$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/2/04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C.mft File: 04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C.mft (raw, json) Hash identifier: LggzeNyPhdZwEKwgMJ/MEPq4JxZVO2crBuxW1Qiu5Po= Subject key identifier: F1:7A:91:54:79:0B:BF:42:31:9D:64:53:EE:54:1F:86:B6:A7:C9:58 Authority key identifier: 04:F7:D8:E6:71:AC:7D:0A:0F:EE:B7:4E:4B:E9:C9:C1:3E:B2:95:4C Certificate issuer: /CN=04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C Certificate serial: 67E41DFB7B0826B9B274C398A6187113ECB053AA Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/2/04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C.mft Manifest number: 01AD Signing time: Sun 29 Jun 2025 18:26:28 +0000 Manifest this update: Sun 29 Jun 2025 18:21:28 +0000 Manifest next update: Mon 30 Jun 2025 22:12:28 +0000 Files and hashes: 1: 326130353a646663313a383230303a3a2f34302d3438203d3e20323136343532.roa (hash: RXK+W3w1YvQu9ahIRwMIryYcMgQG39a2/hB4IK34E74=) 2: 326130353a646663313a383236303a3a2f34342d3438203d3e203331383938.roa (hash: BmKTbRMoiut+8VNSufvgCLPuOQU03tX8DldEeEoDX0o=) 3: 04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C.crl (hash: 6AzA/yftyCb8BAaghk6jiKZfJlqFWMebeOG7KPBlr9w=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/2/04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C.crl rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/2/04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 20:34:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:e4:1d:fb:7b:08:26:b9:b2:74:c3:98:a6:18:71:13:ec:b0:53:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C Validity Not Before: Jun 29 18:21:28 2025 GMT Not After : Jun 30 22:12:28 2025 GMT Subject: CN=F17A9154790BBF42319D6453EE541F86B6A7C958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ce:1c:e3:03:b2:51:92:ca:86:a2:53:89:fb: 19:6d:49:f2:2d:6a:a4:72:b4:06:45:8f:3e:43:c9: 30:40:66:9f:af:de:4b:28:47:91:ee:cb:fe:32:23: 30:5e:2b:89:f5:f6:67:d6:bc:d6:c7:98:2a:ed:af: 35:c1:bb:6c:c4:c7:ed:46:12:7a:11:85:f8:fa:a2: 05:e9:b0:c5:db:90:a4:ea:11:e7:39:70:50:d6:b8: a9:5e:c0:b4:f8:9c:35:2a:39:d5:b6:e3:7f:61:ed: 32:92:5c:e6:bf:b5:81:01:9b:ea:aa:a8:49:c8:e9: 0a:82:94:b6:b2:2c:0e:e4:e9:7c:7a:84:2b:e6:e2: a2:d2:27:6c:d0:40:e8:b4:62:dc:c2:cb:0b:f0:45: 54:03:5e:99:13:b5:52:3d:f4:20:ec:1a:56:6b:79: a1:82:7a:b5:49:dc:4b:cf:24:f9:3f:e8:08:7c:ae: a4:09:73:3e:7b:9f:8a:8c:7e:46:54:d8:07:7d:1d: bb:75:0a:d7:b5:7a:10:3a:29:2c:d4:0b:33:ec:90: 13:c6:a4:22:58:43:f2:1e:e9:83:3c:4c:24:ce:09: e5:a7:d3:cf:50:58:34:9f:56:18:f9:b0:b4:79:0f: 0a:39:df:f9:e5:4f:0f:c6:d1:df:d9:98:25:6c:47: 3d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:7A:91:54:79:0B:BF:42:31:9D:64:53:EE:54:1F:86:B6:A7:C9:58 X509v3 Authority Key Identifier: keyid:04:F7:D8:E6:71:AC:7D:0A:0F:EE:B7:4E:4B:E9:C9:C1:3E:B2:95:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/2/04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/2/04F7D8E671AC7D0A0FEEB74E4BE9C9C13EB2954C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:94:1f:2a:4a:de:70:91:41:cd:d6:bf:93:db:f2:78:a6:10: 45:80:2c:3d:15:6f:b3:61:8d:fb:16:00:ca:bd:b4:d7:2f:26: 15:06:9e:2f:11:eb:ea:03:c3:25:51:4b:2e:90:a3:43:90:ba: c4:e7:27:a1:5b:a9:d0:c9:9d:0d:9b:a5:56:12:3a:35:09:35: de:11:98:5b:1e:dc:45:89:2e:72:8b:8b:85:a4:91:4e:50:f6: a7:b2:a9:b4:a3:65:5a:05:ad:6b:01:3a:88:22:24:0a:71:5a: ba:24:86:fd:41:a1:72:d4:80:eb:3b:fa:2f:1b:ce:11:9d:ab: a3:03:08:4d:00:9c:da:17:25:ca:26:22:99:c4:47:2c:da:8b: 65:b1:25:9b:d0:2c:53:16:43:ea:d1:20:9d:0a:d9:af:7a:7d: 5b:96:eb:59:ab:cd:7e:33:cb:70:e5:c1:b1:55:8d:ff:ba:89: da:b7:5c:28:b0:80:33:6b:3e:c3:8e:73:c5:94:dc:0d:aa:d5: ee:fd:e3:20:b4:f6:1d:36:fc:95:51:79:00:4a:2c:d5:6a:6e: 3a:0f:a4:28:4b:c4:60:ba:7c:a3:ce:50:ff:d6:e5:82:79:7d: 99:ba:30:51:25:14:f7:93:80:75:9f:72:be:72:44:e2:a6:47: db:6d:f0:69 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUZ+Qd+3sIJrmydMOYphhxE+ywU6owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDRGN0Q4RTY3MUFDN0QwQTBGRUVCNzRFNEJFOUM5QzEz RUIyOTU0QzAeFw0yNTA2MjkxODIxMjhaFw0yNTA2MzAyMjEyMjhaMDMxMTAvBgNV BAMTKEYxN0E5MTU0NzkwQkJGNDIzMTlENjQ1M0VFNTQxRjg2QjZBN0M5NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEzhzjA7JRksqGolOJ+xltSfIt aqRytAZFjz5DyTBAZp+v3ksoR5Huy/4yIzBeK4n19mfWvNbHmCrtrzXBu2zEx+1G EnoRhfj6ogXpsMXbkKTqEec5cFDWuKlewLT4nDUqOdW2439h7TKSXOa/tYEBm+qq qEnI6QqClLayLA7k6Xx6hCvm4qLSJ2zQQOi0YtzCywvwRVQDXpkTtVI99CDsGlZr eaGCerVJ3EvPJPk/6Ah8rqQJcz57n4qMfkZU2Ad9Hbt1Cte1ehA6KSzUCzPskBPG pCJYQ/Ie6YM8TCTOCeWn089QWDSfVhj5sLR5Dwo53/nlTw/G0d/ZmCVsRz2tAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQU8XqRVHkLv0IxnWRT7lQfhranyVgwHwYDVR0j BBgwFoAUBPfY5nGsfQoP7rdOS+nJwT6ylUwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNk OGVmLzIvMDRGN0Q4RTY3MUFDN0QwQTBGRUVCNzRFNEJFOUM5QzEzRUIyOTU0Qy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzA0RjdEOEU2NzFBQzdE MEEwRkVFQjc0RTRCRTlDOUMxM0VCMjk1NEMuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNkOGVm LzIvMDRGN0Q4RTY3MUFDN0QwQTBGRUVCNzRFNEJFOUM5QzEzRUIyOTU0Qy5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBACCUHypK3nCRQc3Wv5Pb8nimEEWALD0Vb7NhjfsWAMq9tNcvJhUGni8R 6+oDwyVRSy6Qo0OQusTnJ6FbqdDJnQ2bpVYSOjUJNd4RmFse3EWJLnKLi4WkkU5Q 9qeyqbSjZVoFrWsBOogiJApxWrokhv1BoXLUgOs7+i8bzhGdq6MDCE0AnNoXJcom IpnERyzai2WxJZvQLFMWQ+rRIJ0K2a96fVuW61mrzX4zy3DlwbFVjf+6idq3XCiw gDNrPsOOc8WU3A2q1e794yC09h02/JVReQBKLNVqbjoPpChLxGC6fKPOUP/W5YJ5 fZm6MFElFPeTgHWfcr5yROKmR9tt8Gk= -----END CERTIFICATE-----Generated at Mon Jun 30 11:28:38 2025 by rpki-client