$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft File: 475A3BFA09614E07BE0567B1FB15110F45F894EB.mft (raw, json) Hash identifier: 2wd/MkWZN4WxiVObxkheoWjPVAUF4Z0mNSzQOybYjOY= Subject key identifier: 9A:2F:1D:79:F6:C4:29:91:F2:40:0F:6B:19:3A:B1:8C:E7:10:B1:D5 Authority key identifier: 47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB Certificate issuer: /CN=475A3BFA09614E07BE0567B1FB15110F45F894EB Certificate serial: 272991B820BE61B790B8C32F852454ED7BB44618 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft Manifest number: 017E Signing time: Mon 13 Apr 2026 07:29:08 +0000 Manifest this update: Mon 13 Apr 2026 07:24:08 +0000 Manifest next update: Tue 14 Apr 2026 08:14:08 +0000 Files and hashes: 1: 326130353a646663313a6362303a3a2f34382d3438203d3e20323136313037.roa (hash: HPSZ8Ao1IB3lH1ZuFzdnyKg2mh86+6wWsN1VfrbgtjA=) 2: 326130353a646663313a6330303a3a2f34302d3430203d3e20323136313037.roa (hash: 9b+nfoajFujLj061BrSCfi4FwI9kDrVZ+olcCoR5UBc=) 3: 326130353a646663313a6364343a3a2f34382d3438203d3e20323136313037.roa (hash: 2ES+J57q5FxV7Pycn6PA/TfkwXqGSDCB0siCI9Kqtao=) 4: 326130353a646663313a6330303a3a2f34382d3438203d3e20323136313037.roa (hash: 5amhvkzdMSmYntVfhhxA2srjGLuE63R2mmWtiqhM60M=) 5: 475A3BFA09614E07BE0567B1FB15110F45F894EB.crl (hash: XJDAXnPdyl/no7+W6Y1USjN7J6wtnPrec2yp+Lr8FDo=) 6: 326130353a646663313a6364303a3a2f34382d3438203d3e20323136313037.roa (hash: cn9YZ8FYaC+Hri9dzrV5iV712LMhxO/a5ltgIPBkcMo=) 7: 326130353a646663313a393330303a3a2f34302d3430203d3e20323136313037.roa (hash: O9HdFgkDLSDurxDqFkNzKefyLVSHYP5RZwYF9ccBE70=) 8: 326130353a646663313a6365633a3a2f34382d3438203d3e20323136313037.roa (hash: MFLgGeiRY5J6V0wqCJ/2rdwCHyoz1yTGoDCT9u80ZPw=) 9: 326130353a646663313a393330303a3a2f34342d3434203d3e20323136313037.roa (hash: b1jW0QtrvfNFuku7DA8T3pdCcJ7XdV69DcuFmLfePdg=) 10: 326130353a646663313a6362323a3a2f34382d3438203d3e20323136313037.roa (hash: mOPodk1SWfoVUqjkHG3wmAu+HNRka8LJZu4TU08ixz0=) 11: 326130353a646663313a393330303a3a2f34342d3434203d3e203331383938.roa (hash: /0mHwxj5X080MYjliBUs92u8/GLNUuIoeMzbhIBfk0Y=) 12: 326130353a646663313a6366663a3a2f34382d3438203d3e20323136313037.roa (hash: aBc+3q0F9+NwnnOKXQsziJcSflKCPcTqnJDYXx6ReGE=) 13: 326130353a646663313a6364333a3a2f34382d3438203d3e20323136313037.roa (hash: ODgMOPEtFM31kytaPhS/kNBKt+7tRnGYNverVN9W6GI=) 14: 326130353a646663313a6362313a3a2f34382d3438203d3e20323136313037.roa (hash: WZ3tMlR+p69xUFvcw4oOqLvG3hqJQ0raLNlYbt2cGEc=) 15: 326130353a646663313a6335333a3a2f34382d3438203d3e20323136313037.roa (hash: XlFjiMGdniXiBH8ber/zerQJr2bnSRJJJo5igygAomc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 14 Apr 2026 01:11:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:29:91:b8:20:be:61:b7:90:b8:c3:2f:85:24:54:ed:7b:b4:46:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=475A3BFA09614E07BE0567B1FB15110F45F894EB Validity Not Before: Apr 13 07:24:08 2026 GMT Not After : Apr 14 08:14:08 2026 GMT Subject: CN=9A2F1D79F6C42991F2400F6B193AB18CE710B1D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4e:5a:fd:2d:3a:c8:d9:71:16:12:23:98:52: 7a:88:cd:50:84:5f:db:1c:0f:e1:3e:ed:68:9b:8f: a1:19:d2:4f:c2:47:0c:da:f3:43:f3:82:64:10:9a: c9:64:83:2a:d0:48:9c:f9:0a:2d:a2:08:03:e1:0d: c0:5d:10:1c:35:8a:a3:4d:6a:28:92:75:72:26:03: 1b:28:4c:f6:96:5b:56:53:92:65:40:d1:08:68:89: 5e:04:2c:a6:29:12:19:3e:1d:59:f2:40:42:1d:57: 94:3d:48:bb:b5:35:2f:e5:30:72:99:91:af:6e:27: 67:1c:a7:db:b4:a9:38:2d:9b:07:63:e5:ce:2b:8e: c7:f8:d6:be:df:3c:e9:54:34:0d:8e:01:3c:5d:3d: 13:8d:96:fe:e1:1a:14:5a:67:d4:0c:18:6f:cf:9f: 78:a4:9e:8a:22:ab:3d:38:1a:47:9d:2a:2d:51:10: 9a:3b:e6:fb:7d:a4:c2:91:09:95:0c:c2:60:dc:b9: a1:aa:86:ec:a7:2c:5d:01:1d:1f:87:a5:68:35:f0: 91:69:c6:71:12:37:63:34:a7:2b:db:69:cd:51:f1: cf:47:a5:3c:3b:9d:27:98:52:f6:d0:1e:78:e2:f7: 7d:73:62:94:99:ff:9f:38:c8:12:25:d4:c3:14:28: b9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:2F:1D:79:F6:C4:29:91:F2:40:0F:6B:19:3A:B1:8C:E7:10:B1:D5 X509v3 Authority Key Identifier: keyid:47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:85:4a:e4:77:f3:f8:03:0e:7e:98:ee:12:de:99:c5:eb:5a: cc:cb:f3:89:33:f4:fd:a8:5d:e5:8f:e1:7a:4e:74:38:df:2a: d7:78:42:92:62:8c:ed:a8:37:b3:08:12:60:3f:21:06:15:1a: 91:20:66:b5:b3:3f:e2:dc:27:cf:ee:76:d0:e1:7b:46:35:89: d7:eb:b4:fb:e6:39:50:07:3a:9d:2e:ae:ac:0e:e7:87:4f:28: 21:23:5b:a9:d9:f6:60:3f:8d:9c:6a:ca:87:e5:24:9c:7d:bf: 2d:73:e7:49:77:2f:7c:d9:d8:92:27:bd:e4:ca:7f:0f:ea:8b: 57:8e:75:9a:c2:ce:b8:96:64:fa:6a:1e:6c:b7:56:a5:9f:d9: cd:be:01:07:90:88:08:e9:ae:ab:14:f6:4b:fb:01:34:e8:1f: 8b:63:3f:c4:ea:c8:70:ae:7e:40:47:63:4f:d0:85:ac:8b:97: a8:97:0d:43:1f:61:af:2e:1a:85:ad:ff:d5:d8:ba:dc:d7:f0: c2:91:ca:88:5e:66:6c:a3:8f:2e:4e:57:a6:42:4a:cd:b3:e4: dd:15:ad:eb:d6:f7:77:42:9a:8d:93:c2:56:fa:25:02:e7:21: 46:47:04:6b:56:46:48:86:a4:44:f7:47:2e:a0:4c:61:7a:cf: d7:03:e8:a1 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUJymRuCC+YbeQuMMvhSRU7Xu0RhgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0 NUY4OTRFQjAeFw0yNjA0MTMwNzI0MDhaFw0yNjA0MTQwODE0MDhaMDMxMTAvBgNV BAMTKDlBMkYxRDc5RjZDNDI5OTFGMjQwMEY2QjE5M0FCMThDRTcxMEIxRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgTlr9LTrI2XEWEiOYUnqIzVCE X9scD+E+7Wibj6EZ0k/CRwza80PzgmQQmslkgyrQSJz5Ci2iCAPhDcBdEBw1iqNN aiiSdXImAxsoTPaWW1ZTkmVA0QhoiV4ELKYpEhk+HVnyQEIdV5Q9SLu1NS/lMHKZ ka9uJ2ccp9u0qTgtmwdj5c4rjsf41r7fPOlUNA2OATxdPRONlv7hGhRaZ9QMGG/P n3iknooiqz04GkedKi1REJo75vt9pMKRCZUMwmDcuaGqhuynLF0BHR+HpWg18JFp xnESN2M0pyvbac1R8c9HpTw7nSeYUvbQHnji931zYpSZ/584yBIl1MMUKLktAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUmi8defbEKZHyQA9rGTqxjOcQsdUwHwYDVR0j BBgwFoAUR1o7+glhTge+BWex+xURD0X4lOswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5 MjQzLzIvNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0NUY4OTRFQi5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzQ3NUEzQkZBMDk2MTRF MDdCRTA1NjdCMUZCMTUxMTBGNDVGODk0RUIuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5MjQz LzIvNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0NUY4OTRFQi5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBANeFSuR38/gDDn6Y7hLemcXrWszL84kz9P2oXeWP4XpOdDjfKtd4QpJi jO2oN7MIEmA/IQYVGpEgZrWzP+LcJ8/udtDhe0Y1idfrtPvmOVAHOp0urqwO54dP KCEjW6nZ9mA/jZxqyoflJJx9vy1z50l3L3zZ2JInveTKfw/qi1eOdZrCzriWZPpq Hmy3VqWf2c2+AQeQiAjprqsU9kv7ATToH4tjP8TqyHCufkBHY0/QhayLl6iXDUMf Ya8uGoWt/9XYutzX8MKRyoheZmyjjy5OV6ZCSs2z5N0VrevW93dCmo2Twlb6JQLn IUZHBGtWRkiGpET3Ry6gTGF6z9cD6KE= -----END CERTIFICATE-----Generated at Mon Apr 13 15:57:08 2026 by rpki-client