$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft File: 547F71C62763A22A9156089F2F55B587337FAFCB.mft (raw, json) Hash identifier: f0Kdd0sH6Gat4Ijar96VKLbEoG0gVF13euDrXaRMQuU= Subject key identifier: 65:18:24:65:40:B0:E7:E9:E2:79:E0:FD:31:74:84:64:E7:1D:E5:AD Authority key identifier: 54:7F:71:C6:27:63:A2:2A:91:56:08:9F:2F:55:B5:87:33:7F:AF:CB Certificate issuer: /CN=547F71C62763A22A9156089F2F55B587337FAFCB Certificate serial: 2067B96D771A8F77CF23E93DD311252621493AB3 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft Manifest number: 9D Signing time: Wed 29 Oct 2025 12:10:48 +0000 Manifest this update: Wed 29 Oct 2025 12:05:48 +0000 Manifest next update: Thu 30 Oct 2025 14:56:48 +0000 Files and hashes: 1: 547F71C62763A22A9156089F2F55B587337FAFCB.crl (hash: gsQAsB7QsSE6A4kl3X6i4oE5XjF01iO7iQmbLutwpl0=) 2: 326130613a363034303a353430303a3a2f34302d3438203d3e20323032323031.roa (hash: 6pzPl1CKzXGYp4EVxRXIn1wg4oABaAK4CCBHYDSxxpU=) 3: 326130353a646663313a393530303a3a2f34302d3438203d3e20323030313739.roa (hash: RxLo4AdqJDnPZQyih2dN7gCzOdUFOGixnoLv2pmTlM8=) 4: 326130613a363034303a343930303a3a2f34302d3438203d3e20323030313739.roa (hash: E7vQShgXOvBH1q/A8kYfwNTbOyQSM9xRkA+S+5IF33A=) 5: 326130613a363034303a353430303a3a2f34302d3438203d3e20323030313739.roa (hash: YVenbTOqKe9MEXa6/fOG09XMak323Qg3KMUQzchdB9c=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.crl rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 30 Oct 2025 08:45:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:67:b9:6d:77:1a:8f:77:cf:23:e9:3d:d3:11:25:26:21:49:3a:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=547F71C62763A22A9156089F2F55B587337FAFCB Validity Not Before: Oct 29 12:05:48 2025 GMT Not After : Oct 30 14:56:48 2025 GMT Subject: CN=6518246540B0E7E9E279E0FD31748464E71DE5AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:34:21:1d:a2:ad:83:ef:c1:8f:ad:ae:81:5f: 3b:7f:22:73:10:7d:9d:3b:51:b7:ae:ba:a6:14:d2: 7f:d1:4a:a8:73:b4:9a:89:c4:1a:e2:df:4b:48:b2: 6c:7b:9e:83:8f:5e:d2:93:80:f8:47:6f:a8:57:46: 78:94:2a:6d:ba:90:8a:67:c2:5a:f6:bd:dc:e1:26: 67:f3:00:64:e3:42:79:45:94:2c:8f:15:44:0f:c3: 33:66:b6:bc:7b:42:7d:b4:90:3b:d4:a0:02:10:38: 81:58:d7:0d:9c:f3:f9:d6:3e:76:29:41:0a:67:5e: 14:15:87:e8:d7:88:48:6d:11:3e:ab:fe:c7:69:42: 5d:0b:ef:2c:52:a1:8c:4c:30:08:0f:a5:57:d3:a1: 58:83:db:4a:bd:aa:22:76:73:2d:9f:3d:86:8f:72: 99:63:a0:0c:ac:ab:c7:c7:2d:9c:81:4a:c7:3e:79: 93:1c:8e:63:ef:3b:d5:85:52:16:99:b7:4e:9c:38: 49:a5:4b:81:46:07:60:d9:1d:7b:9c:26:6a:8d:94: 20:b3:15:49:c7:df:7e:79:82:7f:c0:fe:66:ff:ba: aa:39:f2:8c:19:5e:8e:e5:98:6c:52:27:5a:b5:0b: 0d:e8:a7:44:36:43:b4:01:24:bf:3c:1e:ac:08:0a: 1d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:18:24:65:40:B0:E7:E9:E2:79:E0:FD:31:74:84:64:E7:1D:E5:AD X509v3 Authority Key Identifier: keyid:54:7F:71:C6:27:63:A2:2A:91:56:08:9F:2F:55:B5:87:33:7F:AF:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:4d:f9:3b:a5:67:58:1a:6e:75:cf:60:96:a8:29:f9:ea:02: cc:03:0f:cb:b5:2e:ea:2d:f0:e6:ab:77:59:78:0d:a2:1c:74: 37:1c:96:03:c2:87:1d:7a:0d:c6:87:be:cb:78:61:01:77:9f: e3:e0:93:4b:d8:f3:78:82:21:ce:90:7f:e6:3e:8e:98:cf:a5: 8e:29:73:53:24:51:8c:86:7a:ee:4f:67:c9:40:63:64:71:d3: 80:16:e5:06:c7:0e:ff:73:d5:f9:dc:95:e9:fc:ee:49:09:f8: 7e:29:d8:84:a6:cc:40:5e:50:54:2d:4e:16:59:47:e4:f0:58: f7:e1:ef:4c:fa:0a:b7:8a:75:6e:a6:29:51:e0:12:cb:50:75: d1:fc:40:4a:e5:73:0a:4c:8f:17:ef:cb:d3:a9:40:a3:1d:93: 37:5f:ec:99:f5:27:d5:82:a6:09:4c:a8:f4:ab:79:f4:22:1c: 79:25:6a:00:4e:ee:0a:f8:f1:68:a9:c4:03:ba:3a:df:ea:7f: 5c:34:3d:bc:ae:dd:75:24:89:d3:be:aa:a1:02:b7:5f:02:ee: 8e:99:ac:b4:4d:bf:09:25:f7:ba:70:28:9a:17:34:a4:76:b6: 10:63:3f:f6:0a:b0:5d:99:5c:ad:4d:2f:b0:43:33:42:75:9d: 5a:c6:58:f7 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUIGe5bXcaj3fPI+k90xElJiFJOrMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQ3RjcxQzYyNzYzQTIyQTkxNTYwODlGMkY1NUI1ODcz MzdGQUZDQjAeFw0yNTEwMjkxMjA1NDhaFw0yNTEwMzAxNDU2NDhaMDMxMTAvBgNV BAMTKDY1MTgyNDY1NDBCMEU3RTlFMjc5RTBGRDMxNzQ4NDY0RTcxREU1QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiNCEdoq2D78GPra6BXzt/InMQ fZ07UbeuuqYU0n/RSqhztJqJxBri30tIsmx7noOPXtKTgPhHb6hXRniUKm26kIpn wlr2vdzhJmfzAGTjQnlFlCyPFUQPwzNmtrx7Qn20kDvUoAIQOIFY1w2c8/nWPnYp QQpnXhQVh+jXiEhtET6r/sdpQl0L7yxSoYxMMAgPpVfToViD20q9qiJ2cy2fPYaP cpljoAysq8fHLZyBSsc+eZMcjmPvO9WFUhaZt06cOEmlS4FGB2DZHXucJmqNlCCz FUnH3355gn/A/mb/uqo58owZXo7lmGxSJ1q1Cw3op0Q2Q7QBJL88HqwICh03AgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUZRgkZUCw5+nieeD9MXSEZOcd5a0wHwYDVR0j BBgwFoAUVH9xxidjoiqRVgifL1W1hzN/r8swDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDE3OTFhNjQtYTM2YS00ZWI5LWE2ZmYtZTFjNDA3OGE3 Y2EzLzEvNTQ3RjcxQzYyNzYzQTIyQTkxNTYwODlGMkY1NUI1ODczMzdGQUZDQi5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzU0N0Y3MUM2Mjc2M0Ey MkE5MTU2MDg5RjJGNTVCNTg3MzM3RkFGQ0IuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMDE3OTFhNjQtYTM2YS00ZWI5LWE2ZmYtZTFjNDA3OGE3Y2Ez LzEvNTQ3RjcxQzYyNzYzQTIyQTkxNTYwODlGMkY1NUI1ODczMzdGQUZDQi5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBADpN+TulZ1gabnXPYJaoKfnqAswDD8u1Luot8Oard1l4DaIcdDcclgPC hx16DcaHvst4YQF3n+Pgk0vY83iCIc6Qf+Y+jpjPpY4pc1MkUYyGeu5PZ8lAY2Rx 04AW5QbHDv9z1fnclen87kkJ+H4p2ISmzEBeUFQtThZZR+TwWPfh70z6CreKdW6m KVHgEstQddH8QErlcwpMjxfvy9OpQKMdkzdf7Jn1J9WCpglMqPSrefQiHHklagBO 7gr48WipxAO6Ot/qf1w0Pbyu3XUkidO+qqECt18C7o6ZrLRNvwkl97pwKJoXNKR2 thBjP/YKsF2ZXK1NL7BDM0J1nVrGWPc= -----END CERTIFICATE-----Generated at Wed Oct 29 20:03:10 2025 by rpki-client