$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft File: 553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft (raw, json) Hash identifier: PMX7tQUmvwWfxnmAGpaA8UL6gMdgDIXNuXbO/llxXx0= Subject key identifier: BB:15:1F:7C:F4:25:8E:AC:59:C2:A7:72:CE:90:5F:55:EC:53:DB:EB Authority key identifier: 55:3D:76:11:EA:6B:CE:5E:C7:96:69:E4:B1:F1:47:F5:9C:2A:0E:EE Certificate issuer: /CN=553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE Certificate serial: 66EF10F1DEC5AD7AA77E0F5EB6692470236209ED Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft Manifest number: A5 Signing time: Wed 05 Nov 2025 07:04:36 +0000 Manifest this update: Wed 05 Nov 2025 06:59:36 +0000 Manifest next update: Thu 06 Nov 2025 07:36:36 +0000 Files and hashes: 1: 553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.crl (hash: yItwcgYmNOAydXN+3m5quBezluRGS3CIViz9JWxWWgM=) 2: 326130613a363034303a646230303a3a2f34302d3438203d3e20323131313531.roa (hash: +fw3SQMO92ygFCahRkoicBXvG1K7ggV1DgUpkn+lL98=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.crl rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 22:27:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:ef:10:f1:de:c5:ad:7a:a7:7e:0f:5e:b6:69:24:70:23:62:09:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE Validity Not Before: Nov 5 06:59:36 2025 GMT Not After : Nov 6 07:36:36 2025 GMT Subject: CN=BB151F7CF4258EAC59C2A772CE905F55EC53DBEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:97:0b:2a:a3:a9:31:24:11:9b:cb:c8:36:b3: 48:6b:19:93:56:22:71:a9:01:cc:56:ef:cb:f3:e2: 5e:3d:be:7c:9f:b1:30:68:f0:2a:da:98:09:42:ef: 20:44:6a:c5:33:96:1b:b0:e7:d1:12:ea:fd:4e:37: 75:92:b0:fc:88:4a:17:4f:b8:0a:4f:fc:50:b6:58: 5a:f6:33:9f:05:e3:1a:e2:80:2b:ef:8c:c2:76:dc: 2c:cc:d7:53:86:34:2e:e9:c6:42:3f:f0:54:ab:ca: 7d:02:f3:fd:10:6a:c0:90:bd:9f:93:c1:0f:8c:56: 2f:aa:5e:2d:37:04:cf:e7:5f:9e:f3:12:c6:f1:f9: 6e:8b:8f:f5:c0:e6:7e:ae:72:5f:30:3a:d7:47:62: c3:94:ca:0f:03:75:00:c1:97:b1:fe:e6:df:ea:9a: e2:ff:ac:96:39:98:73:95:74:c6:0c:0f:6a:e2:aa: 20:2e:bd:f9:1f:7e:36:ee:c6:c3:6c:03:31:7e:83: 24:73:38:6a:41:78:d8:7e:e2:3f:ba:15:17:99:72: 9c:22:18:90:8d:81:a3:fc:e4:8f:91:71:74:d9:9d: ce:f2:99:89:de:57:36:8a:dc:38:cf:ee:0f:53:b8: 13:45:18:db:9e:90:e7:9b:fb:4b:70:7d:e2:06:2f: 92:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:15:1F:7C:F4:25:8E:AC:59:C2:A7:72:CE:90:5F:55:EC:53:DB:EB X509v3 Authority Key Identifier: keyid:55:3D:76:11:EA:6B:CE:5E:C7:96:69:E4:B1:F1:47:F5:9C:2A:0E:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:98:4f:ee:2d:81:fc:2c:20:cd:1a:df:ec:8a:8c:43:ae:49: a1:26:4f:a4:4e:ef:83:f6:e4:9c:21:c7:6a:1c:86:94:0b:de: 60:2c:6c:d4:24:8b:ab:70:56:80:66:45:bf:2a:f2:c1:0f:16: 8a:77:0a:43:f0:24:c5:e0:78:36:0c:ad:c4:a9:ba:15:1f:cb: 0e:6a:1c:fd:89:31:50:c0:d1:cf:9d:1a:9c:de:86:09:e0:cc: ad:98:29:79:9a:10:be:c3:60:de:f8:a5:91:e8:69:9b:a6:82: 74:e4:df:9e:cb:3e:32:64:f6:f0:5b:17:89:24:23:d3:05:1a: a3:f7:b8:a5:30:55:48:85:0c:15:c0:f8:25:d3:1d:0f:a9:2e: ae:c1:fd:f8:33:3b:8d:b0:08:fd:46:00:9a:fa:81:d2:55:2b: 7b:59:24:e2:de:68:23:b5:28:9b:dc:4b:3c:5f:fa:ca:be:57: 64:b1:70:ad:4a:cc:5d:53:49:89:c7:80:09:99:a5:08:30:87: 64:f6:c8:45:fd:78:df:4d:7e:f9:d5:b2:62:2d:93:da:a9:8e: 8f:4c:1b:f1:88:9f:f7:ba:1a:6c:eb:a1:71:b9:cf:d1:da:53: 37:dc:9e:d3:3a:e8:84:e7:6e:3a:8f:68:01:ca:df:85:da:26: 65:4a:ce:cf -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUZu8Q8d7FrXqnfg9etmkkcCNiCe0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUzRDc2MTFFQTZCQ0U1RUM3OTY2OUU0QjFGMTQ3RjU5 QzJBMEVFRTAeFw0yNTExMDUwNjU5MzZaFw0yNTExMDYwNzM2MzZaMDMxMTAvBgNV BAMTKEJCMTUxRjdDRjQyNThFQUM1OUMyQTc3MkNFOTA1RjU1RUM1M0RCRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzlwsqo6kxJBGby8g2s0hrGZNW InGpAcxW78vz4l49vnyfsTBo8CramAlC7yBEasUzlhuw59ES6v1ON3WSsPyIShdP uApP/FC2WFr2M58F4xrigCvvjMJ23CzM11OGNC7pxkI/8FSryn0C8/0QasCQvZ+T wQ+MVi+qXi03BM/nX57zEsbx+W6Lj/XA5n6ucl8wOtdHYsOUyg8DdQDBl7H+5t/q muL/rJY5mHOVdMYMD2riqiAuvfkffjbuxsNsAzF+gyRzOGpBeNh+4j+6FReZcpwi GJCNgaP85I+RcXTZnc7ymYneVzaK3DjP7g9TuBNFGNuekOeb+0twfeIGL5LzAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUuxUffPQljqxZwqdyzpBfVexT2+swHwYDVR0j BBgwFoAUVT12Eeprzl7HlmnksfFH9ZwqDu4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzEyODI3MWUtYzI2OS00OTU0LTg3ZGItZDE4NGRmMTdm ODVjLzQvNTUzRDc2MTFFQTZCQ0U1RUM3OTY2OUU0QjFGMTQ3RjU5QzJBMEVFRS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzU1M0Q3NjExRUE2QkNF NUVDNzk2NjlFNEIxRjE0N0Y1OUMyQTBFRUUuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvYzEyODI3MWUtYzI2OS00OTU0LTg3ZGItZDE4NGRmMTdmODVj LzQvNTUzRDc2MTFFQTZCQ0U1RUM3OTY2OUU0QjFGMTQ3RjU5QzJBMEVFRS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAGmYT+4tgfwsIM0a3+yKjEOuSaEmT6RO74P25Jwhx2ochpQL3mAsbNQk i6twVoBmRb8q8sEPFop3CkPwJMXgeDYMrcSpuhUfyw5qHP2JMVDA0c+dGpzehgng zK2YKXmaEL7DYN74pZHoaZumgnTk357LPjJk9vBbF4kkI9MFGqP3uKUwVUiFDBXA +CXTHQ+pLq7B/fgzO42wCP1GAJr6gdJVK3tZJOLeaCO1KJvcSzxf+sq+V2SxcK1K zF1TSYnHgAmZpQgwh2T2yEX9eN9NfvnVsmItk9qpjo9MG/GIn/e6GmzroXG5z9Ha UzfcntM66ITnbjqPaAHK34XaJmVKzs8= -----END CERTIFICATE-----Generated at Wed Nov 5 08:39:35 2025 by rpki-client