$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/4/B126634521E5E49C535FCBEC43BA2D922C30E136.mft File: B126634521E5E49C535FCBEC43BA2D922C30E136.mft (raw, json) Hash identifier: LNNIp4/HbWLfYORWAH3TpbujMkX0IT34ZKhIfdV86yU= Subject key identifier: 38:CC:A3:67:BD:A2:4B:C7:62:CA:72:C3:6A:21:6B:7E:E1:0A:5D:2D Authority key identifier: B1:26:63:45:21:E5:E4:9C:53:5F:CB:EC:43:BA:2D:92:2C:30:E1:36 Certificate issuer: /CN=B126634521E5E49C535FCBEC43BA2D922C30E136 Certificate serial: 707E29D7EAE1D709231CA60E916756B7B44C1D17 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B126634521E5E49C535FCBEC43BA2D922C30E136.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/4/B126634521E5E49C535FCBEC43BA2D922C30E136.mft Manifest number: 7A Signing time: Sun 29 Jun 2025 02:34:07 +0000 Manifest this update: Sun 29 Jun 2025 02:29:07 +0000 Manifest next update: Mon 30 Jun 2025 02:56:07 +0000 Files and hashes: 1: 326130613a363034303a343430303a3a2f34382d3438203d3e20313532333638.roa (hash: pIkMxK/vDEw873dkebmyQN4JOmiMolHB/gzzt1LQXbo=) 2: 326130613a363034303a343430303a3a2f34382d3438203d3e203530313034.roa (hash: wVp4YEv0t3dNFBj7z0WS+J9iHIKEQspXspUxf+IIu0Q=) 3: B126634521E5E49C535FCBEC43BA2D922C30E136.crl (hash: VxAXD6hpa9SatB0/5ayrdIs0CWxDaSJPiuu5ks9LtRc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/4/B126634521E5E49C535FCBEC43BA2D922C30E136.crl rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/4/B126634521E5E49C535FCBEC43BA2D922C30E136.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B126634521E5E49C535FCBEC43BA2D922C30E136.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 23:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:7e:29:d7:ea:e1:d7:09:23:1c:a6:0e:91:67:56:b7:b4:4c:1d:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B126634521E5E49C535FCBEC43BA2D922C30E136 Validity Not Before: Jun 29 02:29:07 2025 GMT Not After : Jun 30 02:56:07 2025 GMT Subject: CN=38CCA367BDA24BC762CA72C36A216B7EE10A5D2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ce:3c:fc:1c:49:06:a9:1b:8f:d0:ca:3c:25: d8:5d:78:71:3e:de:0f:be:62:c4:d0:9d:01:25:71: 61:b2:03:cf:e1:0c:17:9f:4d:ab:2b:81:43:77:f3: 06:17:18:4d:6a:34:27:de:87:72:27:8c:97:7f:2f: c4:8e:63:aa:2d:19:f6:ac:cd:56:5b:29:db:bf:82: d9:37:d4:da:17:b4:6c:27:fc:55:77:19:62:be:e8: e5:b3:89:ff:79:b8:24:b1:f3:b5:8a:78:b7:76:f1: 24:86:01:7d:91:bf:c3:d1:6d:9b:b0:6e:1e:f0:e8: 7b:08:68:26:bf:e9:63:f7:d8:5d:9b:8f:b3:35:8f: c9:1f:3b:6f:ed:9b:99:35:cb:8e:00:15:1e:d8:e6: 42:20:1a:65:ea:a3:60:f6:c8:71:25:ca:54:55:7d: 7c:54:71:6f:01:5a:49:65:ae:3f:85:ec:e2:a0:72: cb:ed:92:a3:59:68:33:69:9b:8a:20:b2:dc:ba:a2: e6:e8:8c:31:18:40:56:1c:71:72:7a:bc:5e:81:ec: 14:9b:66:0a:5e:52:88:91:0b:9e:7a:04:27:6e:e9: 78:5f:08:32:19:7c:79:d7:62:c5:d2:8b:2d:1e:f4: 24:66:77:3e:ec:45:22:62:a3:d3:fe:88:77:0b:04: 53:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:CC:A3:67:BD:A2:4B:C7:62:CA:72:C3:6A:21:6B:7E:E1:0A:5D:2D X509v3 Authority Key Identifier: keyid:B1:26:63:45:21:E5:E4:9C:53:5F:CB:EC:43:BA:2D:92:2C:30:E1:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/4/B126634521E5E49C535FCBEC43BA2D922C30E136.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B126634521E5E49C535FCBEC43BA2D922C30E136.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/4/B126634521E5E49C535FCBEC43BA2D922C30E136.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:b0:ad:77:11:63:f1:0f:0c:d9:66:91:f7:c7:a9:43:c2:c5: 06:20:cd:3a:d6:6a:1b:a5:8b:e2:48:84:70:28:9c:52:15:d6: 22:57:ba:64:d8:bc:9d:ed:73:b4:16:8a:0a:35:81:da:22:86: 3e:73:35:2d:ff:39:2a:8a:d4:1d:ef:e7:3a:ad:fa:3d:71:b8: 35:7a:90:2f:ca:65:06:e2:53:13:63:87:8a:f0:57:5e:08:fd: 91:5b:a5:e0:2b:1f:f7:51:65:41:a7:0b:c1:bd:22:27:66:ff: e0:87:da:4a:0c:a2:ed:b8:cc:a6:51:50:bf:19:c0:40:58:9d: 03:37:41:08:cc:b8:f6:8d:27:19:94:53:55:7a:32:b8:5c:48: 85:2e:36:e3:2d:43:70:49:4c:67:5a:9f:55:0e:06:75:38:51: e4:9c:2f:f4:1b:bd:f7:30:2c:d9:00:c9:12:36:ab:e4:cb:6c: 12:5c:c4:67:bc:0c:7d:f5:dd:a4:2a:4c:bd:84:86:01:54:56: b5:b2:f1:08:12:ee:98:64:c4:cb:45:1f:21:43:78:09:9f:9f: 21:60:42:00:c4:59:88:65:d8:ae:a9:e9:fc:d5:24:8a:3b:2d: 7f:31:90:93:08:bb:c1:69:7d:ab:e8:d9:33:b3:02:56:db:f8: 2d:70:09:ef -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUcH4p1+rh1wkjHKYOkWdWt7RMHRcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjEyNjYzNDUyMUU1RTQ5QzUzNUZDQkVDNDNCQTJEOTIy QzMwRTEzNjAeFw0yNTA2MjkwMjI5MDdaFw0yNTA2MzAwMjU2MDdaMDMxMTAvBgNV BAMTKDM4Q0NBMzY3QkRBMjRCQzc2MkNBNzJDMzZBMjE2QjdFRTEwQTVEMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFzjz8HEkGqRuP0Mo8JdhdeHE+ 3g++YsTQnQElcWGyA8/hDBefTasrgUN38wYXGE1qNCfeh3InjJd/L8SOY6otGfas zVZbKdu/gtk31NoXtGwn/FV3GWK+6OWzif95uCSx87WKeLd28SSGAX2Rv8PRbZuw bh7w6HsIaCa/6WP32F2bj7M1j8kfO2/tm5k1y44AFR7Y5kIgGmXqo2D2yHElylRV fXxUcW8BWkllrj+F7OKgcsvtkqNZaDNpm4ogsty6oubojDEYQFYccXJ6vF6B7BSb ZgpeUoiRC556BCdu6XhfCDIZfHnXYsXSiy0e9CRmdz7sRSJio9P+iHcLBFPvAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUOMyjZ72iS8diynLDaiFrfuEKXS0wHwYDVR0j BBgwFoAUsSZjRSHl5JxTX8vsQ7otkiww4TYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVk OGM0LzQvQjEyNjYzNDUyMUU1RTQ5QzUzNUZDQkVDNDNCQTJEOTIyQzMwRTEzNi5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wL0IxMjY2MzQ1MjFFNUU0 OUM1MzVGQ0JFQzQzQkEyRDkyMkMzMEUxMzYuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVkOGM0 LzQvQjEyNjYzNDUyMUU1RTQ5QzUzNUZDQkVDNDNCQTJEOTIyQzMwRTEzNi5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAJqwrXcRY/EPDNlmkffHqUPCxQYgzTrWahuli+JIhHAonFIV1iJXumTY vJ3tc7QWigo1gdoihj5zNS3/OSqK1B3v5zqt+j1xuDV6kC/KZQbiUxNjh4rwV14I /ZFbpeArH/dRZUGnC8G9Iidm/+CH2koMou24zKZRUL8ZwEBYnQM3QQjMuPaNJxmU U1V6MrhcSIUuNuMtQ3BJTGdan1UOBnU4UeScL/QbvfcwLNkAyRI2q+TLbBJcxGe8 DH313aQqTL2EhgFUVrWy8QgS7phkxMtFHyFDeAmfnyFgQgDEWYhl2K6p6fzVJIo7 LX8xkJMIu8Fpfavo2TOzAlbb+C1wCe8= -----END CERTIFICATE-----Generated at Sun Jun 29 12:06:37 2025 by rpki-client