$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft File: 6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft (raw, json) Hash identifier: +1SFq1L4h4fYgtOleCM8By2X0aBric172BWw09rkcAo= Subject key identifier: B6:9A:54:EF:74:9C:21:42:C9:69:E8:E7:D3:9F:7F:C8:DB:BC:84:88 Authority key identifier: 69:86:DC:82:81:2C:47:DA:14:99:4B:8E:6E:72:7B:72:E0:B2:F8:D8 Certificate issuer: /CN=6986DC82812C47DA14994B8E6E727B72E0B2F8D8 Certificate serial: 03D9C2902B9FF9B30B23FC7F1507A9E12434945B Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft Manifest number: 30 Signing time: Wed 20 Aug 2025 08:40:40 +0000 Manifest this update: Wed 20 Aug 2025 08:35:40 +0000 Manifest next update: Thu 21 Aug 2025 08:42:40 +0000 Files and hashes: 1: 326130613a363034303a343430303a3a2f34382d3438203d3e203530313034.roa (hash: JDVDvoY2LzG4FOnjq1lk2gJuRJSJTwl39Idwnd4C3E8=) 2: 6986DC82812C47DA14994B8E6E727B72E0B2F8D8.crl (hash: lwTCOUzkm1ej8tbt5F+QeONca68ynvXoU4ApccfxBKo=) 3: 326130613a363034303a343430303a3a2f34382d3438203d3e20313532333638.roa (hash: cr9zAfMvxZve/7JXD2f4n3BhiKrPiLnrwH/qsV4egwU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.crl rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 21 Aug 2025 08:42:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:d9:c2:90:2b:9f:f9:b3:0b:23:fc:7f:15:07:a9:e1:24:34:94:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6986DC82812C47DA14994B8E6E727B72E0B2F8D8 Validity Not Before: Aug 20 08:35:40 2025 GMT Not After : Aug 21 08:42:40 2025 GMT Subject: CN=B69A54EF749C2142C969E8E7D39F7FC8DBBC8488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e9:d5:0e:d8:98:21:dd:b6:b4:89:d6:4d:e2: 05:7d:a9:18:74:3a:e1:0c:7c:d4:e8:f6:b4:5e:9a: 26:d4:ab:24:8a:d5:f4:3e:c9:ae:c0:f6:0a:77:a1: 42:f4:c7:49:3c:d4:58:42:14:cc:bd:45:4a:40:69: 86:d3:fa:11:f5:6d:88:c8:c1:75:5c:cb:14:32:95: 72:32:b6:5b:e6:9c:d4:f8:59:60:ba:f9:14:f1:0b: 9f:14:86:f8:6e:06:06:d8:78:ef:4d:76:d7:f4:3b: 2a:fe:dc:10:b8:09:bf:cb:1d:6a:49:97:b6:61:cd: 90:e1:f4:8b:44:82:01:a0:97:42:e1:ca:8b:db:01: 00:4f:33:16:9a:7b:13:f7:84:94:e9:64:8f:5f:13: a2:77:66:58:98:7b:d5:96:c2:48:01:c3:26:bd:33: f6:f6:63:3a:c6:2d:9b:d0:78:c8:62:9f:4c:d9:30: 98:40:74:22:cd:40:39:13:ac:d4:12:5c:49:50:c4: 4a:4c:22:8f:71:90:44:8e:43:0b:6d:99:66:5b:6c: cb:a2:eb:d1:3d:63:21:c3:c1:71:ac:d6:b3:4d:c9: ee:d3:fe:87:1d:34:d4:18:58:30:27:ef:73:65:36: 0a:ef:2a:af:11:68:d0:90:f8:ba:fa:8c:7d:8f:37: 09:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:9A:54:EF:74:9C:21:42:C9:69:E8:E7:D3:9F:7F:C8:DB:BC:84:88 X509v3 Authority Key Identifier: keyid:69:86:DC:82:81:2C:47:DA:14:99:4B:8E:6E:72:7B:72:E0:B2:F8:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:64:1f:7f:ea:5f:93:fc:0a:d2:c0:26:3a:43:3e:7f:19:58: 13:a7:6e:c8:aa:65:3a:a6:29:18:4c:9e:38:50:69:65:c5:4b: 14:30:ed:b2:cb:3d:e2:b6:a8:9f:c3:47:a1:57:b9:1e:a3:1d: 80:4a:22:14:af:6d:a1:2a:05:e5:a4:26:86:b1:6a:68:45:26: fb:55:d1:56:3d:a6:9f:43:1e:f5:ac:85:43:b0:dc:7f:3e:bc: 74:39:1e:9d:7f:fd:2e:97:38:0d:ea:3d:6b:9f:48:45:ca:b4: df:1e:88:01:68:15:73:05:5c:de:7d:08:39:45:9a:b0:f1:9d: 19:24:8d:fd:b6:57:86:5f:3c:67:be:00:33:fa:1b:71:cf:22: cd:f2:56:9e:a7:30:a1:3d:0c:26:8d:bd:b0:81:37:65:5e:d5: aa:30:a4:7f:e4:cc:9e:1c:f9:3a:2c:52:c0:e3:1f:99:a3:fc: 0f:d0:4c:e4:83:a8:8d:d3:95:33:ee:c1:00:fe:45:79:e2:28: c2:ae:2b:10:4d:27:6b:05:0a:22:e1:d8:1a:0a:90:b4:a5:3f: f5:ca:a5:20:73:43:3f:e3:6d:d8:71:62:a9:1c:2d:28:11:34: d8:cc:6c:60:ae:48:45:30:7a:12:9b:ec:ab:cd:17:4c:18:76: e7:90:4e:c2 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUA9nCkCuf+bMLI/x/FQep4SQ0lFswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk4NkRDODI4MTJDNDdEQTE0OTk0QjhFNkU3MjdCNzJF MEIyRjhEODAeFw0yNTA4MjAwODM1NDBaFw0yNTA4MjEwODQyNDBaMDMxMTAvBgNV BAMTKEI2OUE1NEVGNzQ5QzIxNDJDOTY5RThFN0QzOUY3RkM4REJCQzg0ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW6dUO2Jgh3ba0idZN4gV9qRh0 OuEMfNTo9rRemibUqySK1fQ+ya7A9gp3oUL0x0k81FhCFMy9RUpAaYbT+hH1bYjI wXVcyxQylXIytlvmnNT4WWC6+RTxC58UhvhuBgbYeO9Ndtf0Oyr+3BC4Cb/LHWpJ l7ZhzZDh9ItEggGgl0LhyovbAQBPMxaaexP3hJTpZI9fE6J3ZliYe9WWwkgBwya9 M/b2YzrGLZvQeMhin0zZMJhAdCLNQDkTrNQSXElQxEpMIo9xkESOQwttmWZbbMui 69E9YyHDwXGs1rNNye7T/ocdNNQYWDAn73NlNgrvKq8RaNCQ+Lr6jH2PNwnHAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUtppU73ScIULJaejn059/yNu8hIgwHwYDVR0j BBgwFoAUaYbcgoEsR9oUmUuObnJ7cuCy+NgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVk OGM0LzkvNjk4NkRDODI4MTJDNDdEQTE0OTk0QjhFNkU3MjdCNzJFMEIyRjhEOC5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzY5ODZEQzgyODEyQzQ3 REExNDk5NEI4RTZFNzI3QjcyRTBCMkY4RDguY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVkOGM0 LzkvNjk4NkRDODI4MTJDNDdEQTE0OTk0QjhFNkU3MjdCNzJFMEIyRjhEOC5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAJdkH3/qX5P8CtLAJjpDPn8ZWBOnbsiqZTqmKRhMnjhQaWXFSxQw7bLL PeK2qJ/DR6FXuR6jHYBKIhSvbaEqBeWkJoaxamhFJvtV0VY9pp9DHvWshUOw3H8+ vHQ5Hp1//S6XOA3qPWufSEXKtN8eiAFoFXMFXN59CDlFmrDxnRkkjf22V4ZfPGe+ ADP6G3HPIs3yVp6nMKE9DCaNvbCBN2Ve1aowpH/kzJ4c+TosUsDjH5mj/A/QTOSD qI3TlTPuwQD+RXniKMKuKxBNJ2sFCiLh2BoKkLSlP/XKpSBzQz/jbdhxYqkcLSgR NNjMbGCuSEUwehKb7KvNF0wYdueQTsI= -----END CERTIFICATE-----Generated at Wed Aug 20 22:20:16 2025 by rpki-client