$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft File: 475A3BFA09614E07BE0567B1FB15110F45F894EB.mft (raw, json) Hash identifier: Fj4xGTv900j/VdeIFrN4t7NliIJbhcmVhi+YVxTNqQw= Subject key identifier: 7D:22:FC:F6:2A:3D:40:61:5A:4D:1A:19:5D:A4:8D:22:40:60:A2:D9 Authority key identifier: 47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB Certificate issuer: /CN=475A3BFA09614E07BE0567B1FB15110F45F894EB Certificate serial: 49948BF5CA6F41803D449E3692B83B53FAE259B5 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft Manifest number: 023B Signing time: Mon 31 Aug 2026 22:04:00 +0000 Manifest this update: Mon 31 Aug 2026 21:59:00 +0000 Manifest next update: Tue 01 Sep 2026 22:04:00 +0000 Files and hashes: 1: 326130353a646663313a393330303a3a2f34342d3434203d3e20323136313037.roa (hash: b1jW0QtrvfNFuku7DA8T3pdCcJ7XdV69DcuFmLfePdg=) 2: 326130353a646663313a393330303a3a2f34342d3434203d3e203331383938.roa (hash: /0mHwxj5X080MYjliBUs92u8/GLNUuIoeMzbhIBfk0Y=) 3: 326130353a646663313a6362303a3a2f34382d3438203d3e20323136313037.roa (hash: x8ZSb+1ldH2+HWHNp1OnRRlj5YRqpU3YQDg+aJ7m/zM=) 4: 326130353a646663313a6330303a3a2f34302d3430203d3e20323136313037.roa (hash: GFukpoZMTHuOyKdpxhCEWLRTCpkWdxDZ0EZZSximB54=) 5: 326130353a646663313a393330303a3a2f34302d3430203d3e20323136313037.roa (hash: Xs+sIvX39wrcDJ0C6PsHrcRsnlkL3LVKpC1QcmMP3Gg=) 6: 475A3BFA09614E07BE0567B1FB15110F45F894EB.crl (hash: VmP7oYfrkziNzdqVpGNsDIOJlaZeHNjiQP1uZhgIaKM=) 7: 326130353a646663313a6365633a3a2f34382d3438203d3e20323136313037.roa (hash: 4DqS0wfJwZoZ6IfKaEoa21sc0lUetbPH520saQ/lz3Y=) 8: 326130353a646663313a6335333a3a2f34382d3438203d3e20323136313037.roa (hash: wtG4iZDQHopnv5FvmJF0lihSOVqR5JmK37bFpW6CqYo=) 9: 326130353a646663313a6362323a3a2f34382d3438203d3e20323136313037.roa (hash: sVNK77ext7ZoG9hmscu6oCp8bxY4i1SbymIxi1bKty4=) 10: 326130353a646663313a393331303a3a2f34342d3434203d3e203133333335.roa (hash: NpaHG147shGFSkZHPzJpCUsRtcuhxcPetmAYoibuKRg=) 11: 326130353a646663313a6362313a3a2f34382d3438203d3e20323136313037.roa (hash: ED9T1TH/lLo9n75GsxMUU3iCH+Cefw8ulX1hszJwXAg=) 12: 326130353a646663313a6364333a3a2f34382d3438203d3e20323136313037.roa (hash: EPPNU2N02dspTOT+Qd29+6lRlfOZSF0Kd5muSJ8aZ+4=) 13: 326130353a646663313a6366663a3a2f34382d3438203d3e20323136313037.roa (hash: BtQLTTQtkjt+dOkOSbzl625aMHPNaGi50iFnJSKyAXs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 01 Sep 2026 21:38:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:94:8b:f5:ca:6f:41:80:3d:44:9e:36:92:b8:3b:53:fa:e2:59:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=475A3BFA09614E07BE0567B1FB15110F45F894EB Validity Not Before: Aug 31 21:59:00 2026 GMT Not After : Sep 1 22:04:00 2026 GMT Subject: CN=7D22FCF62A3D40615A4D1A195DA48D224060A2D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e0:2f:e5:60:6e:71:5b:0c:b2:02:c0:dc:7f: d0:8f:d1:32:53:eb:27:50:70:7a:41:2c:3f:63:91: 0e:fb:7e:59:69:3b:49:71:b6:f9:08:47:97:17:3a: 64:d3:65:4a:70:9e:5a:46:4c:38:05:33:d3:a9:4f: 35:4d:71:f4:bc:82:db:36:56:33:da:dc:5b:e4:29: 0a:8d:48:b6:07:a0:cc:2e:a9:6b:8d:bd:48:a3:36: a9:5a:ec:fa:e4:06:de:b5:54:2b:22:b7:cf:e8:c7: cb:b5:25:91:57:b4:eb:4a:9d:52:32:2b:d0:a3:d1: b7:93:ff:85:ae:f4:a3:bb:2c:69:1e:29:c9:5b:64: 2e:86:1f:0a:f6:0d:73:fe:18:e2:47:18:d4:99:84: 1d:a8:bf:0a:69:a2:fe:d2:fc:9e:bd:a1:be:e8:f4: de:79:1f:ce:7d:04:cb:b5:8e:82:00:fe:b0:61:8d: bd:59:4a:87:b1:41:4d:65:60:c7:fc:cd:c6:b0:bc: be:2a:69:1c:90:80:91:b0:e0:eb:35:be:b2:83:d6: 29:42:45:cf:bc:10:55:ac:c3:08:08:18:ef:6d:01: c8:3e:ff:ad:83:70:58:15:10:24:9b:3e:80:d4:0c: 7a:8e:77:0d:e8:ac:a6:1c:7f:cc:56:fc:ee:2d:4b: b2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:22:FC:F6:2A:3D:40:61:5A:4D:1A:19:5D:A4:8D:22:40:60:A2:D9 X509v3 Authority Key Identifier: keyid:47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:05:45:62:7b:14:6e:6e:a0:b1:d9:49:c1:2b:19:91:53:4e: 56:d3:ef:f8:55:2c:96:37:3d:69:9b:4c:c5:e3:fd:f4:68:bc: f5:2b:87:0a:21:8d:57:93:1a:13:3d:99:43:97:44:cc:e8:9f: 76:0f:c6:aa:d9:9a:65:ef:af:08:6b:b3:dc:95:05:df:31:81: 25:43:b7:9e:84:bc:d9:1e:8c:a3:a2:d9:df:5a:fd:1b:0a:ba: be:95:eb:b1:e8:6e:2b:7d:45:50:4e:32:c0:19:cf:4a:2a:81: 53:47:c7:17:5c:80:5f:44:73:f3:65:86:1a:cd:7c:52:2c:c0: 27:67:c3:21:73:a5:60:1a:48:63:8f:d0:0f:96:d8:da:e8:68: ac:1f:84:f2:eb:a2:36:91:23:c2:fb:08:bb:2a:ad:60:53:25: 30:3b:79:68:e2:ab:a8:4c:06:8b:11:07:ff:18:a8:9a:d4:ba: 30:25:f3:1f:b9:15:56:9a:c9:b9:5f:27:bf:8a:7b:4d:11:a8: 55:c1:80:20:85:06:94:9c:b9:d2:e4:5b:33:76:ac:1f:84:1a: db:84:73:f9:97:0a:1e:91:27:61:b4:c3:c8:b3:1e:b0:df:9d: 92:08:d4:2d:9d:83:88:bf:6d:de:7b:81:f8:59:d3:cc:e0:dc: 5a:15:78:87 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUSZSL9cpvQYA9RJ42krg7U/riWbUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0 NUY4OTRFQjAeFw0yNjA4MzEyMTU5MDBaFw0yNjA5MDEyMjA0MDBaMDMxMTAvBgNV BAMTKDdEMjJGQ0Y2MkEzRDQwNjE1QTREMUExOTVEQTQ4RDIyNDA2MEEyRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR4C/lYG5xWwyyAsDcf9CP0TJT 6ydQcHpBLD9jkQ77fllpO0lxtvkIR5cXOmTTZUpwnlpGTDgFM9OpTzVNcfS8gts2 VjPa3FvkKQqNSLYHoMwuqWuNvUijNqla7PrkBt61VCsit8/ox8u1JZFXtOtKnVIy K9Cj0beT/4Wu9KO7LGkeKclbZC6GHwr2DXP+GOJHGNSZhB2ovwppov7S/J69ob7o 9N55H859BMu1joIA/rBhjb1ZSoexQU1lYMf8zcawvL4qaRyQgJGw4Os1vrKD1ilC Rc+8EFWswwgIGO9tAcg+/62DcFgVECSbPoDUDHqOdw3orKYcf8xW/O4tS7I5AgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUfSL89io9QGFaTRoZXaSNIkBgotkwHwYDVR0j BBgwFoAUR1o7+glhTge+BWex+xURD0X4lOswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5 MjQzLzIvNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0NUY4OTRFQi5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzQ3NUEzQkZBMDk2MTRF MDdCRTA1NjdCMUZCMTUxMTBGNDVGODk0RUIuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5MjQz LzIvNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0NUY4OTRFQi5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAHYFRWJ7FG5uoLHZScErGZFTTlbT7/hVLJY3PWmbTMXj/fRovPUrhwoh jVeTGhM9mUOXRMzon3YPxqrZmmXvrwhrs9yVBd8xgSVDt56EvNkejKOi2d9a/RsK ur6V67Hobit9RVBOMsAZz0oqgVNHxxdcgF9Ec/NlhhrNfFIswCdnwyFzpWAaSGOP 0A+W2NroaKwfhPLrojaRI8L7CLsqrWBTJTA7eWjiq6hMBosRB/8YqJrUujAl8x+5 FVaayblfJ7+Ke00RqFXBgCCFBpScudLkWzN2rB+EGtuEc/mXCh6RJ2G0w8izHrDf nZII1C2dg4i/bd57gfhZ08zg3FoVeIc= -----END CERTIFICATE-----Generated at Tue Sep 1 04:20:24 2026 by rpki-client