$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft File: 6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft (raw, json) Hash identifier: yLdhM8PVzlQ097TYmMZJ6Ds5I4wfJfirSn5Gbb/62jQ= Subject key identifier: 72:D9:DF:C7:04:60:46:D8:FA:90:C0:B3:30:48:F9:D6:5A:DC:5C:AE Authority key identifier: 69:86:DC:82:81:2C:47:DA:14:99:4B:8E:6E:72:7B:72:E0:B2:F8:D8 Certificate issuer: /CN=6986DC82812C47DA14994B8E6E727B72E0B2F8D8 Certificate serial: 25DCAAC17E59F4F6C5678370AEA1669533BD9C41 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft Manifest number: 34 Signing time: Sat 23 Aug 2025 06:56:16 +0000 Manifest this update: Sat 23 Aug 2025 06:51:16 +0000 Manifest next update: Sun 24 Aug 2025 09:40:16 +0000 Files and hashes: 1: 326130613a363034303a343430303a3a2f34382d3438203d3e203530313034.roa (hash: JDVDvoY2LzG4FOnjq1lk2gJuRJSJTwl39Idwnd4C3E8=) 2: 6986DC82812C47DA14994B8E6E727B72E0B2F8D8.crl (hash: 8Y4hbdNRbSxp0QGL6HmLTFNcuwSJlbrwkyJK3g6paqY=) 3: 326130613a363034303a343430303a3a2f34382d3438203d3e20313532333638.roa (hash: cr9zAfMvxZve/7JXD2f4n3BhiKrPiLnrwH/qsV4egwU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.crl rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 09:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:dc:aa:c1:7e:59:f4:f6:c5:67:83:70:ae:a1:66:95:33:bd:9c:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6986DC82812C47DA14994B8E6E727B72E0B2F8D8 Validity Not Before: Aug 23 06:51:16 2025 GMT Not After : Aug 24 09:40:16 2025 GMT Subject: CN=72D9DFC7046046D8FA90C0B33048F9D65ADC5CAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6d:de:26:67:92:0d:c3:a5:fa:fd:cd:00:f4: 10:db:59:09:64:c4:44:0a:19:69:76:29:1c:c9:9b: 31:36:d0:91:ec:43:a6:e6:9e:8c:c0:b9:b8:ba:58: 38:f2:7f:fc:0a:df:21:5c:f6:f7:4e:20:23:19:5c: ec:07:db:4c:ae:1b:d9:f5:d4:16:89:8e:a0:98:fe: 05:aa:63:d1:3f:af:81:63:39:ae:dd:57:da:5d:45: e8:10:ef:af:1d:f8:e4:a4:78:9a:a9:f5:1c:e9:da: e7:2c:1f:18:04:95:f0:1a:09:51:5f:80:31:3e:81: 60:27:90:47:f7:e1:bd:23:01:48:ac:bd:f9:66:a1: 70:f7:ac:49:a7:73:d4:e2:7b:a0:c5:8c:4d:5d:94: f8:7d:39:6b:64:1c:33:fa:f3:94:a4:38:bf:d3:c7: f4:8b:4a:99:6c:fb:8a:6f:bb:7d:6e:8c:98:d0:e7: 2a:bb:2d:4d:32:e6:7c:7b:c3:18:aa:80:6d:d6:75: 25:05:80:bd:5e:1b:7d:80:f3:3f:f2:a3:7e:35:88: 8c:03:7a:03:df:73:c5:a6:94:3e:32:2f:81:55:91: 6b:ff:80:ea:7d:2d:30:65:ba:0a:f5:57:10:ee:be: 2c:10:bb:c3:2a:3f:0d:0f:8e:47:17:2d:58:fd:cb: 49:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:D9:DF:C7:04:60:46:D8:FA:90:C0:B3:30:48:F9:D6:5A:DC:5C:AE X509v3 Authority Key Identifier: keyid:69:86:DC:82:81:2C:47:DA:14:99:4B:8E:6E:72:7B:72:E0:B2:F8:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:1d:93:cb:b8:47:6d:e5:66:aa:f3:45:d0:ca:2a:38:e0:3c: 78:23:d3:32:4e:c2:47:d8:55:f1:9c:57:6b:14:fb:2a:87:00: 92:69:1d:cf:77:6b:1e:12:95:d5:93:ca:e5:68:fe:6b:4e:80: b3:9d:bd:a1:e5:9e:c1:e5:e6:73:ac:3f:5a:64:e6:80:71:bc: be:58:0a:13:d0:5b:fd:67:a0:84:39:6a:eb:a1:2c:76:da:41: 61:f3:bf:d5:38:1d:de:1c:c9:a4:de:54:d9:86:b2:4f:cf:64: 62:53:c8:ff:b7:01:78:ea:20:6e:18:43:20:60:99:b3:54:0e: fd:f6:a9:48:12:80:27:01:b3:8e:f0:46:a4:06:1e:f6:ae:60: 62:b0:b1:fe:2a:ce:54:7a:21:5b:78:4e:cf:2f:ce:b6:75:15: 63:c3:67:9b:84:3a:14:22:e8:88:df:28:9b:a3:1d:c3:2f:f3: 39:9e:a4:ce:ff:0e:a7:db:3a:dd:d8:b4:48:ee:0c:39:5c:d3: dc:e3:ba:d5:09:c8:14:5f:b5:70:1a:50:95:06:88:7c:cf:13: 48:b6:03:c8:a7:e0:44:d5:c4:cd:1a:ed:d4:92:5e:75:30:0b: 06:48:15:d9:a9:17:7d:3e:33:f5:3c:50:46:ff:8a:44:bf:30: fd:bb:d4:e5 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUJdyqwX5Z9PbFZ4NwrqFmlTO9nEEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk4NkRDODI4MTJDNDdEQTE0OTk0QjhFNkU3MjdCNzJF MEIyRjhEODAeFw0yNTA4MjMwNjUxMTZaFw0yNTA4MjQwOTQwMTZaMDMxMTAvBgNV BAMTKDcyRDlERkM3MDQ2MDQ2RDhGQTkwQzBCMzMwNDhGOUQ2NUFEQzVDQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYbd4mZ5INw6X6/c0A9BDbWQlk xEQKGWl2KRzJmzE20JHsQ6bmnozAubi6WDjyf/wK3yFc9vdOICMZXOwH20yuG9n1 1BaJjqCY/gWqY9E/r4FjOa7dV9pdRegQ768d+OSkeJqp9Rzp2ucsHxgElfAaCVFf gDE+gWAnkEf34b0jAUisvflmoXD3rEmnc9Tie6DFjE1dlPh9OWtkHDP685SkOL/T x/SLSpls+4pvu31ujJjQ5yq7LU0y5nx7wxiqgG3WdSUFgL1eG32A8z/yo341iIwD egPfc8WmlD4yL4FVkWv/gOp9LTBlugr1VxDuviwQu8MqPw0PjkcXLVj9y0k9AgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUctnfxwRgRtj6kMCzMEj51lrcXK4wHwYDVR0j BBgwFoAUaYbcgoEsR9oUmUuObnJ7cuCy+NgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVk OGM0LzkvNjk4NkRDODI4MTJDNDdEQTE0OTk0QjhFNkU3MjdCNzJFMEIyRjhEOC5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzY5ODZEQzgyODEyQzQ3 REExNDk5NEI4RTZFNzI3QjcyRTBCMkY4RDguY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVkOGM0 LzkvNjk4NkRDODI4MTJDNDdEQTE0OTk0QjhFNkU3MjdCNzJFMEIyRjhEOC5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAJwdk8u4R23lZqrzRdDKKjjgPHgj0zJOwkfYVfGcV2sU+yqHAJJpHc93 ax4SldWTyuVo/mtOgLOdvaHlnsHl5nOsP1pk5oBxvL5YChPQW/1noIQ5auuhLHba QWHzv9U4Hd4cyaTeVNmGsk/PZGJTyP+3AXjqIG4YQyBgmbNUDv32qUgSgCcBs47w RqQGHvauYGKwsf4qzlR6IVt4Ts8vzrZ1FWPDZ5uEOhQi6IjfKJujHcMv8zmepM7/ DqfbOt3YtEjuDDlc09zjutUJyBRftXAaUJUGiHzPE0i2A8in4ETVxM0a7dSSXnUw CwZIFdmpF30+M/U8UEb/ikS/MP271OU= -----END CERTIFICATE-----Generated at Sat Aug 23 23:49:36 2025 by rpki-client