$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/3/23D444E7DED3712847CAE2B46DDD886FC2914D54.mft File: 23D444E7DED3712847CAE2B46DDD886FC2914D54.mft (raw, json) Hash identifier: /baj+V3EHWnojRE9BEj85Sw9pLfGUflCVVggntSzcsA= Subject key identifier: EE:1F:85:E8:32:E2:75:B3:10:A7:33:5C:53:B4:C6:47:6F:0D:F7:B6 Authority key identifier: 23:D4:44:E7:DE:D3:71:28:47:CA:E2:B4:6D:DD:88:6F:C2:91:4D:54 Certificate issuer: /CN=23D444E7DED3712847CAE2B46DDD886FC2914D54 Certificate serial: 1BE014E9E005AB4A33E5726A387780193AB4CBE6 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/23D444E7DED3712847CAE2B46DDD886FC2914D54.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/3/23D444E7DED3712847CAE2B46DDD886FC2914D54.mft Manifest number: 03D1 Signing time: Sun 15 Jun 2025 14:04:34 +0000 Manifest this update: Sun 15 Jun 2025 13:59:34 +0000 Manifest next update: Mon 16 Jun 2025 17:24:34 +0000 Files and hashes: 1: 23D444E7DED3712847CAE2B46DDD886FC2914D54.crl (hash: Uh2VBQna8H4YEpK9GaOBvpM6h3Qxr5SumYC26xA1ydw=) 2: 326130613a363034303a646230303a3a2f34302d3438203d3e20323131313531.roa (hash: tfZTODACLawFck6n6yim45qqX0QKQWHGw0OfZn9hHA4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/3/23D444E7DED3712847CAE2B46DDD886FC2914D54.crl rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/3/23D444E7DED3712847CAE2B46DDD886FC2914D54.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/23D444E7DED3712847CAE2B46DDD886FC2914D54.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 08:59:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:e0:14:e9:e0:05:ab:4a:33:e5:72:6a:38:77:80:19:3a:b4:cb:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23D444E7DED3712847CAE2B46DDD886FC2914D54 Validity Not Before: Jun 15 13:59:34 2025 GMT Not After : Jun 16 17:24:34 2025 GMT Subject: CN=EE1F85E832E275B310A7335C53B4C6476F0DF7B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:80:80:76:38:74:32:cb:25:0e:c5:d5:d9:3a: c3:94:c8:86:10:57:3c:52:b3:9a:15:1e:8f:cb:89: ec:bf:17:59:a5:f2:97:e6:5c:ba:b3:1c:e5:32:a0: 4f:6c:68:7d:46:c7:ac:f6:1b:59:6c:59:2c:d4:c7: 4e:0a:dd:48:0a:57:f4:0f:c9:5c:25:2b:97:4d:c1: 51:d6:a4:3b:da:a7:88:ab:ad:7f:66:92:4c:e1:fe: 39:98:7e:7f:11:70:bf:6c:a1:61:c5:90:9e:92:9b: cb:6c:da:96:3e:ba:70:e5:60:31:6b:aa:5b:85:df: 40:c1:8b:63:ff:9e:21:dd:2d:b8:ce:e3:4a:6e:03: de:3a:2c:ec:16:cc:be:be:57:ec:45:be:61:57:c8: 7e:97:38:00:47:6b:a7:3a:76:05:7b:17:3f:f6:d4: a7:f7:69:a1:a2:e6:da:5d:bb:d6:c5:e6:fb:33:09: dc:73:0e:c7:b9:2f:53:47:72:f6:9c:7b:77:b4:d9: c8:d0:11:d9:6f:32:60:fc:ec:1a:2f:30:4e:77:e8: 3f:dc:ad:ef:a3:52:ec:bf:f2:4d:98:67:05:89:98: 13:ba:d5:03:80:1b:aa:a0:50:18:c0:c7:8f:c1:2e: 39:76:b9:76:ae:92:99:02:58:71:6e:ae:21:46:74: fc:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:1F:85:E8:32:E2:75:B3:10:A7:33:5C:53:B4:C6:47:6F:0D:F7:B6 X509v3 Authority Key Identifier: keyid:23:D4:44:E7:DE:D3:71:28:47:CA:E2:B4:6D:DD:88:6F:C2:91:4D:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/3/23D444E7DED3712847CAE2B46DDD886FC2914D54.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/23D444E7DED3712847CAE2B46DDD886FC2914D54.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/3/23D444E7DED3712847CAE2B46DDD886FC2914D54.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:c6:fe:1a:42:12:f0:78:29:e9:cd:ec:f1:49:28:57:f5:e4: a5:dd:68:43:68:c6:20:69:3d:84:4f:07:20:20:63:14:62:d7: d9:fa:c8:c7:e4:0a:8b:c3:d3:f3:1b:12:c7:7f:4d:f8:72:80: 72:e6:7e:10:69:26:4d:b6:7a:df:14:63:2a:7b:17:e1:9a:0f: 81:17:65:ee:f1:72:1f:ce:b2:f4:a0:0e:45:27:e9:15:5b:90: 6e:c4:3c:4c:5d:5d:e7:d0:ca:de:db:b7:05:a7:01:a3:18:64: f5:8e:b9:b2:81:83:08:d7:26:b9:cd:a8:6d:4b:86:1d:1f:a5: 91:22:ef:e5:c0:46:0f:b2:67:32:57:f8:c3:c3:d1:f3:d8:4d: 5e:2d:20:d8:f5:cf:94:7c:7b:23:63:1e:98:8f:ab:79:3f:eb: a6:26:86:d5:0d:57:c6:7c:b8:de:e6:97:e0:0e:50:36:e0:2d: c9:5a:4c:0e:6f:f0:45:fa:90:59:63:aa:7b:2b:07:b6:eb:08: f9:5d:31:d7:ec:ff:4f:b2:e3:a2:1d:c9:a5:75:c0:33:34:4f: 43:de:fc:d1:b1:9f:cb:cd:bf:82:af:a2:f5:c2:51:10:42:45: e5:c3:80:ca:37:08:6c:f3:15:f7:84:ad:f9:a3:01:65:8e:00: 9d:fe:71:ce -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUG+AU6eAFq0oz5XJqOHeAGTq0y+YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNENDQ0RTdERUQzNzEyODQ3Q0FFMkI0NkRERDg4NkZD MjkxNEQ1NDAeFw0yNTA2MTUxMzU5MzRaFw0yNTA2MTYxNzI0MzRaMDMxMTAvBgNV BAMTKEVFMUY4NUU4MzJFMjc1QjMxMEE3MzM1QzUzQjRDNjQ3NkYwREY3QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBgIB2OHQyyyUOxdXZOsOUyIYQ VzxSs5oVHo/Liey/F1ml8pfmXLqzHOUyoE9saH1Gx6z2G1lsWSzUx04K3UgKV/QP yVwlK5dNwVHWpDvap4irrX9mkkzh/jmYfn8RcL9soWHFkJ6Sm8ts2pY+unDlYDFr qluF30DBi2P/niHdLbjO40puA946LOwWzL6+V+xFvmFXyH6XOABHa6c6dgV7Fz/2 1Kf3aaGi5tpdu9bF5vszCdxzDse5L1NHcvace3e02cjQEdlvMmD87BovME536D/c re+jUuy/8k2YZwWJmBO61QOAG6qgUBjAx4/BLjl2uXaukpkCWHFuriFGdPxzAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQU7h+F6DLidbMQpzNcU7TGR28N97YwHwYDVR0j BBgwFoAUI9RE597TcShHyuK0bd2Ib8KRTVQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzEyODI3MWUtYzI2OS00OTU0LTg3ZGItZDE4NGRmMTdm ODVjLzMvMjNENDQ0RTdERUQzNzEyODQ3Q0FFMkI0NkRERDg4NkZDMjkxNEQ1NC5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzIzRDQ0NEU3REVEMzcx Mjg0N0NBRTJCNDZEREQ4ODZGQzI5MTRENTQuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvYzEyODI3MWUtYzI2OS00OTU0LTg3ZGItZDE4NGRmMTdmODVj LzMvMjNENDQ0RTdERUQzNzEyODQ3Q0FFMkI0NkRERDg4NkZDMjkxNEQ1NC5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBACnG/hpCEvB4KenN7PFJKFf15KXdaENoxiBpPYRPByAgYxRi19n6yMfk CovD0/MbEsd/TfhygHLmfhBpJk22et8UYyp7F+GaD4EXZe7xch/OsvSgDkUn6RVb kG7EPExdXefQyt7btwWnAaMYZPWOubKBgwjXJrnNqG1Lhh0fpZEi7+XARg+yZzJX +MPD0fPYTV4tINj1z5R8eyNjHpiPq3k/66YmhtUNV8Z8uN7ml+AOUDbgLclaTA5v 8EX6kFljqnsrB7brCPldMdfs/0+y46IdyaV1wDM0T0Pe/NGxn8vNv4KvovXCURBC ReXDgMo3CGzzFfeErfmjAWWOAJ3+cc4= -----END CERTIFICATE-----Generated at Sun Jun 15 19:26:27 2025 by rpki-client