$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.mft File: D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.mft (raw, json) Hash identifier: nYJy3vEAY4u/hheWhv55A94E6gfVCQ+HbXQqOT2b6e0= Subject key identifier: 84:33:D3:1D:04:B4:03:D6:C0:F0:05:37:79:A0:8E:08:67:56:7E:52 Authority key identifier: D7:AC:0B:FB:DA:15:A7:F2:40:A1:28:3F:56:49:19:4C:E8:BB:B8:01 Certificate issuer: /CN=D7AC0BFBDA15A7F240A1283F5649194CE8BBB801 Certificate serial: 5631EDBD1816792FB540274A651E9D8B83103001 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.mft Manifest number: 91 Signing time: Mon 20 Oct 2025 12:05:13 +0000 Manifest this update: Mon 20 Oct 2025 12:00:13 +0000 Manifest next update: Tue 21 Oct 2025 15:55:13 +0000 Files and hashes: 1: D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.crl (hash: CmM840GKJdgioVjp8CKs9VBB922rPd8Ua6nqi+cvYtA=) 2: 326130353a646663313a633432303a3a2f34382d3438203d3e203437343936.roa (hash: pxkwC1tXh5AA3dY0ImOI+evo8PccYn8siWbTpsnS3+U=) 3: 326130353a646663313a633432633a3a2f34382d3438203d3e203437343936.roa (hash: SuaWG0h25mSOkF6TUnfvTVFuLybBa5x6nHfCETqFdvg=) 4: 326130353a646663313a633432653a3a2f34382d3438203d3e203437343936.roa (hash: EPhN/IdQdctHEgcI5mRqnnjYfzJlSrsw3WqDekvn86Y=) 5: 326130353a646663313a633431303a3a2f34342d3434203d3e203437343936.roa (hash: Sug13/bOHzR/z7k2MN1/PwM1kjEU9a8FYYmcJgI2acw=) 6: 326130353a646663313a633432333a3a2f34382d3438203d3e203437343936.roa (hash: b1Tp3urffazrHFC2uNuqtecL+ZwX7JySZaJd8ifcpCw=) 7: 326130353a646663313a633433303a3a2f34382d3438203d3e203437343936.roa (hash: CWOxtutFW8hhUOi9VObNEvn/pGQ0cmbzWj3A/jlfZ7k=) 8: 326130353a646663313a633432313a3a2f34382d3438203d3e203437343936.roa (hash: Akh6Hk6S0OH2Z77HSUXUpo9sndUP6ZpVYbaZ0C+pMkU=) 9: 326130353a646663313a633432643a3a2f34382d3438203d3e203437343936.roa (hash: 4lliDoKad0QWiI8QFd6IuWpcnQIUMJu5VW5vCep/nzY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.crl rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 10:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:31:ed:bd:18:16:79:2f:b5:40:27:4a:65:1e:9d:8b:83:10:30:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7AC0BFBDA15A7F240A1283F5649194CE8BBB801 Validity Not Before: Oct 20 12:00:13 2025 GMT Not After : Oct 21 15:55:13 2025 GMT Subject: CN=8433D31D04B403D6C0F0053779A08E0867567E52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f2:30:8b:88:2b:44:f3:fa:0e:49:53:c6:fe: e7:fc:90:2c:db:ae:79:d0:d3:ce:b4:6e:72:82:40: c2:c0:1b:3e:90:90:2f:ed:56:78:fe:17:58:27:0c: 4e:32:af:e1:53:1e:6d:f2:73:e4:01:6b:89:9c:9c: 0c:3c:11:0c:00:3a:f4:58:94:a5:f8:cc:6e:e2:4c: 9d:9b:8f:d5:99:3f:72:54:4e:a9:86:e4:2f:c0:d6: 44:02:ce:17:b9:df:c6:86:3f:ab:27:f1:a0:bc:07: f6:5a:26:ed:9e:a5:01:86:b6:7c:32:08:79:52:e9: bd:fd:c3:c2:38:05:8a:f6:04:65:69:27:64:ac:8a: 76:eb:c7:aa:e8:4f:fa:f2:ce:67:c0:27:06:dd:dd: c5:7f:94:ed:15:bf:0e:69:6d:0e:7a:42:a9:79:d6: ac:12:a5:ba:8c:a5:c0:af:95:06:87:da:72:0c:01: eb:aa:19:0f:0a:dc:fd:52:ad:c5:9b:85:4e:0f:b7: f7:f5:d7:a3:d7:79:c5:c1:bf:ef:6a:2b:20:30:a3: aa:0d:3a:ff:da:e7:db:04:a9:4d:b1:10:8a:cd:e5: 40:94:8a:c8:ab:12:c7:5e:d8:1d:1f:ae:7a:0e:d0: f4:ee:e7:ec:5b:f4:a9:e8:18:a7:fb:d8:a5:81:4a: 4f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:33:D3:1D:04:B4:03:D6:C0:F0:05:37:79:A0:8E:08:67:56:7E:52 X509v3 Authority Key Identifier: keyid:D7:AC:0B:FB:DA:15:A7:F2:40:A1:28:3F:56:49:19:4C:E8:BB:B8:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:37:a6:bd:4d:d5:31:b8:4b:80:cf:4d:7e:66:5a:04:b9:8f: e3:fb:10:0e:5e:16:d7:d8:f7:fd:e9:df:96:b4:98:70:8f:85: a7:e9:a7:86:f0:03:58:6f:e6:20:58:b4:73:d0:b3:e5:cf:4f: d2:43:d8:cf:4d:dc:4e:6d:e6:ed:ed:c4:40:3d:b2:2b:74:e6: fe:1e:cd:43:fc:4c:29:28:e5:79:56:8a:d1:9b:9c:69:d6:c5: 5f:70:38:ee:d0:d4:9d:e3:fd:c2:ab:5d:d8:fa:3c:b2:85:01: 04:eb:2f:9f:1f:c7:8d:03:33:a4:95:ce:24:26:90:7b:22:ba: 61:a1:46:b4:d1:b5:04:f2:46:12:fd:65:6a:c2:3a:ea:96:76: e6:35:be:4c:33:ae:e4:2d:af:85:ab:72:96:02:89:4b:62:62: 8f:a7:c6:77:aa:a5:e5:ee:bd:ad:4e:d4:23:50:c1:b1:ce:44: f7:54:c1:76:82:77:12:02:26:2c:8f:06:3a:b3:2d:65:a0:db: db:76:fd:cb:7b:ef:3e:25:df:67:c4:b0:6f:0e:f3:1e:77:c9: 23:f7:03:c7:a8:77:aa:79:45:72:53:d1:99:fb:85:6f:3e:b8: ab:b7:c6:e1:54:0e:c5:bc:22:52:31:00:7d:d5:8c:fa:df:5c: 62:d5:f3:21 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUVjHtvRgWeS+1QCdKZR6di4MQMAEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdBQzBCRkJEQTE1QTdGMjQwQTEyODNGNTY0OTE5NENF OEJCQjgwMTAeFw0yNTEwMjAxMjAwMTNaFw0yNTEwMjExNTU1MTNaMDMxMTAvBgNV BAMTKDg0MzNEMzFEMDRCNDAzRDZDMEYwMDUzNzc5QTA4RTA4Njc1NjdFNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq8jCLiCtE8/oOSVPG/uf8kCzb rnnQ0860bnKCQMLAGz6QkC/tVnj+F1gnDE4yr+FTHm3yc+QBa4mcnAw8EQwAOvRY lKX4zG7iTJ2bj9WZP3JUTqmG5C/A1kQCzhe538aGP6sn8aC8B/ZaJu2epQGGtnwy CHlS6b39w8I4BYr2BGVpJ2Ssinbrx6roT/ryzmfAJwbd3cV/lO0Vvw5pbQ56Qql5 1qwSpbqMpcCvlQaH2nIMAeuqGQ8K3P1SrcWbhU4Pt/f116PXecXBv+9qKyAwo6oN Ov/a59sEqU2xEIrN5UCUisirEsde2B0frnoO0PTu5+xb9KnoGKf72KWBSk8TAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUhDPTHQS0A9bA8AU3eaCOCGdWflIwHwYDVR0j BBgwFoAU16wL+9oVp/JAoSg/VkkZTOi7uAEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2RhNGQ4YjQtYTE1Ny00NjM0LWFiMTgtM2VmOWQwOTgy MzUyLzQvRDdBQzBCRkJEQTE1QTdGMjQwQTEyODNGNTY0OTE5NENFOEJCQjgwMS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0Q3QUMwQkZCREExNUE3 RjI0MEExMjgzRjU2NDkxOTRDRThCQkI4MDEuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvM2RhNGQ4YjQtYTE1Ny00NjM0LWFiMTgtM2VmOWQwOTgyMzUy LzQvRDdBQzBCRkJEQTE1QTdGMjQwQTEyODNGNTY0OTE5NENFOEJCQjgwMS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAGM3pr1N1TG4S4DPTX5mWgS5j+P7EA5eFtfY9/3p35a0mHCPhafpp4bw A1hv5iBYtHPQs+XPT9JD2M9N3E5t5u3txEA9sit05v4ezUP8TCko5XlWitGbnGnW xV9wOO7Q1J3j/cKrXdj6PLKFAQTrL58fx40DM6SVziQmkHsiumGhRrTRtQTyRhL9 ZWrCOuqWduY1vkwzruQtr4WrcpYCiUtiYo+nxneqpeXuva1O1CNQwbHORPdUwXaC dxICJiyPBjqzLWWg29t2/ct77z4l32fEsG8O8x53ySP3A8eod6p5RXJT0Zn7hW8+ uKu3xuFUDsW8IlIxAH3VjPrfXGLV8yE= -----END CERTIFICATE-----Generated at Tue Oct 21 01:37:35 2025 by rpki-client