$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft File: B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft (raw, json) Hash identifier: dvYd+kmFMW21NxnIJN9WjK4k9I0EXTGQXpbWZJy5rf4= Subject key identifier: FB:5B:32:7E:14:A4:58:69:12:C3:78:76:62:61:AE:56:A0:F6:DA:D2 Authority key identifier: B2:17:28:4E:A3:D5:38:44:B2:AF:52:70:AB:BA:A3:10:5B:8B:3F:45 Certificate issuer: /CN=B217284EA3D53844B2AF5270ABBAA3105B8B3F45 Certificate serial: 4F9E77A79CFDBC2D84D79DF1A75B8824D9BC861A Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft Manifest number: AE Signing time: Tue 04 Nov 2025 20:33:00 +0000 Manifest this update: Tue 04 Nov 2025 20:28:00 +0000 Manifest next update: Wed 05 Nov 2025 23:10:00 +0000 Files and hashes: 1: B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl (hash: 6wzqSr5wn2cUvKDw1Uyw/t29oPWhHOXImttExt/hRjU=) 2: 326130613a363034303a313330303a3a2f34302d3438203d3e203531303139.roa (hash: wn+vtltLdcEkhCOvzx/4fvtvh6EcQrGmjXhUFly5CfQ=) 3: 326130613a363034303a396630303a3a2f34302d3438203d3e203531303139.roa (hash: 4Q4ROZYT81dIJHSkpaekI4Sbj95kc4xrlA3BgHVle7s=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 22:27:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:9e:77:a7:9c:fd:bc:2d:84:d7:9d:f1:a7:5b:88:24:d9:bc:86:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B217284EA3D53844B2AF5270ABBAA3105B8B3F45 Validity Not Before: Nov 4 20:28:00 2025 GMT Not After : Nov 5 23:10:00 2025 GMT Subject: CN=FB5B327E14A4586912C378766261AE56A0F6DAD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2a:b2:7a:9f:63:59:b5:40:fd:9d:38:82:fe: 82:da:4b:0c:c4:2f:a6:7d:c0:b8:2d:31:da:7a:52: 72:6e:ef:88:d9:16:14:8b:51:1e:69:3d:d5:8a:6f: 77:f9:7a:ea:2c:49:aa:1b:ac:8a:a6:ff:28:79:81: 9d:65:67:66:6f:98:dc:70:38:7a:51:3d:04:5e:a7: 4c:22:8a:8a:3b:c8:bc:30:06:20:df:af:ae:1d:1e: 41:df:bf:10:61:8b:10:7a:e9:c0:85:eb:be:af:77: c8:50:d7:c5:55:91:39:80:7e:6d:bf:f3:f3:37:8b: 27:75:7c:81:40:08:c7:30:c1:94:93:78:f2:e9:d1: 55:0a:a3:0d:fa:e2:4f:28:ed:1f:05:fa:24:04:a3: 12:7c:8e:ff:cc:56:4f:1d:30:d5:87:19:94:ac:b4: 65:d5:af:b0:91:46:38:55:b9:6c:4e:9e:9c:90:7e: 85:0b:7c:30:9f:f2:3c:83:68:f4:cb:0e:21:87:31: 59:b8:be:a9:cf:c3:65:eb:75:9c:50:95:94:6d:1f: d5:e6:77:bf:21:39:b1:a2:7b:e3:2d:8a:9a:d5:f9: b0:9d:ba:c0:35:00:42:1c:3e:41:33:0f:89:72:f1: 8c:87:fe:0c:23:d9:de:6d:24:e3:db:b5:98:ad:07: 10:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:5B:32:7E:14:A4:58:69:12:C3:78:76:62:61:AE:56:A0:F6:DA:D2 X509v3 Authority Key Identifier: keyid:B2:17:28:4E:A3:D5:38:44:B2:AF:52:70:AB:BA:A3:10:5B:8B:3F:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:21:94:76:13:90:e0:db:b9:00:d8:64:6d:4f:b4:03:d1:08: a4:18:aa:e4:7a:49:0d:41:8e:9d:f9:1e:af:30:77:fb:54:e2: c7:42:7e:5e:e6:d5:5d:81:71:26:86:04:90:b9:d6:91:64:dd: e2:46:2e:7e:17:e9:1d:22:ad:fd:d7:95:92:49:ea:05:d6:67: 81:13:47:cb:9c:71:dc:96:cb:92:d4:2e:36:d3:c7:c5:61:d6: d5:6a:a9:f2:58:99:44:90:f8:9b:33:b1:3c:81:d6:53:33:30: 7e:25:30:7c:37:7c:6b:d7:d0:d4:f2:99:10:2e:f1:c2:7d:5d: 51:80:ae:1d:77:c7:c2:e8:69:0b:44:35:ed:08:73:e5:24:db: 0c:a2:e2:e3:e8:a7:de:ef:34:8d:28:1c:82:0d:6f:34:4c:d5: 0c:47:c9:0b:5e:49:f0:42:b3:e0:14:c2:54:29:a2:c3:4a:31: 4d:ac:d4:34:5e:e3:6d:74:82:09:f6:5c:b8:11:fd:4d:0e:f1: da:69:ee:3c:3b:09:40:0d:73:cf:21:a3:9d:c3:f2:99:fa:35: df:48:b9:ab:d0:b8:b7:b8:dc:71:74:dd:6b:84:1c:29:1f:47: a0:8b:46:13:41:76:cc:c6:17:d6:11:9a:80:a0:2f:b4:ff:53: 11:86:02:01 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUT553p5z9vC2E153xp1uIJNm8hhowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIxNzI4NEVBM0Q1Mzg0NEIyQUY1MjcwQUJCQUEzMTA1 QjhCM0Y0NTAeFw0yNTExMDQyMDI4MDBaFw0yNTExMDUyMzEwMDBaMDMxMTAvBgNV BAMTKEZCNUIzMjdFMTRBNDU4NjkxMkMzNzg3NjYyNjFBRTU2QTBGNkRBRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjKrJ6n2NZtUD9nTiC/oLaSwzE L6Z9wLgtMdp6UnJu74jZFhSLUR5pPdWKb3f5euosSaobrIqm/yh5gZ1lZ2ZvmNxw OHpRPQRep0wiioo7yLwwBiDfr64dHkHfvxBhixB66cCF676vd8hQ18VVkTmAfm2/ 8/M3iyd1fIFACMcwwZSTePLp0VUKow364k8o7R8F+iQEoxJ8jv/MVk8dMNWHGZSs tGXVr7CRRjhVuWxOnpyQfoULfDCf8jyDaPTLDiGHMVm4vqnPw2XrdZxQlZRtH9Xm d78hObGie+MtiprV+bCdusA1AEIcPkEzD4ly8YyH/gwj2d5tJOPbtZitBxDtAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQU+1syfhSkWGkSw3h2YmGuVqD22tIwHwYDVR0j BBgwFoAUshcoTqPVOESyr1Jwq7qjEFuLP0UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzUvQjIxNzI4NEVBM0Q1Mzg0NEIyQUY1MjcwQUJCQUEzMTA1QjhCM0Y0NS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0IyMTcyODRFQTNENTM4 NDRCMkFGNTI3MEFCQkFBMzEwNUI4QjNGNDUuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2NhZTNm LzUvQjIxNzI4NEVBM0Q1Mzg0NEIyQUY1MjcwQUJCQUEzMTA1QjhCM0Y0NS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAAAhlHYTkODbuQDYZG1PtAPRCKQYquR6SQ1Bjp35Hq8wd/tU4sdCfl7m 1V2BcSaGBJC51pFk3eJGLn4X6R0irf3XlZJJ6gXWZ4ETR8uccdyWy5LULjbTx8Vh 1tVqqfJYmUSQ+JszsTyB1lMzMH4lMHw3fGvX0NTymRAu8cJ9XVGArh13x8LoaQtE Ne0Ic+Uk2wyi4uPop97vNI0oHIINbzRM1QxHyQteSfBCs+AUwlQposNKMU2s1DRe 4210ggn2XLgR/U0O8dpp7jw7CUANc88ho53D8pn6Nd9IuavQuLe43HF03WuEHCkf R6CLRhNBdszGF9YRmoCgL7T/UxGGAgE= -----END CERTIFICATE-----Generated at Wed Nov 5 08:36:55 2025 by rpki-client