$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft File: B729F0C7BF295C6844FD328B324A1ED8598032F9.mft (raw, json) Hash identifier: vRyTOTw5546iBhvuP0rVjrI/DKDEQ6VcMGjTOSexUTU= Subject key identifier: 7C:51:A3:6C:AE:EA:84:62:7F:4B:8C:A9:BA:41:6F:11:2B:BD:79:7B Authority key identifier: B7:29:F0:C7:BF:29:5C:68:44:FD:32:8B:32:4A:1E:D8:59:80:32:F9 Certificate issuer: /CN=B729F0C7BF295C6844FD328B324A1ED8598032F9 Certificate serial: 0CEE9E83EB916A0ACE6E32CA9B4B2237A102953B Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft Manifest number: A8 Signing time: Tue 04 Nov 2025 22:13:16 +0000 Manifest this update: Tue 04 Nov 2025 22:08:16 +0000 Manifest next update: Wed 05 Nov 2025 23:33:16 +0000 Files and hashes: 1: 326130353a646663313a383236303a3a2f34342d3438203d3e203331383938.roa (hash: NyB2Q3nplRrrVqQaiZpQzKBuInw96biJRlaf2Wfrra4=) 2: B729F0C7BF295C6844FD328B324A1ED8598032F9.crl (hash: k6tXOC9Lh1vQt/kRJzzvMAx2OnTB7IJ0cR6eqO+1it0=) 3: 326130353a646663313a383230303a3a2f34302d3438203d3e20323136343532.roa (hash: tbMEmJLRx8p/XooueSgD+2D8XMkhb8zPBfDKGLGOZ18=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.crl rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 22:27:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:ee:9e:83:eb:91:6a:0a:ce:6e:32:ca:9b:4b:22:37:a1:02:95:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B729F0C7BF295C6844FD328B324A1ED8598032F9 Validity Not Before: Nov 4 22:08:16 2025 GMT Not After : Nov 5 23:33:16 2025 GMT Subject: CN=7C51A36CAEEA84627F4B8CA9BA416F112BBD797B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2f:28:8c:41:8e:48:c2:d1:b3:c8:64:42:ed: ab:ac:8d:cf:9c:80:dc:e7:66:21:c8:87:05:28:ce: 3c:fd:47:ac:fe:3a:71:5f:eb:7a:a9:4f:ce:5b:4a: af:15:ab:e9:fe:a3:89:dc:e4:7b:4b:c9:d8:2e:cc: bf:ae:1f:71:ec:bf:0b:03:81:e7:d3:cd:58:5b:64: ee:91:57:85:ed:7b:86:40:db:9e:33:7c:5e:c5:29: d3:8f:b1:e2:a4:0e:ce:1a:69:93:4b:c1:18:8c:7e: a0:fc:74:7a:1f:17:5f:66:04:f3:26:80:af:9d:2f: ea:5d:1d:d8:3c:1a:08:92:bd:c1:9d:70:58:56:0f: 61:cb:c1:2c:82:54:04:23:e0:04:77:6a:1d:42:69: 4b:6c:d8:aa:e4:ff:c0:27:a1:da:43:5a:e9:92:75: e1:3a:82:30:60:dc:e4:29:c9:e8:69:7c:05:77:ea: 0e:60:47:19:d5:38:ec:09:8f:f7:01:a2:97:7b:6f: 7f:56:6d:0a:8d:17:c1:e5:92:93:9d:d6:51:9d:78: 7c:63:d1:f3:92:ff:d2:a6:1b:1a:dd:ec:b6:df:da: 72:6a:2d:8e:11:9c:bc:d1:99:f9:e5:68:82:63:20: ce:4a:85:ca:81:8c:20:77:f8:88:2c:cc:76:a5:70: 5c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:51:A3:6C:AE:EA:84:62:7F:4B:8C:A9:BA:41:6F:11:2B:BD:79:7B X509v3 Authority Key Identifier: keyid:B7:29:F0:C7:BF:29:5C:68:44:FD:32:8B:32:4A:1E:D8:59:80:32:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:b4:c1:e9:03:b6:5b:61:01:28:2f:1e:fc:9b:7d:68:fd:e7: 96:69:c2:8e:1c:f9:d3:4b:07:4a:14:16:c8:60:a5:2a:f5:79: 6b:b7:67:73:05:05:48:7e:13:5c:1a:9d:ad:43:d2:36:60:f0: 5e:11:20:96:6c:d8:22:7f:23:ed:b9:a0:16:c6:1b:2b:0b:45: e3:64:17:ce:f9:30:ba:8a:73:be:e2:10:3f:b8:6f:77:94:25: b8:d3:c0:96:56:f7:e6:4a:e9:ba:d9:a0:e2:ec:a0:2a:1c:35: 8e:74:9d:f6:3e:c6:8d:a2:f5:da:d3:58:c3:85:2c:da:b7:fb: a8:4a:55:03:23:fd:2a:99:4c:00:ae:62:73:fe:19:90:62:8d: 6f:28:35:f0:60:7a:aa:08:65:e0:a7:72:1f:76:34:3c:a2:26: b1:5b:73:e4:25:f2:af:6a:60:da:38:d0:99:b9:f0:d1:02:31: 35:a9:b2:44:d9:68:67:44:cb:aa:2a:49:a5:04:94:e9:5e:d0: b9:4e:56:67:c6:cb:1f:da:b4:c1:ca:d8:50:f9:c0:0f:09:2a: 82:0d:7e:c2:56:65:52:74:7c:fc:8e:49:49:d4:d5:24:10:93: 4f:c5:cb:04:0b:47:85:0c:76:71:95:6a:cf:f3:fd:b8:63:ab: 40:14:f7:79 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUDO6eg+uRagrObjLKm0siN6EClTswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcyOUYwQzdCRjI5NUM2ODQ0RkQzMjhCMzI0QTFFRDg1 OTgwMzJGOTAeFw0yNTExMDQyMjA4MTZaFw0yNTExMDUyMzMzMTZaMDMxMTAvBgNV BAMTKDdDNTFBMzZDQUVFQTg0NjI3RjRCOENBOUJBNDE2RjExMkJCRDc5N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5LyiMQY5IwtGzyGRC7ausjc+c gNznZiHIhwUozjz9R6z+OnFf63qpT85bSq8Vq+n+o4nc5HtLydguzL+uH3HsvwsD gefTzVhbZO6RV4Xte4ZA254zfF7FKdOPseKkDs4aaZNLwRiMfqD8dHofF19mBPMm gK+dL+pdHdg8GgiSvcGdcFhWD2HLwSyCVAQj4AR3ah1CaUts2Krk/8AnodpDWumS deE6gjBg3OQpyehpfAV36g5gRxnVOOwJj/cBopd7b39WbQqNF8HlkpOd1lGdeHxj 0fOS/9KmGxrd7Lbf2nJqLY4RnLzRmfnlaIJjIM5KhcqBjCB3+IgszHalcFwzAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUfFGjbK7qhGJ/S4ypukFvESu9eXswHwYDVR0j BBgwFoAUtynwx78pXGhE/TKLMkoe2FmAMvkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNk OGVmLzMvQjcyOUYwQzdCRjI5NUM2ODQ0RkQzMjhCMzI0QTFFRDg1OTgwMzJGOS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0I3MjlGMEM3QkYyOTVD Njg0NEZEMzI4QjMyNEExRUQ4NTk4MDMyRjkuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNkOGVm LzMvQjcyOUYwQzdCRjI5NUM2ODQ0RkQzMjhCMzI0QTFFRDg1OTgwMzJGOS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBACe0wekDtlthASgvHvybfWj955Zpwo4c+dNLB0oUFshgpSr1eWu3Z3MF BUh+E1wana1D0jZg8F4RIJZs2CJ/I+25oBbGGysLReNkF875MLqKc77iED+4b3eU JbjTwJZW9+ZK6brZoOLsoCocNY50nfY+xo2i9drTWMOFLNq3+6hKVQMj/SqZTACu YnP+GZBijW8oNfBgeqoIZeCnch92NDyiJrFbc+Ql8q9qYNo40Jm58NECMTWpskTZ aGdEy6oqSaUElOle0LlOVmfGyx/atMHK2FD5wA8JKoINfsJWZVJ0fPyOSUnU1SQQ k0/FywQLR4UMdnGVas/z/bhjq0AU93k= -----END CERTIFICATE-----Generated at Wed Nov 5 11:02:49 2025 by rpki-client