$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft File: B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft (raw, json) Hash identifier: tg3RVgbBAVmiCfnZ7JjtqA5T9gZNIR6az0kvwG9+kC4= Subject key identifier: E7:4C:B1:B1:50:37:82:C1:0C:97:A5:8D:AB:31:32:78:43:A2:EC:C6 Authority key identifier: B2:17:28:4E:A3:D5:38:44:B2:AF:52:70:AB:BA:A3:10:5B:8B:3F:45 Certificate issuer: /CN=B217284EA3D53844B2AF5270ABBAA3105B8B3F45 Certificate serial: 0CAF495F39EE231C0D57787FC04FE645915F3D74 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft Manifest number: 2F Signing time: Mon 04 Aug 2025 00:18:22 +0000 Manifest this update: Mon 04 Aug 2025 00:13:22 +0000 Manifest next update: Tue 05 Aug 2025 02:47:22 +0000 Files and hashes: 1: B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl (hash: Pb9eZb83J4FCUXDG/IeI3sg+Gq94YFCP6lV3kqz7jVM=) 2: 326130613a363034303a396630303a3a2f34302d3438203d3e203531303139.roa (hash: 4Q4ROZYT81dIJHSkpaekI4Sbj95kc4xrlA3BgHVle7s=) 3: 326130613a363034303a313330303a3a2f34302d3438203d3e203531303139.roa (hash: wn+vtltLdcEkhCOvzx/4fvtvh6EcQrGmjXhUFly5CfQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 04 Aug 2025 23:12:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:af:49:5f:39:ee:23:1c:0d:57:78:7f:c0:4f:e6:45:91:5f:3d:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B217284EA3D53844B2AF5270ABBAA3105B8B3F45 Validity Not Before: Aug 4 00:13:22 2025 GMT Not After : Aug 5 02:47:22 2025 GMT Subject: CN=E74CB1B1503782C10C97A58DAB31327843A2ECC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b4:93:4d:3c:a9:e6:40:1b:5f:54:a9:1b:30: 5d:a8:5e:c3:a9:a0:66:e3:a6:36:63:4d:24:b7:a7: 63:22:44:bd:21:4f:4d:ee:b6:65:7c:2b:7c:f5:b8: 89:29:b3:d0:c2:9d:3a:08:8c:50:a2:03:1d:ff:be: 86:74:09:ce:3f:e0:a8:af:82:88:4e:d2:83:8c:4e: 1d:49:b3:79:c4:dd:e1:48:9a:9a:d7:c6:5b:bb:b3: 23:ad:89:06:f7:e0:3b:0d:62:2a:47:e9:0f:68:11: ea:f0:e1:8c:4c:4f:b1:35:2f:e0:de:4e:64:9e:35: 93:fa:ec:69:0c:f9:42:39:09:c6:39:98:cf:0a:6d: 21:f8:d4:bb:52:88:ab:e1:b3:cc:d6:60:e4:b2:46: 74:82:e9:fb:44:00:d8:d5:fa:92:52:10:46:0c:57: 16:15:f4:d9:33:bd:c5:e7:82:79:07:e3:d9:bc:37: c0:c0:70:a0:3b:b0:ff:b2:fa:2f:ea:53:36:3c:f7: 9a:b4:8d:a5:d7:e6:02:af:6d:22:d6:d8:91:38:60: 03:26:81:13:6d:dd:63:0e:50:ae:61:c5:39:d7:8b: b7:71:b6:82:40:9c:4a:67:6e:75:ad:eb:01:ec:ff: 5b:9c:ed:19:29:7a:b1:d0:c1:82:a9:a6:89:16:c2: 3f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:4C:B1:B1:50:37:82:C1:0C:97:A5:8D:AB:31:32:78:43:A2:EC:C6 X509v3 Authority Key Identifier: keyid:B2:17:28:4E:A3:D5:38:44:B2:AF:52:70:AB:BA:A3:10:5B:8B:3F:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:fb:46:c0:94:e4:f5:a1:e1:e8:2c:74:d6:91:57:ae:6a:17: 20:91:86:f9:c7:ed:f5:5f:40:d5:d9:7a:86:a2:3c:cd:1f:ab: d8:4d:98:58:68:a4:02:09:0c:01:ac:bb:4f:d5:75:e2:63:41: 70:ad:7e:39:e0:f9:e5:17:8f:6f:87:19:cc:12:f7:21:32:2b: f0:18:4d:9c:67:18:61:86:65:a5:3d:1d:80:b6:83:1a:5a:02: 10:e9:b6:b9:cc:52:72:4b:70:42:cf:f3:99:86:db:e9:dd:c0: 59:23:9a:7c:44:ae:e4:a6:61:a4:00:3c:13:89:2d:b4:82:77: 50:ee:c3:f8:ae:82:a9:85:0b:71:30:65:e4:0d:10:b3:f2:ee: cf:6a:b4:4f:c1:c6:fe:1b:21:cd:4b:6c:0c:84:aa:ae:be:dc: 86:c9:9b:42:64:28:b7:70:0b:ee:d0:68:95:86:a2:a8:3c:e1: 9d:3c:5a:1a:09:54:aa:d9:db:a7:5a:93:44:38:49:5a:7c:91: 0d:71:b7:e4:02:8b:17:d1:87:48:c2:f7:a1:82:b8:15:6d:8e: d8:11:1c:c8:e0:ac:32:1f:bc:19:fd:12:37:ab:9a:fb:fa:42: 30:18:97:b8:5d:4b:18:f7:6a:5b:60:bf:9a:a3:f8:2f:03:fa: 14:2d:c1:b5 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUDK9JXznuIxwNV3h/wE/mRZFfPXQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIxNzI4NEVBM0Q1Mzg0NEIyQUY1MjcwQUJCQUEzMTA1 QjhCM0Y0NTAeFw0yNTA4MDQwMDEzMjJaFw0yNTA4MDUwMjQ3MjJaMDMxMTAvBgNV BAMTKEU3NENCMUIxNTAzNzgyQzEwQzk3QTU4REFCMzEzMjc4NDNBMkVDQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2tJNNPKnmQBtfVKkbMF2oXsOp oGbjpjZjTSS3p2MiRL0hT03utmV8K3z1uIkps9DCnToIjFCiAx3/voZ0Cc4/4Kiv gohO0oOMTh1Js3nE3eFImprXxlu7syOtiQb34DsNYipH6Q9oEerw4YxMT7E1L+De TmSeNZP67GkM+UI5CcY5mM8KbSH41LtSiKvhs8zWYOSyRnSC6ftEANjV+pJSEEYM VxYV9NkzvcXngnkH49m8N8DAcKA7sP+y+i/qUzY895q0jaXX5gKvbSLW2JE4YAMm gRNt3WMOUK5hxTnXi7dxtoJAnEpnbnWt6wHs/1uc7RkperHQwYKppokWwj+PAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQU50yxsVA3gsEMl6WNqzEyeEOi7MYwHwYDVR0j BBgwFoAUshcoTqPVOESyr1Jwq7qjEFuLP0UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzUvQjIxNzI4NEVBM0Q1Mzg0NEIyQUY1MjcwQUJCQUEzMTA1QjhCM0Y0NS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0IyMTcyODRFQTNENTM4 NDRCMkFGNTI3MEFCQkFBMzEwNUI4QjNGNDUuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2NhZTNm LzUvQjIxNzI4NEVBM0Q1Mzg0NEIyQUY1MjcwQUJCQUEzMTA1QjhCM0Y0NS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ37RsCU5PWh4egsdNaRV65qFyCRhvnH7fVfQNXZeoaiPM0fq9hNmFho pAIJDAGsu0/VdeJjQXCtfjng+eUXj2+HGcwS9yEyK/AYTZxnGGGGZaU9HYC2gxpa AhDptrnMUnJLcELP85mG2+ndwFkjmnxEruSmYaQAPBOJLbSCd1Duw/iugqmFC3Ew ZeQNELPy7s9qtE/Bxv4bIc1LbAyEqq6+3IbJm0JkKLdwC+7QaJWGoqg84Z08WhoJ VKrZ26dak0Q4SVp8kQ1xt+QCixfRh0jC96GCuBVtjtgRHMjgrDIfvBn9Ejermvv6 QjAYl7hdSxj3altgv5qj+C8D+hQtwbU= -----END CERTIFICATE-----Generated at Mon Aug 4 14:48:43 2025 by rpki-client