$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft File: 72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft (raw, json) Hash identifier: q6Ij8dhevbFnPdSuyowNiLek4OgLOvUwab95CN6bWtM= Subject key identifier: A4:FA:B3:95:1A:E8:E2:BE:74:DB:F1:18:B7:BC:B6:B3:FE:3C:FE:CE Authority key identifier: 72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC Certificate issuer: /CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC Certificate serial: 3189F880F9ED26D4F6DCF481915F76865F4BA961 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft Manifest number: A5 Signing time: Tue 04 Nov 2025 21:36:52 +0000 Manifest this update: Tue 04 Nov 2025 21:31:52 +0000 Manifest next update: Wed 05 Nov 2025 21:59:52 +0000 Files and hashes: 1: 326130363a396638313a333066653a3a2f34382d3438203d3e20323135303837.roa (hash: QSIHZErz8PUVzkayOWEGMrhnu52B3t9jh0CDu6kAc4Y=) 2: 326130363a396638313a333033313a3a2f34382d3438203d3e20313531333439.roa (hash: IEGJk01NqeGvF77f6TFSRdL7M6QxbDxvI0G/8gXMSUY=) 3: 326130363a396638313a333034313a3a2f34382d3438203d3e20333934313036.roa (hash: ViYDG/fdheVWS2Z7Hi2m+vpMsGMv/gl/9qjFagwy6v0=) 4: 326130363a396638313a333030313a3a2f34382d3438203d3e20313531333439.roa (hash: X2l2seN9Wni1FQNI5w4252gttb4/G6sOTT401JAv18I=) 5: 72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl (hash: R89sEXPtc6jt6Y5ULotcLxKCJVCgWBnxESeILtfY89U=) 6: 326130363a396638313a333066393a3a2f34382d3438203d3e203136353039.roa (hash: rXpfmww+Ew/jGolMjNSiEO8uETTQ/TWoraqh3Qzn5aM=) 7: 326130363a396638313a333033303a3a2f34382d3438203d3e20313531333439.roa (hash: RJHxzDLA3nrmTNOFE+f/Mfx4nMFu/HoPiRk5LWoaAB4=) 8: 326130363a396638313a333034333a3a2f34382d3438203d3e20313530383035.roa (hash: MRSXpyWSbVj9fLo4QH75ZJ7h1v8bbPZt36oN7nrxKRI=) 9: 326130363a396638313a333034323a3a2f34382d3438203d3e20313532363731.roa (hash: N1VTU+dCITWr0dBfIOGelATJFlyO9Vo20cG9GxlBGzw=) 10: 326130363a396638313a333066623a3a2f34382d3438203d3e20323135303837.roa (hash: 3bRRbmTLyaDABzOrZZsmYU4so7ys/Yu50QG70yD4Cyk=) 11: 326130363a396638313a333066663a3a2f34382d3438203d3e20323135303837.roa (hash: xSnRhZ7FXouQ6mSYDngAlqXzHfxqP4Li9rf8EZ1sngw=) 12: 326130363a396638313a333030303a3a2f34382d3438203d3e20313531333439.roa (hash: 276dLuDJoJdkmMvl+NWGRMkNu8Sc1eeK0G+tuAIaX+w=) 13: 326130363a396638313a333030333a3a2f34382d3438203d3e20313531333439.roa (hash: N4cuZX10wyj2Ko/1hhIp0Eyx+5tJLEro9I4pb43Uvcs=) 14: 326130363a396638313a333034303a3a2f34382d3438203d3e20323134373635.roa (hash: O8ROpuurWVl726N6xvNejp9oHTgaqsCMET3fS33WC9g=) 15: 326130363a396638313a333034353a3a2f34382d3438203d3e20313437303336.roa (hash: gzJ/ISS2azSN/go3Vy4OUvl8JcaTrk3I2rLykqYdpkE=) 16: 326130363a396638313a333031313a3a2f34382d3438203d3e20313531333439.roa (hash: ByjB4xyP5eQ2YxegjF6Ty2qaNmYok2uvWKSmxWXHruA=) 17: 326130363a396638313a333066613a3a2f34382d3438203d3e20323135303837.roa (hash: 7atpksvR6sOsslqe7yssMj6U+as4hgSbmh9Pfc3RPHE=) 18: 326130363a396638313a333030323a3a2f34382d3438203d3e20313531333439.roa (hash: afCBiKO671M2uqyYxLM5ulTzG08Xm85NAbIeWNtGeG4=) 19: 326130363a396638313a333034343a3a2f34382d3438203d3e20313531333439.roa (hash: FMHtUC3+tr3RBZxG6MYw1AEp8NuSGMah0Dj6h/Gm5sU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 21:59:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:89:f8:80:f9:ed:26:d4:f6:dc:f4:81:91:5f:76:86:5f:4b:a9:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC Validity Not Before: Nov 4 21:31:52 2025 GMT Not After : Nov 5 21:59:52 2025 GMT Subject: CN=A4FAB3951AE8E2BE74DBF118B7BCB6B3FE3CFECE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:2b:3e:a9:9a:a4:eb:b2:ba:fb:d1:a5:2f:2b: 0d:4c:65:27:35:bc:33:ff:b0:a0:a7:f9:14:8e:e5: 7e:49:40:e9:23:1c:3c:7d:67:e4:f0:a6:dc:62:66: 0e:a4:7d:30:79:64:45:da:ea:43:e2:65:0a:b2:5e: 6d:62:79:65:aa:65:24:eb:8d:95:c0:c8:07:64:01: 28:30:d9:4e:db:3f:14:22:68:14:ba:c7:aa:f2:f7: 58:cd:23:ff:db:59:79:e1:bf:c6:c2:40:49:26:f5: f2:45:85:85:f0:ef:c5:8e:0f:43:f2:d0:c3:6b:23: 75:d6:81:83:dd:42:43:6a:3c:2a:44:f0:01:d9:a9: f3:2a:1d:87:14:60:fb:57:84:75:90:0f:3c:db:cb: 7f:d4:9e:0b:ab:88:98:cd:5a:30:83:eb:a7:00:56: 4b:be:36:0c:78:e4:2f:40:02:7e:51:c4:26:f7:c3: c7:6d:67:c2:cd:1b:29:e8:4d:fe:60:8c:ee:d1:a0: ed:9d:2b:45:01:4c:e6:92:a7:10:d5:b1:00:28:f0: 3c:04:da:4b:58:25:d6:4d:1e:f6:92:2b:71:8d:72: f4:69:bd:43:d9:20:a4:00:5e:a3:7f:18:f3:10:1d: 95:f2:9c:fa:94:eb:73:01:42:1d:f3:81:8f:ea:be: ef:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:FA:B3:95:1A:E8:E2:BE:74:DB:F1:18:B7:BC:B6:B3:FE:3C:FE:CE X509v3 Authority Key Identifier: keyid:72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:18:ea:d1:1a:5e:d0:9e:3a:8a:7e:ca:5a:53:74:ad:bf:c5: e0:89:01:e4:a4:e8:d2:43:56:86:40:1c:4f:5d:11:77:59:c3: aa:ae:e6:47:65:56:9f:c0:a7:a2:a4:7a:1e:ff:68:3a:96:10: 04:c1:89:ce:4e:a8:f4:4d:2b:f1:06:54:fb:bc:62:a5:ec:59: 0f:19:da:92:ae:4b:3b:c7:98:8d:38:8b:ee:fc:db:2b:5b:84: 6b:78:4b:a8:e5:2d:e0:13:3a:5a:dd:ec:c9:8d:67:7d:f1:c7: 4e:f9:14:61:a5:ca:4b:21:00:22:02:0e:8f:ed:2f:7a:c0:f4: e6:08:f6:d0:54:b8:dd:9f:4d:20:e6:a1:ee:52:08:b8:a6:80: 17:8e:b6:14:71:ba:d6:78:12:66:47:00:58:12:ab:d2:de:ec: 77:b3:89:fb:07:ed:c6:98:4c:d3:9d:78:b8:c8:ad:3f:87:3d: f7:30:d3:18:c0:30:fc:fc:36:f2:99:72:d6:5b:2c:3d:63:4a: 43:38:37:6f:1a:e3:2f:83:16:dd:e8:5d:44:3b:12:03:3e:7c: b6:28:21:f9:d8:4a:c4:c5:93:65:41:b0:c2:71:53:37:8e:6f: 52:ee:65:53:58:a6:c7:bc:26:1b:1c:eb:8d:5d:ea:91:d4:24: cf:fc:76:e5 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUMYn4gPntJtT23PSBkV92hl9LqWEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJEMURERTFCMUIwNDVEOEJFNDM5REREMTAxNDg2RTY3 MTdDOTNDQzAeFw0yNTExMDQyMTMxNTJaFw0yNTExMDUyMTU5NTJaMDMxMTAvBgNV BAMTKEE0RkFCMzk1MUFFOEUyQkU3NERCRjExOEI3QkNCNkIzRkUzQ0ZFQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqKz6pmqTrsrr70aUvKw1MZSc1 vDP/sKCn+RSO5X5JQOkjHDx9Z+TwptxiZg6kfTB5ZEXa6kPiZQqyXm1ieWWqZSTr jZXAyAdkASgw2U7bPxQiaBS6x6ry91jNI//bWXnhv8bCQEkm9fJFhYXw78WOD0Py 0MNrI3XWgYPdQkNqPCpE8AHZqfMqHYcUYPtXhHWQDzzby3/UnguriJjNWjCD66cA Vku+Ngx45C9AAn5RxCb3w8dtZ8LNGynoTf5gjO7RoO2dK0UBTOaSpxDVsQAo8DwE 2ktYJdZNHvaSK3GNcvRpvUPZIKQAXqN/GPMQHZXynPqU63MBQh3zgY/qvu+5AgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUpPqzlRro4r502/EYt7y2s/48/s4wHwYDVR0j BBgwFoAUctHd4bGwRdi+Q53dEBSG5nF8k8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDY0YWM5NDEtNWE3Yy00MmNmLWI2NGItMGIyODhmMTg4 N2YyLzEvNzJEMURERTFCMUIwNDVEOEJFNDM5REREMTAxNDg2RTY3MTdDOTNDQy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzcyRDFEREUxQjFCMDQ1 RDhCRTQzOURERDEwMTQ4NkU2NzE3QzkzQ0MuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvZDY0YWM5NDEtNWE3Yy00MmNmLWI2NGItMGIyODhmMTg4N2Yy LzEvNzJEMURERTFCMUIwNDVEOEJFNDM5REREMTAxNDg2RTY3MTdDOTNDQy5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBADIY6tEaXtCeOop+ylpTdK2/xeCJAeSk6NJDVoZAHE9dEXdZw6qu5kdl Vp/Ap6Kkeh7/aDqWEATBic5OqPRNK/EGVPu8YqXsWQ8Z2pKuSzvHmI04i+782ytb hGt4S6jlLeATOlrd7MmNZ33xx075FGGlykshACICDo/tL3rA9OYI9tBUuN2fTSDm oe5SCLimgBeOthRxutZ4EmZHAFgSq9Le7HezifsH7caYTNOdeLjIrT+HPfcw0xjA MPz8NvKZctZbLD1jSkM4N28a4y+DFt3oXUQ7EgM+fLYoIfnYSsTFk2VBsMJxUzeO b1LuZVNYpse8Jhsc641d6pHUJM/8duU= -----END CERTIFICATE-----Generated at Wed Nov 5 08:19:49 2025 by rpki-client