$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/4/B126634521E5E49C535FCBEC43BA2D922C30E136.mft File: B126634521E5E49C535FCBEC43BA2D922C30E136.mft (raw, json) Hash identifier: mYj2INrJaFe6FsL8ekRhhfDbfQVDREQdGpf0xH+oFFc= Subject key identifier: D3:BA:19:B1:6F:2D:EE:B7:29:99:B8:0A:98:EC:94:58:27:43:0A:86 Authority key identifier: B1:26:63:45:21:E5:E4:9C:53:5F:CB:EC:43:BA:2D:92:2C:30:E1:36 Certificate issuer: /CN=B126634521E5E49C535FCBEC43BA2D922C30E136 Certificate serial: 4CFCAF8EF09683A1212DC5E2BE2CACD403024A00 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B126634521E5E49C535FCBEC43BA2D922C30E136.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/4/B126634521E5E49C535FCBEC43BA2D922C30E136.mft Manifest number: 2F Signing time: Sat 26 Apr 2025 22:51:50 +0000 Manifest this update: Sat 26 Apr 2025 22:46:50 +0000 Manifest next update: Mon 28 Apr 2025 00:41:50 +0000 Files and hashes: 1: 326130613a363034303a343430303a3a2f34382d3438203d3e203530313034.roa (hash: wVp4YEv0t3dNFBj7z0WS+J9iHIKEQspXspUxf+IIu0Q=) 2: B126634521E5E49C535FCBEC43BA2D922C30E136.crl (hash: tNSxyOBCWUSLcInCbBEPa/nVKPw23XhBPZjgWx/NPkU=) 3: 326130613a363034303a343430303a3a2f34382d3438203d3e20313532333638.roa (hash: pIkMxK/vDEw873dkebmyQN4JOmiMolHB/gzzt1LQXbo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/4/B126634521E5E49C535FCBEC43BA2D922C30E136.crl rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/4/B126634521E5E49C535FCBEC43BA2D922C30E136.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B126634521E5E49C535FCBEC43BA2D922C30E136.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 16:30:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:fc:af:8e:f0:96:83:a1:21:2d:c5:e2:be:2c:ac:d4:03:02:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B126634521E5E49C535FCBEC43BA2D922C30E136 Validity Not Before: Apr 26 22:46:50 2025 GMT Not After : Apr 28 00:41:50 2025 GMT Subject: CN=D3BA19B16F2DEEB72999B80A98EC945827430A86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:39:be:af:4e:c7:39:5e:70:24:c0:97:e8:a5: d3:99:71:eb:1f:83:66:cf:69:e2:3a:a9:bf:cc:93: ea:23:b7:04:82:7c:da:9e:93:dd:d4:08:9f:ce:b4: 08:90:e5:e5:b8:06:f2:01:c5:5d:3c:05:23:c3:3c: 9e:32:88:f9:17:04:2b:90:e5:a6:a7:6e:9b:36:6c: 0e:66:19:9c:70:42:d0:26:e0:29:3a:54:24:1e:9a: da:da:ae:2e:fd:71:9b:e3:2c:b9:2a:64:be:e8:e0: c8:85:e7:c2:5f:0a:ed:66:d0:be:a0:8a:16:64:2e: 35:0b:53:2a:8f:a7:77:71:05:a3:3e:bc:b1:d9:4e: 4d:b8:c8:b0:ca:13:c4:d4:48:c5:c1:99:03:2d:59: c9:54:57:2a:e3:f4:38:ac:24:8c:9a:70:7d:6c:c1: e3:d8:36:e5:f8:48:1d:b2:c3:c9:8b:8a:c7:09:3f: 09:7c:73:6d:37:2b:6c:27:d6:3e:89:15:fa:16:56: e3:1c:a9:c5:b8:0e:0a:82:41:4a:1a:db:4e:48:69: aa:83:1e:e3:d3:d3:33:90:29:b4:7f:a1:3d:3b:64: 16:d8:3f:07:48:6a:59:47:4c:16:4c:26:52:14:f6: 68:6e:3f:33:e7:e4:49:bb:78:ea:16:8e:89:99:8f: 60:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:BA:19:B1:6F:2D:EE:B7:29:99:B8:0A:98:EC:94:58:27:43:0A:86 X509v3 Authority Key Identifier: keyid:B1:26:63:45:21:E5:E4:9C:53:5F:CB:EC:43:BA:2D:92:2C:30:E1:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/4/B126634521E5E49C535FCBEC43BA2D922C30E136.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B126634521E5E49C535FCBEC43BA2D922C30E136.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/4/B126634521E5E49C535FCBEC43BA2D922C30E136.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:a1:af:32:9f:c7:96:32:2d:4c:54:1f:fe:be:3a:85:7d:ef: 41:e1:34:8c:92:4a:da:02:40:74:b3:2d:5d:67:e6:ae:1e:14: cf:f6:3f:19:c6:ca:b0:b2:d5:b8:cd:03:e9:e4:71:c3:0a:92: 60:5b:06:52:ac:b1:13:16:cb:89:20:2c:cb:50:74:6f:86:13: b3:96:2b:9d:f1:08:c6:fd:95:9f:6d:96:99:15:1b:45:85:65: 74:3e:fa:b7:ff:fb:83:f3:f6:b0:94:9d:05:11:24:1d:17:89: b5:d8:c4:2f:85:e5:9b:95:ee:f5:2c:a0:cf:48:91:89:6b:4e: 3d:3d:e1:a0:93:55:13:e0:24:3d:a7:9d:a3:40:6c:22:50:bf: 66:c2:5c:17:01:f4:e2:51:33:4d:60:67:4f:68:87:dc:38:74: 38:59:57:76:7a:26:7c:db:4c:21:fd:94:5a:9d:0e:a5:ed:45: 98:9b:92:f9:7e:bd:9f:e6:e2:d4:ab:6e:37:8a:68:02:f2:1c: a5:53:a7:49:c7:de:80:60:b4:22:8e:e1:b0:dc:16:b5:6d:4f: 34:96:a8:51:45:9f:24:50:17:6f:70:74:49:5f:a4:05:40:e7: 1d:c5:c5:37:63:b8:b4:62:b8:28:fa:c8:c0:5b:a9:9b:1c:a7: e9:e7:4f:3a -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUTPyvjvCWg6EhLcXiviys1AMCSgAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjEyNjYzNDUyMUU1RTQ5QzUzNUZDQkVDNDNCQTJEOTIy QzMwRTEzNjAeFw0yNTA0MjYyMjQ2NTBaFw0yNTA0MjgwMDQxNTBaMDMxMTAvBgNV BAMTKEQzQkExOUIxNkYyREVFQjcyOTk5QjgwQTk4RUM5NDU4Mjc0MzBBODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Ob6vTsc5XnAkwJfopdOZcesf g2bPaeI6qb/Mk+ojtwSCfNqek93UCJ/OtAiQ5eW4BvIBxV08BSPDPJ4yiPkXBCuQ 5aanbps2bA5mGZxwQtAm4Ck6VCQemtrari79cZvjLLkqZL7o4MiF58JfCu1m0L6g ihZkLjULUyqPp3dxBaM+vLHZTk24yLDKE8TUSMXBmQMtWclUVyrj9DisJIyacH1s wePYNuX4SB2yw8mLiscJPwl8c203K2wn1j6JFfoWVuMcqcW4DgqCQUoa205IaaqD HuPT0zOQKbR/oT07ZBbYPwdIallHTBZMJlIU9mhuPzPn5Em7eOoWjomZj2BrAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQU07oZsW8t7rcpmbgKmOyUWCdDCoYwHwYDVR0j BBgwFoAUsSZjRSHl5JxTX8vsQ7otkiww4TYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVk OGM0LzQvQjEyNjYzNDUyMUU1RTQ5QzUzNUZDQkVDNDNCQTJEOTIyQzMwRTEzNi5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wL0IxMjY2MzQ1MjFFNUU0 OUM1MzVGQ0JFQzQzQkEyRDkyMkMzMEUxMzYuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVkOGM0 LzQvQjEyNjYzNDUyMUU1RTQ5QzUzNUZDQkVDNDNCQTJEOTIyQzMwRTEzNi5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBANGhrzKfx5YyLUxUH/6+OoV970HhNIySStoCQHSzLV1n5q4eFM/2PxnG yrCy1bjNA+nkccMKkmBbBlKssRMWy4kgLMtQdG+GE7OWK53xCMb9lZ9tlpkVG0WF ZXQ++rf/+4Pz9rCUnQURJB0XibXYxC+F5ZuV7vUsoM9IkYlrTj094aCTVRPgJD2n naNAbCJQv2bCXBcB9OJRM01gZ09oh9w4dDhZV3Z6JnzbTCH9lFqdDqXtRZibkvl+ vZ/m4tSrbjeKaALyHKVTp0nH3oBgtCKO4bDcFrVtTzSWqFFFnyRQF29wdElfpAVA 5x3FxTdjuLRiuCj6yMBbqZscp+nnTzo= -----END CERTIFICATE-----Generated at Sun Apr 27 07:38:59 2025 by rpki-client