$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.mft File: 53BAB8A9F833789B353D2ACC15CE37270E3D60E3.mft (raw, json) Hash identifier: b+lRIttYJZw/TiUWvZ3Cf9TJSLKOaaaxmUtGQMMq0ZA= Subject key identifier: 83:92:A9:78:79:04:A5:F3:08:14:6C:3E:A8:BB:26:27:D9:0F:0F:CE Authority key identifier: 53:BA:B8:A9:F8:33:78:9B:35:3D:2A:CC:15:CE:37:27:0E:3D:60:E3 Certificate issuer: /CN=53BAB8A9F833789B353D2ACC15CE37270E3D60E3 Certificate serial: 125296D8727F496CB6A213679685D6B3AFCDFFAB Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.mft Manifest number: 030E Signing time: Tue 06 May 2025 17:23:09 +0000 Manifest this update: Tue 06 May 2025 17:18:09 +0000 Manifest next update: Wed 07 May 2025 19:40:09 +0000 Files and hashes: 1: 53BAB8A9F833789B353D2ACC15CE37270E3D60E3.crl (hash: MTg1GwMZZSRpeIDXE+krnpDGlmPs2+u+7Mq5eMqmC3s=) 2: 326130613a363034303a343930303a3a2f34302d3438203d3e20323030313739.roa (hash: B12DmFls+H0qkH0yc3239fgwixjYfGQa/u7XVxErqzQ=) 3: 326130613a363034303a353430303a3a2f34302d3438203d3e20323032323031.roa (hash: rgKv78KNBaeBobwea7KnBLuciKXlgVnivSyvettjEmc=) 4: 326130613a363034303a353430303a3a2f34302d3438203d3e20323030313739.roa (hash: iJpluoF3HoeICJtyNSVX2W7UjOGIKihBFoLXBu2iRVU=) 5: 326130353a646663313a393530303a3a2f34302d3438203d3e20323030313739.roa (hash: tBCbEpr+oJ1RFgpk9g+qD3+yfAoxP+nrSqRPHhwlJ+w=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.crl rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 May 2025 11:26:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:52:96:d8:72:7f:49:6c:b6:a2:13:67:96:85:d6:b3:af:cd:ff:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53BAB8A9F833789B353D2ACC15CE37270E3D60E3 Validity Not Before: May 6 17:18:09 2025 GMT Not After : May 7 19:40:09 2025 GMT Subject: CN=8392A9787904A5F308146C3EA8BB2627D90F0FCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3d:88:19:14:c4:4f:69:ca:f9:03:ce:69:cd: c1:9a:3f:a4:35:18:5c:00:44:5c:cb:dc:45:6d:95: 02:6f:c3:3d:45:05:3e:13:6e:fe:3c:85:29:9a:fe: 6d:ad:03:8a:2d:22:75:41:47:8d:f9:26:19:78:8a: 5c:aa:a2:7c:6f:0d:6f:b9:e9:65:97:36:f3:9f:9e: 27:c7:b8:e7:44:5d:bd:d6:bb:f5:cb:ae:87:f9:a6: 1b:d8:40:ab:6a:6f:02:12:bc:0b:80:4f:21:3c:f5: d0:a7:e1:97:b4:1c:5e:14:ec:92:60:fa:e7:45:58: 94:e6:48:fb:71:cd:49:9b:f9:36:d2:10:5f:03:b3: cf:20:b5:95:4e:2c:2f:2f:25:11:87:e8:83:86:5c: c8:6f:fb:70:c7:75:a8:07:96:d0:a9:52:e7:2e:95: 57:59:74:31:f6:3f:4d:dc:4e:2d:91:cc:dd:93:8e: 73:e0:9a:59:92:21:52:fc:3e:c1:75:1c:ad:02:8a: 21:b0:73:5a:eb:96:e8:8a:b5:0b:7c:b0:f0:fc:95: 0c:3a:8a:aa:96:39:a4:96:2d:fa:d0:e6:8b:e5:af: aa:3a:16:d3:61:72:b0:2d:a8:52:4e:d7:57:5e:6d: 93:62:4e:de:f9:29:db:aa:7d:67:cb:95:1d:34:74: 1a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:92:A9:78:79:04:A5:F3:08:14:6C:3E:A8:BB:26:27:D9:0F:0F:CE X509v3 Authority Key Identifier: keyid:53:BA:B8:A9:F8:33:78:9B:35:3D:2A:CC:15:CE:37:27:0E:3D:60:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:a3:26:fd:f2:38:75:cf:f7:ec:a0:31:ea:f8:8d:c1:d5:b7: 38:ac:85:90:f2:f8:60:a9:2b:27:15:0a:e5:93:81:de:13:57: b0:df:f4:2d:3c:7a:51:82:1d:1b:1e:80:61:72:fd:04:1a:97: 3d:75:84:a6:e7:59:7b:b6:54:c6:ff:96:30:fa:8a:32:46:d4: af:a7:57:23:73:a3:63:9b:3f:2d:53:96:15:23:79:8f:50:48: 74:b0:3f:13:bb:90:2d:2c:69:33:09:76:d1:be:d7:f3:8c:0d: 10:9a:e2:22:3e:77:8a:be:cb:aa:78:84:b7:94:fd:d5:6c:f2: fa:b3:30:ab:8d:1f:fb:09:7e:55:8b:fe:15:4f:b2:4d:dd:bc: 3e:7b:65:30:a9:44:ec:47:b3:db:db:59:82:76:79:3e:82:f1: bb:ee:0f:12:84:bb:26:78:b3:ba:6e:f7:3c:4b:31:24:f8:4d: 7f:cc:d3:3d:c7:f5:04:12:16:b3:1c:31:34:e0:c9:64:4d:b5: 6e:32:a6:5e:cb:0e:56:3c:ce:8b:d7:1b:43:07:51:fc:2f:e8: 13:57:af:cc:37:d5:82:05:58:00:1e:33:54:5a:29:c9:b2:4c: 52:bf:e0:02:7b:fc:3f:a8:96:dd:ac:75:86:93:d7:44:de:37: c6:b9:70:6a -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUElKW2HJ/SWy2ohNnloXWs6/N/6swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTNCQUI4QTlGODMzNzg5QjM1M0QyQUNDMTVDRTM3Mjcw RTNENjBFMzAeFw0yNTA1MDYxNzE4MDlaFw0yNTA1MDcxOTQwMDlaMDMxMTAvBgNV BAMTKDgzOTJBOTc4NzkwNEE1RjMwODE0NkMzRUE4QkIyNjI3RDkwRjBGQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5PYgZFMRPacr5A85pzcGaP6Q1 GFwARFzL3EVtlQJvwz1FBT4Tbv48hSma/m2tA4otInVBR435Jhl4ilyqonxvDW+5 6WWXNvOfnifHuOdEXb3Wu/XLrof5phvYQKtqbwISvAuATyE89dCn4Ze0HF4U7JJg +udFWJTmSPtxzUmb+TbSEF8Ds88gtZVOLC8vJRGH6IOGXMhv+3DHdagHltCpUucu lVdZdDH2P03cTi2RzN2TjnPgmlmSIVL8PsF1HK0CiiGwc1rrluiKtQt8sPD8lQw6 iqqWOaSWLfrQ5ovlr6o6FtNhcrAtqFJO11debZNiTt75KduqfWfLlR00dBorAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUg5KpeHkEpfMIFGw+qLsmJ9kPD84wHwYDVR0j BBgwFoAUU7q4qfgzeJs1PSrMFc43Jw49YOMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDE3OTFhNjQtYTM2YS00ZWI5LWE2ZmYtZTFjNDA3OGE3 Y2EzLzAvNTNCQUI4QTlGODMzNzg5QjM1M0QyQUNDMTVDRTM3MjcwRTNENjBFMy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzUzQkFCOEE5RjgzMzc4 OUIzNTNEMkFDQzE1Q0UzNzI3MEUzRDYwRTMuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMDE3OTFhNjQtYTM2YS00ZWI5LWE2ZmYtZTFjNDA3OGE3Y2Ez LzAvNTNCQUI4QTlGODMzNzg5QjM1M0QyQUNDMTVDRTM3MjcwRTNENjBFMy5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAFmjJv3yOHXP9+ygMer4jcHVtzishZDy+GCpKycVCuWTgd4TV7Df9C08 elGCHRsegGFy/QQalz11hKbnWXu2VMb/ljD6ijJG1K+nVyNzo2ObPy1TlhUjeY9Q SHSwPxO7kC0saTMJdtG+1/OMDRCa4iI+d4q+y6p4hLeU/dVs8vqzMKuNH/sJflWL /hVPsk3dvD57ZTCpROxHs9vbWYJ2eT6C8bvuDxKEuyZ4s7pu9zxLMST4TX/M0z3H 9QQSFrMcMTTgyWRNtW4ypl7LDlY8zovXG0MHUfwv6BNXr8w31YIFWAAeM1RaKcmy TFK/4AJ7/D+olt2sdYaT10TeN8a5cGo= -----END CERTIFICATE-----Generated at Tue May 6 22:38:20 2025 by rpki-client