$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft File: B729F0C7BF295C6844FD328B324A1ED8598032F9.mft (raw, json) Hash identifier: xuTQQRrirAuMRsoucS1hGkQhJMN9IE+ExPvJhc4d7RA= Subject key identifier: DD:0F:D3:6B:25:DD:69:12:37:E9:54:C9:17:2C:00:7F:57:CD:11:2A Authority key identifier: B7:29:F0:C7:BF:29:5C:68:44:FD:32:8B:32:4A:1E:D8:59:80:32:F9 Certificate issuer: /CN=B729F0C7BF295C6844FD328B324A1ED8598032F9 Certificate serial: 5BCAFEA6E19709139367A9691505C29E525464DE Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft Manifest number: 83 Signing time: Wed 08 Oct 2025 04:48:14 +0000 Manifest this update: Wed 08 Oct 2025 04:43:14 +0000 Manifest next update: Thu 09 Oct 2025 08:26:14 +0000 Files and hashes: 1: B729F0C7BF295C6844FD328B324A1ED8598032F9.crl (hash: ZGAUoHQ7u0MVyNzb7Ul9/eG6SLH/mbq2x4MLdkS7+Po=) 2: 326130353a646663313a383236303a3a2f34342d3438203d3e203331383938.roa (hash: NyB2Q3nplRrrVqQaiZpQzKBuInw96biJRlaf2Wfrra4=) 3: 326130353a646663313a383230303a3a2f34302d3438203d3e20323136343532.roa (hash: tbMEmJLRx8p/XooueSgD+2D8XMkhb8zPBfDKGLGOZ18=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.crl rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 09 Oct 2025 08:26:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:ca:fe:a6:e1:97:09:13:93:67:a9:69:15:05:c2:9e:52:54:64:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B729F0C7BF295C6844FD328B324A1ED8598032F9 Validity Not Before: Oct 8 04:43:14 2025 GMT Not After : Oct 9 08:26:14 2025 GMT Subject: CN=DD0FD36B25DD691237E954C9172C007F57CD112A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e1:fd:f7:15:2f:75:30:21:b3:28:a8:d1:37: 91:ec:d4:bb:c1:ef:9c:f7:56:c2:fe:d2:db:bc:e3: 4e:47:b4:88:ef:21:7e:99:bc:45:8b:d5:c0:80:06: 1a:e1:c9:f5:46:96:e7:24:de:24:5b:16:01:26:3e: 7f:15:47:fb:29:fa:ff:82:fb:b4:ef:ee:23:8b:d5: c4:5a:c3:6c:02:cd:b2:d8:bf:e6:6b:fb:25:5e:94: eb:79:39:56:ff:f2:65:66:27:99:d4:f4:42:aa:c8: 6e:ce:1d:3f:b8:b1:3a:7b:40:fc:49:26:fb:e1:33: 7f:65:c4:26:26:3b:5d:fe:e9:17:5a:b3:93:4c:45: 5e:39:5f:39:51:44:63:1b:9f:02:40:c2:6f:c8:b0: 05:14:8a:42:49:10:81:a5:d8:08:16:51:ee:16:a0: 1a:7b:14:a7:a7:1a:3f:e1:73:d1:92:a2:75:51:f0: 9c:91:23:77:6a:fa:80:e7:73:66:8b:40:23:53:e8: c3:1f:96:6e:c7:d3:f3:5e:8f:b2:4f:83:f9:cc:f1: ae:d6:9d:d2:a9:4a:5b:60:1b:41:91:4f:9a:04:99: d9:45:58:2d:27:73:e4:8a:51:4b:de:be:81:fd:80: 3a:74:89:3b:ec:9c:1b:c5:6d:40:ee:c2:36:c4:36: 00:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:0F:D3:6B:25:DD:69:12:37:E9:54:C9:17:2C:00:7F:57:CD:11:2A X509v3 Authority Key Identifier: keyid:B7:29:F0:C7:BF:29:5C:68:44:FD:32:8B:32:4A:1E:D8:59:80:32:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:13:45:fa:1a:56:c0:66:23:50:0b:13:cb:b8:f1:d4:79:6c: 44:8a:33:42:d3:e4:1a:39:65:43:14:14:de:d3:91:39:e8:2c: 4e:5a:3c:06:50:91:88:7f:8a:b4:96:50:e1:96:bb:21:9f:67: 0e:61:06:d5:31:24:2c:4e:69:a4:e0:4f:1a:29:55:01:0f:1b: 29:2d:3e:e3:e6:68:70:79:fe:0f:c7:d9:00:09:fd:34:6b:6b: 03:05:aa:3d:e6:34:53:34:dc:12:dc:61:c7:38:55:8d:81:1f: 89:a1:fd:73:1d:33:cd:fc:de:4e:27:4b:52:96:0d:a9:6b:1c: 76:0b:af:84:25:80:e5:c7:74:c0:0d:a9:ee:64:f2:09:13:ec: 58:66:1f:7c:04:22:bd:36:7c:c2:91:a2:9e:d4:85:ff:41:b0: 38:a7:3e:c1:c3:d6:17:c8:fc:18:1d:13:6f:13:dc:66:17:79: 09:30:c5:cc:e2:35:cc:3b:f7:f6:50:c4:c5:89:32:d2:f4:f6: 7a:9f:d6:c0:93:cc:3b:dc:0a:80:41:33:c5:53:e1:17:f2:b9: 3e:23:d8:44:74:a8:cf:b0:d6:fd:a4:a4:10:e8:09:81:83:32: 17:db:55:a2:55:35:e8:35:4b:a2:a6:a9:1e:4d:d1:91:50:a7: dd:cb:59:eb -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUW8r+puGXCROTZ6lpFQXCnlJUZN4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcyOUYwQzdCRjI5NUM2ODQ0RkQzMjhCMzI0QTFFRDg1 OTgwMzJGOTAeFw0yNTEwMDgwNDQzMTRaFw0yNTEwMDkwODI2MTRaMDMxMTAvBgNV BAMTKEREMEZEMzZCMjVERDY5MTIzN0U5NTRDOTE3MkMwMDdGNTdDRDExMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW4f33FS91MCGzKKjRN5Hs1LvB 75z3VsL+0tu8405HtIjvIX6ZvEWL1cCABhrhyfVGluck3iRbFgEmPn8VR/sp+v+C +7Tv7iOL1cRaw2wCzbLYv+Zr+yVelOt5OVb/8mVmJ5nU9EKqyG7OHT+4sTp7QPxJ JvvhM39lxCYmO13+6Rdas5NMRV45XzlRRGMbnwJAwm/IsAUUikJJEIGl2AgWUe4W oBp7FKenGj/hc9GSonVR8JyRI3dq+oDnc2aLQCNT6MMflm7H0/Nej7JPg/nM8a7W ndKpSltgG0GRT5oEmdlFWC0nc+SKUUvevoH9gDp0iTvsnBvFbUDuwjbENgAbAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQU3Q/TayXdaRI36VTJFywAf1fNESowHwYDVR0j BBgwFoAUtynwx78pXGhE/TKLMkoe2FmAMvkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNk OGVmLzMvQjcyOUYwQzdCRjI5NUM2ODQ0RkQzMjhCMzI0QTFFRDg1OTgwMzJGOS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0I3MjlGMEM3QkYyOTVD Njg0NEZEMzI4QjMyNEExRUQ4NTk4MDMyRjkuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNkOGVm LzMvQjcyOUYwQzdCRjI5NUM2ODQ0RkQzMjhCMzI0QTFFRDg1OTgwMzJGOS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAGwTRfoaVsBmI1ALE8u48dR5bESKM0LT5Bo5ZUMUFN7TkTnoLE5aPAZQ kYh/irSWUOGWuyGfZw5hBtUxJCxOaaTgTxopVQEPGyktPuPmaHB5/g/H2QAJ/TRr awMFqj3mNFM03BLcYcc4VY2BH4mh/XMdM8383k4nS1KWDalrHHYLr4QlgOXHdMAN qe5k8gkT7FhmH3wEIr02fMKRop7Uhf9BsDinPsHD1hfI/BgdE28T3GYXeQkwxczi Ncw79/ZQxMWJMtL09nqf1sCTzDvcCoBBM8VT4RfyuT4j2ER0qM+w1v2kpBDoCYGD MhfbVaJVNeg1S6KmqR5N0ZFQp93LWes= -----END CERTIFICATE-----Generated at Thu Oct 9 01:18:44 2025 by rpki-client