$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.mft File: B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.mft (raw, json) Hash identifier: ONTRYiKb4iYzMVxgp8wGApFu0MNUulzNrvwqzqBefAA= Subject key identifier: E2:24:91:49:96:77:77:66:C0:47:B8:62:06:D5:A9:68:62:B2:16:95 Authority key identifier: B3:D1:0E:E6:F3:7C:24:3D:0D:0C:08:F7:AA:02:BA:3C:D2:55:95:76 Certificate issuer: /CN=B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576 Certificate serial: 06B151519285A928E81F3137E34CE695E0273DB0 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.mft Manifest number: 0408 Signing time: Sun 29 Jun 2025 10:31:54 +0000 Manifest this update: Sun 29 Jun 2025 10:26:54 +0000 Manifest next update: Mon 30 Jun 2025 12:05:54 +0000 Files and hashes: 1: B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.crl (hash: ku/IHVw6ReKyvETnbUHFowZ4VIB4nqlLO1GntPS2bAs=) 2: 326130613a363034303a396630303a3a2f34302d3438203d3e203531303139.roa (hash: Jy1b+gt92RN+/ooPe4fGSUiuh5FGbMZK9CxKzh5Ox8I=) 3: 326130613a363034303a313330303a3a2f34302d3438203d3e203531303139.roa (hash: aSnHcNtVwzQzcWn5p0KM1my79E8t48awA6CXq7tsPUQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 23:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:b1:51:51:92:85:a9:28:e8:1f:31:37:e3:4c:e6:95:e0:27:3d:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576 Validity Not Before: Jun 29 10:26:54 2025 GMT Not After : Jun 30 12:05:54 2025 GMT Subject: CN=E224914996777766C047B86206D5A96862B21695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c6:d6:e4:ec:79:7b:56:88:d5:7c:c6:35:2f: ff:e0:81:7b:95:d4:4d:98:24:26:11:59:65:73:ea: 33:a6:9b:b3:31:0c:71:55:b1:b8:89:6d:00:a1:ee: 6b:a8:c2:d1:34:d4:da:87:02:fa:58:4a:d4:f8:68: 76:6f:d3:a8:42:1b:c5:b2:9f:ef:5b:e4:35:8b:03: 8b:85:75:de:d9:ee:98:a2:d7:76:21:0d:c5:44:69: 2e:96:91:f6:e6:c7:15:ef:7d:bc:32:f0:66:72:3f: 23:90:de:0a:aa:21:c0:86:72:6e:39:ea:de:e9:40: ad:33:34:7a:ab:82:69:6e:1d:f6:85:9a:75:1b:13: e6:85:0a:46:f0:eb:13:f9:a9:97:eb:cb:2a:bd:61: 82:5d:db:5b:88:5c:76:aa:dc:27:a3:5f:79:0e:7e: 86:5a:2a:8d:1e:8d:96:69:1b:a9:74:11:b5:c4:15: c1:77:f5:28:da:f6:26:03:ca:59:18:00:a2:f5:b8: 9c:21:45:c1:e5:ff:14:b6:7e:a8:e2:dc:db:31:29: d5:48:e9:51:87:e7:ec:6a:dd:a2:24:20:e5:ea:3b: 17:ee:7d:10:01:ee:44:d4:e2:f1:e9:e7:b8:ee:97: a2:e2:57:86:d6:f3:8e:aa:24:8c:0d:98:b8:b8:02: ce:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:24:91:49:96:77:77:66:C0:47:B8:62:06:D5:A9:68:62:B2:16:95 X509v3 Authority Key Identifier: keyid:B3:D1:0E:E6:F3:7C:24:3D:0D:0C:08:F7:AA:02:BA:3C:D2:55:95:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:ae:f4:d3:d9:71:81:db:c5:9a:49:44:30:98:76:0d:cd:82: 0e:dd:da:ec:fa:83:60:bf:77:82:01:12:81:54:00:9a:24:56: 94:e5:38:bb:2d:ae:e9:f2:21:a5:05:17:9c:67:03:77:29:07: 07:46:11:1b:1b:28:16:f8:88:7b:6e:91:62:38:df:87:6f:ac: e4:26:59:5c:01:2e:62:60:d7:80:db:97:0e:87:f2:f1:fc:74: 58:29:61:9a:e7:80:89:a8:8a:76:09:4d:cc:c8:6c:ed:04:7f: 32:15:76:d9:0c:81:f3:92:ed:48:be:db:8c:45:02:ec:a4:4a: 4d:a8:73:d6:b6:b8:39:94:62:a8:6a:a7:7f:81:15:6c:78:cd: 6f:54:b1:71:c3:eb:1d:bf:7f:55:06:bb:01:e7:fb:7a:08:b8: 95:84:08:e0:e1:d7:0d:0e:0f:f6:5d:23:56:52:cd:4b:5c:4a: f3:f9:2e:8e:df:9d:54:b1:ef:04:26:4a:46:f8:8a:46:be:44: 08:02:91:0c:f1:8e:78:59:d9:fe:c5:48:02:6f:3f:ca:2d:0d: 4d:a9:1a:b2:92:88:5a:96:cd:a0:d8:ba:ef:b3:83:c4:8a:7d: 20:cd:cf:74:99:ba:c6:57:e6:f6:25:ee:79:ec:8a:8a:cf:64: a6:5f:69:bd -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUBrFRUZKFqSjoHzE340zmleAnPbAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNEMTBFRTZGMzdDMjQzRDBEMEMwOEY3QUEwMkJBM0NE MjU1OTU3NjAeFw0yNTA2MjkxMDI2NTRaFw0yNTA2MzAxMjA1NTRaMDMxMTAvBgNV BAMTKEUyMjQ5MTQ5OTY3Nzc3NjZDMDQ3Qjg2MjA2RDVBOTY4NjJCMjE2OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhxtbk7Hl7VojVfMY1L//ggXuV 1E2YJCYRWWVz6jOmm7MxDHFVsbiJbQCh7muowtE01NqHAvpYStT4aHZv06hCG8Wy n+9b5DWLA4uFdd7Z7pii13YhDcVEaS6WkfbmxxXvfbwy8GZyPyOQ3gqqIcCGcm45 6t7pQK0zNHqrgmluHfaFmnUbE+aFCkbw6xP5qZfryyq9YYJd21uIXHaq3CejX3kO foZaKo0ejZZpG6l0EbXEFcF39Sja9iYDylkYAKL1uJwhRcHl/xS2fqji3NsxKdVI 6VGH5+xq3aIkIOXqOxfufRAB7kTU4vHp57jul6LiV4bW846qJIwNmLi4As5bAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQU4iSRSZZ3d2bAR7hiBtWpaGKyFpUwHwYDVR0j BBgwFoAUs9EO5vN8JD0NDAj3qgK6PNJVlXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzEvQjNEMTBFRTZGMzdDMjQzRDBEMEMwOEY3QUEwMkJBM0NEMjU1OTU3Ni5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wL0IzRDEwRUU2RjM3QzI0 M0QwRDBDMDhGN0FBMDJCQTNDRDI1NTk1NzYuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2NhZTNm LzEvQjNEMTBFRTZGMzdDMjQzRDBEMEMwOEY3QUEwMkJBM0NEMjU1OTU3Ni5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAFeu9NPZcYHbxZpJRDCYdg3Ngg7d2uz6g2C/d4IBEoFUAJokVpTlOLst runyIaUFF5xnA3cpBwdGERsbKBb4iHtukWI434dvrOQmWVwBLmJg14Dblw6H8vH8 dFgpYZrngImoinYJTczIbO0EfzIVdtkMgfOS7Ui+24xFAuykSk2oc9a2uDmUYqhq p3+BFWx4zW9UsXHD6x2/f1UGuwHn+3oIuJWECODh1w0OD/ZdI1ZSzUtcSvP5Lo7f nVSx7wQmSkb4ika+RAgCkQzxjnhZ2f7FSAJvP8otDU2pGrKSiFqWzaDYuu+zg8SK fSDNz3SZusZX5vYl7nnsiorPZKZfab0= -----END CERTIFICATE-----Generated at Sun Jun 29 15:25:23 2025 by rpki-client