$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft File: B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft (raw, json) Hash identifier: NoTKArEah9j1FTd5/qiTtoxJNWlPM6R3XjY7KT6J5hU= Subject key identifier: 4F:2A:A8:98:7B:8B:35:06:8E:E3:34:7C:45:AF:4F:70:ED:76:03:9D Authority key identifier: B2:17:28:4E:A3:D5:38:44:B2:AF:52:70:AB:BA:A3:10:5B:8B:3F:45 Certificate issuer: /CN=B217284EA3D53844B2AF5270ABBAA3105B8B3F45 Certificate serial: 649CC00A59C9F38820FB8E671E16C102C5B679B8 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft Manifest number: 45 Signing time: Wed 20 Aug 2025 09:26:13 +0000 Manifest this update: Wed 20 Aug 2025 09:21:13 +0000 Manifest next update: Thu 21 Aug 2025 13:05:13 +0000 Files and hashes: 1: B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl (hash: 6V/FTrUqkddCxye2bPj0y/C5h0v+vS/6XBn4LKZyQBY=) 2: 326130613a363034303a396630303a3a2f34302d3438203d3e203531303139.roa (hash: 4Q4ROZYT81dIJHSkpaekI4Sbj95kc4xrlA3BgHVle7s=) 3: 326130613a363034303a313330303a3a2f34302d3438203d3e203531303139.roa (hash: wn+vtltLdcEkhCOvzx/4fvtvh6EcQrGmjXhUFly5CfQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 21 Aug 2025 13:05:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:9c:c0:0a:59:c9:f3:88:20:fb:8e:67:1e:16:c1:02:c5:b6:79:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B217284EA3D53844B2AF5270ABBAA3105B8B3F45 Validity Not Before: Aug 20 09:21:13 2025 GMT Not After : Aug 21 13:05:13 2025 GMT Subject: CN=4F2AA8987B8B35068EE3347C45AF4F70ED76039D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:ab:80:82:1d:45:e7:1e:27:75:3c:25:4a:21: 24:bc:cb:32:74:cd:a2:25:a3:96:c3:2c:a7:43:b3: 3a:7d:ae:41:56:d5:ca:86:5a:0b:cf:62:1d:ca:23: e3:08:04:27:52:78:9e:4d:4d:b0:76:58:47:6f:52: c1:59:18:aa:13:e6:77:12:06:7c:14:6e:27:01:81: be:5f:bb:39:1e:9c:84:0b:f1:28:3d:c9:5c:27:50: 21:cf:9b:ba:40:fa:c1:50:95:0c:d6:45:f3:5e:e1: 8f:92:44:4c:77:74:85:8a:f5:f8:00:ff:4f:e8:96: f8:a3:e6:59:7f:0f:63:40:d9:11:47:11:e2:a1:8c: 77:22:fe:02:c1:2c:71:01:9d:fc:dc:49:2b:ec:ba: fa:8b:a4:3b:4e:29:46:26:17:51:d8:9c:d5:fb:5b: 02:e9:34:7a:18:3f:0e:00:24:a4:a9:6e:96:e7:5d: 73:c6:17:bb:dd:90:c0:27:1d:31:ce:7a:f1:1b:72: 8d:92:4e:db:bd:2d:6f:93:6f:3b:f2:5d:1c:e6:9c: 39:80:b2:30:c6:89:7e:11:ab:94:5e:98:1d:e1:ed: 19:c7:db:45:08:ca:1c:91:87:4d:d0:df:65:21:e1: 6c:6b:57:85:14:81:20:cd:3f:e4:87:4f:60:9c:94: 17:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:2A:A8:98:7B:8B:35:06:8E:E3:34:7C:45:AF:4F:70:ED:76:03:9D X509v3 Authority Key Identifier: keyid:B2:17:28:4E:A3:D5:38:44:B2:AF:52:70:AB:BA:A3:10:5B:8B:3F:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:28:8e:7d:18:bd:db:aa:ce:1d:f9:cb:fb:85:b6:9b:6d:24: 48:7c:d8:a7:b7:e4:cc:1d:45:4f:44:be:14:98:57:ff:51:92: 63:3d:a6:30:b3:ae:d5:43:27:fb:8d:24:ca:f0:61:64:c4:d8: 3a:5f:f3:8f:f8:8a:1a:d1:5e:8b:af:25:0c:18:03:3b:cc:b5: 59:a1:ae:8a:a8:1e:f5:75:99:71:49:18:1d:47:a7:45:6c:4c: fe:ef:07:44:ac:5f:11:36:5d:1f:06:3d:88:36:51:0d:6f:d1: d6:46:27:e4:f7:0a:e7:b2:85:7e:29:1e:54:bf:97:7a:d0:38: 00:4f:8e:25:f0:34:42:8c:85:cd:57:b1:7d:08:d1:a0:23:d5: 80:5c:a9:92:d8:bd:d6:f0:92:34:90:39:89:71:2c:ce:d8:de: 6d:0f:87:cb:4d:9f:c6:e9:12:7b:d8:52:69:21:99:30:ba:29: ee:d7:26:8d:0b:a7:3d:e0:2b:14:3a:6f:c1:df:59:43:a8:8d: d4:e1:3c:52:e3:fd:1e:81:49:d9:66:5f:59:52:cc:f5:db:20: 29:f5:3e:4b:c5:56:dd:c1:53:89:70:a4:15:e7:2c:a4:f5:1e: e5:03:80:3a:0e:de:34:2e:0b:8c:b8:d5:64:81:be:76:61:29: 4a:2e:c3:ae -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUZJzAClnJ84gg+45nHhbBAsW2ebgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIxNzI4NEVBM0Q1Mzg0NEIyQUY1MjcwQUJCQUEzMTA1 QjhCM0Y0NTAeFw0yNTA4MjAwOTIxMTNaFw0yNTA4MjExMzA1MTNaMDMxMTAvBgNV BAMTKDRGMkFBODk4N0I4QjM1MDY4RUUzMzQ3QzQ1QUY0RjcwRUQ3NjAzOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxq4CCHUXnHid1PCVKISS8yzJ0 zaIlo5bDLKdDszp9rkFW1cqGWgvPYh3KI+MIBCdSeJ5NTbB2WEdvUsFZGKoT5ncS BnwUbicBgb5fuzkenIQL8Sg9yVwnUCHPm7pA+sFQlQzWRfNe4Y+SREx3dIWK9fgA /0/olvij5ll/D2NA2RFHEeKhjHci/gLBLHEBnfzcSSvsuvqLpDtOKUYmF1HYnNX7 WwLpNHoYPw4AJKSpbpbnXXPGF7vdkMAnHTHOevEbco2STtu9LW+TbzvyXRzmnDmA sjDGiX4Rq5RemB3h7RnH20UIyhyRh03Q32Uh4WxrV4UUgSDNP+SHT2CclBdFAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUTyqomHuLNQaO4zR8Ra9PcO12A50wHwYDVR0j BBgwFoAUshcoTqPVOESyr1Jwq7qjEFuLP0UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzUvQjIxNzI4NEVBM0Q1Mzg0NEIyQUY1MjcwQUJCQUEzMTA1QjhCM0Y0NS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0IyMTcyODRFQTNENTM4 NDRCMkFGNTI3MEFCQkFBMzEwNUI4QjNGNDUuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2NhZTNm LzUvQjIxNzI4NEVBM0Q1Mzg0NEIyQUY1MjcwQUJCQUEzMTA1QjhCM0Y0NS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAFsojn0Yvduqzh35y/uFtpttJEh82Ke35MwdRU9EvhSYV/9RkmM9pjCz rtVDJ/uNJMrwYWTE2Dpf84/4ihrRXouvJQwYAzvMtVmhroqoHvV1mXFJGB1Hp0Vs TP7vB0SsXxE2XR8GPYg2UQ1v0dZGJ+T3CueyhX4pHlS/l3rQOABPjiXwNEKMhc1X sX0I0aAj1YBcqZLYvdbwkjSQOYlxLM7Y3m0Ph8tNn8bpEnvYUmkhmTC6Ke7XJo0L pz3gKxQ6b8HfWUOojdThPFLj/R6BSdlmX1lSzPXbICn1PkvFVt3BU4lwpBXnLKT1 HuUDgDoO3jQuC4y41WSBvnZhKUouw64= -----END CERTIFICATE-----Generated at Wed Aug 20 22:16:46 2025 by rpki-client