$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.mft File: A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.mft (raw, json) Hash identifier: DzgUzFXu+OYnPJINbr0pwpytqHDAQPy0OGWzONGf05Q= Subject key identifier: DC:C4:9C:3D:9A:CF:4D:89:5A:17:AF:97:18:8F:17:D7:23:4F:38:69 Authority key identifier: A0:BD:CD:4C:EF:02:B9:AA:3C:BD:0A:83:76:66:71:63:97:19:8B:FD Certificate issuer: /CN=A0BDCD4CEF02B9AA3CBD0A837666716397198BFD Certificate serial: 2120D74A8EFEB6AFAB674321E4242CB591A0195C Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.mft Manifest number: 021B Signing time: Sun 15 Jun 2025 09:34:40 +0000 Manifest this update: Sun 15 Jun 2025 09:29:40 +0000 Manifest next update: Mon 16 Jun 2025 12:10:40 +0000 Files and hashes: 1: A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.crl (hash: o/JmmHFmmbYQ3+xgqrvFvesRYy1Xysua/S27uCnHwOo=) 2: 326130353a646663313a6364313a3a2f34382d3438203d3e20323136313037.roa (hash: mOOzHywYUf8zjI9dUNsK9l53AJEq7KLoJcvQC7/t8eg=) 3: 326130353a646663313a393330303a3a2f34302d3430203d3e20323136313037.roa (hash: hAG8kF083sc71HTpZHIm9pVONzb5X6Kq/j0og2972Og=) 4: 326130353a646663313a6365633a3a2f34382d3438203d3e20323136313037.roa (hash: jseZnQDpxM3OGEtPFiaXE9ESnwodw6BGWg1duSXkRMU=) 5: 326130353a646663313a6364323a3a2f34382d3438203d3e20323136313037.roa (hash: qeKhwSxBv73kgRxW6Pg8dImsSOEmPLh3wTLxedRpHZA=) 6: 326130353a646663313a6364343a3a2f34382d3438203d3e20323136313037.roa (hash: h7T/IBKgZ+g5LGDA1fTNWZlyWBtya6uHa3uTkoL3u98=) 7: 326130353a646663313a6330303a3a2f34302d3430203d3e20323136313037.roa (hash: HKmgP2ypG6wwvWOLbdtRfnpQpQFEpIJ3B8Rmypw0n+E=) 8: 326130353a646663313a6364303a3a2f34382d3438203d3e20323136313037.roa (hash: bPQ1HBzdP13bWbYEcnsttiFohjw+mT+amFg13lB095M=) 9: 326130353a646663313a6362323a3a2f34382d3438203d3e20323136313037.roa (hash: S6jgMc6rG0ZsUATxPWt7SrTUxQY234zCLU7DInT6Xy8=) 10: 326130353a646663313a6362303a3a2f34382d3438203d3e20323136313037.roa (hash: dF4lz4b9uILyKiQv5ty5oA8TE3niW+o+umdhEtVVLnc=) 11: 326130353a646663313a6330303a3a2f34382d3438203d3e20323136313037.roa (hash: 5sfxFWfTleTq60HeudpGR9w7CPONeSZsJgkPlM018cs=) 12: 326130353a646663313a6364333a3a2f34382d3438203d3e20323136313037.roa (hash: rsDe4gVLOQQ6T2XmrS2vrQjsrzLl/iWq5oMRojuFXSU=) 13: 326130353a646663313a6362313a3a2f34382d3438203d3e20323136313037.roa (hash: a/PEhvzrP+G5MwSsL0gkzB1gZuBpDOMslVaEMTvEPWA=) 14: 326130353a646663313a6366663a3a2f34382d3438203d3e20323136313037.roa (hash: KjbRTlOn0pUH9so2EM+bXyKGqqTMvpmSO7usB8M9zXI=) 15: 326130353a646663313a6335333a3a2f34382d3438203d3e20323136313037.roa (hash: CnAZ047tmrpRp78Hj9O+EaIJNOL4YEi+nEB/HQghDBU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.crl rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 07:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:20:d7:4a:8e:fe:b6:af:ab:67:43:21:e4:24:2c:b5:91:a0:19:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0BDCD4CEF02B9AA3CBD0A837666716397198BFD Validity Not Before: Jun 15 09:29:40 2025 GMT Not After : Jun 16 12:10:40 2025 GMT Subject: CN=DCC49C3D9ACF4D895A17AF97188F17D7234F3869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a6:49:7a:dc:3a:00:86:6b:76:49:10:1a:83: 70:75:ec:7b:a2:a7:f9:22:74:9a:9b:63:11:27:11: 78:04:23:1d:58:63:b4:84:23:ba:5c:5d:b9:14:67: c7:1a:df:62:f7:54:70:2a:a7:89:5c:da:c4:6f:cc: 63:a3:5d:06:75:b7:00:fc:5d:7c:ae:04:a5:d1:ae: 35:4d:96:44:4d:1b:4c:b6:c0:8d:a9:f4:cf:a4:a6: a0:c9:3e:15:f3:25:8a:03:0e:ce:3c:dc:ef:53:df: e0:69:56:52:6f:72:f1:7f:df:dc:10:a7:67:ac:3b: 45:27:97:c2:43:13:d7:a4:a2:d4:40:e9:64:86:40: f4:4b:ce:83:8a:dc:47:8e:ce:ed:2b:48:67:50:14: 1a:54:82:4a:75:9d:cc:29:a6:2c:7d:a7:5b:2d:c1: 46:66:50:e6:b6:db:34:fa:f6:74:04:3e:e1:45:1c: b1:d7:ab:e2:96:e8:ff:48:ac:65:07:1b:9f:3b:c0: 85:1f:79:f1:ee:50:b1:bb:8c:8d:e3:76:6f:73:44: 64:75:62:c0:cd:0b:e7:6a:64:03:6d:ad:88:06:08: 89:49:8e:a0:d7:2c:6f:7c:a3:e8:8a:64:07:f2:53: 42:0a:83:74:95:c4:c0:2b:d7:97:2a:36:b5:57:76: 17:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:C4:9C:3D:9A:CF:4D:89:5A:17:AF:97:18:8F:17:D7:23:4F:38:69 X509v3 Authority Key Identifier: keyid:A0:BD:CD:4C:EF:02:B9:AA:3C:BD:0A:83:76:66:71:63:97:19:8B:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:ab:36:0a:3e:f5:46:05:c9:66:45:05:7b:aa:80:9d:80:56: e3:52:81:3b:c6:00:81:ec:d3:d9:14:78:3d:4f:d3:00:0e:5f: e9:f0:07:72:9f:5c:2b:4d:b5:8e:81:27:4a:71:b9:59:3d:8a: 47:f9:cb:60:5c:65:c7:df:8f:ee:3d:b4:84:f7:6f:24:0e:27: 88:7e:3f:f6:98:21:61:7e:8d:58:91:7c:23:1f:87:cb:b0:b5: ba:f5:83:7f:45:08:84:c8:55:c6:86:33:4d:65:70:b3:51:c9: 3c:b2:1f:8d:19:19:f2:a6:0e:f9:fa:ba:a0:ba:9b:95:a7:26: 90:5d:0b:91:bf:3e:7f:2b:a4:64:0f:e8:53:6b:6b:bf:6f:65: ae:fa:fb:8c:51:2e:b3:1b:52:61:cc:31:e8:a1:e2:7a:0c:d3: 57:ce:35:b7:d0:14:42:81:85:e8:3b:f3:11:f6:b1:ae:13:b0: bd:a3:35:21:32:09:ad:d6:04:c3:ba:76:2d:6e:f5:ea:95:a3: 37:47:3a:40:79:2a:4e:fd:cd:a0:56:72:33:8c:86:d2:d9:d5: 50:31:de:e9:0d:35:4a:53:7e:ea:c9:e9:61:c9:77:7a:57:d5: 6a:dd:c9:0e:f6:1b:81:9d:fa:4d:9f:bd:ac:a7:04:dd:d8:78: 74:7d:29:1d -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUISDXSo7+tq+rZ0Mh5CQstZGgGVwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBCRENENENFRjAyQjlBQTNDQkQwQTgzNzY2NjcxNjM5 NzE5OEJGRDAeFw0yNTA2MTUwOTI5NDBaFw0yNTA2MTYxMjEwNDBaMDMxMTAvBgNV BAMTKERDQzQ5QzNEOUFDRjREODk1QTE3QUY5NzE4OEYxN0Q3MjM0RjM4NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDApkl63DoAhmt2SRAag3B17Hui p/kidJqbYxEnEXgEIx1YY7SEI7pcXbkUZ8ca32L3VHAqp4lc2sRvzGOjXQZ1twD8 XXyuBKXRrjVNlkRNG0y2wI2p9M+kpqDJPhXzJYoDDs483O9T3+BpVlJvcvF/39wQ p2esO0Unl8JDE9ekotRA6WSGQPRLzoOK3EeOzu0rSGdQFBpUgkp1ncwppix9p1st wUZmUOa22zT69nQEPuFFHLHXq+KW6P9IrGUHG587wIUfefHuULG7jI3jdm9zRGR1 YsDNC+dqZANtrYgGCIlJjqDXLG98o+iKZAfyU0IKg3SVxMAr15cqNrVXdhc9AgMB AAGjggJdMIICWTAdBgNVHQ4EFgQU3MScPZrPTYlaF6+XGI8X1yNPOGkwHwYDVR0j BBgwFoAUoL3NTO8Cuao8vQqDdmZxY5cZi/0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5 MjQzLzEvQTBCRENENENFRjAyQjlBQTNDQkQwQTgzNzY2NjcxNjM5NzE5OEJGRC5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wL0EwQkRDRDRDRUYwMkI5 QUEzQ0JEMEE4Mzc2NjY3MTYzOTcxOThCRkQuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5MjQz LzEvQTBCRENENENFRjAyQjlBQTNDQkQwQTgzNzY2NjcxNjM5NzE5OEJGRC5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAD2rNgo+9UYFyWZFBXuqgJ2AVuNSgTvGAIHs09kUeD1P0wAOX+nwB3Kf XCtNtY6BJ0pxuVk9ikf5y2BcZcffj+49tIT3byQOJ4h+P/aYIWF+jViRfCMfh8uw tbr1g39FCITIVcaGM01lcLNRyTyyH40ZGfKmDvn6uqC6m5WnJpBdC5G/Pn8rpGQP 6FNra79vZa76+4xRLrMbUmHMMeih4noM01fONbfQFEKBheg78xH2sa4TsL2jNSEy Ca3WBMO6di1u9eqVozdHOkB5Kk79zaBWcjOMhtLZ1VAx3ukNNUpTfurJ6WHJd3pX 1WrdyQ72G4Gd+k2fvaynBN3YeHR9KR0= -----END CERTIFICATE-----Generated at Sun Jun 15 15:19:02 2025 by rpki-client