$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/13DDCFA128DC141F076EB7B60F46359286489D55.mft File: 13DDCFA128DC141F076EB7B60F46359286489D55.mft (raw, json) Hash identifier: ofClXD8BHtX+NfjoQvMKEAXGgqLjHZZ4XJPEPVo2G40= Subject key identifier: 5F:3F:4F:00:7D:AE:9D:A1:4E:3F:2A:B8:99:7C:89:22:63:B7:3D:6E Authority key identifier: 13:DD:CF:A1:28:DC:14:1F:07:6E:B7:B6:0F:46:35:92:86:48:9D:55 Certificate issuer: /CN=13DDCFA128DC141F076EB7B60F46359286489D55 Certificate serial: 076A443CCA66B5BB92A88E2DA7D1CD6B62AB5437 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/13DDCFA128DC141F076EB7B60F46359286489D55.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/13DDCFA128DC141F076EB7B60F46359286489D55.mft Manifest number: 031A Signing time: Sun 15 Jun 2025 20:25:17 +0000 Manifest this update: Sun 15 Jun 2025 20:20:17 +0000 Manifest next update: Mon 16 Jun 2025 21:51:17 +0000 Files and hashes: 1: 326130613a363034303a613130363a3a2f34382d3438203d3e20323033383433.roa (hash: CTODbkYlpnVaHyONgQ5egtKNh9v6t29vIyot4VVbKKM=) 2: 326130613a363034303a613130313a3a2f34382d3438203d3e20323033383433.roa (hash: 8kE6bd3UIwVjGeLjsemhmEEHlGKhtuqOlLO98xqUvuU=) 3: 326130613a363034303a613130383a3a2f34382d3438203d3e20323033383433.roa (hash: nYmPrk/p3XSTF2XANQcl/CgW4KrSzA7liFnUdw6bGF8=) 4: 13DDCFA128DC141F076EB7B60F46359286489D55.crl (hash: tbjgcWb7wCo/sh7V8tzShmqytblIWZlr/7heI4vqlyQ=) 5: 326130613a363034303a613130323a3a2f34382d3438203d3e20323033383433.roa (hash: bikmWHpjPmXFeu6RdysBAjYypuerlP+G4LoSWyPysCg=) 6: 326130613a363034303a613130343a3a2f34382d3438203d3e20323033383433.roa (hash: PFv1w1/dhOLCzfwqwLHBj015XxebsCk8UvpgNeKoqdc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/13DDCFA128DC141F076EB7B60F46359286489D55.crl rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/13DDCFA128DC141F076EB7B60F46359286489D55.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/13DDCFA128DC141F076EB7B60F46359286489D55.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 20:59:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:6a:44:3c:ca:66:b5:bb:92:a8:8e:2d:a7:d1:cd:6b:62:ab:54:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13DDCFA128DC141F076EB7B60F46359286489D55 Validity Not Before: Jun 15 20:20:17 2025 GMT Not After : Jun 16 21:51:17 2025 GMT Subject: CN=5F3F4F007DAE9DA14E3F2AB8997C892263B73D6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:26:e8:10:c1:64:8a:03:0d:d3:1b:32:9f:32: b4:36:69:8e:a9:ac:9a:c5:62:aa:d4:6c:f5:40:83: 42:1a:05:0b:15:cd:2d:c6:99:d9:33:75:ff:f0:55: 14:ad:25:68:d8:94:7d:1f:76:9c:23:ba:01:e5:a4: 63:45:1b:2a:f6:c6:a8:f9:07:59:00:18:2c:73:3f: 5d:a2:2e:d3:49:8d:73:8b:79:fe:49:48:9e:d6:ae: a4:73:8a:02:51:f1:e0:cc:a7:3d:36:59:95:91:e4: 9d:23:f5:bf:ab:f7:6b:c3:11:ff:84:dd:71:e3:19: cc:80:6d:69:64:46:ac:9b:ef:53:d6:8e:7c:dd:47: 4f:9c:3e:f2:06:66:c2:d9:00:6b:87:27:f7:d9:63: a1:dd:91:74:c7:34:dc:cf:01:81:74:cc:fa:4f:41: 71:90:34:8d:2f:59:dd:d4:ab:56:6b:53:1b:09:b5: 80:ee:6b:27:4b:95:20:d8:4c:78:cf:0d:61:ee:51: 33:78:80:9e:39:64:d7:6b:51:b9:5b:8e:86:06:6d: 1f:12:45:9f:1d:8c:28:c7:61:40:e5:35:89:6f:fa: e4:59:a5:d9:5f:99:5f:54:27:5d:37:d5:ed:b0:eb: a3:e9:08:42:46:75:ec:b3:c7:fe:17:13:d7:e2:f4: fc:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:3F:4F:00:7D:AE:9D:A1:4E:3F:2A:B8:99:7C:89:22:63:B7:3D:6E X509v3 Authority Key Identifier: keyid:13:DD:CF:A1:28:DC:14:1F:07:6E:B7:B6:0F:46:35:92:86:48:9D:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/13DDCFA128DC141F076EB7B60F46359286489D55.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/13DDCFA128DC141F076EB7B60F46359286489D55.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/13DDCFA128DC141F076EB7B60F46359286489D55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:78:15:d1:34:cf:c6:62:68:d5:90:a4:d3:ee:89:7e:59:1a: 4f:a4:bb:4a:95:4f:f8:ea:15:10:38:89:96:94:63:14:91:7a: 83:24:e4:38:e7:ff:b4:c4:22:e4:94:25:49:31:9a:9c:a3:0d: 25:7d:5d:8a:38:3d:9e:43:d4:c2:3f:bb:0c:ba:5e:24:27:21: c1:33:63:d9:67:8c:12:b9:0c:f4:11:d3:06:38:5c:83:b4:a1: 90:ea:ea:e8:d4:9d:10:28:39:db:78:f7:29:c6:b0:12:80:df: 0f:c8:a3:35:32:64:e7:dd:65:2a:f0:e9:41:6d:61:ef:a9:97: aa:8b:be:bc:b5:3b:67:49:9e:52:57:57:9c:6a:12:87:b0:8b: 6c:c7:ee:7a:c6:ce:56:00:6e:d8:34:fe:bd:09:2d:61:ed:b5: ae:7d:43:0f:ef:ab:a8:73:fd:9d:a5:d3:7f:8a:97:90:a6:3e: b5:53:4b:3b:a7:f0:15:16:92:09:79:4d:72:b0:b4:2f:c8:c2: 80:e9:13:a4:83:aa:16:b9:57:c2:d1:5c:a2:e2:ee:ce:0a:7b: ee:eb:70:f0:9c:38:d4:e3:74:59:c4:4d:66:40:b3:2e:e0:e4: 11:ec:ec:7a:69:39:b3:ca:30:48:c1:67:39:8e:0e:21:43:3b: 53:af:da:34 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUB2pEPMpmtbuSqI4tp9HNa2KrVDcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTNERENGQTEyOERDMTQxRjA3NkVCN0I2MEY0NjM1OTI4 NjQ4OUQ1NTAeFw0yNTA2MTUyMDIwMTdaFw0yNTA2MTYyMTUxMTdaMDMxMTAvBgNV BAMTKDVGM0Y0RjAwN0RBRTlEQTE0RTNGMkFCODk5N0M4OTIyNjNCNzNENkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXJugQwWSKAw3TGzKfMrQ2aY6p rJrFYqrUbPVAg0IaBQsVzS3Gmdkzdf/wVRStJWjYlH0fdpwjugHlpGNFGyr2xqj5 B1kAGCxzP12iLtNJjXOLef5JSJ7WrqRzigJR8eDMpz02WZWR5J0j9b+r92vDEf+E 3XHjGcyAbWlkRqyb71PWjnzdR0+cPvIGZsLZAGuHJ/fZY6HdkXTHNNzPAYF0zPpP QXGQNI0vWd3Uq1ZrUxsJtYDuaydLlSDYTHjPDWHuUTN4gJ45ZNdrUblbjoYGbR8S RZ8djCjHYUDlNYlv+uRZpdlfmV9UJ1031e2w66PpCEJGdeyzx/4XE9fi9PwLAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUXz9PAH2unaFOPyq4mXyJImO3PW4wHwYDVR0j BBgwFoAUE93PoSjcFB8Hbre2D0Y1koZInVUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFhZmM4 ZWI4LzIvMTNERENGQTEyOERDMTQxRjA3NkVCN0I2MEY0NjM1OTI4NjQ4OUQ1NS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzEzRERDRkExMjhEQzE0 MUYwNzZFQjdCNjBGNDYzNTkyODY0ODlENTUuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFhZmM4ZWI4 LzIvMTNERENGQTEyOERDMTQxRjA3NkVCN0I2MEY0NjM1OTI4NjQ4OUQ1NS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAGp4FdE0z8ZiaNWQpNPuiX5ZGk+ku0qVT/jqFRA4iZaUYxSReoMk5Djn /7TEIuSUJUkxmpyjDSV9XYo4PZ5D1MI/uwy6XiQnIcEzY9lnjBK5DPQR0wY4XIO0 oZDq6ujUnRAoOdt49ynGsBKA3w/IozUyZOfdZSrw6UFtYe+pl6qLvry1O2dJnlJX V5xqEoewi2zH7nrGzlYAbtg0/r0JLWHtta59Qw/vq6hz/Z2l03+Kl5CmPrVTSzun 8BUWkgl5TXKwtC/IwoDpE6SDqha5V8LRXKLi7s4Ke+7rcPCcONTjdFnETWZAsy7g 5BHs7HppObPKMEjBZzmODiFDO1Ov2jQ= -----END CERTIFICATE-----Generated at Mon Jun 16 04:23:43 2025 by rpki-client