$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft File: 475A3BFA09614E07BE0567B1FB15110F45F894EB.mft (raw, json) Hash identifier: VdwUW/UGkasKn6XYUCf/VlElO6Pyx2akUfXb6U4VQVY= Subject key identifier: 43:0D:A7:85:CC:25:E7:ED:FD:F1:99:6D:D6:77:1B:94:C8:10:9D:B9 Authority key identifier: 47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB Certificate issuer: /CN=475A3BFA09614E07BE0567B1FB15110F45F894EB Certificate serial: 528A80E267007BDFCE1D1961F2F015F70415739A Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft Manifest number: 44 Signing time: Sat 23 Aug 2025 11:41:52 +0000 Manifest this update: Sat 23 Aug 2025 11:36:52 +0000 Manifest next update: Sun 24 Aug 2025 15:20:52 +0000 Files and hashes: 1: 475A3BFA09614E07BE0567B1FB15110F45F894EB.crl (hash: m+jdbgyRqnz1F8sugvzJgB56TuG+HR+1pOmuOVOQTwo=) 2: 326130353a646663313a6362303a3a2f34382d3438203d3e20323136313037.roa (hash: HPSZ8Ao1IB3lH1ZuFzdnyKg2mh86+6wWsN1VfrbgtjA=) 3: 326130353a646663313a6364323a3a2f34382d3438203d3e20323136313037.roa (hash: uTe3RpuC5xHTpbzhstyrLed5Fn2IO9mhtG4WFqEyr0c=) 4: 326130353a646663313a6362313a3a2f34382d3438203d3e20323136313037.roa (hash: WZ3tMlR+p69xUFvcw4oOqLvG3hqJQ0raLNlYbt2cGEc=) 5: 326130353a646663313a6330303a3a2f34302d3430203d3e20323136313037.roa (hash: 9b+nfoajFujLj061BrSCfi4FwI9kDrVZ+olcCoR5UBc=) 6: 326130353a646663313a6364343a3a2f34382d3438203d3e20323136313037.roa (hash: 2ES+J57q5FxV7Pycn6PA/TfkwXqGSDCB0siCI9Kqtao=) 7: 326130353a646663313a393330303a3a2f34302d3430203d3e20323136313037.roa (hash: O9HdFgkDLSDurxDqFkNzKefyLVSHYP5RZwYF9ccBE70=) 8: 326130353a646663313a6364303a3a2f34382d3438203d3e20323136313037.roa (hash: cn9YZ8FYaC+Hri9dzrV5iV712LMhxO/a5ltgIPBkcMo=) 9: 326130353a646663313a6364333a3a2f34382d3438203d3e20323136313037.roa (hash: ODgMOPEtFM31kytaPhS/kNBKt+7tRnGYNverVN9W6GI=) 10: 326130353a646663313a6330303a3a2f34382d3438203d3e20323136313037.roa (hash: 5amhvkzdMSmYntVfhhxA2srjGLuE63R2mmWtiqhM60M=) 11: 326130353a646663313a6362323a3a2f34382d3438203d3e20323136313037.roa (hash: mOPodk1SWfoVUqjkHG3wmAu+HNRka8LJZu4TU08ixz0=) 12: 326130353a646663313a6366663a3a2f34382d3438203d3e20323136313037.roa (hash: aBc+3q0F9+NwnnOKXQsziJcSflKCPcTqnJDYXx6ReGE=) 13: 326130353a646663313a6364313a3a2f34382d3438203d3e20323136313037.roa (hash: wOFC9QI8GelsG8geVBZYw7NXSrIqNI+SPY2auPGgaCQ=) 14: 326130353a646663313a6335333a3a2f34382d3438203d3e20323136313037.roa (hash: XlFjiMGdniXiBH8ber/zerQJr2bnSRJJJo5igygAomc=) 15: 326130353a646663313a6365633a3a2f34382d3438203d3e20323136313037.roa (hash: MFLgGeiRY5J6V0wqCJ/2rdwCHyoz1yTGoDCT9u80ZPw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 13:34:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:8a:80:e2:67:00:7b:df:ce:1d:19:61:f2:f0:15:f7:04:15:73:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=475A3BFA09614E07BE0567B1FB15110F45F894EB Validity Not Before: Aug 23 11:36:52 2025 GMT Not After : Aug 24 15:20:52 2025 GMT Subject: CN=430DA785CC25E7EDFDF1996DD6771B94C8109DB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:27:86:48:b9:c6:bc:ad:cf:0a:59:49:a5:69: 31:b7:32:eb:16:97:4d:0a:af:97:0e:99:2e:2c:a1: 93:18:82:16:64:e5:ca:9d:8d:21:f6:11:4e:b1:d1: a2:be:bf:92:3b:fc:7c:3f:be:b7:08:bc:c5:a6:74: c6:f5:cd:c7:ed:28:95:6d:9b:f0:3a:9b:30:48:31: b0:d8:33:d4:86:84:75:37:97:c0:4f:c3:45:30:b0: 65:d7:d5:c9:df:2a:69:69:f4:b9:4a:56:bd:9b:ec: 98:5e:e0:92:a7:a8:3a:3a:45:7a:b6:5b:78:52:e1: fb:5b:75:30:fa:22:f2:22:ca:3b:84:2f:84:99:cb: 28:a5:3d:06:67:ef:3d:2e:43:ec:02:fb:54:65:4e: 0c:57:ad:a2:83:e3:79:52:b2:92:11:55:5d:9b:b4: 00:0c:89:87:63:5d:09:73:5a:91:a8:f9:e5:2e:2c: 53:c0:29:c9:c7:70:63:bb:f6:10:35:aa:12:16:10: 26:13:78:6f:be:81:1f:1d:53:1b:f9:fd:8c:15:d1: c9:3e:73:73:eb:c2:a8:7f:d3:9f:1f:65:dc:a6:ec: d7:22:c3:1a:f3:ce:8d:5f:f0:8d:eb:01:a0:71:9f: ba:61:30:e4:1e:9f:c8:c2:50:1c:f9:52:09:94:48: b3:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:0D:A7:85:CC:25:E7:ED:FD:F1:99:6D:D6:77:1B:94:C8:10:9D:B9 X509v3 Authority Key Identifier: keyid:47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:d3:06:b8:8a:29:c9:a0:3c:d0:d0:3f:c0:3d:10:08:27:45: 2b:97:fc:16:b0:fd:2e:fb:fe:63:33:05:2d:33:9d:95:7c:34: 38:f2:8c:de:8d:07:9c:71:9a:5c:6a:7e:47:3e:71:70:49:05: 71:0e:a9:77:b0:c3:5a:ca:b8:01:6a:7b:ab:87:f5:c7:b9:3f: 79:09:3e:e4:3b:92:ec:f1:60:a4:cf:3c:0e:a7:d4:f6:2a:27: 64:ed:21:d4:3a:e4:13:14:a1:87:59:1e:45:cf:89:02:b3:f6: c8:a6:33:6b:59:c8:8b:97:25:84:4f:34:4c:d8:d7:93:1f:fd: 0e:09:6e:bc:51:52:3d:2e:eb:f3:70:30:a1:a2:38:8a:d2:f2: 0d:f8:a7:33:bd:56:12:73:0e:42:2a:c4:e6:bc:41:8c:80:e7: f6:aa:19:0b:3f:38:d6:5e:72:fa:7e:b8:4b:3b:fb:05:f6:3f: e9:d6:b8:4e:3f:42:f8:c6:cd:c0:5d:20:55:97:3f:c3:e1:c9: 65:56:e4:4d:40:30:3a:7b:7b:a5:2a:a4:94:92:2b:43:72:3c: 00:4b:17:2f:65:3d:34:3d:01:aa:0d:c4:7f:a5:86:2c:2f:b5: ab:86:84:38:5d:e4:e4:a3:52:b2:94:b9:12:eb:4f:19:d5:31: 07:72:5a:8c -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUUoqA4mcAe9/OHRlh8vAV9wQVc5owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0 NUY4OTRFQjAeFw0yNTA4MjMxMTM2NTJaFw0yNTA4MjQxNTIwNTJaMDMxMTAvBgNV BAMTKDQzMERBNzg1Q0MyNUU3RURGREYxOTk2REQ2NzcxQjk0QzgxMDlEQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgJ4ZIuca8rc8KWUmlaTG3MusW l00Kr5cOmS4soZMYghZk5cqdjSH2EU6x0aK+v5I7/Hw/vrcIvMWmdMb1zcftKJVt m/A6mzBIMbDYM9SGhHU3l8BPw0UwsGXX1cnfKmlp9LlKVr2b7Jhe4JKnqDo6RXq2 W3hS4ftbdTD6IvIiyjuEL4SZyyilPQZn7z0uQ+wC+1RlTgxXraKD43lSspIRVV2b tAAMiYdjXQlzWpGo+eUuLFPAKcnHcGO79hA1qhIWECYTeG++gR8dUxv5/YwV0ck+ c3Prwqh/058fZdym7Nciwxrzzo1f8I3rAaBxn7phMOQen8jCUBz5UgmUSLPXAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUQw2nhcwl5+398Zlt1ncblMgQnbkwHwYDVR0j BBgwFoAUR1o7+glhTge+BWex+xURD0X4lOswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5 MjQzLzIvNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0NUY4OTRFQi5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzQ3NUEzQkZBMDk2MTRF MDdCRTA1NjdCMUZCMTUxMTBGNDVGODk0RUIuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5MjQz LzIvNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0NUY4OTRFQi5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAL/TBriKKcmgPNDQP8A9EAgnRSuX/Baw/S77/mMzBS0znZV8NDjyjN6N B5xxmlxqfkc+cXBJBXEOqXeww1rKuAFqe6uH9ce5P3kJPuQ7kuzxYKTPPA6n1PYq J2TtIdQ65BMUoYdZHkXPiQKz9simM2tZyIuXJYRPNEzY15Mf/Q4JbrxRUj0u6/Nw MKGiOIrS8g34pzO9VhJzDkIqxOa8QYyA5/aqGQs/ONZecvp+uEs7+wX2P+nWuE4/ QvjGzcBdIFWXP8PhyWVW5E1AMDp7e6UqpJSSK0NyPABLFy9lPTQ9AaoNxH+lhiwv tauGhDhd5OSjUrKUuRLrTxnVMQdyWow= -----END CERTIFICATE-----Generated at Sat Aug 23 20:15:05 2025 by rpki-client