$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft File: 2472949B3C234930DBE99B1B5CD5196AB16D151B.mft (raw, json) Hash identifier: UUE27s02FmVaH7iUwXO4acuaHueSAVDBxL84C9U0MHo= Subject key identifier: 5C:C6:B3:E0:D3:10:8F:72:DB:64:B6:92:56:A2:7D:23:7F:73:30:7D Authority key identifier: 24:72:94:9B:3C:23:49:30:DB:E9:9B:1B:5C:D5:19:6A:B1:6D:15:1B Certificate issuer: /CN=89d4f40fed1166159109937674aef0279ad039550feccf8d61 Certificate serial: 4D2F37C291005C04C3A3F89EF660D57F36BDA356 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft Manifest number: 02BA Signing time: Sat 23 Aug 2025 10:32:10 +0000 Manifest this update: Sat 23 Aug 2025 10:27:10 +0000 Manifest next update: Sun 24 Aug 2025 10:33:10 +0000 Files and hashes: 1: 323630323a663961323a3a2f34382d3438203d3e203436373636.roa (hash: dNvxw0+R2mi2yZ7yZ+PkpHw5t4IMqFyhS0zsCoWaY88=) 2: 2472949B3C234930DBE99B1B5CD5196AB16D151B.crl (hash: 7XYJsnT6fq0/9Mx1OfPU09t2f6DTBwhKW4RBkotnV0E=) 3: 323630323a663961323a35353a3a2f34382d3438203d3e20313939353138.roa (hash: Lmh4khK9jqfGM7AgqtrinnAM2ubStxsQ/YZSUwbqCvU=) 4: 32332e3137302e37322e302f32342d3234203d3e203436373636.roa (hash: FghA8Zz7QbzObKv2ia/HqFgnN9W82bmOSCIz6G2zFuE=) 5: 323630323a663961323a31303a3a2f34382d3438203d3e203436373636.roa (hash: 4IHJsjfC0Zoq18aE2FFzAMYZQpT6YF+Y54OUnxbTiPM=) 6: 323630323a663961323a32303a3a2f34382d3438203d3e203436373636.roa (hash: LOHxn0RgwORnxWPoX7PgNpofW2yqHK4ri4vHvhFnLZQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 10:33:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:2f:37:c2:91:00:5c:04:c3:a3:f8:9e:f6:60:d5:7f:36:bd:a3:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89d4f40fed1166159109937674aef0279ad039550feccf8d61 Validity Not Before: Aug 23 10:27:10 2025 GMT Not After : Aug 24 10:33:10 2025 GMT Subject: CN=5CC6B3E0D3108F72DB64B69256A27D237F73307D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:28:41:16:ad:5f:83:76:e4:b1:50:e8:70:53: ff:08:3f:3a:0d:9d:3f:c3:ea:9c:1e:ae:28:f0:4e: 03:0e:a8:b5:7f:28:2d:af:40:9f:f3:ee:07:c5:ef: 38:11:a9:22:d7:cf:be:95:9f:3d:80:ee:4d:7d:a1: 85:e0:ff:fd:ec:15:c7:8b:64:45:88:cb:98:38:06: 01:21:40:3c:15:ca:cb:6f:6c:45:45:52:06:96:2f: 78:be:b4:74:27:30:9e:90:be:37:39:86:ae:e0:90: ce:77:5b:45:50:c1:37:86:32:b4:b1:61:a3:95:ea: c2:34:70:46:29:b2:19:a6:3e:e7:e5:aa:c2:9d:21: 68:f8:8e:84:a9:d6:62:40:f8:85:c3:88:9d:46:f0: d3:39:ff:51:7d:74:6a:80:7d:c7:3e:7c:bc:93:15: c4:1d:96:20:d5:cb:42:d1:f6:0d:65:c8:88:0c:75: 1e:9a:ca:40:1b:aa:81:e5:da:6a:98:00:af:d2:98: 82:e0:21:72:45:d9:5b:d7:57:62:37:90:61:df:38: 40:ba:bf:4a:9d:14:23:2a:49:23:9e:c2:01:0d:b6: 21:9b:23:d8:03:2e:a7:07:86:f1:58:30:bf:ce:47: 37:3a:e3:80:7e:0a:e1:ea:81:c7:e0:4e:58:02:27: e0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:C6:B3:E0:D3:10:8F:72:DB:64:B6:92:56:A2:7D:23:7F:73:30:7D X509v3 Authority Key Identifier: keyid:24:72:94:9B:3C:23:49:30:DB:E9:9B:1B:5C:D5:19:6A:B1:6D:15:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:97:bb:9c:26:ff:1f:7e:2a:d2:b8:d7:24:3a:77:50:25:a8: 5a:65:ae:db:65:67:e6:5c:99:1d:47:79:47:05:44:13:6f:ab: 37:f9:0c:d5:a8:f7:49:3d:58:23:81:a4:85:5e:a9:ce:f9:17: 06:2f:0b:2c:b6:29:07:a2:22:57:4f:2a:b5:c0:8b:87:70:16: f6:40:97:36:67:51:54:46:9c:11:e5:1d:49:b3:d9:6f:8c:cf: ba:c2:db:dc:27:cd:9f:7c:f3:87:1f:bf:83:e9:1f:2b:b7:86: ba:62:51:13:63:8b:0b:7a:4c:8d:58:5b:6f:3a:b2:15:8f:14: 89:bf:1d:0a:de:0a:6a:03:b4:2e:bd:46:0e:2c:c3:b6:c8:50: 79:2f:6b:0f:d3:84:be:d5:c7:8a:23:d2:96:e5:62:ab:30:fd: 69:30:99:d6:c1:bc:70:15:db:c4:56:b5:e4:a5:ef:b0:43:a7: 9e:8d:fc:72:cd:1b:d8:2f:b5:6d:25:79:98:a1:8a:59:45:4b: 63:ee:4f:de:8e:78:a3:4a:38:f3:f2:36:15:fd:eb:2f:6e:61: fe:d2:3e:4f:03:05:07:71:99:0e:d0:58:ca:15:9f:cc:3c:37: 34:43:37:07:df:66:1c:b7:c5:9f:40:00:83:88:26:9e:ec:54: ea:63:ff:e1 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUTS83wpEAXATDo/ie9mDVfza9o1YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODlkNGY0MGZlZDExNjYxNTkxMDk5Mzc2NzRhZWYwMjc5 YWQwMzk1NTBmZWNjZjhkNjEwHhcNMjUwODIzMTAyNzEwWhcNMjUwODI0MTAzMzEw WjAzMTEwLwYDVQQDEyg1Q0M2QjNFMEQzMTA4RjcyREI2NEI2OTI1NkEyN0QyMzdG NzMzMDdEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvChBFq1fg3bk sVDocFP/CD86DZ0/w+qcHq4o8E4DDqi1fygtr0Cf8+4Hxe84Eaki18++lZ89gO5N faGF4P/97BXHi2RFiMuYOAYBIUA8FcrLb2xFRVIGli94vrR0JzCekL43OYau4JDO d1tFUME3hjK0sWGjlerCNHBGKbIZpj7n5arCnSFo+I6EqdZiQPiFw4idRvDTOf9R fXRqgH3HPny8kxXEHZYg1ctC0fYNZciIDHUemspAG6qB5dpqmACv0piC4CFyRdlb 11diN5Bh3zhAur9KnRQjKkkjnsIBDbYhmyPYAy6nB4bxWDC/zkc3OuOAfgrh6oHH 4E5YAifg2QIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFFzGs+DTEI9y22S2klaifSN/ czB9MB8GA1UdIwQYMBaAFCRylJs8I0kw2+mbG1zVGWqxbRUbMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3 LWI0MjgxOGNmNTBlOC82LzI0NzI5NDlCM0MyMzQ5MzBEQkU5OUIxQjVDRDUxOTZB QjE2RDE1MUIuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It NGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZDk4NzlkYS0xNDVmLTRmMjEtYTdjMy1k YTZiNTlhMDE2MjUvODlkNGY0MGZlZDExNjYxNTkxMDk5Mzc2NzRhZWYwMjc5YWQw Mzk1NTBmZWNjZjhkNjEuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv ZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1MGU4LzYvMjQ3Mjk0OUIz QzIzNDkzMERCRTk5QjFCNUNENTE5NkFCMTZEMTUxQi5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACmXu5wm /x9+KtK41yQ6d1AlqFplrttlZ+ZcmR1HeUcFRBNvqzf5DNWo90k9WCOBpIVeqc75 FwYvCyy2KQeiIldPKrXAi4dwFvZAlzZnUVRGnBHlHUmz2W+Mz7rC29wnzZ9884cf v4PpHyu3hrpiURNjiwt6TI1YW286shWPFIm/HQreCmoDtC69Rg4sw7bIUHkvaw/T hL7Vx4oj0pblYqsw/WkwmdbBvHAV28RWteSl77BDp56N/HLNG9gvtW0leZihillF S2PuT96OeKNKOPPyNhX96y9uYf7SPk8DBQdxmQ7QWMoVn8w8NzRDNwffZhy3xZ9A AIOIJp7sVOpj/+E= -----END CERTIFICATE-----Generated at Sun Aug 24 02:55:04 2025 by rpki-client