$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft File: 547F71C62763A22A9156089F2F55B587337FAFCB.mft (raw, json) Hash identifier: lO3zf8EeQlmV4nEnz1pbwRU7hhHPKo9rRkn2kddwc+A= Subject key identifier: 31:CA:12:CD:D9:AF:AD:C1:E8:DF:8F:00:D6:6C:D8:6F:14:18:C1:88 Authority key identifier: 54:7F:71:C6:27:63:A2:2A:91:56:08:9F:2F:55:B5:87:33:7F:AF:CB Certificate issuer: /CN=547F71C62763A22A9156089F2F55B587337FAFCB Certificate serial: 6CD72155F9B8EB66787804B372F6184F3F2D5AC7 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft Manifest number: 028B Signing time: Thu 05 Nov 2026 02:01:32 +0000 Manifest this update: Thu 05 Nov 2026 01:56:32 +0000 Manifest next update: Fri 06 Nov 2026 04:30:32 +0000 Files and hashes: 1: 326130613a363034303a353430303a3a2f34302d3438203d3e20323030313739.roa (hash: A22cC6P4zwUPrBb0SJH+K+fkdMIe6umBZOE2fRrY/8M=) 2: 326130613a363034303a353430303a3a2f34302d3438203d3e20323032323031.roa (hash: 4aopGJ1cf3FfEgBAnwMWLIMrqV6viaaMWkIHc0Xr/50=) 3: 547F71C62763A22A9156089F2F55B587337FAFCB.crl (hash: xVJKPNJOlp0zhBpqs1Wzj3xlrCBesxZ8XwB17liE3y0=) 4: 326130353a646663313a393530303a3a2f34302d3438203d3e20323030313739.roa (hash: fEubeCnsxgB87jcAHKsunB1TQ5JLbTqBKtlqWVjmt78=) 5: 326130613a363034303a343930303a3a2f34302d3438203d3e20323030313739.roa (hash: C78X6b1wtQ+o+3B3NsMWXv/5g/eOSLda7nmIBsZCFi4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.crl rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 04:07:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:d7:21:55:f9:b8:eb:66:78:78:04:b3:72:f6:18:4f:3f:2d:5a:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=547F71C62763A22A9156089F2F55B587337FAFCB Validity Not Before: Nov 5 01:56:32 2026 GMT Not After : Nov 6 04:30:32 2026 GMT Subject: CN=31CA12CDD9AFADC1E8DF8F00D66CD86F1418C188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ec:63:3f:90:0c:d8:37:65:56:d7:c9:51:16: 0c:7f:ce:1a:af:8f:fd:67:21:24:30:b4:64:e2:29: c2:01:9c:fb:89:72:08:1d:36:44:ed:43:81:ae:12: c2:68:78:64:4c:35:c4:bf:27:8b:8d:12:6e:99:d5: 58:14:ae:3d:92:43:82:4e:aa:fe:f3:e4:c4:63:5e: f3:b4:7e:c4:4a:ad:07:9f:e5:60:18:29:5d:9e:de: ae:2d:75:c8:a5:15:1d:aa:dc:2f:9b:97:a5:55:91: c3:77:91:2f:97:c4:36:54:b4:c1:7e:e4:c3:79:6c: f7:b5:c8:ef:3c:72:a0:e5:ec:1d:06:05:db:83:8e: b3:2e:1a:f3:9e:64:ec:46:40:e2:b9:63:3a:43:7b: 01:28:5e:48:fd:64:61:93:b1:4d:34:54:af:d7:dc: 58:3a:df:9d:f3:99:d4:6e:12:5b:07:6a:46:27:1d: 06:d0:14:45:7f:69:01:21:ba:bd:8e:61:40:a3:1d: 44:b1:39:db:5d:1e:28:9d:a5:41:64:21:04:02:5c: d6:1e:39:be:4a:20:fe:d3:6f:1c:1e:01:65:aa:4e: ad:1b:26:88:27:f0:82:76:7f:09:68:33:a4:29:fa: b9:b6:c7:8d:6b:10:91:92:ff:b3:c7:93:02:1f:62: e3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:CA:12:CD:D9:AF:AD:C1:E8:DF:8F:00:D6:6C:D8:6F:14:18:C1:88 X509v3 Authority Key Identifier: keyid:54:7F:71:C6:27:63:A2:2A:91:56:08:9F:2F:55:B5:87:33:7F:AF:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:9d:e0:5f:c9:64:33:6e:9e:bf:9c:a5:e4:b9:33:03:e5:54: 9f:5d:df:33:ca:52:53:52:ea:15:f3:23:fd:c6:e3:d3:bd:d4: 67:ab:d6:ae:d3:e1:14:a9:69:80:e2:23:33:3e:3a:24:e0:c4: b6:14:2d:b2:cb:8f:dd:3d:32:51:8a:e9:9f:e3:48:e5:33:ef: 51:dd:78:26:01:9f:10:14:f7:8f:cf:f7:c3:47:11:c7:ba:4b: 95:5a:b3:7a:4d:2a:23:0d:b8:65:d9:cf:c9:ed:bc:2c:0e:04: e2:f2:6a:ff:9b:ca:dd:f9:15:ab:74:10:9c:39:46:2a:c3:bf: 05:fd:b3:21:ae:d2:48:f7:91:11:b9:ce:89:fb:79:9f:79:31: ba:25:87:7a:f4:71:33:2c:ab:62:45:84:d1:2c:13:54:86:35: 3e:e5:bb:81:5f:f7:81:1d:4e:23:75:2c:0f:41:40:2d:a3:3c: 40:3f:69:09:0d:1a:cd:eb:3b:11:cc:34:44:61:96:4a:23:a0: 1b:28:96:2f:c2:fe:01:54:9c:91:70:e0:5c:6b:a5:d2:a0:73: b1:d8:20:0f:db:15:d6:04:90:af:ca:14:b4:d0:73:4e:2e:10: 18:5c:3b:03:bf:34:0b:2d:d4:64:83:f4:95:54:fb:04:fe:1f: e7:b4:50:5a -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUbNchVfm462Z4eASzcvYYTz8tWscwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQ3RjcxQzYyNzYzQTIyQTkxNTYwODlGMkY1NUI1ODcz MzdGQUZDQjAeFw0yNjExMDUwMTU2MzJaFw0yNjExMDYwNDMwMzJaMDMxMTAvBgNV BAMTKDMxQ0ExMkNERDlBRkFEQzFFOERGOEYwMEQ2NkNEODZGMTQxOEMxODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW7GM/kAzYN2VW18lRFgx/zhqv j/1nISQwtGTiKcIBnPuJcggdNkTtQ4GuEsJoeGRMNcS/J4uNEm6Z1VgUrj2SQ4JO qv7z5MRjXvO0fsRKrQef5WAYKV2e3q4tdcilFR2q3C+bl6VVkcN3kS+XxDZUtMF+ 5MN5bPe1yO88cqDl7B0GBduDjrMuGvOeZOxGQOK5YzpDewEoXkj9ZGGTsU00VK/X 3Fg6353zmdRuElsHakYnHQbQFEV/aQEhur2OYUCjHUSxOdtdHiidpUFkIQQCXNYe Ob5KIP7TbxweAWWqTq0bJogn8IJ2fwloM6Qp+rm2x41rEJGS/7PHkwIfYuOVAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUMcoSzdmvrcHo348A1mzYbxQYwYgwHwYDVR0j BBgwFoAUVH9xxidjoiqRVgifL1W1hzN/r8swDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDE3OTFhNjQtYTM2YS00ZWI5LWE2ZmYtZTFjNDA3OGE3 Y2EzLzEvNTQ3RjcxQzYyNzYzQTIyQTkxNTYwODlGMkY1NUI1ODczMzdGQUZDQi5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzU0N0Y3MUM2Mjc2M0Ey MkE5MTU2MDg5RjJGNTVCNTg3MzM3RkFGQ0IuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMDE3OTFhNjQtYTM2YS00ZWI5LWE2ZmYtZTFjNDA3OGE3Y2Ez LzEvNTQ3RjcxQzYyNzYzQTIyQTkxNTYwODlGMkY1NUI1ODczMzdGQUZDQi5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAKmd4F/JZDNunr+cpeS5MwPlVJ9d3zPKUlNS6hXzI/3G49O91Ger1q7T 4RSpaYDiIzM+OiTgxLYULbLLj909MlGK6Z/jSOUz71HdeCYBnxAU94/P98NHEce6 S5Vas3pNKiMNuGXZz8ntvCwOBOLyav+byt35Fat0EJw5RirDvwX9syGu0kj3kRG5 zon7eZ95Mbolh3r0cTMsq2JFhNEsE1SGNT7lu4Ff94EdTiN1LA9BQC2jPEA/aQkN Gs3rOxHMNERhlkojoBsoli/C/gFUnJFw4FxrpdKgc7HYIA/bFdYEkK/KFLTQc04u EBhcOwO/NAst1GSD9JVU+wT+H+e0UFo= -----END CERTIFICATE-----Generated at Thu Nov 5 14:11:58 2026 by rpki-client