$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.mft File: F900BC65E2B646EBAC472A5DEA12BDB0011AC122.mft (raw, json) Hash identifier: d0Z/6jzDHdUF5O0n2xnP5CSNZJcFCbPZ9xzluGxmxEE= Subject key identifier: 3F:38:3D:01:4C:D7:CC:E1:67:E5:D3:8D:69:90:94:A8:E8:7B:8B:A1 Authority key identifier: F9:00:BC:65:E2:B6:46:EB:AC:47:2A:5D:EA:12:BD:B0:01:1A:C1:22 Certificate issuer: /CN=F900BC65E2B646EBAC472A5DEA12BDB0011AC122 Certificate serial: 4817768971FB5F7A0814616119F4F487863ADB03 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.mft Manifest number: 04E7 Signing time: Wed 07 May 2025 22:50:37 +0000 Manifest this update: Wed 07 May 2025 22:45:37 +0000 Manifest next update: Fri 09 May 2025 00:03:37 +0000 Files and hashes: 1: 326130613a363034303a336638303a3a2f34312d3438203d3e203134363138.roa (hash: 4JKiECPfyLZYZpNlohD2hYOZCrShpFM8qyjM4PYygzc=) 2: 326130613a363034303a336630303a3a2f34302d3438203d3e20323033303639.roa (hash: u/op1Gb+lh53LhTdxSovsMBPfFi75dye37nTdYVQSh4=) 3: F900BC65E2B646EBAC472A5DEA12BDB0011AC122.crl (hash: kdr6U/8pjYP8WF7vU0abBEzTTqsdruaQgLkg/mYOZwE=) 4: 326130613a363034303a336638303a3a2f34312d3438203d3e203136353039.roa (hash: d5nVF16uuJH0TZ1YA8s7hx5fCbPpHfSbcJo4JXI+35s=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.crl rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 May 2025 00:03:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:17:76:89:71:fb:5f:7a:08:14:61:61:19:f4:f4:87:86:3a:db:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F900BC65E2B646EBAC472A5DEA12BDB0011AC122 Validity Not Before: May 7 22:45:37 2025 GMT Not After : May 9 00:03:37 2025 GMT Subject: CN=3F383D014CD7CCE167E5D38D699094A8E87B8BA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f9:71:20:d7:aa:4c:1a:e2:05:bc:33:2d:ec: a5:0d:79:68:83:59:8b:72:0f:02:20:3b:ce:da:77: 3a:dc:0c:d4:23:35:02:3d:ae:44:fc:12:fd:3b:da: 09:93:0a:80:6f:31:ad:63:6f:54:1a:a1:fc:1b:55: 0b:05:64:53:0e:76:5f:27:63:b2:11:6c:1b:f4:e5: b6:82:88:d7:ce:7f:5d:00:18:b4:d3:4b:20:4f:bc: eb:38:25:bc:0f:5a:de:32:4c:92:29:4d:6d:03:ca: c3:5e:1f:49:95:b7:a5:ff:9f:d2:00:7c:f7:1c:9e: cf:39:5c:37:3c:ed:e7:e2:83:45:39:58:f1:29:52: 26:24:b8:70:f6:01:e6:57:b5:cd:fa:f7:64:13:1b: 95:4d:e7:8b:0f:ce:91:e4:48:b3:47:ab:07:e8:7c: 2c:cf:a3:14:03:9a:44:57:73:9f:3a:c0:46:fc:38: ae:f4:85:c1:17:1e:44:c6:94:a7:27:59:06:a9:1e: 60:6e:2f:33:64:64:8f:fa:e3:7f:94:8f:74:ce:ec: 56:12:5d:1c:d2:e2:15:ae:36:e7:bd:02:47:eb:2c: 87:0d:a8:74:49:87:d4:b6:73:de:65:66:6e:c0:26: 32:60:15:03:49:66:0e:fb:a5:9e:7d:60:76:22:b9: 29:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:38:3D:01:4C:D7:CC:E1:67:E5:D3:8D:69:90:94:A8:E8:7B:8B:A1 X509v3 Authority Key Identifier: keyid:F9:00:BC:65:E2:B6:46:EB:AC:47:2A:5D:EA:12:BD:B0:01:1A:C1:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption db:4c:c5:4f:32:6f:25:35:15:04:b9:6e:42:2d:0c:98:c9:6d: bd:cb:87:80:53:e8:b9:61:75:56:2a:5a:79:b8:20:d7:0c:5f: 9e:5f:75:5e:c3:de:78:82:af:50:6e:f5:2d:c8:76:64:ad:0f: bf:59:4e:0a:25:7a:f5:d6:0f:72:74:e1:65:10:1b:be:e5:1e: 97:fd:cc:4e:68:ca:d4:bc:ce:84:b2:22:b7:a0:f7:32:92:0e: b8:17:cb:cf:81:fe:3f:01:9e:48:a6:c6:bd:ac:a9:02:8c:92: c9:6e:e2:54:85:26:9a:60:55:67:5b:fa:8c:b1:95:7e:d1:00: b2:f8:d7:bd:a4:8e:96:86:ec:a5:df:b5:23:ea:41:b2:a3:ab: 73:a5:8f:a6:ca:05:7d:af:14:e1:89:52:fd:d5:22:a3:23:e4: 33:90:8c:db:5d:5f:55:5b:40:d6:32:26:e3:01:7c:87:4d:b0: 29:c9:c9:8d:09:77:5d:58:8d:e5:12:d0:27:9e:df:cc:e8:88: 2e:63:d3:94:04:6a:7d:5c:cc:50:7c:51:41:c6:3c:86:19:79: a8:b6:f0:be:42:01:72:dc:00:e2:bc:3f:f4:41:50:b9:d1:2c: db:e9:00:9f:81:1d:87:3e:51:7c:65:32:83:69:03:a4:9a:9b: 6f:0e:cb:2a -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUSBd2iXH7X3oIFGFhGfT0h4Y62wMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjkwMEJDNjVFMkI2NDZFQkFDNDcyQTVERUExMkJEQjAw MTFBQzEyMjAeFw0yNTA1MDcyMjQ1MzdaFw0yNTA1MDkwMDAzMzdaMDMxMTAvBgNV BAMTKDNGMzgzRDAxNENEN0NDRTE2N0U1RDM4RDY5OTA5NEE4RTg3QjhCQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO+XEg16pMGuIFvDMt7KUNeWiD WYtyDwIgO87adzrcDNQjNQI9rkT8Ev072gmTCoBvMa1jb1QaofwbVQsFZFMOdl8n Y7IRbBv05baCiNfOf10AGLTTSyBPvOs4JbwPWt4yTJIpTW0DysNeH0mVt6X/n9IA fPccns85XDc87efig0U5WPEpUiYkuHD2AeZXtc3692QTG5VN54sPzpHkSLNHqwfo fCzPoxQDmkRXc586wEb8OK70hcEXHkTGlKcnWQapHmBuLzNkZI/643+Uj3TO7FYS XRzS4hWuNue9AkfrLIcNqHRJh9S2c95lZm7AJjJgFQNJZg77pZ59YHYiuSk1AgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUPzg9AUzXzOFn5dONaZCUqOh7i6EwHwYDVR0j BBgwFoAU+QC8ZeK2RuusRypd6hK9sAEawSIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi ZTRlLzMvRjkwMEJDNjVFMkI2NDZFQkFDNDcyQTVERUExMkJEQjAwMTFBQzEyMi5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wL0Y5MDBCQzY1RTJCNjQ2 RUJBQzQ3MkE1REVBMTJCREIwMDExQUMxMjIuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJiZTRl LzMvRjkwMEJDNjVFMkI2NDZFQkFDNDcyQTVERUExMkJEQjAwMTFBQzEyMi5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBANtMxU8ybyU1FQS5bkItDJjJbb3Lh4BT6LlhdVYqWnm4INcMX55fdV7D 3niCr1Bu9S3IdmStD79ZTgolevXWD3J04WUQG77lHpf9zE5oytS8zoSyIreg9zKS DrgXy8+B/j8Bnkimxr2sqQKMkslu4lSFJppgVWdb+oyxlX7RALL4172kjpaG7KXf tSPqQbKjq3Olj6bKBX2vFOGJUv3VIqMj5DOQjNtdX1VbQNYyJuMBfIdNsCnJyY0J d11YjeUS0Cee38zoiC5j05QEan1czFB8UUHGPIYZeai28L5CAXLcAOK8P/RBULnR LNvpAJ+BHYc+UXxlMoNpA6Sam28Oyyo= -----END CERTIFICATE-----Generated at Thu May 8 12:02:53 2025 by rpki-client