$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.mft File: B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.mft (raw, json) Hash identifier: f79MgvL422GDCk7i32oZAPv+rgtrkmzWfvwxwxscWmk= Subject key identifier: 47:57:E5:1E:79:2F:4D:52:F8:57:69:9C:AA:C8:2F:D1:CF:C1:F9:18 Authority key identifier: B3:D1:0E:E6:F3:7C:24:3D:0D:0C:08:F7:AA:02:BA:3C:D2:55:95:76 Certificate issuer: /CN=B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576 Certificate serial: 177D3E1DDFB3B64CD097FF4077226BB80FBDD6EB Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.mft Manifest number: 03E6 Signing time: Wed 04 Jun 2025 12:04:29 +0000 Manifest this update: Wed 04 Jun 2025 11:59:29 +0000 Manifest next update: Thu 05 Jun 2025 12:12:29 +0000 Files and hashes: 1: B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.crl (hash: SnhhLvcUIBi52kPEGeR0zL/DbCevWP9cr6heM1NrMg8=) 2: 326130613a363034303a396630303a3a2f34302d3438203d3e203531303139.roa (hash: Jy1b+gt92RN+/ooPe4fGSUiuh5FGbMZK9CxKzh5Ox8I=) 3: 326130613a363034303a313330303a3a2f34302d3438203d3e203531303139.roa (hash: aSnHcNtVwzQzcWn5p0KM1my79E8t48awA6CXq7tsPUQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Jun 2025 06:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:7d:3e:1d:df:b3:b6:4c:d0:97:ff:40:77:22:6b:b8:0f:bd:d6:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576 Validity Not Before: Jun 4 11:59:29 2025 GMT Not After : Jun 5 12:12:29 2025 GMT Subject: CN=4757E51E792F4D52F857699CAAC82FD1CFC1F918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:73:7f:dd:dd:e3:7a:9c:0c:0f:c3:df:46:55: 11:c6:dc:30:38:8b:60:21:50:60:84:23:fd:ec:39: 61:48:f6:a8:dc:76:78:4f:21:97:d5:e8:3b:ff:39: e5:42:b8:38:e7:3c:51:94:fb:25:2f:a6:1f:53:52: e5:37:14:d9:da:5f:88:32:8a:bb:c6:cb:e4:33:ee: a1:41:48:d7:93:12:e1:4d:cf:35:5e:f5:b4:08:b5: 48:2b:50:d0:c0:1b:41:67:58:55:12:d9:d8:45:b8: 36:56:3c:1d:95:80:32:ae:56:7f:a5:3a:2d:38:4e: b9:2e:5f:42:b0:7e:12:49:cf:bc:ce:53:29:7e:6f: 91:5e:00:ab:7c:2c:84:f2:9e:04:5f:ed:c8:f3:d3: 27:47:13:a6:41:4f:80:da:b2:bb:8c:b4:61:9f:d5: 05:31:58:53:7f:d0:71:1e:07:e1:1d:6c:94:e9:77: 9a:b6:01:a2:c1:50:e2:0b:1c:7f:19:a1:e5:73:36: f6:42:79:12:42:3d:00:15:6f:5e:82:f5:f8:97:4a: 89:bf:35:f4:87:82:32:2d:47:9d:8b:08:35:03:74: 76:01:4d:7e:ef:f3:b7:f4:aa:62:08:ba:f2:10:22: d9:37:7c:5d:0d:19:a0:3c:98:f1:93:87:33:e0:30: 0e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:57:E5:1E:79:2F:4D:52:F8:57:69:9C:AA:C8:2F:D1:CF:C1:F9:18 X509v3 Authority Key Identifier: keyid:B3:D1:0E:E6:F3:7C:24:3D:0D:0C:08:F7:AA:02:BA:3C:D2:55:95:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:dd:2d:36:6b:8a:16:13:86:92:f1:2a:8e:16:32:3d:14:d8: 87:61:c7:4a:7a:3a:c4:7f:b6:e4:a6:5a:eb:8b:96:7e:de:09: 94:29:b4:98:44:6a:82:0e:af:d4:e8:32:90:f9:39:1f:30:29: 3e:eb:1f:43:94:8b:13:36:ac:53:5b:80:32:6b:d4:46:3c:ea: 6b:45:a8:0f:82:8f:c6:1a:33:11:42:40:b1:f7:c0:48:8a:32: 82:89:de:fe:03:86:ff:e3:4b:d4:32:06:49:02:da:53:2d:aa: fb:f7:69:d2:c3:d8:6e:d7:3c:13:24:83:35:48:57:07:38:02: fe:97:ee:b7:51:09:b5:01:16:fc:5d:93:64:b3:d9:e9:45:a4: 3f:9a:2d:11:dc:51:ca:65:0d:e4:3c:9a:db:61:c9:98:22:53: a4:d7:65:f8:f5:ec:e2:eb:6c:81:f1:6b:72:91:b7:d0:4d:7c: e5:cc:34:24:30:70:f7:ec:1c:63:28:eb:5f:ec:56:7f:c3:0a: 11:89:b1:53:ef:98:f7:0d:14:76:d2:e9:2f:5a:16:a0:16:e5: 84:54:e5:76:16:fe:25:56:00:70:82:f5:bd:97:08:e5:60:ac: a3:8d:6c:8d:3a:25:6c:8b:7c:27:d8:f6:3f:f6:27:1d:cc:ac: 59:80:07:1b -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUF30+Hd+ztkzQl/9AdyJruA+91uswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNEMTBFRTZGMzdDMjQzRDBEMEMwOEY3QUEwMkJBM0NE MjU1OTU3NjAeFw0yNTA2MDQxMTU5MjlaFw0yNTA2MDUxMjEyMjlaMDMxMTAvBgNV BAMTKDQ3NTdFNTFFNzkyRjRENTJGODU3Njk5Q0FBQzgyRkQxQ0ZDMUY5MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnc3/d3eN6nAwPw99GVRHG3DA4 i2AhUGCEI/3sOWFI9qjcdnhPIZfV6Dv/OeVCuDjnPFGU+yUvph9TUuU3FNnaX4gy irvGy+Qz7qFBSNeTEuFNzzVe9bQItUgrUNDAG0FnWFUS2dhFuDZWPB2VgDKuVn+l Oi04TrkuX0KwfhJJz7zOUyl+b5FeAKt8LITyngRf7cjz0ydHE6ZBT4DasruMtGGf 1QUxWFN/0HEeB+EdbJTpd5q2AaLBUOILHH8ZoeVzNvZCeRJCPQAVb16C9fiXSom/ NfSHgjItR52LCDUDdHYBTX7v87f0qmIIuvIQItk3fF0NGaA8mPGThzPgMA6XAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUR1flHnkvTVL4V2mcqsgv0c/B+RgwHwYDVR0j BBgwFoAUs9EO5vN8JD0NDAj3qgK6PNJVlXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzEvQjNEMTBFRTZGMzdDMjQzRDBEMEMwOEY3QUEwMkJBM0NEMjU1OTU3Ni5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wL0IzRDEwRUU2RjM3QzI0 M0QwRDBDMDhGN0FBMDJCQTNDRDI1NTk1NzYuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2NhZTNm LzEvQjNEMTBFRTZGMzdDMjQzRDBEMEMwOEY3QUEwMkJBM0NEMjU1OTU3Ni5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAEvdLTZrihYThpLxKo4WMj0U2Idhx0p6OsR/tuSmWuuLln7eCZQptJhE aoIOr9ToMpD5OR8wKT7rH0OUixM2rFNbgDJr1EY86mtFqA+Cj8YaMxFCQLH3wEiK MoKJ3v4Dhv/jS9QyBkkC2lMtqvv3adLD2G7XPBMkgzVIVwc4Av6X7rdRCbUBFvxd k2Sz2elFpD+aLRHcUcplDeQ8mtthyZgiU6TXZfj17OLrbIHxa3KRt9BNfOXMNCQw cPfsHGMo61/sVn/DChGJsVPvmPcNFHbS6S9aFqAW5YRU5XYW/iVWAHCC9b2XCOVg rKONbI06JWyLfCfY9j/2Jx3MrFmABxs= -----END CERTIFICATE-----Generated at Wed Jun 4 21:43:22 2025 by rpki-client