$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.mft File: 1305A50FEEC042C917D8EF2D77D1D2448848C0F9.mft (raw, json) Hash identifier: ctBsllm83kUroC0mm9tus1G357KRCxUg+KE5yupFhkE= Subject key identifier: 7E:C1:98:51:E7:92:80:EC:43:31:11:57:16:63:52:59:BE:74:52:84 Authority key identifier: 13:05:A5:0F:EE:C0:42:C9:17:D8:EF:2D:77:D1:D2:44:88:48:C0:F9 Certificate issuer: /CN=1305A50FEEC042C917D8EF2D77D1D2448848C0F9 Certificate serial: 38FF952F8F9826676F8E675133A6A6F4D0A987EC Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.mft Manifest number: 02F0 Signing time: Tue 06 May 2025 23:29:43 +0000 Manifest this update: Tue 06 May 2025 23:24:43 +0000 Manifest next update: Thu 08 May 2025 02:25:43 +0000 Files and hashes: 1: 326130353a646663313a393630303a3a2f34302d3430203d3e20323136343535.roa (hash: R8rTJIYEOHmNtQ+W65HlVcJr9EAiC7WNdRoszOqVDfk=) 2: 1305A50FEEC042C917D8EF2D77D1D2448848C0F9.crl (hash: 67v+MJ4dYoddYvoir6wZQjQVhk5h9nudx9oTodPMBOA=) 3: 326130353a646663313a383530303a3a2f34302d3430203d3e20323136343535.roa (hash: E/OJJsH8vRLWk7ObLOrajKk/aVne0/9cuXNyPD2i5xg=) 4: 326130353a646663313a383531313a3a2f34382d3438203d3e20323136343535.roa (hash: Lfg3mHt7cy+TUJoGs7HICBQr97boLuR2prHw+KIv6RY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.crl rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 May 2025 02:25:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:ff:95:2f:8f:98:26:67:6f:8e:67:51:33:a6:a6:f4:d0:a9:87:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1305A50FEEC042C917D8EF2D77D1D2448848C0F9 Validity Not Before: May 6 23:24:43 2025 GMT Not After : May 8 02:25:43 2025 GMT Subject: CN=7EC19851E79280EC4331115716635259BE745284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:27:12:5f:4a:0d:7f:d1:92:cf:5b:e3:a2:2e: 91:d9:04:c8:d5:29:b1:6a:67:15:66:61:96:1b:e4: 98:cc:0c:bd:a4:25:64:03:5d:47:df:69:73:25:5c: 00:09:e0:1e:32:68:5e:ea:6a:3d:9a:98:7d:29:28: db:5f:e8:6d:44:bf:ea:41:a0:71:ba:8b:15:d0:56: fb:bf:1c:aa:c1:ab:d7:02:50:fd:a4:d5:f6:22:62: ad:85:66:cd:4a:65:94:45:37:bc:57:ac:7c:3d:04: 93:54:42:7a:af:77:8e:5f:5d:85:a3:d2:47:3d:29: d6:da:9a:70:80:93:56:95:de:17:2d:89:ae:0d:4f: 8e:18:fe:30:65:0e:c0:a1:86:b2:d4:ff:f4:a5:e9: 01:fd:ca:69:8e:8d:7d:09:9b:d9:c3:db:8c:43:58: dc:0d:81:01:0a:27:b0:8e:a4:ae:bd:0c:b2:47:2c: 9d:fb:b5:9f:32:17:2f:e2:ad:4a:9a:be:67:87:83: 7a:05:3c:b4:74:f7:35:7b:34:90:43:89:c8:93:b3: 55:10:66:e1:13:9b:c8:4d:48:aa:bf:bb:ee:96:5a: b6:3b:c3:79:16:61:8e:ee:71:85:40:5d:11:94:26: 20:c8:ed:6b:c7:8f:38:b8:fe:e8:5d:88:4f:fa:35: ee:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:C1:98:51:E7:92:80:EC:43:31:11:57:16:63:52:59:BE:74:52:84 X509v3 Authority Key Identifier: keyid:13:05:A5:0F:EE:C0:42:C9:17:D8:EF:2D:77:D1:D2:44:88:48:C0:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:e0:54:90:2a:da:20:48:45:6b:9a:86:6d:74:86:d4:3d:4b: d4:9c:07:17:27:88:84:52:fd:db:7c:85:67:29:92:19:da:e8: a6:39:d2:5e:71:88:bc:7d:02:1d:43:9d:3a:dc:cc:a8:b6:9f: bc:9e:6c:ea:b3:0a:e3:78:a5:ab:81:1e:92:8c:5d:fd:bc:41: 8b:ab:53:d0:ec:bf:58:24:d9:33:f9:74:fe:b7:5a:73:34:8f: 5b:e8:e0:71:2f:08:93:4d:9d:82:f9:38:47:c0:53:4e:b5:19: 17:9d:9c:08:ab:08:be:c4:7f:e7:4c:9d:06:4f:ed:65:23:8d: ef:a5:20:f5:e6:d0:82:e2:a1:31:6b:89:78:c5:11:48:c3:cc: ec:c0:de:a1:59:75:62:09:18:c4:98:95:40:2f:92:c0:54:88: ab:87:12:9d:3b:7c:d8:9a:d7:46:6e:ff:a1:15:e3:fe:ac:86: 46:8d:7e:e0:80:b2:93:5c:6b:e1:66:20:d6:c5:74:0b:bd:42: f4:bb:b9:ab:e7:40:93:ac:c9:a3:02:90:90:ce:02:81:86:d9: d6:a8:2d:13:23:4b:58:14:4b:fb:12:7f:98:08:fc:1b:98:0c: 22:cb:65:eb:9d:0d:1d:2f:08:21:9a:c8:a1:9e:3b:65:fc:69: 10:5d:62:e1 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUOP+VL4+YJmdvjmdRM6am9NCph+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMwNUE1MEZFRUMwNDJDOTE3RDhFRjJENzdEMUQyNDQ4 ODQ4QzBGOTAeFw0yNTA1MDYyMzI0NDNaFw0yNTA1MDgwMjI1NDNaMDMxMTAvBgNV BAMTKDdFQzE5ODUxRTc5MjgwRUM0MzMxMTE1NzE2NjM1MjU5QkU3NDUyODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAJxJfSg1/0ZLPW+OiLpHZBMjV KbFqZxVmYZYb5JjMDL2kJWQDXUffaXMlXAAJ4B4yaF7qaj2amH0pKNtf6G1Ev+pB oHG6ixXQVvu/HKrBq9cCUP2k1fYiYq2FZs1KZZRFN7xXrHw9BJNUQnqvd45fXYWj 0kc9KdbamnCAk1aV3hctia4NT44Y/jBlDsChhrLU//Sl6QH9ymmOjX0Jm9nD24xD WNwNgQEKJ7COpK69DLJHLJ37tZ8yFy/irUqavmeHg3oFPLR09zV7NJBDiciTs1UQ ZuETm8hNSKq/u+6WWrY7w3kWYY7ucYVAXRGUJiDI7WvHjzi4/uhdiE/6Ne7lAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUfsGYUeeSgOxDMRFXFmNSWb50UoQwHwYDVR0j BBgwFoAUEwWlD+7AQskX2O8td9HSRIhIwPkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1 NjRhLzEvMTMwNUE1MEZFRUMwNDJDOTE3RDhFRjJENzdEMUQyNDQ4ODQ4QzBGOS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzEzMDVBNTBGRUVDMDQy QzkxN0Q4RUYyRDc3RDFEMjQ0ODg0OEMwRjkuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1NjRh LzEvMTMwNUE1MEZFRUMwNDJDOTE3RDhFRjJENzdEMUQyNDQ4ODQ4QzBGOS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAHXgVJAq2iBIRWuahm10htQ9S9ScBxcniIRS/dt8hWcpkhna6KY50l5x iLx9Ah1DnTrczKi2n7yebOqzCuN4pauBHpKMXf28QYurU9Dsv1gk2TP5dP63WnM0 j1vo4HEvCJNNnYL5OEfAU061GRednAirCL7Ef+dMnQZP7WUjje+lIPXm0ILioTFr iXjFEUjDzOzA3qFZdWIJGMSYlUAvksBUiKuHEp07fNia10Zu/6EV4/6shkaNfuCA spNca+FmINbFdAu9QvS7uavnQJOsyaMCkJDOAoGG2daoLRMjS1gUS/sSf5gI/BuY DCLLZeudDR0vCCGayKGeO2X8aRBdYuE= -----END CERTIFICATE-----Generated at Wed May 7 17:54:30 2025 by rpki-client