$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.mft File: 309C25E7B18FF28A60B96B25572F8A9E3104FE76.mft (raw, json) Hash identifier: UVjqlehbRFVhRXsuC8j8fpiUDwESuw3laYzDKMQOpKA= Subject key identifier: 8B:0C:53:77:26:0B:70:08:0F:6C:AF:6D:C7:64:09:83:89:0B:05:EC Authority key identifier: 30:9C:25:E7:B1:8F:F2:8A:60:B9:6B:25:57:2F:8A:9E:31:04:FE:76 Certificate issuer: /CN=309C25E7B18FF28A60B96B25572F8A9E3104FE76 Certificate serial: 3494F052AA8E200B3C82A87207BBB7AADC620D49 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.mft Manifest number: 0162 Signing time: Mon 02 Jun 2025 02:37:45 +0000 Manifest this update: Mon 02 Jun 2025 02:32:45 +0000 Manifest next update: Tue 03 Jun 2025 05:11:45 +0000 Files and hashes: 1: 326130613a363034303a623166363a3a2f34382d3438203d3e203530373535.roa (hash: WZAT+2UnkuTeDpADo9xuR0pPXroOCLJbbHfxikcVv24=) 2: 326130613a363034303a623166663a3a2f34382d3438203d3e2030.roa (hash: cwd5LxUfGqT7a9/Pajk8lfNPUrL3p3IC+JEphw9tMJU=) 3: 326130613a363034303a623166333a3a2f34382d3438203d3e20323030363736.roa (hash: w5dnEiDx5goNVTXWdKgSFg9sD6RUplNurP3xamwPNaQ=) 4: 309C25E7B18FF28A60B96B25572F8A9E3104FE76.crl (hash: 6e7x76CRxQiUmdfm1ymXrivIsUOeeJjXg6/NFm4W83I=) 5: 326130613a363034303a623166333a3a2f34382d3438203d3e203530373535.roa (hash: 92+lsmyfA1dbS5hvoEPYQjapfeES/k8FUYGANJUnv7Q=) 6: 326130613a363034303a623166383a3a2f34382d3438203d3e203530373535.roa (hash: FI47MURWTFWikQVohyPC3i+m6GkNNvGpYuxpgU2LP/Q=) 7: 326130613a363034303a623166353a3a2f34382d3438203d3e20323030363736.roa (hash: LBWSPbWdHS2qLW48sBVvajPcn95MUvX0AUIFyg2pSwE=) 8: 326130613a363034303a623166373a3a2f34382d3438203d3e203530373535.roa (hash: cKtVijhwYzD8lUknL4bLGAreJBVYSaklclbPuDAhlM4=) 9: 326130613a363034303a623166313a3a2f34382d3438203d3e20323030363736.roa (hash: MYzoD8wbCOxI3VM/BdbUpxOg1cHoSa/pKdV7AMYn73k=) 10: 326130613a363034303a656430303a3a2f34302d3430203d3e2030.roa (hash: vmCZ6eOm5tS7bNiPnlTdd4xzZjSjYpY8TXILOA0OmSc=) 11: 326130613a363034303a623166323a3a2f34382d3438203d3e20323030363736.roa (hash: Iz/fbYS1/cy8A5fLPahpzYYMJ+9YAFFxOvqGD55PuMM=) 12: 326130613a363034303a623166343a3a2f34382d3438203d3e20323030363736.roa (hash: Nnbe/4zszjgo0YB55Fou4Wds93r5DpKEFbS0MZw1LSo=) 13: 326130613a363034303a623166303a3a2f34382d3438203d3e20323030363736.roa (hash: dOsy+R+Pu+oAZfnInfj1QRHz0MdLjsjFwXGn7V3VRV4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.crl rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Jun 2025 05:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:94:f0:52:aa:8e:20:0b:3c:82:a8:72:07:bb:b7:aa:dc:62:0d:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=309C25E7B18FF28A60B96B25572F8A9E3104FE76 Validity Not Before: Jun 2 02:32:45 2025 GMT Not After : Jun 3 05:11:45 2025 GMT Subject: CN=8B0C5377260B70080F6CAF6DC7640983890B05EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:0c:bc:cf:af:2e:cf:10:c8:f1:54:51:dc:58: 33:b3:91:e2:81:16:23:77:a1:c7:6d:39:39:26:5d: ea:f1:8f:82:68:3d:81:4f:59:65:01:68:ee:32:21: a4:74:6d:bf:f3:50:6d:e9:5b:83:b5:c8:83:77:cc: ed:0c:12:2f:0a:9f:92:38:57:14:05:63:a0:15:49: 45:f3:9a:f9:22:53:6c:11:2d:e1:92:4a:89:fc:ce: ea:c2:f1:93:c1:1b:7c:d8:bf:f4:5f:fb:d3:7d:c8: ff:d8:1b:54:2a:eb:f8:6b:32:68:a4:c0:88:5a:25: 3d:a8:50:d1:14:9f:dd:44:4c:87:6c:df:3a:b0:9b: 32:91:c5:0a:0b:1a:f5:48:cf:fc:e4:93:7a:cc:85: 14:cf:0d:f2:9e:e1:8e:05:9d:9a:54:a3:1b:93:a3: d4:eb:f3:dc:4f:77:08:3e:49:52:ea:ef:b2:9a:09: 58:ce:10:69:fa:3c:0a:d7:fc:f3:ca:e1:c2:46:5e: 86:de:a7:52:f7:e3:ab:fb:66:62:56:e7:a5:44:a0: 54:cd:9b:9d:0c:77:55:95:5d:17:b7:46:6c:b0:2a: 39:49:0f:0f:32:f5:5b:d6:3e:07:13:db:a3:eb:8c: 9a:b0:44:ef:1b:20:0d:e5:57:d8:92:7f:8f:ec:22: 67:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:0C:53:77:26:0B:70:08:0F:6C:AF:6D:C7:64:09:83:89:0B:05:EC X509v3 Authority Key Identifier: keyid:30:9C:25:E7:B1:8F:F2:8A:60:B9:6B:25:57:2F:8A:9E:31:04:FE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:d5:9f:b0:18:b9:30:f5:75:56:93:d2:90:af:38:9f:1c:6e: 16:c4:fb:39:a0:9c:ca:19:16:90:b2:04:b7:3b:81:ed:0d:cb: b9:ab:3b:5f:01:e6:43:de:70:b2:44:a2:9a:f6:65:dc:8b:79: 4c:28:3a:86:e9:df:f6:3c:fa:f0:19:9b:96:38:e5:10:73:f2: 52:28:d2:80:ec:a2:2e:35:39:24:51:80:ca:bc:2c:d6:4f:08: 78:b9:2b:8b:b1:d9:27:79:bb:3c:92:55:a0:9a:ad:ba:43:ec: 55:60:ca:cf:01:94:63:10:71:50:38:b5:cc:25:00:e1:9f:1f: a8:08:3e:88:02:ab:04:64:96:e6:8c:c0:8c:15:f5:c1:40:94: bb:d1:55:32:e2:5a:13:c1:6b:7f:5e:59:7b:b5:27:35:dd:db: 09:c6:e5:ca:13:f9:7e:43:1a:44:28:22:38:40:c9:42:fc:df: 6c:41:cf:e7:94:bb:a1:ca:41:8a:e8:ee:f9:ab:6a:47:a1:95: eb:99:33:02:2e:3c:79:17:fc:11:a5:7b:79:51:e7:51:33:9c: f5:e4:d8:82:77:be:ff:eb:84:01:45:dc:ab:30:b7:cd:1f:a3: 38:fe:98:27:bb:b3:38:56:fc:50:04:13:90:b9:0a:fd:c1:51: ea:2f:67:04 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUNJTwUqqOIAs8gqhyB7u3qtxiDUkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA5QzI1RTdCMThGRjI4QTYwQjk2QjI1NTcyRjhBOUUz MTA0RkU3NjAeFw0yNTA2MDIwMjMyNDVaFw0yNTA2MDMwNTExNDVaMDMxMTAvBgNV BAMTKDhCMEM1Mzc3MjYwQjcwMDgwRjZDQUY2REM3NjQwOTgzODkwQjA1RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaDLzPry7PEMjxVFHcWDOzkeKB FiN3ocdtOTkmXerxj4JoPYFPWWUBaO4yIaR0bb/zUG3pW4O1yIN3zO0MEi8Kn5I4 VxQFY6AVSUXzmvkiU2wRLeGSSon8zurC8ZPBG3zYv/Rf+9N9yP/YG1Qq6/hrMmik wIhaJT2oUNEUn91ETIds3zqwmzKRxQoLGvVIz/zkk3rMhRTPDfKe4Y4FnZpUoxuT o9Tr89xPdwg+SVLq77KaCVjOEGn6PArX/PPK4cJGXobep1L346v7ZmJW56VEoFTN m50Md1WVXRe3RmywKjlJDw8y9VvWPgcT26PrjJqwRO8bIA3lV9iSf4/sImdNAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUiwxTdyYLcAgPbK9tx2QJg4kLBewwHwYDVR0j BBgwFoAUMJwl57GP8opguWslVy+KnjEE/nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1 Y2U3LzAvMzA5QzI1RTdCMThGRjI4QTYwQjk2QjI1NTcyRjhBOUUzMTA0RkU3Ni5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzMwOUMyNUU3QjE4RkYy OEE2MEI5NkIyNTU3MkY4QTlFMzEwNEZFNzYuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1Y2U3 LzAvMzA5QzI1RTdCMThGRjI4QTYwQjk2QjI1NTcyRjhBOUUzMTA0RkU3Ni5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAJPVn7AYuTD1dVaT0pCvOJ8cbhbE+zmgnMoZFpCyBLc7ge0Ny7mrO18B 5kPecLJEopr2ZdyLeUwoOobp3/Y8+vAZm5Y45RBz8lIo0oDsoi41OSRRgMq8LNZP CHi5K4ux2Sd5uzySVaCarbpD7FVgys8BlGMQcVA4tcwlAOGfH6gIPogCqwRkluaM wIwV9cFAlLvRVTLiWhPBa39eWXu1JzXd2wnG5coT+X5DGkQoIjhAyUL832xBz+eU u6HKQYro7vmrakehleuZMwIuPHkX/BGle3lR51EznPXk2IJ3vv/rhAFF3Kswt80f ozj+mCe7szhW/FAEE5C5Cv3BUeovZwQ= -----END CERTIFICATE-----Generated at Mon Jun 2 16:48:43 2025 by rpki-client