$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.mft File: B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.mft (raw, json) Hash identifier: dFTLJ1cWrE4nmN+Lpgy5SPhKK/8cus0UasnrGrZPGKo= Subject key identifier: 35:04:CB:C1:A5:E1:E2:AD:11:0F:43:0D:F2:79:B0:71:DD:51:27:B3 Authority key identifier: B3:D1:0E:E6:F3:7C:24:3D:0D:0C:08:F7:AA:02:BA:3C:D2:55:95:76 Certificate issuer: /CN=B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576 Certificate serial: 5F3B650AE021657DE73D47C223C5843466AF4365 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.mft Manifest number: 038D Signing time: Thu 03 Apr 2025 13:11:00 +0000 Manifest this update: Thu 03 Apr 2025 13:06:00 +0000 Manifest next update: Fri 04 Apr 2025 16:23:00 +0000 Files and hashes: 1: 326130613a363034303a313330303a3a2f34302d3438203d3e203531303139.roa (hash: aSnHcNtVwzQzcWn5p0KM1my79E8t48awA6CXq7tsPUQ=) 2: B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.crl (hash: SsniFN0/mYIKMrROMkMdJCcnZlVO4bDw+1MuVc/3zcA=) 3: 326130613a363034303a396630303a3a2f34302d3438203d3e203531303139.roa (hash: Jy1b+gt92RN+/ooPe4fGSUiuh5FGbMZK9CxKzh5Ox8I=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 04 Apr 2025 12:03:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:3b:65:0a:e0:21:65:7d:e7:3d:47:c2:23:c5:84:34:66:af:43:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576 Validity Not Before: Apr 3 13:06:00 2025 GMT Not After : Apr 4 16:23:00 2025 GMT Subject: CN=3504CBC1A5E1E2AD110F430DF279B071DD5127B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:89:2c:2f:7f:7f:ce:0f:34:5d:f7:15:f8:3f: d2:11:ec:dd:86:56:d6:f2:12:f4:cf:2f:ac:4f:8d: dd:ac:b5:b0:8a:30:b2:bb:63:1d:af:9c:b6:c8:16: 83:6b:77:13:83:76:c4:f3:8f:d5:ba:58:46:ae:6d: ee:ff:7e:b3:f9:f7:ce:6f:52:f4:5a:6c:02:b3:b9: c6:c8:d4:85:c3:1a:93:08:2b:79:eb:e0:4b:60:33: 9f:85:ce:b6:0c:02:a1:1d:0e:89:60:3f:98:76:da: 98:02:0f:45:00:0d:08:ce:7b:4d:54:00:c0:c7:b8: d2:33:ca:6d:f5:f1:44:12:ee:2d:76:5a:13:2f:10: 38:b2:20:c6:70:d1:4b:06:c0:c5:3b:d1:5a:9e:92: 27:82:0d:20:27:b0:88:2d:26:be:93:48:01:56:9e: 0b:f6:a3:ab:da:14:96:ef:d2:67:26:d0:ae:fd:95: 3a:a3:77:14:c5:eb:73:60:d9:be:17:43:a1:11:6b: f3:60:8e:c2:20:91:0e:b3:fe:14:5d:fe:56:cb:a3: 91:08:9d:7d:22:b7:6b:1f:f0:c1:1a:40:57:ef:9c: bc:8c:8d:e2:31:4a:30:67:ca:3b:73:db:31:d7:6e: 19:ac:47:19:95:71:20:05:70:2b:11:28:9a:87:40: e8:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:04:CB:C1:A5:E1:E2:AD:11:0F:43:0D:F2:79:B0:71:DD:51:27:B3 X509v3 Authority Key Identifier: keyid:B3:D1:0E:E6:F3:7C:24:3D:0D:0C:08:F7:AA:02:BA:3C:D2:55:95:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:00:97:64:da:74:c9:a0:3e:56:fa:c6:46:99:6b:48:7a:6a: a9:5c:e8:b7:8a:de:16:51:d2:12:fe:5b:60:13:07:ee:cb:a1: e4:42:36:ff:d8:15:0e:21:14:5c:5d:e8:0b:f3:4c:1b:d3:e4: 3b:73:b3:49:52:25:86:a1:d7:f9:68:76:4a:3a:40:94:82:16: 7c:1c:db:ce:1d:e1:0c:51:c6:59:f7:e6:c5:03:70:ca:05:c0: dc:22:ab:0f:3f:8b:12:75:bf:2c:ef:08:4b:bc:00:1c:88:75: 7b:66:61:0c:94:9d:9e:0e:c0:20:d3:de:a2:38:ec:a7:77:10: 29:89:22:30:23:89:5d:b5:8e:bf:47:31:e1:18:39:05:46:42: b1:5a:02:7a:55:46:80:f0:16:9e:a2:84:bb:b8:bd:38:64:3a: b4:c5:a2:2f:28:d5:c7:93:61:5b:d0:de:f7:c1:36:09:31:12: ca:6d:a6:37:44:8b:09:72:80:bf:82:a5:e0:77:40:15:54:98: ef:2d:1f:1d:2b:22:55:d0:b6:38:5e:23:c2:2f:7b:c1:2f:49: 79:ec:14:2b:df:18:0b:eb:90:e9:69:2e:44:c0:12:14:d6:b3: 98:5c:24:66:cd:df:ca:84:05:8e:4e:b9:16:ce:bb:cb:a3:0c: e5:90:26:cd -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUXztlCuAhZX3nPUfCI8WENGavQ2UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNEMTBFRTZGMzdDMjQzRDBEMEMwOEY3QUEwMkJBM0NE MjU1OTU3NjAeFw0yNTA0MDMxMzA2MDBaFw0yNTA0MDQxNjIzMDBaMDMxMTAvBgNV BAMTKDM1MDRDQkMxQTVFMUUyQUQxMTBGNDMwREYyNzlCMDcxREQ1MTI3QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEiSwvf3/ODzRd9xX4P9IR7N2G VtbyEvTPL6xPjd2stbCKMLK7Yx2vnLbIFoNrdxODdsTzj9W6WEaube7/frP5985v UvRabAKzucbI1IXDGpMIK3nr4EtgM5+FzrYMAqEdDolgP5h22pgCD0UADQjOe01U AMDHuNIzym318UQS7i12WhMvEDiyIMZw0UsGwMU70VqekieCDSAnsIgtJr6TSAFW ngv2o6vaFJbv0mcm0K79lTqjdxTF63Ng2b4XQ6ERa/NgjsIgkQ6z/hRd/lbLo5EI nX0it2sf8MEaQFfvnLyMjeIxSjBnyjtz2zHXbhmsRxmVcSAFcCsRKJqHQOj1AgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUNQTLwaXh4q0RD0MN8nmwcd1RJ7MwHwYDVR0j BBgwFoAUs9EO5vN8JD0NDAj3qgK6PNJVlXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzEvQjNEMTBFRTZGMzdDMjQzRDBEMEMwOEY3QUEwMkJBM0NEMjU1OTU3Ni5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wL0IzRDEwRUU2RjM3QzI0 M0QwRDBDMDhGN0FBMDJCQTNDRDI1NTk1NzYuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2NhZTNm LzEvQjNEMTBFRTZGMzdDMjQzRDBEMEMwOEY3QUEwMkJBM0NEMjU1OTU3Ni5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAKcAl2TadMmgPlb6xkaZa0h6aqlc6LeK3hZR0hL+W2ATB+7LoeRCNv/Y FQ4hFFxd6AvzTBvT5Dtzs0lSJYah1/lodko6QJSCFnwc284d4QxRxln35sUDcMoF wNwiqw8/ixJ1vyzvCEu8AByIdXtmYQyUnZ4OwCDT3qI47Kd3ECmJIjAjiV21jr9H MeEYOQVGQrFaAnpVRoDwFp6ihLu4vThkOrTFoi8o1ceTYVvQ3vfBNgkxEsptpjdE iwlygL+CpeB3QBVUmO8tHx0rIlXQtjheI8Ive8EvSXnsFCvfGAvrkOlpLkTAEhTW s5hcJGbN38qEBY5OuRbOu8ujDOWQJs0= -----END CERTIFICATE-----Generated at Fri Apr 4 01:04:35 2025 by rpki-client