$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.mft File: 53BAB8A9F833789B353D2ACC15CE37270E3D60E3.mft (raw, json) Hash identifier: Fwwv01flNkt5XSt19qc0szDHKrMBW9kRtuIfE6QsNgM= Subject key identifier: BC:0D:57:86:94:4C:88:E5:2E:CE:A2:EC:A1:98:84:83:BA:8D:FF:2E Authority key identifier: 53:BA:B8:A9:F8:33:78:9B:35:3D:2A:CC:15:CE:37:27:0E:3D:60:E3 Certificate issuer: /CN=53BAB8A9F833789B353D2ACC15CE37270E3D60E3 Certificate serial: 4D012F1FC3E51BCA035A8B8546484891091CC91C Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.mft Manifest number: 02E4 Signing time: Fri 04 Apr 2025 20:48:23 +0000 Manifest this update: Fri 04 Apr 2025 20:43:23 +0000 Manifest next update: Sat 05 Apr 2025 21:40:23 +0000 Files and hashes: 1: 326130613a363034303a343930303a3a2f34302d3438203d3e20323030313739.roa (hash: B12DmFls+H0qkH0yc3239fgwixjYfGQa/u7XVxErqzQ=) 2: 326130353a646663313a393530303a3a2f34302d3438203d3e20323030313739.roa (hash: tBCbEpr+oJ1RFgpk9g+qD3+yfAoxP+nrSqRPHhwlJ+w=) 3: 326130613a363034303a353430303a3a2f34302d3438203d3e20323032323031.roa (hash: rgKv78KNBaeBobwea7KnBLuciKXlgVnivSyvettjEmc=) 4: 326130613a363034303a353430303a3a2f34302d3438203d3e20323030313739.roa (hash: iJpluoF3HoeICJtyNSVX2W7UjOGIKihBFoLXBu2iRVU=) 5: 53BAB8A9F833789B353D2ACC15CE37270E3D60E3.crl (hash: 5KJEiWkOCeZhdN8jApoHpNGE0BlK1aT9tdZo0cPhWYg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.crl rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 21:11:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:01:2f:1f:c3:e5:1b:ca:03:5a:8b:85:46:48:48:91:09:1c:c9:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53BAB8A9F833789B353D2ACC15CE37270E3D60E3 Validity Not Before: Apr 4 20:43:23 2025 GMT Not After : Apr 5 21:40:23 2025 GMT Subject: CN=BC0D5786944C88E52ECEA2ECA1988483BA8DFF2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:59:3f:b1:ae:3d:bb:be:0a:b4:16:4a:62:bb: 4c:f6:14:23:0a:7c:06:87:0a:86:e1:86:f2:db:1c: c1:2b:e9:bd:49:8f:d6:a8:61:ae:f6:2c:23:91:99: cd:5e:46:e6:be:8a:6e:37:b2:25:16:2e:db:45:69: f6:aa:ee:60:45:26:ac:cb:5e:98:87:8f:b7:a6:25: 4e:c3:10:2a:57:60:73:7c:59:4f:e2:56:97:32:a7: c5:e2:dc:bc:20:dd:3b:cc:da:03:4a:f3:e3:0e:3f: 7a:2b:01:0d:35:37:70:66:7d:ba:34:bc:79:a4:6d: 47:e1:f9:c7:70:8e:e6:c2:34:e1:98:70:5a:c6:21: 46:ce:a8:87:9e:95:17:21:0e:8a:4a:8e:d0:33:d5: c6:66:56:53:65:df:b9:15:bd:26:d6:d1:c0:e9:e1: e9:c7:05:42:d0:73:10:51:c0:bc:d4:0c:ad:06:e2: 6b:eb:d4:8f:e8:ef:89:64:7d:07:37:c1:97:aa:1b: 81:06:c0:1d:78:77:d0:db:77:40:3b:70:fb:5a:d8: d8:d3:2a:52:ad:46:40:c7:77:13:ad:88:23:bd:d6: e3:c3:93:a6:43:cb:74:24:d6:0e:10:e8:64:c8:11: 44:4a:b4:6d:24:27:47:76:b2:e6:ba:86:fb:48:bb: d3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:0D:57:86:94:4C:88:E5:2E:CE:A2:EC:A1:98:84:83:BA:8D:FF:2E X509v3 Authority Key Identifier: keyid:53:BA:B8:A9:F8:33:78:9B:35:3D:2A:CC:15:CE:37:27:0E:3D:60:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:e8:58:0b:53:ba:12:94:2e:04:ed:f3:cb:0f:8f:f5:4d:99: c2:ca:3e:b7:01:1a:ac:6d:c5:af:0b:2a:40:ad:7d:b3:c4:5c: 4f:dd:09:36:de:68:90:84:eb:ec:87:b3:dd:05:96:ee:df:91: a7:22:47:d6:c7:47:97:2b:ed:fd:a1:e5:90:70:b9:86:6f:da: 90:80:78:0b:b3:3b:ff:64:14:2c:f9:54:2d:6d:44:6b:65:de: 0c:ee:0e:52:83:5f:99:c1:e4:06:6c:5f:fb:11:fc:e3:bd:22: d3:9e:ce:ee:39:ed:64:70:c9:67:be:08:1a:24:dc:40:a1:59: eb:e8:d1:d1:5b:54:a0:30:5e:0e:8a:ef:db:45:06:7f:a1:69: 11:05:bf:46:e2:e4:c9:a8:b6:b3:2b:ce:66:dc:b8:6d:1b:24: ed:b8:fc:8e:3c:e9:2b:4f:f2:6d:d3:1d:92:ed:14:1d:7b:73: c2:34:1c:c2:63:5c:19:6d:55:b7:ad:01:4b:e4:0d:1b:4a:a7: 89:7e:29:3f:b6:7c:2b:a5:4b:02:7d:6f:00:ca:e0:cf:87:3b: d0:38:92:cc:c4:0d:1c:7d:1f:58:04:6a:4b:42:4e:86:1b:1e: 7e:22:49:3d:6c:78:2d:40:07:1e:df:5b:f7:85:53:1a:f6:b2: b1:19:1e:dd -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUTQEvH8PlG8oDWouFRkhIkQkcyRwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTNCQUI4QTlGODMzNzg5QjM1M0QyQUNDMTVDRTM3Mjcw RTNENjBFMzAeFw0yNTA0MDQyMDQzMjNaFw0yNTA0MDUyMTQwMjNaMDMxMTAvBgNV BAMTKEJDMEQ1Nzg2OTQ0Qzg4RTUyRUNFQTJFQ0ExOTg4NDgzQkE4REZGMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSWT+xrj27vgq0Fkpiu0z2FCMK fAaHCobhhvLbHMEr6b1Jj9aoYa72LCORmc1eRua+im43siUWLttFafaq7mBFJqzL XpiHj7emJU7DECpXYHN8WU/iVpcyp8Xi3Lwg3TvM2gNK8+MOP3orAQ01N3Bmfbo0 vHmkbUfh+cdwjubCNOGYcFrGIUbOqIeelRchDopKjtAz1cZmVlNl37kVvSbW0cDp 4enHBULQcxBRwLzUDK0G4mvr1I/o74lkfQc3wZeqG4EGwB14d9Dbd0A7cPta2NjT KlKtRkDHdxOtiCO91uPDk6ZDy3Qk1g4Q6GTIEURKtG0kJ0d2sua6hvtIu9MpAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUvA1XhpRMiOUuzqLsoZiEg7qN/y4wHwYDVR0j BBgwFoAUU7q4qfgzeJs1PSrMFc43Jw49YOMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDE3OTFhNjQtYTM2YS00ZWI5LWE2ZmYtZTFjNDA3OGE3 Y2EzLzAvNTNCQUI4QTlGODMzNzg5QjM1M0QyQUNDMTVDRTM3MjcwRTNENjBFMy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzUzQkFCOEE5RjgzMzc4 OUIzNTNEMkFDQzE1Q0UzNzI3MEUzRDYwRTMuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMDE3OTFhNjQtYTM2YS00ZWI5LWE2ZmYtZTFjNDA3OGE3Y2Ez LzAvNTNCQUI4QTlGODMzNzg5QjM1M0QyQUNDMTVDRTM3MjcwRTNENjBFMy5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAF/oWAtTuhKULgTt88sPj/VNmcLKPrcBGqxtxa8LKkCtfbPEXE/dCTbe aJCE6+yHs90Flu7fkaciR9bHR5cr7f2h5ZBwuYZv2pCAeAuzO/9kFCz5VC1tRGtl 3gzuDlKDX5nB5AZsX/sR/OO9ItOezu457WRwyWe+CBok3EChWevo0dFbVKAwXg6K 79tFBn+haREFv0bi5MmotrMrzmbcuG0bJO24/I486StP8m3THZLtFB17c8I0HMJj XBltVbetAUvkDRtKp4l+KT+2fCulSwJ9bwDK4M+HO9A4kszEDRx9H1gEaktCToYb Hn4iST1seC1ABx7fW/eFUxr2srEZHt0= -----END CERTIFICATE-----Generated at Sat Apr 5 06:26:11 2025 by rpki-client