$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.mft File: 53BAB8A9F833789B353D2ACC15CE37270E3D60E3.mft (raw, json) Hash identifier: QrVMMC99OvhjE5Pp62LURZIj9G9BNpnHPp51HmePSmE= Subject key identifier: 06:D9:61:B5:A6:CB:D8:E2:6A:2C:B6:63:DD:ED:07:1C:E0:3F:CE:CE Authority key identifier: 53:BA:B8:A9:F8:33:78:9B:35:3D:2A:CC:15:CE:37:27:0E:3D:60:E3 Certificate issuer: /CN=53BAB8A9F833789B353D2ACC15CE37270E3D60E3 Certificate serial: 295BCECD9E450B1DC450B0B45298B856B8BBA717 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.mft Manifest number: 0355 Signing time: Sun 29 Jun 2025 11:39:17 +0000 Manifest this update: Sun 29 Jun 2025 11:34:17 +0000 Manifest next update: Mon 30 Jun 2025 14:36:17 +0000 Files and hashes: 1: 326130613a363034303a353430303a3a2f34302d3438203d3e20323030313739.roa (hash: iJpluoF3HoeICJtyNSVX2W7UjOGIKihBFoLXBu2iRVU=) 2: 53BAB8A9F833789B353D2ACC15CE37270E3D60E3.crl (hash: CSdi2cYplCTlLX8cN9r4uEkAhbcnNr/Pky8E0fZQ9zw=) 3: 326130353a646663313a393530303a3a2f34302d3438203d3e20323030313739.roa (hash: tBCbEpr+oJ1RFgpk9g+qD3+yfAoxP+nrSqRPHhwlJ+w=) 4: 326130613a363034303a343930303a3a2f34302d3438203d3e20323030313739.roa (hash: B12DmFls+H0qkH0yc3239fgwixjYfGQa/u7XVxErqzQ=) 5: 326130613a363034303a353430303a3a2f34302d3438203d3e20323032323031.roa (hash: rgKv78KNBaeBobwea7KnBLuciKXlgVnivSyvettjEmc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.crl rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 13:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:5b:ce:cd:9e:45:0b:1d:c4:50:b0:b4:52:98:b8:56:b8:bb:a7:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53BAB8A9F833789B353D2ACC15CE37270E3D60E3 Validity Not Before: Jun 29 11:34:17 2025 GMT Not After : Jun 30 14:36:17 2025 GMT Subject: CN=06D961B5A6CBD8E26A2CB663DDED071CE03FCECE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:31:cb:78:57:d7:75:79:c2:ae:53:22:04:f4: fe:81:c3:2a:1b:5e:b3:40:48:d5:a0:ad:ad:75:5d: 50:79:4c:18:78:74:41:00:88:37:73:46:ac:7f:26: 7b:54:8e:af:d5:94:fb:27:72:78:4f:90:57:18:05: 4c:cc:c1:30:a5:63:e2:56:8d:50:a7:9e:dc:9f:ad: 54:09:3a:3a:ad:60:df:9a:f8:58:7b:6c:19:00:dd: e3:8a:8b:7d:73:5b:b5:eb:45:6f:fb:76:dc:02:0b: 0e:b1:9b:ec:f4:78:11:f1:eb:42:ef:67:e2:67:3c: 74:51:75:90:e5:4e:a6:30:88:57:c3:7e:cc:49:9a: 88:7f:66:f3:e3:b7:73:4b:41:51:e5:c9:61:86:70: 38:ec:79:68:2d:9e:84:8c:43:64:a1:4c:c4:a4:6f: fc:45:59:40:29:04:1a:86:43:54:71:97:41:0f:85: 99:b7:43:af:a8:42:cf:73:5b:94:00:0c:bf:98:0b: 2d:55:4a:17:0f:1e:29:e7:9b:56:ec:d3:0b:ce:52: ee:59:70:29:e0:c3:57:1f:e1:53:0d:c4:bb:29:49: 84:b3:f1:eb:78:78:a3:a4:f3:71:d3:fb:6f:94:75: c9:72:a1:20:c6:20:3d:60:e1:c3:c7:74:26:9b:60: e1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:D9:61:B5:A6:CB:D8:E2:6A:2C:B6:63:DD:ED:07:1C:E0:3F:CE:CE X509v3 Authority Key Identifier: keyid:53:BA:B8:A9:F8:33:78:9B:35:3D:2A:CC:15:CE:37:27:0E:3D:60:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:22:c6:97:95:ff:f3:df:1a:6b:3f:90:3c:17:0f:d8:9d:b1: 65:90:14:b8:b4:d3:91:c9:f5:4a:53:07:21:37:08:9b:b8:03: ad:45:28:8b:84:81:37:10:5f:37:e1:cf:c5:ce:49:f3:0d:32: f5:69:6a:69:63:b7:6c:ae:3a:f0:d7:50:b5:7b:44:2b:34:1b: 22:1a:88:21:3b:80:6b:35:1d:0a:20:8c:c5:6c:10:2a:d3:f1: 02:0c:9c:c8:08:8b:e9:15:fa:bd:8b:fe:48:2d:57:a5:21:39: 5e:56:b1:4f:6c:9b:0e:1b:3f:e9:84:7e:f1:26:f8:63:de:a7: 11:29:b4:3c:32:c9:1a:69:5b:26:66:96:6a:ed:19:6b:36:a8: 25:cf:3f:a4:e7:8e:7c:79:80:1d:98:75:51:2f:b1:b7:91:03: 33:72:e1:66:67:ba:c5:94:2f:9a:0b:4e:54:dd:60:1c:4f:85: fa:a2:2b:c4:cc:9c:66:b4:d1:38:9d:68:06:20:56:50:c5:49: 79:ff:96:70:b7:8b:b7:53:4e:2e:73:a4:3d:2d:bc:b0:ee:8c: 6e:05:29:82:65:61:84:cf:13:f5:c5:b8:2b:ab:11:ed:29:e0: 89:d2:11:45:77:15:3f:da:2b:40:8a:03:87:52:09:c3:da:2a: fe:32:60:32 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUKVvOzZ5FCx3EULC0Upi4Vri7pxcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTNCQUI4QTlGODMzNzg5QjM1M0QyQUNDMTVDRTM3Mjcw RTNENjBFMzAeFw0yNTA2MjkxMTM0MTdaFw0yNTA2MzAxNDM2MTdaMDMxMTAvBgNV BAMTKDA2RDk2MUI1QTZDQkQ4RTI2QTJDQjY2M0RERUQwNzFDRTAzRkNFQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoMct4V9d1ecKuUyIE9P6Bwyob XrNASNWgra11XVB5TBh4dEEAiDdzRqx/JntUjq/VlPsncnhPkFcYBUzMwTClY+JW jVCnntyfrVQJOjqtYN+a+Fh7bBkA3eOKi31zW7XrRW/7dtwCCw6xm+z0eBHx60Lv Z+JnPHRRdZDlTqYwiFfDfsxJmoh/ZvPjt3NLQVHlyWGGcDjseWgtnoSMQ2ShTMSk b/xFWUApBBqGQ1Rxl0EPhZm3Q6+oQs9zW5QADL+YCy1VShcPHinnm1bs0wvOUu5Z cCngw1cf4VMNxLspSYSz8et4eKOk83HT+2+UdclyoSDGID1g4cPHdCabYOEVAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUBtlhtabL2OJqLLZj3e0HHOA/zs4wHwYDVR0j BBgwFoAUU7q4qfgzeJs1PSrMFc43Jw49YOMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDE3OTFhNjQtYTM2YS00ZWI5LWE2ZmYtZTFjNDA3OGE3 Y2EzLzAvNTNCQUI4QTlGODMzNzg5QjM1M0QyQUNDMTVDRTM3MjcwRTNENjBFMy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzUzQkFCOEE5RjgzMzc4 OUIzNTNEMkFDQzE1Q0UzNzI3MEUzRDYwRTMuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMDE3OTFhNjQtYTM2YS00ZWI5LWE2ZmYtZTFjNDA3OGE3Y2Ez LzAvNTNCQUI4QTlGODMzNzg5QjM1M0QyQUNDMTVDRTM3MjcwRTNENjBFMy5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAIoixpeV//PfGms/kDwXD9idsWWQFLi005HJ9UpTByE3CJu4A61FKIuE gTcQXzfhz8XOSfMNMvVpamljt2yuOvDXULV7RCs0GyIaiCE7gGs1HQogjMVsECrT 8QIMnMgIi+kV+r2L/kgtV6UhOV5WsU9smw4bP+mEfvEm+GPepxEptDwyyRppWyZm lmrtGWs2qCXPP6Tnjnx5gB2YdVEvsbeRAzNy4WZnusWUL5oLTlTdYBxPhfqiK8TM nGa00TidaAYgVlDFSXn/lnC3i7dTTi5zpD0tvLDujG4FKYJlYYTPE/XFuCurEe0p 4InSEUV3FT/aK0CKA4dSCcPaKv4yYDI= -----END CERTIFICATE-----Generated at Sun Jun 29 22:18:19 2025 by rpki-client