$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft File: B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft (raw, json) Hash identifier: w9xi2VkkrsYvSb2FPxzmWYlXiqVwN/8ZR4pyd27eVy4= Subject key identifier: D0:97:B8:CD:DC:1A:A4:F1:D0:AA:08:22:8E:1F:DF:78:21:AA:9C:C3 Authority key identifier: B2:17:28:4E:A3:D5:38:44:B2:AF:52:70:AB:BA:A3:10:5B:8B:3F:45 Certificate issuer: /CN=B217284EA3D53844B2AF5270ABBAA3105B8B3F45 Certificate serial: 7C38F1F07621E07B249B689C1DC90098ECB80BDE Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft Manifest number: 49 Signing time: Sat 23 Aug 2025 11:42:53 +0000 Manifest this update: Sat 23 Aug 2025 11:37:53 +0000 Manifest next update: Sun 24 Aug 2025 15:19:53 +0000 Files and hashes: 1: 326130613a363034303a313330303a3a2f34302d3438203d3e203531303139.roa (hash: wn+vtltLdcEkhCOvzx/4fvtvh6EcQrGmjXhUFly5CfQ=) 2: B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl (hash: /NZUY78gpGBWb9rvzD6WDTXsCHr10alE40lTbDb3Q04=) 3: 326130613a363034303a396630303a3a2f34302d3438203d3e203531303139.roa (hash: 4Q4ROZYT81dIJHSkpaekI4Sbj95kc4xrlA3BgHVle7s=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 13:34:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:38:f1:f0:76:21:e0:7b:24:9b:68:9c:1d:c9:00:98:ec:b8:0b:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B217284EA3D53844B2AF5270ABBAA3105B8B3F45 Validity Not Before: Aug 23 11:37:53 2025 GMT Not After : Aug 24 15:19:53 2025 GMT Subject: CN=D097B8CDDC1AA4F1D0AA08228E1FDF7821AA9CC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e3:e6:11:21:19:9e:92:32:31:4d:00:60:1b: db:a2:55:75:33:83:d1:ee:31:f9:f9:e8:aa:87:c4: 79:57:04:4b:08:91:db:89:96:35:8b:ea:cc:8d:e0: 89:c4:7e:ce:29:41:8e:07:fc:e3:4f:0d:56:77:c0: 47:37:cd:22:c7:c1:65:40:7b:9f:52:21:a6:c6:1d: 39:89:b0:8a:e6:48:b6:a9:3c:d8:2a:d7:c6:a0:28: 5e:01:f2:32:c2:dc:ec:db:c5:9d:ba:1d:12:56:49: 62:1e:22:d6:a9:f8:ea:0d:75:f4:3d:21:63:7c:eb: 48:6b:eb:1e:42:f0:c9:92:51:f8:fc:a6:4a:9c:24: d8:3a:9a:6d:56:b6:16:a4:42:d6:4e:a5:f2:52:89: bf:06:07:05:a4:ba:8a:bc:4c:be:57:0f:11:04:1f: d1:c4:13:26:9e:6b:d8:55:6b:3f:b6:1b:7f:42:e4: 57:68:2a:b4:f9:23:1c:a6:3e:c3:60:da:9a:2d:98: 78:c2:33:4b:7e:48:7c:0d:be:44:61:cc:ea:30:af: 48:87:89:ec:5f:55:2d:a4:0d:78:91:ff:9b:8b:3d: 06:6d:ae:a5:37:a9:92:57:15:51:1c:70:ca:5c:90: 93:cd:cf:53:1d:3f:3c:70:d9:01:fc:48:4f:35:95: f0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:97:B8:CD:DC:1A:A4:F1:D0:AA:08:22:8E:1F:DF:78:21:AA:9C:C3 X509v3 Authority Key Identifier: keyid:B2:17:28:4E:A3:D5:38:44:B2:AF:52:70:AB:BA:A3:10:5B:8B:3F:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:9a:4a:52:8f:fb:0c:53:29:55:4b:3d:3d:e5:63:62:32:e4: 24:b6:71:a9:b3:ab:72:59:05:cb:5d:a8:c1:06:0b:6d:e6:1e: 04:bf:c7:51:69:3e:c0:47:56:65:f4:aa:07:6d:60:f6:0f:44: fa:e3:fc:76:de:d7:17:49:e8:26:a8:af:b9:d0:b8:7c:cb:35: e5:66:8b:bf:62:22:d7:0c:11:d8:6f:08:f9:63:02:32:da:e1: 1c:96:9a:70:57:d9:0a:c0:64:e2:f8:d9:9a:cf:62:04:98:7f: e5:9a:13:bd:e2:da:23:4d:22:94:57:69:34:39:15:b6:dd:c5: 54:34:e0:38:ef:e3:f2:26:fb:de:24:73:f5:ec:a1:59:38:cd: a6:0c:66:30:97:db:bf:f4:cd:1b:35:29:35:8f:25:b0:2b:e9: 20:96:f8:da:f9:27:9f:66:8d:9b:ba:a8:3b:09:9a:4b:ce:ca: 24:e9:50:47:12:cc:95:da:cf:f9:cc:9b:c5:22:35:9a:ce:7f: 43:0e:67:32:3e:4b:29:7b:f3:4b:88:6d:ea:b9:e8:0f:f9:41: 8d:3f:82:f0:1b:f6:17:a2:49:4e:ce:bf:a6:c3:10:9f:8e:4a: d7:98:a5:02:09:2a:95:7a:72:ac:12:89:f8:8d:95:b2:bf:86: 4d:bd:60:16 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUfDjx8HYh4Hskm2icHckAmOy4C94wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIxNzI4NEVBM0Q1Mzg0NEIyQUY1MjcwQUJCQUEzMTA1 QjhCM0Y0NTAeFw0yNTA4MjMxMTM3NTNaFw0yNTA4MjQxNTE5NTNaMDMxMTAvBgNV BAMTKEQwOTdCOENEREMxQUE0RjFEMEFBMDgyMjhFMUZERjc4MjFBQTlDQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu4+YRIRmekjIxTQBgG9uiVXUz g9HuMfn56KqHxHlXBEsIkduJljWL6syN4InEfs4pQY4H/ONPDVZ3wEc3zSLHwWVA e59SIabGHTmJsIrmSLapPNgq18agKF4B8jLC3OzbxZ26HRJWSWIeItap+OoNdfQ9 IWN860hr6x5C8MmSUfj8pkqcJNg6mm1WthakQtZOpfJSib8GBwWkuoq8TL5XDxEE H9HEEyaea9hVaz+2G39C5FdoKrT5IxymPsNg2potmHjCM0t+SHwNvkRhzOowr0iH iexfVS2kDXiR/5uLPQZtrqU3qZJXFVEccMpckJPNz1MdPzxw2QH8SE81lfDvAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQU0Je4zdwapPHQqggijh/feCGqnMMwHwYDVR0j BBgwFoAUshcoTqPVOESyr1Jwq7qjEFuLP0UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzUvQjIxNzI4NEVBM0Q1Mzg0NEIyQUY1MjcwQUJCQUEzMTA1QjhCM0Y0NS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0IyMTcyODRFQTNENTM4 NDRCMkFGNTI3MEFCQkFBMzEwNUI4QjNGNDUuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2NhZTNm LzUvQjIxNzI4NEVBM0Q1Mzg0NEIyQUY1MjcwQUJCQUEzMTA1QjhCM0Y0NS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAIaaSlKP+wxTKVVLPT3lY2Iy5CS2camzq3JZBctdqMEGC23mHgS/x1Fp PsBHVmX0qgdtYPYPRPrj/Hbe1xdJ6Caor7nQuHzLNeVmi79iItcMEdhvCPljAjLa 4RyWmnBX2QrAZOL42ZrPYgSYf+WaE73i2iNNIpRXaTQ5FbbdxVQ04Djv4/Im+94k c/XsoVk4zaYMZjCX27/0zRs1KTWPJbAr6SCW+Nr5J59mjZu6qDsJmkvOyiTpUEcS zJXaz/nMm8UiNZrOf0MOZzI+Syl780uIbeq56A/5QY0/gvAb9heiSU7Ov6bDEJ+O SteYpQIJKpV6cqwSifiNlbK/hk29YBY= -----END CERTIFICATE-----Generated at Sat Aug 23 21:51:29 2025 by rpki-client