$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.mft File: CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.mft (raw, json) Hash identifier: 1lO5XEPRXhgSIyouWDQUwH915JKWjMCDdVf0JbvlEgM= Subject key identifier: 4E:1A:B5:5D:EC:8E:00:88:D4:03:EA:81:18:C7:19:D2:77:F2:71:E5 Authority key identifier: CA:DC:66:A6:E5:5B:EB:AF:DD:FA:8B:D7:2B:31:27:C8:AE:B5:0E:C2 Certificate issuer: /CN=CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2 Certificate serial: 108024FB2E09ADB3EDFFB15806C76835322BC0F2 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.mft Manifest number: 0208 Signing time: Tue 25 Jun 2024 08:39:18 +0000 Manifest this update: Tue 25 Jun 2024 08:34:18 +0000 Manifest next update: Wed 26 Jun 2024 10:40:18 +0000 Files and hashes: 1: 326130353a646663313a383130303a3a2f34302d3438203d3e20323131343331.roa (hash: J+TjKX+7DGw7drJWlwu2XUXH9su5pdQu7se1IkJaFRc=) 2: CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.crl (hash: Bb1HjQYGiH2zuAJdLveRSqyKWO1Qx23VgIVf2oN3E4k=) 3: 326130353a646663313a383063303a3a2f34322d3438203d3e20313937383134.roa (hash: o42e8zQWNM3zuKtO/SaA2ho4i521e7Crxc5+2a9FM2w=) 4: 326130353a646663313a383030303a3a2f34342d3438203d3e20323034323931.roa (hash: Q4lN9IudS9dVhn2DTLFcQL0XvsRzy0y8gzvqMKmxv1g=) 5: 326130353a646663313a383031303a3a2f34342d3438203d3e20323132313534.roa (hash: Opw+/zUrRL+edlMn6fP0gnUOGTdXKF6bVI9Gbetqyds=) 6: 326130353a646663313a383130303a3a2f34342d3438203d3e20323132323736.roa (hash: Wd+/+ogAN5YRtKT5iit6N3SAY9vvbevhBloHOqj0VZw=) 7: 326130353a646663313a383166303a3a2f34342d3438203d3e20323131343331.roa (hash: Q313EmNcZjCp5gI85ocLN+HRvNtGlQ4fIkO1qdQCncY=) 8: 326130353a646663313a383136303a3a2f34342d3438203d3e203133333335.roa (hash: yAU+s5RSQ9o74YFs/yjgZ6jS5+py4B0mK0alfQuMo9g=) 9: 326130353a646663313a383030303a3a2f34302d3434203d3e20323131343331.roa (hash: 5mpJF+s6CqpqwSrSlttfU1GwfwEb1pV825oBZgzU96I=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.crl rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Jun 2024 01:42:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:80:24:fb:2e:09:ad:b3:ed:ff:b1:58:06:c7:68:35:32:2b:c0:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2 Validity Not Before: Jun 25 08:34:18 2024 GMT Not After : Jun 26 10:40:18 2024 GMT Subject: CN=4E1AB55DEC8E0088D403EA8118C719D277F271E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:23:9c:89:50:c2:14:1a:2d:26:7e:a5:0c:16: 84:30:6b:58:8d:ba:35:d1:d2:43:eb:57:e2:46:8b: 3b:53:a0:35:f7:11:d2:f4:1e:1f:83:eb:0a:4e:56: 84:44:39:14:ff:09:a1:f9:17:bc:30:8d:5c:57:81: 85:9d:cd:d6:f2:9d:65:4a:b3:b5:ea:be:33:8f:36: 20:e0:0d:5e:d7:ac:56:79:e6:5a:00:61:39:99:a7: a9:9d:de:e2:ea:4b:ee:0b:12:ac:73:c5:ef:67:1f: ee:33:8b:d6:0e:de:b5:27:f3:81:75:39:c9:fd:8d: ee:94:23:2f:f4:2a:3a:38:40:eb:4c:6f:db:47:5a: 23:01:09:3a:70:3f:f3:b9:87:a9:a9:93:ea:bb:23: fc:de:dd:32:2f:11:8e:6a:a4:56:5b:5a:18:ed:e6: a3:c1:5f:6f:c4:e4:31:7f:4c:6c:1c:3b:86:52:7a: 37:0d:e7:8e:43:41:39:e2:f2:0e:6a:aa:3c:1a:ff: 67:30:50:18:32:20:5e:4f:f8:c2:31:a6:fc:82:2f: 1d:2d:33:93:10:80:ad:cf:c9:d6:50:8d:70:8f:a5: c8:89:c4:cd:db:e5:42:50:de:65:5e:16:dd:ae:0e: e0:90:ff:3a:8c:c1:59:dd:c1:5c:15:92:57:ae:26: c9:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:1A:B5:5D:EC:8E:00:88:D4:03:EA:81:18:C7:19:D2:77:F2:71:E5 X509v3 Authority Key Identifier: keyid:CA:DC:66:A6:E5:5B:EB:AF:DD:FA:8B:D7:2B:31:27:C8:AE:B5:0E:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:f0:c3:c7:d0:f7:a2:7e:b4:b6:7a:0e:b5:d7:c5:b5:d2:31: f4:cf:30:bd:6d:d2:21:46:3d:33:3f:61:8e:8f:e4:f2:90:63: 24:f7:4a:ee:d3:6d:40:26:8e:d4:55:99:12:13:0e:c3:de:69: 06:e1:31:cc:b6:fc:36:2c:35:3f:93:f6:87:92:c8:e7:9e:26: fc:bd:fc:8f:a4:3b:ff:65:a4:54:b7:78:29:78:c7:5b:a7:ff: f3:c2:12:e3:a1:63:f7:b9:6d:ae:00:37:f2:a7:22:0f:13:64: b8:6f:3f:6c:14:ab:3d:03:b6:00:81:48:c1:5e:40:41:a1:e7: fd:b3:fe:e8:10:82:24:6f:d9:4f:56:c0:5f:d8:e3:98:ea:87: 05:88:94:92:09:64:b1:68:93:2c:17:68:be:f7:91:89:68:e3: 1a:17:3b:93:d6:0f:6f:37:4a:15:14:8d:c9:2c:27:06:02:1a: 17:ce:04:ca:3d:d2:58:85:d5:92:e7:d0:c8:ed:8d:6a:14:52: 5b:45:2e:f4:5a:1d:99:c4:32:85:9d:c9:25:7e:2d:b5:a2:4f: 30:79:f0:b2:f0:3a:21:a2:5a:b8:29:1b:81:78:f8:4f:66:8b: ff:f7:8a:ce:8c:f6:38:9d:f7:67:a1:f3:de:02:2d:2d:1d:d8: cb:b2:89:0c -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUEIAk+y4JrbPt/7FYBsdoNTIrwPIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FEQzY2QTZFNTVCRUJBRkRERkE4QkQ3MkIzMTI3QzhB RUI1MEVDMjAeFw0yNDA2MjUwODM0MThaFw0yNDA2MjYxMDQwMThaMDMxMTAvBgNV BAMTKDRFMUFCNTVERUM4RTAwODhENDAzRUE4MTE4QzcxOUQyNzdGMjcxRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkI5yJUMIUGi0mfqUMFoQwa1iN ujXR0kPrV+JGiztToDX3EdL0Hh+D6wpOVoREORT/CaH5F7wwjVxXgYWdzdbynWVK s7XqvjOPNiDgDV7XrFZ55loAYTmZp6md3uLqS+4LEqxzxe9nH+4zi9YO3rUn84F1 Ocn9je6UIy/0Kjo4QOtMb9tHWiMBCTpwP/O5h6mpk+q7I/ze3TIvEY5qpFZbWhjt 5qPBX2/E5DF/TGwcO4ZSejcN545DQTni8g5qqjwa/2cwUBgyIF5P+MIxpvyCLx0t M5MQgK3PydZQjXCPpciJxM3b5UJQ3mVeFt2uDuCQ/zqMwVndwVwVkleuJsnRAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUThq1XeyOAIjUA+qBGMcZ0nfyceUwHwYDVR0j BBgwFoAUytxmpuVb66/d+ovXKzEnyK61DsIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzk5MjY1ZWYtMjJhOS00MTAwLWEyM2QtNTFhOWQ5ZmVl YjdkLzEvQ0FEQzY2QTZFNTVCRUJBRkRERkE4QkQ3MkIzMTI3QzhBRUI1MEVDMi5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wL0NBREM2NkE2RTU1QkVC QUZEREZBOEJENzJCMzEyN0M4QUVCNTBFQzIuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvYzk5MjY1ZWYtMjJhOS00MTAwLWEyM2QtNTFhOWQ5ZmVlYjdk LzEvQ0FEQzY2QTZFNTVCRUJBRkRERkE4QkQ3MkIzMTI3QzhBRUI1MEVDMi5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAEvww8fQ96J+tLZ6DrXXxbXSMfTPML1t0iFGPTM/YY6P5PKQYyT3Su7T bUAmjtRVmRITDsPeaQbhMcy2/DYsNT+T9oeSyOeeJvy9/I+kO/9lpFS3eCl4x1un //PCEuOhY/e5ba4AN/KnIg8TZLhvP2wUqz0DtgCBSMFeQEGh5/2z/ugQgiRv2U9W wF/Y45jqhwWIlJIJZLFokywXaL73kYlo4xoXO5PWD283ShUUjcksJwYCGhfOBMo9 0liF1ZLn0MjtjWoUUltFLvRaHZnEMoWdySV+LbWiTzB58LLwOiGiWrgpG4F4+E9m i//3is6M9jid92eh894CLS0d2MuyiQw= -----END CERTIFICATE-----Generated at Tue Jun 25 12:07:55 2024 by rpki-client on console-fra.rpki-client.org