$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.mft File: 8A89E0DB89531F723E42C7509282CC5496FEA4F0.mft (raw, json) Hash identifier: 9wWpMtbO7ky1SKo/RloxAUZIMPNmrQTIN/zuoICOC+U= Subject key identifier: 82:94:9C:33:97:01:B4:A1:BD:7A:7D:12:B7:2C:0F:09:06:49:37:EB Authority key identifier: 8A:89:E0:DB:89:53:1F:72:3E:42:C7:50:92:82:CC:54:96:FE:A4:F0 Certificate issuer: /CN=8A89E0DB89531F723E42C7509282CC5496FEA4F0 Certificate serial: 573172A7A10BD2E12CD31957EA15F195ABBBD5D6 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8A89E0DB89531F723E42C7509282CC5496FEA4F0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.mft Manifest number: 02D6 Signing time: Mon 30 Jun 2025 20:12:33 +0000 Manifest this update: Mon 30 Jun 2025 20:07:33 +0000 Manifest next update: Tue 01 Jul 2025 22:20:33 +0000 Files and hashes: 1: 326130353a646663313a633433303a3a2f34382d3438203d3e203437343936.roa (hash: IJr5CBZ4iO0h6IlIR+qADhOt/NMtQJ1etkNPbekFk9g=) 2: 326130353a646663313a633432333a3a2f34382d3438203d3e203437343936.roa (hash: BjWFZsrWASwd+CG/7hUBbq3vJkOhy5Z+SMjVBI4v+js=) 3: 326130353a646663313a633432653a3a2f34382d3438203d3e203437343936.roa (hash: yY/lRzl5gnRHqPDCI9XTmjkP/VSTS3sUgvtQRFCF6ig=) 4: 8A89E0DB89531F723E42C7509282CC5496FEA4F0.crl (hash: Mxy4+xNEq21UeVRWae2CJKw6A86nsWw2AxlQK3xVrLs=) 5: 326130353a646663313a633432633a3a2f34382d3438203d3e203437343936.roa (hash: xyVeniR3LS2bZlUijGrUW75mDjHK8Jghu3MvJXI2srY=) 6: 326130353a646663313a633432313a3a2f34382d3438203d3e203437343936.roa (hash: WZdnhsf1tbcSVNSrkJIR05RIfLe917aOhwfRnEAl4rg=) 7: 326130353a646663313a633431303a3a2f34342d3434203d3e203437343936.roa (hash: wwbAN7C3Thqz1WBUXadPwW0dibUsOJrY61KWQ1gCNxc=) 8: 326130353a646663313a633432643a3a2f34382d3438203d3e203437343936.roa (hash: amyqCToWlkncShbPoQ2pFwGosgXS9k+x9sD0wwW0zJ8=) 9: 326130353a646663313a633432303a3a2f34382d3438203d3e203437343936.roa (hash: lWYjZQ5Ld8qxedFHjd1SYJ3EjXIlTQ1TnJV4koI7Bc0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.crl rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8A89E0DB89531F723E42C7509282CC5496FEA4F0.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 01 Jul 2025 22:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:31:72:a7:a1:0b:d2:e1:2c:d3:19:57:ea:15:f1:95:ab:bb:d5:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A89E0DB89531F723E42C7509282CC5496FEA4F0 Validity Not Before: Jun 30 20:07:33 2025 GMT Not After : Jul 1 22:20:33 2025 GMT Subject: CN=82949C339701B4A1BD7A7D12B72C0F09064937EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:19:6a:7c:b5:13:5b:d6:a9:3a:37:ac:0b:c7: 26:ab:9c:87:ef:c8:c9:2f:ac:9b:ce:cd:90:0a:77: ed:77:6e:c9:13:68:e6:87:6e:9a:81:ba:fe:fa:c7: 1b:3d:81:ca:f6:2c:f5:70:da:f2:69:8c:dc:18:d9: f3:e4:67:52:81:5f:c8:ab:23:2b:bb:39:e5:ba:c8: b3:80:58:aa:3d:46:55:ce:45:e8:c6:87:4a:ae:92: b3:b2:20:e0:64:0d:6c:ba:4d:ed:fb:9b:33:b7:07: ec:c5:cf:81:d6:43:b5:b3:1b:43:05:39:a7:48:70: 67:2a:63:b8:96:98:ac:1e:7a:8c:a3:e9:e4:3e:c8: 2e:cd:31:84:30:82:88:e9:4b:c1:50:a8:78:01:9c: 4f:92:cf:ec:a4:28:e8:89:68:46:41:2d:cb:29:4a: d3:52:73:a7:d8:e2:ef:e7:a6:2c:54:cb:1f:54:cc: 3f:98:bb:52:94:fe:13:34:b4:02:cc:50:01:26:73: 1d:4f:9e:a7:78:24:8c:c2:2f:d0:33:59:23:26:b9: 8d:4f:f2:0e:ae:0d:f0:75:47:de:56:2b:68:1f:5c: d9:eb:07:3c:bc:f3:b1:22:11:bb:31:2f:3d:9a:bf: fc:74:1b:90:23:a3:4e:7e:cb:a4:c0:dc:1e:53:5e: b9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:94:9C:33:97:01:B4:A1:BD:7A:7D:12:B7:2C:0F:09:06:49:37:EB X509v3 Authority Key Identifier: keyid:8A:89:E0:DB:89:53:1F:72:3E:42:C7:50:92:82:CC:54:96:FE:A4:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8A89E0DB89531F723E42C7509282CC5496FEA4F0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:e1:9a:96:dd:f5:85:3c:74:3e:f7:03:1c:8a:d7:af:39:0b: 9d:c4:6d:d4:e4:e9:f1:e5:84:72:e7:30:5f:85:b3:2b:67:3f: 07:81:81:90:67:80:56:bd:ec:3a:1c:19:c0:be:e0:12:bc:9d: 2c:5a:68:4b:bc:2e:60:8c:71:69:1f:8a:ed:d7:31:de:b7:dc: 54:fc:09:b4:95:77:57:29:69:c0:b8:51:74:1a:52:b8:39:1b: e3:b8:c5:3f:28:22:ef:9d:d3:4a:72:9f:d9:20:ce:0f:a3:86: ee:77:4f:a9:13:73:19:c6:b9:22:0d:9a:d5:38:05:15:d4:1b: 4f:30:c5:03:88:61:58:42:98:9b:54:88:bb:2b:c3:fc:37:8e: 41:da:cd:c6:e9:63:2d:1a:86:1f:83:0c:a6:97:d5:df:b3:0b: 67:80:e3:84:65:bc:d5:0e:38:29:cc:de:7b:a5:0c:4c:88:19: 6f:7c:58:20:99:d5:1c:ed:ae:09:af:37:34:f0:46:fd:1a:de: fe:e2:5c:d4:61:3f:c8:f0:ee:2c:f9:5d:32:81:9e:86:45:b0: 31:98:2c:73:15:bc:78:a8:eb:cd:61:24:55:ea:83:f9:f9:4c: 6d:3e:d0:be:16:df:6a:7b:c2:1f:a0:66:fd:ef:dd:51:7c:20: 0a:f1:d2:9e -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUVzFyp6EL0uEs0xlX6hXxlau71dYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE4OUUwREI4OTUzMUY3MjNFNDJDNzUwOTI4MkNDNTQ5 NkZFQTRGMDAeFw0yNTA2MzAyMDA3MzNaFw0yNTA3MDEyMjIwMzNaMDMxMTAvBgNV BAMTKDgyOTQ5QzMzOTcwMUI0QTFCRDdBN0QxMkI3MkMwRjA5MDY0OTM3RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiGWp8tRNb1qk6N6wLxyarnIfv yMkvrJvOzZAKd+13bskTaOaHbpqBuv76xxs9gcr2LPVw2vJpjNwY2fPkZ1KBX8ir Iyu7OeW6yLOAWKo9RlXORejGh0qukrOyIOBkDWy6Te37mzO3B+zFz4HWQ7WzG0MF OadIcGcqY7iWmKweeoyj6eQ+yC7NMYQwgojpS8FQqHgBnE+Sz+ykKOiJaEZBLcsp StNSc6fY4u/npixUyx9UzD+Yu1KU/hM0tALMUAEmcx1Pnqd4JIzCL9AzWSMmuY1P 8g6uDfB1R95WK2gfXNnrBzy887EiEbsxLz2av/x0G5Ajo05+y6TA3B5TXrkpAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUgpScM5cBtKG9en0StywPCQZJN+swHwYDVR0j BBgwFoAUiong24lTH3I+QsdQkoLMVJb+pPAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2RhNGQ4YjQtYTE1Ny00NjM0LWFiMTgtM2VmOWQwOTgy MzUyLzIvOEE4OUUwREI4OTUzMUY3MjNFNDJDNzUwOTI4MkNDNTQ5NkZFQTRGMC5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzhBODlFMERCODk1MzFG NzIzRTQyQzc1MDkyODJDQzU0OTZGRUE0RjAuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvM2RhNGQ4YjQtYTE1Ny00NjM0LWFiMTgtM2VmOWQwOTgyMzUy LzIvOEE4OUUwREI4OTUzMUY3MjNFNDJDNzUwOTI4MkNDNTQ5NkZFQTRGMC5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBACXhmpbd9YU8dD73AxyK1685C53EbdTk6fHlhHLnMF+FsytnPweBgZBn gFa97DocGcC+4BK8nSxaaEu8LmCMcWkfiu3XMd633FT8CbSVd1cpacC4UXQaUrg5 G+O4xT8oIu+d00pyn9kgzg+jhu53T6kTcxnGuSINmtU4BRXUG08wxQOIYVhCmJtU iLsrw/w3jkHazcbpYy0ahh+DDKaX1d+zC2eA44RlvNUOOCnM3nulDEyIGW98WCCZ 1RztrgmvNzTwRv0a3v7iXNRhP8jw7iz5XTKBnoZFsDGYLHMVvHio681hJFXqg/n5 TG0+0L4W32p7wh+gZv3v3VF8IArx0p4= -----END CERTIFICATE-----Generated at Tue Jul 1 10:15:47 2025 by rpki-client