$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.mft File: D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.mft (raw, json) Hash identifier: Nsh4yzpFtSWjiSTmlOUOcaJMv9i9SKZevPWiyOB72q8= Subject key identifier: 85:92:B3:30:C6:AE:4C:62:72:29:EB:7B:53:48:01:F5:6D:F7:F5:18 Authority key identifier: D7:AC:0B:FB:DA:15:A7:F2:40:A1:28:3F:56:49:19:4C:E8:BB:B8:01 Certificate issuer: /CN=D7AC0BFBDA15A7F240A1283F5649194CE8BBB801 Certificate serial: 4FD5B34DE43363C35EB4392070360561EA232A7B Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.mft Manifest number: 02 Signing time: Fri 04 Jul 2025 19:50:16 +0000 Manifest this update: Fri 04 Jul 2025 19:45:16 +0000 Manifest next update: Sat 05 Jul 2025 22:56:16 +0000 Files and hashes: 1: D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.crl (hash: B77FHUJ8I4CsTQW6gJU8T2Q19F60++79iN4Ymvvt21g=) 2: 326130353a646663313a633432643a3a2f34382d3438203d3e203437343936.roa (hash: 4lliDoKad0QWiI8QFd6IuWpcnQIUMJu5VW5vCep/nzY=) 3: 326130353a646663313a633432303a3a2f34382d3438203d3e203437343936.roa (hash: pxkwC1tXh5AA3dY0ImOI+evo8PccYn8siWbTpsnS3+U=) 4: 326130353a646663313a633432653a3a2f34382d3438203d3e203437343936.roa (hash: EPhN/IdQdctHEgcI5mRqnnjYfzJlSrsw3WqDekvn86Y=) 5: 326130353a646663313a633433303a3a2f34382d3438203d3e203437343936.roa (hash: CWOxtutFW8hhUOi9VObNEvn/pGQ0cmbzWj3A/jlfZ7k=) 6: 326130353a646663313a633432333a3a2f34382d3438203d3e203437343936.roa (hash: b1Tp3urffazrHFC2uNuqtecL+ZwX7JySZaJd8ifcpCw=) 7: 326130353a646663313a633432633a3a2f34382d3438203d3e203437343936.roa (hash: SuaWG0h25mSOkF6TUnfvTVFuLybBa5x6nHfCETqFdvg=) 8: 326130353a646663313a633432313a3a2f34382d3438203d3e203437343936.roa (hash: Akh6Hk6S0OH2Z77HSUXUpo9sndUP6ZpVYbaZ0C+pMkU=) 9: 326130353a646663313a633431303a3a2f34342d3434203d3e203437343936.roa (hash: Sug13/bOHzR/z7k2MN1/PwM1kjEU9a8FYYmcJgI2acw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.crl rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 22:56:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:d5:b3:4d:e4:33:63:c3:5e:b4:39:20:70:36:05:61:ea:23:2a:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7AC0BFBDA15A7F240A1283F5649194CE8BBB801 Validity Not Before: Jul 4 19:45:16 2025 GMT Not After : Jul 5 22:56:16 2025 GMT Subject: CN=8592B330C6AE4C627229EB7B534801F56DF7F518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:76:28:4b:5a:8c:5c:c8:81:5d:c4:e8:38:4a: 8b:37:f0:00:ca:7c:66:fb:19:65:f9:73:9d:7c:00: 57:e6:23:cc:7f:45:f1:43:9a:3a:52:92:ec:30:70: 71:91:35:94:d5:70:0e:90:ee:77:5b:29:92:76:ac: be:b2:e1:94:cc:76:13:ae:68:d8:d6:2f:97:5e:68: a6:a6:01:db:25:98:50:ac:f7:b2:1e:cf:09:f6:be: 67:b3:20:9f:97:87:da:a0:ce:b4:0b:0f:83:f9:eb: b3:ee:fb:1a:6d:ea:fd:75:9c:ea:e3:da:0f:25:83: 71:9e:96:d2:1e:07:dc:3b:1e:4d:b3:2d:df:91:68: 99:ed:89:47:3c:56:80:72:99:95:c1:90:fd:12:66: 99:53:2d:c8:4c:d0:3d:7b:a2:a2:cf:af:c2:fb:18: ed:e5:cd:5a:72:11:b3:2d:25:f4:7b:5c:04:5a:1d: 84:3a:af:d6:b2:fc:1b:38:2d:f5:f0:ba:40:6b:da: d4:a5:ad:67:4c:af:02:13:9c:89:81:ac:44:af:9c: f3:e8:5f:a9:04:f2:93:b3:94:b6:07:8a:9b:7c:21: 76:0f:45:5d:a1:29:51:f4:3c:99:01:f3:84:75:e5: de:31:55:10:d8:20:8a:9a:56:3e:cd:8a:f4:c4:ca: 42:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:92:B3:30:C6:AE:4C:62:72:29:EB:7B:53:48:01:F5:6D:F7:F5:18 X509v3 Authority Key Identifier: keyid:D7:AC:0B:FB:DA:15:A7:F2:40:A1:28:3F:56:49:19:4C:E8:BB:B8:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:72:09:94:0e:05:b1:0d:5f:d8:9b:7d:bb:27:c7:4c:3e:fb: 7e:45:26:da:5c:03:22:bd:66:59:c6:4a:7c:3e:96:a0:38:f8: f1:f2:cb:f8:92:fe:6f:b5:e5:a2:f4:1a:ee:8f:c9:6d:b9:02: 91:2a:63:ed:30:7c:63:25:79:2c:b5:27:cf:2d:aa:b8:22:d8: 14:99:38:c7:ca:5c:05:8e:49:6d:45:43:de:c0:a5:d6:13:78: a9:4f:4a:98:3e:e2:d1:72:e8:78:73:55:04:b6:32:52:b4:0c: 62:d7:da:c6:6b:cc:d5:be:b7:00:72:53:3e:bb:f5:75:cb:b8: 42:dd:f3:39:61:87:9a:da:a1:c2:3e:aa:ca:dd:b5:bb:4f:ef: 07:9a:b9:38:dd:ec:7b:93:cd:0b:a6:6d:19:09:21:90:d1:e8: 2d:a9:fa:92:39:f6:37:8b:e9:19:9e:41:a5:cd:50:60:99:03: fa:c8:50:1b:82:a6:b5:e5:d6:2b:94:12:fb:19:a8:23:f0:1c: 4c:16:4e:dd:8d:52:9e:23:88:4c:59:c2:74:d7:02:a3:e6:a7: 5d:d7:e7:47:6d:d1:d0:e3:39:ae:b6:60:14:db:07:81:56:02: 78:ee:65:dc:d3:03:5e:48:ba:09:7a:f3:65:c7:39:95:52:51: b0:af:f2:ef -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUT9WzTeQzY8NetDkgcDYFYeojKnswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdBQzBCRkJEQTE1QTdGMjQwQTEyODNGNTY0OTE5NENF OEJCQjgwMTAeFw0yNTA3MDQxOTQ1MTZaFw0yNTA3MDUyMjU2MTZaMDMxMTAvBgNV BAMTKDg1OTJCMzMwQzZBRTRDNjI3MjI5RUI3QjUzNDgwMUY1NkRGN0Y1MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOdihLWoxcyIFdxOg4Sos38ADK fGb7GWX5c518AFfmI8x/RfFDmjpSkuwwcHGRNZTVcA6Q7ndbKZJ2rL6y4ZTMdhOu aNjWL5deaKamAdslmFCs97Iezwn2vmezIJ+Xh9qgzrQLD4P567Pu+xpt6v11nOrj 2g8lg3GeltIeB9w7Hk2zLd+RaJntiUc8VoBymZXBkP0SZplTLchM0D17oqLPr8L7 GO3lzVpyEbMtJfR7XARaHYQ6r9ay/Bs4LfXwukBr2tSlrWdMrwITnImBrESvnPPo X6kE8pOzlLYHipt8IXYPRV2hKVH0PJkB84R15d4xVRDYIIqaVj7NivTEykLtAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUhZKzMMauTGJyKet7U0gB9W339RgwHwYDVR0j BBgwFoAU16wL+9oVp/JAoSg/VkkZTOi7uAEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2RhNGQ4YjQtYTE1Ny00NjM0LWFiMTgtM2VmOWQwOTgy MzUyLzQvRDdBQzBCRkJEQTE1QTdGMjQwQTEyODNGNTY0OTE5NENFOEJCQjgwMS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0Q3QUMwQkZCREExNUE3 RjI0MEExMjgzRjU2NDkxOTRDRThCQkI4MDEuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvM2RhNGQ4YjQtYTE1Ny00NjM0LWFiMTgtM2VmOWQwOTgyMzUy LzQvRDdBQzBCRkJEQTE1QTdGMjQwQTEyODNGNTY0OTE5NENFOEJCQjgwMS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAF9yCZQOBbENX9ibfbsnx0w++35FJtpcAyK9ZlnGSnw+lqA4+PHyy/iS /m+15aL0Gu6PyW25ApEqY+0wfGMleSy1J88tqrgi2BSZOMfKXAWOSW1FQ97ApdYT eKlPSpg+4tFy6HhzVQS2MlK0DGLX2sZrzNW+twByUz679XXLuELd8zlhh5raocI+ qsrdtbtP7weauTjd7HuTzQumbRkJIZDR6C2p+pI59jeL6RmeQaXNUGCZA/rIUBuC prXl1iuUEvsZqCPwHEwWTt2NUp4jiExZwnTXAqPmp13X50dt0dDjOa62YBTbB4FW AnjuZdzTA15Iugl682XHOZVSUbCv8u8= -----END CERTIFICATE-----Generated at Sat Jul 5 09:02:18 2025 by rpki-client