$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft File: B729F0C7BF295C6844FD328B324A1ED8598032F9.mft (raw, json) Hash identifier: +2Dm3TaBaXemJhG4w0FsHvCAidlCtETXlBgJya5S5iQ= Subject key identifier: F3:AE:0E:11:A4:7E:42:7C:63:AB:D3:BF:99:9A:EC:2C:FE:0D:DE:A3 Authority key identifier: B7:29:F0:C7:BF:29:5C:68:44:FD:32:8B:32:4A:1E:D8:59:80:32:F9 Certificate issuer: /CN=B729F0C7BF295C6844FD328B324A1ED8598032F9 Certificate serial: 2E791A1086D556BCCCA1850382FDB3ACA86836F1 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft Manifest number: 2C Signing time: Mon 04 Aug 2025 08:43:09 +0000 Manifest this update: Mon 04 Aug 2025 08:38:09 +0000 Manifest next update: Tue 05 Aug 2025 09:26:09 +0000 Files and hashes: 1: 326130353a646663313a383230303a3a2f34302d3438203d3e20323136343532.roa (hash: tbMEmJLRx8p/XooueSgD+2D8XMkhb8zPBfDKGLGOZ18=) 2: 326130353a646663313a383236303a3a2f34342d3438203d3e203331383938.roa (hash: NyB2Q3nplRrrVqQaiZpQzKBuInw96biJRlaf2Wfrra4=) 3: B729F0C7BF295C6844FD328B324A1ED8598032F9.crl (hash: Xxch6v5LZlJLdOmHkszxYRa4s7HYoppS0UgsOP6f+ag=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.crl rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 02:23:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:79:1a:10:86:d5:56:bc:cc:a1:85:03:82:fd:b3:ac:a8:68:36:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B729F0C7BF295C6844FD328B324A1ED8598032F9 Validity Not Before: Aug 4 08:38:09 2025 GMT Not After : Aug 5 09:26:09 2025 GMT Subject: CN=F3AE0E11A47E427C63ABD3BF999AEC2CFE0DDEA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1b:96:0a:06:da:39:1f:eb:c0:6d:57:3d:56: 33:61:19:5d:60:0b:ff:d6:f4:fe:1c:a5:e6:d6:28: bc:4e:30:4f:9f:a0:e5:64:62:2f:b1:5b:a4:12:fd: 6c:a3:75:eb:13:3b:d9:8a:4b:8a:eb:88:fd:60:4d: 3d:3e:84:b5:77:d5:9d:74:19:25:66:03:a0:39:93: 3b:b4:d1:5a:c9:5b:a8:8f:7d:12:a5:48:ae:f6:ce: d4:37:f6:de:af:df:71:e8:78:f7:07:23:39:d5:51: 84:11:95:53:35:3c:d4:e8:3e:40:fe:f0:37:c2:24: 6e:2e:2a:de:fb:20:92:63:5c:9d:49:a5:7a:8d:3c: 0e:83:f6:53:8a:d1:1b:0b:1c:43:f5:61:2e:2c:e5: d5:e0:1b:b1:49:3c:9f:47:09:ac:4c:f5:56:40:60: 97:9f:20:33:ef:3b:9f:48:55:62:64:29:41:ef:fc: fb:a3:d3:64:9b:aa:b5:e8:5d:3b:7a:47:7a:6e:9d: b3:d6:57:b1:d3:91:81:63:af:68:f8:a2:22:ca:7c: b4:30:6b:c4:a1:00:dd:7a:28:f5:21:da:8d:4b:51: d0:07:53:f5:90:57:53:35:a9:cf:1c:c3:51:99:e9: 78:d2:40:b4:9c:3d:c1:2c:94:bb:5c:ea:11:02:ca: 31:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:AE:0E:11:A4:7E:42:7C:63:AB:D3:BF:99:9A:EC:2C:FE:0D:DE:A3 X509v3 Authority Key Identifier: keyid:B7:29:F0:C7:BF:29:5C:68:44:FD:32:8B:32:4A:1E:D8:59:80:32:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:01:89:0b:0c:c5:9b:3e:0f:33:83:5c:9a:f8:86:05:9c:5b: 8b:c1:50:11:46:ad:f4:af:fb:ea:9b:8b:0a:5f:88:57:a5:97: 58:4c:ab:0e:06:54:3f:8b:4d:32:3a:87:20:29:36:15:24:96: 54:ee:12:de:2f:b3:c0:b2:9c:98:73:ab:fa:b9:83:1e:9d:b8: 5f:a6:dc:aa:cc:d9:c3:f8:ad:37:96:d0:bf:0c:aa:d8:75:f6: be:d7:52:e8:5b:79:5b:e8:39:47:90:74:7f:20:60:04:63:72: c7:30:2e:43:f7:5d:9b:ce:db:8e:47:47:3f:af:67:ea:eb:fc: a3:15:55:dd:72:ee:13:f4:5f:10:61:91:b4:cc:24:64:08:88: 3b:4c:4e:6a:8b:99:a1:a7:dc:f3:44:c5:a5:a1:92:2b:7a:95: 55:c7:ce:44:99:9f:12:6f:dc:a5:19:b9:03:72:88:3d:c1:df: 7e:1e:c3:c7:80:d1:63:d5:58:0e:f2:d9:f1:f2:f2:ab:45:df: 08:36:04:02:a8:ce:be:c7:02:c5:95:9d:72:ea:2f:c5:1a:17: aa:2c:1a:09:2a:46:e1:c9:86:33:ab:da:5c:77:74:c8:b2:04: 52:3f:96:4c:be:74:5e:67:86:e3:d1:0d:8b:50:07:bc:3c:1c: 54:af:b7:05 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIULnkaEIbVVrzMoYUDgv2zrKhoNvEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcyOUYwQzdCRjI5NUM2ODQ0RkQzMjhCMzI0QTFFRDg1 OTgwMzJGOTAeFw0yNTA4MDQwODM4MDlaFw0yNTA4MDUwOTI2MDlaMDMxMTAvBgNV BAMTKEYzQUUwRTExQTQ3RTQyN0M2M0FCRDNCRjk5OUFFQzJDRkUwRERFQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNG5YKBto5H+vAbVc9VjNhGV1g C//W9P4cpebWKLxOME+foOVkYi+xW6QS/WyjdesTO9mKS4rriP1gTT0+hLV31Z10 GSVmA6A5kzu00VrJW6iPfRKlSK72ztQ39t6v33HoePcHIznVUYQRlVM1PNToPkD+ 8DfCJG4uKt77IJJjXJ1JpXqNPA6D9lOK0RsLHEP1YS4s5dXgG7FJPJ9HCaxM9VZA YJefIDPvO59IVWJkKUHv/Puj02SbqrXoXTt6R3punbPWV7HTkYFjr2j4oiLKfLQw a8ShAN16KPUh2o1LUdAHU/WQV1M1qc8cw1GZ6XjSQLScPcEslLtc6hECyjEjAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQU864OEaR+Qnxjq9O/mZrsLP4N3qMwHwYDVR0j BBgwFoAUtynwx78pXGhE/TKLMkoe2FmAMvkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNk OGVmLzMvQjcyOUYwQzdCRjI5NUM2ODQ0RkQzMjhCMzI0QTFFRDg1OTgwMzJGOS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0I3MjlGMEM3QkYyOTVD Njg0NEZEMzI4QjMyNEExRUQ4NTk4MDMyRjkuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNkOGVm LzMvQjcyOUYwQzdCRjI5NUM2ODQ0RkQzMjhCMzI0QTFFRDg1OTgwMzJGOS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBADABiQsMxZs+DzODXJr4hgWcW4vBUBFGrfSv++qbiwpfiFell1hMqw4G VD+LTTI6hyApNhUkllTuEt4vs8CynJhzq/q5gx6duF+m3KrM2cP4rTeW0L8Mqth1 9r7XUuhbeVvoOUeQdH8gYARjcscwLkP3XZvO245HRz+vZ+rr/KMVVd1y7hP0XxBh kbTMJGQIiDtMTmqLmaGn3PNExaWhkit6lVXHzkSZnxJv3KUZuQNyiD3B334ew8eA 0WPVWA7y2fHy8qtF3wg2BAKozr7HAsWVnXLqL8UaF6osGgkqRuHJhjOr2lx3dMiy BFI/lky+dF5nhuPRDYtQB7w8HFSvtwU= -----END CERTIFICATE-----Generated at Mon Aug 4 18:27:28 2025 by rpki-client