$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft File: 475A3BFA09614E07BE0567B1FB15110F45F894EB.mft (raw, json) Hash identifier: myu4Mrmsu7pjDuW5kmSXbTteH3LlT74okMc1jswEWzQ= Subject key identifier: 51:4C:CB:E8:7D:C8:D4:78:67:E1:F5:C8:4C:87:19:5A:14:B6:91:91 Authority key identifier: 47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB Certificate issuer: /CN=475A3BFA09614E07BE0567B1FB15110F45F894EB Certificate serial: 06E7255B88B5CAAED15D28CD0C851FEFF2F6C3A5 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft Manifest number: 020D Signing time: Tue 28 Jul 2026 00:58:38 +0000 Manifest this update: Tue 28 Jul 2026 00:53:38 +0000 Manifest next update: Wed 29 Jul 2026 04:04:38 +0000 Files and hashes: 1: 326130353a646663313a6366663a3a2f34382d3438203d3e20323136313037.roa (hash: BtQLTTQtkjt+dOkOSbzl625aMHPNaGi50iFnJSKyAXs=) 2: 475A3BFA09614E07BE0567B1FB15110F45F894EB.crl (hash: aYHJiKE/aRr9YP3dUxiBDcIvWYOJQPx0yLB9vzKDnqo=) 3: 326130353a646663313a6330303a3a2f34302d3430203d3e20323136313037.roa (hash: GFukpoZMTHuOyKdpxhCEWLRTCpkWdxDZ0EZZSximB54=) 4: 326130353a646663313a6362303a3a2f34382d3438203d3e20323136313037.roa (hash: x8ZSb+1ldH2+HWHNp1OnRRlj5YRqpU3YQDg+aJ7m/zM=) 5: 326130353a646663313a6362313a3a2f34382d3438203d3e20323136313037.roa (hash: ED9T1TH/lLo9n75GsxMUU3iCH+Cefw8ulX1hszJwXAg=) 6: 326130353a646663313a6365633a3a2f34382d3438203d3e20323136313037.roa (hash: 4DqS0wfJwZoZ6IfKaEoa21sc0lUetbPH520saQ/lz3Y=) 7: 326130353a646663313a6335333a3a2f34382d3438203d3e20323136313037.roa (hash: wtG4iZDQHopnv5FvmJF0lihSOVqR5JmK37bFpW6CqYo=) 8: 326130353a646663313a393331303a3a2f34342d3434203d3e203133333335.roa (hash: NpaHG147shGFSkZHPzJpCUsRtcuhxcPetmAYoibuKRg=) 9: 326130353a646663313a393330303a3a2f34302d3430203d3e20323136313037.roa (hash: Xs+sIvX39wrcDJ0C6PsHrcRsnlkL3LVKpC1QcmMP3Gg=) 10: 326130353a646663313a393330303a3a2f34342d3434203d3e203331383938.roa (hash: /0mHwxj5X080MYjliBUs92u8/GLNUuIoeMzbhIBfk0Y=) 11: 326130353a646663313a6364333a3a2f34382d3438203d3e20323136313037.roa (hash: EPPNU2N02dspTOT+Qd29+6lRlfOZSF0Kd5muSJ8aZ+4=) 12: 326130353a646663313a393330303a3a2f34342d3434203d3e20323136313037.roa (hash: b1jW0QtrvfNFuku7DA8T3pdCcJ7XdV69DcuFmLfePdg=) 13: 326130353a646663313a6362323a3a2f34382d3438203d3e20323136313037.roa (hash: sVNK77ext7ZoG9hmscu6oCp8bxY4i1SbymIxi1bKty4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 04:04:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:e7:25:5b:88:b5:ca:ae:d1:5d:28:cd:0c:85:1f:ef:f2:f6:c3:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=475A3BFA09614E07BE0567B1FB15110F45F894EB Validity Not Before: Jul 28 00:53:38 2026 GMT Not After : Jul 29 04:04:38 2026 GMT Subject: CN=514CCBE87DC8D47867E1F5C84C87195A14B69191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:da:64:bb:76:f9:b6:c7:07:f9:d4:47:ce:d9: 93:d1:6e:d8:52:ba:ea:d7:cb:3d:b3:ba:af:c8:e9: 41:2b:12:d7:12:2b:89:48:bc:d1:fd:6a:e2:bd:1b: 3e:28:6f:98:14:c7:81:e0:3a:16:62:0d:0d:35:6a: 05:7f:e0:5c:62:41:20:58:ca:03:1e:18:a8:f3:9f: dc:fe:54:45:08:9b:a3:2c:0e:85:17:34:0c:cd:ca: 77:a2:ae:2f:ce:f8:1a:dd:e1:9c:10:e8:97:08:4d: fe:23:45:af:66:10:aa:a7:72:04:ee:be:b7:e5:e2: 93:fd:98:69:5f:52:79:57:15:f0:78:e1:62:8f:19: af:cd:70:32:3d:29:8a:6f:5f:4b:0b:08:eb:ff:9a: 73:19:68:81:d0:2b:ca:b8:7f:27:2b:89:3a:81:b1: f6:2b:42:5a:66:bf:ff:a3:2b:c5:f5:c9:23:ad:ea: a1:a8:95:ae:f9:bf:9f:37:47:73:38:96:4f:37:df: 70:42:0e:ab:d9:86:59:7f:d1:d3:0a:db:db:59:6e: cf:f3:aa:90:50:a2:4d:3b:b3:0d:04:55:0e:ad:5d: de:24:00:c5:e9:0b:2e:d7:4b:13:d7:37:7e:dc:0a: 32:57:0c:25:89:f2:71:47:c6:10:ea:8b:af:96:19: f8:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:4C:CB:E8:7D:C8:D4:78:67:E1:F5:C8:4C:87:19:5A:14:B6:91:91 X509v3 Authority Key Identifier: keyid:47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:9c:ba:71:cf:97:df:3e:7f:29:d0:8e:c6:a2:1d:1a:e4:78: 9e:bc:60:7d:d0:33:3e:03:4b:73:c6:7c:a3:40:fd:25:c0:aa: fc:ec:64:b6:c2:59:98:2e:48:93:af:fa:74:d7:13:0e:b9:34: a5:a4:5b:74:81:42:85:4c:1e:f3:c8:4b:2a:c0:de:79:32:ba: 5d:8b:02:5d:79:47:05:a7:c9:4d:60:a7:b4:5a:65:0e:2d:0e: 94:7a:06:22:77:16:c8:73:96:2c:a4:12:c0:9a:f1:04:59:05: 5e:e5:75:95:3a:eb:60:ab:b1:01:0f:ac:2b:cd:1c:c0:de:d0: 33:09:7f:39:5e:67:6b:ad:61:56:68:2d:be:57:a3:4f:7f:c4: a5:cf:da:08:eb:fd:28:06:3e:9c:51:62:b5:bb:9d:c5:44:92: 38:7e:22:ee:18:91:f0:bf:8c:63:03:94:0a:88:f3:e3:4b:2d: 68:9c:e3:32:28:1f:ab:93:3a:d1:a6:90:5a:32:49:1e:d6:5e: 5e:9a:54:10:58:69:fc:61:f9:7f:04:af:ea:06:2d:31:c3:db: 75:e1:4e:2c:ec:b3:bb:0d:2a:46:6b:e2:25:63:b4:d5:de:05: f8:5d:ac:7e:52:4c:23:d5:79:17:30:ee:45:0a:59:a1:c4:08: 90:3a:65:64 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUBuclW4i1yq7RXSjNDIUf7/L2w6UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0 NUY4OTRFQjAeFw0yNjA3MjgwMDUzMzhaFw0yNjA3MjkwNDA0MzhaMDMxMTAvBgNV BAMTKDUxNENDQkU4N0RDOEQ0Nzg2N0UxRjVDODRDODcxOTVBMTRCNjkxOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC42mS7dvm2xwf51EfO2ZPRbthS uurXyz2zuq/I6UErEtcSK4lIvNH9auK9Gz4ob5gUx4HgOhZiDQ01agV/4FxiQSBY ygMeGKjzn9z+VEUIm6MsDoUXNAzNyneiri/O+Brd4ZwQ6JcITf4jRa9mEKqncgTu vrfl4pP9mGlfUnlXFfB44WKPGa/NcDI9KYpvX0sLCOv/mnMZaIHQK8q4fycriTqB sfYrQlpmv/+jK8X1ySOt6qGola75v583R3M4lk8333BCDqvZhll/0dMK29tZbs/z qpBQok07sw0EVQ6tXd4kAMXpCy7XSxPXN37cCjJXDCWJ8nFHxhDqi6+WGfjTAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUUUzL6H3I1Hhn4fXITIcZWhS2kZEwHwYDVR0j BBgwFoAUR1o7+glhTge+BWex+xURD0X4lOswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5 MjQzLzIvNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0NUY4OTRFQi5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzQ3NUEzQkZBMDk2MTRF MDdCRTA1NjdCMUZCMTUxMTBGNDVGODk0RUIuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5MjQz LzIvNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0NUY4OTRFQi5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBACOcunHPl98+fynQjsaiHRrkeJ68YH3QMz4DS3PGfKNA/SXAqvzsZLbC WZguSJOv+nTXEw65NKWkW3SBQoVMHvPISyrA3nkyul2LAl15RwWnyU1gp7RaZQ4t DpR6BiJ3FshzliykEsCa8QRZBV7ldZU662CrsQEPrCvNHMDe0DMJfzleZ2utYVZo Lb5Xo09/xKXP2gjr/SgGPpxRYrW7ncVEkjh+Iu4YkfC/jGMDlAqI8+NLLWic4zIo H6uTOtGmkFoySR7WXl6aVBBYafxh+X8Er+oGLTHD23XhTizss7sNKkZr4iVjtNXe BfhdrH5STCPVeRcw7kUKWaHECJA6ZWQ= -----END CERTIFICATE-----Generated at Tue Jul 28 17:13:07 2026 by rpki-client