$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft File: 547F71C62763A22A9156089F2F55B587337FAFCB.mft (raw, json) Hash identifier: f4wlaCtsz2YpFgX0035YqrJSn0Vm/8nKJqXkTeB+Ij8= Subject key identifier: D3:B1:D4:79:E3:C0:F9:3D:F0:1D:45:EA:73:62:B4:87:67:2C:4D:E8 Authority key identifier: 54:7F:71:C6:27:63:A2:2A:91:56:08:9F:2F:55:B5:87:33:7F:AF:CB Certificate issuer: /CN=547F71C62763A22A9156089F2F55B587337FAFCB Certificate serial: 4B671C20FF873BBD0ECA0F0385810625D9EF99CB Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft Manifest number: 2B Signing time: Tue 05 Aug 2025 04:44:31 +0000 Manifest this update: Tue 05 Aug 2025 04:39:31 +0000 Manifest next update: Wed 06 Aug 2025 06:33:31 +0000 Files and hashes: 1: 326130613a363034303a353430303a3a2f34302d3438203d3e20323030313739.roa (hash: YVenbTOqKe9MEXa6/fOG09XMak323Qg3KMUQzchdB9c=) 2: 326130353a646663313a393530303a3a2f34302d3438203d3e20323030313739.roa (hash: RxLo4AdqJDnPZQyih2dN7gCzOdUFOGixnoLv2pmTlM8=) 3: 326130613a363034303a343930303a3a2f34302d3438203d3e20323030313739.roa (hash: E7vQShgXOvBH1q/A8kYfwNTbOyQSM9xRkA+S+5IF33A=) 4: 326130613a363034303a353430303a3a2f34302d3438203d3e20323032323031.roa (hash: 6pzPl1CKzXGYp4EVxRXIn1wg4oABaAK4CCBHYDSxxpU=) 5: 547F71C62763A22A9156089F2F55B587337FAFCB.crl (hash: RyVpoyuGGKxr5RIwGUd5CYtr769DGzFVDQkAaLd/A7c=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.crl rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 22:05:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:67:1c:20:ff:87:3b:bd:0e:ca:0f:03:85:81:06:25:d9:ef:99:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=547F71C62763A22A9156089F2F55B587337FAFCB Validity Not Before: Aug 5 04:39:31 2025 GMT Not After : Aug 6 06:33:31 2025 GMT Subject: CN=D3B1D479E3C0F93DF01D45EA7362B487672C4DE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b1:c8:74:cf:ad:db:1e:6c:18:9f:10:b7:d6: f0:f7:24:67:aa:df:c3:93:5b:3c:d7:07:0b:b8:4f: 08:6c:af:f5:ab:b8:d4:f1:17:94:6e:0d:b3:9a:1e: e6:67:12:43:3a:21:95:fe:6c:65:b4:2d:b2:7c:5f: 62:33:26:78:07:98:79:ed:36:01:86:45:70:cf:b0: 40:5c:02:6e:05:74:2a:96:1a:32:ae:92:bd:42:0f: 60:b9:0f:47:c1:33:78:99:2b:81:f9:8a:a7:ac:be: ec:f8:a3:8d:43:b7:bd:77:fd:87:bb:a8:ee:2d:06: ce:6d:41:15:14:75:24:c0:80:85:74:33:2a:fa:97: 86:b6:e5:bb:fd:f3:aa:14:e1:55:8a:71:8d:61:fd: fb:0a:88:c0:0c:76:51:6c:bd:1f:27:81:41:27:30: a8:aa:76:64:02:da:c4:00:ce:c5:f5:6f:19:a6:6f: da:77:49:0b:1a:a6:c8:dd:24:97:a0:a6:95:f9:8b: 92:37:f4:de:7d:4c:5b:86:cd:ec:4a:ee:0a:80:c1: 9f:6f:d1:26:94:1c:f6:bd:3f:53:19:ab:58:f8:4a: 39:56:1c:4d:47:82:eb:9e:1e:c7:18:0f:c3:69:04: 12:0f:be:5d:04:a0:5e:3a:08:5a:85:91:47:39:c8: 78:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:B1:D4:79:E3:C0:F9:3D:F0:1D:45:EA:73:62:B4:87:67:2C:4D:E8 X509v3 Authority Key Identifier: keyid:54:7F:71:C6:27:63:A2:2A:91:56:08:9F:2F:55:B5:87:33:7F:AF:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:3c:06:8c:e8:c1:65:ad:af:80:80:21:78:cb:be:7d:43:03: 94:bb:68:4e:9e:26:1d:9d:6b:81:d2:f6:94:0a:52:c7:43:2d: f1:da:06:af:84:f5:9f:49:fd:5d:9c:b2:1e:c2:48:b1:ad:60: b6:46:05:2b:6a:04:f0:4b:93:81:4b:4e:55:3d:a5:8c:3d:03: 4d:9c:51:42:25:fd:3d:a5:32:d0:c5:00:41:2a:99:51:76:34: d8:d3:91:9b:ca:7d:a1:1a:a5:3d:8d:4d:12:65:64:d3:43:43: 7e:72:9a:24:7c:82:0e:37:22:d6:f9:5b:33:c6:4e:04:7f:29: 69:0c:b1:59:06:56:aa:3a:a1:31:4f:93:32:36:66:73:0d:c5: ac:40:8c:15:0b:92:4f:24:f2:b5:a3:47:fa:d5:5c:d9:71:c3: bb:cb:69:b2:1a:a7:6b:c8:56:92:70:62:78:d2:6e:c1:c7:31: fa:2f:ed:5e:f7:65:25:6c:95:5a:de:f7:5b:55:7a:79:0c:0f: a8:c3:27:c0:f9:b4:be:47:c8:f5:fb:b8:b6:c9:55:c1:b6:31: 38:8c:14:8a:ea:03:fc:41:ee:d1:80:9d:92:5d:c8:a7:ed:9d: ee:6f:27:e6:b2:00:ef:9e:46:b2:3c:3c:5c:cf:fb:ed:d7:2a: a7:56:d3:4b -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUS2ccIP+HO70Oyg8DhYEGJdnvmcswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQ3RjcxQzYyNzYzQTIyQTkxNTYwODlGMkY1NUI1ODcz MzdGQUZDQjAeFw0yNTA4MDUwNDM5MzFaFw0yNTA4MDYwNjMzMzFaMDMxMTAvBgNV BAMTKEQzQjFENDc5RTNDMEY5M0RGMDFENDVFQTczNjJCNDg3NjcyQzRERTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNsch0z63bHmwYnxC31vD3JGeq 38OTWzzXBwu4Twhsr/WruNTxF5RuDbOaHuZnEkM6IZX+bGW0LbJ8X2IzJngHmHnt NgGGRXDPsEBcAm4FdCqWGjKukr1CD2C5D0fBM3iZK4H5iqesvuz4o41Dt713/Ye7 qO4tBs5tQRUUdSTAgIV0Myr6l4a25bv986oU4VWKcY1h/fsKiMAMdlFsvR8ngUEn MKiqdmQC2sQAzsX1bxmmb9p3SQsapsjdJJegppX5i5I39N59TFuGzexK7gqAwZ9v 0SaUHPa9P1MZq1j4SjlWHE1HguueHscYD8NpBBIPvl0EoF46CFqFkUc5yHgVAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQU07HUeePA+T3wHUXqc2K0h2csTegwHwYDVR0j BBgwFoAUVH9xxidjoiqRVgifL1W1hzN/r8swDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDE3OTFhNjQtYTM2YS00ZWI5LWE2ZmYtZTFjNDA3OGE3 Y2EzLzEvNTQ3RjcxQzYyNzYzQTIyQTkxNTYwODlGMkY1NUI1ODczMzdGQUZDQi5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzU0N0Y3MUM2Mjc2M0Ey MkE5MTU2MDg5RjJGNTVCNTg3MzM3RkFGQ0IuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMDE3OTFhNjQtYTM2YS00ZWI5LWE2ZmYtZTFjNDA3OGE3Y2Ez LzEvNTQ3RjcxQzYyNzYzQTIyQTkxNTYwODlGMkY1NUI1ODczMzdGQUZDQi5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAG08BozowWWtr4CAIXjLvn1DA5S7aE6eJh2da4HS9pQKUsdDLfHaBq+E 9Z9J/V2csh7CSLGtYLZGBStqBPBLk4FLTlU9pYw9A02cUUIl/T2lMtDFAEEqmVF2 NNjTkZvKfaEapT2NTRJlZNNDQ35ymiR8gg43Itb5WzPGTgR/KWkMsVkGVqo6oTFP kzI2ZnMNxaxAjBULkk8k8rWjR/rVXNlxw7vLabIap2vIVpJwYnjSbsHHMfov7V73 ZSVslVre91tVenkMD6jDJ8D5tL5HyPX7uLbJVcG2MTiMFIrqA/xB7tGAnZJdyKft ne5vJ+ayAO+eRrI8PFzP++3XKqdW00s= -----END CERTIFICATE-----Generated at Tue Aug 5 08:18:35 2025 by rpki-client