$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft File: 475A3BFA09614E07BE0567B1FB15110F45F894EB.mft (raw, json) Hash identifier: KaD7C8p4pwNQzGibTtAakVxzdLf+FCE8jvfASmY2tNk= Subject key identifier: 2D:D6:9D:67:3A:6F:DF:42:F7:46:F0:31:67:3A:33:1A:F4:67:3D:04 Authority key identifier: 47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB Certificate issuer: /CN=475A3BFA09614E07BE0567B1FB15110F45F894EB Certificate serial: 493CFFE121061E5522BF2E1502B3B21448E7DBA1 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft Manifest number: 0207 Signing time: Thu 23 Jul 2026 07:18:35 +0000 Manifest this update: Thu 23 Jul 2026 07:13:35 +0000 Manifest next update: Fri 24 Jul 2026 09:31:35 +0000 Files and hashes: 1: 326130353a646663313a393331303a3a2f34342d3434203d3e203133333335.roa (hash: NpaHG147shGFSkZHPzJpCUsRtcuhxcPetmAYoibuKRg=) 2: 326130353a646663313a6366663a3a2f34382d3438203d3e20323136313037.roa (hash: BtQLTTQtkjt+dOkOSbzl625aMHPNaGi50iFnJSKyAXs=) 3: 326130353a646663313a6364333a3a2f34382d3438203d3e20323136313037.roa (hash: EPPNU2N02dspTOT+Qd29+6lRlfOZSF0Kd5muSJ8aZ+4=) 4: 326130353a646663313a6362323a3a2f34382d3438203d3e20323136313037.roa (hash: sVNK77ext7ZoG9hmscu6oCp8bxY4i1SbymIxi1bKty4=) 5: 326130353a646663313a6330303a3a2f34302d3430203d3e20323136313037.roa (hash: GFukpoZMTHuOyKdpxhCEWLRTCpkWdxDZ0EZZSximB54=) 6: 326130353a646663313a393330303a3a2f34342d3434203d3e203331383938.roa (hash: /0mHwxj5X080MYjliBUs92u8/GLNUuIoeMzbhIBfk0Y=) 7: 326130353a646663313a393330303a3a2f34302d3430203d3e20323136313037.roa (hash: Xs+sIvX39wrcDJ0C6PsHrcRsnlkL3LVKpC1QcmMP3Gg=) 8: 326130353a646663313a393330303a3a2f34342d3434203d3e20323136313037.roa (hash: b1jW0QtrvfNFuku7DA8T3pdCcJ7XdV69DcuFmLfePdg=) 9: 326130353a646663313a6365633a3a2f34382d3438203d3e20323136313037.roa (hash: 4DqS0wfJwZoZ6IfKaEoa21sc0lUetbPH520saQ/lz3Y=) 10: 326130353a646663313a6362313a3a2f34382d3438203d3e20323136313037.roa (hash: ED9T1TH/lLo9n75GsxMUU3iCH+Cefw8ulX1hszJwXAg=) 11: 326130353a646663313a6335333a3a2f34382d3438203d3e20323136313037.roa (hash: wtG4iZDQHopnv5FvmJF0lihSOVqR5JmK37bFpW6CqYo=) 12: 475A3BFA09614E07BE0567B1FB15110F45F894EB.crl (hash: b7hhev9X1PYL5fkzJDz3qRlKY8MOh9+ykti1eVXN074=) 13: 326130353a646663313a6362303a3a2f34382d3438203d3e20323136313037.roa (hash: x8ZSb+1ldH2+HWHNp1OnRRlj5YRqpU3YQDg+aJ7m/zM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 09:31:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:3c:ff:e1:21:06:1e:55:22:bf:2e:15:02:b3:b2:14:48:e7:db:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=475A3BFA09614E07BE0567B1FB15110F45F894EB Validity Not Before: Jul 23 07:13:35 2026 GMT Not After : Jul 24 09:31:35 2026 GMT Subject: CN=2DD69D673A6FDF42F746F031673A331AF4673D04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7a:20:32:99:ad:ad:ce:3a:d9:90:12:f2:4d: a9:20:6f:a7:97:ce:d4:49:3b:9a:2f:db:a4:5a:7e: 4e:94:d4:3f:73:5c:7a:d2:29:10:28:66:fb:20:c6: 23:de:8e:0b:2d:0e:99:78:61:70:b4:6a:95:df:5a: 90:e6:fe:5a:d0:95:1e:f2:dd:a6:14:29:7d:bb:f4: 4c:47:56:36:da:02:5f:d6:4e:7c:43:74:9d:19:54: e9:52:33:95:70:8b:f5:8a:66:c3:de:64:60:b4:2d: b3:d3:a8:3d:ec:55:19:cd:93:08:a7:8f:27:ff:43: f9:99:56:48:1e:45:7a:8d:5d:fb:54:b6:62:4c:af: 22:4e:f8:00:25:26:29:99:f0:38:b8:07:3c:fd:90: f0:33:a6:62:d8:d4:0b:86:d3:24:28:d3:bb:a5:d9: 3a:79:d2:92:23:92:8d:80:47:27:79:2b:28:1a:ba: f5:bf:ae:5c:dd:3a:b0:89:36:7c:d6:a3:6c:d0:08: 7d:c6:4b:b9:30:a7:c6:42:bc:60:e7:68:32:60:a2: 5a:3b:9f:12:fc:a3:e6:e8:d4:8a:44:05:5a:77:89: 5b:db:67:65:cb:43:fb:27:d3:1b:1d:0f:87:98:86: 30:35:5d:2c:01:af:4b:63:0e:96:dc:8d:f5:ed:5c: 7a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:D6:9D:67:3A:6F:DF:42:F7:46:F0:31:67:3A:33:1A:F4:67:3D:04 X509v3 Authority Key Identifier: keyid:47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption db:97:e3:d9:55:cc:7c:ab:51:7b:74:08:fe:78:33:8b:f9:67: 5b:97:1c:e9:8a:9d:d2:32:f3:ca:21:16:c7:e3:6a:79:7a:29: c5:bb:12:f6:69:c7:2b:ca:59:49:42:00:64:89:6b:6d:96:d6: 80:47:5c:c0:4d:ff:cb:86:62:6c:c0:75:32:a5:c7:2b:75:c7: e9:a3:2e:f6:e6:1d:d1:ff:33:bf:8d:f0:2c:b1:7a:df:58:07: 97:3c:2a:63:2f:ac:d0:98:43:6e:a5:5a:5e:04:10:a2:89:91: 43:b6:df:b5:56:57:50:c1:56:02:a0:51:d4:63:61:de:c4:1a: 12:a0:44:0d:1b:f1:23:2e:1d:a7:6c:fb:b8:5e:20:41:c2:1c: 6c:8b:0e:1c:9f:53:77:35:2a:66:a9:0c:f3:a6:47:d4:47:d3: d4:28:33:39:41:20:11:15:82:d5:aa:c8:9b:10:d1:b4:6d:a7: 72:ce:11:36:cc:09:52:b5:aa:4f:39:11:61:53:5b:93:ad:1b: 00:2a:be:8d:cf:66:9a:b0:84:d9:e1:d9:e1:4a:96:3e:f4:a4: 50:10:82:16:84:27:5b:47:b5:83:49:bf:05:73:6b:ea:5d:62: 14:ca:19:a6:b3:04:ba:1a:3d:b6:80:e6:9b:16:38:99:a5:28: ee:a9:e8:8d -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUSTz/4SEGHlUivy4VArOyFEjn26EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0 NUY4OTRFQjAeFw0yNjA3MjMwNzEzMzVaFw0yNjA3MjQwOTMxMzVaMDMxMTAvBgNV BAMTKDJERDY5RDY3M0E2RkRGNDJGNzQ2RjAzMTY3M0EzMzFBRjQ2NzNEMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOeiAyma2tzjrZkBLyTakgb6eX ztRJO5ov26Rafk6U1D9zXHrSKRAoZvsgxiPejgstDpl4YXC0apXfWpDm/lrQlR7y 3aYUKX279ExHVjbaAl/WTnxDdJ0ZVOlSM5Vwi/WKZsPeZGC0LbPTqD3sVRnNkwin jyf/Q/mZVkgeRXqNXftUtmJMryJO+AAlJimZ8Di4Bzz9kPAzpmLY1AuG0yQo07ul 2Tp50pIjko2ARyd5KygauvW/rlzdOrCJNnzWo2zQCH3GS7kwp8ZCvGDnaDJgolo7 nxL8o+bo1IpEBVp3iVvbZ2XLQ/sn0xsdD4eYhjA1XSwBr0tjDpbcjfXtXHrDAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQULdadZzpv30L3RvAxZzozGvRnPQQwHwYDVR0j BBgwFoAUR1o7+glhTge+BWex+xURD0X4lOswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5 MjQzLzIvNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0NUY4OTRFQi5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzQ3NUEzQkZBMDk2MTRF MDdCRTA1NjdCMUZCMTUxMTBGNDVGODk0RUIuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5MjQz LzIvNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0NUY4OTRFQi5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBANuX49lVzHyrUXt0CP54M4v5Z1uXHOmKndIy88ohFsfjanl6KcW7EvZp xyvKWUlCAGSJa22W1oBHXMBN/8uGYmzAdTKlxyt1x+mjLvbmHdH/M7+N8Cyxet9Y B5c8KmMvrNCYQ26lWl4EEKKJkUO237VWV1DBVgKgUdRjYd7EGhKgRA0b8SMuHads +7heIEHCHGyLDhyfU3c1KmapDPOmR9RH09QoMzlBIBEVgtWqyJsQ0bRtp3LOETbM CVK1qk85EWFTW5OtGwAqvo3PZpqwhNnh2eFKlj70pFAQghaEJ1tHtYNJvwVza+pd YhTKGaazBLoaPbaA5psWOJmlKO6p6I0= -----END CERTIFICATE-----Generated at Thu Jul 23 20:26:58 2026 by rpki-client