$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft File: 475A3BFA09614E07BE0567B1FB15110F45F894EB.mft (raw, json) Hash identifier: o99CbjpNgqY2VX9DtTbYi/g7BgLswwnFrlkrwEGdPN0= Subject key identifier: 49:41:5F:6E:EA:5C:5D:5E:2B:8B:7F:6C:48:68:C2:A8:71:16:AB:40 Authority key identifier: 47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB Certificate issuer: /CN=475A3BFA09614E07BE0567B1FB15110F45F894EB Certificate serial: 4FE66372CF58C6B8824B79628081C5A6C0CDEE98 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft Manifest number: AB Signing time: Wed 05 Nov 2025 10:18:29 +0000 Manifest this update: Wed 05 Nov 2025 10:13:29 +0000 Manifest next update: Thu 06 Nov 2025 12:46:29 +0000 Files and hashes: 1: 475A3BFA09614E07BE0567B1FB15110F45F894EB.crl (hash: 3ICJl7zTTSDgumrni1dyosF5G10zcu/mVrLXTIpj4P0=) 2: 326130353a646663313a393330303a3a2f34342d3434203d3e203331383938.roa (hash: /0mHwxj5X080MYjliBUs92u8/GLNUuIoeMzbhIBfk0Y=) 3: 326130353a646663313a6335333a3a2f34382d3438203d3e20323136313037.roa (hash: XlFjiMGdniXiBH8ber/zerQJr2bnSRJJJo5igygAomc=) 4: 326130353a646663313a6364343a3a2f34382d3438203d3e20323136313037.roa (hash: 2ES+J57q5FxV7Pycn6PA/TfkwXqGSDCB0siCI9Kqtao=) 5: 326130353a646663313a6365633a3a2f34382d3438203d3e20323136313037.roa (hash: MFLgGeiRY5J6V0wqCJ/2rdwCHyoz1yTGoDCT9u80ZPw=) 6: 326130353a646663313a6362323a3a2f34382d3438203d3e20323136313037.roa (hash: mOPodk1SWfoVUqjkHG3wmAu+HNRka8LJZu4TU08ixz0=) 7: 326130353a646663313a6366663a3a2f34382d3438203d3e20323136313037.roa (hash: aBc+3q0F9+NwnnOKXQsziJcSflKCPcTqnJDYXx6ReGE=) 8: 326130353a646663313a393330303a3a2f34342d3434203d3e20323136313037.roa (hash: b1jW0QtrvfNFuku7DA8T3pdCcJ7XdV69DcuFmLfePdg=) 9: 326130353a646663313a6330303a3a2f34302d3430203d3e20323136313037.roa (hash: 9b+nfoajFujLj061BrSCfi4FwI9kDrVZ+olcCoR5UBc=) 10: 326130353a646663313a6362313a3a2f34382d3438203d3e20323136313037.roa (hash: WZ3tMlR+p69xUFvcw4oOqLvG3hqJQ0raLNlYbt2cGEc=) 11: 326130353a646663313a6362303a3a2f34382d3438203d3e20323136313037.roa (hash: HPSZ8Ao1IB3lH1ZuFzdnyKg2mh86+6wWsN1VfrbgtjA=) 12: 326130353a646663313a393330303a3a2f34302d3430203d3e20323136313037.roa (hash: O9HdFgkDLSDurxDqFkNzKefyLVSHYP5RZwYF9ccBE70=) 13: 326130353a646663313a6330303a3a2f34382d3438203d3e20323136313037.roa (hash: 5amhvkzdMSmYntVfhhxA2srjGLuE63R2mmWtiqhM60M=) 14: 326130353a646663313a6364303a3a2f34382d3438203d3e20323136313037.roa (hash: cn9YZ8FYaC+Hri9dzrV5iV712LMhxO/a5ltgIPBkcMo=) 15: 326130353a646663313a6364333a3a2f34382d3438203d3e20323136313037.roa (hash: ODgMOPEtFM31kytaPhS/kNBKt+7tRnGYNverVN9W6GI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 22:27:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:e6:63:72:cf:58:c6:b8:82:4b:79:62:80:81:c5:a6:c0:cd:ee:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=475A3BFA09614E07BE0567B1FB15110F45F894EB Validity Not Before: Nov 5 10:13:29 2025 GMT Not After : Nov 6 12:46:29 2025 GMT Subject: CN=49415F6EEA5C5D5E2B8B7F6C4868C2A87116AB40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:dc:1e:e2:c2:f1:97:fa:26:39:cd:a3:0f:99: f6:4f:87:ab:ee:4a:d8:10:ed:e6:33:84:29:b7:a8: d5:ee:d2:1d:4c:94:6e:fb:09:57:1a:ac:fe:e9:b7: 09:5d:70:d7:ed:c9:a9:ef:a6:61:f8:39:0b:4a:be: 38:ab:30:f4:57:ff:57:c1:bb:56:d8:08:46:ef:c3: 37:58:47:bd:97:3c:ba:fb:78:cf:03:25:92:d9:aa: ca:45:e6:42:4d:54:60:87:1e:2e:bc:d7:8f:92:13: 20:2c:71:d4:ae:a7:62:46:64:2b:b8:c4:dd:d3:3c: f1:a1:14:fb:7b:83:6b:bd:01:13:85:52:e0:76:2f: f2:69:9e:91:c0:d1:11:3a:dc:0d:da:fe:dd:cb:00: 5f:78:2d:94:0b:d7:74:f7:01:73:03:a9:ec:3b:c1: e8:69:91:1c:d3:c3:5e:cd:af:b4:b0:a0:ae:18:75: b6:ce:c1:65:46:ff:ff:fc:88:6d:57:a1:e2:0e:f3: aa:a0:81:54:36:ee:7c:dd:bd:ac:4c:0e:14:6a:9a: 77:36:1c:13:46:d1:98:e5:59:b3:f2:fb:4f:42:7f: 7d:23:1f:06:ce:70:db:36:ff:72:38:14:1a:d2:5d: 2a:fc:ac:f3:db:d3:76:d0:7e:76:40:22:1c:ab:9a: b7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:41:5F:6E:EA:5C:5D:5E:2B:8B:7F:6C:48:68:C2:A8:71:16:AB:40 X509v3 Authority Key Identifier: keyid:47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:b5:06:f8:86:b4:d4:7b:70:75:04:8d:86:84:92:8a:9d:82: 6d:d2:f2:6d:07:83:37:df:4f:b6:18:af:39:5a:f9:8e:a0:86: 92:7a:c4:7b:88:e6:f9:d3:77:2d:d5:94:f1:99:6d:8a:5d:3a: ec:97:cf:75:d5:f2:13:75:ac:2c:9b:03:44:01:f8:4d:91:bd: 96:74:08:11:f5:12:7e:98:d8:49:b7:c6:6e:e5:cc:d2:56:f2: 3b:6e:02:d9:d7:8f:87:98:0c:e8:a4:7e:8c:95:49:ed:94:12: c5:a3:f0:01:08:7a:76:46:58:36:9e:29:ac:a6:a8:e7:72:14: 30:1a:d8:6b:e3:a7:4c:64:10:1f:1f:92:f6:73:a3:81:70:4a: 8a:d0:2c:cb:7f:80:41:0f:1d:6f:7a:20:2e:4b:79:ef:87:98: 5b:77:b0:ce:dd:ab:02:83:5e:80:8b:00:66:7c:0c:fe:5b:4a: 1b:93:b5:5b:73:fb:c7:85:9d:22:9e:2e:76:a0:7b:f1:b4:a8: 8a:5f:07:08:3e:fb:29:23:3d:4d:50:06:43:d1:c1:7d:a0:d1: dd:6e:7a:d4:11:65:7c:e9:7b:d4:66:ac:8d:5a:de:79:56:ca: 02:2c:d6:51:18:1c:f7:e3:22:ad:ac:c4:50:6b:74:03:3e:84: 1e:68:13:52 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUT+Zjcs9YxriCS3ligIHFpsDN7pgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0 NUY4OTRFQjAeFw0yNTExMDUxMDEzMjlaFw0yNTExMDYxMjQ2MjlaMDMxMTAvBgNV BAMTKDQ5NDE1RjZFRUE1QzVENUUyQjhCN0Y2QzQ4NjhDMkE4NzExNkFCNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW3B7iwvGX+iY5zaMPmfZPh6vu StgQ7eYzhCm3qNXu0h1MlG77CVcarP7ptwldcNftyanvpmH4OQtKvjirMPRX/1fB u1bYCEbvwzdYR72XPLr7eM8DJZLZqspF5kJNVGCHHi6814+SEyAscdSup2JGZCu4 xN3TPPGhFPt7g2u9AROFUuB2L/JpnpHA0RE63A3a/t3LAF94LZQL13T3AXMDqew7 wehpkRzTw17Nr7SwoK4YdbbOwWVG///8iG1XoeIO86qggVQ27nzdvaxMDhRqmnc2 HBNG0ZjlWbPy+09Cf30jHwbOcNs2/3I4FBrSXSr8rPPb03bQfnZAIhyrmrftAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUSUFfbupcXV4ri39sSGjCqHEWq0AwHwYDVR0j BBgwFoAUR1o7+glhTge+BWex+xURD0X4lOswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5 MjQzLzIvNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0NUY4OTRFQi5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzQ3NUEzQkZBMDk2MTRF MDdCRTA1NjdCMUZCMTUxMTBGNDVGODk0RUIuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5MjQz LzIvNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0NUY4OTRFQi5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAGO1BviGtNR7cHUEjYaEkoqdgm3S8m0HgzffT7YYrzla+Y6ghpJ6xHuI 5vnTdy3VlPGZbYpdOuyXz3XV8hN1rCybA0QB+E2RvZZ0CBH1En6Y2Em3xm7lzNJW 8jtuAtnXj4eYDOikfoyVSe2UEsWj8AEIenZGWDaeKaymqOdyFDAa2Gvjp0xkEB8f kvZzo4FwSorQLMt/gEEPHW96IC5Lee+HmFt3sM7dqwKDXoCLAGZ8DP5bShuTtVtz +8eFnSKeLnage/G0qIpfBwg++ykjPU1QBkPRwX2g0d1uetQRZXzpe9RmrI1a3nlW ygIs1lEYHPfjIq2sxFBrdAM+hB5oE1I= -----END CERTIFICATE-----Generated at Wed Nov 5 12:47:00 2025 by rpki-client