$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft File: 547F71C62763A22A9156089F2F55B587337FAFCB.mft (raw, json) Hash identifier: SVKiW9ydSTG9UXR/MBn6g8gbQCi2ERjLREMtE+OWoXQ= Subject key identifier: 49:3F:BD:5A:94:67:6E:EB:E3:2E:B9:6D:67:B5:FB:4A:06:61:28:4D Authority key identifier: 54:7F:71:C6:27:63:A2:2A:91:56:08:9F:2F:55:B5:87:33:7F:AF:CB Certificate issuer: /CN=547F71C62763A22A9156089F2F55B587337FAFCB Certificate serial: 52FACB959CAF07BCFFAF8E14B1910662478D4718 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft Manifest number: 0141 Signing time: Sun 01 Mar 2026 20:00:10 +0000 Manifest this update: Sun 01 Mar 2026 19:55:10 +0000 Manifest next update: Mon 02 Mar 2026 23:09:10 +0000 Files and hashes: 1: 326130613a363034303a353430303a3a2f34302d3438203d3e20323030313739.roa (hash: YVenbTOqKe9MEXa6/fOG09XMak323Qg3KMUQzchdB9c=) 2: 326130613a363034303a353430303a3a2f34302d3438203d3e20323032323031.roa (hash: 6pzPl1CKzXGYp4EVxRXIn1wg4oABaAK4CCBHYDSxxpU=) 3: 547F71C62763A22A9156089F2F55B587337FAFCB.crl (hash: DXu8w+Kd4pD5d+xvaQLPa27qZ3JLrje75DrBNY2Yk80=) 4: 326130353a646663313a393530303a3a2f34302d3438203d3e20323030313739.roa (hash: RxLo4AdqJDnPZQyih2dN7gCzOdUFOGixnoLv2pmTlM8=) 5: 326130613a363034303a343930303a3a2f34302d3438203d3e20323030313739.roa (hash: E7vQShgXOvBH1q/A8kYfwNTbOyQSM9xRkA+S+5IF33A=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.crl rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 18:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:fa:cb:95:9c:af:07:bc:ff:af:8e:14:b1:91:06:62:47:8d:47:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=547F71C62763A22A9156089F2F55B587337FAFCB Validity Not Before: Mar 1 19:55:10 2026 GMT Not After : Mar 2 23:09:10 2026 GMT Subject: CN=493FBD5A94676EEBE32EB96D67B5FB4A0661284D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:21:b0:35:03:86:a7:32:4b:84:81:8a:c4:a4: e5:50:d7:bb:a6:a5:92:72:e5:9b:cd:58:09:93:e2: ad:b9:9e:b5:a8:00:d5:38:f5:8c:6a:2d:7a:fe:09: 02:ef:56:8c:2e:45:2d:6e:71:60:13:78:9b:7e:33: 78:7f:5b:21:f9:37:88:e7:29:fa:8f:5e:a8:c3:6f: 30:cf:4c:58:fa:9f:52:b8:b7:e0:88:07:d6:90:1f: 6c:ee:83:a3:80:8b:c4:e9:f2:15:45:5c:9a:22:48: 4a:3f:7f:9f:31:f6:00:21:c6:e5:58:04:78:d8:73: a0:8c:37:c3:ff:4a:e9:c3:9a:87:78:88:28:62:4d: 6d:98:dc:e9:04:30:f9:f1:8e:cb:c2:99:13:9c:de: c4:ee:c4:10:ab:f5:6d:b7:07:d8:d7:5d:cd:25:57: 73:f6:69:1e:02:58:e0:8d:c5:43:74:b0:ee:a7:70: e8:aa:9f:a6:2d:97:1e:21:ea:c1:2c:87:5a:11:3e: c4:81:1a:93:98:e4:f2:39:25:e2:cc:c4:19:e6:9b: ae:65:c1:6c:2a:0e:b4:17:01:ce:0e:2f:6e:bf:d9: b6:de:9f:06:9f:4f:72:80:7f:fc:5a:08:13:17:5f: 44:6f:17:1b:68:09:7b:b9:5b:e1:ec:51:5c:c0:64: 67:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:3F:BD:5A:94:67:6E:EB:E3:2E:B9:6D:67:B5:FB:4A:06:61:28:4D X509v3 Authority Key Identifier: keyid:54:7F:71:C6:27:63:A2:2A:91:56:08:9F:2F:55:B5:87:33:7F:AF:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:57:01:91:da:10:59:fe:db:52:e9:c3:95:4c:5d:e8:70:9a: 6d:53:48:38:fe:87:ba:b9:4e:d4:15:44:10:25:aa:44:2f:f9: a2:d1:e6:36:5e:d2:53:d0:15:a0:67:df:f3:f7:8a:45:fa:12: 02:5e:d9:70:d9:d4:7c:e1:79:71:88:cb:d4:41:42:57:5f:18: c6:2f:05:ba:c6:15:d9:e1:34:6b:9d:49:94:f4:14:af:42:9e: c9:09:75:35:17:4a:33:91:a5:e2:99:18:16:0b:de:3e:6c:de: 39:70:f1:12:ef:97:01:86:9e:40:68:ca:13:22:b2:0e:b6:38: 14:2c:0e:4f:5f:04:67:96:c1:d5:bf:9e:fd:fc:e4:90:33:f3: 44:68:33:96:6f:32:07:a9:23:21:b3:5c:c8:6f:0d:34:b0:21: 08:e4:6c:bb:ca:f9:7a:a9:a4:93:92:c3:93:6f:c4:03:8c:e9: 75:62:e1:d7:59:09:9b:ba:78:3f:05:63:56:a0:1c:d4:92:9b: 6b:f4:43:52:66:22:ee:e0:9b:5b:54:2f:7c:e2:30:7b:e7:e4: dd:2b:05:c9:0e:d9:6a:71:08:50:f8:51:1a:22:fa:ba:55:4b: 6e:b4:9f:f5:3d:1e:2e:50:b4:7c:df:cf:e0:5f:4a:2c:bd:0f: 7e:47:f5:0c -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUUvrLlZyvB7z/r44UsZEGYkeNRxgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQ3RjcxQzYyNzYzQTIyQTkxNTYwODlGMkY1NUI1ODcz MzdGQUZDQjAeFw0yNjAzMDExOTU1MTBaFw0yNjAzMDIyMzA5MTBaMDMxMTAvBgNV BAMTKDQ5M0ZCRDVBOTQ2NzZFRUJFMzJFQjk2RDY3QjVGQjRBMDY2MTI4NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjIbA1A4anMkuEgYrEpOVQ17um pZJy5ZvNWAmT4q25nrWoANU49YxqLXr+CQLvVowuRS1ucWATeJt+M3h/WyH5N4jn KfqPXqjDbzDPTFj6n1K4t+CIB9aQH2zug6OAi8Tp8hVFXJoiSEo/f58x9gAhxuVY BHjYc6CMN8P/SunDmod4iChiTW2Y3OkEMPnxjsvCmROc3sTuxBCr9W23B9jXXc0l V3P2aR4CWOCNxUN0sO6ncOiqn6Ytlx4h6sEsh1oRPsSBGpOY5PI5JeLMxBnmm65l wWwqDrQXAc4OL26/2bbenwafT3KAf/xaCBMXX0RvFxtoCXu5W+HsUVzAZGeRAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUST+9WpRnbuvjLrltZ7X7SgZhKE0wHwYDVR0j BBgwFoAUVH9xxidjoiqRVgifL1W1hzN/r8swDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDE3OTFhNjQtYTM2YS00ZWI5LWE2ZmYtZTFjNDA3OGE3 Y2EzLzEvNTQ3RjcxQzYyNzYzQTIyQTkxNTYwODlGMkY1NUI1ODczMzdGQUZDQi5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzU0N0Y3MUM2Mjc2M0Ey MkE5MTU2MDg5RjJGNTVCNTg3MzM3RkFGQ0IuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMDE3OTFhNjQtYTM2YS00ZWI5LWE2ZmYtZTFjNDA3OGE3Y2Ez LzEvNTQ3RjcxQzYyNzYzQTIyQTkxNTYwODlGMkY1NUI1ODczMzdGQUZDQi5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBALJXAZHaEFn+21Lpw5VMXehwmm1TSDj+h7q5TtQVRBAlqkQv+aLR5jZe 0lPQFaBn3/P3ikX6EgJe2XDZ1HzheXGIy9RBQldfGMYvBbrGFdnhNGudSZT0FK9C nskJdTUXSjORpeKZGBYL3j5s3jlw8RLvlwGGnkBoyhMisg62OBQsDk9fBGeWwdW/ nv385JAz80RoM5ZvMgepIyGzXMhvDTSwIQjkbLvK+XqppJOSw5NvxAOM6XVi4ddZ CZu6eD8FY1agHNSSm2v0Q1JmIu7gm1tUL3ziMHvn5N0rBckO2WpxCFD4URoi+rpV S260n/U9Hi5QtHzfz+BfSiy9D35H9Qw= -----END CERTIFICATE-----Generated at Mon Mar 2 03:50:03 2026 by rpki-client