$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft File: 4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft (raw, json) Hash identifier: eAZZPBXnk+DWpiQoYBrcxWnUhRfOkFN7o1ZlpTSJ04Q= Subject key identifier: 3C:92:99:FC:AC:8A:E3:48:B6:FD:BE:B8:01:BE:F1:D1:8D:A4:65:F3 Authority key identifier: 4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57 Certificate issuer: /CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057 Certificate serial: 4B8725F68730CABC82D5988A9C0B2AD4864CBCDE Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft Manifest number: 2C Signing time: Mon 04 Aug 2025 14:06:03 +0000 Manifest this update: Mon 04 Aug 2025 14:01:03 +0000 Manifest next update: Tue 05 Aug 2025 14:21:03 +0000 Files and hashes: 1: 326130613a363034303a623166363a3a2f34382d3438203d3e203530373535.roa (hash: R34yyXLS2JN3du0sWYjJzaZCEqLgwBOyYDGo+BSfbs4=) 2: 326130613a363034303a623166663a3a2f34382d3438203d3e2030.roa (hash: sgKT96rKThQB6ppVhmCDbggp5qDvA2cp3RmFQMzSxHo=) 3: 326130613a363034303a623166323a3a2f34382d3438203d3e20323030363736.roa (hash: 9V8f+kjKeAUUM95gFyLo820Chs0Y7IHMYFLg0AJNvf4=) 4: 326130613a363034303a623166333a3a2f34382d3438203d3e203530373535.roa (hash: zj+PtOUjRL+jh8fX/z3gQawz9pZ6f2aTfcfOK+OABQw=) 5: 326130613a363034303a623166343a3a2f34382d3438203d3e20323030363736.roa (hash: 8vNlACv4VljcfTfQph4BWYbiB6JxXxu9u3pkSEnSFS8=) 6: 326130613a363034303a623166303a3a2f34382d3438203d3e20323030363736.roa (hash: f56ZeNhzC2SfQF3WtfvHaAXxQIIVMtYJhNScjVogZ9M=) 7: 326130613a363034303a623166353a3a2f34382d3438203d3e20323030363736.roa (hash: evMMfqo4Ez8yHDdFKOgCCAQkkBtJLTT2mhkV7j/a8vQ=) 8: 326130613a363034303a623166383a3a2f34382d3438203d3e203530373535.roa (hash: NCGL0xwyR9g2r6A71GgXDrp+Nhm2k3T8HoQFr0k0das=) 9: 326130613a363034303a623166313a3a2f34382d3438203d3e20323030363736.roa (hash: jmju8VqIF7uHPknsXmKVCF/NlSPLUXdtHx+4q+t6HvI=) 10: 4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl (hash: O2T+oOQqySQAv4JksdpqeJpNiVoKWnvrUYSxSg5EYX0=) 11: 326130613a363034303a656430303a3a2f34302d3430203d3e2030.roa (hash: uqRsJY7KhhwwPaijQCvC3gE+TqC4+OLuBx54eDmXu1Q=) 12: 326130613a363034303a623166333a3a2f34382d3438203d3e20323030363736.roa (hash: 16vtCR02Wpx8fBrNg3BBjazTebmU9P6zPt+x/DW89rE=) 13: 326130613a363034303a623166373a3a2f34382d3438203d3e203530373535.roa (hash: q63trgvlirS+Vgtt9rQwfx5g58dhjqx1zfXsQI8nfBQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 02:23:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:87:25:f6:87:30:ca:bc:82:d5:98:8a:9c:0b:2a:d4:86:4c:bc:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057 Validity Not Before: Aug 4 14:01:03 2025 GMT Not After : Aug 5 14:21:03 2025 GMT Subject: CN=3C9299FCAC8AE348B6FDBEB801BEF1D18DA465F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e4:74:34:06:b5:b8:b4:33:ef:f1:bb:b1:10: 13:ab:01:27:80:b7:fd:48:8c:a4:79:7e:f9:a7:a8: 43:06:59:62:f6:66:f3:2f:d0:f8:11:c1:fd:c2:b5: 34:ad:f6:a7:fb:ed:40:19:d0:90:89:25:ab:86:2b: 7c:d6:06:97:96:c6:a3:52:cd:b0:3d:25:54:60:16: 41:34:b3:49:69:51:3c:a0:fa:d1:2b:fa:93:ee:63: 89:88:dc:d9:25:50:b6:b2:e3:82:76:6e:89:7e:37: 46:8c:9b:ec:8d:e6:5e:11:ac:34:bb:17:8a:ab:a2: f7:f7:59:9f:63:3e:83:03:91:24:51:ea:ca:95:cb: 20:6e:d6:62:e9:df:ac:df:df:19:96:81:34:ab:5b: cf:fd:3d:34:a3:b8:ad:a2:00:7e:2d:72:7a:ac:8c: 12:71:1c:db:d1:26:65:86:a6:a1:fe:df:a5:88:1b: 24:93:a4:7e:06:1f:43:1c:55:7f:20:45:41:f2:15: 61:ff:d8:30:0e:f2:de:08:52:aa:2d:81:96:4f:ce: ba:c0:23:8f:5f:63:00:b8:95:45:6d:e2:5c:15:3f: ef:2b:2f:2c:31:d6:30:60:e3:24:2d:55:85:54:22: 9f:c1:93:7e:19:fc:1b:09:f1:56:fa:f2:56:4d:a4: 4b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:92:99:FC:AC:8A:E3:48:B6:FD:BE:B8:01:BE:F1:D1:8D:A4:65:F3 X509v3 Authority Key Identifier: keyid:4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:5b:0c:71:29:00:af:13:21:9f:0c:87:bb:21:b5:f3:20:45: d5:4f:d2:19:73:f8:19:4a:f0:b3:bb:e7:49:b6:a5:96:e6:42: 48:7f:f8:c0:27:b9:ae:20:98:42:33:eb:86:ec:6a:e8:9e:17: cf:9e:83:a5:8c:52:ef:17:cd:bd:68:61:63:e6:3d:72:76:1a: 12:da:f4:b5:3f:12:7a:46:56:68:ec:b0:29:5b:60:96:00:26: 4b:f0:36:c6:32:75:aa:4a:3e:37:c6:91:96:7a:cd:9c:b6:83: c0:e2:5c:18:f1:84:6e:2e:b2:bd:58:23:03:1b:ac:77:89:69: 86:f0:ce:51:dd:04:39:53:47:01:00:93:50:4a:f4:1e:f9:d2: 39:17:2f:19:6f:8a:17:41:f5:a0:87:73:fc:d2:ed:73:2f:c0: db:e7:73:70:df:65:77:a2:8e:8f:72:80:2f:0e:47:5d:78:70: 66:62:d4:78:70:ab:4c:d2:43:a6:48:5d:82:65:be:ee:95:0b: 33:93:0c:af:9d:f3:1a:7f:ec:a0:b2:ab:db:47:9c:4a:05:56: e0:a7:03:83:11:15:fa:21:b9:33:f2:da:ae:60:ed:ec:f7:31: c3:f7:1a:26:b5:b7:55:4a:62:5b:e1:85:d4:6b:1b:2d:a5:3d: 02:af:25:af -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUS4cl9ocwyryC1ZiKnAsq1IZMvN4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZEQzU3MUE1Q0RBMTM5NThCQ0U0NzVGMEU1RDkxMDFE QjgxMjA1NzAeFw0yNTA4MDQxNDAxMDNaFw0yNTA4MDUxNDIxMDNaMDMxMTAvBgNV BAMTKDNDOTI5OUZDQUM4QUUzNDhCNkZEQkVCODAxQkVGMUQxOERBNDY1RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx5HQ0BrW4tDPv8buxEBOrASeA t/1IjKR5fvmnqEMGWWL2ZvMv0PgRwf3CtTSt9qf77UAZ0JCJJauGK3zWBpeWxqNS zbA9JVRgFkE0s0lpUTyg+tEr+pPuY4mI3NklULay44J2bol+N0aMm+yN5l4RrDS7 F4qrovf3WZ9jPoMDkSRR6sqVyyBu1mLp36zf3xmWgTSrW8/9PTSjuK2iAH4tcnqs jBJxHNvRJmWGpqH+36WIGySTpH4GH0McVX8gRUHyFWH/2DAO8t4IUqotgZZPzrrA I49fYwC4lUVt4lwVP+8rLywx1jBg4yQtVYVUIp/Bk34Z/BsJ8Vb68lZNpEslAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUPJKZ/KyK40i2/b64Ab7x0Y2kZfMwHwYDVR0j BBgwFoAUT9xXGlzaE5WLzkdfDl2RAduBIFcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1 Y2U3LzMvNEZEQzU3MUE1Q0RBMTM5NThCQ0U0NzVGMEU1RDkxMDFEQjgxMjA1Ny5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzRGREM1NzFBNUNEQTEz OTU4QkNFNDc1RjBFNUQ5MTAxREI4MTIwNTcuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1Y2U3 LzMvNEZEQzU3MUE1Q0RBMTM5NThCQ0U0NzVGMEU1RDkxMDFEQjgxMjA1Ny5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBACtbDHEpAK8TIZ8Mh7shtfMgRdVP0hlz+BlK8LO750m2pZbmQkh/+MAn ua4gmEIz64bsauieF8+eg6WMUu8Xzb1oYWPmPXJ2GhLa9LU/EnpGVmjssClbYJYA JkvwNsYydapKPjfGkZZ6zZy2g8DiXBjxhG4usr1YIwMbrHeJaYbwzlHdBDlTRwEA k1BK9B750jkXLxlvihdB9aCHc/zS7XMvwNvnc3DfZXeijo9ygC8OR114cGZi1Hhw q0zSQ6ZIXYJlvu6VCzOTDK+d8xp/7KCyq9tHnEoFVuCnA4MRFfohuTPy2q5g7ez3 McP3Gia1t1VKYlvhhdRrGy2lPQKvJa8= -----END CERTIFICATE-----Generated at Mon Aug 4 19:05:50 2025 by rpki-client