQpa+TjMr8FNSPFJPZmm5egyB3EhHTnNH AR0PoUS+Zxgl09nc4szV7huECH6q8Qt7UzJookyQyk2mRpiWq7zHlD8sXqHPzB9W E32XA+ZP7Bjjr6wYx96pR0j+IL9jaw1uWtzITgY6ptT18+tKi4vZM1qYXB08keXQ nNB2vnOv9lVd4IMZOCp2SdzrLhS1PbIf9da2h5wbDBbdV/wJTvsV5nJKRavoSdG5 0qWq/Sjp4XGT+Q7hFPv79OKXEASB18ebisp/yMeqlyGNQp+9b4g3k79a6Q+Qg5BK JkGp9go8hzKe8RA= -----END CERTIFICATE-----Generated at Fri May 9 00:28:55 2025 by rpki-client