$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.mft File: FF4F1D48A6088FEC5ED73270F82068A436391A71.mft (raw, json) Hash identifier: jos3kMpXU6LLdepOlnz1UVb614BHYEW8rPC7BWCcq9k= Subject key identifier: 7A:4E:74:4B:61:5C:FF:9B:B0:2E:E8:DB:C1:6E:20:40:29:09:76:A0 Authority key identifier: FF:4F:1D:48:A6:08:8F:EC:5E:D7:32:70:F8:20:68:A4:36:39:1A:71 Certificate issuer: /CN=FF4F1D48A6088FEC5ED73270F82068A436391A71 Certificate serial: 54F003A7E3F0AE292B0447CC000B9465567F0D96 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/FF4F1D48A6088FEC5ED73270F82068A436391A71.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.mft Manifest number: 07 Signing time: Sun 20 Jul 2025 19:33:00 +0000 Manifest this update: Sun 20 Jul 2025 19:28:00 +0000 Manifest next update: Mon 21 Jul 2025 21:45:00 +0000 Files and hashes: 1: FF4F1D48A6088FEC5ED73270F82068A436391A71.crl (hash: zreEBFjmJgvS2Af9Ub3oJhFvGBRjO55xQYGMkQxyp6I=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.crl rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/FF4F1D48A6088FEC5ED73270F82068A436391A71.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 21:20:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:f0:03:a7:e3:f0:ae:29:2b:04:47:cc:00:0b:94:65:56:7f:0d:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF4F1D48A6088FEC5ED73270F82068A436391A71 Validity Not Before: Jul 20 19:28:00 2025 GMT Not After : Jul 21 21:45:00 2025 GMT Subject: CN=7A4E744B615CFF9BB02EE8DBC16E2040290976A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:00:5b:21:b5:93:e5:0f:ec:3d:41:96:ff:71: 96:51:07:01:50:34:91:fd:ad:ef:1a:f0:6e:3b:ff: 04:4f:a2:50:f6:f4:40:0b:85:e4:ce:17:a8:29:ba: a8:33:fb:d3:95:c6:81:a7:58:3b:1d:ea:83:82:fc: 88:27:01:fd:d1:a7:0e:31:9b:5a:36:73:5a:5c:d8: 73:38:3f:1d:31:06:47:5f:ce:08:9d:82:cc:ac:72: ac:a3:7d:1c:59:08:0a:20:f0:88:93:0e:32:3f:53: f1:4b:5d:8c:06:bf:d0:c9:b3:bc:15:86:8f:62:1f: e0:7e:41:d6:14:27:90:3f:1b:06:65:2d:8a:c5:e2: 09:ab:dc:e5:71:92:c9:ad:52:2d:de:29:d0:97:43: e8:98:0d:ae:89:31:9d:5b:95:22:c8:3c:9c:70:38: 16:e1:da:45:ce:03:7b:a3:ae:44:42:1d:83:67:fb: 02:7c:2e:8c:4f:19:0c:a1:d2:e2:6b:02:72:78:0f: bb:08:47:4b:5b:2b:97:36:5d:e3:82:64:e9:a0:9d: fd:8e:10:5c:fb:46:03:eb:79:6c:11:cb:09:97:58: 08:56:5c:a1:98:f9:a0:46:d3:61:4e:5c:ae:9a:5a: f1:c7:26:00:57:0d:6a:7d:ab:91:13:a1:17:d0:a7: a5:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:4E:74:4B:61:5C:FF:9B:B0:2E:E8:DB:C1:6E:20:40:29:09:76:A0 X509v3 Authority Key Identifier: keyid:FF:4F:1D:48:A6:08:8F:EC:5E:D7:32:70:F8:20:68:A4:36:39:1A:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/FF4F1D48A6088FEC5ED73270F82068A436391A71.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:f4:5a:b0:7e:2d:38:6f:6a:65:94:7b:c1:eb:d6:30:2c:f1: 4f:40:d0:fa:14:2d:37:8c:b4:58:f9:67:fd:12:03:a3:3e:65: fa:1b:d1:17:4d:e9:b5:fc:85:19:8a:db:79:be:f9:aa:73:40: 28:b2:3b:26:96:af:f8:45:5f:43:1e:f5:19:76:f0:61:e4:ff: 69:21:be:c3:3e:bb:ae:9b:3b:98:38:39:fa:dd:2c:30:39:55: 7f:14:35:ba:f3:33:48:5a:06:75:53:de:78:0f:43:92:1d:c6: 23:bc:7a:33:b8:7e:c0:bb:37:e5:96:dc:f4:d0:3a:41:da:78: a6:d8:84:95:27:3f:95:e3:db:27:d3:4b:1e:e7:ec:79:68:7a: 06:82:4b:41:d3:de:c4:4f:d4:46:20:ae:b8:81:3f:43:5b:47: 79:b8:25:df:9e:5c:8b:b5:c4:3b:db:1c:44:3e:48:bd:9a:41: fc:e1:35:e9:9f:bf:a9:07:47:48:38:d6:45:7a:8e:ce:ec:d6: a9:b4:8e:aa:78:98:15:d0:0b:92:79:e1:2b:84:af:c7:c9:0c: 95:32:f4:dd:24:da:2a:e5:d1:ae:9b:63:03:78:c0:9f:dc:c9: 01:00:a8:3d:0d:8d:14:fe:77:77:fd:70:d9:56:bc:c5:b1:51: 09:8d:99:16 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUVPADp+PwrikrBEfMAAuUZVZ/DZYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY0RjFENDhBNjA4OEZFQzVFRDczMjcwRjgyMDY4QTQz NjM5MUE3MTAeFw0yNTA3MjAxOTI4MDBaFw0yNTA3MjEyMTQ1MDBaMDMxMTAvBgNV BAMTKDdBNEU3NDRCNjE1Q0ZGOUJCMDJFRThEQkMxNkUyMDQwMjkwOTc2QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDAFshtZPlD+w9QZb/cZZRBwFQ NJH9re8a8G47/wRPolD29EALheTOF6gpuqgz+9OVxoGnWDsd6oOC/IgnAf3Rpw4x m1o2c1pc2HM4Px0xBkdfzgidgsyscqyjfRxZCAog8IiTDjI/U/FLXYwGv9DJs7wV ho9iH+B+QdYUJ5A/GwZlLYrF4gmr3OVxksmtUi3eKdCXQ+iYDa6JMZ1blSLIPJxw OBbh2kXOA3ujrkRCHYNn+wJ8LoxPGQyh0uJrAnJ4D7sIR0tbK5c2XeOCZOmgnf2O EFz7RgPreWwRywmXWAhWXKGY+aBG02FOXK6aWvHHJgBXDWp9q5EToRfQp6VtAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUek50S2Fc/5uwLujbwW4gQCkJdqAwHwYDVR0j BBgwFoAU/08dSKYIj+xe1zJw+CBopDY5GnEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjJhODA2ODItYzU0Yy00ZDVhLTk0NTYtYjIzOTI1MzA5 NzMyLzIvRkY0RjFENDhBNjA4OEZFQzVFRDczMjcwRjgyMDY4QTQzNjM5MUE3MS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0ZGNEYxRDQ4QTYwODhG RUM1RUQ3MzI3MEY4MjA2OEE0MzYzOTFBNzEuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMjJhODA2ODItYzU0Yy00ZDVhLTk0NTYtYjIzOTI1MzA5NzMy LzIvRkY0RjFENDhBNjA4OEZFQzVFRDczMjcwRjgyMDY4QTQzNjM5MUE3MS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAEL0WrB+LThvamWUe8Hr1jAs8U9A0PoULTeMtFj5Z/0SA6M+Zfob0RdN 6bX8hRmK23m++apzQCiyOyaWr/hFX0Me9Rl28GHk/2khvsM+u66bO5g4OfrdLDA5 VX8UNbrzM0haBnVT3ngPQ5IdxiO8ejO4fsC7N+WW3PTQOkHaeKbYhJUnP5Xj2yfT Sx7n7HloegaCS0HT3sRP1EYgrriBP0NbR3m4Jd+eXIu1xDvbHEQ+SL2aQfzhNemf v6kHR0g41kV6js7s1qm0jqp4mBXQC5J54SuEr8fJDJUy9N0k2irl0a6bYwN4wJ/c yQEAqD0NjRT+d3f9cNlWvMWxUQmNmRY= -----END CERTIFICATE-----Generated at Mon Jul 21 12:22:37 2025 by rpki-client