$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft File: 4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft (raw, json) Hash identifier: KdPOLy4kLjcRBlwnOFcBZz51y2DHz5WEsT77p8+zY/0= Subject key identifier: D2:EB:7C:EC:21:CD:40:0C:05:89:10:26:C6:2C:69:81:05:C2:0B:06 Authority key identifier: 4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57 Certificate issuer: /CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057 Certificate serial: 7B739A97B56608C79047CCD1AC9A2E3DAE597D83 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft Manifest number: A6 Signing time: Tue 04 Nov 2025 11:11:44 +0000 Manifest this update: Tue 04 Nov 2025 11:06:44 +0000 Manifest next update: Wed 05 Nov 2025 12:35:44 +0000 Files and hashes: 1: 326130613a363034303a623166343a3a2f34382d3438203d3e20323030363736.roa (hash: 8vNlACv4VljcfTfQph4BWYbiB6JxXxu9u3pkSEnSFS8=) 2: 326130613a363034303a623166303a3a2f34382d3438203d3e20323030363736.roa (hash: f56ZeNhzC2SfQF3WtfvHaAXxQIIVMtYJhNScjVogZ9M=) 3: 326130613a363034303a656430303a3a2f34302d3430203d3e2030.roa (hash: uqRsJY7KhhwwPaijQCvC3gE+TqC4+OLuBx54eDmXu1Q=) 4: 326130613a363034303a623166333a3a2f34382d3438203d3e20323030363736.roa (hash: 16vtCR02Wpx8fBrNg3BBjazTebmU9P6zPt+x/DW89rE=) 5: 326130613a363034303a623166363a3a2f34382d3438203d3e203530373535.roa (hash: R34yyXLS2JN3du0sWYjJzaZCEqLgwBOyYDGo+BSfbs4=) 6: 326130613a363034303a623166663a3a2f34382d3438203d3e2030.roa (hash: sgKT96rKThQB6ppVhmCDbggp5qDvA2cp3RmFQMzSxHo=) 7: 326130613a363034303a623166333a3a2f34382d3438203d3e203530373535.roa (hash: zj+PtOUjRL+jh8fX/z3gQawz9pZ6f2aTfcfOK+OABQw=) 8: 4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl (hash: 8T/QoL+ueNZ84qp5uhRwwFa89Nain4Fc1piyYsvK2L0=) 9: 326130613a363034303a623166323a3a2f34382d3438203d3e20323030363736.roa (hash: 9V8f+kjKeAUUM95gFyLo820Chs0Y7IHMYFLg0AJNvf4=) 10: 326130613a363034303a623166313a3a2f34382d3438203d3e20323030363736.roa (hash: jmju8VqIF7uHPknsXmKVCF/NlSPLUXdtHx+4q+t6HvI=) 11: 326130613a363034303a623166373a3a2f34382d3438203d3e203530373535.roa (hash: q63trgvlirS+Vgtt9rQwfx5g58dhjqx1zfXsQI8nfBQ=) 12: 326130613a363034303a623166383a3a2f34382d3438203d3e203530373535.roa (hash: NCGL0xwyR9g2r6A71GgXDrp+Nhm2k3T8HoQFr0k0das=) 13: 326130613a363034303a623166353a3a2f34382d3438203d3e20323030363736.roa (hash: evMMfqo4Ez8yHDdFKOgCCAQkkBtJLTT2mhkV7j/a8vQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 12:35:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:73:9a:97:b5:66:08:c7:90:47:cc:d1:ac:9a:2e:3d:ae:59:7d:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057 Validity Not Before: Nov 4 11:06:44 2025 GMT Not After : Nov 5 12:35:44 2025 GMT Subject: CN=D2EB7CEC21CD400C05891026C62C698105C20B06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d1:fd:22:9a:b8:0a:e8:9a:1c:c2:ae:44:96: 08:d0:fc:1f:ac:8c:05:d1:5f:3b:e8:23:10:f9:84: 75:42:88:8d:f7:6d:02:a5:67:c3:5a:42:ff:9e:29: 18:d6:07:15:2a:12:72:ed:30:0b:7d:09:16:e2:37: 05:a0:41:a2:a7:8f:e2:b2:f2:03:d7:eb:08:70:73: 6b:28:3e:bd:72:1b:dc:ae:3e:86:d6:8b:7e:34:a4: 78:97:0b:c4:e2:85:fd:95:23:8d:21:71:76:f8:b5: be:ee:e7:d0:58:0d:4a:22:13:2e:0a:ee:77:2c:42: 26:69:bb:57:b3:58:b8:cc:79:3f:ae:69:21:6d:9f: 4a:6b:c7:26:a7:6f:36:bd:ee:cd:c3:30:4c:b3:24: 06:53:52:84:7f:21:3b:55:33:30:2a:3a:d2:e1:22: a2:f7:fd:9f:b2:11:a7:fe:25:37:a0:33:95:e5:9c: 21:b9:88:cc:e4:39:4b:64:bc:81:1c:57:51:24:6d: 44:4c:0c:cf:d0:3e:59:60:73:c6:46:fc:ba:56:b9: bf:29:64:a0:a8:5a:2c:51:6a:5b:a5:66:d4:af:14: 8c:86:a6:12:24:ca:dd:0b:2e:34:45:6f:66:86:4f: 40:06:c1:60:7f:06:ae:ee:38:d8:76:32:11:74:3d: 86:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:EB:7C:EC:21:CD:40:0C:05:89:10:26:C6:2C:69:81:05:C2:0B:06 X509v3 Authority Key Identifier: keyid:4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:e4:c3:f1:6c:cd:c5:ad:09:c6:ec:bc:e2:d1:e0:fd:a5:2e: 10:b7:93:70:a4:22:f0:ff:84:c4:95:f8:58:32:3b:6b:c7:13: 41:1e:cf:64:16:29:65:f3:1c:6e:53:0a:b1:88:69:e2:0c:b2: 8e:fb:a6:df:09:d2:31:bc:69:f0:49:e8:7e:c8:46:4d:68:6f: f3:83:54:13:92:c1:c3:a8:ef:33:82:79:3a:ea:93:73:4d:a5: 39:f2:e9:16:f0:7b:df:f0:5e:1c:13:06:e3:e5:bd:a0:09:7a: b5:93:d5:41:c2:9a:9d:9e:b2:70:f1:9d:65:90:f8:c0:8d:be: d0:df:4b:a2:43:1e:c9:60:c2:0b:ed:33:d6:92:dc:4d:d9:43: c5:6b:c5:ec:44:2c:c7:8f:4d:ad:45:a5:94:9f:2f:51:1d:cb: 37:47:fc:54:93:0a:73:74:76:be:d6:ae:b3:99:8a:ed:9f:4a: 4b:9e:43:c7:c6:82:97:3c:f9:5d:90:99:68:ee:42:9f:a6:d5: e2:a9:7e:e5:0f:7a:5a:18:bd:73:76:26:a5:99:5d:56:22:98: 46:15:39:d5:2c:2f:ad:94:38:52:f1:43:79:ba:e5:85:53:86: fc:e8:c3:ad:9d:91:86:0e:ac:56:b3:f2:67:2a:26:12:b4:2c: 39:0e:b7:d8 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUe3Oal7VmCMeQR8zRrJouPa5ZfYMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZEQzU3MUE1Q0RBMTM5NThCQ0U0NzVGMEU1RDkxMDFE QjgxMjA1NzAeFw0yNTExMDQxMTA2NDRaFw0yNTExMDUxMjM1NDRaMDMxMTAvBgNV BAMTKEQyRUI3Q0VDMjFDRDQwMEMwNTg5MTAyNkM2MkM2OTgxMDVDMjBCMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ0f0imrgK6Jocwq5ElgjQ/B+s jAXRXzvoIxD5hHVCiI33bQKlZ8NaQv+eKRjWBxUqEnLtMAt9CRbiNwWgQaKnj+Ky 8gPX6whwc2soPr1yG9yuPobWi340pHiXC8Tihf2VI40hcXb4tb7u59BYDUoiEy4K 7ncsQiZpu1ezWLjMeT+uaSFtn0prxyanbza97s3DMEyzJAZTUoR/ITtVMzAqOtLh IqL3/Z+yEaf+JTegM5XlnCG5iMzkOUtkvIEcV1EkbURMDM/QPllgc8ZG/LpWub8p ZKCoWixRalulZtSvFIyGphIkyt0LLjRFb2aGT0AGwWB/Bq7uONh2MhF0PYbhAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQU0ut87CHNQAwFiRAmxixpgQXCCwYwHwYDVR0j BBgwFoAUT9xXGlzaE5WLzkdfDl2RAduBIFcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1 Y2U3LzMvNEZEQzU3MUE1Q0RBMTM5NThCQ0U0NzVGMEU1RDkxMDFEQjgxMjA1Ny5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzRGREM1NzFBNUNEQTEz OTU4QkNFNDc1RjBFNUQ5MTAxREI4MTIwNTcuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1Y2U3 LzMvNEZEQzU3MUE1Q0RBMTM5NThCQ0U0NzVGMEU1RDkxMDFEQjgxMjA1Ny5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAF/kw/FszcWtCcbsvOLR4P2lLhC3k3CkIvD/hMSV+FgyO2vHE0Eez2QW KWXzHG5TCrGIaeIMso77pt8J0jG8afBJ6H7IRk1ob/ODVBOSwcOo7zOCeTrqk3NN pTny6Rbwe9/wXhwTBuPlvaAJerWT1UHCmp2esnDxnWWQ+MCNvtDfS6JDHslgwgvt M9aS3E3ZQ8VrxexELMePTa1FpZSfL1EdyzdH/FSTCnN0dr7WrrOZiu2fSkueQ8fG gpc8+V2QmWjuQp+m1eKpfuUPeloYvXN2JqWZXVYimEYVOdUsL62UOFLxQ3m65YVT hvzow62dkYYOrFaz8mcqJhK0LDkOt9g= -----END CERTIFICATE-----Generated at Tue Nov 4 23:07:22 2025 by rpki-client