$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft File: BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft (raw, json) Hash identifier: 6y/ddhXr8wYtozVMcNIeJurFusYFm7My43zzZAlMDHI= Subject key identifier: 46:E7:C5:D3:18:1E:CC:A1:A3:13:77:0D:17:9C:05:77:B8:0E:98:08 Authority key identifier: BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 Certificate issuer: /CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Certificate serial: 74AE4FAC230E0F57281A6B2C240B1A85F03B7CC1 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft Manifest number: 02 Signing time: Fri 04 Jul 2025 19:52:55 +0000 Manifest this update: Fri 04 Jul 2025 19:47:55 +0000 Manifest next update: Sat 05 Jul 2025 23:30:55 +0000 Files and hashes: 1: 326130353a646663313a356638353a3a2f34382d3438203d3e20313338313930.roa (hash: AHGjNaJ/WzTiVF8ARIxPxHm+eWjD34CRX2Rzq0o77Zc=) 2: 326130353a646663313a386561303a3a2f34342d3434203d3e203538333339.roa (hash: w2EeiCF+tbKMmOoFYBqzZoSSzDfj9tN/LDactvJUZZo=) 3: 326130353a646663313a356630303a3a2f34382d3438203d3e203538333339.roa (hash: AH6fqe4qZiPv/gSh+4dRRGDFVLAJqVrKbZlihrh7FUo=) 4: BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl (hash: stXgUx0dMyxgyI5+tw3VShl+ez59GkJIE6yhG8DdEcU=) 5: 326130353a646663313a356632303a3a2f34382d3438203d3e203538333339.roa (hash: hqGCUVhF1o7nJGTVBmjcxnI7fkr4Nwy0dt9JVppF1Io=) 6: 326130353a646663313a356631303a3a2f34382d3438203d3e203538333339.roa (hash: aCR7Djf6F7ot6IGv4qJolckB6Hwdtt9rLMj/LBxcfS8=) 7: 326130353a646663313a356637303a3a2f34342d3434203d3e203538333339.roa (hash: k9WJ99SX7aTZwDYsUzJBYzARw8TZTM2BX3i3N+Ee6bM=) 8: 326130353a646663313a386532303a3a2f34342d3434203d3e203538333339.roa (hash: JONv6weNpLYIoVclohZCDU/ZppdNC1Kw68H19t2Odek=) 9: 326130353a646663313a386533303a3a2f34342d3434203d3e203538333339.roa (hash: hYi+hhHjwGCkmO0X7KADZcFu1u0xzn4wmtuD1vEoPpo=) 10: 326130353a646663313a356632353a3a2f34382d3438203d3e203538333339.roa (hash: fHW/lCvDc1XAsZ9E1Y/HvwEyGix+WPtzaT4hDtTQpHM=) 11: 326130353a646663313a356633303a3a2f34382d3438203d3e203538333339.roa (hash: YHvYeedQkkKkz6S1VU1ULzE2Cwhk/aJA7/6mNWyITcw=) 12: 326130353a646663313a386564303a3a2f34342d3434203d3e203538333339.roa (hash: Ak8zkEYi1oEi/oeJzu452sjFwTtK4sdKPFAGjU4iI90=) 13: 326130353a646663313a386539303a3a2f34342d3434203d3e203538333339.roa (hash: lY8kUvqiJ+AriOnYIKK6OftdT6Hb+ovgk/JosC0yv60=) 14: 326130353a646663313a356631353a3a2f34382d3438203d3e203538333339.roa (hash: Xnx5m7unbJgIPHX0j6zUTmlD5uCIhAffrL8uNA2ETSg=) 15: 326130353a646663313a386530303a3a2f34342d3434203d3e203538333339.roa (hash: p2o1yXHsIxpnRd44bjihWHVn6MaMhtMpWjfOAyceXpY=) 16: 326130353a646663313a356636303a3a2f34342d3434203d3e203538333339.roa (hash: A6dMPcDVvAm2/mTQl5zfF/P12rP5E/0NT4CV7AixNWc=) 17: 326130353a646663313a386566303a3a2f34342d3434203d3e203538333339.roa (hash: cY5oExmQLWhvhLDvLbqW+uBbyk1VjOi3DKdni6lZX4E=) 18: 326130353a646663313a386538303a3a2f34342d3434203d3e203538333339.roa (hash: TcZZuAWJaOHQpXHN6lfF7/ENwLkSC5UfCjQUfKogcBE=) 19: 326130353a646663313a386563303a3a2f34342d3434203d3e203538333339.roa (hash: 3OfkKwNSUq4yIbyS7EkCP2uCgeHqAJ6wd8O6l2GgwTo=) 20: 326130353a646663313a356632353a3a2f34382d3438203d3e20313338313930.roa (hash: ahHELRULgHjri55ivlXp7deB4HheB+T1e3Rbjf2ZRlc=) 21: 326130353a646663313a356635303a3a2f34342d3434203d3e203538333339.roa (hash: w4QduBJxaGnsws7o+9RznEINzdMyGMWIEo6q5XRFLE4=) 22: 326130353a646663313a386562303a3a2f34342d3434203d3e203538333339.roa (hash: VdH1rmngxdsry2bTnH9gOiLaPyDXqjQsVqkD+I+D36Q=) 23: 326130353a646663313a386565303a3a2f34342d3434203d3e203538333339.roa (hash: WioV+sq94xvUsWsll+5Q8EkQ36B8/m9RnTH6oRqpj+8=) 24: 326130353a646663313a356637303a3a2f34382d3438203d3e203538333339.roa (hash: zhTMqHT9k7jUYRrHYp50z209XEnwWLBT4JJ4e/BZSXk=) 25: 326130353a646663313a386531303a3a2f34342d3434203d3e203538333339.roa (hash: vSG/KpzDEQq4+JfLwpPzzStdyH6/Om/hRZHdOZi4zzw=) 26: 326130353a646663313a356633353a3a2f34382d3438203d3e203538333339.roa (hash: E2kph64BLFRAhCtrkyUI3XQYKC/A1Crg5SvTtw+mxNQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 23:30:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:ae:4f:ac:23:0e:0f:57:28:1a:6b:2c:24:0b:1a:85:f0:3b:7c:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Validity Not Before: Jul 4 19:47:55 2025 GMT Not After : Jul 5 23:30:55 2025 GMT Subject: CN=46E7C5D3181ECCA1A313770D179C0577B80E9808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:94:c1:35:ce:54:a4:4e:6b:e9:67:cd:92:d7: 11:e4:e4:61:04:d9:45:81:7a:9d:4a:ef:f8:c5:ed: 39:c1:57:57:3f:9a:dd:d3:8f:66:15:d8:55:94:c7: 92:93:eb:ca:bb:4a:f6:39:47:cc:76:c8:80:d4:4c: f4:68:ad:1e:8f:1b:cf:24:4c:25:00:81:bc:29:7e: 0b:bc:ce:a6:11:7a:5e:fe:92:fb:ed:e0:f9:c4:42: 1a:b0:e7:af:b3:9c:45:10:81:e1:10:d9:c8:14:b4: 33:64:34:16:c1:f9:18:30:61:ba:52:14:a3:74:af: c6:6d:e0:ac:05:75:00:e6:ad:2d:48:eb:bf:07:98: 9e:c7:b2:2f:21:e0:90:d1:49:e1:a2:d3:f5:a0:7e: 8f:b7:84:54:25:b8:f7:ad:58:81:57:e5:c2:72:09: b8:8d:89:8e:fa:67:d5:03:2d:a0:93:f3:45:c8:79: 4b:5c:b9:d8:00:71:d8:0a:e7:e8:57:ac:82:39:61: 00:e5:68:f7:f8:42:b0:cf:a3:d7:9a:58:31:d7:d4: e9:05:72:76:cb:17:31:b4:37:16:75:a7:2c:79:21: 16:c4:14:69:5d:2d:18:93:f2:57:03:80:fa:59:16: 0b:cf:e7:af:87:47:03:ac:b3:80:0f:bd:2c:f3:43: 59:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:E7:C5:D3:18:1E:CC:A1:A3:13:77:0D:17:9C:05:77:B8:0E:98:08 X509v3 Authority Key Identifier: keyid:BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:cf:8a:8e:1c:fb:6c:1c:aa:dc:b8:1b:1e:8b:28:10:f8:9f: 7a:4d:b1:b6:dc:58:99:7c:6d:92:3a:18:5b:09:5c:10:b6:e9: 98:67:95:ed:b0:a2:44:9d:6e:9d:50:a5:03:31:da:ef:16:17: a6:a0:55:9d:31:df:03:a6:68:14:62:2a:c5:de:34:da:35:48: e7:3a:a4:35:92:e7:d5:07:51:10:cd:09:29:ca:a6:80:19:60: e6:78:ed:26:b0:93:50:c2:23:c8:12:64:d3:bf:53:6b:33:fd: c7:eb:6f:13:58:9a:bc:1f:5e:e6:35:5c:36:39:b6:7e:84:13: bb:ad:19:e0:8b:cf:a5:1d:4a:33:79:b7:75:a0:2d:65:66:9b: 43:4c:64:12:6f:9f:13:b9:f7:a8:76:43:b4:a6:4e:d0:22:c0: a6:e4:14:ec:75:05:73:c6:01:81:f6:2a:3b:4c:58:51:80:27: 14:99:0c:ca:3a:ef:c8:05:27:52:96:7d:3e:07:1f:2f:23:9d: ce:f3:e4:5e:82:14:90:2a:98:29:87:1f:c6:b9:d8:4c:c8:b9: 82:66:26:05:95:fc:ca:f3:8b:43:5d:7e:18:94:e4:ce:26:d6: e3:ac:95:22:9f:ad:83:19:d1:ce:10:b0:d9:31:83:97:44:b1: 86:34:7e:12 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUdK5PrCMOD1coGmssJAsahfA7fMEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRD OEZCQzlDMzAeFw0yNTA3MDQxOTQ3NTVaFw0yNTA3MDUyMzMwNTVaMDMxMTAvBgNV BAMTKDQ2RTdDNUQzMTgxRUNDQTFBMzEzNzcwRDE3OUMwNTc3QjgwRTk4MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvlME1zlSkTmvpZ82S1xHk5GEE 2UWBep1K7/jF7TnBV1c/mt3Tj2YV2FWUx5KT68q7SvY5R8x2yIDUTPRorR6PG88k TCUAgbwpfgu8zqYRel7+kvvt4PnEQhqw56+znEUQgeEQ2cgUtDNkNBbB+RgwYbpS FKN0r8Zt4KwFdQDmrS1I678HmJ7Hsi8h4JDRSeGi0/Wgfo+3hFQluPetWIFX5cJy CbiNiY76Z9UDLaCT80XIeUtcudgAcdgK5+hXrII5YQDlaPf4QrDPo9eaWDHX1OkF cnbLFzG0NxZ1pyx5IRbEFGldLRiT8lcDgPpZFgvP56+HRwOss4APvSzzQ1krAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQURufF0xgezKGjE3cNF5wFd7gOmAgwHwYDVR0j BBgwFoAUvj3GYU4KLzs9bwjcBKG8NMj7ycMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl MTI5LzMvQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRDOEZCQzlDMy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0JFM0RDNjYxNEUwQTJG M0IzRDZGMDhEQzA0QTFCQzM0QzhGQkM5QzMuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZlMTI5 LzMvQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRDOEZCQzlDMy5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAJnPio4c+2wcqty4Gx6LKBD4n3pNsbbcWJl8bZI6GFsJXBC26Zhnle2w okSdbp1QpQMx2u8WF6agVZ0x3wOmaBRiKsXeNNo1SOc6pDWS59UHURDNCSnKpoAZ YOZ47Sawk1DCI8gSZNO/U2sz/cfrbxNYmrwfXuY1XDY5tn6EE7utGeCLz6UdSjN5 t3WgLWVmm0NMZBJvnxO596h2Q7SmTtAiwKbkFOx1BXPGAYH2KjtMWFGAJxSZDMo6 78gFJ1KWfT4HHy8jnc7z5F6CFJAqmCmHH8a52EzIuYJmJgWV/Mrzi0NdfhiU5M4m 1uOslSKfrYMZ0c4QsNkxg5dEsYY0fhI= -----END CERTIFICATE-----Generated at Sat Jul 5 08:46:59 2025 by rpki-client