$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/24F5DA48C3AFBCA0FFD921547EF09F776AF8A2EA.mft File: 24F5DA48C3AFBCA0FFD921547EF09F776AF8A2EA.mft (raw, json) Hash identifier: nuC+wIeCcfuJYpR4kMvwWPNsvC0NhqZIFG4/egoLzVc= Subject key identifier: D2:D4:9A:AC:9E:15:D5:8D:BD:7F:BD:2B:C8:AF:67:D0:B3:0C:F0:45 Authority key identifier: 24:F5:DA:48:C3:AF:BC:A0:FF:D9:21:54:7E:F0:9F:77:6A:F8:A2:EA Certificate issuer: /CN=f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7 Certificate serial: 3592D6BC289DC7B555755CAC4CF64E1990468E74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/24F5DA48C3AFBCA0FFD921547EF09F776AF8A2EA.mft Manifest number: 01E3 Signing time: Sun 29 Jun 2025 01:24:49 +0000 Manifest this update: Sun 29 Jun 2025 01:19:49 +0000 Manifest next update: Mon 30 Jun 2025 02:23:49 +0000 Files and hashes: 1: 323630323a663936643a6632303a3a2f34342d3438203d3e203531393339.roa (hash: +AJQANn8zhF+ZSh6IH18SF8cEWRM7vqStSNTtpgs9IE=) 2: 323630323a663936643a6666623a3a2f34382d313238203d3e203437323732.roa (hash: KAN80sbwQ+zymxwiXxfy/i1T6WF0TEMtiVqdT5TpTTw=) 3: 323630323a663936643a6630303a3a2f34342d313238203d3e203437323732.roa (hash: qeaVhFpgbPNVS1ZkMkhjdk4NGvBiDWEKOImwTmKZnJY=) 4: 323630323a663936643a3934303a3a2f34322d313238203d3e203437323732.roa (hash: 2uL+Gv7pcZ5QAbDXfkd2THTLCEgW6HqVBYN358rh9tA=) 5: 323630323a663936643a6530303a3a2f34302d3430203d3e203437323732.roa (hash: X3gobtjIiU6Ju/3ZCACUFgs37xuvMmCHuGD6b0L4z1E=) 6: 32332e3137382e37322e302f32342d3332203d3e203437323732.roa (hash: /oLZNNLY8HETWCKcLu57GGam7qooB1Li5d7hSe25K/E=) 7: 323630323a663936643a3a2f34302d313238203d3e203437323732.roa (hash: ELyutkKyzeHb+a/3kFXt1gm3eu/nLlohbs7tJP4yR9o=) 8: 323630323a663936643a6632333a3a2f34382d3438203d3e203531393339.roa (hash: dzEBWzRg4H+3rClz1xjhpKSlOpV0E2o7cAvInJTm0vI=) 9: 323630323a663936643a6637323a3a2f34382d313238203d3e203437323732.roa (hash: eWFDLAHwggyMnF81ZcZUBJdRcTJkOUqBHxmzsA5lO3E=) 10: 323630323a663936643a3230303a3a2f34302d313238203d3e203437323732.roa (hash: 44dqkNaL0DrBBfrXHrYWoxtP8Gegcg+44Y3OMH+WKvI=) 11: 323630323a663936643a3930303a3a2f34322d313238203d3e203437323732.roa (hash: tZujUFEpCpfa158Jvf2PUh1FE/EOI984LjuM171xOOM=) 12: 323630323a663936643a6632353a3a2f34382d3438203d3e203531393339.roa (hash: 9Z0Qe3PJGHDxfqMjiAeZdP3ei3CuFpL2yticxvAKeHg=) 13: 323630323a663936643a6637313a3a2f34382d313238203d3e203437323732.roa (hash: eobko1RHEuygwb5xzmp8S9ttEUfkWYEqroNfG+R88ts=) 14: 323630323a663936643a3938303a3a2f34322d313238203d3e203437323732.roa (hash: ZWuFRtGD+zXxvISsfpQpZ5DPH36K8mlved5taA1ZgyI=) 15: 32332e3137322e3132302e302f32342d3332203d3e203437323732.roa (hash: O471OHIRG/KFXeZ9pKgcI2kYrWofF9ouN32zOK2wf/M=) 16: 323630323a663936643a6666643a3a2f34382d313238203d3e203437323732.roa (hash: EHXH5+qBCyNIbppIr7Q2DSQiSROUG8MKqQ9XvdjXReg=) 17: 323630323a663936643a3330303a3a2f34302d313238203d3e203437323732.roa (hash: w/EI0pp4KOJfyDw476RZI72dMWuXt3ZO6Zu5QDMPurE=) 18: 323630323a663936643a3130303a3a2f34382d313238203d3e203437323732.roa (hash: 9dSgTJisj64Kx3CoXcRrHswiodKSMeSqpqAta7tppZQ=) 19: 24F5DA48C3AFBCA0FFD921547EF09F776AF8A2EA.crl (hash: AmX1LiD/eGOes6CJGCQ1BD97KDfmwgiXqTIfCBPcbdQ=) 20: 323630323a663936643a6665303a3a2f34342d3434203d3e203437323732.roa (hash: UIA9v0v406ZO4c6BS5+SwVm6jPzV/WzSJBVyYbCxKoQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/24F5DA48C3AFBCA0FFD921547EF09F776AF8A2EA.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/24F5DA48C3AFBCA0FFD921547EF09F776AF8A2EA.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 02:23:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:92:d6:bc:28:9d:c7:b5:55:75:5c:ac:4c:f6:4e:19:90:46:8e:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7 Validity Not Before: Jun 29 01:19:49 2025 GMT Not After : Jun 30 02:23:49 2025 GMT Subject: CN=D2D49AAC9E15D58DBD7FBD2BC8AF67D0B30CF045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f3:4c:98:e3:38:7d:45:c1:b8:0d:13:cb:f7: 72:2a:af:82:61:31:7e:02:6f:9f:21:b6:92:4d:95: 16:78:01:c1:df:21:96:de:d9:e9:f5:1c:66:34:05: 5f:93:c5:b2:98:16:cd:2b:a1:bb:c8:d4:ca:58:f8: 84:ea:87:27:7c:c0:f3:69:e2:b1:19:35:8f:35:d9: 03:0a:cf:f4:b7:5b:48:b4:e5:da:e7:49:e2:e1:e9: d9:78:c4:a2:9e:27:c7:9f:bf:d2:e5:62:8b:fd:10: 3f:20:c1:a8:0b:20:8c:4d:79:1d:8f:4f:bb:ca:62: dc:92:c7:a9:75:24:d0:af:4b:95:f1:bb:7f:5d:ba: 69:9a:ef:cc:b8:29:8b:38:3f:fa:e2:6c:13:c0:26: 77:4e:9c:30:e0:8c:39:41:d1:84:4c:9f:72:3d:11: e0:7c:d2:9b:fb:8d:0c:12:7c:18:e5:2f:7a:09:6d: af:e7:7b:6d:ac:88:59:7e:e2:d7:72:b8:14:75:05: 00:ca:cd:fd:11:86:80:fa:ce:a4:81:0d:87:71:1f: 1b:81:cc:e8:29:be:7e:bb:aa:92:be:97:12:3f:a0: 6d:77:2d:ab:5b:4a:41:3d:2f:d1:8e:c1:bd:6c:d6: f9:1e:38:fa:bc:69:0e:ea:83:70:8d:95:2a:7f:60: 7f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:D4:9A:AC:9E:15:D5:8D:BD:7F:BD:2B:C8:AF:67:D0:B3:0C:F0:45 X509v3 Authority Key Identifier: keyid:24:F5:DA:48:C3:AF:BC:A0:FF:D9:21:54:7E:F0:9F:77:6A:F8:A2:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/24F5DA48C3AFBCA0FFD921547EF09F776AF8A2EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/24F5DA48C3AFBCA0FFD921547EF09F776AF8A2EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:fb:b4:27:4b:7b:54:d4:23:ca:c9:fa:d9:2a:46:b2:8b:cc: 49:c7:fe:ea:a0:11:16:74:95:5c:5d:a2:ae:8d:a0:b7:d5:c6: 7b:19:4f:67:c4:e6:68:ee:9e:f1:5a:3d:15:b0:51:49:ca:a0: 96:1b:69:12:72:e6:c5:39:0a:19:cc:0b:aa:11:27:59:10:8f: dc:3f:fb:b9:a2:9e:95:6e:e0:0f:5b:3c:7b:d7:fe:07:9d:7a: 89:1a:95:39:08:b2:34:b0:ae:6e:c9:f6:e1:dc:b4:ca:57:5e: f0:7b:ca:13:7e:e7:dd:e6:d9:41:40:64:c1:9d:9c:f8:e1:ac: 06:68:49:14:3b:e3:3e:5f:43:c4:13:10:32:fb:9c:66:86:f4: fe:f9:fa:9f:fe:5f:70:c9:a0:c7:be:cb:b9:7c:de:99:06:00: f6:f4:bc:9d:52:52:f9:d8:3f:c8:a5:bf:ec:4e:c5:fd:e6:48: e7:12:00:a4:2f:a5:16:56:43:0b:1b:93:1f:e1:e9:fd:df:b0: 45:6e:0b:00:4c:11:95:47:f3:de:c6:28:31:89:28:67:56:fd: cb:92:72:81:8e:7c:42:b3:3c:7c:61:0f:00:e6:2d:19:9f:92: bd:fe:a6:0b:4f:6c:20:b5:a4:b0:8c:6e:4b:55:fe:a8:23:5f: 93:26:b1:67 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUNZLWvCidx7VVdVysTPZOGZBGjnQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZjQ0YzgyZGFiYTllY2E3NDZiMGQwMGY1ZWMxYzcwOTQ1 NGJlNjEyNTY2MWI5MmJkYTcwHhcNMjUwNjI5MDExOTQ5WhcNMjUwNjMwMDIyMzQ5 WjAzMTEwLwYDVQQDEyhEMkQ0OUFBQzlFMTVENThEQkQ3RkJEMkJDOEFGNjdEMEIz MENGMDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vNMmOM4fUXB uA0Ty/dyKq+CYTF+Am+fIbaSTZUWeAHB3yGW3tnp9RxmNAVfk8WymBbNK6G7yNTK WPiE6ocnfMDzaeKxGTWPNdkDCs/0t1tItOXa50ni4enZeMSinifHn7/S5WKL/RA/ IMGoCyCMTXkdj0+7ymLcksepdSTQr0uV8bt/Xbppmu/MuCmLOD/64mwTwCZ3Tpww 4Iw5QdGETJ9yPRHgfNKb+40MEnwY5S96CW2v53ttrIhZfuLXcrgUdQUAys39EYaA +s6kgQ2HcR8bgczoKb5+u6qSvpcSP6Btdy2rW0pBPS/RjsG9bNb5Hjj6vGkO6oNw jZUqf2B/iQIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFNLUmqyeFdWNvX+9K8ivZ9Cz DPBFMB8GA1UdIwQYMBaAFCT12kjDr7yg/9khVH7wn3dq+KLqMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUtNDlmOS05YjZj LTljOWYzODk4OTk1ZC8xLzI0RjVEQTQ4QzNBRkJDQTBGRkQ5MjE1NDdFRjA5Rjc3 NkFGOEEyRUEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It NGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wMmM3NzA2Yi0zYmFmLTQyY2ItYmRmNy03 ODJiMDM2MjUyYjMvZjQ0YzgyZGFiYTllY2E3NDZiMGQwMGY1ZWMxYzcwOTQ1NGJl NjEyNTY2MWI5MmJkYTcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv Zjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzEvMjRGNURBNDhD M0FGQkNBMEZGRDkyMTU0N0VGMDlGNzc2QUY4QTJFQS5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHL7tCdL e1TUI8rJ+tkqRrKLzEnH/uqgERZ0lVxdoq6NoLfVxnsZT2fE5mjunvFaPRWwUUnK oJYbaRJy5sU5ChnMC6oRJ1kQj9w/+7minpVu4A9bPHvX/gedeokalTkIsjSwrm7J 9uHctMpXXvB7yhN+593m2UFAZMGdnPjhrAZoSRQ74z5fQ8QTEDL7nGaG9P75+p/+ X3DJoMe+y7l83pkGAPb0vJ1SUvnYP8ilv+xOxf3mSOcSAKQvpRZWQwsbkx/h6f3f sEVuCwBMEZVH897GKDGJKGdW/cuScoGOfEKzPHxhDwDmLRmfkr3+pgtPbCC1pLCM bktV/qgjX5MmsWc= -----END CERTIFICATE-----Generated at Sun Jun 29 15:38:37 2025 by rpki-client