$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.mft File: F900BC65E2B646EBAC472A5DEA12BDB0011AC122.mft (raw, json) Hash identifier: z9Efa8Ss1oPfas2M6jGS+BWZGtiGF+l376xsTAPFEGM= Subject key identifier: B5:5C:7F:F5:B4:A9:70:E8:69:13:0A:72:A0:EB:5B:91:AF:31:FC:F6 Authority key identifier: F9:00:BC:65:E2:B6:46:EB:AC:47:2A:5D:EA:12:BD:B0:01:1A:C1:22 Certificate issuer: /CN=F900BC65E2B646EBAC472A5DEA12BDB0011AC122 Certificate serial: 419734E0E7E436F3E89D67310006A3902579B869 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.mft Manifest number: 0510 Signing time: Fri 06 Jun 2025 16:50:11 +0000 Manifest this update: Fri 06 Jun 2025 16:45:11 +0000 Manifest next update: Sat 07 Jun 2025 19:54:11 +0000 Files and hashes: 1: 326130613a363034303a336638303a3a2f34312d3438203d3e203134363138.roa (hash: 4JKiECPfyLZYZpNlohD2hYOZCrShpFM8qyjM4PYygzc=) 2: 326130613a363034303a336638303a3a2f34312d3438203d3e203136353039.roa (hash: d5nVF16uuJH0TZ1YA8s7hx5fCbPpHfSbcJo4JXI+35s=) 3: F900BC65E2B646EBAC472A5DEA12BDB0011AC122.crl (hash: dEI95xJvrJxBEN/ZxSt1qpsfxXLh2Ko9fCQQMSGT6GY=) 4: 326130613a363034303a336630303a3a2f34302d3438203d3e20323033303639.roa (hash: u/op1Gb+lh53LhTdxSovsMBPfFi75dye37nTdYVQSh4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.crl rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 12:23:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:97:34:e0:e7:e4:36:f3:e8:9d:67:31:00:06:a3:90:25:79:b8:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F900BC65E2B646EBAC472A5DEA12BDB0011AC122 Validity Not Before: Jun 6 16:45:11 2025 GMT Not After : Jun 7 19:54:11 2025 GMT Subject: CN=B55C7FF5B4A970E869130A72A0EB5B91AF31FCF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ac:b8:c6:a0:47:bd:3f:90:79:9f:b0:30:56: c7:e1:db:27:27:0c:35:49:5e:fa:9f:fe:45:a4:2e: 98:54:43:c1:4f:68:18:96:5c:24:0a:71:9c:b4:72: bf:9e:fc:0e:52:9d:87:4c:3b:28:86:a1:6b:b3:fb: a8:b2:73:7d:bc:b3:e6:7e:6b:e4:35:16:9f:81:d7: 3b:20:3e:0b:78:58:9f:09:14:2e:d7:93:07:f8:3b: 95:8e:65:1c:e0:3c:58:49:b4:e2:c0:2e:a2:6d:2f: b5:7f:95:e9:7e:c1:fc:ad:32:4e:37:20:b9:27:00: 7f:7f:6c:92:53:4c:62:a3:7e:18:1b:ea:c1:db:90: 54:cf:a3:ee:50:6b:b2:15:0c:cf:16:ba:bc:5b:0b: c0:2a:24:e9:15:1f:5a:b2:4d:a5:ac:c7:30:da:d3: b2:9d:fd:cc:13:e2:97:a0:c2:b6:17:50:2b:22:ac: 32:71:b1:64:51:c0:c0:2d:70:60:f1:0f:3c:08:33: da:01:f1:22:03:a9:03:62:79:c9:89:0f:c4:05:2b: 27:c9:d8:2c:19:28:6c:ca:07:35:17:33:b4:7e:cc: 11:d3:86:1c:5e:ed:95:54:07:d0:20:17:bc:75:8f: 92:7e:fb:ae:af:6e:a4:3e:c0:db:63:39:b7:83:f3: 9e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:5C:7F:F5:B4:A9:70:E8:69:13:0A:72:A0:EB:5B:91:AF:31:FC:F6 X509v3 Authority Key Identifier: keyid:F9:00:BC:65:E2:B6:46:EB:AC:47:2A:5D:EA:12:BD:B0:01:1A:C1:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ec:a7:6a:b3:9e:e9:64:80:9a:bf:c3:a8:0e:2c:99:40:2a:66: 3f:65:ec:b1:39:0b:a6:a5:f7:24:37:2e:94:7d:07:4c:40:c8: 65:f7:37:0b:eb:a9:32:ff:f6:e2:7d:82:1f:a0:c9:ca:5d:12: 67:fd:ec:85:ca:10:49:77:e8:c0:98:53:c7:cc:17:43:a0:12: 90:8b:4b:80:78:ea:f5:02:d8:c9:98:c5:10:f1:42:95:01:ab: 23:96:78:ad:ae:8f:59:1a:92:95:2f:76:3f:32:e3:ab:f1:f1: b1:9d:0a:2f:e7:01:77:af:7d:18:96:83:63:e8:fd:89:05:c2: 2a:a0:a8:71:14:4a:98:27:ac:e3:78:d9:f0:95:26:7a:ac:ca: f3:9b:f5:30:70:67:9b:ee:e8:ac:de:5a:d5:29:57:9a:63:c3: bf:2a:15:85:d3:d1:bd:b7:a0:7a:1f:ca:c7:82:ef:f6:ec:73: 2c:4f:6a:8e:b8:00:88:f7:18:75:4c:b0:09:fc:16:13:c6:7c: 85:61:d4:45:65:50:05:49:31:c3:a2:a7:ac:47:38:94:37:d1: 85:4e:80:0b:72:e8:9c:4d:11:f6:3a:9b:7e:f8:bb:7f:1d:b1: 82:d9:b0:36:85:d0:79:78:33:9a:18:18:d6:3f:c6:5e:8a:20: 0d:a1:e5:d6 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUQZc04OfkNvPonWcxAAajkCV5uGkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjkwMEJDNjVFMkI2NDZFQkFDNDcyQTVERUExMkJEQjAw MTFBQzEyMjAeFw0yNTA2MDYxNjQ1MTFaFw0yNTA2MDcxOTU0MTFaMDMxMTAvBgNV BAMTKEI1NUM3RkY1QjRBOTcwRTg2OTEzMEE3MkEwRUI1QjkxQUYzMUZDRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCprLjGoEe9P5B5n7AwVsfh2ycn DDVJXvqf/kWkLphUQ8FPaBiWXCQKcZy0cr+e/A5SnYdMOyiGoWuz+6iyc328s+Z+ a+Q1Fp+B1zsgPgt4WJ8JFC7Xkwf4O5WOZRzgPFhJtOLALqJtL7V/lel+wfytMk43 ILknAH9/bJJTTGKjfhgb6sHbkFTPo+5Qa7IVDM8WurxbC8AqJOkVH1qyTaWsxzDa 07Kd/cwT4pegwrYXUCsirDJxsWRRwMAtcGDxDzwIM9oB8SIDqQNiecmJD8QFKyfJ 2CwZKGzKBzUXM7R+zBHThhxe7ZVUB9AgF7x1j5J++66vbqQ+wNtjObeD857JAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUtVx/9bSpcOhpEwpyoOtbka8x/PYwHwYDVR0j BBgwFoAU+QC8ZeK2RuusRypd6hK9sAEawSIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi ZTRlLzMvRjkwMEJDNjVFMkI2NDZFQkFDNDcyQTVERUExMkJEQjAwMTFBQzEyMi5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wL0Y5MDBCQzY1RTJCNjQ2 RUJBQzQ3MkE1REVBMTJCREIwMDExQUMxMjIuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJiZTRl LzMvRjkwMEJDNjVFMkI2NDZFQkFDNDcyQTVERUExMkJEQjAwMTFBQzEyMi5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAOynarOe6WSAmr/DqA4smUAqZj9l7LE5C6al9yQ3LpR9B0xAyGX3Nwvr qTL/9uJ9gh+gycpdEmf97IXKEEl36MCYU8fMF0OgEpCLS4B46vUC2MmYxRDxQpUB qyOWeK2uj1kakpUvdj8y46vx8bGdCi/nAXevfRiWg2Po/YkFwiqgqHEUSpgnrON4 2fCVJnqsyvOb9TBwZ5vu6KzeWtUpV5pjw78qFYXT0b23oHofyseC7/bscyxPao64 AIj3GHVMsAn8FhPGfIVh1EVlUAVJMcOip6xHOJQ30YVOgAty6JxNEfY6m374u38d sYLZsDaF0Hl4M5oYGNY/xl6KIA2h5dY= -----END CERTIFICATE-----Generated at Sat Jun 7 04:40:11 2025 by rpki-client