$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft File: 553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft (raw, json) Hash identifier: ed5tu0GtIxBmNy1prBQCxytTsrUlFOKqUV0aH9dYbpY= Subject key identifier: 38:5D:77:C6:5B:D7:CF:E4:95:A4:A3:28:0F:E1:2B:7B:45:D4:A7:57 Authority key identifier: 55:3D:76:11:EA:6B:CE:5E:C7:96:69:E4:B1:F1:47:F5:9C:2A:0E:EE Certificate issuer: /CN=553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE Certificate serial: 3A3A779B35862F4E3602B997146C51FB33F30D17 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft Manifest number: 90 Signing time: Mon 20 Oct 2025 14:36:58 +0000 Manifest this update: Mon 20 Oct 2025 14:31:58 +0000 Manifest next update: Tue 21 Oct 2025 17:50:58 +0000 Files and hashes: 1: 553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.crl (hash: C1r65zxOZ4glJy9eDLQVmesJhw+pBPUFRyyPax2r4Lo=) 2: 326130613a363034303a646230303a3a2f34302d3438203d3e20323131313531.roa (hash: +fw3SQMO92ygFCahRkoicBXvG1K7ggV1DgUpkn+lL98=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.crl rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 10:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:3a:77:9b:35:86:2f:4e:36:02:b9:97:14:6c:51:fb:33:f3:0d:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE Validity Not Before: Oct 20 14:31:58 2025 GMT Not After : Oct 21 17:50:58 2025 GMT Subject: CN=385D77C65BD7CFE495A4A3280FE12B7B45D4A757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:64:98:bd:1f:f6:37:98:61:b9:f6:be:02:2c: a1:38:a4:74:3c:26:ae:5c:87:66:08:1d:e1:86:6e: a2:29:55:45:cc:36:40:39:19:07:f4:e3:93:0f:67: e2:56:9f:52:59:30:5f:08:8b:81:01:ae:81:5b:33: de:55:fb:6c:fb:8a:8c:31:a1:e8:ef:bb:5c:05:ac: ec:ee:57:e4:60:94:a2:6a:9d:76:fb:61:8e:79:ab: 42:2b:f0:02:1f:58:e3:aa:cb:69:ee:ae:6b:a0:27: 1b:a9:b7:e3:92:45:0c:91:1d:b3:e7:6b:fb:ca:63: 47:af:09:35:06:1d:ac:39:5f:f5:7b:22:0e:42:b5: eb:31:be:a1:6a:62:ba:19:bd:f9:87:5c:d5:7c:25: 0a:37:39:51:a5:8d:e4:7e:35:6a:40:0a:9b:20:cd: 47:f3:b8:9f:70:62:16:23:e4:27:52:08:9a:9e:77: f1:76:e6:f1:ca:0c:52:cd:48:24:05:95:d7:10:f0: 6f:51:a5:1c:03:8c:8f:58:88:b9:6b:e5:d0:b9:35: bc:c9:e2:7f:70:66:32:df:b1:6f:e2:fc:19:48:68: 39:6c:57:d9:e4:a0:3c:21:81:f0:a3:44:c1:7a:66: b8:42:e3:c0:c6:33:d1:83:2d:33:33:03:ce:45:e8: aa:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:5D:77:C6:5B:D7:CF:E4:95:A4:A3:28:0F:E1:2B:7B:45:D4:A7:57 X509v3 Authority Key Identifier: keyid:55:3D:76:11:EA:6B:CE:5E:C7:96:69:E4:B1:F1:47:F5:9C:2A:0E:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:71:8c:1f:5c:bb:b8:66:8a:a1:90:82:97:b2:ce:66:24:b0: df:b8:fa:da:f5:af:f4:e2:2f:5b:05:67:ed:c6:e3:e6:48:21: 16:ba:9b:6e:15:46:48:95:8a:b5:b2:a9:47:9f:3b:18:7b:75: c0:70:18:e5:d5:4d:fe:ac:0e:71:56:48:24:3b:23:eb:63:d4: 04:cd:92:29:0f:a5:68:22:e1:c3:3a:de:de:fe:89:b4:0b:a8: 04:fc:91:6c:ca:eb:16:9d:19:8b:a0:e2:2e:79:73:8f:5b:b3: 24:3e:6c:cc:db:6c:28:96:32:4f:82:ea:6d:20:80:fb:ca:a4: b2:53:01:4d:31:4b:d1:5d:bf:84:4e:be:c7:c4:f4:6f:66:93: 5b:23:42:b0:69:7c:86:1f:9b:92:ce:9d:42:9a:dd:eb:4b:1a: a8:0a:93:4c:5a:6e:b7:fa:28:8f:55:c7:14:61:c1:fd:fb:a0: 74:62:dd:47:b3:11:2f:15:2a:1b:65:a2:b3:2a:b1:70:97:0a: e2:1d:e9:52:3b:73:08:b2:c8:1f:d6:bf:96:8a:6d:0f:c9:3c: e8:ce:d0:88:f5:e5:d5:92:0e:33:41:aa:fe:e8:2d:fb:7d:54: e7:f5:cb:7e:1c:3e:e2:92:7c:1c:9a:7f:da:2b:ce:47:b3:a8: a9:b6:d9:fb -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUOjp3mzWGL042ArmXFGxR+zPzDRcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUzRDc2MTFFQTZCQ0U1RUM3OTY2OUU0QjFGMTQ3RjU5 QzJBMEVFRTAeFw0yNTEwMjAxNDMxNThaFw0yNTEwMjExNzUwNThaMDMxMTAvBgNV BAMTKDM4NUQ3N0M2NUJEN0NGRTQ5NUE0QTMyODBGRTEyQjdCNDVENEE3NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCZJi9H/Y3mGG59r4CLKE4pHQ8 Jq5ch2YIHeGGbqIpVUXMNkA5GQf045MPZ+JWn1JZMF8Ii4EBroFbM95V+2z7iowx oejvu1wFrOzuV+RglKJqnXb7YY55q0Ir8AIfWOOqy2nurmugJxupt+OSRQyRHbPn a/vKY0evCTUGHaw5X/V7Ig5CtesxvqFqYroZvfmHXNV8JQo3OVGljeR+NWpACpsg zUfzuJ9wYhYj5CdSCJqed/F25vHKDFLNSCQFldcQ8G9RpRwDjI9YiLlr5dC5NbzJ 4n9wZjLfsW/i/BlIaDlsV9nkoDwhgfCjRMF6ZrhC48DGM9GDLTMzA85F6KpnAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUOF13xlvXz+SVpKMoD+Ere0XUp1cwHwYDVR0j BBgwFoAUVT12Eeprzl7HlmnksfFH9ZwqDu4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzEyODI3MWUtYzI2OS00OTU0LTg3ZGItZDE4NGRmMTdm ODVjLzQvNTUzRDc2MTFFQTZCQ0U1RUM3OTY2OUU0QjFGMTQ3RjU5QzJBMEVFRS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzU1M0Q3NjExRUE2QkNF NUVDNzk2NjlFNEIxRjE0N0Y1OUMyQTBFRUUuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvYzEyODI3MWUtYzI2OS00OTU0LTg3ZGItZDE4NGRmMTdmODVj LzQvNTUzRDc2MTFFQTZCQ0U1RUM3OTY2OUU0QjFGMTQ3RjU5QzJBMEVFRS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAAxxjB9cu7hmiqGQgpeyzmYksN+4+tr1r/TiL1sFZ+3G4+ZIIRa6m24V RkiVirWyqUefOxh7dcBwGOXVTf6sDnFWSCQ7I+tj1ATNkikPpWgi4cM63t7+ibQL qAT8kWzK6xadGYug4i55c49bsyQ+bMzbbCiWMk+C6m0ggPvKpLJTAU0xS9Fdv4RO vsfE9G9mk1sjQrBpfIYfm5LOnUKa3etLGqgKk0xabrf6KI9VxxRhwf37oHRi3Uez ES8VKhtlorMqsXCXCuId6VI7cwiyyB/Wv5aKbQ/JPOjO0Ij15dWSDjNBqv7oLft9 VOf1y34cPuKSfByaf9orzkezqKm22fs= -----END CERTIFICATE-----Generated at Tue Oct 21 03:11:05 2025 by rpki-client