$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft File: 553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft (raw, json) Hash identifier: SL3JemNv4agz9fi/jPnqq3ogqSsbJe6YhrnHaLl3Zfk= Subject key identifier: BB:22:6F:30:9B:D9:75:CA:B3:59:3C:EB:7E:59:BA:AB:4F:E2:F5:E8 Authority key identifier: 55:3D:76:11:EA:6B:CE:5E:C7:96:69:E4:B1:F1:47:F5:9C:2A:0E:EE Certificate issuer: /CN=553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE Certificate serial: 16C1D1B943F26D957C163F963DD9D995A5CFEDF9 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft Manifest number: 02 Signing time: Fri 04 Jul 2025 13:27:41 +0000 Manifest this update: Fri 04 Jul 2025 13:22:41 +0000 Manifest next update: Sat 05 Jul 2025 16:32:41 +0000 Files and hashes: 1: 326130613a363034303a646230303a3a2f34302d3438203d3e20323131313531.roa (hash: +fw3SQMO92ygFCahRkoicBXvG1K7ggV1DgUpkn+lL98=) 2: 553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.crl (hash: B8EbZ8cFO+AwMYAaGmg8y51KHFn0YO1VhYn00BDK8G8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.crl rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 16:32:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:c1:d1:b9:43:f2:6d:95:7c:16:3f:96:3d:d9:d9:95:a5:cf:ed:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE Validity Not Before: Jul 4 13:22:41 2025 GMT Not After : Jul 5 16:32:41 2025 GMT Subject: CN=BB226F309BD975CAB3593CEB7E59BAAB4FE2F5E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:eb:a2:87:b6:44:b7:1f:7d:25:59:a4:4f:f1: 67:39:16:c2:b9:da:c5:c6:49:c6:26:4f:65:e8:15: 45:8e:6e:c2:cc:12:8a:a4:3b:fe:1f:73:91:bf:fe: 6d:d1:d0:8a:a6:19:c0:e9:42:4b:ab:54:57:9a:0c: 83:dc:a7:db:18:3f:52:13:86:3c:aa:88:4b:d1:0b: a1:e3:90:0a:78:78:bf:80:99:a2:0b:cc:e0:05:95: 3d:33:52:10:f5:b7:df:40:37:8d:2b:66:0e:eb:80: 17:1b:d5:07:20:8a:64:fc:20:42:33:4b:f1:84:b3: cb:a7:a7:67:61:12:d4:67:9a:d1:89:82:ae:6c:c5: e0:24:a6:9d:de:bb:bb:76:f1:24:06:97:c3:66:c1: 36:53:7c:66:95:3a:ca:9b:33:44:fc:42:09:1a:b7: 8a:e4:96:61:31:eb:6f:55:70:80:1a:20:fe:03:7b: f1:af:65:54:07:53:02:42:60:15:5e:b4:45:c2:d7: 47:85:b2:f4:7f:08:30:ee:e8:bb:21:a5:93:ec:a8: b7:69:7d:b6:10:b1:88:a8:f7:42:e4:67:f0:c9:db: bc:0b:6e:99:23:75:4b:a2:40:aa:7f:60:e9:9f:0c: 7c:ce:e7:ad:f4:be:ac:a2:10:91:4d:6d:e3:38:b4: dc:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:22:6F:30:9B:D9:75:CA:B3:59:3C:EB:7E:59:BA:AB:4F:E2:F5:E8 X509v3 Authority Key Identifier: keyid:55:3D:76:11:EA:6B:CE:5E:C7:96:69:E4:B1:F1:47:F5:9C:2A:0E:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:5e:58:48:65:82:46:45:ba:d7:d3:4a:18:7f:d6:50:e7:c3: e8:82:78:1c:28:03:6a:31:c6:bb:bf:d0:da:9b:f7:01:54:cc: 83:2a:b3:27:7a:7e:52:c3:46:89:75:8a:a1:79:80:e3:8a:f1: f7:77:9d:5f:5d:90:71:58:44:fd:28:66:8b:cc:c1:40:a9:b5: 22:7c:9e:e5:98:bf:fb:04:c8:c4:6e:e2:63:f1:fb:94:85:d1: a1:25:8b:48:df:b8:fe:89:81:04:a6:b3:9b:5f:a9:c6:cc:d5: f2:d7:9d:5e:de:8d:07:02:b6:70:a1:b9:f7:f8:dd:c5:ef:3e: 27:1f:c4:e3:48:09:1c:30:b6:f0:99:40:bc:87:48:a2:b2:ba: a6:3b:6d:d8:ee:5f:f5:fe:b3:61:50:4e:b0:1f:f6:9f:1c:9d: 45:d6:8f:aa:09:85:a5:78:80:81:a7:96:a0:aa:4f:03:84:02: 86:f8:47:ca:d5:cb:07:36:b5:40:29:09:9d:0f:0f:bd:b9:83: 4e:a6:44:89:56:80:52:44:df:6c:a1:ba:81:86:f7:07:29:03: 84:cf:c8:78:40:56:17:2b:a4:04:37:8f:1b:42:d1:cc:f5:6c: ca:93:5b:e1:01:00:b3:5c:82:e4:95:d2:cc:bd:fe:50:4a:03: c0:7a:44:72 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUFsHRuUPybZV8Fj+WPdnZlaXP7fkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUzRDc2MTFFQTZCQ0U1RUM3OTY2OUU0QjFGMTQ3RjU5 QzJBMEVFRTAeFw0yNTA3MDQxMzIyNDFaFw0yNTA3MDUxNjMyNDFaMDMxMTAvBgNV BAMTKEJCMjI2RjMwOUJEOTc1Q0FCMzU5M0NFQjdFNTlCQUFCNEZFMkY1RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy66KHtkS3H30lWaRP8Wc5FsK5 2sXGScYmT2XoFUWObsLMEoqkO/4fc5G//m3R0IqmGcDpQkurVFeaDIPcp9sYP1IT hjyqiEvRC6HjkAp4eL+AmaILzOAFlT0zUhD1t99AN40rZg7rgBcb1QcgimT8IEIz S/GEs8unp2dhEtRnmtGJgq5sxeAkpp3eu7t28SQGl8NmwTZTfGaVOsqbM0T8Qgka t4rklmEx629VcIAaIP4De/GvZVQHUwJCYBVetEXC10eFsvR/CDDu6LshpZPsqLdp fbYQsYio90LkZ/DJ27wLbpkjdUuiQKp/YOmfDHzO5630vqyiEJFNbeM4tNxxAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUuyJvMJvZdcqzWTzrflm6q0/i9egwHwYDVR0j BBgwFoAUVT12Eeprzl7HlmnksfFH9ZwqDu4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzEyODI3MWUtYzI2OS00OTU0LTg3ZGItZDE4NGRmMTdm ODVjLzQvNTUzRDc2MTFFQTZCQ0U1RUM3OTY2OUU0QjFGMTQ3RjU5QzJBMEVFRS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzU1M0Q3NjExRUE2QkNF NUVDNzk2NjlFNEIxRjE0N0Y1OUMyQTBFRUUuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvYzEyODI3MWUtYzI2OS00OTU0LTg3ZGItZDE4NGRmMTdmODVj LzQvNTUzRDc2MTFFQTZCQ0U1RUM3OTY2OUU0QjFGMTQ3RjU5QzJBMEVFRS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAHxeWEhlgkZFutfTShh/1lDnw+iCeBwoA2oxxru/0Nqb9wFUzIMqsyd6 flLDRol1iqF5gOOK8fd3nV9dkHFYRP0oZovMwUCptSJ8nuWYv/sEyMRu4mPx+5SF 0aEli0jfuP6JgQSms5tfqcbM1fLXnV7ejQcCtnChuff43cXvPicfxONICRwwtvCZ QLyHSKKyuqY7bdjuX/X+s2FQTrAf9p8cnUXWj6oJhaV4gIGnlqCqTwOEAob4R8rV ywc2tUApCZ0PD725g06mRIlWgFJE32yhuoGG9wcpA4TPyHhAVhcrpAQ3jxtC0cz1 bMqTW+EBALNcguSV0sy9/lBKA8B6RHI= -----END CERTIFICATE-----Generated at Sat Jul 5 08:29:39 2025 by rpki-client