$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft File: B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft (raw, json) Hash identifier: jWfCaVAjP06xulpLgn1a4uUSypj1javKzy+/LDvNrC8= Subject key identifier: 93:22:C3:5D:01:9A:20:90:8D:AD:58:2B:F8:3C:31:86:FD:3D:14:B4 Authority key identifier: B2:17:28:4E:A3:D5:38:44:B2:AF:52:70:AB:BA:A3:10:5B:8B:3F:45 Certificate issuer: /CN=B217284EA3D53844B2AF5270ABBAA3105B8B3F45 Certificate serial: 72AAF475E2195533040B21A5602EC5BA9432B6D0 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft Manifest number: 8A Signing time: Wed 08 Oct 2025 16:19:25 +0000 Manifest this update: Wed 08 Oct 2025 16:14:25 +0000 Manifest next update: Thu 09 Oct 2025 17:00:25 +0000 Files and hashes: 1: B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl (hash: ASBb/xS/lJD869mVfrwmo36VNCMBsieqyv57cSZkwkI=) 2: 326130613a363034303a313330303a3a2f34302d3438203d3e203531303139.roa (hash: wn+vtltLdcEkhCOvzx/4fvtvh6EcQrGmjXhUFly5CfQ=) 3: 326130613a363034303a396630303a3a2f34302d3438203d3e203531303139.roa (hash: 4Q4ROZYT81dIJHSkpaekI4Sbj95kc4xrlA3BgHVle7s=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 09 Oct 2025 13:21:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:aa:f4:75:e2:19:55:33:04:0b:21:a5:60:2e:c5:ba:94:32:b6:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B217284EA3D53844B2AF5270ABBAA3105B8B3F45 Validity Not Before: Oct 8 16:14:25 2025 GMT Not After : Oct 9 17:00:25 2025 GMT Subject: CN=9322C35D019A20908DAD582BF83C3186FD3D14B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6d:c8:c1:cc:63:4a:4a:4d:da:19:7c:7a:d3: b8:02:e9:af:ec:0d:c9:73:c3:5b:8e:7e:ce:b5:6e: f6:98:3d:35:d1:51:ee:4a:25:8d:f0:0e:48:bd:98: 49:05:87:fe:68:d1:92:4a:7e:71:26:21:2c:60:d3: 36:ee:86:f3:ef:0a:7c:60:91:ff:d8:8f:0a:da:34: 75:d7:df:8b:ef:e0:2e:2b:10:fc:59:0e:4a:9c:42: 7a:ba:fe:37:5b:09:97:8e:8f:53:5f:d9:1d:7d:db: 14:39:3f:2e:70:5e:b7:8c:c8:b5:0c:99:ee:9a:79: 75:59:55:68:9d:db:a9:68:72:59:46:ea:3b:e6:9e: d3:88:f5:3e:1a:2f:d2:de:d2:25:02:cf:1f:0f:97: 9a:61:25:ea:15:ae:ee:59:54:5b:23:db:32:47:9c: 4a:c2:72:12:f1:cd:67:b2:bc:e1:dc:aa:dc:b9:8e: a9:f0:4a:86:b3:db:1b:f0:33:1f:fa:ae:86:4c:b1: aa:86:42:1f:19:ef:ab:9c:cc:09:7b:a2:6c:67:76: e1:85:e1:36:4e:f6:e5:a4:f8:13:d8:a0:65:74:9b: 96:43:3e:1b:30:f4:f7:ae:2a:48:9b:5a:d2:5a:a8: 77:ef:8a:ab:fb:75:8f:47:b1:5e:d0:ce:02:68:27: b6:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:22:C3:5D:01:9A:20:90:8D:AD:58:2B:F8:3C:31:86:FD:3D:14:B4 X509v3 Authority Key Identifier: keyid:B2:17:28:4E:A3:D5:38:44:B2:AF:52:70:AB:BA:A3:10:5B:8B:3F:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:84:36:c7:a1:be:77:f8:44:e1:e3:87:2e:3b:6b:d3:3c:25: c6:31:d2:b7:9f:37:1b:6b:50:25:48:b4:c6:33:63:59:a1:cb: b8:4b:54:0e:22:d4:ae:3e:c7:a1:91:cb:67:7a:1b:77:4a:37: 8b:3e:d8:b3:db:01:1b:70:8b:fa:2f:ad:4b:a1:b4:4b:97:6d: 08:c2:ed:80:02:5c:11:74:7b:79:df:fc:05:df:70:5c:fb:da: 19:f6:1e:7c:79:6b:de:44:02:47:62:6d:a4:a5:c0:20:fa:a1: ec:c1:91:77:a9:33:5f:6f:11:44:45:d8:a6:f0:5b:2d:24:95: 37:07:fe:1e:d5:41:ec:50:ef:21:c3:c8:6d:9d:9d:c0:fc:1a: 97:67:7e:28:7c:18:46:80:1b:c3:1f:66:0d:bb:49:fc:43:c7: f3:9a:0f:9f:26:25:03:b7:51:45:de:47:9f:ac:4d:d3:47:d1: f9:80:43:60:38:0f:9e:70:4a:fc:4d:ef:91:e8:98:4c:15:28: b9:f4:8b:cb:a1:86:88:2b:8c:15:ec:a5:59:18:2d:47:ce:43: cd:d4:6a:db:5d:d8:8f:01:cc:d1:cc:49:7b:f2:a3:2b:20:ef: 82:09:a7:b2:bd:c0:e7:0d:41:9e:3b:b0:a8:a5:bb:33:df:11: 07:7f:0d:2c -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUcqr0deIZVTMECyGlYC7FupQyttAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIxNzI4NEVBM0Q1Mzg0NEIyQUY1MjcwQUJCQUEzMTA1 QjhCM0Y0NTAeFw0yNTEwMDgxNjE0MjVaFw0yNTEwMDkxNzAwMjVaMDMxMTAvBgNV BAMTKDkzMjJDMzVEMDE5QTIwOTA4REFENTgyQkY4M0MzMTg2RkQzRDE0QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMbcjBzGNKSk3aGXx607gC6a/s Dclzw1uOfs61bvaYPTXRUe5KJY3wDki9mEkFh/5o0ZJKfnEmISxg0zbuhvPvCnxg kf/YjwraNHXX34vv4C4rEPxZDkqcQnq6/jdbCZeOj1Nf2R192xQ5Py5wXreMyLUM me6aeXVZVWid26locllG6jvmntOI9T4aL9Le0iUCzx8Pl5phJeoVru5ZVFsj2zJH nErCchLxzWeyvOHcqty5jqnwSoaz2xvwMx/6roZMsaqGQh8Z76uczAl7omxnduGF 4TZO9uWk+BPYoGV0m5ZDPhsw9PeuKkibWtJaqHfviqv7dY9HsV7QzgJoJ7aPAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUkyLDXQGaIJCNrVgr+Dwxhv09FLQwHwYDVR0j BBgwFoAUshcoTqPVOESyr1Jwq7qjEFuLP0UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzUvQjIxNzI4NEVBM0Q1Mzg0NEIyQUY1MjcwQUJCQUEzMTA1QjhCM0Y0NS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0IyMTcyODRFQTNENTM4 NDRCMkFGNTI3MEFCQkFBMzEwNUI4QjNGNDUuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2NhZTNm LzUvQjIxNzI4NEVBM0Q1Mzg0NEIyQUY1MjcwQUJCQUEzMTA1QjhCM0Y0NS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAKiENsehvnf4ROHjhy47a9M8JcYx0refNxtrUCVItMYzY1mhy7hLVA4i 1K4+x6GRy2d6G3dKN4s+2LPbARtwi/ovrUuhtEuXbQjC7YACXBF0e3nf/AXfcFz7 2hn2Hnx5a95EAkdibaSlwCD6oezBkXepM19vEURF2KbwWy0klTcH/h7VQexQ7yHD yG2dncD8Gpdnfih8GEaAG8MfZg27SfxDx/OaD58mJQO3UUXeR5+sTdNH0fmAQ2A4 D55wSvxN75HomEwVKLn0i8uhhogrjBXspVkYLUfOQ83Uattd2I8BzNHMSXvyoysg 74IJp7K9wOcNQZ47sKiluzPfEQd/DSw= -----END CERTIFICATE-----Generated at Wed Oct 8 19:37:05 2025 by rpki-client