$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft File: B729F0C7BF295C6844FD328B324A1ED8598032F9.mft (raw, json) Hash identifier: /LmbNgfIUtjuOoRqEbCczF9nFFz/vCtEzNVRz5e64AE= Subject key identifier: F8:4E:D6:D7:02:51:B0:AA:6C:D4:E4:F0:1B:74:CD:31:CC:9C:56:8C Authority key identifier: B7:29:F0:C7:BF:29:5C:68:44:FD:32:8B:32:4A:1E:D8:59:80:32:F9 Certificate issuer: /CN=B729F0C7BF295C6844FD328B324A1ED8598032F9 Certificate serial: 77E5A589FE1F161BC3DE4E13DA8BE5AF623D4A08 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft Manifest number: 45 Signing time: Sat 23 Aug 2025 07:53:13 +0000 Manifest this update: Sat 23 Aug 2025 07:48:13 +0000 Manifest next update: Sun 24 Aug 2025 10:50:13 +0000 Files and hashes: 1: 326130353a646663313a383236303a3a2f34342d3438203d3e203331383938.roa (hash: NyB2Q3nplRrrVqQaiZpQzKBuInw96biJRlaf2Wfrra4=) 2: 326130353a646663313a383230303a3a2f34302d3438203d3e20323136343532.roa (hash: tbMEmJLRx8p/XooueSgD+2D8XMkhb8zPBfDKGLGOZ18=) 3: B729F0C7BF295C6844FD328B324A1ED8598032F9.crl (hash: p2bSNbNjO6zIYJ4IBy8lFz3u0FXKqcl5r0rmED2Gw8Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.crl rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 10:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:e5:a5:89:fe:1f:16:1b:c3:de:4e:13:da:8b:e5:af:62:3d:4a:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B729F0C7BF295C6844FD328B324A1ED8598032F9 Validity Not Before: Aug 23 07:48:13 2025 GMT Not After : Aug 24 10:50:13 2025 GMT Subject: CN=F84ED6D70251B0AA6CD4E4F01B74CD31CC9C568C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b8:a4:13:46:e1:9a:55:36:a1:0c:60:a0:26: aa:d8:07:7b:f7:18:a7:2f:21:c7:91:7b:35:c1:52: 5c:1b:54:51:2c:ef:a9:b8:b1:2e:d5:59:70:9a:ca: 5e:8a:f6:03:e0:6f:f6:cf:8d:88:66:29:fa:ab:c2: fd:c1:03:48:cb:1e:5a:8a:94:b4:5c:13:f8:83:88: 67:d4:07:20:c2:32:65:b0:e1:66:3b:da:3e:32:ff: 0a:00:d2:0f:47:8f:14:1f:6b:b9:fa:64:f6:00:c8: 76:5b:ce:98:7b:82:cc:aa:68:bf:11:49:04:58:1d: 12:c0:eb:80:55:17:f5:31:f4:77:80:25:fb:20:b2: 78:0b:e1:4e:f5:3c:aa:ff:a4:23:b9:a1:21:7e:5c: 74:1f:12:be:6d:8a:e7:79:07:f9:f5:3b:b8:e1:cc: ce:c7:7f:fc:35:3a:9f:ab:95:7b:0f:13:19:00:46: 7d:af:52:10:cd:f4:94:5c:35:fe:6f:9d:2a:d0:21: bf:bf:61:bd:78:4a:27:4c:49:17:b7:21:96:33:7c: f5:d4:ee:d5:ba:ea:69:5a:71:16:33:69:07:69:97: 9e:e0:99:61:ce:7a:dd:a8:2a:7c:f7:be:14:04:e9: 83:1a:43:04:79:4a:27:64:62:59:8f:41:46:3c:97: 81:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:4E:D6:D7:02:51:B0:AA:6C:D4:E4:F0:1B:74:CD:31:CC:9C:56:8C X509v3 Authority Key Identifier: keyid:B7:29:F0:C7:BF:29:5C:68:44:FD:32:8B:32:4A:1E:D8:59:80:32:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:aa:fb:dd:ad:76:af:e1:08:9f:5c:22:69:75:bb:a8:b7:34: d1:8b:aa:b4:75:ec:c4:8f:6d:6c:65:96:92:06:8e:72:98:9f: 2f:bb:86:f3:c7:ce:b9:66:cd:10:15:7b:41:d4:9f:c2:be:88: db:cc:2e:bf:4c:b9:76:d4:58:33:65:b8:15:b9:42:d1:34:c9: 80:7f:18:ed:8a:3e:e7:c4:45:4f:72:a0:de:41:5b:3e:b9:56: 26:c4:73:9c:35:da:17:3f:4e:58:08:de:28:4d:2c:42:5a:22: 83:39:f2:41:ab:b1:0b:23:57:76:05:54:b8:6a:50:8f:e6:b7: 2e:01:1f:39:ea:90:99:c9:a3:38:c2:17:d4:6f:ed:b7:23:e8: 67:bd:13:db:eb:ae:f0:bd:fe:83:d7:d3:43:3e:6f:3a:93:dd: 5c:5b:11:bf:9e:b1:d8:56:d4:2e:8d:1b:9b:c9:dd:da:10:50: 94:66:d9:52:43:4a:11:dc:74:7a:1b:98:bb:9c:5a:39:bc:3b: d6:a6:b6:ef:20:ce:46:ab:57:16:83:b4:ea:1e:6e:db:47:20: fa:fe:66:e2:8f:d7:00:08:4a:e1:2c:4b:4b:c7:4d:21:d5:95: f1:22:b7:69:93:6f:b7:6a:a2:f4:c7:9b:60:fc:d8:23:b1:be: 82:30:bf:2b -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUd+Wlif4fFhvD3k4T2ovlr2I9SggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcyOUYwQzdCRjI5NUM2ODQ0RkQzMjhCMzI0QTFFRDg1 OTgwMzJGOTAeFw0yNTA4MjMwNzQ4MTNaFw0yNTA4MjQxMDUwMTNaMDMxMTAvBgNV BAMTKEY4NEVENkQ3MDI1MUIwQUE2Q0Q0RTRGMDFCNzRDRDMxQ0M5QzU2OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEuKQTRuGaVTahDGCgJqrYB3v3 GKcvIceRezXBUlwbVFEs76m4sS7VWXCayl6K9gPgb/bPjYhmKfqrwv3BA0jLHlqK lLRcE/iDiGfUByDCMmWw4WY72j4y/woA0g9HjxQfa7n6ZPYAyHZbzph7gsyqaL8R SQRYHRLA64BVF/Ux9HeAJfsgsngL4U71PKr/pCO5oSF+XHQfEr5tiud5B/n1O7jh zM7Hf/w1Op+rlXsPExkARn2vUhDN9JRcNf5vnSrQIb+/Yb14SidMSRe3IZYzfPXU 7tW66mlacRYzaQdpl57gmWHOet2oKnz3vhQE6YMaQwR5SidkYlmPQUY8l4HRAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQU+E7W1wJRsKps1OTwG3TNMcycVowwHwYDVR0j BBgwFoAUtynwx78pXGhE/TKLMkoe2FmAMvkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNk OGVmLzMvQjcyOUYwQzdCRjI5NUM2ODQ0RkQzMjhCMzI0QTFFRDg1OTgwMzJGOS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0I3MjlGMEM3QkYyOTVD Njg0NEZEMzI4QjMyNEExRUQ4NTk4MDMyRjkuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNkOGVm LzMvQjcyOUYwQzdCRjI5NUM2ODQ0RkQzMjhCMzI0QTFFRDg1OTgwMzJGOS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBALuq+92tdq/hCJ9cIml1u6i3NNGLqrR17MSPbWxllpIGjnKYny+7hvPH zrlmzRAVe0HUn8K+iNvMLr9MuXbUWDNluBW5QtE0yYB/GO2KPufERU9yoN5BWz65 VibEc5w12hc/TlgI3ihNLEJaIoM58kGrsQsjV3YFVLhqUI/mty4BHznqkJnJozjC F9Rv7bcj6Ge9E9vrrvC9/oPX00M+bzqT3VxbEb+esdhW1C6NG5vJ3doQUJRm2VJD ShHcdHobmLucWjm8O9amtu8gzkarVxaDtOoebttHIPr+ZuKP1wAISuEsS0vHTSHV lfEit2mTb7dqovTHm2D82COxvoIwvys= -----END CERTIFICATE-----Generated at Sat Aug 23 22:51:55 2025 by rpki-client