$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/4/B126634521E5E49C535FCBEC43BA2D922C30E136.mft File: B126634521E5E49C535FCBEC43BA2D922C30E136.mft (raw, json) Hash identifier: bzPNjr62F/ZC44ono48k5tqZzIgxwfQtUFkC6gr9GVM= Subject key identifier: F2:6F:82:82:2D:07:B9:58:B2:D9:F1:CD:E3:4F:04:59:41:40:98:D2 Authority key identifier: B1:26:63:45:21:E5:E4:9C:53:5F:CB:EC:43:BA:2D:92:2C:30:E1:36 Certificate issuer: /CN=B126634521E5E49C535FCBEC43BA2D922C30E136 Certificate serial: 1981F35422E7B124A85931B7F086D215D7318DB0 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B126634521E5E49C535FCBEC43BA2D922C30E136.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/4/B126634521E5E49C535FCBEC43BA2D922C30E136.mft Manifest number: 11 Signing time: Fri 04 Apr 2025 12:11:47 +0000 Manifest this update: Fri 04 Apr 2025 12:06:47 +0000 Manifest next update: Sat 05 Apr 2025 15:02:47 +0000 Files and hashes: 1: 326130613a363034303a343430303a3a2f34382d3438203d3e20313532333638.roa (hash: pIkMxK/vDEw873dkebmyQN4JOmiMolHB/gzzt1LQXbo=) 2: B126634521E5E49C535FCBEC43BA2D922C30E136.crl (hash: hSMDge1BVfm/HaH3OTe1RKkjUPEPO73MS5PdZ7zj2iA=) 3: 326130613a363034303a633230303a3a2f34382d3438203d3e20313532333638.roa (hash: wxDJH4ENQUNyQpIi/xWRti5QA0HXMlYu5nsSdi9A/zg=) 4: 326130613a363034303a343430303a3a2f34382d3438203d3e203530313034.roa (hash: wVp4YEv0t3dNFBj7z0WS+J9iHIKEQspXspUxf+IIu0Q=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/4/B126634521E5E49C535FCBEC43BA2D922C30E136.crl rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/4/B126634521E5E49C535FCBEC43BA2D922C30E136.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B126634521E5E49C535FCBEC43BA2D922C30E136.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 15:02:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:81:f3:54:22:e7:b1:24:a8:59:31:b7:f0:86:d2:15:d7:31:8d:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B126634521E5E49C535FCBEC43BA2D922C30E136 Validity Not Before: Apr 4 12:06:47 2025 GMT Not After : Apr 5 15:02:47 2025 GMT Subject: CN=F26F82822D07B958B2D9F1CDE34F0459414098D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:69:94:61:21:6a:3e:d4:70:d5:6c:01:e0:e2: 1a:be:c3:9a:a7:08:43:13:f3:6c:a6:8b:7e:61:16: 6e:eb:59:b5:d7:ef:c7:86:78:99:04:5c:73:cd:44: 12:60:2a:36:f7:77:90:a6:f8:58:8a:02:55:0c:6a: 50:59:a8:48:ab:93:c2:62:3c:6d:3a:dc:b1:2c:51: e8:bc:94:77:e7:c0:68:a1:fe:27:02:2c:4e:c1:48: a7:df:cb:82:83:56:ad:8d:49:27:10:30:c6:b0:92: 3f:1c:b1:d0:b1:7d:91:dc:c8:8f:bc:b3:d6:2e:f9: fd:35:42:1e:97:a5:bd:bd:73:cf:1c:3f:3d:b3:eb: 32:70:38:cb:56:6f:91:47:b7:fb:5a:af:5c:e5:8a: ee:7e:dc:a1:13:52:31:19:db:43:22:98:13:74:f6: 4f:e2:8f:2e:05:5e:e5:b2:10:76:52:d7:14:25:e5: d2:b7:f0:1e:e3:84:22:9b:da:3a:19:01:b8:5d:6d: 9c:9a:b0:9e:26:c0:41:17:ec:75:99:da:c5:71:a8: 14:cb:86:0f:98:d5:65:35:9f:c0:60:06:26:7e:b2: 93:b6:04:b0:f1:6f:1b:ec:c1:63:92:8f:d0:97:72: db:74:0e:3e:01:07:bc:2a:08:21:83:59:be:11:4f: 0b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:6F:82:82:2D:07:B9:58:B2:D9:F1:CD:E3:4F:04:59:41:40:98:D2 X509v3 Authority Key Identifier: keyid:B1:26:63:45:21:E5:E4:9C:53:5F:CB:EC:43:BA:2D:92:2C:30:E1:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/4/B126634521E5E49C535FCBEC43BA2D922C30E136.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B126634521E5E49C535FCBEC43BA2D922C30E136.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/4/B126634521E5E49C535FCBEC43BA2D922C30E136.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:56:c0:73:7d:9e:49:a5:d6:2b:d6:29:f4:ee:da:dc:3c:c4: 5b:22:a6:8e:de:e6:24:08:87:39:1d:46:3f:87:bc:ec:d7:d4: 20:3b:81:ba:fa:c6:dd:43:67:c6:1c:e6:d7:46:e0:27:93:d9: 6d:bd:02:7a:c7:ea:27:1e:e5:38:a6:23:fc:da:b4:d5:cb:37: 48:86:c6:5d:b2:06:08:84:48:b4:85:1e:30:61:13:9e:ff:93: 9a:f7:70:aa:bd:81:0d:3b:4f:9f:86:b7:d1:ad:41:e4:e4:d9: c7:5d:e6:49:54:b0:2e:dd:a1:e9:b4:93:a4:9b:f6:09:bb:84: 42:3b:12:e1:58:ef:2c:f8:fd:02:10:9f:a4:29:cd:39:70:4f: 7e:77:33:b5:d1:ed:95:ee:78:f9:e4:35:a6:1d:2c:59:05:5d: d6:eb:a6:25:d9:ba:a7:f2:07:c9:32:f7:cb:40:cd:51:12:ed: 56:c6:85:15:75:90:51:23:46:9a:b4:60:d2:5f:97:4f:5d:08: 9b:cf:02:06:28:6d:57:3b:c2:cf:d3:71:f9:c7:69:5d:9d:70: 33:c2:bc:f1:3c:00:c7:2c:39:91:87:3d:7e:38:ef:69:98:93: 6a:c0:45:90:4d:1e:5e:7a:84:14:00:d7:e2:da:9e:0b:05:39: 94:27:37:05 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUGYHzVCLnsSSoWTG38IbSFdcxjbAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjEyNjYzNDUyMUU1RTQ5QzUzNUZDQkVDNDNCQTJEOTIy QzMwRTEzNjAeFw0yNTA0MDQxMjA2NDdaFw0yNTA0MDUxNTAyNDdaMDMxMTAvBgNV BAMTKEYyNkY4MjgyMkQwN0I5NThCMkQ5RjFDREUzNEYwNDU5NDE0MDk4RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHaZRhIWo+1HDVbAHg4hq+w5qn CEMT82ymi35hFm7rWbXX78eGeJkEXHPNRBJgKjb3d5Cm+FiKAlUMalBZqEirk8Ji PG063LEsUei8lHfnwGih/icCLE7BSKffy4KDVq2NSScQMMawkj8csdCxfZHcyI+8 s9Yu+f01Qh6Xpb29c88cPz2z6zJwOMtWb5FHt/tar1zliu5+3KETUjEZ20MimBN0 9k/ijy4FXuWyEHZS1xQl5dK38B7jhCKb2joZAbhdbZyasJ4mwEEX7HWZ2sVxqBTL hg+Y1WU1n8BgBiZ+spO2BLDxbxvswWOSj9CXctt0Dj4BB7wqCCGDWb4RTwvHAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQU8m+Cgi0HuViy2fHN408EWUFAmNIwHwYDVR0j BBgwFoAUsSZjRSHl5JxTX8vsQ7otkiww4TYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVk OGM0LzQvQjEyNjYzNDUyMUU1RTQ5QzUzNUZDQkVDNDNCQTJEOTIyQzMwRTEzNi5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wL0IxMjY2MzQ1MjFFNUU0 OUM1MzVGQ0JFQzQzQkEyRDkyMkMzMEUxMzYuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVkOGM0 LzQvQjEyNjYzNDUyMUU1RTQ5QzUzNUZDQkVDNDNCQTJEOTIyQzMwRTEzNi5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAJRWwHN9nkml1ivWKfTu2tw8xFsipo7e5iQIhzkdRj+HvOzX1CA7gbr6 xt1DZ8Yc5tdG4CeT2W29AnrH6ice5TimI/zatNXLN0iGxl2yBgiESLSFHjBhE57/ k5r3cKq9gQ07T5+Gt9GtQeTk2cdd5klUsC7doem0k6Sb9gm7hEI7EuFY7yz4/QIQ n6QpzTlwT353M7XR7ZXuePnkNaYdLFkFXdbrpiXZuqfyB8ky98tAzVES7VbGhRV1 kFEjRpq0YNJfl09dCJvPAgYobVc7ws/TcfnHaV2dcDPCvPE8AMcsOZGHPX4472mY k2rARZBNHl56hBQA1+LangsFOZQnNwU= -----END CERTIFICATE-----Generated at Sat Apr 5 06:20:40 2025 by rpki-client