$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.mft File: B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.mft (raw, json) Hash identifier: rbHY7fymXIZUJX42t10YeAz93nrQMAUS2w/gKnqw0GI= Subject key identifier: BD:19:0E:74:00:31:34:6E:3E:FD:1B:97:60:F7:E7:F7:64:66:70:10 Authority key identifier: B3:D1:0E:E6:F3:7C:24:3D:0D:0C:08:F7:AA:02:BA:3C:D2:55:95:76 Certificate issuer: /CN=B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576 Certificate serial: 6CCB33593B4F6FF162825E0AF7EA100618517768 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.mft Manifest number: 03F4 Signing time: Sat 14 Jun 2025 18:06:06 +0000 Manifest this update: Sat 14 Jun 2025 18:01:06 +0000 Manifest next update: Sun 15 Jun 2025 18:20:06 +0000 Files and hashes: 1: B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.crl (hash: AIdFa7W23N9XgGDOMxDmdKETQVeZBgaxBoobxLIY6tU=) 2: 326130613a363034303a396630303a3a2f34302d3438203d3e203531303139.roa (hash: Jy1b+gt92RN+/ooPe4fGSUiuh5FGbMZK9CxKzh5Ox8I=) 3: 326130613a363034303a313330303a3a2f34302d3438203d3e203531303139.roa (hash: aSnHcNtVwzQzcWn5p0KM1my79E8t48awA6CXq7tsPUQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 18:20:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:cb:33:59:3b:4f:6f:f1:62:82:5e:0a:f7:ea:10:06:18:51:77:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576 Validity Not Before: Jun 14 18:01:06 2025 GMT Not After : Jun 15 18:20:06 2025 GMT Subject: CN=BD190E740031346E3EFD1B9760F7E7F764667010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:33:fc:67:24:c2:23:2c:b2:30:08:41:96:ee: de:5f:e4:58:8c:1b:b3:99:59:19:fe:59:68:27:15: c9:4f:ba:97:33:eb:65:a9:07:ac:1e:a8:fb:39:ca: 88:8a:77:81:20:2b:99:37:e5:af:e4:ec:0a:e0:b9: ed:50:92:61:bc:9b:14:b9:44:b6:62:0f:dd:66:98: d8:40:e0:3a:73:ea:45:a2:01:52:b9:7c:04:9b:df: 17:4c:69:41:99:2f:ea:ef:48:f7:f9:4b:32:1a:17: d9:f9:2d:f9:0a:f3:1e:ba:4c:00:32:7e:7c:b1:f5: 23:46:d6:24:41:70:33:a9:44:40:62:f6:b9:d8:ad: 7e:d2:75:66:d5:4c:26:1b:a7:35:6b:d9:66:b2:72: 4e:12:ac:84:26:65:2c:d7:ef:74:6a:78:fc:0a:e3: 3f:74:f7:5c:35:71:aa:eb:55:5a:1b:ac:ec:ea:c9: f5:11:25:18:89:6d:13:84:18:74:30:89:e2:90:a6: c6:e2:1a:ec:35:de:60:25:1a:a6:5b:c0:67:f2:f0: a7:4b:8b:34:e8:c0:2a:18:d1:35:6f:d7:02:3c:a8: 1a:71:2f:e3:b3:51:89:90:e7:17:d7:b0:40:2e:71: 68:97:13:d5:8a:4f:33:c3:41:db:a0:b7:51:10:99: e1:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:19:0E:74:00:31:34:6E:3E:FD:1B:97:60:F7:E7:F7:64:66:70:10 X509v3 Authority Key Identifier: keyid:B3:D1:0E:E6:F3:7C:24:3D:0D:0C:08:F7:AA:02:BA:3C:D2:55:95:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:c9:be:74:e1:63:cb:4c:17:15:bf:fa:90:1f:25:36:7b:af: be:a5:ca:4d:a9:c5:ee:d2:ab:9d:f8:42:c8:07:71:0d:00:6c: 68:2a:63:9d:d2:df:da:1b:27:74:44:28:9b:d8:29:ae:fb:4b: a1:f6:7a:4b:8f:9c:a1:59:c1:1c:99:bc:49:2f:67:83:98:b9: 6f:52:6a:ea:e7:0d:4b:da:3d:86:5f:25:a3:23:c2:b4:03:af: 8c:b7:2e:4d:37:ae:5f:55:01:89:a2:8b:1a:75:5e:9f:37:ee: 3b:2d:d0:6a:80:62:b5:3f:2d:9f:e4:1a:bf:d5:32:46:71:44: d8:3b:b0:ee:b4:c2:d3:06:85:6c:c8:de:5f:6c:c2:7e:b3:d8: 35:b5:8b:9c:ab:74:c7:e0:48:ea:53:c3:11:d8:37:ac:0c:29: be:e8:82:e7:b0:39:d0:f2:11:f5:28:db:b4:25:a1:9f:9d:75: da:75:79:a6:1b:7f:be:07:35:fa:9f:5a:63:ba:c5:8b:fe:04: c4:21:0c:a9:ce:93:e3:d4:b5:20:ab:54:31:d8:dc:2f:74:4a: 46:9e:40:9d:41:44:a0:2b:aa:bd:81:e0:bd:27:0e:57:76:c0: 51:c4:47:16:2c:b9:7f:82:6a:18:1c:b6:69:1e:e6:4c:e8:b5: 5d:46:e0:92 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUbMszWTtPb/Figl4K9+oQBhhRd2gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNEMTBFRTZGMzdDMjQzRDBEMEMwOEY3QUEwMkJBM0NE MjU1OTU3NjAeFw0yNTA2MTQxODAxMDZaFw0yNTA2MTUxODIwMDZaMDMxMTAvBgNV BAMTKEJEMTkwRTc0MDAzMTM0NkUzRUZEMUI5NzYwRjdFN0Y3NjQ2NjcwMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEM/xnJMIjLLIwCEGW7t5f5FiM G7OZWRn+WWgnFclPupcz62WpB6weqPs5yoiKd4EgK5k35a/k7Argue1QkmG8mxS5 RLZiD91mmNhA4Dpz6kWiAVK5fASb3xdMaUGZL+rvSPf5SzIaF9n5LfkK8x66TAAy fnyx9SNG1iRBcDOpREBi9rnYrX7SdWbVTCYbpzVr2Wayck4SrIQmZSzX73RqePwK 4z9091w1carrVVobrOzqyfURJRiJbROEGHQwieKQpsbiGuw13mAlGqZbwGfy8KdL izTowCoY0TVv1wI8qBpxL+OzUYmQ5xfXsEAucWiXE9WKTzPDQdugt1EQmeHxAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUvRkOdAAxNG4+/RuXYPfn92RmcBAwHwYDVR0j BBgwFoAUs9EO5vN8JD0NDAj3qgK6PNJVlXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzEvQjNEMTBFRTZGMzdDMjQzRDBEMEMwOEY3QUEwMkJBM0NEMjU1OTU3Ni5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wL0IzRDEwRUU2RjM3QzI0 M0QwRDBDMDhGN0FBMDJCQTNDRDI1NTk1NzYuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2NhZTNm LzEvQjNEMTBFRTZGMzdDMjQzRDBEMEMwOEY3QUEwMkJBM0NEMjU1OTU3Ni5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBABPJvnThY8tMFxW/+pAfJTZ7r76lyk2pxe7Sq534QsgHcQ0AbGgqY53S 39obJ3REKJvYKa77S6H2ekuPnKFZwRyZvEkvZ4OYuW9SaurnDUvaPYZfJaMjwrQD r4y3Lk03rl9VAYmiixp1Xp837jst0GqAYrU/LZ/kGr/VMkZxRNg7sO60wtMGhWzI 3l9swn6z2DW1i5yrdMfgSOpTwxHYN6wMKb7oguewOdDyEfUo27QloZ+dddp1eaYb f74HNfqfWmO6xYv+BMQhDKnOk+PUtSCrVDHY3C90SkaeQJ1BRKArqr2B4L0nDld2 wFHERxYsuX+Cahgctmke5kzotV1G4JI= -----END CERTIFICATE-----Generated at Sun Jun 15 11:52:30 2025 by rpki-client