$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.mft File: A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.mft (raw, json) Hash identifier: YmmXQGi1P6pJomCikgTknGyRA1jljeTKngbAJH9FoIE= Subject key identifier: F1:10:F4:40:F0:FA:0C:D3:60:91:F5:B0:5C:89:30:82:5A:68:0A:23 Authority key identifier: A0:BD:CD:4C:EF:02:B9:AA:3C:BD:0A:83:76:66:71:63:97:19:8B:FD Certificate issuer: /CN=A0BDCD4CEF02B9AA3CBD0A837666716397198BFD Certificate serial: 24DEB77B52982BD3838BB8CDD07684C7AE24292E Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.mft Manifest number: 022F Signing time: Sat 28 Jun 2025 16:08:49 +0000 Manifest this update: Sat 28 Jun 2025 16:03:49 +0000 Manifest next update: Sun 29 Jun 2025 19:43:49 +0000 Files and hashes: 1: 326130353a646663313a6364303a3a2f34382d3438203d3e20323136313037.roa (hash: bPQ1HBzdP13bWbYEcnsttiFohjw+mT+amFg13lB095M=) 2: A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.crl (hash: VX9P9hpunlfDAZijXS8mJZjyKIBBfWZpdnOM3VRbSVA=) 3: 326130353a646663313a6364333a3a2f34382d3438203d3e20323136313037.roa (hash: rsDe4gVLOQQ6T2XmrS2vrQjsrzLl/iWq5oMRojuFXSU=) 4: 326130353a646663313a6365633a3a2f34382d3438203d3e20323136313037.roa (hash: jseZnQDpxM3OGEtPFiaXE9ESnwodw6BGWg1duSXkRMU=) 5: 326130353a646663313a6364313a3a2f34382d3438203d3e20323136313037.roa (hash: mOOzHywYUf8zjI9dUNsK9l53AJEq7KLoJcvQC7/t8eg=) 6: 326130353a646663313a6335333a3a2f34382d3438203d3e20323136313037.roa (hash: WcdJc7EuorO3eVIWXV9S6944ATNznPqWh3CJsDrNt/M=) 7: 326130353a646663313a6362303a3a2f34382d3438203d3e20323136313037.roa (hash: dF4lz4b9uILyKiQv5ty5oA8TE3niW+o+umdhEtVVLnc=) 8: 326130353a646663313a6364323a3a2f34382d3438203d3e20323136313037.roa (hash: qeKhwSxBv73kgRxW6Pg8dImsSOEmPLh3wTLxedRpHZA=) 9: 326130353a646663313a6364343a3a2f34382d3438203d3e20323136313037.roa (hash: h7T/IBKgZ+g5LGDA1fTNWZlyWBtya6uHa3uTkoL3u98=) 10: 326130353a646663313a393330303a3a2f34302d3430203d3e20323136313037.roa (hash: hAG8kF083sc71HTpZHIm9pVONzb5X6Kq/j0og2972Og=) 11: 326130353a646663313a6330303a3a2f34302d3430203d3e20323136313037.roa (hash: HKmgP2ypG6wwvWOLbdtRfnpQpQFEpIJ3B8Rmypw0n+E=) 12: 326130353a646663313a6366663a3a2f34382d3438203d3e20323136313037.roa (hash: KjbRTlOn0pUH9so2EM+bXyKGqqTMvpmSO7usB8M9zXI=) 13: 326130353a646663313a6362313a3a2f34382d3438203d3e20323136313037.roa (hash: a/PEhvzrP+G5MwSsL0gkzB1gZuBpDOMslVaEMTvEPWA=) 14: 326130353a646663313a6330303a3a2f34382d3438203d3e20323136313037.roa (hash: 5sfxFWfTleTq60HeudpGR9w7CPONeSZsJgkPlM018cs=) 15: 326130353a646663313a6362323a3a2f34382d3438203d3e20323136313037.roa (hash: S6jgMc6rG0ZsUATxPWt7SrTUxQY234zCLU7DInT6Xy8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.crl rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 19:43:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:de:b7:7b:52:98:2b:d3:83:8b:b8:cd:d0:76:84:c7:ae:24:29:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0BDCD4CEF02B9AA3CBD0A837666716397198BFD Validity Not Before: Jun 28 16:03:49 2025 GMT Not After : Jun 29 19:43:49 2025 GMT Subject: CN=F110F440F0FA0CD36091F5B05C8930825A680A23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:52:86:3e:9b:1c:43:33:ea:8f:59:9e:63:1d: b3:48:d1:b8:89:02:a7:69:d4:ab:f3:55:64:d5:2a: 1a:b4:73:4b:1c:55:69:73:80:7b:91:e6:8a:44:cf: 95:0b:91:67:36:db:8b:d2:c8:91:8d:40:3e:5d:42: f0:f6:2d:da:95:cd:96:6b:f7:21:67:59:6c:7a:11: be:98:6f:66:0c:fd:7e:49:ed:ee:fd:1b:a2:6e:8b: 84:31:d9:b2:d3:ff:09:35:9e:6a:3d:36:d9:e9:e4: ba:49:f0:28:58:69:74:0d:aa:22:22:4c:9f:72:50: 65:de:50:db:b1:4e:4b:b5:17:15:79:40:e4:3b:27: 69:82:7b:0b:9a:d9:cd:4a:bf:de:51:df:52:1f:94: c4:f5:7e:ee:64:d3:55:ee:3a:d9:d4:92:33:78:27: e7:fc:9e:cb:fb:84:ac:04:0d:93:06:8e:0e:36:87: e1:b8:39:a4:a7:3d:75:d1:f6:a3:79:91:08:7e:40: 6b:cb:39:dc:0d:57:f7:3a:4a:e4:4b:45:10:89:1a: 87:78:17:63:10:a1:b7:08:e1:56:1c:bb:97:0f:59: cf:75:3d:88:cf:93:49:61:57:50:4a:a1:40:46:2e: 36:85:79:fb:f2:09:92:2e:5f:3f:35:6e:77:3d:aa: f3:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:10:F4:40:F0:FA:0C:D3:60:91:F5:B0:5C:89:30:82:5A:68:0A:23 X509v3 Authority Key Identifier: keyid:A0:BD:CD:4C:EF:02:B9:AA:3C:BD:0A:83:76:66:71:63:97:19:8B:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:54:65:ba:5c:b1:b0:4d:fe:85:47:e9:0a:ce:f8:4c:a8:60: bb:93:49:a5:71:48:30:f0:ac:f9:99:24:93:4c:e9:c0:92:9c: fd:bb:fc:b2:2f:cf:01:f9:c8:04:52:91:b5:67:5c:dc:1c:6a: f0:41:d6:f1:02:05:42:c3:a6:34:f1:f5:56:3c:45:67:14:1b: 68:19:13:ab:2b:4b:e2:62:be:82:b6:ee:93:84:da:06:16:bb: f7:dc:c7:56:d6:7d:c2:1d:99:6b:a6:a2:3a:92:82:2b:3c:c0: 25:98:f3:0e:54:a1:06:33:53:3c:19:ed:7c:22:a6:c9:5b:fd: fa:fd:0f:c5:73:0b:45:99:50:42:92:c3:15:06:43:e9:ce:eb: 5b:e7:50:43:0b:e6:b3:1e:03:ab:f4:23:e9:33:16:63:f7:71: ba:c1:9d:a8:d0:fc:51:b1:39:1e:2b:3b:6c:24:7b:61:79:fe: 96:e4:0b:ef:b7:90:f0:bd:57:65:88:ed:f6:ef:78:b8:fc:91: 3f:80:7b:71:3d:0d:a3:77:3b:48:a8:ae:f7:18:61:11:64:16: e3:86:3d:44:4e:e5:4a:0c:56:a2:3c:16:05:1a:1a:1c:af:70: b9:9a:9e:63:93:10:81:02:02:6a:06:4f:99:15:0d:db:ee:15: 00:cb:e0:f1 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUJN63e1KYK9ODi7jN0HaEx64kKS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBCRENENENFRjAyQjlBQTNDQkQwQTgzNzY2NjcxNjM5 NzE5OEJGRDAeFw0yNTA2MjgxNjAzNDlaFw0yNTA2MjkxOTQzNDlaMDMxMTAvBgNV BAMTKEYxMTBGNDQwRjBGQTBDRDM2MDkxRjVCMDVDODkzMDgyNUE2ODBBMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFUoY+mxxDM+qPWZ5jHbNI0biJ Aqdp1KvzVWTVKhq0c0scVWlzgHuR5opEz5ULkWc224vSyJGNQD5dQvD2LdqVzZZr 9yFnWWx6Eb6Yb2YM/X5J7e79G6Jui4Qx2bLT/wk1nmo9Ntnp5LpJ8ChYaXQNqiIi TJ9yUGXeUNuxTku1FxV5QOQ7J2mCewua2c1Kv95R31IflMT1fu5k01XuOtnUkjN4 J+f8nsv7hKwEDZMGjg42h+G4OaSnPXXR9qN5kQh+QGvLOdwNV/c6SuRLRRCJGod4 F2MQobcI4VYcu5cPWc91PYjPk0lhV1BKoUBGLjaFefvyCZIuXz81bnc9qvMlAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQU8RD0QPD6DNNgkfWwXIkwglpoCiMwHwYDVR0j BBgwFoAUoL3NTO8Cuao8vQqDdmZxY5cZi/0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5 MjQzLzEvQTBCRENENENFRjAyQjlBQTNDQkQwQTgzNzY2NjcxNjM5NzE5OEJGRC5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wL0EwQkRDRDRDRUYwMkI5 QUEzQ0JEMEE4Mzc2NjY3MTYzOTcxOThCRkQuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5MjQz LzEvQTBCRENENENFRjAyQjlBQTNDQkQwQTgzNzY2NjcxNjM5NzE5OEJGRC5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAFdUZbpcsbBN/oVH6QrO+EyoYLuTSaVxSDDwrPmZJJNM6cCSnP27/LIv zwH5yARSkbVnXNwcavBB1vECBULDpjTx9VY8RWcUG2gZE6srS+JivoK27pOE2gYW u/fcx1bWfcIdmWumojqSgis8wCWY8w5UoQYzUzwZ7Xwipslb/fr9D8VzC0WZUEKS wxUGQ+nO61vnUEML5rMeA6v0I+kzFmP3cbrBnajQ/FGxOR4rO2wke2F5/pbkC++3 kPC9V2WI7fbveLj8kT+Ae3E9DaN3O0iorvcYYRFkFuOGPURO5UoMVqI8FgUaGhyv cLmanmOTEIECAmoGT5kVDdvuFQDL4PE= -----END CERTIFICATE-----Generated at Sun Jun 29 09:45:17 2025 by rpki-client