$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft File: 4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft (raw, json) Hash identifier: pCNcowAlLXmJPyytRY9WF7beK4LRbMcmybna29ZeIxY= Subject key identifier: 1C:A9:58:98:43:19:02:A5:C6:4F:9C:1D:1A:24:84:57:D3:A3:C7:EE Authority key identifier: 4C:8F:14:A9:80:41:CC:D9:EA:EF:C4:56:FF:5A:AF:BF:49:01:C6:81 Certificate issuer: /CN=4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681 Certificate serial: 5153F1D1153C35925C4F077AAA81FC0783ECB7A0 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft Manifest number: 3D Signing time: Wed 20 Aug 2025 06:54:48 +0000 Manifest this update: Wed 20 Aug 2025 06:49:48 +0000 Manifest next update: Thu 21 Aug 2025 07:23:48 +0000 Files and hashes: 1: 4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.crl (hash: 6boU6/U2BF4nFQIJgml4uLRZsHG3XD5Nuie3ahOBFwg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.crl rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 21 Aug 2025 07:23:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:53:f1:d1:15:3c:35:92:5c:4f:07:7a:aa:81:fc:07:83:ec:b7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681 Validity Not Before: Aug 20 06:49:48 2025 GMT Not After : Aug 21 07:23:48 2025 GMT Subject: CN=1CA95898431902A5C64F9C1D1A248457D3A3C7EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e8:a8:51:82:87:a3:36:62:33:16:89:08:46: 7a:47:7f:89:3f:39:06:b3:f0:f8:a6:17:dc:0c:93: 0c:19:5a:23:9e:97:9d:b7:61:dc:2d:10:d6:fb:66: ed:e4:58:43:46:fd:3b:53:17:f7:21:bb:ee:ed:40: 57:8b:26:32:45:36:04:08:51:76:f8:7e:1a:0c:91: fc:d1:9e:ee:7c:b9:63:3c:eb:dd:a7:6d:f9:cd:b5: b1:91:35:ef:ec:ce:12:d1:74:9e:28:0c:a2:ac:ee: ee:e0:05:02:87:98:e4:6f:f8:d7:54:70:7c:eb:c1: b2:a5:c7:f1:5b:2e:f6:53:9b:6b:a5:6c:c2:9b:60: 68:9b:6d:f8:dc:03:43:54:27:7c:a0:69:f9:f4:f6: 64:ed:64:43:61:3d:fd:75:4a:1f:cc:83:b2:35:5a: 8a:15:bf:45:a1:35:60:7a:8b:90:f2:12:7b:b4:12: 85:d9:de:80:88:da:e9:53:e5:2c:62:3a:80:7b:a4: 9e:d7:a9:77:09:95:39:fb:ff:28:c7:68:cb:a6:6f: ad:e7:81:f7:39:b1:46:99:86:e7:8e:ac:02:ea:e2: 20:25:51:4d:0c:a0:21:18:e6:80:72:cc:b5:a2:5b: f9:df:65:f6:9f:24:60:6a:20:1c:2c:9e:ff:d4:53: 59:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:A9:58:98:43:19:02:A5:C6:4F:9C:1D:1A:24:84:57:D3:A3:C7:EE X509v3 Authority Key Identifier: keyid:4C:8F:14:A9:80:41:CC:D9:EA:EF:C4:56:FF:5A:AF:BF:49:01:C6:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:24:1e:82:20:8b:a1:25:64:fd:f6:06:2d:15:f2:0a:39:53: ca:ed:73:d9:e0:2e:80:36:61:57:67:2a:53:4d:44:43:ac:04: 48:6a:29:d3:d6:c0:ec:fd:9e:a6:46:de:06:5d:fb:b7:0e:e0: 1f:89:e5:e3:85:65:a6:51:82:14:2d:d4:e7:84:c8:ce:34:8d: b3:f7:83:21:1c:91:d8:93:74:b7:bc:2a:cf:29:bd:17:27:d7: 9e:8e:77:0e:70:03:7b:da:2f:0c:ae:25:40:a1:35:99:73:02: b0:e5:4e:ac:08:41:8c:27:8c:59:80:94:75:54:81:a8:b6:1e: d2:ec:87:6c:f1:66:ca:aa:97:6d:c7:15:94:6c:67:5e:91:9e: 49:ce:8b:e0:d9:2d:fe:ea:a7:e5:3d:74:4d:b7:68:fb:c7:42: 27:77:c8:60:e5:26:d4:46:23:f0:a2:5a:f9:89:26:84:54:36: e3:5d:a0:a0:ab:dc:4e:d9:fd:cf:d3:9c:4d:7c:5b:24:c1:3b: 90:6b:27:c6:99:3b:47:4e:6b:f6:7d:24:72:61:62:aa:d8:cf: 6b:70:4e:c2:66:3f:b7:d3:16:f0:87:db:35:5d:df:d1:af:0a: d9:87:9e:95:86:c3:71:32:35:00:d8:98:4d:15:71:81:5d:46: ca:ca:d2:b6 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUUVPx0RU8NZJcTwd6qoH8B4Pst6AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEM4RjE0QTk4MDQxQ0NEOUVBRUZDNDU2RkY1QUFGQkY0 OTAxQzY4MTAeFw0yNTA4MjAwNjQ5NDhaFw0yNTA4MjEwNzIzNDhaMDMxMTAvBgNV BAMTKDFDQTk1ODk4NDMxOTAyQTVDNjRGOUMxRDFBMjQ4NDU3RDNBM0M3RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG6KhRgoejNmIzFokIRnpHf4k/ OQaz8PimF9wMkwwZWiOel523YdwtENb7Zu3kWENG/TtTF/chu+7tQFeLJjJFNgQI UXb4fhoMkfzRnu58uWM8692nbfnNtbGRNe/szhLRdJ4oDKKs7u7gBQKHmORv+NdU cHzrwbKlx/FbLvZTm2ulbMKbYGibbfjcA0NUJ3ygafn09mTtZENhPf11Sh/Mg7I1 WooVv0WhNWB6i5DyEnu0EoXZ3oCI2ulT5SxiOoB7pJ7XqXcJlTn7/yjHaMumb63n gfc5sUaZhueOrALq4iAlUU0MoCEY5oByzLWiW/nfZfafJGBqIBwsnv/UU1kFAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUHKlYmEMZAqXGT5wdGiSEV9Ojx+4wHwYDVR0j BBgwFoAUTI8UqYBBzNnq78RW/1qvv0kBxoEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFhZmM4 ZWI4LzQvNEM4RjE0QTk4MDQxQ0NEOUVBRUZDNDU2RkY1QUFGQkY0OTAxQzY4MS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzRDOEYxNEE5ODA0MUND RDlFQUVGQzQ1NkZGNUFBRkJGNDkwMUM2ODEuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFhZmM4ZWI4 LzQvNEM4RjE0QTk4MDQxQ0NEOUVBRUZDNDU2RkY1QUFGQkY0OTAxQzY4MS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAHskHoIgi6ElZP32Bi0V8go5U8rtc9ngLoA2YVdnKlNNREOsBEhqKdPW wOz9nqZG3gZd+7cO4B+J5eOFZaZRghQt1OeEyM40jbP3gyEckdiTdLe8Ks8pvRcn 156Odw5wA3vaLwyuJUChNZlzArDlTqwIQYwnjFmAlHVUgai2HtLsh2zxZsqql23H FZRsZ16RnknOi+DZLf7qp+U9dE23aPvHQid3yGDlJtRGI/CiWvmJJoRUNuNdoKCr 3E7Z/c/TnE18WyTBO5BrJ8aZO0dOa/Z9JHJhYqrYz2twTsJmP7fTFvCH2zVd39Gv CtmHnpWGw3EyNQDYmE0VcYFdRsrK0rY= -----END CERTIFICATE-----Generated at Wed Aug 20 23:29:45 2025 by rpki-client