$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/3/23D444E7DED3712847CAE2B46DDD886FC2914D54.mft File: 23D444E7DED3712847CAE2B46DDD886FC2914D54.mft (raw, json) Hash identifier: 1QZw+AQEaQYffiuMOS3rltHvx+hJuP1p0oshZZSsP+w= Subject key identifier: 5E:2D:EE:95:C5:98:50:33:A9:56:77:C4:CA:F1:D3:59:CC:DF:E6:9E Authority key identifier: 23:D4:44:E7:DE:D3:71:28:47:CA:E2:B4:6D:DD:88:6F:C2:91:4D:54 Certificate issuer: /CN=23D444E7DED3712847CAE2B46DDD886FC2914D54 Certificate serial: 2EE1C05C182364120925B3288C4E79536A74B3D8 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/23D444E7DED3712847CAE2B46DDD886FC2914D54.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/3/23D444E7DED3712847CAE2B46DDD886FC2914D54.mft Manifest number: 03C6 Signing time: Sat 07 Jun 2025 05:55:22 +0000 Manifest this update: Sat 07 Jun 2025 05:50:22 +0000 Manifest next update: Sun 08 Jun 2025 09:33:22 +0000 Files and hashes: 1: 326130613a363034303a646230303a3a2f34302d3438203d3e20323131313531.roa (hash: tfZTODACLawFck6n6yim45qqX0QKQWHGw0OfZn9hHA4=) 2: 23D444E7DED3712847CAE2B46DDD886FC2914D54.crl (hash: G1HvdAen1hm9V/5BWT9lgLL0P4oCiKt6kkvsxIu0flY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/3/23D444E7DED3712847CAE2B46DDD886FC2914D54.crl rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/3/23D444E7DED3712847CAE2B46DDD886FC2914D54.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/23D444E7DED3712847CAE2B46DDD886FC2914D54.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 21:10:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:e1:c0:5c:18:23:64:12:09:25:b3:28:8c:4e:79:53:6a:74:b3:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23D444E7DED3712847CAE2B46DDD886FC2914D54 Validity Not Before: Jun 7 05:50:22 2025 GMT Not After : Jun 8 09:33:22 2025 GMT Subject: CN=5E2DEE95C5985033A95677C4CAF1D359CCDFE69E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:86:91:35:39:7e:eb:21:6b:af:59:e1:79:8c: 13:62:86:77:fd:db:cf:2f:d1:e1:b5:9f:ac:d5:f9: d1:2a:ef:de:4f:8d:e0:f8:9b:03:c2:78:39:da:18: fa:73:1f:ce:6f:93:f0:26:54:c4:70:8f:4e:97:97: ff:a0:46:1e:30:52:d8:b2:26:9d:13:46:22:80:26: c9:b2:82:f2:b8:dd:b3:9c:36:b9:c8:9e:50:83:52: 9f:72:f7:57:82:05:28:de:6f:fa:cc:43:cc:3c:47: 48:5d:31:0f:31:5d:77:41:a9:df:05:d3:0f:37:e4: f3:e2:a6:a1:3c:74:42:c5:61:ff:16:0e:97:85:32: 39:b6:c4:3d:cf:d9:36:5e:36:75:37:41:90:b1:e7: a8:bd:53:86:3a:d4:de:ae:5e:d2:34:fd:d8:9b:fd: 8f:6d:15:84:55:10:a8:50:57:0f:b0:d9:8e:f9:38: 5c:96:eb:1f:7b:41:c7:71:e2:9e:30:5f:91:8b:5f: 6b:c8:a3:c3:d6:3c:62:a3:7e:d7:25:b8:3f:ad:21: 5d:19:a4:3c:52:c5:0c:38:bb:1c:18:5f:e4:9c:f0: 96:4c:1c:67:a3:a5:ac:2d:bb:ec:0c:1f:78:37:58: d7:74:78:02:ac:29:53:fd:5c:1a:b6:16:70:86:fd: 3e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:2D:EE:95:C5:98:50:33:A9:56:77:C4:CA:F1:D3:59:CC:DF:E6:9E X509v3 Authority Key Identifier: keyid:23:D4:44:E7:DE:D3:71:28:47:CA:E2:B4:6D:DD:88:6F:C2:91:4D:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/3/23D444E7DED3712847CAE2B46DDD886FC2914D54.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/23D444E7DED3712847CAE2B46DDD886FC2914D54.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/3/23D444E7DED3712847CAE2B46DDD886FC2914D54.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:f3:e0:38:a8:e3:dc:0a:7f:0e:41:2b:17:ed:38:7d:1e:c8: c5:52:90:8a:ac:69:8a:a4:72:83:db:cf:3a:32:54:6c:b4:67: ae:83:8f:f8:21:c4:87:a0:87:b0:70:c7:22:5f:b2:87:03:d2: 58:e2:0a:e9:27:c8:31:ff:42:59:86:a8:de:23:18:19:2a:0f: ce:7e:91:35:d6:e6:d7:26:2b:25:4a:2b:2f:f9:b2:f8:56:cd: a2:86:b3:9a:83:18:ec:5c:cf:03:de:39:56:5a:4d:1f:21:df: 8b:37:d0:e8:08:26:35:c1:a1:83:79:6c:e5:6e:4a:2a:fc:8e: b1:c7:99:c0:08:bf:cb:0e:23:9d:90:81:04:75:4b:54:8d:b5: 43:35:f4:71:81:fb:df:18:f8:5f:c3:08:64:ff:0e:69:53:ea: fe:1c:0e:00:8c:9c:64:e3:ac:9f:66:d3:b9:ba:0e:0f:41:80: fe:b8:ab:6c:f8:67:28:4d:33:c5:a1:ce:4b:33:8e:39:da:52: ba:bc:87:4d:16:9f:94:68:db:56:d8:0b:6c:af:86:cc:a5:e8: 20:a3:96:34:83:ca:4e:db:65:3a:6c:45:19:9e:12:e0:f3:68: 93:75:a5:99:57:75:8e:23:b0:f4:20:4a:83:c7:f3:8b:56:4e: 21:df:f2:67 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIULuHAXBgjZBIJJbMojE55U2p0s9gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNENDQ0RTdERUQzNzEyODQ3Q0FFMkI0NkRERDg4NkZD MjkxNEQ1NDAeFw0yNTA2MDcwNTUwMjJaFw0yNTA2MDgwOTMzMjJaMDMxMTAvBgNV BAMTKDVFMkRFRTk1QzU5ODUwMzNBOTU2NzdDNENBRjFEMzU5Q0NERkU2OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHhpE1OX7rIWuvWeF5jBNihnf9 288v0eG1n6zV+dEq795PjeD4mwPCeDnaGPpzH85vk/AmVMRwj06Xl/+gRh4wUtiy Jp0TRiKAJsmygvK43bOcNrnInlCDUp9y91eCBSjeb/rMQ8w8R0hdMQ8xXXdBqd8F 0w835PPipqE8dELFYf8WDpeFMjm2xD3P2TZeNnU3QZCx56i9U4Y61N6uXtI0/dib /Y9tFYRVEKhQVw+w2Y75OFyW6x97Qcdx4p4wX5GLX2vIo8PWPGKjftcluD+tIV0Z pDxSxQw4uxwYX+Sc8JZMHGejpawtu+wMH3g3WNd0eAKsKVP9XBq2FnCG/T4BAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUXi3ulcWYUDOpVnfEyvHTWczf5p4wHwYDVR0j BBgwFoAUI9RE597TcShHyuK0bd2Ib8KRTVQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzEyODI3MWUtYzI2OS00OTU0LTg3ZGItZDE4NGRmMTdm ODVjLzMvMjNENDQ0RTdERUQzNzEyODQ3Q0FFMkI0NkRERDg4NkZDMjkxNEQ1NC5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzIzRDQ0NEU3REVEMzcx Mjg0N0NBRTJCNDZEREQ4ODZGQzI5MTRENTQuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvYzEyODI3MWUtYzI2OS00OTU0LTg3ZGItZDE4NGRmMTdmODVj LzMvMjNENDQ0RTdERUQzNzEyODQ3Q0FFMkI0NkRERDg4NkZDMjkxNEQ1NC5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBABbz4Dio49wKfw5BKxftOH0eyMVSkIqsaYqkcoPbzzoyVGy0Z66Dj/gh xIegh7BwxyJfsocD0ljiCuknyDH/QlmGqN4jGBkqD85+kTXW5tcmKyVKKy/5svhW zaKGs5qDGOxczwPeOVZaTR8h34s30OgIJjXBoYN5bOVuSir8jrHHmcAIv8sOI52Q gQR1S1SNtUM19HGB+98Y+F/DCGT/DmlT6v4cDgCMnGTjrJ9m07m6Dg9BgP64q2z4 ZyhNM8WhzkszjjnaUrq8h00Wn5Ro21bYC2yvhsyl6CCjljSDyk7bZTpsRRmeEuDz aJN1pZlXdY4jsPQgSoPH84tWTiHf8mc= -----END CERTIFICATE-----Generated at Sat Jun 7 13:20:53 2025 by rpki-client