$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft File: B729F0C7BF295C6844FD328B324A1ED8598032F9.mft (raw, json) Hash identifier: aMF2AC83lCH9x7iA3QHzPJwPWOeVxIk8jfDlasFtS6k= Subject key identifier: 8F:EB:E0:97:C3:CA:84:C3:CF:D0:D2:7A:43:90:A9:DA:F7:CE:1B:8A Authority key identifier: B7:29:F0:C7:BF:29:5C:68:44:FD:32:8B:32:4A:1E:D8:59:80:32:F9 Certificate issuer: /CN=B729F0C7BF295C6844FD328B324A1ED8598032F9 Certificate serial: 5181B80A01606AAEE4B1C053F60B779BAC85768A Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft Manifest number: 02 Signing time: Fri 04 Jul 2025 18:57:56 +0000 Manifest this update: Fri 04 Jul 2025 18:52:56 +0000 Manifest next update: Sat 05 Jul 2025 21:22:56 +0000 Files and hashes: 1: 326130353a646663313a383230303a3a2f34302d3438203d3e20323136343532.roa (hash: tbMEmJLRx8p/XooueSgD+2D8XMkhb8zPBfDKGLGOZ18=) 2: B729F0C7BF295C6844FD328B324A1ED8598032F9.crl (hash: LntnrJo+FEno3d9Fw5bhptytwX5rMX7H9hPhWd/ajok=) 3: 326130353a646663313a383236303a3a2f34342d3438203d3e203331383938.roa (hash: NyB2Q3nplRrrVqQaiZpQzKBuInw96biJRlaf2Wfrra4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.crl rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 21:22:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:81:b8:0a:01:60:6a:ae:e4:b1:c0:53:f6:0b:77:9b:ac:85:76:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B729F0C7BF295C6844FD328B324A1ED8598032F9 Validity Not Before: Jul 4 18:52:56 2025 GMT Not After : Jul 5 21:22:56 2025 GMT Subject: CN=8FEBE097C3CA84C3CFD0D27A4390A9DAF7CE1B8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4b:15:7c:67:29:38:99:9b:7e:46:5b:24:f5: 2c:f3:a6:04:d6:23:98:e8:13:2b:87:6c:6e:34:ed: 27:36:31:62:c2:08:b6:44:e8:cc:33:ca:77:4e:cc: 98:21:5c:5a:ff:45:37:5e:47:17:2b:b4:92:78:78: 9b:54:4b:66:da:8c:f8:fb:b1:9b:c5:88:e9:d2:d4: 9b:5c:b5:0f:95:52:82:98:14:cb:dd:1f:10:27:7a: 4d:d7:5e:fb:fc:d3:65:3a:f3:c4:84:cb:d6:66:0b: f2:51:e1:8f:8a:4f:f5:36:a6:14:5b:b8:24:6b:cc: 8e:7c:b8:bc:b8:e3:29:11:2a:ef:f6:84:a1:51:b9: 8a:c5:c6:75:5f:8f:ae:c1:2c:a4:6c:45:bf:e6:3b: 4c:33:30:b0:77:72:4d:8d:c7:0c:00:f8:70:3a:77: 84:40:3e:ef:49:3b:a5:18:90:91:34:0b:f7:5e:57: ea:7a:67:41:10:48:88:d4:30:27:8b:c0:fa:9f:ad: 5b:3c:42:95:46:3a:12:34:35:97:38:c9:df:09:0f: ef:04:15:34:1a:8e:fc:cc:94:49:ff:34:c6:6c:8b: 36:f6:d2:44:5d:84:de:92:27:73:42:2c:c3:f7:5d: 27:85:07:1a:5a:70:79:56:67:74:a4:ac:6b:4f:f3: 90:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:EB:E0:97:C3:CA:84:C3:CF:D0:D2:7A:43:90:A9:DA:F7:CE:1B:8A X509v3 Authority Key Identifier: keyid:B7:29:F0:C7:BF:29:5C:68:44:FD:32:8B:32:4A:1E:D8:59:80:32:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:dc:41:d5:a3:2e:43:a6:bf:6a:8b:b1:92:ed:be:b0:5f:6d: 50:7f:48:36:92:cc:e0:82:5f:07:a2:48:09:24:44:11:1a:f4: c8:94:33:ac:30:96:f9:bf:eb:8a:ca:26:64:26:c9:96:37:59: ed:b1:21:01:93:b6:83:3c:ae:da:ea:0c:ef:69:6e:8f:56:d8: 56:e7:8b:d7:fa:ad:c9:e5:7c:48:1c:4b:14:b9:90:e5:26:91: 2b:6d:36:7e:16:13:4b:92:b8:38:1f:33:79:30:e5:00:73:44: 54:26:19:97:78:81:20:88:fb:36:78:08:21:e3:47:06:3c:20: 24:5f:89:24:97:4a:7a:3f:22:d1:b1:0f:31:63:a8:db:40:94: db:1d:4e:65:57:d5:91:70:14:d2:24:17:c5:d9:8a:2f:25:76: e2:21:41:7f:01:70:b5:10:f6:54:2c:71:08:6b:6f:7e:c1:f7: dd:83:63:93:1a:53:fe:c4:78:2b:b3:b9:34:2c:56:ec:42:4c: a3:20:fe:ef:f4:83:28:ff:97:93:ec:df:53:10:2e:7b:8c:7d: 9e:36:e1:fd:75:2d:6f:68:11:3a:7f:19:f0:d9:6f:21:37:a6: 80:63:9d:a7:e2:a6:16:9d:33:b9:a8:70:83:33:53:cb:f2:ef: 5a:2e:ee:23 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUUYG4CgFgaq7kscBT9gt3m6yFdoowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcyOUYwQzdCRjI5NUM2ODQ0RkQzMjhCMzI0QTFFRDg1 OTgwMzJGOTAeFw0yNTA3MDQxODUyNTZaFw0yNTA3MDUyMTIyNTZaMDMxMTAvBgNV BAMTKDhGRUJFMDk3QzNDQTg0QzNDRkQwRDI3QTQzOTBBOURBRjdDRTFCOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/SxV8Zyk4mZt+Rlsk9SzzpgTW I5joEyuHbG407Sc2MWLCCLZE6MwzyndOzJghXFr/RTdeRxcrtJJ4eJtUS2bajPj7 sZvFiOnS1JtctQ+VUoKYFMvdHxAnek3XXvv802U688SEy9ZmC/JR4Y+KT/U2phRb uCRrzI58uLy44ykRKu/2hKFRuYrFxnVfj67BLKRsRb/mO0wzMLB3ck2NxwwA+HA6 d4RAPu9JO6UYkJE0C/deV+p6Z0EQSIjUMCeLwPqfrVs8QpVGOhI0NZc4yd8JD+8E FTQajvzMlEn/NMZsizb20kRdhN6SJ3NCLMP3XSeFBxpacHlWZ3SkrGtP85A7AgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUj+vgl8PKhMPP0NJ6Q5Cp2vfOG4owHwYDVR0j BBgwFoAUtynwx78pXGhE/TKLMkoe2FmAMvkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNk OGVmLzMvQjcyOUYwQzdCRjI5NUM2ODQ0RkQzMjhCMzI0QTFFRDg1OTgwMzJGOS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0I3MjlGMEM3QkYyOTVD Njg0NEZEMzI4QjMyNEExRUQ4NTk4MDMyRjkuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNkOGVm LzMvQjcyOUYwQzdCRjI5NUM2ODQ0RkQzMjhCMzI0QTFFRDg1OTgwMzJGOS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAETcQdWjLkOmv2qLsZLtvrBfbVB/SDaSzOCCXweiSAkkRBEa9MiUM6ww lvm/64rKJmQmyZY3We2xIQGTtoM8rtrqDO9pbo9W2Fbni9f6rcnlfEgcSxS5kOUm kSttNn4WE0uSuDgfM3kw5QBzRFQmGZd4gSCI+zZ4CCHjRwY8ICRfiSSXSno/ItGx DzFjqNtAlNsdTmVX1ZFwFNIkF8XZii8lduIhQX8BcLUQ9lQscQhrb37B992DY5Ma U/7EeCuzuTQsVuxCTKMg/u/0gyj/l5Ps31MQLnuMfZ424f11LW9oETp/GfDZbyE3 poBjnafiphadM7mocIMzU8vy71ou7iM= -----END CERTIFICATE-----Generated at Sat Jul 5 08:34:03 2025 by rpki-client