$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft File: 547F71C62763A22A9156089F2F55B587337FAFCB.mft (raw, json) Hash identifier: N8dCzN/NTjO+hh6akwXBVADr8VJA8SdGutv3xz5b7Oo= Subject key identifier: B1:45:12:13:88:0A:78:52:85:B9:41:8A:E4:64:9E:25:91:B5:B0:5C Authority key identifier: 54:7F:71:C6:27:63:A2:2A:91:56:08:9F:2F:55:B5:87:33:7F:AF:CB Certificate issuer: /CN=547F71C62763A22A9156089F2F55B587337FAFCB Certificate serial: 7B7E6604AB35E0467CB9378CFC544F66B38CB89C Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft Manifest number: 19 Signing time: Tue 22 Jul 2025 19:59:55 +0000 Manifest this update: Tue 22 Jul 2025 19:54:55 +0000 Manifest next update: Wed 23 Jul 2025 22:17:55 +0000 Files and hashes: 1: 326130613a363034303a353430303a3a2f34302d3438203d3e20323030313739.roa (hash: YVenbTOqKe9MEXa6/fOG09XMak323Qg3KMUQzchdB9c=) 2: 547F71C62763A22A9156089F2F55B587337FAFCB.crl (hash: cRhPf3O7vLyWTH7t74T/5ivEsaQ4Du9m3eXWYb65a/Y=) 3: 326130353a646663313a393530303a3a2f34302d3438203d3e20323030313739.roa (hash: RxLo4AdqJDnPZQyih2dN7gCzOdUFOGixnoLv2pmTlM8=) 4: 326130613a363034303a343930303a3a2f34302d3438203d3e20323030313739.roa (hash: E7vQShgXOvBH1q/A8kYfwNTbOyQSM9xRkA+S+5IF33A=) 5: 326130613a363034303a353430303a3a2f34302d3438203d3e20323032323031.roa (hash: 6pzPl1CKzXGYp4EVxRXIn1wg4oABaAK4CCBHYDSxxpU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.crl rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 22:17:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:7e:66:04:ab:35:e0:46:7c:b9:37:8c:fc:54:4f:66:b3:8c:b8:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=547F71C62763A22A9156089F2F55B587337FAFCB Validity Not Before: Jul 22 19:54:55 2025 GMT Not After : Jul 23 22:17:55 2025 GMT Subject: CN=B1451213880A785285B9418AE4649E2591B5B05C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6a:16:34:ab:ac:95:ea:54:71:a5:2f:89:3c: 5d:a6:ba:3c:ac:29:88:ba:7c:ea:f6:84:4c:db:08: ae:e4:fa:62:77:84:62:48:c9:ff:ad:db:20:8e:15: 85:08:b1:d4:3b:3e:3f:58:c0:69:e7:8d:50:a3:7c: 0e:fa:cc:b9:c8:7e:a5:68:36:da:3a:79:76:ee:e5: be:25:3c:a2:da:bb:71:bd:e7:2d:e4:8d:5b:03:c4: 9b:64:ac:10:62:15:85:3a:98:a3:ec:22:d6:dc:14: 57:20:33:b9:a3:c5:46:a3:9d:47:ae:48:7c:56:a5: 2c:92:33:89:f3:cb:7d:08:5f:48:44:99:c8:0b:44: 92:58:e9:95:43:2f:b5:83:5c:6d:2f:ad:d9:cb:fc: d0:98:93:20:12:91:5b:57:48:78:a1:68:f1:a0:20: 73:1e:80:5d:5a:40:34:82:cc:4a:6e:e1:f4:d0:99: 00:f4:b3:d1:75:86:43:8a:d7:3f:65:bb:d0:42:ff: 53:d5:ca:ef:18:68:08:5b:5a:d8:1a:86:a0:23:59: ff:a1:c6:e7:fc:e2:fc:38:50:ff:0b:c6:7b:f1:09: c3:ee:b9:95:25:4c:8d:a2:4a:f5:db:5b:ea:40:44: fb:40:0d:64:bc:5a:ac:13:2a:3d:7a:06:db:31:8f: b7:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:45:12:13:88:0A:78:52:85:B9:41:8A:E4:64:9E:25:91:B5:B0:5C X509v3 Authority Key Identifier: keyid:54:7F:71:C6:27:63:A2:2A:91:56:08:9F:2F:55:B5:87:33:7F:AF:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:3d:54:d7:29:88:31:39:b1:cc:67:e8:62:20:97:7c:a6:f5: 94:4e:80:87:08:62:fa:a0:d0:d3:30:b4:d3:df:61:4b:dc:a4: 8d:ee:85:51:bd:c3:35:f4:7f:48:73:11:38:fb:a7:38:6d:9d: 67:34:c9:ed:38:c0:91:46:7b:f3:32:ca:c2:01:a1:49:35:cc: 33:3a:8d:7b:f2:42:04:4c:7e:f0:7f:a2:14:c9:69:97:90:b4: a2:6e:7f:85:59:7f:11:af:84:02:61:7b:fe:b2:e7:40:e9:5f: de:9f:1b:a0:c9:78:8c:59:d7:99:57:bf:dd:c1:44:99:4e:b0: 69:65:0d:89:e6:7d:c0:89:35:61:71:2d:e4:53:b4:90:9e:35: ec:1e:2c:39:a1:e2:ae:c5:78:ea:ed:ec:54:cd:a0:98:b7:c7: cc:31:bd:73:6a:0e:71:7c:c3:c8:4d:5f:21:68:01:df:43:ed: bd:b9:dd:c9:7f:f3:b0:15:79:70:90:28:33:1f:dc:be:4d:9d: 33:92:32:92:11:f2:f8:dd:e8:7f:96:d6:39:d9:66:b6:a9:38: 41:f8:27:1e:e8:60:fa:0a:74:4f:d5:4f:b1:7e:96:0c:ea:74: 15:51:dc:d0:d5:a7:64:e7:68:46:01:72:31:22:03:c6:cc:65: b7:c6:ab:b0 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUe35mBKs14EZ8uTeM/FRPZrOMuJwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQ3RjcxQzYyNzYzQTIyQTkxNTYwODlGMkY1NUI1ODcz MzdGQUZDQjAeFw0yNTA3MjIxOTU0NTVaFw0yNTA3MjMyMjE3NTVaMDMxMTAvBgNV BAMTKEIxNDUxMjEzODgwQTc4NTI4NUI5NDE4QUU0NjQ5RTI1OTFCNUIwNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7ahY0q6yV6lRxpS+JPF2mujys KYi6fOr2hEzbCK7k+mJ3hGJIyf+t2yCOFYUIsdQ7Pj9YwGnnjVCjfA76zLnIfqVo Nto6eXbu5b4lPKLau3G95y3kjVsDxJtkrBBiFYU6mKPsItbcFFcgM7mjxUajnUeu SHxWpSySM4nzy30IX0hEmcgLRJJY6ZVDL7WDXG0vrdnL/NCYkyASkVtXSHihaPGg IHMegF1aQDSCzEpu4fTQmQD0s9F1hkOK1z9lu9BC/1PVyu8YaAhbWtgahqAjWf+h xuf84vw4UP8LxnvxCcPuuZUlTI2iSvXbW+pARPtADWS8WqwTKj16Btsxj7e1AgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUsUUSE4gKeFKFuUGK5GSeJZG1sFwwHwYDVR0j BBgwFoAUVH9xxidjoiqRVgifL1W1hzN/r8swDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDE3OTFhNjQtYTM2YS00ZWI5LWE2ZmYtZTFjNDA3OGE3 Y2EzLzEvNTQ3RjcxQzYyNzYzQTIyQTkxNTYwODlGMkY1NUI1ODczMzdGQUZDQi5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzU0N0Y3MUM2Mjc2M0Ey MkE5MTU2MDg5RjJGNTVCNTg3MzM3RkFGQ0IuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMDE3OTFhNjQtYTM2YS00ZWI5LWE2ZmYtZTFjNDA3OGE3Y2Ez LzEvNTQ3RjcxQzYyNzYzQTIyQTkxNTYwODlGMkY1NUI1ODczMzdGQUZDQi5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAKw9VNcpiDE5scxn6GIgl3ym9ZROgIcIYvqg0NMwtNPfYUvcpI3uhVG9 wzX0f0hzETj7pzhtnWc0ye04wJFGe/MyysIBoUk1zDM6jXvyQgRMfvB/ohTJaZeQ tKJuf4VZfxGvhAJhe/6y50DpX96fG6DJeIxZ15lXv93BRJlOsGllDYnmfcCJNWFx LeRTtJCeNeweLDmh4q7FeOrt7FTNoJi3x8wxvXNqDnF8w8hNXyFoAd9D7b253cl/ 87AVeXCQKDMf3L5NnTOSMpIR8vjd6H+W1jnZZrapOEH4Jx7oYPoKdE/VT7F+lgzq dBVR3NDVp2TnaEYBcjEiA8bMZbfGq7A= -----END CERTIFICATE-----Generated at Wed Jul 23 11:56:39 2025 by rpki-client