$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft File: 547F71C62763A22A9156089F2F55B587337FAFCB.mft (raw, json) Hash identifier: n3i8irohc5OvC56maOoi2xeaHyE/6La5X3fxG9Vf0Rk= Subject key identifier: 0C:21:D9:E0:17:3B:D4:87:03:B7:83:CA:F9:D2:F6:EA:A0:D9:F3:11 Authority key identifier: 54:7F:71:C6:27:63:A2:2A:91:56:08:9F:2F:55:B5:87:33:7F:AF:CB Certificate issuer: /CN=547F71C62763A22A9156089F2F55B587337FAFCB Certificate serial: 7095DF6B7F84873B7930887DAE74E045E5571E53 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft Manifest number: 43 Signing time: Sat 23 Aug 2025 11:18:58 +0000 Manifest this update: Sat 23 Aug 2025 11:13:58 +0000 Manifest next update: Sun 24 Aug 2025 11:35:58 +0000 Files and hashes: 1: 326130613a363034303a353430303a3a2f34302d3438203d3e20323032323031.roa (hash: 6pzPl1CKzXGYp4EVxRXIn1wg4oABaAK4CCBHYDSxxpU=) 2: 326130613a363034303a353430303a3a2f34302d3438203d3e20323030313739.roa (hash: YVenbTOqKe9MEXa6/fOG09XMak323Qg3KMUQzchdB9c=) 3: 547F71C62763A22A9156089F2F55B587337FAFCB.crl (hash: ThBXh7BMNhhSYoAQgvZq7mCpYcvVuSMx8gRWkSt1REk=) 4: 326130353a646663313a393530303a3a2f34302d3438203d3e20323030313739.roa (hash: RxLo4AdqJDnPZQyih2dN7gCzOdUFOGixnoLv2pmTlM8=) 5: 326130613a363034303a343930303a3a2f34302d3438203d3e20323030313739.roa (hash: E7vQShgXOvBH1q/A8kYfwNTbOyQSM9xRkA+S+5IF33A=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.crl rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 11:35:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:95:df:6b:7f:84:87:3b:79:30:88:7d:ae:74:e0:45:e5:57:1e:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=547F71C62763A22A9156089F2F55B587337FAFCB Validity Not Before: Aug 23 11:13:58 2025 GMT Not After : Aug 24 11:35:58 2025 GMT Subject: CN=0C21D9E0173BD48703B783CAF9D2F6EAA0D9F311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:12:c5:39:88:da:35:50:8a:c2:f7:a7:0b:d5: db:5b:ca:c0:8c:65:da:9e:b1:62:dd:73:bb:f8:83: 69:6b:6b:4f:74:83:95:fe:5f:a1:03:c8:83:7b:55: b9:75:20:5a:e4:84:3a:e7:70:92:17:7f:ab:96:7c: ea:48:83:0f:76:dc:a3:1d:c6:4d:2d:f9:19:b5:49: 03:85:04:59:8b:df:aa:2e:57:24:29:e2:dc:ea:1e: 13:c1:23:31:9b:57:15:5e:b5:f9:3d:6d:8b:7c:6c: d5:16:c6:58:af:7a:7b:3e:37:4c:f5:4b:fe:85:03: d9:1e:e2:bb:fb:ea:21:12:95:ea:d9:05:17:ee:3d: 0f:2b:a9:23:a1:34:5f:13:19:4c:53:86:d0:85:fe: 5c:8e:35:e5:4c:82:12:ec:2d:1a:06:f0:14:29:d8: a4:ef:8a:23:e5:35:9d:b8:a0:92:32:c9:60:67:2e: 86:50:28:0e:50:c5:21:1f:8b:46:2e:d2:1c:7b:90: dc:1c:f1:1a:f5:3b:fe:10:54:98:81:0f:c7:13:c4: 54:a6:f3:c6:1f:ae:c2:6f:09:f0:4e:5d:9c:50:58: b2:f0:11:15:40:fd:40:ff:0b:cc:d7:9b:b8:ac:b1: 35:60:00:3f:09:54:6d:c3:1b:8c:b1:b6:cb:47:cb: 0d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:21:D9:E0:17:3B:D4:87:03:B7:83:CA:F9:D2:F6:EA:A0:D9:F3:11 X509v3 Authority Key Identifier: keyid:54:7F:71:C6:27:63:A2:2A:91:56:08:9F:2F:55:B5:87:33:7F:AF:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:8b:18:47:43:4b:5d:83:78:99:a8:1b:7a:d5:06:27:dd:79: c0:34:59:1b:bf:b9:eb:76:fd:4a:2f:2d:0f:b3:8f:0f:53:99: ba:43:32:f7:ac:61:40:ae:dd:69:38:6e:2f:bf:bb:01:5a:42: b4:07:11:c9:d2:6f:36:92:ef:b3:34:4d:05:33:aa:0d:d3:b2: 5f:e1:a2:5e:34:bb:d1:2a:89:b6:62:ae:da:c1:37:21:8b:d8: a9:32:ff:71:13:1a:b5:00:82:1d:bc:1d:e3:e0:80:b8:4e:47: 13:cb:a7:42:0e:e4:05:e5:1d:8c:9c:53:3c:7b:ec:5a:b6:89: 6f:19:68:90:0c:d3:45:07:6b:09:7f:d2:97:f7:16:a1:cf:99: 64:2b:84:e2:33:9b:19:1e:b3:64:1c:44:d7:8d:e0:80:b0:60: 58:38:3e:c2:40:5c:08:f2:59:4e:5d:93:d5:48:f5:af:78:2b: 82:51:8a:4f:a9:87:b4:3f:e1:9e:94:f1:27:b5:fc:fc:c5:c0: 37:95:aa:1f:ea:64:62:b1:19:23:b0:35:ab:bb:5e:dd:19:1e: 09:7d:6e:65:f6:1b:55:fd:60:ab:0e:0a:f4:98:d0:6c:6c:e1: 5f:58:da:d8:a0:87:b9:74:ec:0a:ad:9c:19:ba:c9:44:95:87: f4:6e:fc:4f -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUcJXfa3+Ehzt5MIh9rnTgReVXHlMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQ3RjcxQzYyNzYzQTIyQTkxNTYwODlGMkY1NUI1ODcz MzdGQUZDQjAeFw0yNTA4MjMxMTEzNThaFw0yNTA4MjQxMTM1NThaMDMxMTAvBgNV BAMTKDBDMjFEOUUwMTczQkQ0ODcwM0I3ODNDQUY5RDJGNkVBQTBEOUYzMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWEsU5iNo1UIrC96cL1dtbysCM ZdqesWLdc7v4g2lra090g5X+X6EDyIN7Vbl1IFrkhDrncJIXf6uWfOpIgw923KMd xk0t+Rm1SQOFBFmL36ouVyQp4tzqHhPBIzGbVxVetfk9bYt8bNUWxlivens+N0z1 S/6FA9ke4rv76iESlerZBRfuPQ8rqSOhNF8TGUxThtCF/lyONeVMghLsLRoG8BQp 2KTviiPlNZ24oJIyyWBnLoZQKA5QxSEfi0Yu0hx7kNwc8Rr1O/4QVJiBD8cTxFSm 88YfrsJvCfBOXZxQWLLwERVA/UD/C8zXm7issTVgAD8JVG3DG4yxtstHyw1hAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUDCHZ4Bc71IcDt4PK+dL26qDZ8xEwHwYDVR0j BBgwFoAUVH9xxidjoiqRVgifL1W1hzN/r8swDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDE3OTFhNjQtYTM2YS00ZWI5LWE2ZmYtZTFjNDA3OGE3 Y2EzLzEvNTQ3RjcxQzYyNzYzQTIyQTkxNTYwODlGMkY1NUI1ODczMzdGQUZDQi5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzU0N0Y3MUM2Mjc2M0Ey MkE5MTU2MDg5RjJGNTVCNTg3MzM3RkFGQ0IuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMDE3OTFhNjQtYTM2YS00ZWI5LWE2ZmYtZTFjNDA3OGE3Y2Ez LzEvNTQ3RjcxQzYyNzYzQTIyQTkxNTYwODlGMkY1NUI1ODczMzdGQUZDQi5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAHmLGEdDS12DeJmoG3rVBifdecA0WRu/uet2/UovLQ+zjw9TmbpDMves YUCu3Wk4bi+/uwFaQrQHEcnSbzaS77M0TQUzqg3Tsl/hol40u9EqibZirtrBNyGL 2Kky/3ETGrUAgh28HePggLhORxPLp0IO5AXlHYycUzx77Fq2iW8ZaJAM00UHawl/ 0pf3FqHPmWQrhOIzmxkes2QcRNeN4ICwYFg4PsJAXAjyWU5dk9VI9a94K4JRik+p h7Q/4Z6U8Se1/PzFwDeVqh/qZGKxGSOwNau7Xt0ZHgl9bmX2G1X9YKsOCvSY0Gxs 4V9Y2tigh7l07AqtnBm6yUSVh/Ru/E8= -----END CERTIFICATE-----Generated at Sat Aug 23 21:48:44 2025 by rpki-client