$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft File: 547F71C62763A22A9156089F2F55B587337FAFCB.mft (raw, json) Hash identifier: 13jpq61kyfXu6oHVY9Kv+aQ4qaJnGSFR/ZfwR7fP8Zw= Subject key identifier: EF:B2:32:BE:2B:84:70:E7:A5:E4:E4:B0:F1:5E:C0:3F:FD:2E:62:8B Authority key identifier: 54:7F:71:C6:27:63:A2:2A:91:56:08:9F:2F:55:B5:87:33:7F:AF:CB Certificate issuer: /CN=547F71C62763A22A9156089F2F55B587337FAFCB Certificate serial: 0144F41053FFA9EA8D1CC8A7E45AA7E86F5D14A7 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft Manifest number: A5 Signing time: Tue 04 Nov 2025 12:50:48 +0000 Manifest this update: Tue 04 Nov 2025 12:45:48 +0000 Manifest next update: Wed 05 Nov 2025 15:23:48 +0000 Files and hashes: 1: 326130613a363034303a343930303a3a2f34302d3438203d3e20323030313739.roa (hash: E7vQShgXOvBH1q/A8kYfwNTbOyQSM9xRkA+S+5IF33A=) 2: 326130613a363034303a353430303a3a2f34302d3438203d3e20323032323031.roa (hash: 6pzPl1CKzXGYp4EVxRXIn1wg4oABaAK4CCBHYDSxxpU=) 3: 547F71C62763A22A9156089F2F55B587337FAFCB.crl (hash: J2wU/d22LwQYUSXlhB5+K+xlJecGOWjjE2fhTKSaw6Y=) 4: 326130613a363034303a353430303a3a2f34302d3438203d3e20323030313739.roa (hash: YVenbTOqKe9MEXa6/fOG09XMak323Qg3KMUQzchdB9c=) 5: 326130353a646663313a393530303a3a2f34302d3438203d3e20323030313739.roa (hash: RxLo4AdqJDnPZQyih2dN7gCzOdUFOGixnoLv2pmTlM8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.crl rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 15:23:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:44:f4:10:53:ff:a9:ea:8d:1c:c8:a7:e4:5a:a7:e8:6f:5d:14:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=547F71C62763A22A9156089F2F55B587337FAFCB Validity Not Before: Nov 4 12:45:48 2025 GMT Not After : Nov 5 15:23:48 2025 GMT Subject: CN=EFB232BE2B8470E7A5E4E4B0F15EC03FFD2E628B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ac:bf:7c:c7:bd:38:6e:d8:2e:f0:1a:32:82: 25:56:75:93:67:0f:aa:58:c2:d3:3e:5c:d2:69:18: d2:dd:c6:6e:67:be:f5:cd:de:00:bb:2b:7b:12:76: 46:10:55:30:2c:12:6e:7e:f9:62:fd:0b:40:e0:05: 36:18:71:0c:d0:2b:ea:b6:9d:fe:a7:e6:9d:28:a0: cc:c6:fb:f0:dd:86:b5:f0:ce:c6:86:38:d2:fe:78: f4:8f:60:7b:2f:81:5b:7e:fa:7b:18:f0:ad:23:40: e4:05:9f:0c:79:ae:ac:82:3d:1f:11:a1:98:95:ea: 10:68:c6:6c:d7:6a:db:5d:01:8c:44:29:70:c8:27: 60:4a:a9:9c:13:a8:ae:f6:12:d7:50:b7:68:e4:e8: 71:09:a9:53:d1:f6:da:e1:2f:5e:48:0b:d9:80:43: 94:3c:e7:93:19:37:92:ec:de:d4:35:22:c5:2b:9e: 42:39:78:5b:1f:24:cf:0c:e9:00:ec:d5:c0:a0:a9: dd:b5:15:22:69:ce:1d:fb:f9:71:60:73:55:6e:ce: 58:6b:76:8d:b8:c5:26:43:5e:90:61:10:9d:1c:f4: 2a:4f:fe:25:6f:de:ac:b8:ac:97:54:da:51:17:80: 9d:8e:a0:14:96:ff:5a:7d:ea:c3:69:55:57:b9:43: 42:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:B2:32:BE:2B:84:70:E7:A5:E4:E4:B0:F1:5E:C0:3F:FD:2E:62:8B X509v3 Authority Key Identifier: keyid:54:7F:71:C6:27:63:A2:2A:91:56:08:9F:2F:55:B5:87:33:7F:AF:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:bb:40:3b:fc:08:62:75:5b:68:8b:a3:4d:df:e9:c2:61:be: e9:bf:a7:f9:c0:55:81:89:78:73:84:81:92:c5:97:35:cd:a8: dc:9d:e5:e9:b3:44:db:d8:c3:db:32:17:9d:58:06:b1:01:4a: 77:21:21:c8:c6:71:5d:f8:71:a0:2c:5a:fb:8b:bb:8e:01:ee: 1c:2c:2a:af:df:62:3e:65:18:37:0e:e7:7b:76:29:dc:be:30: 14:1d:a2:fe:9d:0e:4c:a7:dd:cc:65:f3:10:0b:2e:24:04:9c: f8:e6:17:34:77:90:2f:c1:cb:1a:7f:88:af:86:26:59:0f:b9: 9d:20:e4:af:53:13:cf:7b:55:41:47:2c:f8:f2:c4:c7:f1:58: 10:b4:96:13:20:a1:b9:38:76:ae:25:20:9d:2f:3e:22:10:7d: 31:21:01:35:20:a9:58:8b:6e:48:9f:08:2a:70:57:fc:6b:e6: 83:a3:71:cd:0a:6f:39:fc:b3:5f:b8:15:1b:a0:09:5e:1e:26: 10:38:18:6d:0c:d0:2e:e4:32:86:f1:7c:5b:f8:25:a0:e1:7a: f7:4c:93:0e:e6:a7:ad:7b:02:13:f6:4f:d2:73:25:99:f6:29: 7c:b2:2c:bb:2e:ff:08:90:0b:39:9a:6a:a3:40:9b:c5:8a:6f: db:3c:af:d3 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUAUT0EFP/qeqNHMin5Fqn6G9dFKcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQ3RjcxQzYyNzYzQTIyQTkxNTYwODlGMkY1NUI1ODcz MzdGQUZDQjAeFw0yNTExMDQxMjQ1NDhaFw0yNTExMDUxNTIzNDhaMDMxMTAvBgNV BAMTKEVGQjIzMkJFMkI4NDcwRTdBNUU0RTRCMEYxNUVDMDNGRkQyRTYyOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0rL98x704btgu8BoygiVWdZNn D6pYwtM+XNJpGNLdxm5nvvXN3gC7K3sSdkYQVTAsEm5++WL9C0DgBTYYcQzQK+q2 nf6n5p0ooMzG+/DdhrXwzsaGONL+ePSPYHsvgVt++nsY8K0jQOQFnwx5rqyCPR8R oZiV6hBoxmzXattdAYxEKXDIJ2BKqZwTqK72EtdQt2jk6HEJqVPR9trhL15IC9mA Q5Q855MZN5Ls3tQ1IsUrnkI5eFsfJM8M6QDs1cCgqd21FSJpzh37+XFgc1Vuzlhr do24xSZDXpBhEJ0c9CpP/iVv3qy4rJdU2lEXgJ2OoBSW/1p96sNpVVe5Q0IjAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQU77IyviuEcOel5OSw8V7AP/0uYoswHwYDVR0j BBgwFoAUVH9xxidjoiqRVgifL1W1hzN/r8swDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDE3OTFhNjQtYTM2YS00ZWI5LWE2ZmYtZTFjNDA3OGE3 Y2EzLzEvNTQ3RjcxQzYyNzYzQTIyQTkxNTYwODlGMkY1NUI1ODczMzdGQUZDQi5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzU0N0Y3MUM2Mjc2M0Ey MkE5MTU2MDg5RjJGNTVCNTg3MzM3RkFGQ0IuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMDE3OTFhNjQtYTM2YS00ZWI5LWE2ZmYtZTFjNDA3OGE3Y2Ez LzEvNTQ3RjcxQzYyNzYzQTIyQTkxNTYwODlGMkY1NUI1ODczMzdGQUZDQi5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBACi7QDv8CGJ1W2iLo03f6cJhvum/p/nAVYGJeHOEgZLFlzXNqNyd5emz RNvYw9syF51YBrEBSnchIcjGcV34caAsWvuLu44B7hwsKq/fYj5lGDcO53t2Kdy+ MBQdov6dDkyn3cxl8xALLiQEnPjmFzR3kC/Byxp/iK+GJlkPuZ0g5K9TE897VUFH LPjyxMfxWBC0lhMgobk4dq4lIJ0vPiIQfTEhATUgqViLbkifCCpwV/xr5oOjcc0K bzn8s1+4FRugCV4eJhA4GG0M0C7kMobxfFv4JaDhevdMkw7mp617AhP2T9JzJZn2 KXyyLLsu/wiQCzmaaqNAm8WKb9s8r9M= -----END CERTIFICATE-----Generated at Wed Nov 5 02:59:09 2025 by rpki-client