$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft File: 475A3BFA09614E07BE0567B1FB15110F45F894EB.mft (raw, json) Hash identifier: +ru2oy0X6/ae/ENFKIFRHfs9zIxH9FO7Engy0Pzo/xU= Subject key identifier: C9:A6:75:94:6D:EB:44:E5:C4:02:6E:C6:64:FF:D2:F4:0A:3B:45:5C Authority key identifier: 47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB Certificate issuer: /CN=475A3BFA09614E07BE0567B1FB15110F45F894EB Certificate serial: 298BD40D34783970B60B3475F62FAC2867AE13EE Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft Manifest number: 2D Signing time: Wed 06 Aug 2025 07:00:50 +0000 Manifest this update: Wed 06 Aug 2025 06:55:50 +0000 Manifest next update: Thu 07 Aug 2025 08:05:50 +0000 Files and hashes: 1: 326130353a646663313a6366663a3a2f34382d3438203d3e20323136313037.roa (hash: aBc+3q0F9+NwnnOKXQsziJcSflKCPcTqnJDYXx6ReGE=) 2: 326130353a646663313a6362313a3a2f34382d3438203d3e20323136313037.roa (hash: WZ3tMlR+p69xUFvcw4oOqLvG3hqJQ0raLNlYbt2cGEc=) 3: 326130353a646663313a6365633a3a2f34382d3438203d3e20323136313037.roa (hash: MFLgGeiRY5J6V0wqCJ/2rdwCHyoz1yTGoDCT9u80ZPw=) 4: 326130353a646663313a393330303a3a2f34302d3430203d3e20323136313037.roa (hash: O9HdFgkDLSDurxDqFkNzKefyLVSHYP5RZwYF9ccBE70=) 5: 326130353a646663313a6364303a3a2f34382d3438203d3e20323136313037.roa (hash: cn9YZ8FYaC+Hri9dzrV5iV712LMhxO/a5ltgIPBkcMo=) 6: 326130353a646663313a6364313a3a2f34382d3438203d3e20323136313037.roa (hash: wOFC9QI8GelsG8geVBZYw7NXSrIqNI+SPY2auPGgaCQ=) 7: 326130353a646663313a6362323a3a2f34382d3438203d3e20323136313037.roa (hash: mOPodk1SWfoVUqjkHG3wmAu+HNRka8LJZu4TU08ixz0=) 8: 326130353a646663313a6364333a3a2f34382d3438203d3e20323136313037.roa (hash: ODgMOPEtFM31kytaPhS/kNBKt+7tRnGYNverVN9W6GI=) 9: 326130353a646663313a6330303a3a2f34302d3430203d3e20323136313037.roa (hash: 9b+nfoajFujLj061BrSCfi4FwI9kDrVZ+olcCoR5UBc=) 10: 326130353a646663313a6364323a3a2f34382d3438203d3e20323136313037.roa (hash: uTe3RpuC5xHTpbzhstyrLed5Fn2IO9mhtG4WFqEyr0c=) 11: 326130353a646663313a6335333a3a2f34382d3438203d3e20323136313037.roa (hash: XlFjiMGdniXiBH8ber/zerQJr2bnSRJJJo5igygAomc=) 12: 326130353a646663313a6330303a3a2f34382d3438203d3e20323136313037.roa (hash: 5amhvkzdMSmYntVfhhxA2srjGLuE63R2mmWtiqhM60M=) 13: 475A3BFA09614E07BE0567B1FB15110F45F894EB.crl (hash: cYX/aooBYPctF6B6T+2hjlSFfoouQLj2WzXGFmeQb+A=) 14: 326130353a646663313a6362303a3a2f34382d3438203d3e20323136313037.roa (hash: HPSZ8Ao1IB3lH1ZuFzdnyKg2mh86+6wWsN1VfrbgtjA=) 15: 326130353a646663313a6364343a3a2f34382d3438203d3e20323136313037.roa (hash: 2ES+J57q5FxV7Pycn6PA/TfkwXqGSDCB0siCI9Kqtao=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 Aug 2025 02:53:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:8b:d4:0d:34:78:39:70:b6:0b:34:75:f6:2f:ac:28:67:ae:13:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=475A3BFA09614E07BE0567B1FB15110F45F894EB Validity Not Before: Aug 6 06:55:50 2025 GMT Not After : Aug 7 08:05:50 2025 GMT Subject: CN=C9A675946DEB44E5C4026EC664FFD2F40A3B455C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b2:3d:a2:c6:9d:e3:c6:ff:6c:88:5b:e1:7f: e6:ad:28:e3:f1:65:d8:50:a4:12:3d:ee:ae:75:4d: db:97:3f:50:4a:09:a3:99:4f:5d:36:7e:ef:9c:a2: 7f:b6:25:4a:37:76:d3:77:a6:7d:60:ee:bc:2e:0c: 17:67:f4:eb:ef:e3:65:8f:29:a7:9c:38:60:e1:87: 11:19:e0:91:88:bc:52:77:35:18:59:80:d0:ec:51: e2:ed:4a:f5:a9:52:d8:33:42:22:78:50:ee:0d:e9: b9:3a:dc:62:71:1c:d7:e1:87:de:8c:c9:e4:9f:64: 4d:ca:6c:d5:68:ea:f6:15:af:d1:fe:21:12:97:88: fe:9a:69:70:73:f9:fa:dc:e4:73:dc:8e:ed:7a:76: 78:87:8a:27:31:17:94:f6:7b:09:d2:77:62:95:e6: b1:ce:ff:53:dd:19:6d:e5:8a:f0:00:45:1e:b6:83: 59:7d:96:9f:bf:f6:91:02:fc:a9:63:d1:0d:0a:74: 71:8d:e8:33:03:4e:cd:3d:25:72:6d:f2:f5:69:c1: 31:c3:db:61:ed:3c:e2:39:e6:5d:c2:53:d2:7b:45: 90:40:e1:c3:d6:0f:1f:bf:65:40:b2:3e:9e:ae:e1: 01:ef:21:4a:cf:f8:0a:ba:29:6e:14:fa:0d:83:9f: ab:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:A6:75:94:6D:EB:44:E5:C4:02:6E:C6:64:FF:D2:F4:0A:3B:45:5C X509v3 Authority Key Identifier: keyid:47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:67:c9:2c:36:cb:a3:a8:f1:c1:c0:7e:bb:f0:07:54:33:28: 32:28:89:06:58:7f:1f:75:bb:d5:38:cc:e5:ba:c5:90:52:24: d2:d1:f1:47:f4:86:c0:5c:f1:e8:20:d3:d6:6e:b7:b8:1c:10: c7:58:11:d5:7b:02:9e:b3:43:5f:6d:38:a8:fb:bf:a1:9a:d9: 46:c1:52:24:e3:b1:2c:ef:cb:be:41:98:8f:b4:04:ee:44:fc: d1:6a:d7:43:33:a4:b2:6b:ac:0f:6b:a0:9d:15:d7:cc:a5:ac: 76:2c:70:ac:43:50:a3:b0:23:5e:69:c9:6f:13:ab:be:9b:da: 3f:bf:d1:cd:89:d4:5d:06:20:39:9f:c3:a8:92:df:3f:b4:ce: 3b:9e:2b:ee:7a:01:4a:c0:5f:63:59:44:8d:ba:b0:34:e9:e0: 10:16:8d:fa:ea:78:6d:52:b2:6f:49:43:fd:87:b8:31:e9:41: da:1a:ab:6f:58:c6:61:32:ad:ec:a9:b2:ee:ef:bb:65:ae:44: ad:ed:3c:9a:de:39:96:c0:7a:1d:77:0c:bf:5c:25:59:3a:eb: 8b:11:9a:ee:db:b0:8a:0a:45:23:ce:4d:93:e1:b5:45:82:92: 4e:d3:93:02:97:63:91:44:18:3e:e8:e8:0e:f7:57:26:d2:38: 47:a3:10:31 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUKYvUDTR4OXC2CzR19i+sKGeuE+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0 NUY4OTRFQjAeFw0yNTA4MDYwNjU1NTBaFw0yNTA4MDcwODA1NTBaMDMxMTAvBgNV BAMTKEM5QTY3NTk0NkRFQjQ0RTVDNDAyNkVDNjY0RkZEMkY0MEEzQjQ1NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCysj2ixp3jxv9siFvhf+atKOPx ZdhQpBI97q51TduXP1BKCaOZT102fu+con+2JUo3dtN3pn1g7rwuDBdn9Ovv42WP KaecOGDhhxEZ4JGIvFJ3NRhZgNDsUeLtSvWpUtgzQiJ4UO4N6bk63GJxHNfhh96M yeSfZE3KbNVo6vYVr9H+IRKXiP6aaXBz+frc5HPcju16dniHiicxF5T2ewnSd2KV 5rHO/1PdGW3livAARR62g1l9lp+/9pEC/Klj0Q0KdHGN6DMDTs09JXJt8vVpwTHD 22HtPOI55l3CU9J7RZBA4cPWDx+/ZUCyPp6u4QHvIUrP+Aq6KW4U+g2Dn6vLAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUyaZ1lG3rROXEAm7GZP/S9Ao7RVwwHwYDVR0j BBgwFoAUR1o7+glhTge+BWex+xURD0X4lOswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5 MjQzLzIvNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0NUY4OTRFQi5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzQ3NUEzQkZBMDk2MTRF MDdCRTA1NjdCMUZCMTUxMTBGNDVGODk0RUIuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5MjQz LzIvNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0NUY4OTRFQi5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBADhnySw2y6Oo8cHAfrvwB1QzKDIoiQZYfx91u9U4zOW6xZBSJNLR8Uf0 hsBc8egg09Zut7gcEMdYEdV7Ap6zQ19tOKj7v6Ga2UbBUiTjsSzvy75BmI+0BO5E /NFq10MzpLJrrA9roJ0V18ylrHYscKxDUKOwI15pyW8Tq76b2j+/0c2J1F0GIDmf w6iS3z+0zjueK+56AUrAX2NZRI26sDTp4BAWjfrqeG1Ssm9JQ/2HuDHpQdoaq29Y xmEyreypsu7vu2WuRK3tPJreOZbAeh13DL9cJVk664sRmu7bsIoKRSPOTZPhtUWC kk7TkwKXY5FEGD7o6A73VybSOEejEDE= -----END CERTIFICATE-----Generated at Wed Aug 6 14:11:54 2025 by rpki-client