$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft File: 475A3BFA09614E07BE0567B1FB15110F45F894EB.mft (raw, json) Hash identifier: gOKswxCSg+ff7QndFl6N6lJknM+zIKN7Vtp/Innyxy8= Subject key identifier: EA:63:EA:09:27:48:05:85:22:CE:82:0D:BE:19:5E:0F:65:F2:24:BC Authority key identifier: 47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB Certificate issuer: /CN=475A3BFA09614E07BE0567B1FB15110F45F894EB Certificate serial: 407D5D1F60281115B7DE7B8C607352913E306D77 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft Manifest number: 02 Signing time: Fri 04 Jul 2025 22:34:46 +0000 Manifest this update: Fri 04 Jul 2025 22:29:46 +0000 Manifest next update: Sun 06 Jul 2025 00:26:46 +0000 Files and hashes: 1: 326130353a646663313a6362323a3a2f34382d3438203d3e20323136313037.roa (hash: mOPodk1SWfoVUqjkHG3wmAu+HNRka8LJZu4TU08ixz0=) 2: 326130353a646663313a393330303a3a2f34302d3430203d3e20323136313037.roa (hash: O9HdFgkDLSDurxDqFkNzKefyLVSHYP5RZwYF9ccBE70=) 3: 326130353a646663313a6365633a3a2f34382d3438203d3e20323136313037.roa (hash: MFLgGeiRY5J6V0wqCJ/2rdwCHyoz1yTGoDCT9u80ZPw=) 4: 326130353a646663313a6362313a3a2f34382d3438203d3e20323136313037.roa (hash: WZ3tMlR+p69xUFvcw4oOqLvG3hqJQ0raLNlYbt2cGEc=) 5: 326130353a646663313a6364323a3a2f34382d3438203d3e20323136313037.roa (hash: uTe3RpuC5xHTpbzhstyrLed5Fn2IO9mhtG4WFqEyr0c=) 6: 326130353a646663313a6364333a3a2f34382d3438203d3e20323136313037.roa (hash: ODgMOPEtFM31kytaPhS/kNBKt+7tRnGYNverVN9W6GI=) 7: 326130353a646663313a6364313a3a2f34382d3438203d3e20323136313037.roa (hash: wOFC9QI8GelsG8geVBZYw7NXSrIqNI+SPY2auPGgaCQ=) 8: 326130353a646663313a6364343a3a2f34382d3438203d3e20323136313037.roa (hash: 2ES+J57q5FxV7Pycn6PA/TfkwXqGSDCB0siCI9Kqtao=) 9: 326130353a646663313a6330303a3a2f34382d3438203d3e20323136313037.roa (hash: 5amhvkzdMSmYntVfhhxA2srjGLuE63R2mmWtiqhM60M=) 10: 326130353a646663313a6335333a3a2f34382d3438203d3e20323136313037.roa (hash: XlFjiMGdniXiBH8ber/zerQJr2bnSRJJJo5igygAomc=) 11: 326130353a646663313a6362303a3a2f34382d3438203d3e20323136313037.roa (hash: HPSZ8Ao1IB3lH1ZuFzdnyKg2mh86+6wWsN1VfrbgtjA=) 12: 475A3BFA09614E07BE0567B1FB15110F45F894EB.crl (hash: dNo1yl6uFRqHT+nN593pXVFYKnvzpkUBQ26sbysVIiY=) 13: 326130353a646663313a6366663a3a2f34382d3438203d3e20323136313037.roa (hash: aBc+3q0F9+NwnnOKXQsziJcSflKCPcTqnJDYXx6ReGE=) 14: 326130353a646663313a6330303a3a2f34302d3430203d3e20323136313037.roa (hash: 9b+nfoajFujLj061BrSCfi4FwI9kDrVZ+olcCoR5UBc=) 15: 326130353a646663313a6364303a3a2f34382d3438203d3e20323136313037.roa (hash: cn9YZ8FYaC+Hri9dzrV5iV712LMhxO/a5ltgIPBkcMo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 00:26:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:7d:5d:1f:60:28:11:15:b7:de:7b:8c:60:73:52:91:3e:30:6d:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=475A3BFA09614E07BE0567B1FB15110F45F894EB Validity Not Before: Jul 4 22:29:46 2025 GMT Not After : Jul 6 00:26:46 2025 GMT Subject: CN=EA63EA092748058522CE820DBE195E0F65F224BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:03:8c:9f:4d:20:d5:8b:25:59:56:55:71:21: eb:c7:67:01:e9:35:b3:35:a7:be:ab:a4:e1:29:54: d0:c3:f6:77:59:df:61:f2:19:26:08:72:06:17:f8: e7:3a:a4:33:c3:2d:3c:c6:4a:56:49:b8:34:22:5f: a8:09:19:42:4c:69:a1:50:92:83:61:6d:d2:93:22: 85:c7:61:2d:50:6e:9c:df:2a:66:13:67:11:71:1a: 98:03:01:97:2c:62:57:fc:46:5e:53:a3:2d:91:f8: 85:6c:b4:d1:46:8b:b3:38:49:60:70:01:72:6b:02: 7d:3e:c7:19:60:fe:a0:68:c1:37:b6:f7:09:5b:57: f5:5c:63:cd:3b:44:0e:de:68:90:99:b1:e1:22:19: 59:c3:bf:ad:11:7f:71:6c:e4:ea:71:2e:0f:ad:f5: e9:c1:94:c7:c0:6e:82:fc:73:ea:32:ac:e8:7d:b1: 91:21:f2:75:a1:89:f1:bf:3d:1c:49:e4:a2:e6:45: e6:69:69:c7:af:2b:f9:3c:de:e3:84:27:5d:5c:24: ad:ac:4c:9a:62:b8:5f:ee:30:01:56:23:97:b6:f2: 5a:88:26:f3:8a:0e:d2:ab:3c:90:75:37:be:42:87: 0e:71:f2:4c:bb:28:0e:77:04:24:b0:f7:e0:ed:f3: 15:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:63:EA:09:27:48:05:85:22:CE:82:0D:BE:19:5E:0F:65:F2:24:BC X509v3 Authority Key Identifier: keyid:47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:45:27:d2:41:2a:d9:4e:2b:03:a9:89:2c:07:86:b7:a5:0d: a1:6b:da:1b:77:54:f7:92:c1:e3:63:7a:d9:af:ae:9b:54:da: 41:e7:10:ab:f4:0d:e8:20:58:1d:4c:d5:b4:6e:90:d0:59:fe: c5:bf:4d:dc:c5:51:ce:09:41:a1:0c:db:98:07:75:f6:4c:fe: 5f:47:75:94:2e:97:ee:2b:d7:ca:96:ab:1f:33:6e:d9:cf:99: 3a:ce:1e:a1:dc:7d:a6:56:a7:6b:2d:12:8e:ca:9e:ba:cc:9a: d8:5d:fe:86:db:3c:c1:6e:b4:29:c5:5a:f5:4e:4c:90:8b:3d: d7:4e:64:54:87:a0:05:88:9e:23:f9:a2:a3:e3:ac:16:e6:d9: d8:51:b6:3e:bc:82:b6:a3:ed:37:bb:29:c5:66:d9:29:95:8a: c1:8c:77:e8:f2:71:57:80:53:28:04:7a:d7:aa:49:7a:ec:ca: f5:11:eb:a8:ac:7f:ed:a0:d3:88:80:95:2d:72:84:72:74:76: e0:1a:9f:61:f9:3f:7c:e3:8d:3a:31:39:7f:f9:31:ae:0a:f1: cf:2d:5d:a3:fb:8b:68:c1:c9:3c:cc:ff:50:85:39:47:ba:5d: ad:a3:7a:4a:7f:ee:1d:fe:2a:0c:07:b6:7a:ef:75:90:e0:64: 59:d3:c5:d0 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUQH1dH2AoERW33nuMYHNSkT4wbXcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0 NUY4OTRFQjAeFw0yNTA3MDQyMjI5NDZaFw0yNTA3MDYwMDI2NDZaMDMxMTAvBgNV BAMTKEVBNjNFQTA5Mjc0ODA1ODUyMkNFODIwREJFMTk1RTBGNjVGMjI0QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIA4yfTSDViyVZVlVxIevHZwHp NbM1p76rpOEpVNDD9ndZ32HyGSYIcgYX+Oc6pDPDLTzGSlZJuDQiX6gJGUJMaaFQ koNhbdKTIoXHYS1QbpzfKmYTZxFxGpgDAZcsYlf8Rl5Toy2R+IVstNFGi7M4SWBw AXJrAn0+xxlg/qBowTe29wlbV/VcY807RA7eaJCZseEiGVnDv60Rf3Fs5OpxLg+t 9enBlMfAboL8c+oyrOh9sZEh8nWhifG/PRxJ5KLmReZpacevK/k83uOEJ11cJK2s TJpiuF/uMAFWI5e28lqIJvOKDtKrPJB1N75Chw5x8ky7KA53BCSw9+Dt8xWXAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQU6mPqCSdIBYUizoINvhleD2XyJLwwHwYDVR0j BBgwFoAUR1o7+glhTge+BWex+xURD0X4lOswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5 MjQzLzIvNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0NUY4OTRFQi5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzQ3NUEzQkZBMDk2MTRF MDdCRTA1NjdCMUZCMTUxMTBGNDVGODk0RUIuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5MjQz LzIvNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0NUY4OTRFQi5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAF1FJ9JBKtlOKwOpiSwHhrelDaFr2ht3VPeSweNjetmvrptU2kHnEKv0 DeggWB1M1bRukNBZ/sW/TdzFUc4JQaEM25gHdfZM/l9HdZQul+4r18qWqx8zbtnP mTrOHqHcfaZWp2stEo7KnrrMmthd/obbPMFutCnFWvVOTJCLPddOZFSHoAWIniP5 oqPjrBbm2dhRtj68graj7Te7KcVm2SmVisGMd+jycVeAUygEeteqSXrsyvUR66is f+2g04iAlS1yhHJ0duAan2H5P3zjjToxOX/5Ma4K8c8tXaP7i2jByTzM/1CFOUe6 Xa2jekp/7h3+KgwHtnrvdZDgZFnTxdA= -----END CERTIFICATE-----Generated at Sat Jul 5 09:04:10 2025 by rpki-client