$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft File: 547F71C62763A22A9156089F2F55B587337FAFCB.mft (raw, json) Hash identifier: eRSM0UmiVCj2sUoBCSPS2iLfzt6GVVbm8KLWKoRoIwE= Subject key identifier: B1:68:CC:4E:9D:3E:92:2A:88:40:A4:3C:4F:D8:AD:23:D5:BA:F8:54 Authority key identifier: 54:7F:71:C6:27:63:A2:2A:91:56:08:9F:2F:55:B5:87:33:7F:AF:CB Certificate issuer: /CN=547F71C62763A22A9156089F2F55B587337FAFCB Certificate serial: 0208481911B715F01118A7C2461AAD903DF285B0 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft Manifest number: 91 Signing time: Mon 20 Oct 2025 10:06:19 +0000 Manifest this update: Mon 20 Oct 2025 10:01:19 +0000 Manifest next update: Tue 21 Oct 2025 12:59:19 +0000 Files and hashes: 1: 326130613a363034303a353430303a3a2f34302d3438203d3e20323032323031.roa (hash: 6pzPl1CKzXGYp4EVxRXIn1wg4oABaAK4CCBHYDSxxpU=) 2: 547F71C62763A22A9156089F2F55B587337FAFCB.crl (hash: iSB5GY0mDr/6i/xErH0to4U3z6cHLngisuiif3Bfq9A=) 3: 326130353a646663313a393530303a3a2f34302d3438203d3e20323030313739.roa (hash: RxLo4AdqJDnPZQyih2dN7gCzOdUFOGixnoLv2pmTlM8=) 4: 326130613a363034303a343930303a3a2f34302d3438203d3e20323030313739.roa (hash: E7vQShgXOvBH1q/A8kYfwNTbOyQSM9xRkA+S+5IF33A=) 5: 326130613a363034303a353430303a3a2f34302d3438203d3e20323030313739.roa (hash: YVenbTOqKe9MEXa6/fOG09XMak323Qg3KMUQzchdB9c=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.crl rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 09:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:08:48:19:11:b7:15:f0:11:18:a7:c2:46:1a:ad:90:3d:f2:85:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=547F71C62763A22A9156089F2F55B587337FAFCB Validity Not Before: Oct 20 10:01:19 2025 GMT Not After : Oct 21 12:59:19 2025 GMT Subject: CN=B168CC4E9D3E922A8840A43C4FD8AD23D5BAF854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:35:93:d1:45:02:70:d9:ed:d9:42:d6:5d:e7: af:c4:d6:bd:0d:25:a2:39:61:af:76:c3:ad:a8:6e: 1c:ee:b2:ac:31:fc:c5:65:64:25:98:8c:ea:e8:23: 87:05:32:c2:91:2f:09:fa:60:48:a4:3a:01:1d:d5: c8:94:2f:7d:ba:c8:01:2c:59:81:69:f7:a9:ef:4c: 26:2d:22:de:18:a8:eb:33:e1:88:b6:0c:cc:b5:78: 6f:ad:db:cf:36:0a:08:d0:a1:ad:11:a7:ad:95:ec: b8:30:c8:0f:60:52:6d:a6:96:13:f6:2e:62:da:86: a9:5f:f6:c8:21:da:0d:d1:a5:6f:9e:c5:c2:9f:21: 96:4f:cb:5d:5a:7b:60:64:5f:ea:e1:9d:f3:d9:a3: c6:bf:d0:05:5b:fc:3d:70:81:60:78:56:94:23:ca: 6a:47:10:9b:6e:e5:3c:0a:88:6a:6f:c5:5b:ac:d6: 6a:fb:7d:f8:04:f0:fb:3b:49:df:c5:e2:4b:85:9f: b9:2a:70:fe:07:6c:d6:4e:e8:99:56:5f:79:67:e0: a9:e9:b5:df:b0:5e:19:e8:a4:f4:8e:3a:0f:32:77: 3f:a6:55:65:e9:2c:f7:63:ab:6c:68:c5:be:d0:c1: f5:e3:47:62:01:62:08:cb:5a:76:13:89:73:c7:84: 5d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:68:CC:4E:9D:3E:92:2A:88:40:A4:3C:4F:D8:AD:23:D5:BA:F8:54 X509v3 Authority Key Identifier: keyid:54:7F:71:C6:27:63:A2:2A:91:56:08:9F:2F:55:B5:87:33:7F:AF:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:02:27:46:da:14:0f:f2:87:e5:69:e1:65:98:d2:90:95:fd: b3:2e:7b:30:b3:9a:2b:52:8b:2c:d1:ed:fa:a6:44:ab:6a:0e: d6:4e:cd:4e:8a:6c:da:b0:1b:4e:ca:2d:70:b5:c2:4f:73:a0: 4a:ff:1b:a2:77:12:96:cc:02:11:56:85:5b:2b:2a:97:7c:4e: c6:58:f5:ad:a4:22:60:29:82:12:f1:fe:99:05:bf:c3:0a:28: 4d:b8:eb:bf:8f:a6:9c:73:a3:bf:c5:6d:28:a1:01:f2:e6:7d: eb:12:67:b4:52:1d:ed:e3:eb:d7:d8:ad:38:06:ac:01:59:5e: 76:f9:bb:26:df:e9:4f:1c:55:06:0b:0d:87:8a:b6:f3:bc:fb: ce:23:b5:b4:6a:d0:bb:97:a4:41:03:50:21:f1:20:51:de:69: 92:ad:fa:f2:ec:1f:78:97:70:6d:6b:bc:7e:e7:a3:45:92:58: 6f:33:33:3a:36:8d:2d:95:aa:ba:6e:92:2a:65:8b:c3:09:2e: c4:0e:50:cf:4d:51:24:3c:3f:08:04:ad:90:cc:be:5d:1e:19: 8c:2f:8d:fb:a3:83:83:58:0c:f3:6c:6e:f0:05:de:28:7c:91: 32:fb:9b:94:cb:7e:71:db:fc:4b:12:bb:1c:2f:95:bf:b5:b5: 66:1d:7e:da -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUAghIGRG3FfARGKfCRhqtkD3yhbAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQ3RjcxQzYyNzYzQTIyQTkxNTYwODlGMkY1NUI1ODcz MzdGQUZDQjAeFw0yNTEwMjAxMDAxMTlaFw0yNTEwMjExMjU5MTlaMDMxMTAvBgNV BAMTKEIxNjhDQzRFOUQzRTkyMkE4ODQwQTQzQzRGRDhBRDIzRDVCQUY4NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5NZPRRQJw2e3ZQtZd56/E1r0N JaI5Ya92w62obhzusqwx/MVlZCWYjOroI4cFMsKRLwn6YEikOgEd1ciUL326yAEs WYFp96nvTCYtIt4YqOsz4Yi2DMy1eG+t2882CgjQoa0Rp62V7LgwyA9gUm2mlhP2 LmLahqlf9sgh2g3RpW+excKfIZZPy11ae2BkX+rhnfPZo8a/0AVb/D1wgWB4VpQj ympHEJtu5TwKiGpvxVus1mr7ffgE8Ps7Sd/F4kuFn7kqcP4HbNZO6JlWX3ln4Knp td+wXhnopPSOOg8ydz+mVWXpLPdjq2xoxb7QwfXjR2IBYgjLWnYTiXPHhF03AgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUsWjMTp0+kiqIQKQ8T9itI9W6+FQwHwYDVR0j BBgwFoAUVH9xxidjoiqRVgifL1W1hzN/r8swDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDE3OTFhNjQtYTM2YS00ZWI5LWE2ZmYtZTFjNDA3OGE3 Y2EzLzEvNTQ3RjcxQzYyNzYzQTIyQTkxNTYwODlGMkY1NUI1ODczMzdGQUZDQi5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzU0N0Y3MUM2Mjc2M0Ey MkE5MTU2MDg5RjJGNTVCNTg3MzM3RkFGQ0IuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMDE3OTFhNjQtYTM2YS00ZWI5LWE2ZmYtZTFjNDA3OGE3Y2Ez LzEvNTQ3RjcxQzYyNzYzQTIyQTkxNTYwODlGMkY1NUI1ODczMzdGQUZDQi5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAGICJ0baFA/yh+Vp4WWY0pCV/bMuezCzmitSiyzR7fqmRKtqDtZOzU6K bNqwG07KLXC1wk9zoEr/G6J3EpbMAhFWhVsrKpd8TsZY9a2kImApghLx/pkFv8MK KE2467+Pppxzo7/FbSihAfLmfesSZ7RSHe3j69fYrTgGrAFZXnb5uybf6U8cVQYL DYeKtvO8+84jtbRq0LuXpEEDUCHxIFHeaZKt+vLsH3iXcG1rvH7no0WSWG8zMzo2 jS2Vqrpukipli8MJLsQOUM9NUSQ8PwgErZDMvl0eGYwvjfujg4NYDPNsbvAF3ih8 kTL7m5TLfnHb/EsSuxwvlb+1tWYdfto= -----END CERTIFICATE-----Generated at Mon Oct 20 21:31:52 2025 by rpki-client