$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft File: 6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft (raw, json) Hash identifier: WdeHVyixjvYbCVozE4VQ+h5REnOIWe7O3FB8vw3T5CY= Subject key identifier: 31:DC:9D:04:E3:EB:06:E1:6E:A8:2B:8D:8D:29:1C:31:AA:14:5F:EE Authority key identifier: 6E:F8:DF:8B:74:C5:D8:BB:67:37:EC:42:CE:03:2A:B4:B0:3E:0C:51 Certificate issuer: /CN=6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51 Certificate serial: 19F95EBB305E47EE295D23D532FEA12801DE4BAF Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft Manifest number: 2E Signing time: Wed 06 Aug 2025 19:12:06 +0000 Manifest this update: Wed 06 Aug 2025 19:07:06 +0000 Manifest next update: Thu 07 Aug 2025 20:06:06 +0000 Files and hashes: 1: 326130613a363034303a336630303a3a2f34302d3438203d3e20323033303639.roa (hash: rHPewLaTkppiYRuEKYbkMC6q0fSzfeWOiDhEN8UQLrI=) 2: 326130613a363034303a313130303a3a2f34302d3430203d3e20323033303639.roa (hash: pHFnoNPoWytPyebFL74GP4B+9dNFxdZc97XyE0fhg1o=) 3: 6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.crl (hash: 1yhdnql6RHHU5EEda4anxo1MDH51Ma1rpgCEJNMMVu0=) 4: 326130613a363034303a336638303a3a2f34312d3438203d3e203136353039.roa (hash: Wmi4Se034d+qqZcAnERqLlh4fra7054HHLp3mkWO2Ww=) 5: 326130613a363034303a336638303a3a2f34312d3438203d3e203134363138.roa (hash: aHvhuFqDO1GB7QIZ+LV93NwGnOmb8RZNrGiJRajypMI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.crl rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 Aug 2025 10:58:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:f9:5e:bb:30:5e:47:ee:29:5d:23:d5:32:fe:a1:28:01:de:4b:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51 Validity Not Before: Aug 6 19:07:06 2025 GMT Not After : Aug 7 20:06:06 2025 GMT Subject: CN=31DC9D04E3EB06E16EA82B8D8D291C31AA145FEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:60:87:8e:51:0c:f4:fe:44:e8:e9:1d:1b:0b: 74:6e:23:98:f9:cf:82:34:10:06:f2:18:3b:a9:4b: aa:72:5c:1a:0b:ef:10:fa:09:1d:ac:31:7b:8c:dc: c3:7a:55:45:f6:3e:08:d9:0f:7d:a9:f2:89:b4:9d: 14:f8:35:d2:10:bf:74:8d:8d:0a:b6:31:bd:c5:e2: ee:7c:48:7e:72:e1:46:3b:a0:88:42:2d:59:48:74: 29:f1:f4:6d:d6:4e:69:0e:6d:14:dd:8e:e5:80:46: 8e:dc:68:52:ad:10:a5:b2:5c:2d:fa:0c:79:11:51: 01:bb:75:b3:73:97:41:93:47:6b:a3:45:31:cb:04: 47:aa:12:6c:b6:ff:95:cb:02:f3:7e:da:f9:cf:18: 98:2c:ad:c3:5c:c1:bf:51:02:e1:2a:4f:0f:fc:db: c0:1d:4d:10:31:19:ed:b5:8a:12:65:4c:37:0a:b0: 0b:f0:8b:a7:82:21:51:8e:d7:63:91:c5:4b:1c:54: 85:18:da:a2:5d:b9:32:22:df:31:3b:66:85:00:b7: 1c:aa:d0:78:71:7a:d0:98:d0:3c:f8:20:7c:3f:4d: e1:09:27:e4:7c:be:7e:14:be:b8:50:1c:6b:db:16: 04:ca:80:be:7a:39:57:f0:cd:32:63:9b:a3:7a:18: 81:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:DC:9D:04:E3:EB:06:E1:6E:A8:2B:8D:8D:29:1C:31:AA:14:5F:EE X509v3 Authority Key Identifier: keyid:6E:F8:DF:8B:74:C5:D8:BB:67:37:EC:42:CE:03:2A:B4:B0:3E:0C:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:25:2d:2f:77:ba:47:d6:84:31:9f:b2:97:f4:cf:ed:bd:b0: 5a:9f:e5:df:db:87:08:0d:24:14:ae:c3:01:a7:c7:ac:65:0b: 5e:45:cc:3b:50:05:53:55:17:77:a0:7b:49:2a:a4:da:cc:a4: 02:e1:21:c2:f0:be:c2:16:00:1b:ea:f5:5d:75:83:82:7c:f2: b2:b6:78:a9:d8:6a:61:ec:10:fd:72:48:c5:9f:7e:f7:bd:6c: 86:b2:5a:ed:29:f3:55:47:fe:05:cf:c3:0a:ee:2e:5c:57:1d: a6:b7:fa:a9:9d:7a:d3:e3:73:f1:f9:fd:40:e7:2a:9c:5b:99: be:bc:01:67:2e:c9:d6:56:76:6c:c3:b8:58:b5:37:75:1c:e3: 29:f2:c0:9c:a7:c3:6b:ff:13:75:48:3c:e7:ac:47:f6:f1:1f: 0b:ea:fb:36:00:da:ee:c3:44:be:d2:28:54:1d:28:fb:b3:60: 07:47:17:d6:a4:8d:34:18:41:2d:e8:00:ca:06:94:34:1c:3e: ee:50:56:9e:47:68:27:61:82:b9:18:10:4f:ca:e0:fb:c0:0f: 45:fb:00:ff:72:a3:18:f9:0e:5e:3c:77:e1:18:29:52:66:50: 7d:9d:92:d5:8c:73:b1:55:5b:55:25:72:ee:17:74:3a:bc:8a: d2:ad:e2:52 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgIUGfleuzBeR+4pXSPVMv6hKAHeS68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkVGOERGOEI3NEM1RDhCQjY3MzdFQzQyQ0UwMzJBQjRC MDNFMEM1MTAeFw0yNTA4MDYxOTA3MDZaFw0yNTA4MDcyMDA2MDZaMDMxMTAvBgNV BAMTKDMxREM5RDA0RTNFQjA2RTE2RUE4MkI4RDhEMjkxQzMxQUExNDVGRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRYIeOUQz0/kTo6R0bC3RuI5j5 z4I0EAbyGDupS6pyXBoL7xD6CR2sMXuM3MN6VUX2PgjZD32p8om0nRT4NdIQv3SN jQq2Mb3F4u58SH5y4UY7oIhCLVlIdCnx9G3WTmkObRTdjuWARo7caFKtEKWyXC36 DHkRUQG7dbNzl0GTR2ujRTHLBEeqEmy2/5XLAvN+2vnPGJgsrcNcwb9RAuEqTw/8 28AdTRAxGe21ihJlTDcKsAvwi6eCIVGO12ORxUscVIUY2qJduTIi3zE7ZoUAtxyq 0HhxetCY0Dz4IHw/TeEJJ+R8vn4UvrhQHGvbFgTKgL56OVfwzTJjm6N6GIHlAgMB AAGjggJhMIICXTAdBgNVHQ4EFgQUMdydBOPrBuFuqCuNjSkcMaoUX+4wHwYDVR0j BBgwFoAUbvjfi3TF2LtnN+xCzgMqtLA+DFEwDgYDVR0PAQH/BAQDAgeAMIGXBgNV HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzFiZjhlOTc3LTcyNzgtNDZjZi1hYmQxLTk5Y2QxZmQy YmU0ZS8xMC82RUY4REY4Qjc0QzVEOEJCNjczN0VDNDJDRTAzMkFCNEIwM0UwQzUx LmNybDB6BggrBgEFBQcBAQRuMGwwagYIKwYBBQUHMAKGXnJzeW5jOi8vY2xvdWRp ZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xPVURJRS1SUEtJLzQvNkVGOERGOEI3NEM1 RDhCQjY3MzdFQzQyQ0UwMzJBQjRCMDNFMEM1MS5jZXIwgaAGCCsGAQUFBwELBIGT MIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi ZTRlLzEwLzZFRjhERjhCNzRDNUQ4QkI2NzM3RUM0MkNFMDMyQUI0QjAzRTBDNTEu bWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQ MAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3 DQEBCwUAA4IBAQA1JS0vd7pH1oQxn7KX9M/tvbBan+Xf24cIDSQUrsMBp8esZQte Rcw7UAVTVRd3oHtJKqTazKQC4SHC8L7CFgAb6vVddYOCfPKytnip2Gph7BD9ckjF n373vWyGslrtKfNVR/4Fz8MK7i5cVx2mt/qpnXrT43Px+f1A5yqcW5m+vAFnLsnW VnZsw7hYtTd1HOMp8sCcp8Nr/xN1SDznrEf28R8L6vs2ANruw0S+0ihUHSj7s2AH RxfWpI00GEEt6ADKBpQ0HD7uUFaeR2gnYYK5GBBPyuD7wA9F+wD/cqMY+Q5ePHfh GClSZlB9nZLVjHOxVVtVJXLuF3Q6vIrSreJS -----END CERTIFICATE-----Generated at Thu Aug 7 02:08:36 2025 by rpki-client