$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft File: CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft (raw, json) Hash identifier: /DxuIzgSozDx0M0mhOCmu2g75PkPWeS4Dnq0ZHErSmY= Subject key identifier: FF:07:51:75:6B:FD:EB:25:B9:8E:5C:49:5A:96:C8:AA:A0:69:7B:B3 Authority key identifier: CC:6E:CC:46:20:C3:32:98:BA:AE:F1:70:9A:D6:D0:59:5C:D2:56:5C Certificate issuer: /CN=CC6ECC4620C33298BAAEF1709AD6D0595CD2565C Certificate serial: 39827B600449D9D64F1BC288823BED8A821E5191 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft Manifest number: 1A Signing time: Wed 23 Jul 2025 12:26:55 +0000 Manifest this update: Wed 23 Jul 2025 12:21:55 +0000 Manifest next update: Thu 24 Jul 2025 13:46:55 +0000 Files and hashes: 1: 326130353a646663313a383530303a3a2f34302d3430203d3e20323136343535.roa (hash: oi3cTY9RPbSSa44GzFqVMPw4EmmK/P6XuRB3HCSy6ZU=) 2: CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl (hash: 0nRFso1q7zntxH8Qtyv5AuH1jf4bHecblmvTl1WNO0A=) 3: 326130353a646663313a393630303a3a2f34302d3430203d3e20323136343535.roa (hash: EPbQn4nTyAleGN23OETUsYn80EOl1eLpliPnGLTdXDk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Jul 2025 13:46:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:82:7b:60:04:49:d9:d6:4f:1b:c2:88:82:3b:ed:8a:82:1e:51:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC6ECC4620C33298BAAEF1709AD6D0595CD2565C Validity Not Before: Jul 23 12:21:55 2025 GMT Not After : Jul 24 13:46:55 2025 GMT Subject: CN=FF0751756BFDEB25B98E5C495A96C8AAA0697BB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ab:22:cf:7a:49:1d:21:07:d0:a7:2e:e5:84: b1:84:19:ce:3b:5c:96:d7:46:ae:00:51:88:0a:6d: 68:e5:79:d8:8e:3e:4d:98:ad:91:6f:ca:92:08:7d: ec:0d:31:23:72:48:4e:36:76:32:03:27:18:16:9f: 92:9a:76:ab:b3:61:22:bf:4a:39:f7:21:c8:fb:a1: 4d:7b:7d:b5:f6:9c:e0:8c:0b:a5:5b:88:f5:10:78: e8:20:9c:98:e5:e4:e4:e3:ef:d1:ae:95:91:f0:c1: f2:6f:17:9d:01:19:7b:3c:0f:69:6a:37:15:cd:da: af:15:27:ed:73:ed:43:97:d7:16:7e:a6:a8:f1:08: ae:61:3e:d5:b3:1b:2b:99:50:31:49:a3:2b:93:73: 36:ea:6b:b4:63:2c:37:1b:d9:53:92:07:b0:3c:a7: af:d1:85:75:57:3d:90:d3:85:66:06:27:a6:32:b9: 66:1b:c7:1f:f5:d4:09:04:25:9a:28:b1:5c:0f:23: 6a:60:4d:f0:02:d7:11:2f:bb:29:dc:32:56:82:04: 4c:66:5d:18:ea:91:d3:f1:a5:f4:39:29:fe:f6:6e: b5:1c:e4:f3:1a:07:82:f7:a4:e2:4d:6f:e6:11:fb: 3a:76:40:65:46:9e:21:6c:c3:7d:99:ab:f2:c4:88: 4f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:07:51:75:6B:FD:EB:25:B9:8E:5C:49:5A:96:C8:AA:A0:69:7B:B3 X509v3 Authority Key Identifier: keyid:CC:6E:CC:46:20:C3:32:98:BA:AE:F1:70:9A:D6:D0:59:5C:D2:56:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:74:c8:d5:c8:c9:50:39:fc:f3:5f:bb:ef:6d:de:e3:6e:e9: 22:1b:c4:87:1e:e5:63:83:70:20:a6:69:0c:b8:b5:82:57:10: 1c:01:83:84:f2:3b:17:ab:05:5a:46:a0:8b:b4:79:66:30:94: 2c:c2:7f:b3:ad:c5:81:0f:76:82:87:e9:f3:a8:ea:a3:15:45: 21:3c:55:56:b6:b1:f9:b3:8b:87:bb:2a:8e:ac:bc:a6:8d:44: 36:a6:8f:88:44:21:a6:12:c5:b4:20:c2:19:e2:d7:6b:b2:56: b9:f3:48:67:ea:ef:59:15:47:70:af:f7:8a:70:0b:bd:6a:8f: 8f:dd:74:cf:43:ee:e1:de:7e:30:2a:c2:db:f7:b1:9c:7c:aa: 60:57:d6:1c:3d:75:40:f8:7f:66:b6:cc:d0:be:98:5f:ac:e1: a8:9a:e2:95:9d:70:c6:3a:f6:21:89:31:4c:8c:50:04:d2:c5: 8a:61:27:ea:c1:32:db:c0:ef:bb:89:f5:8c:5e:4e:df:ee:6c: aa:ed:97:ad:6a:ea:43:18:54:ed:85:f7:0e:41:ff:c3:cc:65: 16:5b:4f:b5:76:ff:4a:3e:6e:d0:c7:d4:3b:0b:0d:ea:20:56: 22:ee:4c:17:73:74:90:ef:4b:67:60:0c:48:7d:1e:2c:8e:68: 46:d6:4f:3e -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUOYJ7YARJ2dZPG8KIgjvtioIeUZEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M2RUNDNDYyMEMzMzI5OEJBQUVGMTcwOUFENkQwNTk1 Q0QyNTY1QzAeFw0yNTA3MjMxMjIxNTVaFw0yNTA3MjQxMzQ2NTVaMDMxMTAvBgNV BAMTKEZGMDc1MTc1NkJGREVCMjVCOThFNUM0OTVBOTZDOEFBQTA2OTdCQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkqyLPekkdIQfQpy7lhLGEGc47 XJbXRq4AUYgKbWjlediOPk2YrZFvypIIfewNMSNySE42djIDJxgWn5KadquzYSK/ Sjn3Icj7oU17fbX2nOCMC6VbiPUQeOggnJjl5OTj79GulZHwwfJvF50BGXs8D2lq NxXN2q8VJ+1z7UOX1xZ+pqjxCK5hPtWzGyuZUDFJoyuTczbqa7RjLDcb2VOSB7A8 p6/RhXVXPZDThWYGJ6YyuWYbxx/11AkEJZoosVwPI2pgTfAC1xEvuyncMlaCBExm XRjqkdPxpfQ5Kf72brUc5PMaB4L3pOJNb+YR+zp2QGVGniFsw32Zq/LEiE99AgMB AAGjggJdMIICWTAdBgNVHQ4EFgQU/wdRdWv96yW5jlxJWpbIqqBpe7MwHwYDVR0j BBgwFoAUzG7MRiDDMpi6rvFwmtbQWVzSVlwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1 NjRhLzMvQ0M2RUNDNDYyMEMzMzI5OEJBQUVGMTcwOUFENkQwNTk1Q0QyNTY1Qy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0NDNkVDQzQ2MjBDMzMy OThCQUFFRjE3MDlBRDZEMDU5NUNEMjU2NUMuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1NjRh LzMvQ0M2RUNDNDYyMEMzMzI5OEJBQUVGMTcwOUFENkQwNTk1Q0QyNTY1Qy5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBADV0yNXIyVA5/PNfu+9t3uNu6SIbxIce5WODcCCmaQy4tYJXEBwBg4Ty OxerBVpGoIu0eWYwlCzCf7OtxYEPdoKH6fOo6qMVRSE8VVa2sfmzi4e7Ko6svKaN RDamj4hEIaYSxbQgwhni12uyVrnzSGfq71kVR3Cv94pwC71qj4/ddM9D7uHefjAq wtv3sZx8qmBX1hw9dUD4f2a2zNC+mF+s4aia4pWdcMY69iGJMUyMUATSxYphJ+rB MtvA77uJ9YxeTt/ubKrtl61q6kMYVO2F9w5B/8PMZRZbT7V2/0o+btDH1DsLDeog ViLuTBdzdJDvS2dgDEh9HiyOaEbWTz4= -----END CERTIFICATE-----Generated at Wed Jul 23 23:47:11 2025 by rpki-client