$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft File: 553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft (raw, json) Hash identifier: SQeNqAcZ/B/E9PZE0hhTOgymfthvsOETIlHcsV+ytO0= Subject key identifier: 99:78:8F:AB:BE:A7:CD:8F:DE:A6:FA:C5:97:DB:F6:83:29:BE:88:24 Authority key identifier: 55:3D:76:11:EA:6B:CE:5E:C7:96:69:E4:B1:F1:47:F5:9C:2A:0E:EE Certificate issuer: /CN=553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE Certificate serial: 76B2F71194C453BEA9A8A0316424EA0022A9174D Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft Manifest number: 3F Signing time: Wed 20 Aug 2025 14:29:57 +0000 Manifest this update: Wed 20 Aug 2025 14:24:57 +0000 Manifest next update: Thu 21 Aug 2025 14:56:57 +0000 Files and hashes: 1: 553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.crl (hash: h3g4RdeiYjU9AoStNWFjMTzNv5a8fllm/cq81MYLwts=) 2: 326130613a363034303a646230303a3a2f34302d3438203d3e20323131313531.roa (hash: +fw3SQMO92ygFCahRkoicBXvG1K7ggV1DgUpkn+lL98=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.crl rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 21 Aug 2025 14:56:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:b2:f7:11:94:c4:53:be:a9:a8:a0:31:64:24:ea:00:22:a9:17:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE Validity Not Before: Aug 20 14:24:57 2025 GMT Not After : Aug 21 14:56:57 2025 GMT Subject: CN=99788FABBEA7CD8FDEA6FAC597DBF68329BE8824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e0:07:18:46:28:c9:66:bb:3c:e7:f2:31:36: 69:aa:e9:fe:bb:64:42:58:bc:19:af:48:64:8b:b6: 9b:89:18:03:e9:50:25:bb:37:9a:4d:3b:88:9e:59: 03:84:72:96:69:0d:5d:6d:69:d1:0c:af:40:85:5a: c9:1c:a8:14:94:43:9d:28:0c:e8:7a:12:80:fd:46: 69:17:01:4e:f5:e5:4a:c5:45:8b:c8:65:f6:33:e2: ca:bc:2d:a9:50:e7:d5:fb:25:40:04:95:0f:39:12: c5:f1:69:9f:01:39:36:06:f9:3b:56:a7:8c:c4:85: 0d:62:99:7f:8d:b5:a4:98:b7:42:2d:2c:68:87:20: 1d:8b:a2:d4:da:26:ba:08:50:6e:9b:25:cb:b4:e9: 17:7d:26:59:60:86:58:20:f9:3b:d2:98:d6:30:51: 26:0c:f6:54:d1:dd:55:19:c3:d9:85:95:f9:11:05: 34:6a:cb:66:96:4f:8e:a2:a2:d6:80:05:59:51:be: 61:a2:93:92:15:5c:3d:1d:5d:0f:f2:9e:aa:d3:76: a4:c3:ee:b5:95:58:10:4c:33:c3:7f:48:ea:7b:09: 6d:f9:47:0e:8d:f8:e3:b8:c7:c0:7a:2c:37:7c:cd: 27:a3:69:00:7e:fa:be:28:91:70:c4:b0:4a:63:97: d0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:78:8F:AB:BE:A7:CD:8F:DE:A6:FA:C5:97:DB:F6:83:29:BE:88:24 X509v3 Authority Key Identifier: keyid:55:3D:76:11:EA:6B:CE:5E:C7:96:69:E4:B1:F1:47:F5:9C:2A:0E:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:52:d9:be:fc:ce:4b:6a:a0:d9:9b:7d:d1:49:a5:30:4a:31: d1:ec:0a:d9:1a:96:b9:27:18:d6:74:09:b9:72:05:00:c2:de: 0e:5f:d2:f0:26:9e:25:4c:30:f5:9c:75:d4:09:44:ea:96:54: a2:10:4b:5a:e9:d6:62:e5:83:76:d8:7c:eb:52:57:a2:e9:32: 9c:45:a8:8b:23:81:9d:7f:a3:bd:cf:7b:a4:ba:20:38:b9:fd: 32:be:7b:4a:63:46:8d:7c:66:55:d4:1d:81:66:c3:ea:d0:37: c1:5f:1c:a4:ff:1c:02:5e:c6:b0:52:5b:3c:58:73:33:95:93: ac:3b:2e:c9:bb:55:15:98:5f:ee:88:a5:5a:02:e7:e0:1b:ba: 4b:3d:a4:bb:df:84:e0:5a:aa:03:20:af:9b:02:a1:d8:3b:e9: a8:6d:04:24:08:94:2c:a0:8e:5c:5b:0e:c0:16:8b:fe:35:64: b0:9f:14:da:e3:c6:ad:49:c5:53:ba:1a:7c:f5:6f:b8:51:35: d8:db:dc:d2:b3:15:50:e7:84:b4:96:dc:19:54:bc:8c:48:e6: 75:55:e1:38:9b:5e:b4:16:6b:fd:35:b7:c5:a7:0f:a2:6e:51: 8e:e5:f8:33:14:0a:76:f9:28:35:ff:00:64:04:fc:6c:76:17: d5:88:b1:dc -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUdrL3EZTEU76pqKAxZCTqACKpF00wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUzRDc2MTFFQTZCQ0U1RUM3OTY2OUU0QjFGMTQ3RjU5 QzJBMEVFRTAeFw0yNTA4MjAxNDI0NTdaFw0yNTA4MjExNDU2NTdaMDMxMTAvBgNV BAMTKDk5Nzg4RkFCQkVBN0NEOEZERUE2RkFDNTk3REJGNjgzMjlCRTg4MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq4AcYRijJZrs85/IxNmmq6f67 ZEJYvBmvSGSLtpuJGAPpUCW7N5pNO4ieWQOEcpZpDV1tadEMr0CFWskcqBSUQ50o DOh6EoD9RmkXAU715UrFRYvIZfYz4sq8LalQ59X7JUAElQ85EsXxaZ8BOTYG+TtW p4zEhQ1imX+NtaSYt0ItLGiHIB2LotTaJroIUG6bJcu06Rd9Jllghlgg+TvSmNYw USYM9lTR3VUZw9mFlfkRBTRqy2aWT46iotaABVlRvmGik5IVXD0dXQ/ynqrTdqTD 7rWVWBBMM8N/SOp7CW35Rw6N+OO4x8B6LDd8zSejaQB++r4okXDEsEpjl9C7AgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUmXiPq76nzY/epvrFl9v2gym+iCQwHwYDVR0j BBgwFoAUVT12Eeprzl7HlmnksfFH9ZwqDu4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzEyODI3MWUtYzI2OS00OTU0LTg3ZGItZDE4NGRmMTdm ODVjLzQvNTUzRDc2MTFFQTZCQ0U1RUM3OTY2OUU0QjFGMTQ3RjU5QzJBMEVFRS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzU1M0Q3NjExRUE2QkNF NUVDNzk2NjlFNEIxRjE0N0Y1OUMyQTBFRUUuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvYzEyODI3MWUtYzI2OS00OTU0LTg3ZGItZDE4NGRmMTdmODVj LzQvNTUzRDc2MTFFQTZCQ0U1RUM3OTY2OUU0QjFGMTQ3RjU5QzJBMEVFRS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAE5S2b78zktqoNmbfdFJpTBKMdHsCtkalrknGNZ0CblyBQDC3g5f0vAm niVMMPWcddQJROqWVKIQS1rp1mLlg3bYfOtSV6LpMpxFqIsjgZ1/o73Pe6S6IDi5 /TK+e0pjRo18ZlXUHYFmw+rQN8FfHKT/HAJexrBSWzxYczOVk6w7Lsm7VRWYX+6I pVoC5+Abuks9pLvfhOBaqgMgr5sCodg76ahtBCQIlCygjlxbDsAWi/41ZLCfFNrj xq1JxVO6Gnz1b7hRNdjb3NKzFVDnhLSW3BlUvIxI5nVV4TibXrQWa/01t8WnD6Ju UY7l+DMUCnb5KDX/AGQE/Gx2F9WIsdw= -----END CERTIFICATE-----Generated at Thu Aug 21 03:09:20 2025 by rpki-client