$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft File: 475A3BFA09614E07BE0567B1FB15110F45F894EB.mft (raw, json) Hash identifier: KqgkrJ5xUr7+HrZZh386kPo92OegNKK+rH1wxUVoPwM= Subject key identifier: 91:DE:CC:46:C2:A2:69:35:64:D9:3D:27:EE:18:14:5F:7F:56:F2:3D Authority key identifier: 47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB Certificate issuer: /CN=475A3BFA09614E07BE0567B1FB15110F45F894EB Certificate serial: 6006F29DF354C401D4EC427927B94D67950DFF4B Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft Manifest number: 84 Signing time: Wed 08 Oct 2025 16:07:45 +0000 Manifest this update: Wed 08 Oct 2025 16:02:45 +0000 Manifest next update: Thu 09 Oct 2025 18:08:45 +0000 Files and hashes: 1: 326130353a646663313a6335333a3a2f34382d3438203d3e20323136313037.roa (hash: XlFjiMGdniXiBH8ber/zerQJr2bnSRJJJo5igygAomc=) 2: 326130353a646663313a6330303a3a2f34382d3438203d3e20323136313037.roa (hash: 5amhvkzdMSmYntVfhhxA2srjGLuE63R2mmWtiqhM60M=) 3: 326130353a646663313a6330303a3a2f34302d3430203d3e20323136313037.roa (hash: 9b+nfoajFujLj061BrSCfi4FwI9kDrVZ+olcCoR5UBc=) 4: 326130353a646663313a6364343a3a2f34382d3438203d3e20323136313037.roa (hash: 2ES+J57q5FxV7Pycn6PA/TfkwXqGSDCB0siCI9Kqtao=) 5: 326130353a646663313a6362303a3a2f34382d3438203d3e20323136313037.roa (hash: HPSZ8Ao1IB3lH1ZuFzdnyKg2mh86+6wWsN1VfrbgtjA=) 6: 326130353a646663313a6362323a3a2f34382d3438203d3e20323136313037.roa (hash: mOPodk1SWfoVUqjkHG3wmAu+HNRka8LJZu4TU08ixz0=) 7: 326130353a646663313a6364303a3a2f34382d3438203d3e20323136313037.roa (hash: cn9YZ8FYaC+Hri9dzrV5iV712LMhxO/a5ltgIPBkcMo=) 8: 326130353a646663313a6365633a3a2f34382d3438203d3e20323136313037.roa (hash: MFLgGeiRY5J6V0wqCJ/2rdwCHyoz1yTGoDCT9u80ZPw=) 9: 326130353a646663313a6364333a3a2f34382d3438203d3e20323136313037.roa (hash: ODgMOPEtFM31kytaPhS/kNBKt+7tRnGYNverVN9W6GI=) 10: 326130353a646663313a393330303a3a2f34302d3430203d3e20323136313037.roa (hash: O9HdFgkDLSDurxDqFkNzKefyLVSHYP5RZwYF9ccBE70=) 11: 475A3BFA09614E07BE0567B1FB15110F45F894EB.crl (hash: t9lkhZwQ5Bbo/vx35Um1NlpOMRhTBtjGLZ1tTY2DHR0=) 12: 326130353a646663313a6366663a3a2f34382d3438203d3e20323136313037.roa (hash: aBc+3q0F9+NwnnOKXQsziJcSflKCPcTqnJDYXx6ReGE=) 13: 326130353a646663313a6362313a3a2f34382d3438203d3e20323136313037.roa (hash: WZ3tMlR+p69xUFvcw4oOqLvG3hqJQ0raLNlYbt2cGEc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 09 Oct 2025 13:21:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:06:f2:9d:f3:54:c4:01:d4:ec:42:79:27:b9:4d:67:95:0d:ff:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=475A3BFA09614E07BE0567B1FB15110F45F894EB Validity Not Before: Oct 8 16:02:45 2025 GMT Not After : Oct 9 18:08:45 2025 GMT Subject: CN=91DECC46C2A2693564D93D27EE18145F7F56F23D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f4:c6:ca:f4:00:a2:25:54:0d:fe:18:a0:7e: 2e:ca:fe:3b:f9:b7:59:ca:53:1f:13:b0:7a:5a:41: e1:6c:2c:8d:39:51:87:6e:d5:9b:c4:3c:ce:30:fb: 17:56:d1:1a:33:a2:40:d7:69:22:af:bc:9d:18:6c: 58:51:33:de:5f:c4:66:30:6c:b9:25:ed:87:51:e9: fc:c9:ff:a6:13:dd:73:44:b7:e4:59:08:22:24:db: 1a:08:71:97:9b:09:78:ef:40:5f:f0:ea:44:ac:3f: ad:a5:ca:d5:e8:99:86:ba:6c:dd:9d:6b:df:c4:65: f9:50:cc:52:60:f7:09:12:a0:4b:0d:7a:16:06:c0: 31:f8:80:44:8a:e5:32:ce:b2:09:89:f8:1e:77:fa: 3e:d4:b7:bd:86:4a:c3:fc:d3:01:44:6e:3b:68:7f: ae:2d:7f:97:36:8c:ea:68:2c:03:44:c3:98:56:2f: 62:cf:8b:eb:12:be:75:c1:2c:1b:86:d2:15:5a:44: 9a:2a:5f:6c:05:de:32:cc:93:9d:22:42:ad:21:f0: 8a:cd:d6:30:2a:7f:e5:dd:87:91:8a:cd:c9:8d:2c: ca:c0:00:e8:25:46:08:25:df:f8:36:de:54:77:40: b3:0e:58:21:c6:c9:3d:70:12:b9:74:f3:9e:72:fa: 2a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:DE:CC:46:C2:A2:69:35:64:D9:3D:27:EE:18:14:5F:7F:56:F2:3D X509v3 Authority Key Identifier: keyid:47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:1f:a2:24:e5:01:e9:aa:8f:f7:bd:80:96:ff:04:ee:75:fd: a6:d7:78:0a:bd:fc:51:95:dd:28:42:c8:06:80:37:fc:d8:1e: f6:82:d8:7f:de:a4:89:f4:3e:74:1d:74:53:26:d3:cc:24:2f: 15:66:c7:17:60:b9:39:ae:b8:2d:79:8b:9f:34:58:fc:99:bb: e1:82:b8:56:ed:58:88:a8:3a:fe:39:7f:f5:6a:ee:48:c7:a2: 02:cd:2a:23:97:cf:05:3d:27:58:27:96:e6:b8:99:9a:c6:77: 57:fd:7a:ea:ea:44:b2:b5:4c:dd:e2:21:52:4d:b7:08:cf:d2: f4:a0:67:e4:20:ef:5c:34:ed:b8:b6:c7:3c:b6:73:1e:db:93: 06:8e:58:71:c2:58:86:66:00:23:44:b8:8b:90:cd:c1:ed:7a: fd:21:cd:3e:4e:98:2a:3e:2b:9c:ae:ad:78:18:e7:03:09:00: 41:0b:14:ad:f4:ff:e2:32:19:76:7d:80:1b:ba:7d:18:e7:e9: 48:44:21:f3:69:ce:51:16:01:44:a5:e1:bd:df:1d:a5:74:74: 4a:e6:3e:cb:e0:ef:ac:47:a6:13:04:8d:30:38:d9:ec:b1:c4: cd:0f:78:5a:67:ad:a0:67:96:1d:f4:31:5c:f0:3e:b8:bf:9f: 6b:da:8a:71 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUYAbynfNUxAHU7EJ5J7lNZ5UN/0swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0 NUY4OTRFQjAeFw0yNTEwMDgxNjAyNDVaFw0yNTEwMDkxODA4NDVaMDMxMTAvBgNV BAMTKDkxREVDQzQ2QzJBMjY5MzU2NEQ5M0QyN0VFMTgxNDVGN0Y1NkYyM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU9MbK9ACiJVQN/higfi7K/jv5 t1nKUx8TsHpaQeFsLI05UYdu1ZvEPM4w+xdW0RozokDXaSKvvJ0YbFhRM95fxGYw bLkl7YdR6fzJ/6YT3XNEt+RZCCIk2xoIcZebCXjvQF/w6kSsP62lytXomYa6bN2d a9/EZflQzFJg9wkSoEsNehYGwDH4gESK5TLOsgmJ+B53+j7Ut72GSsP80wFEbjto f64tf5c2jOpoLANEw5hWL2LPi+sSvnXBLBuG0hVaRJoqX2wF3jLMk50iQq0h8IrN 1jAqf+Xdh5GKzcmNLMrAAOglRggl3/g23lR3QLMOWCHGyT1wErl0855y+iorAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUkd7MRsKiaTVk2T0n7hgUX39W8j0wHwYDVR0j BBgwFoAUR1o7+glhTge+BWex+xURD0X4lOswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5 MjQzLzIvNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0NUY4OTRFQi5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzQ3NUEzQkZBMDk2MTRF MDdCRTA1NjdCMUZCMTUxMTBGNDVGODk0RUIuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5MjQz LzIvNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0NUY4OTRFQi5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAEQfoiTlAemqj/e9gJb/BO51/abXeAq9/FGV3ShCyAaAN/zYHvaC2H/e pIn0PnQddFMm08wkLxVmxxdguTmuuC15i580WPyZu+GCuFbtWIioOv45f/Vq7kjH ogLNKiOXzwU9J1gnlua4mZrGd1f9eurqRLK1TN3iIVJNtwjP0vSgZ+Qg71w07bi2 xzy2cx7bkwaOWHHCWIZmACNEuIuQzcHtev0hzT5OmCo+K5yurXgY5wMJAEELFK30 /+IyGXZ9gBu6fRjn6UhEIfNpzlEWAUSl4b3fHaV0dErmPsvg76xHphMEjTA42eyx xM0PeFpnraBnlh30MVzwPri/n2vainE= -----END CERTIFICATE-----Generated at Wed Oct 8 19:42:46 2025 by rpki-client