$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.mft File: 309C25E7B18FF28A60B96B25572F8A9E3104FE76.mft (raw, json) Hash identifier: qb17LmD7fzhv5ekTrNU0wboMKjCFtqhspO4h+kdpR5c= Subject key identifier: 8A:CC:C9:BA:65:ED:36:0D:07:8C:4D:4A:1D:86:C2:CC:43:08:09:55 Authority key identifier: 30:9C:25:E7:B1:8F:F2:8A:60:B9:6B:25:57:2F:8A:9E:31:04:FE:76 Certificate issuer: /CN=309C25E7B18FF28A60B96B25572F8A9E3104FE76 Certificate serial: 1B248CADF19C8C12C889A28193DE0977A7550024 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.mft Manifest number: 0132 Signing time: Sat 26 Apr 2025 12:41:15 +0000 Manifest this update: Sat 26 Apr 2025 12:36:15 +0000 Manifest next update: Sun 27 Apr 2025 14:41:15 +0000 Files and hashes: 1: 326130613a363034303a623166333a3a2f34382d3438203d3e203530373535.roa (hash: 92+lsmyfA1dbS5hvoEPYQjapfeES/k8FUYGANJUnv7Q=) 2: 326130613a363034303a623166303a3a2f34382d3438203d3e20323030363736.roa (hash: dOsy+R+Pu+oAZfnInfj1QRHz0MdLjsjFwXGn7V3VRV4=) 3: 326130613a363034303a656430303a3a2f34302d3430203d3e2030.roa (hash: vmCZ6eOm5tS7bNiPnlTdd4xzZjSjYpY8TXILOA0OmSc=) 4: 326130613a363034303a623166333a3a2f34382d3438203d3e20323030363736.roa (hash: w5dnEiDx5goNVTXWdKgSFg9sD6RUplNurP3xamwPNaQ=) 5: 326130613a363034303a623166373a3a2f34382d3438203d3e203530373535.roa (hash: cKtVijhwYzD8lUknL4bLGAreJBVYSaklclbPuDAhlM4=) 6: 326130613a363034303a623166353a3a2f34382d3438203d3e20323030363736.roa (hash: LBWSPbWdHS2qLW48sBVvajPcn95MUvX0AUIFyg2pSwE=) 7: 309C25E7B18FF28A60B96B25572F8A9E3104FE76.crl (hash: 73fhXZk77vN9l25y1c7iVSIrvmg6YDE6RNJca6UY8Pw=) 8: 326130613a363034303a623166323a3a2f34382d3438203d3e20323030363736.roa (hash: Iz/fbYS1/cy8A5fLPahpzYYMJ+9YAFFxOvqGD55PuMM=) 9: 326130613a363034303a623166663a3a2f34382d3438203d3e2030.roa (hash: cwd5LxUfGqT7a9/Pajk8lfNPUrL3p3IC+JEphw9tMJU=) 10: 326130613a363034303a623166383a3a2f34382d3438203d3e203530373535.roa (hash: FI47MURWTFWikQVohyPC3i+m6GkNNvGpYuxpgU2LP/Q=) 11: 326130613a363034303a623166313a3a2f34382d3438203d3e20323030363736.roa (hash: MYzoD8wbCOxI3VM/BdbUpxOg1cHoSa/pKdV7AMYn73k=) 12: 326130613a363034303a623166343a3a2f34382d3438203d3e20323030363736.roa (hash: Nnbe/4zszjgo0YB55Fou4Wds93r5DpKEFbS0MZw1LSo=) 13: 326130613a363034303a623166363a3a2f34382d3438203d3e203530373535.roa (hash: WZAT+2UnkuTeDpADo9xuR0pPXroOCLJbbHfxikcVv24=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.crl rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 07:09:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:24:8c:ad:f1:9c:8c:12:c8:89:a2:81:93:de:09:77:a7:55:00:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=309C25E7B18FF28A60B96B25572F8A9E3104FE76 Validity Not Before: Apr 26 12:36:15 2025 GMT Not After : Apr 27 14:41:15 2025 GMT Subject: CN=8ACCC9BA65ED360D078C4D4A1D86C2CC43080955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:22:3f:26:e7:75:87:ca:c1:1a:62:5c:8b:18: 85:a7:47:8c:27:ba:00:b3:9b:81:d2:2c:ef:83:31: b8:33:43:9e:29:cd:ea:ed:ba:10:0e:78:e7:ad:f4: 54:a0:6e:2e:d9:a3:18:47:a7:88:d5:de:f1:df:68: 82:2d:12:35:59:38:7f:c0:f2:2a:19:46:1a:a5:6a: c6:6b:29:30:7e:ff:27:d3:46:f5:79:61:69:70:47: 94:e0:b3:07:7b:db:6b:8d:19:ff:7f:44:37:ee:15: 66:bb:30:82:cf:44:4a:0c:cc:ea:6e:22:51:cf:bb: 1a:ef:45:3e:b9:58:ba:4a:18:18:df:20:7e:b1:d1: f8:c2:7d:cf:f2:7c:9b:71:a2:46:31:27:9f:75:17: 87:b9:b2:c6:c1:35:8b:8a:57:6c:d0:45:fd:94:dc: f0:63:38:fb:b8:73:94:f0:e3:ae:96:16:25:16:00: 85:81:fd:1b:b6:ff:62:56:65:50:24:a0:4c:fe:c9: 35:5a:dc:83:b6:cf:48:03:a8:86:88:e7:ca:09:26: 12:57:d1:0a:7c:29:c9:7b:d4:f9:cc:cf:03:d8:64: d9:50:70:11:20:3b:7c:d6:2a:ae:50:46:9b:2b:70: 73:1c:c7:b7:51:1e:65:9f:d4:58:60:da:39:e2:28: cb:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:CC:C9:BA:65:ED:36:0D:07:8C:4D:4A:1D:86:C2:CC:43:08:09:55 X509v3 Authority Key Identifier: keyid:30:9C:25:E7:B1:8F:F2:8A:60:B9:6B:25:57:2F:8A:9E:31:04:FE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:e2:dd:b0:94:a4:4d:25:c8:4f:d8:3d:33:64:1b:10:c7:5c: 5e:14:51:01:22:f5:62:2f:3a:a8:79:4a:a8:3f:aa:52:33:e7: 2a:1f:cc:1b:28:08:5d:66:90:74:13:03:e2:a2:5a:5d:08:e7: aa:fd:d3:b1:7b:b1:ee:38:ce:55:4a:49:dc:6d:6f:bf:e2:37: 4a:08:12:51:b0:7d:ab:d1:9d:23:90:cb:88:5b:ef:4a:2e:3f: 94:0c:bb:d6:6d:ef:ef:78:c5:a9:55:b2:50:b1:5c:21:82:9e: d0:49:5c:14:e6:e6:e9:0d:39:74:3b:7b:01:7c:9c:27:f4:de: ec:a0:de:20:18:e0:75:d8:d3:88:8c:74:be:ba:bf:13:ab:09: 65:66:99:b5:c5:c4:29:a6:f7:f8:a7:a1:1a:64:98:bc:31:98: 48:fb:71:c6:61:fa:de:11:ce:84:82:68:f2:8d:21:cf:f4:ca: c2:da:78:bf:c2:95:ab:49:bf:a5:2a:19:16:98:71:70:b5:75: df:9a:ac:67:c4:40:49:cc:c8:35:a2:73:12:33:09:29:08:d3: e7:fc:31:6c:a6:4a:ee:88:11:70:f5:c5:28:a9:33:d0:c2:0a: e7:f7:df:4a:05:7d:1d:21:74:c8:d8:5e:a0:5c:14:3f:c9:8f: da:d8:b9:4e -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUGySMrfGcjBLIiaKBk94Jd6dVACQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA5QzI1RTdCMThGRjI4QTYwQjk2QjI1NTcyRjhBOUUz MTA0RkU3NjAeFw0yNTA0MjYxMjM2MTVaFw0yNTA0MjcxNDQxMTVaMDMxMTAvBgNV BAMTKDhBQ0NDOUJBNjVFRDM2MEQwNzhDNEQ0QTFEODZDMkNDNDMwODA5NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXIj8m53WHysEaYlyLGIWnR4wn ugCzm4HSLO+DMbgzQ54pzertuhAOeOet9FSgbi7ZoxhHp4jV3vHfaIItEjVZOH/A 8ioZRhqlasZrKTB+/yfTRvV5YWlwR5Tgswd722uNGf9/RDfuFWa7MILPREoMzOpu IlHPuxrvRT65WLpKGBjfIH6x0fjCfc/yfJtxokYxJ591F4e5ssbBNYuKV2zQRf2U 3PBjOPu4c5Tw466WFiUWAIWB/Ru2/2JWZVAkoEz+yTVa3IO2z0gDqIaI58oJJhJX 0Qp8Kcl71PnMzwPYZNlQcBEgO3zWKq5QRpsrcHMcx7dRHmWf1Fhg2jniKMuxAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUiszJumXtNg0HjE1KHYbCzEMICVUwHwYDVR0j BBgwFoAUMJwl57GP8opguWslVy+KnjEE/nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1 Y2U3LzAvMzA5QzI1RTdCMThGRjI4QTYwQjk2QjI1NTcyRjhBOUUzMTA0RkU3Ni5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzMwOUMyNUU3QjE4RkYy OEE2MEI5NkIyNTU3MkY4QTlFMzEwNEZFNzYuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1Y2U3 LzAvMzA5QzI1RTdCMThGRjI4QTYwQjk2QjI1NTcyRjhBOUUzMTA0RkU3Ni5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAEvi3bCUpE0lyE/YPTNkGxDHXF4UUQEi9WIvOqh5Sqg/qlIz5yofzBso CF1mkHQTA+KiWl0I56r907F7se44zlVKSdxtb7/iN0oIElGwfavRnSOQy4hb70ou P5QMu9Zt7+94xalVslCxXCGCntBJXBTm5ukNOXQ7ewF8nCf03uyg3iAY4HXY04iM dL66vxOrCWVmmbXFxCmm9/inoRpkmLwxmEj7ccZh+t4RzoSCaPKNIc/0ysLaeL/C latJv6UqGRaYcXC1dd+arGfEQEnMyDWicxIzCSkI0+f8MWymSu6IEXD1xSipM9DC Cuf330oFfR0hdMjYXqBcFD/Jj9rYuU4= -----END CERTIFICATE-----Generated at Sat Apr 26 21:04:47 2025 by rpki-client