$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/24F5DA48C3AFBCA0FFD921547EF09F776AF8A2EA.mft File: 24F5DA48C3AFBCA0FFD921547EF09F776AF8A2EA.mft (raw, json) Hash identifier: 0vTGzw+fTn1KHsfUFZGDizvX3hjaT0lNiEcZ5y9eEe0= Subject key identifier: 11:68:B1:0A:B9:36:50:DF:F8:7E:E3:73:FB:89:B8:7A:24:D1:F9:52 Authority key identifier: 24:F5:DA:48:C3:AF:BC:A0:FF:D9:21:54:7E:F0:9F:77:6A:F8:A2:EA Certificate issuer: /CN=f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7 Certificate serial: 59164AED5A5A0E15A37EF0FA1D4E63EA8390D921 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/24F5DA48C3AFBCA0FFD921547EF09F776AF8A2EA.mft Manifest number: 0111 Signing time: Wed 07 May 2025 01:46:30 +0000 Manifest this update: Wed 07 May 2025 01:41:30 +0000 Manifest next update: Thu 08 May 2025 04:10:30 +0000 Files and hashes: 1: 323630323a663936643a6530303a3a2f34302d3430203d3e203437323732.roa (hash: X3gobtjIiU6Ju/3ZCACUFgs37xuvMmCHuGD6b0L4z1E=) 2: 323630323a663936643a6637313a3a2f34382d313238203d3e203437323732.roa (hash: eobko1RHEuygwb5xzmp8S9ttEUfkWYEqroNfG+R88ts=) 3: 323630323a663936643a6130303a3a2f34302d313238203d3e203437323732.roa (hash: v8VIz6Z4U1e+2MARLBqIZLipTale7VMSSo1MTqwjwX8=) 4: 323630323a663936643a6637323a3a2f34382d313238203d3e203437323732.roa (hash: eWFDLAHwggyMnF81ZcZUBJdRcTJkOUqBHxmzsA5lO3E=) 5: 24F5DA48C3AFBCA0FFD921547EF09F776AF8A2EA.crl (hash: iENVY++6oukfKIKjVSFzsS9+V6C2LnZOYzxurOj+Jzw=) 6: 323630323a663936643a6632333a3a2f34382d3438203d3e203531393339.roa (hash: dzEBWzRg4H+3rClz1xjhpKSlOpV0E2o7cAvInJTm0vI=) 7: 323630323a663936643a3930303a3a2f34322d313238203d3e203437323732.roa (hash: tZujUFEpCpfa158Jvf2PUh1FE/EOI984LjuM171xOOM=) 8: 32332e3137382e37322e302f32342d3332203d3e203437323732.roa (hash: /oLZNNLY8HETWCKcLu57GGam7qooB1Li5d7hSe25K/E=) 9: 323630323a663936643a3a2f34302d313238203d3e203437323732.roa (hash: ELyutkKyzeHb+a/3kFXt1gm3eu/nLlohbs7tJP4yR9o=) 10: 323630323a663936643a6666623a3a2f34382d313238203d3e203437323732.roa (hash: KAN80sbwQ+zymxwiXxfy/i1T6WF0TEMtiVqdT5TpTTw=) 11: 323630323a663936643a3934303a3a2f34322d313238203d3e203437323732.roa (hash: 2uL+Gv7pcZ5QAbDXfkd2THTLCEgW6HqVBYN358rh9tA=) 12: 323630323a663936643a6630303a3a2f34342d313238203d3e203437323732.roa (hash: qeaVhFpgbPNVS1ZkMkhjdk4NGvBiDWEKOImwTmKZnJY=) 13: 323630323a663936643a3230303a3a2f34302d313238203d3e203437323732.roa (hash: 44dqkNaL0DrBBfrXHrYWoxtP8Gegcg+44Y3OMH+WKvI=) 14: 323630323a663936643a6632353a3a2f34382d3438203d3e203531393339.roa (hash: 9Z0Qe3PJGHDxfqMjiAeZdP3ei3CuFpL2yticxvAKeHg=) 15: 323630323a663936643a6666643a3a2f34382d313238203d3e203437323732.roa (hash: EHXH5+qBCyNIbppIr7Q2DSQiSROUG8MKqQ9XvdjXReg=) 16: 323630323a663936643a6632303a3a2f34342d3438203d3e203531393339.roa (hash: +AJQANn8zhF+ZSh6IH18SF8cEWRM7vqStSNTtpgs9IE=) 17: 323630323a663936643a3330303a3a2f34302d313238203d3e203437323732.roa (hash: w/EI0pp4KOJfyDw476RZI72dMWuXt3ZO6Zu5QDMPurE=) 18: 323630323a663936643a3130303a3a2f34382d313238203d3e203437323732.roa (hash: 9dSgTJisj64Kx3CoXcRrHswiodKSMeSqpqAta7tppZQ=) 19: 32332e3137322e3132302e302f32342d3332203d3e203437323732.roa (hash: O471OHIRG/KFXeZ9pKgcI2kYrWofF9ouN32zOK2wf/M=) 20: 323630323a663936643a3938303a3a2f34322d313238203d3e203437323732.roa (hash: ZWuFRtGD+zXxvISsfpQpZ5DPH36K8mlved5taA1ZgyI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/24F5DA48C3AFBCA0FFD921547EF09F776AF8A2EA.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/24F5DA48C3AFBCA0FFD921547EF09F776AF8A2EA.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 04:10:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:16:4a:ed:5a:5a:0e:15:a3:7e:f0:fa:1d:4e:63:ea:83:90:d9:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7 Validity Not Before: May 7 01:41:30 2025 GMT Not After : May 8 04:10:30 2025 GMT Subject: CN=1168B10AB93650DFF87EE373FB89B87A24D1F952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5c:ec:d4:a5:ad:ff:cd:2f:15:64:49:94:68: 45:02:fe:e9:92:02:86:9b:50:e9:96:27:9f:80:0d: e5:36:ad:8a:be:d1:9e:6a:2c:18:44:5c:a7:37:a2: 38:e7:94:6d:51:c5:9d:04:7e:f0:9e:cb:0a:15:4e: c0:0b:bf:29:6e:d7:53:5b:02:58:b7:b1:49:72:3e: f7:65:97:03:53:1d:37:71:c7:b9:eb:1b:8f:c9:d9: ae:69:82:57:25:a6:f0:5f:7d:56:56:8e:fd:eb:eb: c2:06:4c:ad:a7:bb:b1:0c:25:ae:6b:e0:78:8a:fb: a5:64:e9:f5:78:51:f9:a7:b9:71:e9:9a:d0:8f:4f: b2:76:4f:b7:3a:d4:01:72:89:e0:da:8a:a3:6c:24: a0:34:36:68:4c:7a:79:08:1e:a6:b1:02:ed:1b:8a: ce:b4:e1:09:c8:63:a0:6c:e9:61:a0:33:d2:ca:06: 3d:35:45:62:54:73:2a:aa:a4:2f:f9:0a:02:ef:93: 78:14:3c:2c:29:95:83:6a:7c:a0:02:96:60:b5:e7: 95:05:28:88:64:22:1f:6e:9c:8c:07:a5:76:4f:f7: d0:46:3f:31:0c:9f:d3:af:39:07:04:06:86:7e:1f: 07:69:23:27:17:f6:a8:2d:b4:46:f1:54:fc:25:07: a5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:68:B1:0A:B9:36:50:DF:F8:7E:E3:73:FB:89:B8:7A:24:D1:F9:52 X509v3 Authority Key Identifier: keyid:24:F5:DA:48:C3:AF:BC:A0:FF:D9:21:54:7E:F0:9F:77:6A:F8:A2:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/24F5DA48C3AFBCA0FFD921547EF09F776AF8A2EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/24F5DA48C3AFBCA0FFD921547EF09F776AF8A2EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:c5:6a:6d:b9:64:5a:39:4c:b7:44:1f:af:c9:e8:bc:09:8d: b5:f4:3e:f4:4c:c2:93:10:44:56:9d:50:13:37:b9:c9:25:a2: 61:9f:e0:6c:0b:ac:12:3f:0e:6d:92:c7:b5:87:fc:2c:86:06: 12:53:98:d4:7d:a2:26:5e:dd:fe:f5:5d:29:47:80:07:f5:92: ee:5e:55:53:59:4c:a2:0b:fb:66:03:6d:77:0a:fc:2f:c3:24: 99:23:b3:63:fc:83:dd:09:57:29:30:df:18:0c:71:29:fe:c4: 94:6f:ac:b5:9d:c9:82:27:1e:35:f6:f0:86:b2:de:6e:74:d5: bf:e4:57:18:a6:cc:c6:ba:48:ad:30:ac:4a:91:2f:1d:71:e9: 8b:2a:00:72:af:3f:46:6b:e0:03:d1:79:5d:b5:58:62:ec:c7: 0b:92:25:0a:9e:8f:56:6d:e1:28:c1:f3:b2:18:1f:15:5f:a1: 41:85:71:31:94:f7:b3:db:06:a7:bc:44:ee:ed:e5:f8:ae:46: ab:98:b2:6c:71:55:9a:9e:87:57:2c:93:6e:f9:4d:11:6f:4f: f3:ac:88:30:e9:bb:f4:29:58:d8:22:44:d3:0b:f1:9f:93:f9: 12:16:ed:fe:40:00:1d:b3:d7:af:e8:c6:22:63:a6:aa:87:5d: 0a:cf:f1:bd -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUWRZK7VpaDhWjfvD6HU5j6oOQ2SEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZjQ0YzgyZGFiYTllY2E3NDZiMGQwMGY1ZWMxYzcwOTQ1 NGJlNjEyNTY2MWI5MmJkYTcwHhcNMjUwNTA3MDE0MTMwWhcNMjUwNTA4MDQxMDMw WjAzMTEwLwYDVQQDEygxMTY4QjEwQUI5MzY1MERGRjg3RUUzNzNGQjg5Qjg3QTI0 RDFGOTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVzs1KWt/80v FWRJlGhFAv7pkgKGm1DpliefgA3lNq2KvtGeaiwYRFynN6I455RtUcWdBH7wnssK FU7AC78pbtdTWwJYt7FJcj73ZZcDUx03cce56xuPydmuaYJXJabwX31WVo796+vC Bkytp7uxDCWua+B4ivulZOn1eFH5p7lx6ZrQj0+ydk+3OtQBcong2oqjbCSgNDZo THp5CB6msQLtG4rOtOEJyGOgbOlhoDPSygY9NUViVHMqqqQv+QoC75N4FDwsKZWD anygApZgteeVBSiIZCIfbpyMB6V2T/fQRj8xDJ/TrzkHBAaGfh8HaSMnF/aoLbRG 8VT8JQelrQIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFBFosQq5NlDf+H7jc/uJuHok 0flSMB8GA1UdIwQYMBaAFCT12kjDr7yg/9khVH7wn3dq+KLqMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUtNDlmOS05YjZj LTljOWYzODk4OTk1ZC8xLzI0RjVEQTQ4QzNBRkJDQTBGRkQ5MjE1NDdFRjA5Rjc3 NkFGOEEyRUEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It NGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wMmM3NzA2Yi0zYmFmLTQyY2ItYmRmNy03 ODJiMDM2MjUyYjMvZjQ0YzgyZGFiYTllY2E3NDZiMGQwMGY1ZWMxYzcwOTQ1NGJl NjEyNTY2MWI5MmJkYTcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv Zjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzEvMjRGNURBNDhD M0FGQkNBMEZGRDkyMTU0N0VGMDlGNzc2QUY4QTJFQS5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAD7Fam25 ZFo5TLdEH6/J6LwJjbX0PvRMwpMQRFadUBM3ucklomGf4GwLrBI/Dm2Sx7WH/CyG BhJTmNR9oiZe3f71XSlHgAf1ku5eVVNZTKIL+2YDbXcK/C/DJJkjs2P8g90JVykw 3xgMcSn+xJRvrLWdyYInHjX28Iay3m501b/kVximzMa6SK0wrEqRLx1x6YsqAHKv P0Zr4APReV21WGLsxwuSJQqej1Zt4SjB87IYHxVfoUGFcTGU97PbBqe8RO7t5fiu RquYsmxxVZqeh1csk275TRFvT/OsiDDpu/QpWNgiRNML8Z+T+RIW7f5AAB2z16/o xiJjpqqHXQrP8b0= -----END CERTIFICATE-----Generated at Wed May 7 17:55:24 2025 by rpki-client