$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.mft File: FF4F1D48A6088FEC5ED73270F82068A436391A71.mft (raw, json) Hash identifier: xaeYz5xOWcKecMgOGntnJzZrUrmiqUReVn7gjZtLOlQ= Subject key identifier: FC:F5:94:EC:63:C8:97:2D:F9:D1:B4:CD:A0:BE:6E:E0:87:E5:81:83 Authority key identifier: FF:4F:1D:48:A6:08:8F:EC:5E:D7:32:70:F8:20:68:A4:36:39:1A:71 Certificate issuer: /CN=FF4F1D48A6088FEC5ED73270F82068A436391A71 Certificate serial: 1129F4122A8D19B73139F924F880CD2B90AA5460 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/FF4F1D48A6088FEC5ED73270F82068A436391A71.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.mft Manifest number: 1C Signing time: Tue 05 Aug 2025 21:04:09 +0000 Manifest this update: Tue 05 Aug 2025 20:59:09 +0000 Manifest next update: Wed 06 Aug 2025 23:52:09 +0000 Files and hashes: 1: FF4F1D48A6088FEC5ED73270F82068A436391A71.crl (hash: D+7snt2TR5sWXO3vdr/RSEqnmbqXbfOC9HZ1nV0F6II=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.crl rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/FF4F1D48A6088FEC5ED73270F82068A436391A71.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 17:18:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:29:f4:12:2a:8d:19:b7:31:39:f9:24:f8:80:cd:2b:90:aa:54:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF4F1D48A6088FEC5ED73270F82068A436391A71 Validity Not Before: Aug 5 20:59:09 2025 GMT Not After : Aug 6 23:52:09 2025 GMT Subject: CN=FCF594EC63C8972DF9D1B4CDA0BE6EE087E58183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2b:69:eb:cd:f4:42:62:be:31:70:58:8a:bb: 64:fc:e2:b2:67:b9:f5:cd:55:d3:22:b6:94:6c:c0: ee:8c:96:1f:29:ee:17:8d:e9:a7:63:7d:c6:0a:ff: e2:ae:e1:83:de:40:2d:8e:77:85:64:ff:58:50:c4: 06:65:73:59:42:8c:4b:aa:41:40:16:5c:84:ee:f9: f7:f3:42:ac:14:58:5c:b4:89:8f:02:be:91:85:c6: a3:18:26:1d:a7:f7:45:33:66:51:79:76:08:68:b4: 33:bc:5f:f5:ba:dc:7f:de:bb:b8:82:a7:c1:e3:59: 63:28:b4:4c:a3:de:a4:23:dc:36:8c:cb:02:dd:cf: 4c:48:77:39:50:3c:5c:f9:9c:26:97:4c:29:79:f8: 1e:fa:d8:43:a6:fa:1f:c7:e0:8b:b6:87:2e:e4:be: 19:d5:aa:6f:d1:f7:5b:f9:e2:45:50:97:1f:04:5f: cb:c3:9c:29:9e:69:13:aa:cd:4a:8d:f5:b5:04:06: 12:cf:38:92:d6:f2:c5:4e:ac:62:3d:29:79:d8:eb: d8:e1:dd:5d:1f:c8:83:b6:c5:2b:af:a0:eb:6b:19: 06:b1:5e:6d:2a:f7:a0:ea:88:3d:31:8e:2d:0c:4f: e2:0f:fe:4d:93:cf:91:3b:21:86:e7:75:0a:0b:25: e8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:F5:94:EC:63:C8:97:2D:F9:D1:B4:CD:A0:BE:6E:E0:87:E5:81:83 X509v3 Authority Key Identifier: keyid:FF:4F:1D:48:A6:08:8F:EC:5E:D7:32:70:F8:20:68:A4:36:39:1A:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/FF4F1D48A6088FEC5ED73270F82068A436391A71.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:10:7d:a6:2f:33:47:7b:25:af:b7:10:f7:35:43:8c:2c:bf: 8f:26:88:26:ea:ed:7d:ff:5a:8c:57:b7:d0:66:d6:d6:33:a6: 1e:5f:25:e9:de:99:d0:bb:a7:35:79:a1:a0:9c:52:54:6b:57: 77:47:9a:b3:12:14:87:b5:19:ba:59:0e:8c:ba:5e:82:26:33: ed:5c:87:99:c5:0b:c1:89:83:d7:0d:30:70:b9:7f:4f:7c:44: 71:8b:a4:fa:ac:ea:12:f3:86:43:f2:2f:60:bc:6d:fd:5f:2a: 9c:81:02:ac:dc:51:1d:72:88:24:b1:87:cd:77:85:be:83:5e: 99:18:c6:7a:cf:55:25:cf:cb:ee:46:df:cc:5c:bd:6e:e1:eb: 4f:88:6f:a1:e5:8e:5a:63:74:7d:c8:19:0c:67:2f:32:5e:71: 90:1e:67:76:2c:e5:9b:d0:8f:7d:5f:bf:3c:2c:22:3e:2b:c6: b2:57:ee:e4:d4:98:10:1f:cd:7a:ce:a3:e9:53:8e:e6:f7:f8: 7f:3d:06:4c:1e:a5:37:bc:c5:b7:c9:c3:9b:03:b8:39:b2:41: 47:6c:7b:de:2c:7e:05:e4:16:e8:90:35:e3:0d:aa:bf:ea:5b: d5:fe:e2:7f:ac:12:7b:3d:1e:c5:4d:aa:80:f0:ba:32:00:a5: b5:e7:8a:89 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUESn0EiqNGbcxOfkk+IDNK5CqVGAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY0RjFENDhBNjA4OEZFQzVFRDczMjcwRjgyMDY4QTQz NjM5MUE3MTAeFw0yNTA4MDUyMDU5MDlaFw0yNTA4MDYyMzUyMDlaMDMxMTAvBgNV BAMTKEZDRjU5NEVDNjNDODk3MkRGOUQxQjRDREEwQkU2RUUwODdFNTgxODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDK2nrzfRCYr4xcFiKu2T84rJn ufXNVdMitpRswO6Mlh8p7heN6adjfcYK/+Ku4YPeQC2Od4Vk/1hQxAZlc1lCjEuq QUAWXITu+ffzQqwUWFy0iY8CvpGFxqMYJh2n90UzZlF5dghotDO8X/W63H/eu7iC p8HjWWMotEyj3qQj3DaMywLdz0xIdzlQPFz5nCaXTCl5+B762EOm+h/H4Iu2hy7k vhnVqm/R91v54kVQlx8EX8vDnCmeaROqzUqN9bUEBhLPOJLW8sVOrGI9KXnY69jh 3V0fyIO2xSuvoOtrGQaxXm0q96DqiD0xji0MT+IP/k2Tz5E7IYbndQoLJegRAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQU/PWU7GPIly350bTNoL5u4IflgYMwHwYDVR0j BBgwFoAU/08dSKYIj+xe1zJw+CBopDY5GnEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjJhODA2ODItYzU0Yy00ZDVhLTk0NTYtYjIzOTI1MzA5 NzMyLzIvRkY0RjFENDhBNjA4OEZFQzVFRDczMjcwRjgyMDY4QTQzNjM5MUE3MS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0ZGNEYxRDQ4QTYwODhG RUM1RUQ3MzI3MEY4MjA2OEE0MzYzOTFBNzEuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMjJhODA2ODItYzU0Yy00ZDVhLTk0NTYtYjIzOTI1MzA5NzMy LzIvRkY0RjFENDhBNjA4OEZFQzVFRDczMjcwRjgyMDY4QTQzNjM5MUE3MS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBADMQfaYvM0d7Ja+3EPc1Q4wsv48miCbq7X3/WoxXt9Bm1tYzph5fJene mdC7pzV5oaCcUlRrV3dHmrMSFIe1GbpZDoy6XoImM+1ch5nFC8GJg9cNMHC5f098 RHGLpPqs6hLzhkPyL2C8bf1fKpyBAqzcUR1yiCSxh813hb6DXpkYxnrPVSXPy+5G 38xcvW7h60+Ib6HljlpjdH3IGQxnLzJecZAeZ3Ys5ZvQj31fvzwsIj4rxrJX7uTU mBAfzXrOo+lTjub3+H89BkwepTe8xbfJw5sDuDmyQUdse94sfgXkFuiQNeMNqr/q W9X+4n+sEns9HsVNqoDwujIApbXniok= -----END CERTIFICATE-----Generated at Wed Aug 6 10:07:43 2025 by rpki-client