$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft File: B729F0C7BF295C6844FD328B324A1ED8598032F9.mft (raw, json) Hash identifier: MdIN7DpYFle5WPwCtI+VLeZuwuLoB/h935wkHgUgM2c= Subject key identifier: 1E:BF:91:03:64:4F:E1:F4:19:7D:8A:DA:61:60:AD:F6:4B:70:B6:04 Authority key identifier: B7:29:F0:C7:BF:29:5C:68:44:FD:32:8B:32:4A:1E:D8:59:80:32:F9 Certificate issuer: /CN=B729F0C7BF295C6844FD328B324A1ED8598032F9 Certificate serial: 02E0CAE91324A0FBFC14420831237C193E5E9C82 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft Manifest number: 41 Signing time: Wed 20 Aug 2025 07:13:13 +0000 Manifest this update: Wed 20 Aug 2025 07:08:13 +0000 Manifest next update: Thu 21 Aug 2025 10:14:13 +0000 Files and hashes: 1: 326130353a646663313a383236303a3a2f34342d3438203d3e203331383938.roa (hash: NyB2Q3nplRrrVqQaiZpQzKBuInw96biJRlaf2Wfrra4=) 2: 326130353a646663313a383230303a3a2f34302d3438203d3e20323136343532.roa (hash: tbMEmJLRx8p/XooueSgD+2D8XMkhb8zPBfDKGLGOZ18=) 3: B729F0C7BF295C6844FD328B324A1ED8598032F9.crl (hash: GXCxBSOA606xX/Xmyn5tfsFM2FaJI5RjCtkguEaOzxI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.crl rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 21 Aug 2025 04:08:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:e0:ca:e9:13:24:a0:fb:fc:14:42:08:31:23:7c:19:3e:5e:9c:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B729F0C7BF295C6844FD328B324A1ED8598032F9 Validity Not Before: Aug 20 07:08:13 2025 GMT Not After : Aug 21 10:14:13 2025 GMT Subject: CN=1EBF9103644FE1F4197D8ADA6160ADF64B70B604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:32:34:b9:2a:c6:3c:3d:f0:65:1d:33:d9:50: 74:a2:8b:1d:c5:e0:4e:6b:46:3e:37:34:a6:e5:77: 43:cb:29:4f:d4:3b:a6:27:4f:e5:94:f4:0e:63:d9: 2c:6b:b4:cc:12:a4:7c:16:d3:ae:ad:85:50:7a:45: 4b:54:51:9f:af:f0:0f:cb:85:8f:ba:77:a3:62:dc: 9f:ba:75:9e:38:68:a4:c3:3b:70:e0:57:d7:ae:11: 91:00:05:63:fb:68:a4:b0:0a:dd:f5:59:b0:6d:f0: 5b:e0:5e:47:41:de:32:4a:39:ee:f9:f6:68:90:2a: df:f0:44:bf:08:0a:f2:f8:19:c2:5e:d1:ab:1c:74: 56:f2:84:54:4d:75:fc:c7:ff:8e:e8:d8:8d:4e:ae: 6e:4b:d4:a8:d4:73:8b:da:a7:54:61:80:ad:c1:2f: 03:42:c8:68:e7:10:c2:d7:5d:e2:98:6f:2e:39:9f: 37:e8:57:50:05:6b:bd:28:d7:0b:fe:8c:a7:72:5b: 82:c2:ca:98:52:e0:d0:fd:91:be:da:ca:39:0c:f8: a0:19:7a:e1:eb:e2:ca:68:01:1f:cd:57:c7:de:ae: e6:df:26:cc:c8:e1:94:07:fc:f8:30:49:7e:34:af: 96:cf:c5:97:8a:b8:f3:40:f6:87:c7:74:63:2c:82: 61:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:BF:91:03:64:4F:E1:F4:19:7D:8A:DA:61:60:AD:F6:4B:70:B6:04 X509v3 Authority Key Identifier: keyid:B7:29:F0:C7:BF:29:5C:68:44:FD:32:8B:32:4A:1E:D8:59:80:32:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:8c:ae:c2:69:f7:84:d5:b3:f9:67:3b:2a:b7:10:7b:9f:ef: 03:72:ab:41:70:d6:be:ae:55:35:d4:7b:00:4e:13:f1:28:c3: 12:c2:4b:51:c0:d3:4a:0f:0e:9e:f6:b5:c9:76:ae:30:aa:4d: 14:00:cb:2e:e3:84:11:84:95:99:0a:83:15:98:39:15:a3:0b: 59:aa:ca:0e:03:17:67:93:5f:f6:19:c8:e8:b6:73:32:d3:22: 9a:c8:2a:82:45:56:8a:74:74:ca:51:25:0e:80:12:89:49:47: f3:9a:5d:10:ee:5b:c9:52:97:02:13:a2:24:e6:1f:3f:ce:16: 92:01:f4:4e:97:b8:76:ce:16:02:b0:8b:0e:35:f1:2c:d1:cd: 82:4a:0d:ac:4e:15:a5:a8:5c:f2:d2:c1:0e:48:2d:49:72:c0: d2:16:36:f7:da:91:10:2d:9a:a8:95:1f:1f:9e:9d:4f:74:e0: 72:a5:f9:fc:bf:24:43:9f:b8:e7:7a:de:00:cb:3d:80:9c:46: 49:fe:62:b2:ea:4f:8c:8f:58:ac:7c:1d:4a:dd:9c:9e:07:06: 04:b8:85:d0:cf:1b:53:ec:26:0c:f4:9c:a8:80:63:cd:e2:f7: 1f:af:9d:75:37:bf:71:5a:46:ac:d0:3c:9e:f8:3f:d6:84:7e: c0:24:bd:a8 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUAuDK6RMkoPv8FEIIMSN8GT5enIIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcyOUYwQzdCRjI5NUM2ODQ0RkQzMjhCMzI0QTFFRDg1 OTgwMzJGOTAeFw0yNTA4MjAwNzA4MTNaFw0yNTA4MjExMDE0MTNaMDMxMTAvBgNV BAMTKDFFQkY5MTAzNjQ0RkUxRjQxOTdEOEFEQTYxNjBBREY2NEI3MEI2MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWMjS5KsY8PfBlHTPZUHSiix3F 4E5rRj43NKbld0PLKU/UO6YnT+WU9A5j2SxrtMwSpHwW066thVB6RUtUUZ+v8A/L hY+6d6Ni3J+6dZ44aKTDO3DgV9euEZEABWP7aKSwCt31WbBt8FvgXkdB3jJKOe75 9miQKt/wRL8ICvL4GcJe0ascdFbyhFRNdfzH/47o2I1Orm5L1KjUc4vap1RhgK3B LwNCyGjnEMLXXeKYby45nzfoV1AFa70o1wv+jKdyW4LCyphS4ND9kb7ayjkM+KAZ euHr4spoAR/NV8ferubfJszI4ZQH/PgwSX40r5bPxZeKuPNA9ofHdGMsgmHvAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUHr+RA2RP4fQZfYraYWCt9ktwtgQwHwYDVR0j BBgwFoAUtynwx78pXGhE/TKLMkoe2FmAMvkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNk OGVmLzMvQjcyOUYwQzdCRjI5NUM2ODQ0RkQzMjhCMzI0QTFFRDg1OTgwMzJGOS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0I3MjlGMEM3QkYyOTVD Njg0NEZEMzI4QjMyNEExRUQ4NTk4MDMyRjkuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNkOGVm LzMvQjcyOUYwQzdCRjI5NUM2ODQ0RkQzMjhCMzI0QTFFRDg1OTgwMzJGOS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAKqMrsJp94TVs/lnOyq3EHuf7wNyq0Fw1r6uVTXUewBOE/EowxLCS1HA 00oPDp72tcl2rjCqTRQAyy7jhBGElZkKgxWYORWjC1mqyg4DF2eTX/YZyOi2czLT IprIKoJFVop0dMpRJQ6AEolJR/OaXRDuW8lSlwIToiTmHz/OFpIB9E6XuHbOFgKw iw418SzRzYJKDaxOFaWoXPLSwQ5ILUlywNIWNvfakRAtmqiVHx+enU904HKl+fy/ JEOfuOd63gDLPYCcRkn+YrLqT4yPWKx8HUrdnJ4HBgS4hdDPG1PsJgz0nKiAY83i 9x+vnXU3v3FaRqzQPJ74P9aEfsAkvag= -----END CERTIFICATE-----Generated at Wed Aug 20 13:10:59 2025 by rpki-client