$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft File: 4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft (raw, json) Hash identifier: VfJgVM++CSOIKFXpf6c5RERuuNRRV61XXB7M1e6yfqw= Subject key identifier: 5B:0D:67:10:68:63:E3:F1:92:E9:9C:8C:D3:E2:97:64:E3:25:3A:AA Authority key identifier: 4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57 Certificate issuer: /CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057 Certificate serial: 0DDD6549EAAEABB2F9778F7E983D46BF923BE6CC Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft Manifest number: 03 Signing time: Sat 05 Jul 2025 05:09:07 +0000 Manifest this update: Sat 05 Jul 2025 05:04:07 +0000 Manifest next update: Sun 06 Jul 2025 05:21:07 +0000 Files and hashes: 1: 326130613a363034303a623166313a3a2f34382d3438203d3e20323030363736.roa (hash: jmju8VqIF7uHPknsXmKVCF/NlSPLUXdtHx+4q+t6HvI=) 2: 326130613a363034303a623166333a3a2f34382d3438203d3e203530373535.roa (hash: zj+PtOUjRL+jh8fX/z3gQawz9pZ6f2aTfcfOK+OABQw=) 3: 326130613a363034303a623166343a3a2f34382d3438203d3e20323030363736.roa (hash: 8vNlACv4VljcfTfQph4BWYbiB6JxXxu9u3pkSEnSFS8=) 4: 326130613a363034303a623166353a3a2f34382d3438203d3e20323030363736.roa (hash: evMMfqo4Ez8yHDdFKOgCCAQkkBtJLTT2mhkV7j/a8vQ=) 5: 326130613a363034303a656430303a3a2f34302d3430203d3e2030.roa (hash: uqRsJY7KhhwwPaijQCvC3gE+TqC4+OLuBx54eDmXu1Q=) 6: 326130613a363034303a623166663a3a2f34382d3438203d3e2030.roa (hash: sgKT96rKThQB6ppVhmCDbggp5qDvA2cp3RmFQMzSxHo=) 7: 326130613a363034303a623166303a3a2f34382d3438203d3e20323030363736.roa (hash: f56ZeNhzC2SfQF3WtfvHaAXxQIIVMtYJhNScjVogZ9M=) 8: 326130613a363034303a623166373a3a2f34382d3438203d3e203530373535.roa (hash: q63trgvlirS+Vgtt9rQwfx5g58dhjqx1zfXsQI8nfBQ=) 9: 326130613a363034303a623166383a3a2f34382d3438203d3e203530373535.roa (hash: NCGL0xwyR9g2r6A71GgXDrp+Nhm2k3T8HoQFr0k0das=) 10: 326130613a363034303a623166333a3a2f34382d3438203d3e20323030363736.roa (hash: 16vtCR02Wpx8fBrNg3BBjazTebmU9P6zPt+x/DW89rE=) 11: 326130613a363034303a623166363a3a2f34382d3438203d3e203530373535.roa (hash: R34yyXLS2JN3du0sWYjJzaZCEqLgwBOyYDGo+BSfbs4=) 12: 4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl (hash: ZdCu/sh9HFIukBWvu+SmPDT+jhBCAPus9SLiiZmL+VA=) 13: 326130613a363034303a623166323a3a2f34382d3438203d3e20323030363736.roa (hash: 9V8f+kjKeAUUM95gFyLo820Chs0Y7IHMYFLg0AJNvf4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 02:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:dd:65:49:ea:ae:ab:b2:f9:77:8f:7e:98:3d:46:bf:92:3b:e6:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057 Validity Not Before: Jul 5 05:04:07 2025 GMT Not After : Jul 6 05:21:07 2025 GMT Subject: CN=5B0D67106863E3F192E99C8CD3E29764E3253AAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c0:18:6a:ea:f7:b3:5e:c1:7b:b6:a2:0f:e5: 32:a9:43:ab:2d:a8:1d:e4:98:06:1b:08:7a:06:42: d3:c9:ea:6d:a8:52:c6:af:55:ad:93:23:73:e0:fb: f7:7c:e0:89:93:ed:77:c3:d0:d0:4e:04:89:c4:c6: 04:64:f2:b7:0a:c2:60:8e:70:f3:5f:55:86:98:dc: 9c:11:71:84:f3:2b:24:c1:2e:51:a3:ca:89:e9:3e: 0d:35:1e:8b:f6:7a:7c:86:d5:ae:65:98:7b:d2:c0: b2:d0:3e:cc:2c:e1:4c:19:cc:b4:1d:60:76:da:49: f4:af:d0:d0:50:cf:77:e4:31:b0:5a:c1:c7:23:c5: 18:e5:06:35:5d:6f:4b:f8:f7:5f:1a:b9:d4:42:76: d3:af:cf:a2:91:ca:1d:a5:30:8a:88:28:15:65:57: 9b:e1:84:e8:15:1f:c2:a2:3e:de:46:25:23:c9:7a: f7:86:80:0c:56:0b:fd:f3:04:26:e8:ac:4f:19:fd: 9a:82:50:38:9d:44:2a:4f:69:20:b5:2c:78:72:11: 0b:12:2e:c8:67:0e:51:a0:f4:0b:51:9b:e2:cd:6a: 13:a6:b4:f3:ae:cd:ba:23:1f:e5:ea:7a:21:ca:8f: 44:da:5f:c5:ec:85:66:87:46:3a:01:17:d1:9c:e6: 38:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:0D:67:10:68:63:E3:F1:92:E9:9C:8C:D3:E2:97:64:E3:25:3A:AA X509v3 Authority Key Identifier: keyid:4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:b5:61:ff:84:a4:9d:5b:8a:63:27:1b:78:25:c6:f1:e1:46: 7e:46:17:9d:8d:37:f6:d9:17:ed:8d:ac:b4:c3:4f:1e:45:bf: 02:bb:fa:79:c4:7f:9d:cd:43:53:c0:2e:a9:fe:0a:e9:29:29: 13:e2:f7:91:e5:21:0e:e2:1a:8f:2f:0c:e5:24:1f:b0:57:cf: a0:c1:47:10:98:cd:61:2b:8f:5b:02:5c:52:1b:3c:f6:53:94: c5:ca:2b:58:35:94:41:78:fb:26:90:32:60:af:f4:6e:c2:2e: 04:ee:d2:79:bd:33:5c:9c:55:19:ac:9e:b8:40:ca:09:d6:ef: d9:32:6b:81:01:85:3b:98:c7:6a:4e:7b:ae:85:9d:65:4b:ea: c2:6e:d2:45:37:5e:91:cb:6c:d1:e0:13:28:9b:b6:12:05:5b: b7:4d:ef:16:41:f6:01:9c:bc:26:47:92:36:4e:e9:9d:1b:00: 4a:b4:ef:eb:4a:c5:db:46:1f:a5:3d:ac:b7:79:22:fd:e8:38: f9:32:e0:d0:8d:9c:88:6b:a5:3e:d1:25:83:5d:b0:ae:59:78: 55:75:ee:e6:79:b8:f1:18:f0:1c:5b:ad:66:4a:a8:b7:8b:d1: 6c:b4:de:3f:6b:83:67:a1:b1:4b:32:e5:18:84:2e:ba:dc:22: e3:89:80:46 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUDd1lSequq7L5d49+mD1Gv5I75swwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZEQzU3MUE1Q0RBMTM5NThCQ0U0NzVGMEU1RDkxMDFE QjgxMjA1NzAeFw0yNTA3MDUwNTA0MDdaFw0yNTA3MDYwNTIxMDdaMDMxMTAvBgNV BAMTKDVCMEQ2NzEwNjg2M0UzRjE5MkU5OUM4Q0QzRTI5NzY0RTMyNTNBQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOwBhq6vezXsF7tqIP5TKpQ6st qB3kmAYbCHoGQtPJ6m2oUsavVa2TI3Pg+/d84ImT7XfD0NBOBInExgRk8rcKwmCO cPNfVYaY3JwRcYTzKyTBLlGjyonpPg01Hov2enyG1a5lmHvSwLLQPsws4UwZzLQd YHbaSfSv0NBQz3fkMbBawccjxRjlBjVdb0v4918audRCdtOvz6KRyh2lMIqIKBVl V5vhhOgVH8KiPt5GJSPJeveGgAxWC/3zBCborE8Z/ZqCUDidRCpPaSC1LHhyEQsS LshnDlGg9AtRm+LNahOmtPOuzbojH+XqeiHKj0TaX8XshWaHRjoBF9Gc5jhxAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUWw1nEGhj4/GS6ZyM0+KXZOMlOqowHwYDVR0j BBgwFoAUT9xXGlzaE5WLzkdfDl2RAduBIFcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1 Y2U3LzMvNEZEQzU3MUE1Q0RBMTM5NThCQ0U0NzVGMEU1RDkxMDFEQjgxMjA1Ny5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzRGREM1NzFBNUNEQTEz OTU4QkNFNDc1RjBFNUQ5MTAxREI4MTIwNTcuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1Y2U3 LzMvNEZEQzU3MUE1Q0RBMTM5NThCQ0U0NzVGMEU1RDkxMDFEQjgxMjA1Ny5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBACW1Yf+EpJ1bimMnG3glxvHhRn5GF52NN/bZF+2NrLTDTx5FvwK7+nnE f53NQ1PALqn+CukpKRPi95HlIQ7iGo8vDOUkH7BXz6DBRxCYzWErj1sCXFIbPPZT lMXKK1g1lEF4+yaQMmCv9G7CLgTu0nm9M1ycVRmsnrhAygnW79kya4EBhTuYx2pO e66FnWVL6sJu0kU3XpHLbNHgEyibthIFW7dN7xZB9gGcvCZHkjZO6Z0bAEq07+tK xdtGH6U9rLd5Iv3oOPky4NCNnIhrpT7RJYNdsK5ZeFV17uZ5uPEY8BxbrWZKqLeL 0Wy03j9rg2ehsUsy5RiELrrcIuOJgEY= -----END CERTIFICATE-----Generated at Sat Jul 5 08:42:14 2025 by rpki-client