$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft File: 6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft (raw, json) Hash identifier: UyCQrAf0mrdqIwU1v0BXtbvG+ij0FmTI1+64kC3DdSg= Subject key identifier: CC:5F:7C:40:8B:BC:D7:A7:05:7D:9A:AD:EE:0D:15:4D:99:41:1B:A4 Authority key identifier: 69:86:DC:82:81:2C:47:DA:14:99:4B:8E:6E:72:7B:72:E0:B2:F8:D8 Certificate issuer: /CN=6986DC82812C47DA14994B8E6E727B72E0B2F8D8 Certificate serial: 199915E7D8466907546121439B19092FA880F1A1 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft Manifest number: 22 Signing time: Fri 08 Aug 2025 12:59:27 +0000 Manifest this update: Fri 08 Aug 2025 12:54:27 +0000 Manifest next update: Sat 09 Aug 2025 15:30:27 +0000 Files and hashes: 1: 326130613a363034303a343430303a3a2f34382d3438203d3e20313532333638.roa (hash: cr9zAfMvxZve/7JXD2f4n3BhiKrPiLnrwH/qsV4egwU=) 2: 326130613a363034303a343430303a3a2f34382d3438203d3e203530313034.roa (hash: JDVDvoY2LzG4FOnjq1lk2gJuRJSJTwl39Idwnd4C3E8=) 3: 6986DC82812C47DA14994B8E6E727B72E0B2F8D8.crl (hash: 7fItIAHS388cUTLnUZgkhiSklHkK5L2OHbUw8nJwu34=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.crl rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 09 Aug 2025 08:16:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:99:15:e7:d8:46:69:07:54:61:21:43:9b:19:09:2f:a8:80:f1:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6986DC82812C47DA14994B8E6E727B72E0B2F8D8 Validity Not Before: Aug 8 12:54:27 2025 GMT Not After : Aug 9 15:30:27 2025 GMT Subject: CN=CC5F7C408BBCD7A7057D9AADEE0D154D99411BA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:85:aa:75:ce:14:f5:c0:63:a9:e5:44:3b:d6: 15:27:6c:9c:9f:95:37:bd:6b:e9:03:64:69:b9:e5: 0f:db:9d:f5:97:50:a3:d1:36:5b:7b:07:bc:19:13: 29:ee:d6:14:00:32:66:ee:82:00:dc:2e:cc:e4:13: 5e:40:fe:a4:c2:d8:79:59:20:76:f6:a4:b1:1d:43: 8f:e3:4e:24:ab:bd:e3:b3:82:33:02:5d:82:ba:81: 2e:87:4b:dd:5f:b2:99:5f:4d:a3:57:89:8d:91:07: 38:cc:ad:38:cd:03:fc:f6:7b:13:0e:bf:b1:21:37: a8:60:83:ca:05:3d:d0:ce:24:9b:01:18:3e:31:fa: 4d:be:5f:b8:0e:e7:d4:62:61:c6:14:ef:15:e4:b5: 5f:1a:5a:64:2a:af:d5:04:08:cd:4f:33:00:22:d3: e3:6c:4e:d7:6a:92:86:98:56:bd:ad:66:71:09:39: 50:7a:3a:e5:bf:60:a5:1a:b6:d0:94:9c:ae:ff:37: a4:d8:2e:bd:b1:66:15:03:79:b5:4e:19:77:85:78: 6d:70:93:cd:ee:81:7f:87:32:30:8e:42:db:07:9d: 8d:99:62:8b:d4:98:e0:e8:85:c6:2d:b7:6f:bc:5a: 20:f4:af:42:23:bb:3b:9e:c4:80:3d:8b:08:77:e1: 0d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:5F:7C:40:8B:BC:D7:A7:05:7D:9A:AD:EE:0D:15:4D:99:41:1B:A4 X509v3 Authority Key Identifier: keyid:69:86:DC:82:81:2C:47:DA:14:99:4B:8E:6E:72:7B:72:E0:B2:F8:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:36:9c:68:93:51:b5:27:ff:cc:88:06:f1:9f:b3:e3:34:be: 62:16:22:05:10:3c:aa:1b:a9:e4:40:e2:cf:de:7d:45:e8:4a: 91:91:8a:69:09:f8:ec:ef:18:93:48:74:c3:8e:6a:fa:e7:8c: 1d:b0:ee:aa:7d:c2:7e:cf:88:53:75:a9:7c:2b:c6:d3:5c:f7: 28:d6:fb:c6:cb:6f:c8:85:8f:c0:b9:3a:0c:e5:5b:80:89:e4: 64:f3:60:ab:96:9c:6d:f2:01:2f:42:fa:2b:e8:28:58:45:a4: 4b:97:47:10:70:53:53:99:3d:2f:b9:6e:d8:13:a3:29:76:46: e9:ed:5e:42:66:8f:b4:0f:a2:a7:13:0b:39:82:46:66:16:ef: df:b3:ca:0c:62:fa:8e:b6:05:e5:bc:e0:02:b5:de:f9:e0:97: 5d:a3:54:ea:16:0b:b7:b8:f1:a1:6a:14:7d:7e:eb:5c:10:bc: d1:d9:2d:e0:77:40:4d:b0:73:c6:f1:a0:23:e2:46:ab:1b:51: 36:e6:06:16:34:0b:43:2e:18:ea:b1:60:26:37:a8:d2:a1:1d: 14:51:e6:70:79:d4:63:50:e0:94:a7:53:20:59:02:0e:b2:df: df:14:0d:30:5f:48:3d:24:cc:51:69:b7:0c:77:af:f3:b1:c7: 77:20:b8:e3 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUGZkV59hGaQdUYSFDmxkJL6iA8aEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk4NkRDODI4MTJDNDdEQTE0OTk0QjhFNkU3MjdCNzJF MEIyRjhEODAeFw0yNTA4MDgxMjU0MjdaFw0yNTA4MDkxNTMwMjdaMDMxMTAvBgNV BAMTKENDNUY3QzQwOEJCQ0Q3QTcwNTdEOUFBREVFMEQxNTREOTk0MTFCQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCohap1zhT1wGOp5UQ71hUnbJyf lTe9a+kDZGm55Q/bnfWXUKPRNlt7B7wZEynu1hQAMmbuggDcLszkE15A/qTC2HlZ IHb2pLEdQ4/jTiSrveOzgjMCXYK6gS6HS91fsplfTaNXiY2RBzjMrTjNA/z2exMO v7EhN6hgg8oFPdDOJJsBGD4x+k2+X7gO59RiYcYU7xXktV8aWmQqr9UECM1PMwAi 0+NsTtdqkoaYVr2tZnEJOVB6OuW/YKUattCUnK7/N6TYLr2xZhUDebVOGXeFeG1w k83ugX+HMjCOQtsHnY2ZYovUmODohcYtt2+8WiD0r0IjuzuexIA9iwh34Q0RAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUzF98QIu816cFfZqt7g0VTZlBG6QwHwYDVR0j BBgwFoAUaYbcgoEsR9oUmUuObnJ7cuCy+NgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVk OGM0LzkvNjk4NkRDODI4MTJDNDdEQTE0OTk0QjhFNkU3MjdCNzJFMEIyRjhEOC5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzY5ODZEQzgyODEyQzQ3 REExNDk5NEI4RTZFNzI3QjcyRTBCMkY4RDguY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVkOGM0 LzkvNjk4NkRDODI4MTJDNDdEQTE0OTk0QjhFNkU3MjdCNzJFMEIyRjhEOC5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAEo2nGiTUbUn/8yIBvGfs+M0vmIWIgUQPKobqeRA4s/efUXoSpGRimkJ +OzvGJNIdMOOavrnjB2w7qp9wn7PiFN1qXwrxtNc9yjW+8bLb8iFj8C5OgzlW4CJ 5GTzYKuWnG3yAS9C+ivoKFhFpEuXRxBwU1OZPS+5btgToyl2RuntXkJmj7QPoqcT CzmCRmYW79+zygxi+o62BeW84AK13vngl12jVOoWC7e48aFqFH1+61wQvNHZLeB3 QE2wc8bxoCPiRqsbUTbmBhY0C0MuGOqxYCY3qNKhHRRR5nB51GNQ4JSnUyBZAg6y 398UDTBfSD0kzFFptwx3r/Oxx3cguOM= -----END CERTIFICATE-----Generated at Sat Aug 9 01:22:55 2025 by rpki-client