$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft File: 553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft (raw, json) Hash identifier: SrYEMxvtG5uWBEROVNoNC5Yjsf5NKnYFn6Jo5xFy4gQ= Subject key identifier: CF:5B:8D:0F:01:B8:00:12:BA:B3:6B:DA:BB:4F:0B:EE:6F:2F:D0:3E Authority key identifier: 55:3D:76:11:EA:6B:CE:5E:C7:96:69:E4:B1:F1:47:F5:9C:2A:0E:EE Certificate issuer: /CN=553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE Certificate serial: 7561AE19060070A9C56CDC5F773A8775B26F1B6B Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft Manifest number: 43 Signing time: Sat 23 Aug 2025 12:04:46 +0000 Manifest this update: Sat 23 Aug 2025 11:59:46 +0000 Manifest next update: Sun 24 Aug 2025 12:43:46 +0000 Files and hashes: 1: 553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.crl (hash: 2kCzwjxPo5evzEqUMO/n5t2One2jcoMWnyi9VTvFFcI=) 2: 326130613a363034303a646230303a3a2f34302d3438203d3e20323131313531.roa (hash: +fw3SQMO92ygFCahRkoicBXvG1K7ggV1DgUpkn+lL98=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.crl rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 12:43:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:61:ae:19:06:00:70:a9:c5:6c:dc:5f:77:3a:87:75:b2:6f:1b:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE Validity Not Before: Aug 23 11:59:46 2025 GMT Not After : Aug 24 12:43:46 2025 GMT Subject: CN=CF5B8D0F01B80012BAB36BDABB4F0BEE6F2FD03E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4a:d8:75:d5:0c:e0:bd:6b:a4:52:f5:9f:4c: 6d:96:ee:2d:d8:79:03:14:fd:57:a9:08:bd:0e:cd: 9a:28:d8:e0:b6:cf:6f:76:55:e1:a2:20:d3:1f:e2: 45:d8:a2:51:1a:d2:2d:b6:77:58:03:0e:13:2a:a9: c1:97:01:7d:62:1a:00:cc:44:0e:87:a6:e7:c1:23: 16:36:97:ec:3f:79:70:6d:28:5d:bc:b6:7d:a5:58: 41:57:e5:29:77:02:cd:81:85:3b:0f:3e:14:99:93: ba:22:89:e3:4f:df:26:ab:87:90:c6:14:72:3c:3b: ab:d4:ec:09:b2:03:f6:b2:82:30:ef:48:02:7b:cb: 68:78:83:5b:8c:6f:35:72:15:8a:67:b9:c1:25:39: 21:91:d9:3d:98:2e:14:a5:f2:c4:de:f7:0b:73:04: ac:2e:d8:ab:e9:37:ca:eb:db:e5:88:fe:78:2d:bf: dd:e8:39:9c:1d:1e:3c:d9:51:4d:1e:bd:cc:01:a2: 31:bb:7b:08:b3:ce:9f:de:21:97:30:4a:d4:a7:6f: cc:13:8e:ef:3e:e0:d3:87:f3:07:3c:32:fe:0e:e3: 58:d4:c5:11:b3:2a:12:1a:fb:cb:f4:77:0b:6c:a7: c6:5b:9a:fa:a1:3b:6b:1f:c7:5c:14:d7:79:32:19: 35:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:5B:8D:0F:01:B8:00:12:BA:B3:6B:DA:BB:4F:0B:EE:6F:2F:D0:3E X509v3 Authority Key Identifier: keyid:55:3D:76:11:EA:6B:CE:5E:C7:96:69:E4:B1:F1:47:F5:9C:2A:0E:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:b7:dd:b9:89:d7:b4:80:da:ae:41:9f:7b:25:a7:7e:83:4e: b3:69:60:ed:60:2f:1b:9d:56:69:69:6f:71:11:39:fb:40:66: fa:2b:f6:83:99:60:6e:b0:0e:ad:37:3b:c3:dd:57:5b:29:74: b9:60:bf:fa:ec:c8:28:73:a2:da:26:f9:08:e4:b4:3f:7f:52: 85:e8:0d:d5:75:d1:dd:bf:de:be:5f:84:10:53:06:8c:ef:a2: cc:99:18:d3:1c:48:d8:41:6a:37:87:a4:d2:e0:29:8d:bf:79: 28:51:e9:12:e2:5a:bc:e4:73:8d:94:8d:d7:09:63:f2:00:c0: f8:d8:ef:65:52:69:0b:6f:6b:e5:d1:d6:52:b2:4d:7e:39:91: cd:cd:0a:12:a1:e2:35:6a:51:61:06:a0:f6:53:fd:5f:0f:43: 47:fe:51:09:66:99:3e:e8:ce:ed:da:ad:c0:b6:ad:38:70:d4: 0e:ae:88:d2:2e:d0:75:ec:56:10:70:43:c4:78:d9:2b:b6:56: ad:ea:29:1e:bf:0c:88:2a:89:4f:8a:72:74:38:bd:14:4f:35: ef:e9:50:4d:57:05:eb:68:29:70:8f:1f:08:88:3d:47:7c:2f: b5:b0:37:b3:a2:2b:3e:94:d0:f1:d7:4f:0d:82:67:9d:3f:2e: c3:84:df:4a -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUdWGuGQYAcKnFbNxfdzqHdbJvG2swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUzRDc2MTFFQTZCQ0U1RUM3OTY2OUU0QjFGMTQ3RjU5 QzJBMEVFRTAeFw0yNTA4MjMxMTU5NDZaFw0yNTA4MjQxMjQzNDZaMDMxMTAvBgNV BAMTKENGNUI4RDBGMDFCODAwMTJCQUIzNkJEQUJCNEYwQkVFNkYyRkQwM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpSth11QzgvWukUvWfTG2W7i3Y eQMU/VepCL0OzZoo2OC2z292VeGiINMf4kXYolEa0i22d1gDDhMqqcGXAX1iGgDM RA6HpufBIxY2l+w/eXBtKF28tn2lWEFX5Sl3As2BhTsPPhSZk7oiieNP3yarh5DG FHI8O6vU7AmyA/aygjDvSAJ7y2h4g1uMbzVyFYpnucElOSGR2T2YLhSl8sTe9wtz BKwu2KvpN8rr2+WI/ngtv93oOZwdHjzZUU0evcwBojG7ewizzp/eIZcwStSnb8wT ju8+4NOH8wc8Mv4O41jUxRGzKhIa+8v0dwtsp8ZbmvqhO2sfx1wU13kyGTVFAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUz1uNDwG4ABK6s2vau08L7m8v0D4wHwYDVR0j BBgwFoAUVT12Eeprzl7HlmnksfFH9ZwqDu4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzEyODI3MWUtYzI2OS00OTU0LTg3ZGItZDE4NGRmMTdm ODVjLzQvNTUzRDc2MTFFQTZCQ0U1RUM3OTY2OUU0QjFGMTQ3RjU5QzJBMEVFRS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzU1M0Q3NjExRUE2QkNF NUVDNzk2NjlFNEIxRjE0N0Y1OUMyQTBFRUUuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvYzEyODI3MWUtYzI2OS00OTU0LTg3ZGItZDE4NGRmMTdmODVj LzQvNTUzRDc2MTFFQTZCQ0U1RUM3OTY2OUU0QjFGMTQ3RjU5QzJBMEVFRS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAEe33bmJ17SA2q5Bn3slp36DTrNpYO1gLxudVmlpb3EROftAZvor9oOZ YG6wDq03O8PdV1spdLlgv/rsyChzotom+QjktD9/UoXoDdV10d2/3r5fhBBTBozv osyZGNMcSNhBajeHpNLgKY2/eShR6RLiWrzkc42UjdcJY/IAwPjY72VSaQtva+XR 1lKyTX45kc3NChKh4jVqUWEGoPZT/V8PQ0f+UQlmmT7ozu3arcC2rThw1A6uiNIu 0HXsVhBwQ8R42Su2Vq3qKR6/DIgqiU+KcnQ4vRRPNe/pUE1XBetoKXCPHwiIPUd8 L7WwN7OiKz6U0PHXTw2CZ50/LsOE30o= -----END CERTIFICATE-----Generated at Sat Aug 23 21:44:29 2025 by rpki-client