$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.mft File: F900BC65E2B646EBAC472A5DEA12BDB0011AC122.mft (raw, json) Hash identifier: uLsCfUWQeUmJqPzOKRFCX6ibCFI/0SlE36DSc9Kpzek= Subject key identifier: 20:39:1B:94:F6:BD:62:02:FA:69:86:31:C7:54:74:F8:11:4D:6B:92 Authority key identifier: F9:00:BC:65:E2:B6:46:EB:AC:47:2A:5D:EA:12:BD:B0:01:1A:C1:22 Certificate issuer: /CN=F900BC65E2B646EBAC472A5DEA12BDB0011AC122 Certificate serial: 653801B0E9A28E2707226759E79EC5D36AC8B318 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.mft Manifest number: 052F Signing time: Sun 29 Jun 2025 19:25:40 +0000 Manifest this update: Sun 29 Jun 2025 19:20:40 +0000 Manifest next update: Mon 30 Jun 2025 23:14:40 +0000 Files and hashes: 1: F900BC65E2B646EBAC472A5DEA12BDB0011AC122.crl (hash: zRZMhSAAvXn4Uigv83Y6OxBKZ+PFuK8OkQPBjyCrBkM=) 2: 326130613a363034303a336630303a3a2f34302d3438203d3e20323033303639.roa (hash: u/op1Gb+lh53LhTdxSovsMBPfFi75dye37nTdYVQSh4=) 3: 326130613a363034303a336638303a3a2f34312d3438203d3e203134363138.roa (hash: 4JKiECPfyLZYZpNlohD2hYOZCrShpFM8qyjM4PYygzc=) 4: 326130613a363034303a336638303a3a2f34312d3438203d3e203136353039.roa (hash: d5nVF16uuJH0TZ1YA8s7hx5fCbPpHfSbcJo4JXI+35s=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.crl rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 17:49:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:38:01:b0:e9:a2:8e:27:07:22:67:59:e7:9e:c5:d3:6a:c8:b3:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F900BC65E2B646EBAC472A5DEA12BDB0011AC122 Validity Not Before: Jun 29 19:20:40 2025 GMT Not After : Jun 30 23:14:40 2025 GMT Subject: CN=20391B94F6BD6202FA698631C75474F8114D6B92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:64:01:f4:9d:71:47:f6:8d:0a:db:c9:d0:17: 39:f3:00:ef:1d:89:00:d7:61:88:ad:93:a0:38:42: 85:83:5a:9e:74:09:01:fa:ff:57:53:f2:8d:1a:78: ca:fd:f3:49:3e:32:bb:5a:dc:d3:04:43:71:88:4f: 2c:81:84:16:80:e0:21:26:80:c7:35:fc:44:05:4b: 91:1c:c0:be:c0:4e:bf:14:a2:5d:3f:4c:92:00:49: c1:06:33:e5:2b:00:3f:7d:66:e1:59:13:43:39:40: 90:e7:0f:5d:63:d8:84:6f:dd:57:28:f6:d2:d9:fc: 84:be:16:68:66:92:a4:3b:9c:b7:4d:11:2c:20:81: 0d:91:45:a2:ae:6e:dc:f3:43:e2:00:ac:5b:ac:c7: 6f:ff:0d:c4:45:fa:5f:89:f7:d0:d5:aa:7e:3d:5b: fc:f7:cc:22:a6:43:cc:0a:42:d5:cb:76:3c:0d:9d: 25:e7:95:e2:b4:69:34:fd:a6:f9:9a:af:de:d1:34: 8f:df:2a:e5:57:b6:68:98:ae:37:0b:23:9b:43:af: 74:29:df:9d:e7:74:9c:d1:a7:37:4f:88:e2:36:94: b4:3c:e9:5e:8a:0b:a0:7d:a5:91:55:75:38:45:6b: 36:2d:38:df:6b:b9:ba:26:6c:7b:f0:10:c3:53:65: e4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:39:1B:94:F6:BD:62:02:FA:69:86:31:C7:54:74:F8:11:4D:6B:92 X509v3 Authority Key Identifier: keyid:F9:00:BC:65:E2:B6:46:EB:AC:47:2A:5D:EA:12:BD:B0:01:1A:C1:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:b5:24:38:1e:ff:6f:4c:ac:0e:d2:7d:98:87:bc:17:f1:2e: 0b:e0:3e:a3:9a:51:ea:69:90:98:c2:15:bd:5e:22:29:4a:9d: b9:e1:29:0b:2c:97:c4:e3:01:71:68:4b:c4:e9:b3:44:e3:90: a3:e1:5e:9f:9a:ed:4e:f0:73:44:01:2f:72:ad:b2:91:c9:66: 26:0d:52:a5:5c:2a:59:08:a8:d5:06:4c:39:8a:af:f6:38:8e: 0b:c8:9a:88:1b:aa:49:67:ae:df:39:85:d3:48:56:6d:a7:dd: a3:bc:c7:2d:2e:68:fb:22:a1:07:17:e8:42:ec:f7:17:f2:68: 59:33:c7:e3:f8:12:d4:9b:34:de:84:76:9d:0e:c8:b7:d0:71: 82:d1:9b:87:23:56:9a:5a:19:42:87:86:79:c9:ab:8f:4f:33: da:0b:ec:16:ee:7b:34:b2:06:3f:4d:bf:04:92:27:0f:dc:69: 52:10:36:e8:03:ce:30:fd:fb:59:79:2b:af:27:d4:36:5d:17: 2c:5c:c7:47:35:d8:22:94:fa:4d:90:a4:5b:e5:0a:a9:b1:f8: 6d:af:99:09:7d:ab:37:73:bf:2a:a7:7b:ae:df:fe:e5:e0:74: 8a:31:8b:62:0a:32:cd:e0:18:9b:25:20:99:96:2b:59:33:4a: aa:0e:d1:ae -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUZTgBsOmijicHImdZ557F02rIsxgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjkwMEJDNjVFMkI2NDZFQkFDNDcyQTVERUExMkJEQjAw MTFBQzEyMjAeFw0yNTA2MjkxOTIwNDBaFw0yNTA2MzAyMzE0NDBaMDMxMTAvBgNV BAMTKDIwMzkxQjk0RjZCRDYyMDJGQTY5ODYzMUM3NTQ3NEY4MTE0RDZCOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJZAH0nXFH9o0K28nQFznzAO8d iQDXYYitk6A4QoWDWp50CQH6/1dT8o0aeMr980k+Mrta3NMEQ3GITyyBhBaA4CEm gMc1/EQFS5EcwL7ATr8Uol0/TJIAScEGM+UrAD99ZuFZE0M5QJDnD11j2IRv3Vco 9tLZ/IS+FmhmkqQ7nLdNESwggQ2RRaKubtzzQ+IArFusx2//DcRF+l+J99DVqn49 W/z3zCKmQ8wKQtXLdjwNnSXnleK0aTT9pvmar97RNI/fKuVXtmiYrjcLI5tDr3Qp 353ndJzRpzdPiOI2lLQ86V6KC6B9pZFVdThFazYtON9rubombHvwEMNTZeQhAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUIDkblPa9YgL6aYYxx1R0+BFNa5IwHwYDVR0j BBgwFoAU+QC8ZeK2RuusRypd6hK9sAEawSIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi ZTRlLzMvRjkwMEJDNjVFMkI2NDZFQkFDNDcyQTVERUExMkJEQjAwMTFBQzEyMi5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wL0Y5MDBCQzY1RTJCNjQ2 RUJBQzQ3MkE1REVBMTJCREIwMDExQUMxMjIuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJiZTRl LzMvRjkwMEJDNjVFMkI2NDZFQkFDNDcyQTVERUExMkJEQjAwMTFBQzEyMi5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAFa1JDge/29MrA7SfZiHvBfxLgvgPqOaUeppkJjCFb1eIilKnbnhKQss l8TjAXFoS8Tps0TjkKPhXp+a7U7wc0QBL3KtspHJZiYNUqVcKlkIqNUGTDmKr/Y4 jgvImogbqklnrt85hdNIVm2n3aO8xy0uaPsioQcX6ELs9xfyaFkzx+P4EtSbNN6E dp0OyLfQcYLRm4cjVppaGUKHhnnJq49PM9oL7BbuezSyBj9NvwSSJw/caVIQNugD zjD9+1l5K68n1DZdFyxcx0c12CKU+k2QpFvlCqmx+G2vmQl9qzdzvyqne67f/uXg dIoxi2IKMs3gGJslIJmWK1kzSqoO0a4= -----END CERTIFICATE-----Generated at Mon Jun 30 02:51:17 2025 by rpki-client