$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft File: 475A3BFA09614E07BE0567B1FB15110F45F894EB.mft (raw, json) Hash identifier: Edg51aw6vPKE41Ck5KAEpsvbcXG+1PN/UM468m96Tjk= Subject key identifier: DB:32:34:07:E2:1E:30:7E:A0:71:81:8D:FD:3C:8F:57:09:CD:FB:28 Authority key identifier: 47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB Certificate issuer: /CN=475A3BFA09614E07BE0567B1FB15110F45F894EB Certificate serial: 26D37C1047DCCF401DEA7DB0277D2C83F2515053 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft Manifest number: AC Signing time: Thu 06 Nov 2025 04:48:29 +0000 Manifest this update: Thu 06 Nov 2025 04:43:29 +0000 Manifest next update: Fri 07 Nov 2025 07:24:29 +0000 Files and hashes: 1: 326130353a646663313a393330303a3a2f34342d3434203d3e20323136313037.roa (hash: b1jW0QtrvfNFuku7DA8T3pdCcJ7XdV69DcuFmLfePdg=) 2: 326130353a646663313a6362313a3a2f34382d3438203d3e20323136313037.roa (hash: WZ3tMlR+p69xUFvcw4oOqLvG3hqJQ0raLNlYbt2cGEc=) 3: 475A3BFA09614E07BE0567B1FB15110F45F894EB.crl (hash: 7/zDiQ/hM5B7rI9l6bFy/LZse2C/C7FafTkvCjdrh7U=) 4: 326130353a646663313a6330303a3a2f34382d3438203d3e20323136313037.roa (hash: 5amhvkzdMSmYntVfhhxA2srjGLuE63R2mmWtiqhM60M=) 5: 326130353a646663313a6364343a3a2f34382d3438203d3e20323136313037.roa (hash: 2ES+J57q5FxV7Pycn6PA/TfkwXqGSDCB0siCI9Kqtao=) 6: 326130353a646663313a6365633a3a2f34382d3438203d3e20323136313037.roa (hash: MFLgGeiRY5J6V0wqCJ/2rdwCHyoz1yTGoDCT9u80ZPw=) 7: 326130353a646663313a6330303a3a2f34302d3430203d3e20323136313037.roa (hash: 9b+nfoajFujLj061BrSCfi4FwI9kDrVZ+olcCoR5UBc=) 8: 326130353a646663313a6364333a3a2f34382d3438203d3e20323136313037.roa (hash: ODgMOPEtFM31kytaPhS/kNBKt+7tRnGYNverVN9W6GI=) 9: 326130353a646663313a6335333a3a2f34382d3438203d3e20323136313037.roa (hash: XlFjiMGdniXiBH8ber/zerQJr2bnSRJJJo5igygAomc=) 10: 326130353a646663313a6362303a3a2f34382d3438203d3e20323136313037.roa (hash: HPSZ8Ao1IB3lH1ZuFzdnyKg2mh86+6wWsN1VfrbgtjA=) 11: 326130353a646663313a6362323a3a2f34382d3438203d3e20323136313037.roa (hash: mOPodk1SWfoVUqjkHG3wmAu+HNRka8LJZu4TU08ixz0=) 12: 326130353a646663313a6364303a3a2f34382d3438203d3e20323136313037.roa (hash: cn9YZ8FYaC+Hri9dzrV5iV712LMhxO/a5ltgIPBkcMo=) 13: 326130353a646663313a393330303a3a2f34342d3434203d3e203331383938.roa (hash: /0mHwxj5X080MYjliBUs92u8/GLNUuIoeMzbhIBfk0Y=) 14: 326130353a646663313a393330303a3a2f34302d3430203d3e20323136313037.roa (hash: O9HdFgkDLSDurxDqFkNzKefyLVSHYP5RZwYF9ccBE70=) 15: 326130353a646663313a6366663a3a2f34382d3438203d3e20323136313037.roa (hash: aBc+3q0F9+NwnnOKXQsziJcSflKCPcTqnJDYXx6ReGE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 14:47:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:d3:7c:10:47:dc:cf:40:1d:ea:7d:b0:27:7d:2c:83:f2:51:50:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=475A3BFA09614E07BE0567B1FB15110F45F894EB Validity Not Before: Nov 6 04:43:29 2025 GMT Not After : Nov 7 07:24:29 2025 GMT Subject: CN=DB323407E21E307EA071818DFD3C8F5709CDFB28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2a:58:b9:13:14:0d:09:a4:bc:77:58:75:62: 63:36:59:2c:7f:38:2f:8b:78:d3:c6:cb:00:d1:ad: d7:2b:b9:5a:d3:d9:74:52:ab:d6:08:36:e8:fa:77: b4:7d:af:46:e4:e3:12:3b:92:36:de:41:85:44:a1: d6:15:d7:99:d6:65:bb:29:79:36:00:a3:b6:60:84: ca:74:0e:6d:35:9b:02:37:f2:c8:8e:14:06:d0:0d: c0:f5:24:65:d2:77:63:ac:29:08:e8:f1:c7:3e:64: 8a:59:70:1c:03:fc:76:0d:45:e9:cf:b4:6a:65:49: ba:f4:74:32:c2:62:a7:fe:1a:49:09:69:c4:09:21: 7c:62:bc:82:38:32:f1:1d:d3:c5:66:07:a9:88:ea: 91:b5:2e:70:25:83:45:88:f9:a2:72:3c:2c:71:8d: f8:25:56:2a:55:10:c3:7f:f3:09:83:50:30:26:67: f7:96:c8:4c:10:dc:1d:a3:85:03:ab:be:87:21:e6: e6:4c:63:a9:fc:91:13:21:33:e9:02:0f:a5:be:06: 25:c9:44:1f:e3:c7:8c:47:3c:0e:42:26:41:6c:e0: 65:32:f5:30:dc:79:1f:39:b2:92:2d:21:9d:ba:ed: ba:aa:67:18:77:0b:1f:93:f7:a8:5d:f5:da:b1:90: ff:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:32:34:07:E2:1E:30:7E:A0:71:81:8D:FD:3C:8F:57:09:CD:FB:28 X509v3 Authority Key Identifier: keyid:47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:db:bb:1e:eb:cb:02:02:cd:dd:94:f6:8e:ca:44:ae:c0:25: b2:f3:f5:e7:09:59:e7:4a:e4:7a:46:7d:48:12:38:7b:91:0d: 15:07:b5:b8:44:5e:35:f6:e4:0f:14:e0:75:7b:d7:94:b6:88: 53:7f:a0:97:d8:74:6f:c4:19:01:8c:c2:3c:c1:af:09:46:dc: d3:b0:a6:05:37:0c:7e:14:fa:96:39:ff:3f:9e:ad:91:11:8f: ec:89:dd:43:29:da:e1:57:f6:07:85:93:3e:fa:0b:85:7f:31: 4c:f1:4b:d9:ff:b4:13:95:0c:19:67:11:cb:65:27:9b:1a:f8: b8:0e:10:b6:d8:cb:9c:77:7a:39:11:2f:2c:73:31:f9:b6:30: e1:a3:e4:6f:c5:6a:99:59:b8:7b:94:54:3e:8c:21:eb:13:ee: b3:41:b8:d4:9a:aa:cb:ce:d4:60:66:89:5e:f8:82:42:98:20: 73:20:49:eb:88:17:9c:f0:7d:1d:59:fe:de:df:fe:ca:c2:52: d5:cb:88:8e:3f:33:ab:a7:34:2a:bd:c2:6a:b2:57:c9:28:4e: 8f:b8:18:08:f5:5a:26:bc:c4:49:27:93:ed:2a:a5:bc:06:f5: 8f:42:ad:a0:11:09:f2:ff:52:1d:6e:6a:86:68:2e:b9:ba:2a: 34:cf:91:0f -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUJtN8EEfcz0Ad6n2wJ30sg/JRUFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0 NUY4OTRFQjAeFw0yNTExMDYwNDQzMjlaFw0yNTExMDcwNzI0MjlaMDMxMTAvBgNV BAMTKERCMzIzNDA3RTIxRTMwN0VBMDcxODE4REZEM0M4RjU3MDlDREZCMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJKli5ExQNCaS8d1h1YmM2WSx/ OC+LeNPGywDRrdcruVrT2XRSq9YINuj6d7R9r0bk4xI7kjbeQYVEodYV15nWZbsp eTYAo7ZghMp0Dm01mwI38siOFAbQDcD1JGXSd2OsKQjo8cc+ZIpZcBwD/HYNRenP tGplSbr0dDLCYqf+GkkJacQJIXxivII4MvEd08VmB6mI6pG1LnAlg0WI+aJyPCxx jfglVipVEMN/8wmDUDAmZ/eWyEwQ3B2jhQOrvoch5uZMY6n8kRMhM+kCD6W+BiXJ RB/jx4xHPA5CJkFs4GUy9TDceR85spItIZ267bqqZxh3Cx+T96hd9dqxkP/pAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQU2zI0B+IeMH6gcYGN/TyPVwnN+ygwHwYDVR0j BBgwFoAUR1o7+glhTge+BWex+xURD0X4lOswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5 MjQzLzIvNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0NUY4OTRFQi5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzQ3NUEzQkZBMDk2MTRF MDdCRTA1NjdCMUZCMTUxMTBGNDVGODk0RUIuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5MjQz LzIvNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0NUY4OTRFQi5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBANzbux7rywICzd2U9o7KRK7AJbLz9ecJWedK5HpGfUgSOHuRDRUHtbhE XjX25A8U4HV715S2iFN/oJfYdG/EGQGMwjzBrwlG3NOwpgU3DH4U+pY5/z+erZER j+yJ3UMp2uFX9geFkz76C4V/MUzxS9n/tBOVDBlnEctlJ5sa+LgOELbYy5x3ejkR LyxzMfm2MOGj5G/FaplZuHuUVD6MIesT7rNBuNSaqsvO1GBmiV74gkKYIHMgSeuI F5zwfR1Z/t7f/srCUtXLiI4/M6unNCq9wmqyV8koTo+4GAj1Wia8xEknk+0qpbwG 9Y9CraARCfL/Uh1uaoZoLrm6KjTPkQ8= -----END CERTIFICATE-----Generated at Thu Nov 6 06:08:26 2025 by rpki-client