$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.mft File: 8A89E0DB89531F723E42C7509282CC5496FEA4F0.mft (raw, json) Hash identifier: 3VXb8IPENRbCYrA+ouiNulGnaZQFwVhiTmqiCM+grsQ= Subject key identifier: 17:BB:67:BB:44:42:B7:9D:C8:06:7D:97:8E:DF:3C:A9:78:0E:D8:B8 Authority key identifier: 8A:89:E0:DB:89:53:1F:72:3E:42:C7:50:92:82:CC:54:96:FE:A4:F0 Certificate issuer: /CN=8A89E0DB89531F723E42C7509282CC5496FEA4F0 Certificate serial: 0E5BBBF2B6E25D7ED22CF252025F5A4475062436 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8A89E0DB89531F723E42C7509282CC5496FEA4F0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.mft Manifest number: 02B6 Signing time: Fri 06 Jun 2025 21:27:31 +0000 Manifest this update: Fri 06 Jun 2025 21:22:31 +0000 Manifest next update: Sat 07 Jun 2025 22:53:31 +0000 Files and hashes: 1: 326130353a646663313a633432333a3a2f34382d3438203d3e203437343936.roa (hash: BjWFZsrWASwd+CG/7hUBbq3vJkOhy5Z+SMjVBI4v+js=) 2: 8A89E0DB89531F723E42C7509282CC5496FEA4F0.crl (hash: HK7+h4R64H8Sfvste4pSAYOph1+KrBv5nzTV9thdCes=) 3: 326130353a646663313a633432653a3a2f34382d3438203d3e203437343936.roa (hash: yY/lRzl5gnRHqPDCI9XTmjkP/VSTS3sUgvtQRFCF6ig=) 4: 326130353a646663313a633432313a3a2f34382d3438203d3e203437343936.roa (hash: WZdnhsf1tbcSVNSrkJIR05RIfLe917aOhwfRnEAl4rg=) 5: 326130353a646663313a633432643a3a2f34382d3438203d3e203437343936.roa (hash: amyqCToWlkncShbPoQ2pFwGosgXS9k+x9sD0wwW0zJ8=) 6: 326130353a646663313a633432303a3a2f34382d3438203d3e203437343936.roa (hash: lWYjZQ5Ld8qxedFHjd1SYJ3EjXIlTQ1TnJV4koI7Bc0=) 7: 326130353a646663313a633431303a3a2f34342d3434203d3e203437343936.roa (hash: wwbAN7C3Thqz1WBUXadPwW0dibUsOJrY61KWQ1gCNxc=) 8: 326130353a646663313a633433303a3a2f34382d3438203d3e203437343936.roa (hash: IJr5CBZ4iO0h6IlIR+qADhOt/NMtQJ1etkNPbekFk9g=) 9: 326130353a646663313a633432633a3a2f34382d3438203d3e203437343936.roa (hash: xyVeniR3LS2bZlUijGrUW75mDjHK8Jghu3MvJXI2srY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.crl rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8A89E0DB89531F723E42C7509282CC5496FEA4F0.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 12:23:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:5b:bb:f2:b6:e2:5d:7e:d2:2c:f2:52:02:5f:5a:44:75:06:24:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A89E0DB89531F723E42C7509282CC5496FEA4F0 Validity Not Before: Jun 6 21:22:31 2025 GMT Not After : Jun 7 22:53:31 2025 GMT Subject: CN=17BB67BB4442B79DC8067D978EDF3CA9780ED8B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:9f:25:06:4f:02:98:54:b5:1f:55:89:f7:01: 45:dd:01:a0:c3:39:84:08:c1:ae:50:5a:19:6f:44: ce:6b:d3:23:79:1a:d8:76:a2:1b:69:91:29:a2:5f: 1e:1a:79:df:e6:84:51:4c:3a:be:87:c6:2e:eb:53: 8e:c0:b1:6e:5d:9c:60:c3:ea:50:88:f5:1f:98:e3: 52:28:fa:2a:95:be:f3:39:24:5e:ef:3b:c7:be:2f: 84:e9:f3:3c:75:15:13:e3:06:a1:f4:ec:9c:1e:7b: 55:b7:c7:6c:5d:ab:f1:a4:59:ae:fb:6b:03:24:e2: 04:a9:21:82:d9:de:eb:25:5d:9a:87:02:8d:91:c7: 09:a3:b2:39:22:1e:7f:96:2b:0f:29:60:22:0a:be: 33:8d:70:3e:b4:c4:2e:6c:01:ad:69:91:8e:59:d5: 4a:a6:b2:43:1e:ef:79:53:45:be:ce:bc:18:5d:8d: db:ae:10:cc:e6:92:2a:24:02:f7:19:ce:aa:d6:0e: 99:6f:2b:65:1e:e5:33:88:8e:49:aa:31:15:3e:f8: 80:42:73:bd:f9:73:b6:ed:3c:ff:91:c1:c1:d6:1d: 56:2b:7b:7b:fa:20:59:f3:35:b8:f5:7c:b8:37:bb: ca:f0:5f:1b:80:51:ae:da:58:d2:00:a4:96:56:de: d5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:BB:67:BB:44:42:B7:9D:C8:06:7D:97:8E:DF:3C:A9:78:0E:D8:B8 X509v3 Authority Key Identifier: keyid:8A:89:E0:DB:89:53:1F:72:3E:42:C7:50:92:82:CC:54:96:FE:A4:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8A89E0DB89531F723E42C7509282CC5496FEA4F0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:ee:d6:cc:23:3d:5a:03:1e:03:04:2b:8d:34:08:04:36:4a: aa:ed:2f:04:ad:86:94:89:be:d7:fc:22:b0:32:68:a7:20:5d: 3b:0e:06:65:b3:67:b4:73:25:9c:68:14:97:64:56:ec:28:79: 70:3b:fb:17:a6:d9:1a:6a:a2:59:db:f2:d4:da:6b:1e:9e:c4: 39:cc:ea:61:c9:4e:d9:27:c3:31:56:ca:8b:74:f3:a7:31:c2: aa:f7:b2:ef:2d:6f:16:64:0f:7c:b1:4f:60:08:20:6a:5f:de: 9b:ca:92:0b:ce:60:be:48:0b:50:c5:75:52:15:7a:51:e7:e1: ca:0f:f1:df:9b:2c:7f:c9:be:8c:d2:7a:47:e6:84:a3:29:ca: 43:ac:91:9d:f9:03:3a:43:a5:a9:66:d3:c7:0b:20:d5:cf:67: 77:50:2c:e6:ae:cb:13:41:16:3d:14:ba:a8:10:17:4b:34:e3: c4:03:77:2b:f9:08:c7:f3:84:b2:9d:06:9a:31:3e:fc:ce:93: 75:a5:c0:bf:20:f2:d7:22:89:bd:7d:6d:5f:af:46:2b:44:c2: 12:41:43:7b:d7:3b:bd:fc:49:31:26:33:3c:c9:0b:07:31:cd: c1:19:04:86:ea:2d:86:04:e6:e9:31:2e:df:86:e5:04:7a:20: e1:03:60:1e -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUDlu78rbiXX7SLPJSAl9aRHUGJDYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE4OUUwREI4OTUzMUY3MjNFNDJDNzUwOTI4MkNDNTQ5 NkZFQTRGMDAeFw0yNTA2MDYyMTIyMzFaFw0yNTA2MDcyMjUzMzFaMDMxMTAvBgNV BAMTKDE3QkI2N0JCNDQ0MkI3OURDODA2N0Q5NzhFREYzQ0E5NzgwRUQ4QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRnyUGTwKYVLUfVYn3AUXdAaDD OYQIwa5QWhlvRM5r0yN5Gth2ohtpkSmiXx4aed/mhFFMOr6Hxi7rU47AsW5dnGDD 6lCI9R+Y41Io+iqVvvM5JF7vO8e+L4Tp8zx1FRPjBqH07Jwee1W3x2xdq/GkWa77 awMk4gSpIYLZ3uslXZqHAo2RxwmjsjkiHn+WKw8pYCIKvjONcD60xC5sAa1pkY5Z 1UqmskMe73lTRb7OvBhdjduuEMzmkiokAvcZzqrWDplvK2Ue5TOIjkmqMRU++IBC c735c7btPP+RwcHWHVYre3v6IFnzNbj1fLg3u8rwXxuAUa7aWNIApJZW3tWDAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUF7tnu0RCt53IBn2Xjt88qXgO2LgwHwYDVR0j BBgwFoAUiong24lTH3I+QsdQkoLMVJb+pPAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2RhNGQ4YjQtYTE1Ny00NjM0LWFiMTgtM2VmOWQwOTgy MzUyLzIvOEE4OUUwREI4OTUzMUY3MjNFNDJDNzUwOTI4MkNDNTQ5NkZFQTRGMC5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzhBODlFMERCODk1MzFG NzIzRTQyQzc1MDkyODJDQzU0OTZGRUE0RjAuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvM2RhNGQ4YjQtYTE1Ny00NjM0LWFiMTgtM2VmOWQwOTgyMzUy LzIvOEE4OUUwREI4OTUzMUY3MjNFNDJDNzUwOTI4MkNDNTQ5NkZFQTRGMC5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAJzu1swjPVoDHgMEK400CAQ2SqrtLwSthpSJvtf8IrAyaKcgXTsOBmWz Z7RzJZxoFJdkVuwoeXA7+xem2Rpqolnb8tTaax6exDnM6mHJTtknwzFWyot086cx wqr3su8tbxZkD3yxT2AIIGpf3pvKkgvOYL5IC1DFdVIVelHn4coP8d+bLH/JvozS ekfmhKMpykOskZ35AzpDpalm08cLINXPZ3dQLOauyxNBFj0UuqgQF0s048QDdyv5 CMfzhLKdBpoxPvzOk3WlwL8g8tciib19bV+vRitEwhJBQ3vXO738STEmMzzJCwcx zcEZBIbqLYYE5ukxLt+G5QR6IOEDYB4= -----END CERTIFICATE-----Generated at Sat Jun 7 00:40:32 2025 by rpki-client