$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft File: 475A3BFA09614E07BE0567B1FB15110F45F894EB.mft (raw, json) Hash identifier: xhaw07iZK5IaNxczie1PaO0kFvp+bdTWDgZelcQZTCo= Subject key identifier: A5:09:4A:91:B7:4B:3F:92:4F:AD:7F:55:6F:AF:05:6A:1D:AC:9B:F3 Authority key identifier: 47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB Certificate issuer: /CN=475A3BFA09614E07BE0567B1FB15110F45F894EB Certificate serial: 4215391B6476169128585A9A68DDE66AD63B3619 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft Manifest number: 40 Signing time: Wed 20 Aug 2025 15:36:50 +0000 Manifest this update: Wed 20 Aug 2025 15:31:50 +0000 Manifest next update: Thu 21 Aug 2025 16:31:50 +0000 Files and hashes: 1: 326130353a646663313a6362323a3a2f34382d3438203d3e20323136313037.roa (hash: mOPodk1SWfoVUqjkHG3wmAu+HNRka8LJZu4TU08ixz0=) 2: 326130353a646663313a6362303a3a2f34382d3438203d3e20323136313037.roa (hash: HPSZ8Ao1IB3lH1ZuFzdnyKg2mh86+6wWsN1VfrbgtjA=) 3: 326130353a646663313a6366663a3a2f34382d3438203d3e20323136313037.roa (hash: aBc+3q0F9+NwnnOKXQsziJcSflKCPcTqnJDYXx6ReGE=) 4: 326130353a646663313a6335333a3a2f34382d3438203d3e20323136313037.roa (hash: XlFjiMGdniXiBH8ber/zerQJr2bnSRJJJo5igygAomc=) 5: 326130353a646663313a393330303a3a2f34302d3430203d3e20323136313037.roa (hash: O9HdFgkDLSDurxDqFkNzKefyLVSHYP5RZwYF9ccBE70=) 6: 326130353a646663313a6364303a3a2f34382d3438203d3e20323136313037.roa (hash: cn9YZ8FYaC+Hri9dzrV5iV712LMhxO/a5ltgIPBkcMo=) 7: 326130353a646663313a6330303a3a2f34382d3438203d3e20323136313037.roa (hash: 5amhvkzdMSmYntVfhhxA2srjGLuE63R2mmWtiqhM60M=) 8: 326130353a646663313a6330303a3a2f34302d3430203d3e20323136313037.roa (hash: 9b+nfoajFujLj061BrSCfi4FwI9kDrVZ+olcCoR5UBc=) 9: 326130353a646663313a6364333a3a2f34382d3438203d3e20323136313037.roa (hash: ODgMOPEtFM31kytaPhS/kNBKt+7tRnGYNverVN9W6GI=) 10: 326130353a646663313a6364313a3a2f34382d3438203d3e20323136313037.roa (hash: wOFC9QI8GelsG8geVBZYw7NXSrIqNI+SPY2auPGgaCQ=) 11: 326130353a646663313a6364343a3a2f34382d3438203d3e20323136313037.roa (hash: 2ES+J57q5FxV7Pycn6PA/TfkwXqGSDCB0siCI9Kqtao=) 12: 475A3BFA09614E07BE0567B1FB15110F45F894EB.crl (hash: UTT2ltbCLGhX5ZoXd2VpI0+/xVByaLwIi/KLmTeQAuU=) 13: 326130353a646663313a6365633a3a2f34382d3438203d3e20323136313037.roa (hash: MFLgGeiRY5J6V0wqCJ/2rdwCHyoz1yTGoDCT9u80ZPw=) 14: 326130353a646663313a6362313a3a2f34382d3438203d3e20323136313037.roa (hash: WZ3tMlR+p69xUFvcw4oOqLvG3hqJQ0raLNlYbt2cGEc=) 15: 326130353a646663313a6364323a3a2f34382d3438203d3e20323136313037.roa (hash: uTe3RpuC5xHTpbzhstyrLed5Fn2IO9mhtG4WFqEyr0c=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 21 Aug 2025 14:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:15:39:1b:64:76:16:91:28:58:5a:9a:68:dd:e6:6a:d6:3b:36:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=475A3BFA09614E07BE0567B1FB15110F45F894EB Validity Not Before: Aug 20 15:31:50 2025 GMT Not After : Aug 21 16:31:50 2025 GMT Subject: CN=A5094A91B74B3F924FAD7F556FAF056A1DAC9BF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e7:3e:ac:4d:d3:9e:93:d7:de:cf:91:a4:45: ba:ed:77:f9:77:75:5d:c6:87:d2:bb:a1:1a:22:3b: e3:fd:80:b8:d1:6f:91:fb:2a:5e:56:ee:48:0d:f4: 67:dc:60:30:13:9f:1c:2f:ac:dc:98:4f:f9:93:a9: 5e:ad:10:e2:ee:be:54:a1:5b:fc:e6:8e:e1:44:2a: 4d:3f:c5:93:46:20:a5:a2:05:2e:31:4e:97:c5:c4: b1:bd:c7:be:a8:7b:87:ec:ee:19:2a:13:f4:7f:4e: 3c:d3:f3:7b:f9:f0:b4:95:23:eb:c2:74:52:e8:8e: 71:eb:39:bc:25:db:6c:d5:56:e3:9a:45:a9:52:1a: d8:74:79:c9:d9:5c:37:93:fb:63:fb:9a:2b:c6:16: 42:dc:9f:bf:ee:88:1b:71:c9:67:73:73:43:43:cb: f2:f1:fa:3a:68:81:ee:fe:d9:a0:ef:02:78:8e:a6: 82:a9:8c:d2:e0:06:21:65:6a:e4:3c:06:f9:f5:42: e4:17:98:07:48:55:4a:fc:a2:ee:79:56:a1:da:f5: e1:3c:66:00:35:48:2b:89:af:96:e6:33:7c:07:35: 2b:3a:d8:57:56:9c:ec:f9:66:56:1e:e9:99:cc:94: d4:52:0d:3f:41:0d:e2:2a:f5:47:f3:92:84:a5:7c: 65:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:09:4A:91:B7:4B:3F:92:4F:AD:7F:55:6F:AF:05:6A:1D:AC:9B:F3 X509v3 Authority Key Identifier: keyid:47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:2d:1b:68:8c:95:dd:1d:5c:4f:f1:5b:4b:8f:78:1f:92:19: 29:1d:0a:cd:3c:a0:ee:4d:86:92:a9:ee:50:0f:59:8e:96:db: 52:a3:30:26:7e:15:96:9d:f7:e6:ce:63:44:6f:18:a3:76:39: 07:7b:90:18:ef:09:29:73:53:7d:c8:13:1c:19:e8:20:94:5c: 06:54:83:d9:51:86:ab:9c:5b:63:49:5d:4d:3f:c5:54:6e:14: ac:5a:ba:22:7b:b1:97:a6:fe:74:15:b2:cc:33:7a:6d:a6:fa: 10:7a:35:36:e5:ff:1f:f3:73:d5:a1:a1:c1:ae:3a:7e:aa:79: 24:8f:dd:06:6c:3a:b7:d8:2f:9e:65:2a:d2:80:6e:b0:21:f2: b1:e1:e3:07:36:26:67:bc:ef:37:9e:fb:16:c2:ba:e0:d6:80: 1c:ee:55:45:7f:71:dc:09:68:b8:e2:25:6e:ce:d7:f5:56:5f: c7:7e:e6:2e:38:3f:64:f7:35:d5:94:12:88:a1:90:1d:76:fc: 82:39:88:3e:10:8c:b6:3d:9d:a7:44:74:9c:5a:58:ba:b5:ab: 0d:4e:7d:ef:95:f5:20:5d:bd:35:a7:55:9e:fc:12:1c:08:7e: eb:0c:9b:2b:0a:89:47:91:0a:3c:d2:40:14:4f:3e:e2:0c:05: c2:57:c0:5b -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUQhU5G2R2FpEoWFqaaN3matY7NhkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0 NUY4OTRFQjAeFw0yNTA4MjAxNTMxNTBaFw0yNTA4MjExNjMxNTBaMDMxMTAvBgNV BAMTKEE1MDk0QTkxQjc0QjNGOTI0RkFEN0Y1NTZGQUYwNTZBMURBQzlCRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM5z6sTdOek9fez5GkRbrtd/l3 dV3Gh9K7oRoiO+P9gLjRb5H7Kl5W7kgN9GfcYDATnxwvrNyYT/mTqV6tEOLuvlSh W/zmjuFEKk0/xZNGIKWiBS4xTpfFxLG9x76oe4fs7hkqE/R/TjzT83v58LSVI+vC dFLojnHrObwl22zVVuOaRalSGth0ecnZXDeT+2P7mivGFkLcn7/uiBtxyWdzc0ND y/Lx+jpoge7+2aDvAniOpoKpjNLgBiFlauQ8Bvn1QuQXmAdIVUr8ou55VqHa9eE8 ZgA1SCuJr5bmM3wHNSs62FdWnOz5ZlYe6ZnMlNRSDT9BDeIq9UfzkoSlfGWBAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUpQlKkbdLP5JPrX9Vb68Fah2sm/MwHwYDVR0j BBgwFoAUR1o7+glhTge+BWex+xURD0X4lOswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5 MjQzLzIvNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0NUY4OTRFQi5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzQ3NUEzQkZBMDk2MTRF MDdCRTA1NjdCMUZCMTUxMTBGNDVGODk0RUIuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5MjQz LzIvNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0NUY4OTRFQi5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAH0tG2iMld0dXE/xW0uPeB+SGSkdCs08oO5NhpKp7lAPWY6W21KjMCZ+ FZad9+bOY0RvGKN2OQd7kBjvCSlzU33IExwZ6CCUXAZUg9lRhqucW2NJXU0/xVRu FKxauiJ7sZem/nQVsswzem2m+hB6NTbl/x/zc9WhocGuOn6qeSSP3QZsOrfYL55l KtKAbrAh8rHh4wc2Jme87zee+xbCuuDWgBzuVUV/cdwJaLjiJW7O1/VWX8d+5i44 P2T3NdWUEoihkB12/II5iD4QjLY9nadEdJxaWLq1qw1Ofe+V9SBdvTWnVZ78EhwI fusMmysKiUeRCjzSQBRPPuIMBcJXwFs= -----END CERTIFICATE-----Generated at Wed Aug 20 23:33:47 2025 by rpki-client