$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft File: CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft (raw, json) Hash identifier: 2IS7uzkTkv8JDOFyA2EvBKuxr2cbfOqOnelABJjp4x8= Subject key identifier: 53:D7:7C:92:8B:1B:D3:E9:41:3C:C1:DA:18:85:40:00:B5:6E:21:62 Authority key identifier: CC:6E:CC:46:20:C3:32:98:BA:AE:F1:70:9A:D6:D0:59:5C:D2:56:5C Certificate issuer: /CN=CC6ECC4620C33298BAAEF1709AD6D0595CD2565C Certificate serial: 5BC147D508F75BA2DE7541AB08DE0B81960B2EA7 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft Manifest number: 47 Signing time: Sat 23 Aug 2025 07:21:06 +0000 Manifest this update: Sat 23 Aug 2025 07:16:06 +0000 Manifest next update: Sun 24 Aug 2025 09:44:06 +0000 Files and hashes: 1: CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl (hash: URbKs7F8n2oEgDBGZxKIJS9F2MnmFXHP/gWS+d6RmPQ=) 2: 326130353a646663313a393630303a3a2f34302d3430203d3e20323136343535.roa (hash: EPbQn4nTyAleGN23OETUsYn80EOl1eLpliPnGLTdXDk=) 3: 326130353a646663313a383530303a3a2f34302d3430203d3e20323136343535.roa (hash: oi3cTY9RPbSSa44GzFqVMPw4EmmK/P6XuRB3HCSy6ZU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 09:44:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:c1:47:d5:08:f7:5b:a2:de:75:41:ab:08:de:0b:81:96:0b:2e:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC6ECC4620C33298BAAEF1709AD6D0595CD2565C Validity Not Before: Aug 23 07:16:06 2025 GMT Not After : Aug 24 09:44:06 2025 GMT Subject: CN=53D77C928B1BD3E9413CC1DA18854000B56E2162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c8:4f:c9:7a:5a:00:69:e3:52:9a:ff:da:8f: d3:d0:85:c2:79:39:7c:46:42:f2:12:94:63:db:64: 8a:e4:16:c6:6a:d5:3f:a5:63:cf:38:f7:bc:b8:79: 27:dc:9c:51:3b:0e:6c:41:46:28:30:e4:e5:99:8b: 0c:ed:bc:8f:4a:64:d8:3a:f3:f7:61:a6:04:86:22: 7d:95:07:8d:dc:33:f3:7f:89:da:08:9d:a0:f7:f6: b8:a1:19:ba:74:d5:99:83:a6:6c:3d:93:2a:39:8c: e3:82:ea:42:45:14:09:38:05:cd:2b:28:74:17:c3: a1:19:08:54:ab:85:46:78:3e:e3:a0:f7:97:ee:2d: c2:11:3d:b0:dc:f3:0b:e8:02:f7:31:73:27:cb:21: c6:8e:be:ac:f6:81:4d:32:46:50:c3:43:2f:42:34: 3b:c7:aa:ff:35:d3:97:c4:95:a6:a9:46:63:9b:57: 75:dd:b7:01:ad:a7:3e:1e:75:1c:83:e8:97:75:2e: 54:c0:3f:59:5c:71:f1:d8:21:54:3b:36:af:99:79: 0f:9b:0f:bb:27:ca:22:74:fe:44:52:0b:ac:9c:72: 0f:d1:c2:00:0e:bf:6d:8a:3f:79:ee:06:c3:84:39: e9:0e:85:97:88:89:97:57:4e:88:d8:d0:41:76:cb: 06:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:D7:7C:92:8B:1B:D3:E9:41:3C:C1:DA:18:85:40:00:B5:6E:21:62 X509v3 Authority Key Identifier: keyid:CC:6E:CC:46:20:C3:32:98:BA:AE:F1:70:9A:D6:D0:59:5C:D2:56:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:e9:60:6f:c0:bf:68:9a:bd:82:78:9a:cc:a1:82:45:18:de: 29:bc:50:c1:65:3e:65:a1:e8:32:84:23:82:73:db:4c:5e:bd: b3:f2:51:96:35:4a:72:b8:5a:40:dd:bc:c0:0a:f1:7f:85:14: 6b:a3:c3:f7:9c:57:c8:d7:e0:04:ae:d2:66:d7:b9:24:16:86: 2d:f8:d9:79:81:f7:28:5d:aa:24:5c:7c:15:3a:39:ba:2c:82: cc:cc:92:7d:b1:a0:a3:42:9a:2a:75:fe:80:b2:ce:e1:a5:c8: 74:7e:47:0e:fa:65:13:80:21:b6:37:b8:9e:a0:3e:f6:13:50: 04:47:a7:6d:34:02:f9:9a:8e:59:82:54:bd:ad:4e:78:ae:14: a9:83:94:84:a8:db:f1:07:88:b5:8a:4f:86:f9:b1:f0:d0:ec: b8:5f:1b:23:73:00:60:d6:79:e5:08:f4:e2:a6:b7:fe:a7:89: 5d:80:29:9b:20:31:39:73:27:d5:f3:dc:a5:50:f1:47:cd:f7: 3d:a0:f8:1b:cf:96:55:c0:d3:50:eb:87:d4:f9:d3:f8:5b:21: 30:97:a8:df:be:fe:dd:7d:0e:d0:74:c4:50:3d:04:fc:ad:55: 90:4e:9e:4c:00:96:98:83:c4:7b:98:87:ba:cb:0a:6d:18:07: 1a:93:b6:9c -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUW8FH1Qj3W6LedUGrCN4LgZYLLqcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M2RUNDNDYyMEMzMzI5OEJBQUVGMTcwOUFENkQwNTk1 Q0QyNTY1QzAeFw0yNTA4MjMwNzE2MDZaFw0yNTA4MjQwOTQ0MDZaMDMxMTAvBgNV BAMTKDUzRDc3QzkyOEIxQkQzRTk0MTNDQzFEQTE4ODU0MDAwQjU2RTIxNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6yE/JeloAaeNSmv/aj9PQhcJ5 OXxGQvISlGPbZIrkFsZq1T+lY88497y4eSfcnFE7DmxBRigw5OWZiwztvI9KZNg6 8/dhpgSGIn2VB43cM/N/idoInaD39rihGbp01ZmDpmw9kyo5jOOC6kJFFAk4Bc0r KHQXw6EZCFSrhUZ4PuOg95fuLcIRPbDc8wvoAvcxcyfLIcaOvqz2gU0yRlDDQy9C NDvHqv8105fElaapRmObV3XdtwGtpz4edRyD6Jd1LlTAP1lccfHYIVQ7Nq+ZeQ+b D7snyiJ0/kRSC6yccg/RwgAOv22KP3nuBsOEOekOhZeIiZdXTojY0EF2ywZnAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUU9d8kosb0+lBPMHaGIVAALVuIWIwHwYDVR0j BBgwFoAUzG7MRiDDMpi6rvFwmtbQWVzSVlwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1 NjRhLzMvQ0M2RUNDNDYyMEMzMzI5OEJBQUVGMTcwOUFENkQwNTk1Q0QyNTY1Qy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0NDNkVDQzQ2MjBDMzMy OThCQUFFRjE3MDlBRDZEMDU5NUNEMjU2NUMuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1NjRh LzMvQ0M2RUNDNDYyMEMzMzI5OEJBQUVGMTcwOUFENkQwNTk1Q0QyNTY1Qy5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAGXpYG/Av2iavYJ4msyhgkUY3im8UMFlPmWh6DKEI4Jz20xevbPyUZY1 SnK4WkDdvMAK8X+FFGujw/ecV8jX4ASu0mbXuSQWhi342XmB9yhdqiRcfBU6Obos gszMkn2xoKNCmip1/oCyzuGlyHR+Rw76ZROAIbY3uJ6gPvYTUARHp200AvmajlmC VL2tTniuFKmDlISo2/EHiLWKT4b5sfDQ7LhfGyNzAGDWeeUI9OKmt/6niV2AKZsg MTlzJ9Xz3KVQ8UfN9z2g+BvPllXA01Drh9T50/hbITCXqN++/t19DtB0xFA9BPyt VZBOnkwAlpiDxHuYh7rLCm0YBxqTtpw= -----END CERTIFICATE-----Generated at Sat Aug 23 22:48:38 2025 by rpki-client