$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/2/04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C.mft File: 04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C.mft (raw, json) Hash identifier: ZNz4j1EY0cY1f80r2hvmJatHWBWT/fXxosqwttyMsss= Subject key identifier: 32:E7:4A:07:0B:9C:BF:33:86:5C:B3:3F:B9:51:30:58:8E:0A:B6:0A Authority key identifier: 04:F7:D8:E6:71:AC:7D:0A:0F:EE:B7:4E:4B:E9:C9:C1:3E:B2:95:4C Certificate issuer: /CN=04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C Certificate serial: 62700B91B5D3936D9B85B10742940603192F921B Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/2/04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C.mft Manifest number: 019A Signing time: Sun 15 Jun 2025 14:16:28 +0000 Manifest this update: Sun 15 Jun 2025 14:11:28 +0000 Manifest next update: Mon 16 Jun 2025 14:57:28 +0000 Files and hashes: 1: 04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C.crl (hash: LICnfgYkVpIfPw6iW1vtzSiDT7qm5WV38ufiQBkiHK4=) 2: 326130353a646663313a383236303a3a2f34342d3438203d3e203331383938.roa (hash: BmKTbRMoiut+8VNSufvgCLPuOQU03tX8DldEeEoDX0o=) 3: 326130353a646663313a383230303a3a2f34302d3438203d3e20323136343532.roa (hash: RXK+W3w1YvQu9ahIRwMIryYcMgQG39a2/hB4IK34E74=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/2/04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C.crl rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/2/04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 14:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:70:0b:91:b5:d3:93:6d:9b:85:b1:07:42:94:06:03:19:2f:92:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C Validity Not Before: Jun 15 14:11:28 2025 GMT Not After : Jun 16 14:57:28 2025 GMT Subject: CN=32E74A070B9CBF33865CB33FB95130588E0AB60A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ff:27:86:bd:5f:ab:25:f9:1f:fa:83:5f:74: 52:b1:cc:be:26:3e:67:6e:c5:ed:5b:65:4d:43:20: 60:4c:a1:70:da:1c:cb:65:ab:08:9a:05:74:1c:f3: 43:03:cf:f3:cf:7b:b4:5f:06:82:97:10:d2:aa:b0: 5a:a5:68:44:33:69:d3:9e:81:ef:a9:a1:0f:13:b3: 05:f5:83:a9:67:a0:e1:7b:68:b3:a6:cc:13:09:bb: a6:31:ba:8d:af:57:50:4d:71:5f:ab:b2:82:8d:e2: 81:3a:f2:07:9e:67:29:1f:d1:54:65:c9:c5:c9:bd: 03:26:ef:3f:91:9b:40:71:ee:98:f4:88:d3:55:8a: 8c:e5:9f:96:26:41:da:f9:20:4c:0a:05:4e:b5:2b: 7b:9d:f4:60:09:92:41:1b:5f:9a:8f:ed:bf:8d:93: ca:2b:74:a3:e6:ce:90:76:c3:15:d6:63:44:5b:7c: 74:de:52:52:58:15:d1:69:4c:a2:3a:5c:2f:06:ea: fa:73:30:ba:32:c0:6f:73:38:ae:18:22:5c:f0:f7: d2:1c:76:c6:9a:34:c1:fc:28:69:ba:c0:c0:20:8d: 34:24:7e:28:9b:fa:ea:a8:bc:6e:fa:5a:52:2a:c6: df:40:31:48:40:04:fa:98:bf:cb:50:76:9c:77:54: ad:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:E7:4A:07:0B:9C:BF:33:86:5C:B3:3F:B9:51:30:58:8E:0A:B6:0A X509v3 Authority Key Identifier: keyid:04:F7:D8:E6:71:AC:7D:0A:0F:EE:B7:4E:4B:E9:C9:C1:3E:B2:95:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/2/04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/2/04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:6d:0e:73:14:7f:81:01:cf:d7:7a:0f:1a:2e:48:a9:19:0a: 51:83:1e:65:3f:71:4b:b3:f4:b3:e0:3e:87:4c:a9:f0:50:81: fc:c5:a7:47:b7:ea:c8:22:74:64:79:42:ca:8e:dd:5b:b0:ce: 88:31:46:32:9b:48:db:36:4b:2c:6d:5a:01:a7:92:35:08:93: 44:72:6a:c1:b3:61:b1:bb:01:e6:83:7d:71:56:76:da:43:fd: e7:e5:12:65:45:2d:92:e6:40:5d:e2:8a:ea:e4:c4:18:16:59: bc:0e:56:0d:9f:bf:b9:31:a6:6e:b8:b5:6b:b1:6f:c5:cb:79: 68:d0:5c:aa:6b:be:7d:b0:31:18:65:3a:a6:37:ed:f8:77:b3: e3:99:10:59:89:2c:00:91:9f:b0:7d:9d:08:71:2a:b8:41:46: 89:c2:f0:20:68:ef:c3:9e:80:2e:ac:dc:a5:be:20:bf:9b:e5: 03:75:d6:9e:18:97:13:59:13:7c:51:cf:94:5e:8f:93:61:21: d6:ab:52:15:d1:65:c3:25:8d:67:0b:b9:ed:dc:f4:42:9a:f7: e3:bc:5f:53:0a:7c:1a:56:39:5d:14:ec:e7:cd:d3:eb:43:01: 4c:b2:7f:6d:c4:a3:78:8b:f7:19:4d:4c:08:41:b0:d6:47:02: 04:c0:5b:53 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUYnALkbXTk22bhbEHQpQGAxkvkhswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDRGN0Q4RTY3MUFDN0QwQTBGRUVCNzRFNEJFOUM5QzEz RUIyOTU0QzAeFw0yNTA2MTUxNDExMjhaFw0yNTA2MTYxNDU3MjhaMDMxMTAvBgNV BAMTKDMyRTc0QTA3MEI5Q0JGMzM4NjVDQjMzRkI5NTEzMDU4OEUwQUI2MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL/yeGvV+rJfkf+oNfdFKxzL4m Pmduxe1bZU1DIGBMoXDaHMtlqwiaBXQc80MDz/PPe7RfBoKXENKqsFqlaEQzadOe ge+poQ8TswX1g6lnoOF7aLOmzBMJu6Yxuo2vV1BNcV+rsoKN4oE68geeZykf0VRl ycXJvQMm7z+Rm0Bx7pj0iNNViozln5YmQdr5IEwKBU61K3ud9GAJkkEbX5qP7b+N k8ordKPmzpB2wxXWY0RbfHTeUlJYFdFpTKI6XC8G6vpzMLoywG9zOK4YIlzw99Ic dsaaNMH8KGm6wMAgjTQkfiib+uqovG76WlIqxt9AMUhABPqYv8tQdpx3VK2JAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUMudKBwucvzOGXLM/uVEwWI4KtgowHwYDVR0j BBgwFoAUBPfY5nGsfQoP7rdOS+nJwT6ylUwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNk OGVmLzIvMDRGN0Q4RTY3MUFDN0QwQTBGRUVCNzRFNEJFOUM5QzEzRUIyOTU0Qy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzA0RjdEOEU2NzFBQzdE MEEwRkVFQjc0RTRCRTlDOUMxM0VCMjk1NEMuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNkOGVm LzIvMDRGN0Q4RTY3MUFDN0QwQTBGRUVCNzRFNEJFOUM5QzEzRUIyOTU0Qy5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAJBtDnMUf4EBz9d6DxouSKkZClGDHmU/cUuz9LPgPodMqfBQgfzFp0e3 6sgidGR5QsqO3VuwzogxRjKbSNs2SyxtWgGnkjUIk0RyasGzYbG7AeaDfXFWdtpD /eflEmVFLZLmQF3iiurkxBgWWbwOVg2fv7kxpm64tWuxb8XLeWjQXKprvn2wMRhl OqY37fh3s+OZEFmJLACRn7B9nQhxKrhBRonC8CBo78OegC6s3KW+IL+b5QN11p4Y lxNZE3xRz5Rej5NhIdarUhXRZcMljWcLue3c9EKa9+O8X1MKfBpWOV0U7OfN0+tD AUyyf23Eo3iL9xlNTAhBsNZHAgTAW1M= -----END CERTIFICATE-----Generated at Mon Jun 16 04:07:26 2025 by rpki-client