$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.mft File: F900BC65E2B646EBAC472A5DEA12BDB0011AC122.mft (raw, json) Hash identifier: 1aT/lviST8OtPjhWzThv6liq2NsmxM4L+uvtU8zFR84= Subject key identifier: EC:8C:B2:D3:75:86:88:68:45:F5:D2:14:5D:0A:19:A2:B5:7B:E5:87 Authority key identifier: F9:00:BC:65:E2:B6:46:EB:AC:47:2A:5D:EA:12:BD:B0:01:1A:C1:22 Certificate issuer: /CN=F900BC65E2B646EBAC472A5DEA12BDB0011AC122 Certificate serial: 06C75F5A3A1E56FB9442B82278E1F438A512017C Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.mft Manifest number: 04D7 Signing time: Sat 26 Apr 2025 15:45:08 +0000 Manifest this update: Sat 26 Apr 2025 15:40:08 +0000 Manifest next update: Sun 27 Apr 2025 16:54:08 +0000 Files and hashes: 1: F900BC65E2B646EBAC472A5DEA12BDB0011AC122.crl (hash: Qw17B6XzdxCCaf+RxuOXS5kG9oEPW3In47aTzBgRCYI=) 2: 326130613a363034303a336630303a3a2f34302d3438203d3e20323033303639.roa (hash: u/op1Gb+lh53LhTdxSovsMBPfFi75dye37nTdYVQSh4=) 3: 326130613a363034303a336638303a3a2f34312d3438203d3e203136353039.roa (hash: d5nVF16uuJH0TZ1YA8s7hx5fCbPpHfSbcJo4JXI+35s=) 4: 326130613a363034303a336638303a3a2f34312d3438203d3e203134363138.roa (hash: 4JKiECPfyLZYZpNlohD2hYOZCrShpFM8qyjM4PYygzc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.crl rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 07:09:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:c7:5f:5a:3a:1e:56:fb:94:42:b8:22:78:e1:f4:38:a5:12:01:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F900BC65E2B646EBAC472A5DEA12BDB0011AC122 Validity Not Before: Apr 26 15:40:08 2025 GMT Not After : Apr 27 16:54:08 2025 GMT Subject: CN=EC8CB2D37586886845F5D2145D0A19A2B57BE587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:61:d0:ee:8b:5d:11:45:c7:5a:2f:33:17:4c: 36:9c:35:ae:3e:18:52:67:29:6f:43:3d:0c:4e:8b: 3c:59:8b:ac:07:c4:79:0b:0e:65:34:98:2f:c5:8a: 89:72:6d:32:75:fb:5e:0a:d2:33:a3:a6:87:ec:1e: e8:51:7c:d9:5a:fe:e4:e4:d3:71:c5:de:cf:f5:82: 7f:0e:48:19:da:8e:e1:be:42:6c:8f:59:b9:4b:ed: 8d:0b:d4:c5:8e:f5:90:cd:30:a7:44:55:92:47:64: 3f:9a:59:00:c6:01:e5:54:6a:3b:45:5b:92:b9:a7: ef:25:35:b8:e3:72:ea:b0:45:cd:83:f6:6a:66:b4: 87:38:db:88:45:b7:ba:e1:7b:8b:0c:3c:46:fe:7d: 7f:7c:42:4e:60:06:cf:d3:57:f2:a6:c5:b0:9d:f8: 92:08:f2:6c:83:9f:1f:6f:4a:b7:72:77:39:67:83: fc:d2:ca:55:d4:0f:41:2e:be:3e:c6:72:03:99:17: bf:6d:2e:3c:11:e3:c6:1e:84:aa:a2:48:26:e5:16: cf:4a:81:c0:21:28:9c:71:49:97:88:6f:a5:57:69: 4f:1a:13:5e:06:95:bb:7d:6a:1b:44:a7:88:5b:bc: 29:3a:ce:51:05:cd:a4:b4:69:b6:f9:62:cc:8e:8b: 3e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:8C:B2:D3:75:86:88:68:45:F5:D2:14:5D:0A:19:A2:B5:7B:E5:87 X509v3 Authority Key Identifier: keyid:F9:00:BC:65:E2:B6:46:EB:AC:47:2A:5D:EA:12:BD:B0:01:1A:C1:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:c9:be:14:4c:27:4b:d2:d4:c8:89:09:18:75:f1:02:d1:b9: 11:0c:ef:7b:20:51:44:90:c4:7c:57:d9:47:ac:b7:5a:cf:7a: 0d:2b:ba:ba:7e:59:55:e8:da:30:73:b6:33:80:fb:76:4a:b9: 49:fc:a3:e6:38:71:85:b3:7c:a8:d2:e4:28:b2:a5:81:06:8a: 11:e8:91:c8:b7:0e:91:f3:31:2b:e0:c0:3a:00:b2:0f:0d:9f: 8b:0c:93:42:9c:1b:4b:7c:b5:24:c4:c8:f4:97:00:b7:fe:66: f5:a2:68:83:b7:a1:36:fe:01:69:1e:5b:1a:93:53:c9:9d:8c: 76:c2:16:ef:56:63:58:6a:0f:be:b2:1d:1f:6c:3b:13:d3:22: a1:2d:49:64:0f:0b:70:d8:12:28:cb:9a:8f:27:db:67:00:eb: d3:4c:91:54:62:5c:4c:94:2b:55:26:8e:2b:51:a3:d4:0d:7b: 3e:67:15:88:68:85:c6:15:b5:79:27:73:a4:69:ce:bb:10:b3: 95:23:a7:eb:6c:b7:de:b1:e9:90:c4:06:59:cc:ed:ec:63:ce: ef:17:b6:f8:52:a3:22:7f:a5:42:04:56:26:e0:91:ab:d8:2a: 9f:ed:a6:7a:c8:8d:31:3a:ee:ae:e7:e2:e3:c8:55:80:69:37: 6f:55:3f:40 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUBsdfWjoeVvuUQrgieOH0OKUSAXwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjkwMEJDNjVFMkI2NDZFQkFDNDcyQTVERUExMkJEQjAw MTFBQzEyMjAeFw0yNTA0MjYxNTQwMDhaFw0yNTA0MjcxNjU0MDhaMDMxMTAvBgNV BAMTKEVDOENCMkQzNzU4Njg4Njg0NUY1RDIxNDVEMEExOUEyQjU3QkU1ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9YdDui10RRcdaLzMXTDacNa4+ GFJnKW9DPQxOizxZi6wHxHkLDmU0mC/FiolybTJ1+14K0jOjpofsHuhRfNla/uTk 03HF3s/1gn8OSBnajuG+QmyPWblL7Y0L1MWO9ZDNMKdEVZJHZD+aWQDGAeVUajtF W5K5p+8lNbjjcuqwRc2D9mpmtIc424hFt7rhe4sMPEb+fX98Qk5gBs/TV/KmxbCd +JII8myDnx9vSrdydzlng/zSylXUD0Euvj7GcgOZF79tLjwR48YehKqiSCblFs9K gcAhKJxxSZeIb6VXaU8aE14Glbt9ahtEp4hbvCk6zlEFzaS0abb5YsyOiz7BAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQU7Iyy03WGiGhF9dIUXQoZorV75YcwHwYDVR0j BBgwFoAU+QC8ZeK2RuusRypd6hK9sAEawSIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi ZTRlLzMvRjkwMEJDNjVFMkI2NDZFQkFDNDcyQTVERUExMkJEQjAwMTFBQzEyMi5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wL0Y5MDBCQzY1RTJCNjQ2 RUJBQzQ3MkE1REVBMTJCREIwMDExQUMxMjIuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJiZTRl LzMvRjkwMEJDNjVFMkI2NDZFQkFDNDcyQTVERUExMkJEQjAwMTFBQzEyMi5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAAPJvhRMJ0vS1MiJCRh18QLRuREM73sgUUSQxHxX2Uest1rPeg0rurp+ WVXo2jBztjOA+3ZKuUn8o+Y4cYWzfKjS5CiypYEGihHokci3DpHzMSvgwDoAsg8N n4sMk0KcG0t8tSTEyPSXALf+ZvWiaIO3oTb+AWkeWxqTU8mdjHbCFu9WY1hqD76y HR9sOxPTIqEtSWQPC3DYEijLmo8n22cA69NMkVRiXEyUK1UmjitRo9QNez5nFYho hcYVtXknc6RpzrsQs5Ujp+tst96x6ZDEBlnM7exjzu8XtvhSoyJ/pUIEVibgkavY Kp/tpnrIjTE67q7n4uPIVYBpN29VP0A= -----END CERTIFICATE-----Generated at Sat Apr 26 19:12:43 2025 by rpki-client