$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.mft File: 1305A50FEEC042C917D8EF2D77D1D2448848C0F9.mft (raw, json) Hash identifier: GUN6zAxcjl5JsJG0Zzhgz6RtCreCzxPcP6yj4R95T1k= Subject key identifier: 19:EB:53:39:E2:32:1C:6E:13:3C:C2:00:D1:8D:54:8C:D1:3B:E4:8C Authority key identifier: 13:05:A5:0F:EE:C0:42:C9:17:D8:EF:2D:77:D1:D2:44:88:48:C0:F9 Certificate issuer: /CN=1305A50FEEC042C917D8EF2D77D1D2448848C0F9 Certificate serial: 140245A9DED31B1F5D8FE11C1EE077AB5F98B1CA Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.mft Manifest number: 0339 Signing time: Sun 29 Jun 2025 16:08:46 +0000 Manifest this update: Sun 29 Jun 2025 16:03:46 +0000 Manifest next update: Mon 30 Jun 2025 16:53:46 +0000 Files and hashes: 1: 326130353a646663313a383530303a3a2f34302d3430203d3e20323136343535.roa (hash: E/OJJsH8vRLWk7ObLOrajKk/aVne0/9cuXNyPD2i5xg=) 2: 1305A50FEEC042C917D8EF2D77D1D2448848C0F9.crl (hash: HCTKaPUHm8HRuEmmTpE+mEFQJnhqGb8LP9gAgAy7tJY=) 3: 326130353a646663313a393630303a3a2f34302d3430203d3e20323136343535.roa (hash: R8rTJIYEOHmNtQ+W65HlVcJr9EAiC7WNdRoszOqVDfk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.crl rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 16:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:02:45:a9:de:d3:1b:1f:5d:8f:e1:1c:1e:e0:77:ab:5f:98:b1:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1305A50FEEC042C917D8EF2D77D1D2448848C0F9 Validity Not Before: Jun 29 16:03:46 2025 GMT Not After : Jun 30 16:53:46 2025 GMT Subject: CN=19EB5339E2321C6E133CC200D18D548CD13BE48C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:b9:a5:f4:ec:3c:02:4c:5c:4d:60:d4:15:e2: 67:11:71:74:bb:14:3e:94:87:c0:52:56:f5:fd:7f: a1:ec:ed:86:83:39:c9:ae:bc:85:16:5e:92:e7:b1: 86:53:af:23:9a:4d:73:fc:48:00:03:3c:bb:3a:5f: 11:db:e4:df:53:42:1b:5e:e2:e9:37:91:58:73:14: 99:e7:2c:b3:e2:ad:8a:e9:90:ec:b5:83:18:13:7c: c7:98:52:09:58:81:4c:77:f7:f3:55:28:55:51:73: e9:d4:67:46:23:de:88:0a:cf:24:db:fe:1a:68:17: 7e:6c:34:ed:5a:96:0e:5e:c5:63:5a:36:13:a5:79: 65:89:bb:8a:48:80:aa:22:40:d4:c4:f7:0d:0c:62: b1:13:27:22:82:87:2d:ba:30:a2:06:e5:7f:80:a0: f5:23:92:92:97:b3:f4:6f:19:49:79:f0:51:6f:19: 5c:0f:3a:72:80:f9:ed:47:cd:b3:16:4f:57:0e:2d: ad:c5:a6:08:a5:25:e3:05:4e:71:59:fa:2e:ed:e7: c0:0b:36:ec:84:d3:8f:0e:9c:04:db:1c:08:76:5c: d2:ac:ed:9b:b3:e1:5e:8e:74:74:95:63:02:65:c3: 3c:ec:c0:18:cd:95:e3:80:b6:1d:2d:e7:85:06:86: 11:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:EB:53:39:E2:32:1C:6E:13:3C:C2:00:D1:8D:54:8C:D1:3B:E4:8C X509v3 Authority Key Identifier: keyid:13:05:A5:0F:EE:C0:42:C9:17:D8:EF:2D:77:D1:D2:44:88:48:C0:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:6b:a9:7a:dd:42:96:59:6b:81:7a:7f:87:c2:9c:9b:b6:95: 4a:02:61:af:b9:05:c4:f6:42:d1:84:8b:cf:6f:87:fa:6f:02: 0c:49:0c:e0:a7:93:91:8c:d5:2e:01:3b:a7:12:95:a8:2a:fa: 23:6a:24:11:74:40:52:36:5b:30:84:b3:16:86:3e:c3:ed:f7: d9:31:02:e4:87:4d:f2:22:db:3c:da:d7:4c:89:70:94:ef:07: d1:b7:51:2e:e1:bc:1a:b2:7a:4c:48:e6:af:b0:92:65:70:03: 34:38:5b:7a:fb:f6:cc:55:5f:1e:b8:2a:1c:c3:51:70:1d:17: 41:68:2d:77:c5:0e:1e:76:08:4c:45:2c:ae:33:0b:e7:70:61: ec:86:6b:84:02:68:96:be:71:bb:9d:f7:cb:5a:fc:07:3a:37: ba:71:a9:64:40:40:ef:10:61:e2:e5:17:66:4d:7c:2c:15:32: 2d:fd:e0:47:e1:ac:7b:bf:72:3a:ff:e0:c9:84:75:a6:c4:c5: 4b:67:d3:a4:c5:4f:ce:68:c3:ad:33:b8:5a:b3:6f:4d:49:b5: ca:87:01:d5:ae:07:cf:ed:cd:a6:7a:d9:bb:a5:e9:d3:97:b3: 54:81:22:5a:6c:ee:59:8b:5e:5a:c7:0f:77:6f:16:f4:28:45: 47:ff:26:ee -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUFAJFqd7TGx9dj+EcHuB3q1+YscowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMwNUE1MEZFRUMwNDJDOTE3RDhFRjJENzdEMUQyNDQ4 ODQ4QzBGOTAeFw0yNTA2MjkxNjAzNDZaFw0yNTA2MzAxNjUzNDZaMDMxMTAvBgNV BAMTKDE5RUI1MzM5RTIzMjFDNkUxMzNDQzIwMEQxOEQ1NDhDRDEzQkU0OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtuaX07DwCTFxNYNQV4mcRcXS7 FD6Uh8BSVvX9f6Hs7YaDOcmuvIUWXpLnsYZTryOaTXP8SAADPLs6XxHb5N9TQhte 4uk3kVhzFJnnLLPirYrpkOy1gxgTfMeYUglYgUx39/NVKFVRc+nUZ0Yj3ogKzyTb /hpoF35sNO1alg5exWNaNhOleWWJu4pIgKoiQNTE9w0MYrETJyKChy26MKIG5X+A oPUjkpKXs/RvGUl58FFvGVwPOnKA+e1HzbMWT1cOLa3FpgilJeMFTnFZ+i7t58AL NuyE048OnATbHAh2XNKs7Zuz4V6OdHSVYwJlwzzswBjNleOAth0t54UGhhGBAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUGetTOeIyHG4TPMIA0Y1UjNE75IwwHwYDVR0j BBgwFoAUEwWlD+7AQskX2O8td9HSRIhIwPkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1 NjRhLzEvMTMwNUE1MEZFRUMwNDJDOTE3RDhFRjJENzdEMUQyNDQ4ODQ4QzBGOS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzEzMDVBNTBGRUVDMDQy QzkxN0Q4RUYyRDc3RDFEMjQ0ODg0OEMwRjkuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1NjRh LzEvMTMwNUE1MEZFRUMwNDJDOTE3RDhFRjJENzdEMUQyNDQ4ODQ4QzBGOS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAEhrqXrdQpZZa4F6f4fCnJu2lUoCYa+5BcT2QtGEi89vh/pvAgxJDOCn k5GM1S4BO6cSlagq+iNqJBF0QFI2WzCEsxaGPsPt99kxAuSHTfIi2zza10yJcJTv B9G3US7hvBqyekxI5q+wkmVwAzQ4W3r79sxVXx64KhzDUXAdF0FoLXfFDh52CExF LK4zC+dwYeyGa4QCaJa+cbud98ta/Ac6N7pxqWRAQO8QYeLlF2ZNfCwVMi394Efh rHu/cjr/4MmEdabExUtn06TFT85ow60zuFqzb01JtcqHAdWuB8/tzaZ62bul6dOX s1SBIlps7lmLXlrHD3dvFvQoRUf/Ju4= -----END CERTIFICATE-----Generated at Mon Jun 30 00:49:44 2025 by rpki-client