$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft File: 475A3BFA09614E07BE0567B1FB15110F45F894EB.mft (raw, json) Hash identifier: DyNVgU1OZRMtEQ0ke1wOhbmf5xRG8h9oZrTJawkH/Ks= Subject key identifier: 61:B5:FF:E5:BF:E4:45:63:68:3E:B0:0B:D3:84:2B:38:A0:E1:67:13 Authority key identifier: 47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB Certificate issuer: /CN=475A3BFA09614E07BE0567B1FB15110F45F894EB Certificate serial: 6F88236F12106FAF8EE257C1BAD4185CFDCFF420 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft Manifest number: 0168 Signing time: Sat 28 Mar 2026 04:54:05 +0000 Manifest this update: Sat 28 Mar 2026 04:49:05 +0000 Manifest next update: Sun 29 Mar 2026 06:53:05 +0000 Files and hashes: 1: 475A3BFA09614E07BE0567B1FB15110F45F894EB.crl (hash: XMiz2DPx5NGeWZgNBnVB3bZGXhCnEaCIIxpOrwTTyGk=) 2: 326130353a646663313a6362323a3a2f34382d3438203d3e20323136313037.roa (hash: mOPodk1SWfoVUqjkHG3wmAu+HNRka8LJZu4TU08ixz0=) 3: 326130353a646663313a393330303a3a2f34302d3430203d3e20323136313037.roa (hash: O9HdFgkDLSDurxDqFkNzKefyLVSHYP5RZwYF9ccBE70=) 4: 326130353a646663313a393330303a3a2f34342d3434203d3e20323136313037.roa (hash: b1jW0QtrvfNFuku7DA8T3pdCcJ7XdV69DcuFmLfePdg=) 5: 326130353a646663313a6365633a3a2f34382d3438203d3e20323136313037.roa (hash: MFLgGeiRY5J6V0wqCJ/2rdwCHyoz1yTGoDCT9u80ZPw=) 6: 326130353a646663313a6362303a3a2f34382d3438203d3e20323136313037.roa (hash: HPSZ8Ao1IB3lH1ZuFzdnyKg2mh86+6wWsN1VfrbgtjA=) 7: 326130353a646663313a6362313a3a2f34382d3438203d3e20323136313037.roa (hash: WZ3tMlR+p69xUFvcw4oOqLvG3hqJQ0raLNlYbt2cGEc=) 8: 326130353a646663313a393330303a3a2f34342d3434203d3e203331383938.roa (hash: /0mHwxj5X080MYjliBUs92u8/GLNUuIoeMzbhIBfk0Y=) 9: 326130353a646663313a6364343a3a2f34382d3438203d3e20323136313037.roa (hash: 2ES+J57q5FxV7Pycn6PA/TfkwXqGSDCB0siCI9Kqtao=) 10: 326130353a646663313a6366663a3a2f34382d3438203d3e20323136313037.roa (hash: aBc+3q0F9+NwnnOKXQsziJcSflKCPcTqnJDYXx6ReGE=) 11: 326130353a646663313a6330303a3a2f34382d3438203d3e20323136313037.roa (hash: 5amhvkzdMSmYntVfhhxA2srjGLuE63R2mmWtiqhM60M=) 12: 326130353a646663313a6335333a3a2f34382d3438203d3e20323136313037.roa (hash: XlFjiMGdniXiBH8ber/zerQJr2bnSRJJJo5igygAomc=) 13: 326130353a646663313a6330303a3a2f34302d3430203d3e20323136313037.roa (hash: 9b+nfoajFujLj061BrSCfi4FwI9kDrVZ+olcCoR5UBc=) 14: 326130353a646663313a6364303a3a2f34382d3438203d3e20323136313037.roa (hash: cn9YZ8FYaC+Hri9dzrV5iV712LMhxO/a5ltgIPBkcMo=) 15: 326130353a646663313a6364333a3a2f34382d3438203d3e20323136313037.roa (hash: ODgMOPEtFM31kytaPhS/kNBKt+7tRnGYNverVN9W6GI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Mar 2026 00:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:88:23:6f:12:10:6f:af:8e:e2:57:c1:ba:d4:18:5c:fd:cf:f4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=475A3BFA09614E07BE0567B1FB15110F45F894EB Validity Not Before: Mar 28 04:49:05 2026 GMT Not After : Mar 29 06:53:05 2026 GMT Subject: CN=61B5FFE5BFE44563683EB00BD3842B38A0E16713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fc:bf:ed:d1:fb:3f:91:1e:58:df:c6:3f:52: 61:0c:5d:cd:dd:da:f1:a4:25:90:1f:49:f6:8b:59: 5e:a0:2d:a3:f5:1d:11:19:69:d7:c8:ed:5c:1b:3d: 88:35:b5:d2:63:8a:d7:71:a3:8d:de:c3:b2:c8:ec: f4:bf:1e:90:b1:ec:d2:d9:81:2a:a1:2a:41:82:fe: b7:ca:0b:c4:3c:57:a5:29:1e:89:11:72:42:c1:5e: a3:e7:7a:c0:b6:49:9c:0c:bb:f0:75:97:ee:56:46: 21:4e:9b:ad:d7:9d:4b:3c:bd:a8:79:2e:d1:ee:77: ed:46:e1:8d:d2:9e:65:8e:a7:4d:67:a5:63:14:6c: 78:be:a5:e1:c7:32:35:9a:8d:6d:6d:cf:0b:5e:78: 8e:66:6e:ed:c5:4a:54:4d:53:2d:af:71:dc:5b:d5: 3a:ca:03:4a:b8:8a:19:fb:98:92:45:62:7c:d5:28: 3e:20:c7:47:cf:0b:4f:b4:ff:b7:d5:c6:39:9d:56: 62:5c:8b:cb:ca:d1:6b:ca:13:66:fc:9a:49:ae:f4: 3e:4e:6f:d1:03:a2:4b:b4:f4:3a:ff:54:99:30:76: e6:ee:88:e7:16:a5:59:d8:6c:61:ad:a0:44:62:a5: 69:ad:08:74:0f:53:4c:60:aa:ab:9b:c4:74:36:5c: 0a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:B5:FF:E5:BF:E4:45:63:68:3E:B0:0B:D3:84:2B:38:A0:E1:67:13 X509v3 Authority Key Identifier: keyid:47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:89:b7:ab:b5:d6:3b:35:12:76:b0:1a:cd:7c:21:3d:b7:9d: 03:49:d8:6e:94:af:34:cd:dd:12:2b:a3:01:f3:31:1d:f1:0d: d9:fb:18:84:05:cd:37:13:55:75:9c:32:8f:60:5c:2c:b6:39: 2d:ea:b3:e1:47:d9:c8:95:36:35:f0:0f:98:94:08:90:42:d5: 41:70:ab:1c:e5:29:04:87:22:94:fc:bf:ff:70:e2:6e:e7:e0: 93:dd:0c:a3:36:b8:8b:9f:73:74:91:fc:b3:0a:6f:9e:3e:4e: 61:6a:97:cf:2f:48:8f:71:9c:3c:7b:b0:ad:d0:da:c6:cc:9c: 24:71:98:17:19:59:2a:82:41:c4:ea:7c:ff:ae:32:54:64:dd: c2:b8:f3:69:a4:f3:4f:37:d7:14:ba:9d:bd:c7:8d:fa:bb:0d: 54:dd:bf:43:1c:ff:91:f7:b5:29:15:6f:1c:51:53:55:f5:a4: dd:0a:11:8d:c9:42:46:f5:d6:3d:82:a0:b0:f1:2a:9d:a2:08: 40:7d:aa:a1:5f:89:fb:be:ee:3b:25:49:b8:19:90:17:38:99: 0d:12:57:86:6e:d4:ac:27:a8:27:3e:77:92:0e:a7:ff:08:bf: b2:2e:88:76:25:b4:44:9a:a1:26:3a:dc:93:08:ff:d7:85:af: c4:5a:d6:f1 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUb4gjbxIQb6+O4lfButQYXP3P9CAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0 NUY4OTRFQjAeFw0yNjAzMjgwNDQ5MDVaFw0yNjAzMjkwNjUzMDVaMDMxMTAvBgNV BAMTKDYxQjVGRkU1QkZFNDQ1NjM2ODNFQjAwQkQzODQyQjM4QTBFMTY3MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk/L/t0fs/kR5Y38Y/UmEMXc3d 2vGkJZAfSfaLWV6gLaP1HREZadfI7VwbPYg1tdJjitdxo43ew7LI7PS/HpCx7NLZ gSqhKkGC/rfKC8Q8V6UpHokRckLBXqPnesC2SZwMu/B1l+5WRiFOm63XnUs8vah5 LtHud+1G4Y3SnmWOp01npWMUbHi+peHHMjWajW1tzwteeI5mbu3FSlRNUy2vcdxb 1TrKA0q4ihn7mJJFYnzVKD4gx0fPC0+0/7fVxjmdVmJci8vK0WvKE2b8mkmu9D5O b9EDoku09Dr/VJkwdubuiOcWpVnYbGGtoERipWmtCHQPU0xgqqubxHQ2XAqRAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUYbX/5b/kRWNoPrAL04QrOKDhZxMwHwYDVR0j BBgwFoAUR1o7+glhTge+BWex+xURD0X4lOswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5 MjQzLzIvNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0NUY4OTRFQi5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzQ3NUEzQkZBMDk2MTRF MDdCRTA1NjdCMUZCMTUxMTBGNDVGODk0RUIuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5MjQz LzIvNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0NUY4OTRFQi5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBABWJt6u11js1EnawGs18IT23nQNJ2G6UrzTN3RIrowHzMR3xDdn7GIQF zTcTVXWcMo9gXCy2OS3qs+FH2ciVNjXwD5iUCJBC1UFwqxzlKQSHIpT8v/9w4m7n 4JPdDKM2uIufc3SR/LMKb54+TmFql88vSI9xnDx7sK3Q2sbMnCRxmBcZWSqCQcTq fP+uMlRk3cK482mk80831xS6nb3Hjfq7DVTdv0Mc/5H3tSkVbxxRU1X1pN0KEY3J Qkb11j2CoLDxKp2iCEB9qqFfifu+7jslSbgZkBc4mQ0SV4Zu1KwnqCc+d5IOp/8I v7IuiHYltESaoSY63JMI/9eFr8Ra1vE= -----END CERTIFICATE-----Generated at Sat Mar 28 10:38:07 2026 by rpki-client