$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.mft File: 53BAB8A9F833789B353D2ACC15CE37270E3D60E3.mft (raw, json) Hash identifier: SMmh+mJWtQIm5a+tAvq5Rlxow78rZVl2wZBXxBDR484= Subject key identifier: CF:44:24:C3:FC:17:CC:56:F3:0E:B1:2C:D8:5E:77:A8:C6:2C:D8:04 Authority key identifier: 53:BA:B8:A9:F8:33:78:9B:35:3D:2A:CC:15:CE:37:27:0E:3D:60:E3 Certificate issuer: /CN=53BAB8A9F833789B353D2ACC15CE37270E3D60E3 Certificate serial: 5E69806D3BE1BFC119AAC86D7EEB312848616C54 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.mft Manifest number: 0338 Signing time: Sat 07 Jun 2025 02:40:04 +0000 Manifest this update: Sat 07 Jun 2025 02:35:04 +0000 Manifest next update: Sun 08 Jun 2025 05:32:04 +0000 Files and hashes: 1: 326130613a363034303a353430303a3a2f34302d3438203d3e20323030313739.roa (hash: iJpluoF3HoeICJtyNSVX2W7UjOGIKihBFoLXBu2iRVU=) 2: 326130613a363034303a343930303a3a2f34302d3438203d3e20323030313739.roa (hash: B12DmFls+H0qkH0yc3239fgwixjYfGQa/u7XVxErqzQ=) 3: 326130353a646663313a393530303a3a2f34302d3438203d3e20323030313739.roa (hash: tBCbEpr+oJ1RFgpk9g+qD3+yfAoxP+nrSqRPHhwlJ+w=) 4: 326130613a363034303a353430303a3a2f34302d3438203d3e20323032323031.roa (hash: rgKv78KNBaeBobwea7KnBLuciKXlgVnivSyvettjEmc=) 5: 53BAB8A9F833789B353D2ACC15CE37270E3D60E3.crl (hash: 2kZ0hMDkKp9BZm2INLdfun7/RO/AwRDk8gAptZXDulk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.crl rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 05:32:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:69:80:6d:3b:e1:bf:c1:19:aa:c8:6d:7e:eb:31:28:48:61:6c:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53BAB8A9F833789B353D2ACC15CE37270E3D60E3 Validity Not Before: Jun 7 02:35:04 2025 GMT Not After : Jun 8 05:32:04 2025 GMT Subject: CN=CF4424C3FC17CC56F30EB12CD85E77A8C62CD804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:dc:45:17:07:45:b7:d9:3a:8a:2f:aa:34:f0: 09:64:4d:ef:0d:9e:96:7c:58:02:5b:0d:7d:17:66: 88:b3:9c:cc:8d:62:a0:35:11:c6:87:93:ad:73:61: 42:1e:c2:4c:c3:6d:f4:68:6a:99:4f:47:07:d3:30: ab:2b:97:54:aa:ed:fc:ac:bb:80:9e:12:12:7b:72: 07:56:c9:cd:4b:54:db:07:ce:98:fc:3f:4a:8d:85: 74:52:f9:f3:ad:f4:b3:04:28:56:09:e2:1b:e5:08: c8:6d:88:07:d8:1d:03:8f:b2:eb:27:0e:fe:0c:7d: ca:6f:4e:a3:14:34:6a:39:40:4d:66:cc:f8:6e:14: 52:e2:1b:19:7c:f5:f5:ec:3b:3a:0c:ec:be:93:e6: 89:9a:39:65:15:e3:11:d0:e1:fc:8b:94:f3:da:7e: 3f:ec:a5:b2:16:59:bb:86:db:1c:05:54:88:80:66: 8c:1a:09:8b:ed:70:e5:bb:7c:76:64:24:97:9f:1b: ec:ea:45:00:8f:87:b0:41:e7:63:1f:e3:22:0d:f8: 9e:0e:24:0a:9d:c8:f6:0d:bc:59:bb:c4:d9:a0:18: 40:ae:8d:8f:1c:61:9f:d7:a7:77:c0:5f:c6:9a:20: b3:e1:23:51:78:74:5c:c2:02:c1:35:63:e7:45:b1: 27:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:44:24:C3:FC:17:CC:56:F3:0E:B1:2C:D8:5E:77:A8:C6:2C:D8:04 X509v3 Authority Key Identifier: keyid:53:BA:B8:A9:F8:33:78:9B:35:3D:2A:CC:15:CE:37:27:0E:3D:60:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:93:22:14:12:4e:02:e0:b2:9c:e5:df:be:88:e4:81:d2:38: 0b:57:23:4c:a3:7b:b6:0a:5d:1d:43:b5:66:29:98:f5:97:b0: 2b:6f:0e:42:5d:f7:58:15:c6:1d:31:19:ee:43:c6:3d:b5:46: a3:af:de:a2:83:ae:1a:4b:c2:83:54:80:41:21:b4:03:71:a3: 1d:31:e1:79:da:76:a3:f2:b9:eb:2c:cc:96:58:ae:76:94:72: 07:35:bf:38:2a:a8:69:ef:fe:9a:e5:9b:f8:63:47:66:4b:2a: 78:cf:5a:e1:5b:28:44:ea:ad:6b:13:f1:ce:7c:41:b5:eb:17: d9:ba:3c:55:2a:ab:04:a0:e9:5b:06:ef:57:e9:56:06:30:60: 60:8a:49:4d:ac:07:50:b4:f8:67:4b:92:c3:69:aa:0a:a2:d6: 6c:26:58:af:17:54:24:5b:5a:4a:67:53:1d:84:ca:d2:28:3e: 5c:1c:f9:59:fe:2b:16:2e:b6:6c:69:d4:5b:13:bb:6e:40:a9: 90:56:72:7a:20:0c:c3:a7:33:e1:38:34:fd:58:d0:81:15:47: 45:15:fb:bb:b7:d5:5a:6c:8b:6d:85:00:c8:e1:b7:52:34:86: 3a:8a:e7:9e:c1:65:08:eb:a4:70:9e:bb:b9:cb:fd:d3:32:f1: 84:6e:b8:bc -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUXmmAbTvhv8EZqshtfusxKEhhbFQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTNCQUI4QTlGODMzNzg5QjM1M0QyQUNDMTVDRTM3Mjcw RTNENjBFMzAeFw0yNTA2MDcwMjM1MDRaFw0yNTA2MDgwNTMyMDRaMDMxMTAvBgNV BAMTKENGNDQyNEMzRkMxN0NDNTZGMzBFQjEyQ0Q4NUU3N0E4QzYyQ0Q4MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs3EUXB0W32TqKL6o08AlkTe8N npZ8WAJbDX0XZoiznMyNYqA1EcaHk61zYUIewkzDbfRoaplPRwfTMKsrl1Sq7fys u4CeEhJ7cgdWyc1LVNsHzpj8P0qNhXRS+fOt9LMEKFYJ4hvlCMhtiAfYHQOPsusn Dv4MfcpvTqMUNGo5QE1mzPhuFFLiGxl89fXsOzoM7L6T5omaOWUV4xHQ4fyLlPPa fj/spbIWWbuG2xwFVIiAZowaCYvtcOW7fHZkJJefG+zqRQCPh7BB52Mf4yIN+J4O JAqdyPYNvFm7xNmgGECujY8cYZ/Xp3fAX8aaILPhI1F4dFzCAsE1Y+dFsSetAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUz0Qkw/wXzFbzDrEs2F53qMYs2AQwHwYDVR0j BBgwFoAUU7q4qfgzeJs1PSrMFc43Jw49YOMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDE3OTFhNjQtYTM2YS00ZWI5LWE2ZmYtZTFjNDA3OGE3 Y2EzLzAvNTNCQUI4QTlGODMzNzg5QjM1M0QyQUNDMTVDRTM3MjcwRTNENjBFMy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzUzQkFCOEE5RjgzMzc4 OUIzNTNEMkFDQzE1Q0UzNzI3MEUzRDYwRTMuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMDE3OTFhNjQtYTM2YS00ZWI5LWE2ZmYtZTFjNDA3OGE3Y2Ez LzAvNTNCQUI4QTlGODMzNzg5QjM1M0QyQUNDMTVDRTM3MjcwRTNENjBFMy5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAD+TIhQSTgLgspzl376I5IHSOAtXI0yje7YKXR1DtWYpmPWXsCtvDkJd 91gVxh0xGe5Dxj21RqOv3qKDrhpLwoNUgEEhtANxox0x4XnadqPyuesszJZYrnaU cgc1vzgqqGnv/prlm/hjR2ZLKnjPWuFbKETqrWsT8c58QbXrF9m6PFUqqwSg6VsG 71fpVgYwYGCKSU2sB1C0+GdLksNpqgqi1mwmWK8XVCRbWkpnUx2EytIoPlwc+Vn+ KxYutmxp1FsTu25AqZBWcnogDMOnM+E4NP1Y0IEVR0UV+7u31Vpsi22FAMjht1I0 hjqK557BZQjrpHCeu7nL/dMy8YRuuLw= -----END CERTIFICATE-----Generated at Sat Jun 7 22:42:30 2025 by rpki-client