$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft File: B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft (raw, json) Hash identifier: s2BSKI+HfFd9Mv1RypKS95Iha6ibpti4GTz+F6WzF88= Subject key identifier: D8:C3:8C:50:02:05:4E:39:1B:01:07:95:98:5F:42:14:E6:9A:F4:FA Authority key identifier: B2:17:28:4E:A3:D5:38:44:B2:AF:52:70:AB:BA:A3:10:5B:8B:3F:45 Certificate issuer: /CN=B217284EA3D53844B2AF5270ABBAA3105B8B3F45 Certificate serial: 4BCBBE102A1F209AF8D112E5148E38087443495C Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft Manifest number: 99 Signing time: Sun 19 Oct 2025 23:27:19 +0000 Manifest this update: Sun 19 Oct 2025 23:22:19 +0000 Manifest next update: Tue 21 Oct 2025 02:55:19 +0000 Files and hashes: 1: B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl (hash: hEx4G0mzyEpygcH1jXCtuxhYex1iIzy/k4iDGDylVVU=) 2: 326130613a363034303a313330303a3a2f34302d3438203d3e203531303139.roa (hash: wn+vtltLdcEkhCOvzx/4fvtvh6EcQrGmjXhUFly5CfQ=) 3: 326130613a363034303a396630303a3a2f34302d3438203d3e203531303139.roa (hash: 4Q4ROZYT81dIJHSkpaekI4Sbj95kc4xrlA3BgHVle7s=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 02:55:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:cb:be:10:2a:1f:20:9a:f8:d1:12:e5:14:8e:38:08:74:43:49:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B217284EA3D53844B2AF5270ABBAA3105B8B3F45 Validity Not Before: Oct 19 23:22:19 2025 GMT Not After : Oct 21 02:55:19 2025 GMT Subject: CN=D8C38C5002054E391B010795985F4214E69AF4FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:55:87:38:61:a6:b8:50:ed:90:d1:5d:a0:23: 55:f4:cd:91:f9:dc:60:f5:24:b7:d4:fa:e9:42:cf: e0:be:15:04:03:a8:2e:a5:a7:5c:48:51:e4:94:77: 03:df:d5:f1:c8:22:97:e5:23:12:af:24:54:a2:d8: ff:5d:e5:d0:f9:12:aa:d6:bc:47:96:1f:13:f8:c1: e6:ea:65:91:4d:09:fb:32:15:1b:c0:31:10:9c:0c: 38:04:0a:81:30:14:a3:d8:69:66:3f:aa:56:7d:04: 8a:e6:2a:98:db:26:49:1c:8a:f0:80:5c:30:65:07: f5:88:12:03:ae:02:58:40:67:96:6c:92:6a:9f:a2: b8:44:02:13:7f:e9:38:ee:12:83:03:f4:3c:1e:12: 82:57:86:15:45:4c:80:71:3f:94:34:fa:ef:e3:9e: 5f:02:24:68:ea:3a:b5:44:98:20:69:20:c8:79:89: 25:08:2a:47:71:2f:e7:23:d3:68:c5:13:2a:9c:e4: b2:3a:33:4f:38:64:13:6d:7c:ef:7e:42:ee:ae:18: 1e:92:c8:3a:3f:9e:c5:09:31:6b:40:fc:31:a7:15: d0:da:6e:e7:65:07:e8:d1:6d:c8:95:57:a8:bf:0f: 9a:89:cb:6f:5b:31:41:1e:09:ae:4c:7a:ec:4a:40: a7:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C3:8C:50:02:05:4E:39:1B:01:07:95:98:5F:42:14:E6:9A:F4:FA X509v3 Authority Key Identifier: keyid:B2:17:28:4E:A3:D5:38:44:B2:AF:52:70:AB:BA:A3:10:5B:8B:3F:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:5d:4e:27:40:3b:8e:95:ab:ba:b3:05:2e:bc:05:51:bf:8f: a6:d2:55:fd:bc:9f:4a:fe:ad:fb:f0:18:30:a3:de:e8:b1:b4: 3a:8d:e1:4e:ac:ce:9b:81:de:a2:9d:99:ea:01:90:5b:b4:7d: 42:2a:5a:f3:18:f2:d5:74:49:ea:36:5e:d1:40:90:03:62:5d: 57:7f:7d:c7:0f:a1:da:a9:58:ed:00:9d:b7:f7:53:ec:b6:10: 4f:84:94:c6:ea:65:50:0f:65:92:0c:10:ed:70:d2:9f:00:9f: 68:6a:d3:5b:dc:dc:92:d7:92:9e:f8:ed:8d:14:9b:12:7d:a0: c1:b7:32:3c:1e:42:5b:87:30:75:ba:09:fa:f3:6b:c5:67:81: 6a:52:71:0e:4f:ae:2f:86:92:83:a9:0e:e1:68:8b:56:28:6c: dc:3d:a3:b4:70:15:49:70:43:da:9f:3f:d5:4e:01:2c:9d:57: 5d:7a:76:c8:1c:cf:53:bd:8a:b0:68:31:76:5d:4d:c2:08:d4: 13:b7:76:e7:4f:33:4a:91:20:09:a1:f5:77:81:5f:44:23:41: e0:e8:73:44:66:26:d3:60:8b:a5:2a:f4:80:5f:39:1c:e5:86: 18:28:18:6f:b0:43:91:15:49:71:73:07:23:d8:4b:1b:e4:35: 3c:56:0f:e7 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUS8u+ECofIJr40RLlFI44CHRDSVwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIxNzI4NEVBM0Q1Mzg0NEIyQUY1MjcwQUJCQUEzMTA1 QjhCM0Y0NTAeFw0yNTEwMTkyMzIyMTlaFw0yNTEwMjEwMjU1MTlaMDMxMTAvBgNV BAMTKEQ4QzM4QzUwMDIwNTRFMzkxQjAxMDc5NTk4NUY0MjE0RTY5QUY0RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaVYc4Yaa4UO2Q0V2gI1X0zZH5 3GD1JLfU+ulCz+C+FQQDqC6lp1xIUeSUdwPf1fHIIpflIxKvJFSi2P9d5dD5EqrW vEeWHxP4webqZZFNCfsyFRvAMRCcDDgECoEwFKPYaWY/qlZ9BIrmKpjbJkkcivCA XDBlB/WIEgOuAlhAZ5ZskmqforhEAhN/6TjuEoMD9DweEoJXhhVFTIBxP5Q0+u/j nl8CJGjqOrVEmCBpIMh5iSUIKkdxL+cj02jFEyqc5LI6M084ZBNtfO9+Qu6uGB6S yDo/nsUJMWtA/DGnFdDabudlB+jRbciVV6i/D5qJy29bMUEeCa5MeuxKQKdzAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQU2MOMUAIFTjkbAQeVmF9CFOaa9PowHwYDVR0j BBgwFoAUshcoTqPVOESyr1Jwq7qjEFuLP0UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzUvQjIxNzI4NEVBM0Q1Mzg0NEIyQUY1MjcwQUJCQUEzMTA1QjhCM0Y0NS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0IyMTcyODRFQTNENTM4 NDRCMkFGNTI3MEFCQkFBMzEwNUI4QjNGNDUuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2NhZTNm LzUvQjIxNzI4NEVBM0Q1Mzg0NEIyQUY1MjcwQUJCQUEzMTA1QjhCM0Y0NS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAFZdTidAO46Vq7qzBS68BVG/j6bSVf28n0r+rfvwGDCj3uixtDqN4U6s zpuB3qKdmeoBkFu0fUIqWvMY8tV0Seo2XtFAkANiXVd/fccPodqpWO0Anbf3U+y2 EE+ElMbqZVAPZZIMEO1w0p8An2hq01vc3JLXkp747Y0UmxJ9oMG3MjweQluHMHW6 Cfrza8VngWpScQ5Pri+GkoOpDuFoi1YobNw9o7RwFUlwQ9qfP9VOASydV116dsgc z1O9irBoMXZdTcII1BO3dudPM0qRIAmh9XeBX0QjQeDoc0RmJtNgi6Uq9IBfORzl hhgoGG+wQ5EVSXFzByPYSxvkNTxWD+c= -----END CERTIFICATE-----Generated at Mon Oct 20 13:45:38 2025 by rpki-client