$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft File: 547F71C62763A22A9156089F2F55B587337FAFCB.mft (raw, json) Hash identifier: pRsXIBnkOMtKkS/0WKf+YDZpc0txvuCvIZOM3P1ZCOc= Subject key identifier: 6F:F1:DA:E1:B6:28:EF:A3:4B:B4:B1:D9:8C:50:8F:0B:76:08:B4:2E Authority key identifier: 54:7F:71:C6:27:63:A2:2A:91:56:08:9F:2F:55:B5:87:33:7F:AF:CB Certificate issuer: /CN=547F71C62763A22A9156089F2F55B587337FAFCB Certificate serial: 25C3735C3AB7D9AFF924FF3833FB4D520CA2E40F Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft Manifest number: 5F Signing time: Sat 13 Sep 2025 11:46:13 +0000 Manifest this update: Sat 13 Sep 2025 11:41:13 +0000 Manifest next update: Sun 14 Sep 2025 12:27:13 +0000 Files and hashes: 1: 326130613a363034303a353430303a3a2f34302d3438203d3e20323030313739.roa (hash: YVenbTOqKe9MEXa6/fOG09XMak323Qg3KMUQzchdB9c=) 2: 547F71C62763A22A9156089F2F55B587337FAFCB.crl (hash: vWKj8Qgg4ksatFggRgmDTo/aNCbWP6xu5bVIhMzSheY=) 3: 326130353a646663313a393530303a3a2f34302d3438203d3e20323030313739.roa (hash: RxLo4AdqJDnPZQyih2dN7gCzOdUFOGixnoLv2pmTlM8=) 4: 326130613a363034303a343930303a3a2f34302d3438203d3e20323030313739.roa (hash: E7vQShgXOvBH1q/A8kYfwNTbOyQSM9xRkA+S+5IF33A=) 5: 326130613a363034303a353430303a3a2f34302d3438203d3e20323032323031.roa (hash: 6pzPl1CKzXGYp4EVxRXIn1wg4oABaAK4CCBHYDSxxpU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.crl rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Sep 2025 05:46:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:c3:73:5c:3a:b7:d9:af:f9:24:ff:38:33:fb:4d:52:0c:a2:e4:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=547F71C62763A22A9156089F2F55B587337FAFCB Validity Not Before: Sep 13 11:41:13 2025 GMT Not After : Sep 14 12:27:13 2025 GMT Subject: CN=6FF1DAE1B628EFA34BB4B1D98C508F0B7608B42E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4d:7f:c0:51:ef:4e:48:ba:d4:2e:d6:d7:68: 18:1b:cd:89:47:f4:68:18:a1:e4:8a:3c:d6:a0:bc: ba:dc:9b:02:9c:22:d4:b4:55:9d:b9:46:46:9d:97: be:4c:a6:74:78:cd:5e:9b:cf:c4:21:43:c7:97:a3: fd:77:34:40:f2:31:42:8f:a8:a4:87:42:c3:b6:06: 8e:3b:86:23:7d:40:13:3e:f8:92:21:3b:0a:b8:c0: b2:61:a7:25:ee:ad:2c:72:da:8e:60:53:23:cb:d0: b0:89:68:88:5a:0a:ca:81:30:61:ab:7b:b0:f3:ce: 8a:4a:88:6d:9d:aa:32:ad:e1:9f:91:8f:44:f7:61: 31:fe:3e:11:d4:81:ff:d6:c9:91:6a:0c:ec:22:de: 35:e9:66:1e:32:90:df:a0:5e:28:9d:86:e4:58:0d: be:88:f1:03:c4:0b:e0:1b:e5:31:26:ed:8f:7b:e2: aa:bd:52:cb:c6:f0:0a:8f:2b:a0:ef:36:d1:82:9c: 63:60:7b:28:e5:d4:da:97:c3:e0:c0:0e:fa:3c:55: 24:94:8a:6f:38:26:38:c8:b5:6c:b4:8b:5b:f8:f4: 2e:92:12:2b:73:74:22:cc:81:cf:66:14:05:cc:2b: 74:f5:f9:4a:4e:d2:d7:76:fa:0c:c1:46:ab:58:75: 1c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:F1:DA:E1:B6:28:EF:A3:4B:B4:B1:D9:8C:50:8F:0B:76:08:B4:2E X509v3 Authority Key Identifier: keyid:54:7F:71:C6:27:63:A2:2A:91:56:08:9F:2F:55:B5:87:33:7F:AF:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:38:d8:c7:86:54:52:95:e3:29:58:0a:af:ae:74:06:84:c7: 34:13:60:84:4c:87:77:1d:a7:31:e2:e4:bb:1c:29:77:69:a8: 03:79:ec:6c:b5:b2:1a:43:dc:96:80:d7:2a:63:eb:48:56:86: c7:e5:15:bc:d3:b9:59:71:00:e2:7b:92:32:e7:dd:81:bd:3c: 5f:8d:25:1e:6f:3d:bb:8c:4d:b4:84:83:1a:47:e3:51:ee:ee: c4:17:db:86:2f:92:4d:17:73:5e:15:0e:e1:93:4a:bb:09:75: 9b:46:08:d3:9e:5b:d8:8a:e5:88:d0:4b:ad:4a:d0:ac:03:a0: 9e:10:fb:bb:63:e7:31:0e:df:e5:87:41:62:c6:10:b0:c3:4f: 9d:f8:ac:6f:38:02:dc:06:fb:b4:a7:b0:cb:d3:5c:4c:44:c2: e0:c9:53:88:81:1b:3e:c0:cd:b1:47:bf:59:a8:57:c5:d8:e0: c3:83:0f:b9:a2:3b:12:84:82:25:70:68:b7:7b:d1:11:73:3d: a1:b3:a8:1d:42:eb:2b:e8:be:e3:51:d8:39:71:c8:bf:cf:28: 4e:f0:cb:96:b9:83:3e:7f:e5:00:45:d5:55:29:8a:56:42:82: fc:2b:97:51:2f:31:dc:87:c4:f5:10:40:b3:70:d4:16:ed:5f: e4:67:82:27 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUJcNzXDq32a/5JP84M/tNUgyi5A8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQ3RjcxQzYyNzYzQTIyQTkxNTYwODlGMkY1NUI1ODcz MzdGQUZDQjAeFw0yNTA5MTMxMTQxMTNaFw0yNTA5MTQxMjI3MTNaMDMxMTAvBgNV BAMTKDZGRjFEQUUxQjYyOEVGQTM0QkI0QjFEOThDNTA4RjBCNzYwOEI0MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXTX/AUe9OSLrULtbXaBgbzYlH 9GgYoeSKPNagvLrcmwKcItS0VZ25Rkadl75MpnR4zV6bz8QhQ8eXo/13NEDyMUKP qKSHQsO2Bo47hiN9QBM++JIhOwq4wLJhpyXurSxy2o5gUyPL0LCJaIhaCsqBMGGr e7DzzopKiG2dqjKt4Z+Rj0T3YTH+PhHUgf/WyZFqDOwi3jXpZh4ykN+gXiidhuRY Db6I8QPEC+Ab5TEm7Y974qq9UsvG8AqPK6DvNtGCnGNgeyjl1NqXw+DADvo8VSSU im84JjjItWy0i1v49C6SEitzdCLMgc9mFAXMK3T1+UpO0td2+gzBRqtYdRxlAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUb/Ha4bYo76NLtLHZjFCPC3YItC4wHwYDVR0j BBgwFoAUVH9xxidjoiqRVgifL1W1hzN/r8swDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDE3OTFhNjQtYTM2YS00ZWI5LWE2ZmYtZTFjNDA3OGE3 Y2EzLzEvNTQ3RjcxQzYyNzYzQTIyQTkxNTYwODlGMkY1NUI1ODczMzdGQUZDQi5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzU0N0Y3MUM2Mjc2M0Ey MkE5MTU2MDg5RjJGNTVCNTg3MzM3RkFGQ0IuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMDE3OTFhNjQtYTM2YS00ZWI5LWE2ZmYtZTFjNDA3OGE3Y2Ez LzEvNTQ3RjcxQzYyNzYzQTIyQTkxNTYwODlGMkY1NUI1ODczMzdGQUZDQi5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAKw42MeGVFKV4ylYCq+udAaExzQTYIRMh3cdpzHi5LscKXdpqAN57Gy1 shpD3JaA1ypj60hWhsflFbzTuVlxAOJ7kjLn3YG9PF+NJR5vPbuMTbSEgxpH41Hu 7sQX24Yvkk0Xc14VDuGTSrsJdZtGCNOeW9iK5YjQS61K0KwDoJ4Q+7tj5zEO3+WH QWLGELDDT534rG84AtwG+7SnsMvTXExEwuDJU4iBGz7AzbFHv1moV8XY4MODD7mi OxKEgiVwaLd70RFzPaGzqB1C6yvovuNR2DlxyL/PKE7wy5a5gz5/5QBF1VUpilZC gvwrl1EvMdyHxPUQQLNw1BbtX+Rngic= -----END CERTIFICATE-----Generated at Sat Sep 13 20:59:00 2025 by rpki-client