$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft File: 475A3BFA09614E07BE0567B1FB15110F45F894EB.mft (raw, json) Hash identifier: Dp425Aq0y/b28HF+V0Tt0EPh+0qgkLaEEZIHgjIC5Ww= Subject key identifier: BF:12:6A:C3:B6:80:A8:82:D9:D6:6A:4C:B5:2C:EB:68:59:B2:2C:D1 Authority key identifier: 47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB Certificate issuer: /CN=475A3BFA09614E07BE0567B1FB15110F45F894EB Certificate serial: 265706D32FBA6728D6D0C9C26B7720BF757C2A71 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft Manifest number: 0257 Signing time: Mon 21 Sep 2026 04:14:06 +0000 Manifest this update: Mon 21 Sep 2026 04:09:06 +0000 Manifest next update: Tue 22 Sep 2026 08:09:06 +0000 Files and hashes: 1: 326130353a646663313a6330303a3a2f34302d3430203d3e20323136313037.roa (hash: GFukpoZMTHuOyKdpxhCEWLRTCpkWdxDZ0EZZSximB54=) 2: 326130353a646663313a393330303a3a2f34302d3430203d3e20323136313037.roa (hash: Xs+sIvX39wrcDJ0C6PsHrcRsnlkL3LVKpC1QcmMP3Gg=) 3: 326130353a646663313a393330303a3a2f34342d3434203d3e203331383938.roa (hash: qXzAtd8D2DJwzcUhLNYNl/tXZOUKVl/yvZK64cjJKyI=) 4: 326130353a646663313a393331303a3a2f34342d3434203d3e203133333335.roa (hash: NpaHG147shGFSkZHPzJpCUsRtcuhxcPetmAYoibuKRg=) 5: 326130353a646663313a393330303a3a2f34342d3434203d3e20323136313037.roa (hash: 1GdKwaiZZMUPaKMrZsRjBpqXP8X/viR8NTU0VBdDiIs=) 6: 326130353a646663313a6366663a3a2f34382d3438203d3e20323136313037.roa (hash: BtQLTTQtkjt+dOkOSbzl625aMHPNaGi50iFnJSKyAXs=) 7: 326130353a646663313a6362313a3a2f34382d3438203d3e20323136313037.roa (hash: ED9T1TH/lLo9n75GsxMUU3iCH+Cefw8ulX1hszJwXAg=) 8: 326130353a646663313a6335333a3a2f34382d3438203d3e20323136313037.roa (hash: wtG4iZDQHopnv5FvmJF0lihSOVqR5JmK37bFpW6CqYo=) 9: 326130353a646663313a6362303a3a2f34382d3438203d3e20323136313037.roa (hash: x8ZSb+1ldH2+HWHNp1OnRRlj5YRqpU3YQDg+aJ7m/zM=) 10: 326130353a646663313a6362323a3a2f34382d3438203d3e20323136313037.roa (hash: sVNK77ext7ZoG9hmscu6oCp8bxY4i1SbymIxi1bKty4=) 11: 475A3BFA09614E07BE0567B1FB15110F45F894EB.crl (hash: 1OK9syrqNxGCwR2PzzTIwd1V1c43/e3DPALcBytsFlw=) 12: 326130353a646663313a6365633a3a2f34382d3438203d3e20323136313037.roa (hash: 4DqS0wfJwZoZ6IfKaEoa21sc0lUetbPH520saQ/lz3Y=) 13: 326130353a646663313a6364333a3a2f34382d3438203d3e20323136313037.roa (hash: EPPNU2N02dspTOT+Qd29+6lRlfOZSF0Kd5muSJ8aZ+4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 08:09:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:57:06:d3:2f:ba:67:28:d6:d0:c9:c2:6b:77:20:bf:75:7c:2a:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=475A3BFA09614E07BE0567B1FB15110F45F894EB Validity Not Before: Sep 21 04:09:06 2026 GMT Not After : Sep 22 08:09:06 2026 GMT Subject: CN=BF126AC3B680A882D9D66A4CB52CEB6859B22CD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:89:22:d0:71:35:3c:67:66:f8:1a:1e:98:be: 1b:cd:0f:96:a4:57:13:42:08:29:27:7d:f7:cc:4e: 70:b3:db:57:8d:d5:b7:95:d0:ee:11:83:7e:99:cf: 3e:cd:c5:5f:f3:03:63:1f:34:00:3a:a1:dc:50:13: bb:e5:9f:24:63:7a:bb:bb:56:98:29:55:66:52:91: a3:35:9b:63:a3:e4:4e:d5:38:13:db:82:43:c3:bf: 70:1b:ba:fb:92:61:69:f7:03:66:df:03:01:5d:17: 97:41:7a:3d:fb:1e:7a:59:5a:6f:68:b5:7e:3d:92: 36:c7:08:58:3b:5c:22:ae:40:42:33:cb:04:9f:a7: f8:ca:73:89:cf:ab:8d:34:c3:b5:b3:ed:69:c4:a1: c4:0d:95:46:3c:e4:4b:a5:d9:d5:09:12:dc:32:59: cf:80:1d:06:ca:6c:c0:94:53:8c:f6:7a:85:a2:68: c1:c4:1a:52:52:97:fb:6d:66:c8:6d:1d:27:7f:4c: 5e:a2:d3:8f:b2:a2:e2:9d:a3:86:bb:c4:b2:7b:60: 64:cc:87:25:f0:a0:db:01:12:b3:d7:25:00:9d:3b: b9:b1:12:f1:76:f9:96:34:f8:02:16:2e:6e:f6:9d: 75:21:e5:26:b9:4b:f1:aa:c9:70:c8:e7:71:12:53: 3b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:12:6A:C3:B6:80:A8:82:D9:D6:6A:4C:B5:2C:EB:68:59:B2:2C:D1 X509v3 Authority Key Identifier: keyid:47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:06:7f:c6:46:64:fd:f8:d8:4b:fc:49:cd:87:18:8c:56:d9: cf:a6:18:2e:d9:31:1b:f7:33:86:41:92:aa:8f:f2:02:c5:46: ed:08:5b:f4:b6:e2:03:64:fa:28:c7:8f:4f:b0:6f:b6:07:c4: 39:ae:59:c2:dc:bb:7f:b6:67:75:2d:c2:b6:56:b2:e5:4e:dc: 9e:4b:d3:c3:44:d2:2d:b5:c3:3d:23:65:ed:30:02:5e:a2:f6: cc:b7:4e:a6:7b:8d:ad:23:be:20:3c:08:06:ff:e5:56:b8:d7: 7b:f6:b6:13:69:0c:66:9c:0e:c6:65:51:e7:4b:ac:43:d0:3b: f4:b9:af:6e:ac:4a:9f:92:46:d6:03:0c:24:24:44:17:2b:b3: 4c:f2:16:06:b2:75:d7:0a:9c:be:7e:e3:40:4b:66:9e:36:48: d2:0b:66:9b:0a:70:78:54:a9:b9:f4:4a:6f:ed:6b:a8:69:d7: 9b:58:d3:76:b9:17:4f:18:25:48:38:25:42:7c:ec:8e:fb:dc: 26:d7:5c:01:b3:57:6c:8a:c8:12:cc:c8:4a:60:45:f7:22:02: 37:9f:5e:10:fb:e8:29:27:55:4f:73:28:e6:20:23:53:4b:69: e6:52:55:ab:2c:e3:62:75:18:70:5b:62:4e:e8:e5:c5:b1:d8: c5:e0:51:eb -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUJlcG0y+6ZyjW0MnCa3cgv3V8KnEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0 NUY4OTRFQjAeFw0yNjA5MjEwNDA5MDZaFw0yNjA5MjIwODA5MDZaMDMxMTAvBgNV BAMTKEJGMTI2QUMzQjY4MEE4ODJEOUQ2NkE0Q0I1MkNFQjY4NTlCMjJDRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSiSLQcTU8Z2b4Gh6YvhvND5ak VxNCCCknfffMTnCz21eN1beV0O4Rg36Zzz7NxV/zA2MfNAA6odxQE7vlnyRjeru7 VpgpVWZSkaM1m2Oj5E7VOBPbgkPDv3AbuvuSYWn3A2bfAwFdF5dBej37HnpZWm9o tX49kjbHCFg7XCKuQEIzywSfp/jKc4nPq400w7Wz7WnEocQNlUY85Eul2dUJEtwy Wc+AHQbKbMCUU4z2eoWiaMHEGlJSl/ttZshtHSd/TF6i04+youKdo4a7xLJ7YGTM hyXwoNsBErPXJQCdO7mxEvF2+ZY0+AIWLm72nXUh5Sa5S/GqyXDI53ESUzsfAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUvxJqw7aAqILZ1mpMtSzraFmyLNEwHwYDVR0j BBgwFoAUR1o7+glhTge+BWex+xURD0X4lOswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5 MjQzLzIvNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0NUY4OTRFQi5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzQ3NUEzQkZBMDk2MTRF MDdCRTA1NjdCMUZCMTUxMTBGNDVGODk0RUIuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5MjQz LzIvNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0NUY4OTRFQi5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAGEGf8ZGZP342Ev8Sc2HGIxW2c+mGC7ZMRv3M4ZBkqqP8gLFRu0IW/S2 4gNk+ijHj0+wb7YHxDmuWcLcu3+2Z3UtwrZWsuVO3J5L08NE0i21wz0jZe0wAl6i 9sy3TqZ7ja0jviA8CAb/5Va413v2thNpDGacDsZlUedLrEPQO/S5r26sSp+SRtYD DCQkRBcrs0zyFgayddcKnL5+40BLZp42SNILZpsKcHhUqbn0Sm/ta6hp15tY03a5 F08YJUg4JUJ87I773CbXXAGzV2yKyBLMyEpgRfciAjefXhD76CknVU9zKOYgI1NL aeZSVass42J1GHBbYk7o5cWx2MXgUes= -----END CERTIFICATE-----Generated at Mon Sep 21 16:08:14 2026 by rpki-client