$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft File: B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft (raw, json) Hash identifier: 8barADzVB/irkDEHFtGhYoq6l9QudMbCt646ZewEO4Y= Subject key identifier: 54:B2:12:54:19:E5:86:1A:8C:AB:5D:03:58:D1:4D:41:3C:38:21:F7 Authority key identifier: B2:17:28:4E:A3:D5:38:44:B2:AF:52:70:AB:BA:A3:10:5B:8B:3F:45 Certificate issuer: /CN=B217284EA3D53844B2AF5270ABBAA3105B8B3F45 Certificate serial: 1139FBB87FD176409869516B2394808DE35E1037 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft Manifest number: 02 Signing time: Fri 04 Jul 2025 14:53:51 +0000 Manifest this update: Fri 04 Jul 2025 14:48:51 +0000 Manifest next update: Sat 05 Jul 2025 15:52:51 +0000 Files and hashes: 1: B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl (hash: VwCWQPfdbIApHuyoQ4QhcWXvFrLNTECa5V4VHGNhQeg=) 2: 326130613a363034303a396630303a3a2f34302d3438203d3e203531303139.roa (hash: 4Q4ROZYT81dIJHSkpaekI4Sbj95kc4xrlA3BgHVle7s=) 3: 326130613a363034303a313330303a3a2f34302d3438203d3e203531303139.roa (hash: wn+vtltLdcEkhCOvzx/4fvtvh6EcQrGmjXhUFly5CfQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 15:52:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:39:fb:b8:7f:d1:76:40:98:69:51:6b:23:94:80:8d:e3:5e:10:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B217284EA3D53844B2AF5270ABBAA3105B8B3F45 Validity Not Before: Jul 4 14:48:51 2025 GMT Not After : Jul 5 15:52:51 2025 GMT Subject: CN=54B2125419E5861A8CAB5D0358D14D413C3821F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c5:ef:5f:e2:f1:5a:14:30:16:f9:88:7f:82: 2e:72:10:bd:dd:24:95:f3:71:3a:17:c7:fe:4a:c3: dc:95:23:ad:f8:73:55:5d:4d:be:a5:8d:61:ed:c3: 61:07:ca:fc:4f:1b:65:bf:79:ff:2e:9c:83:41:b9: 0d:2a:b3:ce:a2:95:73:10:d7:20:da:c5:cb:3e:d0: a2:e0:dd:e5:3c:fd:fe:1c:36:4d:e2:a6:56:0a:d3: 5f:07:91:c0:37:e6:44:6e:e7:d1:f9:f4:fb:aa:43: 7a:de:74:e2:4b:c4:e8:34:b7:f2:a7:03:5c:2d:01: c1:fc:8b:1b:f2:fd:20:5f:36:ba:91:c3:be:6e:fe: a1:80:2d:c9:1a:fc:f7:91:18:1e:54:23:31:cb:20: fc:29:37:44:ef:76:0e:88:a2:c0:03:2a:6e:55:c4: e7:c2:68:8b:e3:42:fe:14:33:6f:a8:b3:6c:b4:04: bb:19:e3:3d:03:11:1f:a7:f9:96:cc:21:5f:f9:03: d2:83:d0:ce:d6:20:80:7f:26:fd:a1:0f:eb:00:c4: 0a:b3:7f:8e:ad:a2:cf:6b:90:7b:59:d0:c8:c7:56: 5d:9f:7e:b4:61:25:5a:cc:5c:2a:3d:94:69:cf:7e: f1:b6:ff:21:21:93:10:20:12:e5:9a:a3:4d:bc:70: be:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:B2:12:54:19:E5:86:1A:8C:AB:5D:03:58:D1:4D:41:3C:38:21:F7 X509v3 Authority Key Identifier: keyid:B2:17:28:4E:A3:D5:38:44:B2:AF:52:70:AB:BA:A3:10:5B:8B:3F:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:cc:e4:8c:2b:1f:e9:75:05:3c:ad:2d:9a:0b:f9:dd:f3:35: 4f:55:bf:6f:2a:80:93:7e:3d:57:6d:2e:8f:f2:9d:d9:3e:c5: c0:6a:b6:8a:5a:2f:3c:25:ab:9b:df:b2:f3:fe:61:bd:67:56: 11:5d:2f:71:76:3a:fe:4f:07:f5:35:49:bf:37:14:39:57:1d: 27:90:bc:8e:50:18:78:72:06:e0:2c:a4:80:4d:55:a7:02:d9: c9:4c:c4:a6:03:b3:a6:6e:bc:92:40:d5:dd:1f:58:b8:14:2a: db:48:99:90:d0:55:ff:17:50:b0:e3:a7:83:cf:20:92:58:72: d6:8d:3e:58:ba:ad:f8:e7:f0:94:12:4b:e4:9c:97:bf:1b:93: 87:34:fe:74:75:1a:a4:b4:2a:12:ef:17:8b:47:da:ac:90:6a: f6:57:b0:9c:e2:cf:f6:92:b5:0a:dd:a0:39:88:b3:6b:ee:20: 13:45:01:b1:00:de:1b:a8:73:69:11:38:c0:c3:13:8b:02:7c: 3c:40:90:6a:1a:45:fd:bf:85:9e:01:8d:ce:c9:d2:9d:5f:41: b2:1e:01:a1:4d:81:40:27:93:ab:63:de:96:ca:d4:e8:da:fd: 99:82:be:05:f2:7e:6e:90:5c:a7:da:25:71:b8:a5:23:a3:eb: f4:cf:f0:88 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUETn7uH/RdkCYaVFrI5SAjeNeEDcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIxNzI4NEVBM0Q1Mzg0NEIyQUY1MjcwQUJCQUEzMTA1 QjhCM0Y0NTAeFw0yNTA3MDQxNDQ4NTFaFw0yNTA3MDUxNTUyNTFaMDMxMTAvBgNV BAMTKDU0QjIxMjU0MTlFNTg2MUE4Q0FCNUQwMzU4RDE0RDQxM0MzODIxRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyxe9f4vFaFDAW+Yh/gi5yEL3d JJXzcToXx/5Kw9yVI634c1VdTb6ljWHtw2EHyvxPG2W/ef8unINBuQ0qs86ilXMQ 1yDaxcs+0KLg3eU8/f4cNk3iplYK018HkcA35kRu59H59PuqQ3redOJLxOg0t/Kn A1wtAcH8ixvy/SBfNrqRw75u/qGALcka/PeRGB5UIzHLIPwpN0Tvdg6IosADKm5V xOfCaIvjQv4UM2+os2y0BLsZ4z0DER+n+ZbMIV/5A9KD0M7WIIB/Jv2hD+sAxAqz f46tos9rkHtZ0MjHVl2ffrRhJVrMXCo9lGnPfvG2/yEhkxAgEuWao028cL4tAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUVLISVBnlhhqMq10DWNFNQTw4IfcwHwYDVR0j BBgwFoAUshcoTqPVOESyr1Jwq7qjEFuLP0UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzUvQjIxNzI4NEVBM0Q1Mzg0NEIyQUY1MjcwQUJCQUEzMTA1QjhCM0Y0NS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0IyMTcyODRFQTNENTM4 NDRCMkFGNTI3MEFCQkFBMzEwNUI4QjNGNDUuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2NhZTNm LzUvQjIxNzI4NEVBM0Q1Mzg0NEIyQUY1MjcwQUJCQUEzMTA1QjhCM0Y0NS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAFDM5IwrH+l1BTytLZoL+d3zNU9Vv28qgJN+PVdtLo/yndk+xcBqtopa Lzwlq5vfsvP+Yb1nVhFdL3F2Ov5PB/U1Sb83FDlXHSeQvI5QGHhyBuAspIBNVacC 2clMxKYDs6ZuvJJA1d0fWLgUKttImZDQVf8XULDjp4PPIJJYctaNPli6rfjn8JQS S+Scl78bk4c0/nR1GqS0KhLvF4tH2qyQavZXsJziz/aStQrdoDmIs2vuIBNFAbEA 3huoc2kROMDDE4sCfDxAkGoaRf2/hZ4Bjc7J0p1fQbIeAaFNgUAnk6tj3pbK1Oja /ZmCvgXyfm6QXKfaJXG4pSOj6/TP8Ig= -----END CERTIFICATE-----Generated at Sat Jul 5 08:37:44 2025 by rpki-client