$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/4/B126634521E5E49C535FCBEC43BA2D922C30E136.mft File: B126634521E5E49C535FCBEC43BA2D922C30E136.mft (raw, json) Hash identifier: nqE3vy0Jf/cmAEDkwms/FhRTjTbkBhO01CRWNr7iK4I= Subject key identifier: 38:3A:AD:94:F5:0C:95:7C:2B:BC:F1:8D:70:7E:AC:98:69:AA:ED:89 Authority key identifier: B1:26:63:45:21:E5:E4:9C:53:5F:CB:EC:43:BA:2D:92:2C:30:E1:36 Certificate issuer: /CN=B126634521E5E49C535FCBEC43BA2D922C30E136 Certificate serial: 5A2C9084DBDB76CCFA95483A3CEC21151CBB5810 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B126634521E5E49C535FCBEC43BA2D922C30E136.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/4/B126634521E5E49C535FCBEC43BA2D922C30E136.mft Manifest number: 3D Signing time: Wed 07 May 2025 21:12:11 +0000 Manifest this update: Wed 07 May 2025 21:07:11 +0000 Manifest next update: Thu 08 May 2025 23:07:11 +0000 Files and hashes: 1: 326130613a363034303a343430303a3a2f34382d3438203d3e203530313034.roa (hash: wVp4YEv0t3dNFBj7z0WS+J9iHIKEQspXspUxf+IIu0Q=) 2: 326130613a363034303a343430303a3a2f34382d3438203d3e20313532333638.roa (hash: pIkMxK/vDEw873dkebmyQN4JOmiMolHB/gzzt1LQXbo=) 3: B126634521E5E49C535FCBEC43BA2D922C30E136.crl (hash: 2WYVNlm4TX5MNJq7neA3Feb0ndY/820M8WhxYE1rDw4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/4/B126634521E5E49C535FCBEC43BA2D922C30E136.crl rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/4/B126634521E5E49C535FCBEC43BA2D922C30E136.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B126634521E5E49C535FCBEC43BA2D922C30E136.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 May 2025 23:07:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:2c:90:84:db:db:76:cc:fa:95:48:3a:3c:ec:21:15:1c:bb:58:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B126634521E5E49C535FCBEC43BA2D922C30E136 Validity Not Before: May 7 21:07:11 2025 GMT Not After : May 8 23:07:11 2025 GMT Subject: CN=383AAD94F50C957C2BBCF18D707EAC9869AAED89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:2b:24:5c:40:63:5a:d3:dd:74:0e:da:13:8b: 58:d7:37:30:7e:be:7f:23:b6:31:ea:9e:7c:fc:28: 45:91:2d:9f:fa:12:0b:4f:8e:43:62:8b:91:12:e6: ed:fe:46:70:b9:a2:75:a6:62:95:26:8b:6c:84:05: 7d:67:5c:b2:b3:06:4d:f1:05:7b:09:73:db:9c:6e: 3f:07:fb:dd:3f:80:fb:1a:a7:2e:ed:34:51:88:82: 1e:6e:8d:73:b5:2b:37:16:6f:60:09:42:6d:d4:fc: 13:4b:e0:c5:5d:00:59:aa:9f:f0:3f:6f:fd:40:0a: 8f:67:9c:3d:3b:f3:83:91:4a:48:58:c0:d2:56:33: 93:e9:9f:93:3c:15:d8:2c:9e:9e:2c:70:73:3b:13: f8:1c:95:f0:af:05:23:05:e1:08:0d:07:65:ce:86: ea:7f:0d:16:66:c3:1e:a0:f2:28:1d:06:bc:2c:fa: 66:32:41:11:b0:5e:dd:b2:3a:5f:d5:d7:0f:ed:8f: 3a:cd:00:da:18:fa:84:7d:23:0d:26:8d:da:d3:cd: bc:4d:a2:39:6a:aa:87:28:68:65:8a:77:53:c5:f9: a4:a1:90:41:26:99:ac:e7:b2:86:5c:fb:3f:fb:a9: d3:0b:4c:97:a0:cb:ef:59:b3:4d:dc:8f:d0:ae:f1: 95:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:3A:AD:94:F5:0C:95:7C:2B:BC:F1:8D:70:7E:AC:98:69:AA:ED:89 X509v3 Authority Key Identifier: keyid:B1:26:63:45:21:E5:E4:9C:53:5F:CB:EC:43:BA:2D:92:2C:30:E1:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/4/B126634521E5E49C535FCBEC43BA2D922C30E136.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B126634521E5E49C535FCBEC43BA2D922C30E136.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/4/B126634521E5E49C535FCBEC43BA2D922C30E136.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:da:22:be:01:22:6c:1b:ad:f2:2e:ee:ab:72:b3:82:37:b8: 0a:86:02:59:c5:ed:3a:ad:24:b2:85:d4:16:be:eb:94:a1:f4: 5b:a7:a2:f2:9b:55:92:cb:c2:58:7c:26:d9:08:8e:1c:7c:36: 04:d8:4c:0a:15:ca:c8:5b:8b:ae:62:18:5f:f1:bc:52:8c:a1: 33:cf:b1:ea:1e:41:cb:e7:cc:a6:f3:c4:4d:d8:d2:a5:b7:00: f6:51:39:dc:86:05:33:2d:25:3c:88:45:77:0e:93:0a:68:69: 08:94:5a:bd:5d:4c:07:47:57:f5:fc:e1:70:a4:b3:82:1a:f7: a0:b9:e4:d9:2e:2c:64:4d:b0:35:00:2a:e9:f8:03:72:3c:b3: e4:0f:56:77:34:d0:9f:12:09:e4:b0:27:e6:f3:82:4d:c5:c4: 2c:a1:2f:90:0b:d4:35:e4:b3:53:33:fd:3f:6a:9d:e6:01:6a: 23:f2:40:73:9a:8f:03:59:99:50:fd:6a:f4:20:59:25:46:63: 56:a3:85:e4:4b:f4:28:18:b7:54:8f:1b:c3:83:b3:f3:52:99: 58:c2:14:5a:2d:2b:64:b3:22:7c:b8:e3:09:0c:36:1f:9c:19: 3c:3e:23:6e:96:40:0e:95:c4:90:c3:4d:e6:8c:c7:a9:0d:4d: 02:fb:2b:a2 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUWiyQhNvbdsz6lUg6POwhFRy7WBAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjEyNjYzNDUyMUU1RTQ5QzUzNUZDQkVDNDNCQTJEOTIy QzMwRTEzNjAeFw0yNTA1MDcyMTA3MTFaFw0yNTA1MDgyMzA3MTFaMDMxMTAvBgNV BAMTKDM4M0FBRDk0RjUwQzk1N0MyQkJDRjE4RDcwN0VBQzk4NjlBQUVEODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiKyRcQGNa0910DtoTi1jXNzB+ vn8jtjHqnnz8KEWRLZ/6EgtPjkNii5ES5u3+RnC5onWmYpUmi2yEBX1nXLKzBk3x BXsJc9ucbj8H+90/gPsapy7tNFGIgh5ujXO1KzcWb2AJQm3U/BNL4MVdAFmqn/A/ b/1ACo9nnD0784ORSkhYwNJWM5Ppn5M8Fdgsnp4scHM7E/gclfCvBSMF4QgNB2XO hup/DRZmwx6g8igdBrws+mYyQRGwXt2yOl/V1w/tjzrNANoY+oR9Iw0mjdrTzbxN ojlqqocoaGWKd1PF+aShkEEmmaznsoZc+z/7qdMLTJegy+9Zs03cj9Cu8ZXJAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUODqtlPUMlXwrvPGNcH6smGmq7YkwHwYDVR0j BBgwFoAUsSZjRSHl5JxTX8vsQ7otkiww4TYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVk OGM0LzQvQjEyNjYzNDUyMUU1RTQ5QzUzNUZDQkVDNDNCQTJEOTIyQzMwRTEzNi5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wL0IxMjY2MzQ1MjFFNUU0 OUM1MzVGQ0JFQzQzQkEyRDkyMkMzMEUxMzYuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVkOGM0 LzQvQjEyNjYzNDUyMUU1RTQ5QzUzNUZDQkVDNDNCQTJEOTIyQzMwRTEzNi5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAE/aIr4BImwbrfIu7qtys4I3uAqGAlnF7TqtJLKF1Ba+65Sh9FunovKb VZLLwlh8JtkIjhx8NgTYTAoVyshbi65iGF/xvFKMoTPPseoeQcvnzKbzxE3Y0qW3 APZROdyGBTMtJTyIRXcOkwpoaQiUWr1dTAdHV/X84XCks4Ia96C55NkuLGRNsDUA Kun4A3I8s+QPVnc00J8SCeSwJ+bzgk3FxCyhL5AL1DXks1Mz/T9qneYBaiPyQHOa jwNZmVD9avQgWSVGY1ajheRL9CgYt1SPG8ODs/NSmVjCFFotK2SzIny44wkMNh+c GTw+I26WQA6VxJDDTeaMx6kNTQL7K6I= -----END CERTIFICATE-----Generated at Thu May 8 12:50:51 2025 by rpki-client