$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.mft File: 8A89E0DB89531F723E42C7509282CC5496FEA4F0.mft (raw, json) Hash identifier: Tr8321zkCgnpxOSVq+n28MKfAnarLujpZbZAgWjt7Ek= Subject key identifier: 78:8C:89:EC:F0:A9:26:1C:9F:4F:D0:66:FF:92:43:57:5E:D1:1F:D0 Authority key identifier: 8A:89:E0:DB:89:53:1F:72:3E:42:C7:50:92:82:CC:54:96:FE:A4:F0 Certificate issuer: /CN=8A89E0DB89531F723E42C7509282CC5496FEA4F0 Certificate serial: 179D7102D2CEF0DC5B457738C8A2CDCC8FDDFACC Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8A89E0DB89531F723E42C7509282CC5496FEA4F0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.mft Manifest number: 0272 Signing time: Thu 17 Apr 2025 08:56:39 +0000 Manifest this update: Thu 17 Apr 2025 08:51:39 +0000 Manifest next update: Fri 18 Apr 2025 10:14:39 +0000 Files and hashes: 1: 326130353a646663313a633432313a3a2f34382d3438203d3e203437343936.roa (hash: WZdnhsf1tbcSVNSrkJIR05RIfLe917aOhwfRnEAl4rg=) 2: 326130353a646663313a633431303a3a2f34342d3434203d3e203437343936.roa (hash: wwbAN7C3Thqz1WBUXadPwW0dibUsOJrY61KWQ1gCNxc=) 3: 326130353a646663313a633433303a3a2f34382d3438203d3e203437343936.roa (hash: IJr5CBZ4iO0h6IlIR+qADhOt/NMtQJ1etkNPbekFk9g=) 4: 326130353a646663313a633432643a3a2f34382d3438203d3e203437343936.roa (hash: amyqCToWlkncShbPoQ2pFwGosgXS9k+x9sD0wwW0zJ8=) 5: 8A89E0DB89531F723E42C7509282CC5496FEA4F0.crl (hash: DHU4QJhCeEh9MTXO0VkgjZZteF7gKGF1s74Uqz0D89Y=) 6: 326130353a646663313a633432303a3a2f34382d3438203d3e203437343936.roa (hash: lWYjZQ5Ld8qxedFHjd1SYJ3EjXIlTQ1TnJV4koI7Bc0=) 7: 326130353a646663313a633432653a3a2f34382d3438203d3e203437343936.roa (hash: yY/lRzl5gnRHqPDCI9XTmjkP/VSTS3sUgvtQRFCF6ig=) 8: 326130353a646663313a633432333a3a2f34382d3438203d3e203437343936.roa (hash: BjWFZsrWASwd+CG/7hUBbq3vJkOhy5Z+SMjVBI4v+js=) 9: 326130353a646663313a633432633a3a2f34382d3438203d3e203437343936.roa (hash: xyVeniR3LS2bZlUijGrUW75mDjHK8Jghu3MvJXI2srY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.crl rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8A89E0DB89531F723E42C7509282CC5496FEA4F0.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 18 Apr 2025 10:14:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:9d:71:02:d2:ce:f0:dc:5b:45:77:38:c8:a2:cd:cc:8f:dd:fa:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A89E0DB89531F723E42C7509282CC5496FEA4F0 Validity Not Before: Apr 17 08:51:39 2025 GMT Not After : Apr 18 10:14:39 2025 GMT Subject: CN=788C89ECF0A9261C9F4FD066FF9243575ED11FD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f7:26:e3:d0:08:bc:ac:44:cc:f9:61:b5:9f: 80:b4:e5:95:f5:c1:1b:4e:1d:1b:6d:35:64:05:23: 97:2d:94:e2:e4:e8:ee:5d:11:84:f7:90:08:d6:08: 2d:da:b1:4a:af:57:e0:9e:1d:7b:74:a9:d4:6f:fd: 63:cd:f8:d6:99:a8:ef:7f:f4:83:b5:b1:ab:8d:83: a5:b5:17:f4:5a:de:78:50:9e:a3:38:73:cf:af:22: d3:e8:2c:6c:97:45:d8:5d:28:54:3a:89:16:8c:69: 76:50:22:5b:90:cf:9d:1e:f5:1d:3d:56:16:7c:1f: 67:5b:b9:ab:19:c4:87:92:39:18:79:1b:da:a6:4b: 16:11:ed:40:84:f7:d2:b6:57:27:22:f9:eb:50:37: 05:cd:9f:c9:be:bd:8f:e6:be:f2:a3:97:4a:56:7a: 87:b6:6f:46:b4:32:1a:f9:70:4d:c3:d8:2c:36:a5: c5:e2:df:c3:64:74:4d:2c:a0:16:aa:52:6a:3d:df: 45:b0:75:7b:5f:59:c6:8b:48:b6:f1:fb:05:cf:c5: bc:d6:d5:5a:4a:b0:e9:85:59:af:ee:bf:8f:c2:ea: 19:d9:dd:f7:4c:9e:98:ff:28:5d:b3:36:c7:bd:26: 2f:5a:74:46:0b:d3:90:d6:13:aa:49:de:f5:c9:e9: ce:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:8C:89:EC:F0:A9:26:1C:9F:4F:D0:66:FF:92:43:57:5E:D1:1F:D0 X509v3 Authority Key Identifier: keyid:8A:89:E0:DB:89:53:1F:72:3E:42:C7:50:92:82:CC:54:96:FE:A4:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8A89E0DB89531F723E42C7509282CC5496FEA4F0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:78:4a:47:7d:55:ee:69:14:5a:2d:bb:ce:bd:e4:f4:5e:37: a6:30:47:9c:9d:3b:35:ca:a1:fe:20:8b:e6:7f:2b:b0:2c:95: 6c:82:0a:15:18:6e:e5:50:b7:45:92:05:68:4f:58:2e:c8:af: 52:7d:45:9d:aa:8a:4b:e0:d6:cb:b7:b9:d3:9c:d4:58:c2:6c: 08:4e:c8:e3:c1:71:32:0d:40:5f:03:e6:5f:64:21:e1:46:fa: 86:61:1c:69:0c:05:2c:7f:2f:85:cc:e0:25:54:18:c0:63:d5: 8a:d6:d1:0a:8e:82:54:c0:29:eb:e0:58:0f:ad:23:4e:bb:f2: a9:7b:3a:c5:e4:df:c1:18:10:1a:d0:a8:cf:69:83:9a:76:8a: f0:ad:de:8b:4f:76:96:f3:2a:9d:47:a7:68:fd:b4:c5:8b:48: 49:7a:18:ed:c8:43:bb:0b:85:a2:c3:a0:2c:9a:d6:75:77:c0: 34:26:4e:21:95:a4:7c:e8:16:21:99:b1:ec:bd:de:e9:37:2c: ef:2d:2a:8d:c7:4a:0e:c0:f5:89:8e:8a:93:1d:37:84:fd:7f: 50:7a:91:80:d3:4f:46:ef:d3:15:0a:ac:55:f0:c8:f2:f3:f5: 9d:9b:3a:15:61:2e:9c:1a:be:2a:b3:b5:6c:84:10:c6:b4:dd: 0b:ff:f8:2c -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUF51xAtLO8NxbRXc4yKLNzI/d+swwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE4OUUwREI4OTUzMUY3MjNFNDJDNzUwOTI4MkNDNTQ5 NkZFQTRGMDAeFw0yNTA0MTcwODUxMzlaFw0yNTA0MTgxMDE0MzlaMDMxMTAvBgNV BAMTKDc4OEM4OUVDRjBBOTI2MUM5RjRGRDA2NkZGOTI0MzU3NUVEMTFGRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX9ybj0Ai8rETM+WG1n4C05ZX1 wRtOHRttNWQFI5ctlOLk6O5dEYT3kAjWCC3asUqvV+CeHXt0qdRv/WPN+NaZqO9/ 9IO1sauNg6W1F/Ra3nhQnqM4c8+vItPoLGyXRdhdKFQ6iRaMaXZQIluQz50e9R09 VhZ8H2dbuasZxIeSORh5G9qmSxYR7UCE99K2Vyci+etQNwXNn8m+vY/mvvKjl0pW eoe2b0a0Mhr5cE3D2Cw2pcXi38NkdE0soBaqUmo930WwdXtfWcaLSLbx+wXPxbzW 1VpKsOmFWa/uv4/C6hnZ3fdMnpj/KF2zNse9Ji9adEYL05DWE6pJ3vXJ6c4nAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUeIyJ7PCpJhyfT9Bm/5JDV17RH9AwHwYDVR0j BBgwFoAUiong24lTH3I+QsdQkoLMVJb+pPAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2RhNGQ4YjQtYTE1Ny00NjM0LWFiMTgtM2VmOWQwOTgy MzUyLzIvOEE4OUUwREI4OTUzMUY3MjNFNDJDNzUwOTI4MkNDNTQ5NkZFQTRGMC5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzhBODlFMERCODk1MzFG NzIzRTQyQzc1MDkyODJDQzU0OTZGRUE0RjAuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvM2RhNGQ4YjQtYTE1Ny00NjM0LWFiMTgtM2VmOWQwOTgyMzUy LzIvOEE4OUUwREI4OTUzMUY3MjNFNDJDNzUwOTI4MkNDNTQ5NkZFQTRGMC5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAM94Skd9Ve5pFFotu8695PReN6YwR5ydOzXKof4gi+Z/K7AslWyCChUY buVQt0WSBWhPWC7Ir1J9RZ2qikvg1su3udOc1FjCbAhOyOPBcTINQF8D5l9kIeFG +oZhHGkMBSx/L4XM4CVUGMBj1YrW0QqOglTAKevgWA+tI0678ql7OsXk38EYEBrQ qM9pg5p2ivCt3otPdpbzKp1Hp2j9tMWLSEl6GO3IQ7sLhaLDoCya1nV3wDQmTiGV pHzoFiGZsey93uk3LO8tKo3HSg7A9YmOipMdN4T9f1B6kYDTT0bv0xUKrFXwyPLz 9Z2bOhVhLpwaviqztWyEEMa03Qv/+Cw= -----END CERTIFICATE-----Generated at Fri Apr 18 00:34:41 2025 by rpki-client