$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.mft File: 8A89E0DB89531F723E42C7509282CC5496FEA4F0.mft (raw, json) Hash identifier: JToJlplqKs2/NTYgQnlRnKHoOqcPob5+hxRnOes7c3w= Subject key identifier: 02:DD:D9:B4:C2:D4:29:D6:12:A7:40:97:1F:C8:D4:87:95:F3:27:20 Authority key identifier: 8A:89:E0:DB:89:53:1F:72:3E:42:C7:50:92:82:CC:54:96:FE:A4:F0 Certificate issuer: /CN=8A89E0DB89531F723E42C7509282CC5496FEA4F0 Certificate serial: 19088F217BBF6A4468E0F9C4830EE334A7B3641F Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8A89E0DB89531F723E42C7509282CC5496FEA4F0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.mft Manifest number: 0291 Signing time: Sat 10 May 2025 16:01:58 +0000 Manifest this update: Sat 10 May 2025 15:56:58 +0000 Manifest next update: Sun 11 May 2025 19:34:58 +0000 Files and hashes: 1: 326130353a646663313a633432333a3a2f34382d3438203d3e203437343936.roa (hash: BjWFZsrWASwd+CG/7hUBbq3vJkOhy5Z+SMjVBI4v+js=) 2: 8A89E0DB89531F723E42C7509282CC5496FEA4F0.crl (hash: s0MnJO9m5hnYE42ypJzigoouB2Bf8cDrMHEy27EsYio=) 3: 326130353a646663313a633432313a3a2f34382d3438203d3e203437343936.roa (hash: WZdnhsf1tbcSVNSrkJIR05RIfLe917aOhwfRnEAl4rg=) 4: 326130353a646663313a633432303a3a2f34382d3438203d3e203437343936.roa (hash: lWYjZQ5Ld8qxedFHjd1SYJ3EjXIlTQ1TnJV4koI7Bc0=) 5: 326130353a646663313a633431303a3a2f34342d3434203d3e203437343936.roa (hash: wwbAN7C3Thqz1WBUXadPwW0dibUsOJrY61KWQ1gCNxc=) 6: 326130353a646663313a633432633a3a2f34382d3438203d3e203437343936.roa (hash: xyVeniR3LS2bZlUijGrUW75mDjHK8Jghu3MvJXI2srY=) 7: 326130353a646663313a633432653a3a2f34382d3438203d3e203437343936.roa (hash: yY/lRzl5gnRHqPDCI9XTmjkP/VSTS3sUgvtQRFCF6ig=) 8: 326130353a646663313a633433303a3a2f34382d3438203d3e203437343936.roa (hash: IJr5CBZ4iO0h6IlIR+qADhOt/NMtQJ1etkNPbekFk9g=) 9: 326130353a646663313a633432643a3a2f34382d3438203d3e203437343936.roa (hash: amyqCToWlkncShbPoQ2pFwGosgXS9k+x9sD0wwW0zJ8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.crl rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8A89E0DB89531F723E42C7509282CC5496FEA4F0.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 19:14:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:08:8f:21:7b:bf:6a:44:68:e0:f9:c4:83:0e:e3:34:a7:b3:64:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A89E0DB89531F723E42C7509282CC5496FEA4F0 Validity Not Before: May 10 15:56:58 2025 GMT Not After : May 11 19:34:58 2025 GMT Subject: CN=02DDD9B4C2D429D612A740971FC8D48795F32720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5d:0f:e6:84:18:50:11:c3:6f:80:5f:65:05: 18:b4:ac:9e:4a:ad:06:f6:41:b8:f5:d6:95:5b:ba: 49:bc:ff:aa:e7:21:ab:5f:11:96:77:f9:8c:cc:af: 6e:4d:f7:88:c3:dd:bb:ad:fc:f4:dd:35:5c:97:84: 50:3f:9f:73:7c:31:49:4d:ca:26:26:29:36:90:35: ba:64:63:4c:fa:5e:2c:d6:87:3c:5a:83:5c:ce:67: f4:7e:6c:29:e8:99:b0:4e:36:2b:a9:d3:c8:db:b2: 6f:9e:a7:d3:a7:56:6b:64:0b:ce:09:36:72:87:44: 72:c4:ba:c1:5b:84:23:b9:9c:87:22:8d:41:20:ac: 6a:d2:ac:fc:8e:f1:22:44:7e:bd:f1:a9:33:7d:7c: d6:94:44:5e:d3:37:96:3e:79:0a:9e:30:de:ed:ba: 80:81:4d:70:07:84:f2:96:0a:17:98:93:40:63:05: de:12:01:1b:cc:4b:33:ff:36:78:1e:de:4d:1a:6f: 4e:24:7d:01:e9:dc:c3:01:de:85:fa:c5:c1:b7:3b: 76:3a:48:30:d4:14:7d:e1:3c:06:71:43:de:20:6e: 6a:8e:a3:26:b1:6f:a6:45:6a:59:10:0c:89:8c:92: 44:ad:90:05:c9:e0:a0:22:a6:0d:38:61:b1:31:b2: 3b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:DD:D9:B4:C2:D4:29:D6:12:A7:40:97:1F:C8:D4:87:95:F3:27:20 X509v3 Authority Key Identifier: keyid:8A:89:E0:DB:89:53:1F:72:3E:42:C7:50:92:82:CC:54:96:FE:A4:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8A89E0DB89531F723E42C7509282CC5496FEA4F0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:2f:0b:7d:b8:ef:85:2d:42:5b:a5:07:3e:46:e7:12:85:65: ff:65:a1:2a:31:ad:5c:ca:d7:a4:24:67:a1:67:48:c1:98:cb: 2b:db:48:7b:7b:5c:70:9c:92:18:94:cc:72:29:42:ea:f1:ed: 2d:4d:25:35:d7:4d:49:06:9c:6c:ec:b9:4f:d3:bf:88:ad:d9: d1:96:52:e0:ab:64:a3:50:25:96:e9:9d:31:d6:b7:fb:8b:d8: 95:5c:21:8a:c8:4f:64:1e:b4:5b:46:5a:e5:62:f4:f0:53:21: e6:66:2c:67:3e:7e:37:08:63:d3:ae:92:9a:67:e3:13:ba:ac: 64:ea:a7:f0:20:9a:9f:f4:96:16:6e:ac:a1:53:20:25:35:c7: 81:6f:1f:67:62:60:38:d2:61:3a:b5:6f:f1:46:c6:f8:c8:4c: 15:7b:6d:6d:2e:ec:db:3b:7b:bc:6b:ae:ea:28:e7:ad:af:59: b5:2d:68:bc:dd:58:c1:c6:a8:8d:e5:44:ef:41:e8:28:72:3c: e3:6a:11:4b:6e:b4:8a:e1:01:5a:c5:d8:16:84:33:70:a4:d1: cd:9c:72:03:9b:dd:87:3f:0b:83:d1:d9:3d:31:c2:89:05:f8: 14:37:6f:cb:3f:e3:aa:0f:08:2f:29:95:76:f1:37:cd:80:5f: 85:41:f6:33 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUGQiPIXu/akRo4PnEgw7jNKezZB8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE4OUUwREI4OTUzMUY3MjNFNDJDNzUwOTI4MkNDNTQ5 NkZFQTRGMDAeFw0yNTA1MTAxNTU2NThaFw0yNTA1MTExOTM0NThaMDMxMTAvBgNV BAMTKDAyREREOUI0QzJENDI5RDYxMkE3NDA5NzFGQzhENDg3OTVGMzI3MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtXQ/mhBhQEcNvgF9lBRi0rJ5K rQb2Qbj11pVbukm8/6rnIatfEZZ3+YzMr25N94jD3but/PTdNVyXhFA/n3N8MUlN yiYmKTaQNbpkY0z6XizWhzxag1zOZ/R+bCnombBONiup08jbsm+ep9OnVmtkC84J NnKHRHLEusFbhCO5nIcijUEgrGrSrPyO8SJEfr3xqTN9fNaURF7TN5Y+eQqeMN7t uoCBTXAHhPKWCheYk0BjBd4SARvMSzP/Nnge3k0ab04kfQHp3MMB3oX6xcG3O3Y6 SDDUFH3hPAZxQ94gbmqOoyaxb6ZFalkQDImMkkStkAXJ4KAipg04YbExsjuVAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUAt3ZtMLUKdYSp0CXH8jUh5XzJyAwHwYDVR0j BBgwFoAUiong24lTH3I+QsdQkoLMVJb+pPAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2RhNGQ4YjQtYTE1Ny00NjM0LWFiMTgtM2VmOWQwOTgy MzUyLzIvOEE4OUUwREI4OTUzMUY3MjNFNDJDNzUwOTI4MkNDNTQ5NkZFQTRGMC5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzhBODlFMERCODk1MzFG NzIzRTQyQzc1MDkyODJDQzU0OTZGRUE0RjAuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvM2RhNGQ4YjQtYTE1Ny00NjM0LWFiMTgtM2VmOWQwOTgyMzUy LzIvOEE4OUUwREI4OTUzMUY3MjNFNDJDNzUwOTI4MkNDNTQ5NkZFQTRGMC5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBALovC32474UtQlulBz5G5xKFZf9loSoxrVzK16QkZ6FnSMGYyyvbSHt7 XHCckhiUzHIpQurx7S1NJTXXTUkGnGzsuU/Tv4it2dGWUuCrZKNQJZbpnTHWt/uL 2JVcIYrIT2QetFtGWuVi9PBTIeZmLGc+fjcIY9Oukppn4xO6rGTqp/Agmp/0lhZu rKFTICU1x4FvH2diYDjSYTq1b/FGxvjITBV7bW0u7Ns7e7xrruoo562vWbUtaLzd WMHGqI3lRO9B6ChyPONqEUtutIrhAVrF2BaEM3Ck0c2ccgOb3Yc/C4PR2T0xwokF +BQ3b8s/46oPCC8plXbxN82AX4VB9jM= -----END CERTIFICATE-----Generated at Sun May 11 03:48:38 2025 by rpki-client