$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft File: 4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft (raw, json) Hash identifier: BSo3CpSGCndEfpTdj5+Q3WALDLNFaJD4RxhGLEh9Xjk= Subject key identifier: 33:CB:DA:D1:1C:23:16:3D:73:54:DC:DE:C1:67:0D:2C:09:05:7C:93 Authority key identifier: 4C:8F:14:A9:80:41:CC:D9:EA:EF:C4:56:FF:5A:AF:BF:49:01:C6:81 Certificate issuer: /CN=4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681 Certificate serial: 5051F8B81E6639203946593DCD314C50C0DEE77B Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft Manifest number: 0251 Signing time: Mon 21 Sep 2026 03:53:48 +0000 Manifest this update: Mon 21 Sep 2026 03:48:48 +0000 Manifest next update: Tue 22 Sep 2026 04:05:48 +0000 Files and hashes: 1: 4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.crl (hash: PWgCZUsWyNFtrstqXJcnrVESCpB6n7KkZlfgBXcU9sc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.crl rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 04:05:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:51:f8:b8:1e:66:39:20:39:46:59:3d:cd:31:4c:50:c0:de:e7:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681 Validity Not Before: Sep 21 03:48:48 2026 GMT Not After : Sep 22 04:05:48 2026 GMT Subject: CN=33CBDAD11C23163D7354DCDEC1670D2C09057C93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c0:e6:9f:2e:4f:40:eb:f7:a4:ba:dc:f2:9f: 2f:b2:22:ca:ce:50:f2:ce:ef:0d:eb:b5:a6:7b:9a: b6:28:32:4f:06:60:67:3b:63:ba:fa:7f:5c:05:38: ea:58:24:d1:20:1f:78:bc:db:ca:94:a9:b0:ba:dc: f3:2a:b4:d4:03:a3:72:c8:ff:61:3f:7e:f5:45:a8: 83:87:64:32:4c:78:14:5b:63:47:4a:14:48:12:40: 14:1c:c0:19:b4:a1:97:5f:6f:22:1d:51:d9:e1:bf: 40:10:14:d8:f5:43:7e:cd:7b:3a:83:a1:bf:a8:b6: cf:57:9f:6f:4e:eb:f6:3d:ec:3c:0b:fa:bd:1e:50: 6e:1e:17:e5:75:5a:1a:e5:9f:5b:0f:24:95:d4:1d: ac:58:af:f2:3f:2b:5a:80:6e:5b:e6:d0:90:83:3c: 58:6d:73:fc:09:47:84:16:18:8f:08:9c:db:61:13: f5:d5:11:3a:3c:c6:e8:32:9e:7e:58:98:87:e9:4d: 69:7f:87:ce:1e:c5:9e:ea:f7:dd:f7:55:42:77:51: da:da:c4:6f:56:4b:17:79:31:18:f6:a6:55:39:fd: 20:72:a8:ee:0e:21:73:bf:55:03:6f:e3:6a:90:c5: 85:23:7c:e8:b8:39:4a:9a:42:9a:b5:7a:bd:da:a8: f5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:CB:DA:D1:1C:23:16:3D:73:54:DC:DE:C1:67:0D:2C:09:05:7C:93 X509v3 Authority Key Identifier: keyid:4C:8F:14:A9:80:41:CC:D9:EA:EF:C4:56:FF:5A:AF:BF:49:01:C6:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:28:eb:19:7d:f8:28:fd:bf:cc:e9:61:71:4f:35:73:9d:56: 37:0b:0a:cc:8b:ac:dc:54:d6:22:78:72:a7:a2:ea:92:93:a5: 30:05:c5:fa:41:c8:a5:81:4f:4f:ae:59:ea:37:68:0a:f9:7d: 00:bb:33:c1:9f:43:89:e6:3f:f4:ef:4e:bd:10:3d:81:65:6f: 81:e6:32:4e:e4:46:a1:26:94:45:f3:6a:7d:ef:bd:ac:d4:8d: 67:53:9c:f1:58:38:b1:b9:10:b4:e8:c9:e8:6e:5a:84:9c:4b: 52:cd:04:7e:a0:fb:f8:16:44:4e:38:7f:43:3d:ce:0a:c9:4f: bc:79:d8:94:cd:f1:83:b0:32:4f:e8:12:1c:be:81:03:df:04: a3:96:af:46:75:3c:16:d1:87:d0:98:9a:28:3f:39:23:ae:3b: e4:88:d8:b1:9c:b9:f2:22:91:62:3a:a6:7f:0f:04:11:57:21: 54:94:9c:2c:a8:79:93:41:31:a2:b6:c0:4e:f0:00:ea:77:33: 1c:cf:45:a4:36:56:b9:94:ac:c1:39:22:5d:65:f3:de:a6:62: 6d:e4:43:46:c3:38:af:ec:dc:c7:61:a0:38:86:e6:61:ad:f4: c6:06:df:d9:8e:2c:59:90:cb:bf:5d:3d:c3:b5:16:ce:a2:57: 2e:0b:00:95 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUUFH4uB5mOSA5Rlk9zTFMUMDe53swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEM4RjE0QTk4MDQxQ0NEOUVBRUZDNDU2RkY1QUFGQkY0 OTAxQzY4MTAeFw0yNjA5MjEwMzQ4NDhaFw0yNjA5MjIwNDA1NDhaMDMxMTAvBgNV BAMTKDMzQ0JEQUQxMUMyMzE2M0Q3MzU0RENERUMxNjcwRDJDMDkwNTdDOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSwOafLk9A6/ekutzyny+yIsrO UPLO7w3rtaZ7mrYoMk8GYGc7Y7r6f1wFOOpYJNEgH3i828qUqbC63PMqtNQDo3LI /2E/fvVFqIOHZDJMeBRbY0dKFEgSQBQcwBm0oZdfbyIdUdnhv0AQFNj1Q37NezqD ob+ots9Xn29O6/Y97DwL+r0eUG4eF+V1Whrln1sPJJXUHaxYr/I/K1qAblvm0JCD PFhtc/wJR4QWGI8InNthE/XVETo8xugynn5YmIfpTWl/h84exZ7q9933VUJ3Udra xG9WSxd5MRj2plU5/SByqO4OIXO/VQNv42qQxYUjfOi4OUqaQpq1er3aqPVvAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUM8va0RwjFj1zVNzewWcNLAkFfJMwHwYDVR0j BBgwFoAUTI8UqYBBzNnq78RW/1qvv0kBxoEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFhZmM4 ZWI4LzQvNEM4RjE0QTk4MDQxQ0NEOUVBRUZDNDU2RkY1QUFGQkY0OTAxQzY4MS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzRDOEYxNEE5ODA0MUND RDlFQUVGQzQ1NkZGNUFBRkJGNDkwMUM2ODEuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFhZmM4ZWI4 LzQvNEM4RjE0QTk4MDQxQ0NEOUVBRUZDNDU2RkY1QUFGQkY0OTAxQzY4MS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBACUo6xl9+Cj9v8zpYXFPNXOdVjcLCsyLrNxU1iJ4cqei6pKTpTAFxfpB yKWBT0+uWeo3aAr5fQC7M8GfQ4nmP/TvTr0QPYFlb4HmMk7kRqEmlEXzan3vvazU jWdTnPFYOLG5ELToyehuWoScS1LNBH6g+/gWRE44f0M9zgrJT7x52JTN8YOwMk/o Ehy+gQPfBKOWr0Z1PBbRh9CYmig/OSOuO+SI2LGcufIikWI6pn8PBBFXIVSUnCyo eZNBMaK2wE7wAOp3MxzPRaQ2VrmUrME5Il1l896mYm3kQ0bDOK/s3MdhoDiG5mGt 9MYG39mOLFmQy79dPcO1Fs6iVy4LAJU= -----END CERTIFICATE-----Generated at Mon Sep 21 14:27:50 2026 by rpki-client