$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.mft File: 8A89E0DB89531F723E42C7509282CC5496FEA4F0.mft (raw, json) Hash identifier: O/kRIexC9eTlgMVbqDasowbrlvyIZgeF3m7zgI6xu+0= Subject key identifier: 6E:A4:C3:7B:82:26:D1:4E:A7:4E:18:2A:91:26:C5:5D:D0:42:71:86 Authority key identifier: 8A:89:E0:DB:89:53:1F:72:3E:42:C7:50:92:82:CC:54:96:FE:A4:F0 Certificate issuer: /CN=8A89E0DB89531F723E42C7509282CC5496FEA4F0 Certificate serial: 6CEB756078FC34FDBEBE850FA1481E77C13A33BB Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8A89E0DB89531F723E42C7509282CC5496FEA4F0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.mft Manifest number: 0222 Signing time: Sun 16 Feb 2025 03:24:44 +0000 Manifest this update: Sun 16 Feb 2025 03:19:44 +0000 Manifest next update: Mon 17 Feb 2025 07:19:44 +0000 Files and hashes: 1: 326130353a646663313a633433303a3a2f34382d3438203d3e203437343936.roa (hash: IJr5CBZ4iO0h6IlIR+qADhOt/NMtQJ1etkNPbekFk9g=) 2: 8A89E0DB89531F723E42C7509282CC5496FEA4F0.crl (hash: yLdJ6ppYe4Gf0npdYxL5J3fI0+ZhWvC9Kysh5IDJPp4=) 3: 326130353a646663313a633432303a3a2f34382d3438203d3e203437343936.roa (hash: lWYjZQ5Ld8qxedFHjd1SYJ3EjXIlTQ1TnJV4koI7Bc0=) 4: 326130353a646663313a633432313a3a2f34382d3438203d3e203437343936.roa (hash: WZdnhsf1tbcSVNSrkJIR05RIfLe917aOhwfRnEAl4rg=) 5: 326130353a646663313a633431303a3a2f34342d3434203d3e203437343936.roa (hash: wwbAN7C3Thqz1WBUXadPwW0dibUsOJrY61KWQ1gCNxc=) 6: 326130353a646663313a633432333a3a2f34382d3438203d3e203437343936.roa (hash: BjWFZsrWASwd+CG/7hUBbq3vJkOhy5Z+SMjVBI4v+js=) 7: 326130353a646663313a633432633a3a2f34382d3438203d3e203437343936.roa (hash: xyVeniR3LS2bZlUijGrUW75mDjHK8Jghu3MvJXI2srY=) 8: 326130353a646663313a633432643a3a2f34382d3438203d3e203437343936.roa (hash: amyqCToWlkncShbPoQ2pFwGosgXS9k+x9sD0wwW0zJ8=) 9: 326130353a646663313a633432653a3a2f34382d3438203d3e203437343936.roa (hash: yY/lRzl5gnRHqPDCI9XTmjkP/VSTS3sUgvtQRFCF6ig=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.crl rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8A89E0DB89531F723E42C7509282CC5496FEA4F0.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 17 Feb 2025 05:00:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:eb:75:60:78:fc:34:fd:be:be:85:0f:a1:48:1e:77:c1:3a:33:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A89E0DB89531F723E42C7509282CC5496FEA4F0 Validity Not Before: Feb 16 03:19:44 2025 GMT Not After : Feb 17 07:19:44 2025 GMT Subject: CN=6EA4C37B8226D14EA74E182A9126C55DD0427186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6a:f9:1e:ab:f8:ff:e4:98:7a:bc:92:da:64: 33:07:b9:2a:c0:21:82:5e:a3:bf:a4:2b:d2:21:5e: 98:47:7b:c6:e3:49:13:96:cc:8e:3f:c4:e5:05:e4: c1:f6:1f:6a:74:a4:15:40:c7:6d:54:6e:76:7a:a4: f8:00:25:12:5e:15:40:46:88:1b:d0:e0:dd:f0:f8: c7:d9:9b:fd:aa:2e:ae:89:00:07:12:fe:b8:ac:36: 13:2e:40:5f:c9:89:bd:43:cc:90:52:4c:2d:72:8e: 26:23:1f:53:3b:aa:2e:d2:3a:d6:55:9c:ee:a3:f6: d9:f0:48:bb:74:e8:4f:cd:a5:cc:6e:80:13:6a:50: f6:14:15:17:88:9a:e8:6f:15:21:3d:8b:46:cb:68: 92:72:b6:a9:6b:bb:39:08:43:c0:9a:e7:dd:e1:23: e0:bd:c5:23:2d:97:47:bd:61:ab:51:a7:2b:f6:03: e6:5c:54:f7:dc:2a:d5:2d:a9:76:30:4d:b0:56:58: 0f:44:b8:d1:d5:fa:c6:eb:9d:b9:be:e4:25:49:16: f2:7b:94:46:a8:c5:c9:df:ba:de:39:42:f0:2e:72: 8f:ca:59:25:1b:e1:3a:92:d3:da:2f:7c:db:42:fb: 2c:07:bd:87:1e:5a:f3:83:f2:a2:96:ee:1d:e6:db: b0:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:A4:C3:7B:82:26:D1:4E:A7:4E:18:2A:91:26:C5:5D:D0:42:71:86 X509v3 Authority Key Identifier: keyid:8A:89:E0:DB:89:53:1F:72:3E:42:C7:50:92:82:CC:54:96:FE:A4:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8A89E0DB89531F723E42C7509282CC5496FEA4F0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:7a:b0:dc:2f:72:7d:59:10:e1:33:8c:fe:f5:e0:08:7c:ad: 05:3e:df:31:85:f0:1a:ba:dc:7f:53:64:a8:d6:e5:a2:d2:41: a4:16:23:80:a0:d3:ef:60:b0:05:3a:f2:d0:d5:c4:57:9d:e0: f6:d0:4d:df:9b:61:42:10:ae:a7:c9:8d:4e:6f:1a:f2:17:13: a1:7b:e8:88:5e:b8:f6:1f:32:c6:7b:31:a2:af:51:b0:79:43: 85:68:a7:15:64:d6:b6:67:8c:1a:e6:73:10:ac:f5:23:d5:87: f0:04:cf:b8:ef:da:73:af:36:22:c4:bc:82:d1:37:9d:6e:1f: e8:3b:11:10:38:1c:e8:82:c0:9e:5a:66:b5:d3:d5:c6:a6:44: 42:46:d9:42:bf:7b:e2:71:f5:54:58:7c:3f:55:39:c4:10:e5: de:54:bb:a4:3a:b1:cf:91:b7:25:ab:d7:82:41:f8:7a:7a:1d: 92:12:6a:36:9d:18:e3:75:cc:80:3e:74:11:4b:7d:27:07:00: c3:cd:b1:eb:2a:11:bb:40:c3:c7:6c:41:b7:e1:b4:20:a8:d9: 84:24:0a:58:a6:ad:02:c4:9a:fb:ad:71:b6:81:49:77:c5:05: 88:83:b9:f1:4f:09:81:5c:00:02:08:62:4d:b3:ae:70:7d:7b: e4:d0:cc:37 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUbOt1YHj8NP2+voUPoUged8E6M7swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE4OUUwREI4OTUzMUY3MjNFNDJDNzUwOTI4MkNDNTQ5 NkZFQTRGMDAeFw0yNTAyMTYwMzE5NDRaFw0yNTAyMTcwNzE5NDRaMDMxMTAvBgNV BAMTKDZFQTRDMzdCODIyNkQxNEVBNzRFMTgyQTkxMjZDNTVERDA0MjcxODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFavkeq/j/5Jh6vJLaZDMHuSrA IYJeo7+kK9IhXphHe8bjSROWzI4/xOUF5MH2H2p0pBVAx21UbnZ6pPgAJRJeFUBG iBvQ4N3w+MfZm/2qLq6JAAcS/risNhMuQF/Jib1DzJBSTC1yjiYjH1M7qi7SOtZV nO6j9tnwSLt06E/NpcxugBNqUPYUFReImuhvFSE9i0bLaJJytqlruzkIQ8Ca593h I+C9xSMtl0e9YatRpyv2A+ZcVPfcKtUtqXYwTbBWWA9EuNHV+sbrnbm+5CVJFvJ7 lEaoxcnfut45QvAuco/KWSUb4TqS09ovfNtC+ywHvYceWvOD8qKW7h3m27B5AgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUbqTDe4Im0U6nThgqkSbFXdBCcYYwHwYDVR0j BBgwFoAUiong24lTH3I+QsdQkoLMVJb+pPAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2RhNGQ4YjQtYTE1Ny00NjM0LWFiMTgtM2VmOWQwOTgy MzUyLzIvOEE4OUUwREI4OTUzMUY3MjNFNDJDNzUwOTI4MkNDNTQ5NkZFQTRGMC5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzhBODlFMERCODk1MzFG NzIzRTQyQzc1MDkyODJDQzU0OTZGRUE0RjAuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvM2RhNGQ4YjQtYTE1Ny00NjM0LWFiMTgtM2VmOWQwOTgyMzUy LzIvOEE4OUUwREI4OTUzMUY3MjNFNDJDNzUwOTI4MkNDNTQ5NkZFQTRGMC5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBALR6sNwvcn1ZEOEzjP714Ah8rQU+3zGF8Bq63H9TZKjW5aLSQaQWI4Cg 0+9gsAU68tDVxFed4PbQTd+bYUIQrqfJjU5vGvIXE6F76IheuPYfMsZ7MaKvUbB5 Q4VopxVk1rZnjBrmcxCs9SPVh/AEz7jv2nOvNiLEvILRN51uH+g7ERA4HOiCwJ5a ZrXT1camREJG2UK/e+Jx9VRYfD9VOcQQ5d5Uu6Q6sc+RtyWr14JB+Hp6HZISajad GON1zIA+dBFLfScHAMPNsesqEbtAw8dsQbfhtCCo2YQkClimrQLEmvutcbaBSXfF BYiDufFPCYFcAAIIYk2zrnB9e+TQzDc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:09:20 2025 by rpki-client