$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft File: 4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft (raw, json) Hash identifier: 3ei6wreWUFynQjcVX9ofdmyD5FG1Mbd4O7e55tfDjx0= Subject key identifier: 30:91:BF:47:F5:4C:00:E7:E4:3B:F7:75:2D:B5:21:72:65:DB:83:E5 Authority key identifier: 4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57 Certificate issuer: /CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057 Certificate serial: 5AEE1BDF5E1F9435B51DEE8A4810F566F01BDA11 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft Manifest number: 41 Signing time: Wed 20 Aug 2025 10:02:48 +0000 Manifest this update: Wed 20 Aug 2025 09:57:48 +0000 Manifest next update: Thu 21 Aug 2025 10:52:48 +0000 Files and hashes: 1: 326130613a363034303a623166373a3a2f34382d3438203d3e203530373535.roa (hash: q63trgvlirS+Vgtt9rQwfx5g58dhjqx1zfXsQI8nfBQ=) 2: 326130613a363034303a623166383a3a2f34382d3438203d3e203530373535.roa (hash: NCGL0xwyR9g2r6A71GgXDrp+Nhm2k3T8HoQFr0k0das=) 3: 326130613a363034303a623166323a3a2f34382d3438203d3e20323030363736.roa (hash: 9V8f+kjKeAUUM95gFyLo820Chs0Y7IHMYFLg0AJNvf4=) 4: 326130613a363034303a623166313a3a2f34382d3438203d3e20323030363736.roa (hash: jmju8VqIF7uHPknsXmKVCF/NlSPLUXdtHx+4q+t6HvI=) 5: 326130613a363034303a623166353a3a2f34382d3438203d3e20323030363736.roa (hash: evMMfqo4Ez8yHDdFKOgCCAQkkBtJLTT2mhkV7j/a8vQ=) 6: 4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl (hash: 4PnZXCIyJLsIZR/fvzEW2aqi+oNPD17fcpUbub3tfZo=) 7: 326130613a363034303a623166663a3a2f34382d3438203d3e2030.roa (hash: sgKT96rKThQB6ppVhmCDbggp5qDvA2cp3RmFQMzSxHo=) 8: 326130613a363034303a623166343a3a2f34382d3438203d3e20323030363736.roa (hash: 8vNlACv4VljcfTfQph4BWYbiB6JxXxu9u3pkSEnSFS8=) 9: 326130613a363034303a623166333a3a2f34382d3438203d3e20323030363736.roa (hash: 16vtCR02Wpx8fBrNg3BBjazTebmU9P6zPt+x/DW89rE=) 10: 326130613a363034303a623166303a3a2f34382d3438203d3e20323030363736.roa (hash: f56ZeNhzC2SfQF3WtfvHaAXxQIIVMtYJhNScjVogZ9M=) 11: 326130613a363034303a656430303a3a2f34302d3430203d3e2030.roa (hash: uqRsJY7KhhwwPaijQCvC3gE+TqC4+OLuBx54eDmXu1Q=) 12: 326130613a363034303a623166363a3a2f34382d3438203d3e203530373535.roa (hash: R34yyXLS2JN3du0sWYjJzaZCEqLgwBOyYDGo+BSfbs4=) 13: 326130613a363034303a623166333a3a2f34382d3438203d3e203530373535.roa (hash: zj+PtOUjRL+jh8fX/z3gQawz9pZ6f2aTfcfOK+OABQw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 21 Aug 2025 10:52:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:ee:1b:df:5e:1f:94:35:b5:1d:ee:8a:48:10:f5:66:f0:1b:da:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057 Validity Not Before: Aug 20 09:57:48 2025 GMT Not After : Aug 21 10:52:48 2025 GMT Subject: CN=3091BF47F54C00E7E43BF7752DB5217265DB83E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:35:0e:53:d8:1f:7d:c9:60:1e:12:77:09:12: 59:02:8e:f4:38:ba:e2:dc:71:e4:79:34:08:0a:d9: 78:7f:83:41:1b:c4:8b:72:21:fc:f7:74:50:db:5b: 38:38:ed:ca:45:a6:a1:56:48:bd:d3:49:bb:33:77: b0:75:ae:f7:12:cc:49:37:65:8d:2d:e2:9f:d1:15: c1:50:4e:a3:35:d0:a6:06:0f:5f:59:3a:0b:27:6a: c7:6a:7f:2d:42:6e:e7:5d:69:3d:7e:b6:e8:df:a5: 75:fd:74:f8:f9:08:7f:17:c3:95:ec:a7:27:b0:1d: d8:26:93:9d:3c:1e:7b:86:1b:34:97:f4:b0:a7:b4: 8d:0c:29:23:87:a2:df:ab:7b:a7:da:c8:0d:e3:06: 2c:7c:e2:7b:d9:cd:d9:66:0a:ba:b6:6b:f5:90:c7: f2:08:4b:fe:f0:67:46:18:22:f3:5f:f3:63:97:8e: 87:b2:da:e9:ec:56:cc:bd:3b:f4:0b:76:b2:ab:38: b1:8a:89:54:ce:4f:14:40:a2:33:84:ef:9c:ae:3f: 38:b7:96:8a:40:0c:ca:27:1b:dc:94:90:83:cb:42: 7c:45:0a:d5:e8:97:7c:0c:98:6a:7e:af:53:74:8c: f4:87:8b:18:e4:88:fc:3b:46:48:e2:a6:2a:d0:9f: 76:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:91:BF:47:F5:4C:00:E7:E4:3B:F7:75:2D:B5:21:72:65:DB:83:E5 X509v3 Authority Key Identifier: keyid:4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:70:3c:ee:cf:7b:de:fa:b1:a1:65:53:2b:75:8b:08:d6:15: ae:e6:7b:e3:92:de:8b:51:8c:f9:4f:dd:27:ba:b5:c2:24:24: 7a:55:e2:ce:51:96:89:b6:40:39:c1:0b:e6:c8:98:f3:09:f4: 23:a9:72:30:3a:ba:8f:fd:1c:3e:26:52:b5:78:a2:d8:61:39: 67:9e:b5:7a:e9:a8:1a:dd:4a:25:64:3c:65:07:17:04:14:d7: 87:98:61:31:8e:ef:a9:25:0b:81:66:3c:71:99:ca:28:b7:6d: c2:44:a7:6c:b9:f9:0a:57:3f:95:47:fe:0e:bf:32:32:12:de: 43:a0:ff:e9:96:61:aa:c8:b1:f2:6a:19:1a:98:f2:02:4f:b4: 98:e6:e1:b9:11:59:56:f4:91:12:ff:97:b3:59:2d:ef:82:8c: 66:5f:ff:ff:9c:d7:a8:96:d9:19:1d:3a:89:28:4b:27:2a:b6: 33:c2:8a:1d:b9:23:06:b3:9d:ee:2e:c9:c4:f3:ff:36:04:e8: 9c:eb:86:0a:50:b1:5c:56:bd:6f:2e:32:b3:4d:13:59:31:43: de:17:2c:7b:69:f1:51:00:ce:35:69:f7:cd:a3:21:bd:9d:04: 12:77:ec:f9:c8:c3:f2:66:28:dc:4a:96:48:f7:ad:80:e3:b6: a1:9d:28:ea -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUWu4b314flDW1He6KSBD1ZvAb2hEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZEQzU3MUE1Q0RBMTM5NThCQ0U0NzVGMEU1RDkxMDFE QjgxMjA1NzAeFw0yNTA4MjAwOTU3NDhaFw0yNTA4MjExMDUyNDhaMDMxMTAvBgNV BAMTKDMwOTFCRjQ3RjU0QzAwRTdFNDNCRjc3NTJEQjUyMTcyNjVEQjgzRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxNQ5T2B99yWAeEncJElkCjvQ4 uuLcceR5NAgK2Xh/g0EbxItyIfz3dFDbWzg47cpFpqFWSL3TSbszd7B1rvcSzEk3 ZY0t4p/RFcFQTqM10KYGD19ZOgsnasdqfy1CbuddaT1+tujfpXX9dPj5CH8Xw5Xs pyewHdgmk508HnuGGzSX9LCntI0MKSOHot+re6fayA3jBix84nvZzdlmCrq2a/WQ x/IIS/7wZ0YYIvNf82OXjoey2unsVsy9O/QLdrKrOLGKiVTOTxRAojOE75yuPzi3 lopADMonG9yUkIPLQnxFCtXol3wMmGp+r1N0jPSHixjkiPw7RkjipirQn3ZRAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUMJG/R/VMAOfkO/d1LbUhcmXbg+UwHwYDVR0j BBgwFoAUT9xXGlzaE5WLzkdfDl2RAduBIFcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1 Y2U3LzMvNEZEQzU3MUE1Q0RBMTM5NThCQ0U0NzVGMEU1RDkxMDFEQjgxMjA1Ny5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzRGREM1NzFBNUNEQTEz OTU4QkNFNDc1RjBFNUQ5MTAxREI4MTIwNTcuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1Y2U3 LzMvNEZEQzU3MUE1Q0RBMTM5NThCQ0U0NzVGMEU1RDkxMDFEQjgxMjA1Ny5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBABRwPO7Pe976saFlUyt1iwjWFa7me+OS3otRjPlP3Se6tcIkJHpV4s5R lom2QDnBC+bImPMJ9COpcjA6uo/9HD4mUrV4othhOWeetXrpqBrdSiVkPGUHFwQU 14eYYTGO76klC4FmPHGZyii3bcJEp2y5+QpXP5VH/g6/MjIS3kOg/+mWYarIsfJq GRqY8gJPtJjm4bkRWVb0kRL/l7NZLe+CjGZf//+c16iW2RkdOokoSycqtjPCih25 Iwazne4uycTz/zYE6JzrhgpQsVxWvW8uMrNNE1kxQ94XLHtp8VEAzjVp982jIb2d BBJ37PnIw/JmKNxKlkj3rYDjtqGdKOo= -----END CERTIFICATE-----Generated at Thu Aug 21 00:08:48 2025 by rpki-client