$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.mft File: F900BC65E2B646EBAC472A5DEA12BDB0011AC122.mft (raw, json) Hash identifier: UOlpMhQe79FnQryMI9wUn9OkodLmFLvuVCHy5uvEEYQ= Subject key identifier: 6C:0C:FA:07:9A:56:00:90:15:C6:BE:E4:7B:08:57:B2:B8:50:ED:35 Authority key identifier: F9:00:BC:65:E2:B6:46:EB:AC:47:2A:5D:EA:12:BD:B0:01:1A:C1:22 Certificate issuer: /CN=F900BC65E2B646EBAC472A5DEA12BDB0011AC122 Certificate serial: 35EACBDD3229515DDB3B483DD9E13A14003E3691 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.mft Manifest number: 051B Signing time: Sat 14 Jun 2025 14:37:47 +0000 Manifest this update: Sat 14 Jun 2025 14:32:47 +0000 Manifest next update: Sun 15 Jun 2025 14:51:47 +0000 Files and hashes: 1: 326130613a363034303a336630303a3a2f34302d3438203d3e20323033303639.roa (hash: u/op1Gb+lh53LhTdxSovsMBPfFi75dye37nTdYVQSh4=) 2: F900BC65E2B646EBAC472A5DEA12BDB0011AC122.crl (hash: wVkbuTNm04opEzkFUnj63ouiLIeWxxIcFSVXCS6HdSI=) 3: 326130613a363034303a336638303a3a2f34312d3438203d3e203136353039.roa (hash: d5nVF16uuJH0TZ1YA8s7hx5fCbPpHfSbcJo4JXI+35s=) 4: 326130613a363034303a336638303a3a2f34312d3438203d3e203134363138.roa (hash: 4JKiECPfyLZYZpNlohD2hYOZCrShpFM8qyjM4PYygzc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.crl rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 02:47:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:ea:cb:dd:32:29:51:5d:db:3b:48:3d:d9:e1:3a:14:00:3e:36:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F900BC65E2B646EBAC472A5DEA12BDB0011AC122 Validity Not Before: Jun 14 14:32:47 2025 GMT Not After : Jun 15 14:51:47 2025 GMT Subject: CN=6C0CFA079A56009015C6BEE47B0857B2B850ED35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:d5:4e:2b:9f:45:15:06:0a:49:09:23:6d:5e: 0e:87:8f:bd:79:7c:31:27:c3:c3:95:f3:b6:34:50: 1e:78:af:76:89:07:8b:c3:d9:db:90:8b:dd:d7:21: 0c:13:cb:87:f3:a0:9b:b3:71:b1:c7:23:e4:1d:ec: f9:3e:f1:9c:ee:28:95:57:3a:fa:6a:6e:2b:14:17: 2d:d3:35:a1:1c:8e:61:0c:b7:15:cb:a6:7e:7c:a0: 84:f4:67:51:64:5b:76:cf:03:4a:8e:ae:bb:29:a1: 9a:4c:35:b8:4d:31:d2:7a:76:3b:17:03:4e:af:ed: ab:98:db:a1:6f:b7:ff:2d:bc:72:6b:09:b2:82:57: 60:a0:6b:aa:51:97:4d:77:6d:72:76:90:c4:50:26: bd:fc:4a:70:e1:c7:0e:a4:21:b0:d2:0f:9d:13:eb: c7:85:e2:0b:f9:c5:c1:b9:be:80:d6:e5:b6:6e:f8: a1:eb:38:7f:ae:10:63:ba:82:9b:48:9d:52:db:31: a9:58:d4:c1:a4:0f:55:da:d0:6e:6f:a0:25:22:25: 4f:87:03:75:30:c6:a2:6e:89:5b:59:80:78:61:47: a1:e4:da:89:9e:45:ff:3b:46:aa:b5:cb:47:f3:30: 5f:da:31:87:bd:ea:49:29:66:aa:bf:ff:60:cb:3a: 18:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:0C:FA:07:9A:56:00:90:15:C6:BE:E4:7B:08:57:B2:B8:50:ED:35 X509v3 Authority Key Identifier: keyid:F9:00:BC:65:E2:B6:46:EB:AC:47:2A:5D:EA:12:BD:B0:01:1A:C1:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:57:e3:99:60:2b:0c:bb:28:ff:19:73:cf:b0:cb:ff:5d:b3: 84:2a:5a:9c:cc:78:35:76:10:c7:d0:71:41:ec:2f:00:04:a6: c1:12:e4:d8:cb:46:6d:6c:eb:9e:0a:f6:4c:15:0c:1e:55:72: 5f:90:01:6f:a8:3b:03:aa:3d:d7:3a:3b:3f:3e:f6:5e:a5:62: c6:5b:0c:23:a1:65:f9:68:fa:38:ff:6b:6a:6c:d3:23:6f:07: 22:22:8c:12:63:af:a8:a4:35:1b:86:be:a1:e0:bc:46:85:89: 5e:91:f2:b4:5a:0d:87:5d:22:c9:f5:42:75:08:3f:c0:64:90: da:ec:ce:da:96:ab:24:b1:2b:74:fa:e3:56:c3:2e:93:17:f0: 42:65:90:aa:93:7b:ae:ad:9d:74:26:8d:56:df:4a:fb:f4:9a: da:6f:db:dd:54:a6:8e:40:c2:3d:14:f5:90:03:0c:0e:16:3f: a8:95:9e:d9:76:f5:86:d7:55:1f:81:38:ca:bb:00:cd:59:38: 68:d4:1f:12:cc:24:d2:a5:b3:1f:70:2e:78:b6:22:43:58:71: 4d:9b:bd:12:a0:83:ae:da:18:2c:6a:b7:a7:cc:17:62:d0:bc: 1c:bd:40:53:60:b5:be:8f:6a:ba:2f:17:25:f9:0a:ea:3e:98: 64:91:4a:d4 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUNerL3TIpUV3bO0g92eE6FAA+NpEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjkwMEJDNjVFMkI2NDZFQkFDNDcyQTVERUExMkJEQjAw MTFBQzEyMjAeFw0yNTA2MTQxNDMyNDdaFw0yNTA2MTUxNDUxNDdaMDMxMTAvBgNV BAMTKDZDMENGQTA3OUE1NjAwOTAxNUM2QkVFNDdCMDg1N0IyQjg1MEVEMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw1U4rn0UVBgpJCSNtXg6Hj715 fDEnw8OV87Y0UB54r3aJB4vD2duQi93XIQwTy4fzoJuzcbHHI+Qd7Pk+8ZzuKJVX OvpqbisUFy3TNaEcjmEMtxXLpn58oIT0Z1FkW3bPA0qOrrspoZpMNbhNMdJ6djsX A06v7auY26Fvt/8tvHJrCbKCV2Cga6pRl013bXJ2kMRQJr38SnDhxw6kIbDSD50T 68eF4gv5xcG5voDW5bZu+KHrOH+uEGO6gptInVLbMalY1MGkD1Xa0G5voCUiJU+H A3UwxqJuiVtZgHhhR6Hk2omeRf87Rqq1y0fzMF/aMYe96kkpZqq//2DLOhi/AgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUbAz6B5pWAJAVxr7kewhXsrhQ7TUwHwYDVR0j BBgwFoAU+QC8ZeK2RuusRypd6hK9sAEawSIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi ZTRlLzMvRjkwMEJDNjVFMkI2NDZFQkFDNDcyQTVERUExMkJEQjAwMTFBQzEyMi5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wL0Y5MDBCQzY1RTJCNjQ2 RUJBQzQ3MkE1REVBMTJCREIwMDExQUMxMjIuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJiZTRl LzMvRjkwMEJDNjVFMkI2NDZFQkFDNDcyQTVERUExMkJEQjAwMTFBQzEyMi5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAAtX45lgKwy7KP8Zc8+wy/9ds4QqWpzMeDV2EMfQcUHsLwAEpsES5NjL Rm1s654K9kwVDB5Vcl+QAW+oOwOqPdc6Oz8+9l6lYsZbDCOhZflo+jj/a2ps0yNv ByIijBJjr6ikNRuGvqHgvEaFiV6R8rRaDYddIsn1QnUIP8BkkNrsztqWqySxK3T6 41bDLpMX8EJlkKqTe66tnXQmjVbfSvv0mtpv291Upo5Awj0U9ZADDA4WP6iVntl2 9YbXVR+BOMq7AM1ZOGjUHxLMJNKlsx9wLni2IkNYcU2bvRKgg67aGCxqt6fMF2LQ vBy9QFNgtb6ParovFyX5Cuo+mGSRStQ= -----END CERTIFICATE-----Generated at Sat Jun 14 20:24:12 2025 by rpki-client