$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft File: 4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft (raw, json) Hash identifier: gw7O8wT7gVZi4I8jlgpE7sqZEXlydiWpddkrHkbpsKI= Subject key identifier: 92:1F:01:25:70:2F:B5:EF:7B:98:B2:70:F9:09:0A:66:AF:D4:EA:FC Authority key identifier: 4C:8F:14:A9:80:41:CC:D9:EA:EF:C4:56:FF:5A:AF:BF:49:01:C6:81 Certificate issuer: /CN=4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681 Certificate serial: 210513D668CA2781166C94F4F6359086447007AA Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft Manifest number: A4 Signing time: Wed 05 Nov 2025 16:55:16 +0000 Manifest this update: Wed 05 Nov 2025 16:50:16 +0000 Manifest next update: Thu 06 Nov 2025 17:26:16 +0000 Files and hashes: 1: 4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.crl (hash: 2gCmBq0qYohicAwgCsORv99QgZYzkvw6Uw7FyrVFQVs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.crl rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 14:47:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:05:13:d6:68:ca:27:81:16:6c:94:f4:f6:35:90:86:44:70:07:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681 Validity Not Before: Nov 5 16:50:16 2025 GMT Not After : Nov 6 17:26:16 2025 GMT Subject: CN=921F0125702FB5EF7B98B270F9090A66AFD4EAFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c6:ea:b3:1a:75:e5:c0:77:07:63:f5:6c:31: 1d:f3:5d:92:82:fb:51:67:9a:64:d2:d7:0f:ea:4e: f9:4e:ca:5f:ee:b5:6b:39:c6:e1:98:b9:6b:af:57: 48:0f:6a:38:af:df:ee:2d:3d:52:60:e9:42:35:97: 38:b4:64:f9:22:4a:5a:90:60:5e:f1:44:1c:ef:38: 17:cc:4e:48:fa:1c:a4:fa:76:7e:f4:da:52:da:a2: c3:8e:f9:34:f4:17:10:ee:b7:c8:9c:0f:9a:90:db: 79:87:be:3a:74:a9:aa:15:d8:92:2a:44:33:23:3e: aa:d6:85:36:08:b5:b6:6e:0d:78:a9:0a:31:a5:2b: f1:82:d1:63:b4:8c:a3:0a:6b:64:dd:0e:d8:12:7f: d1:ae:06:2e:61:33:cb:5e:c8:1e:2f:4d:7c:5a:ea: f8:b3:fc:ed:d7:fe:bf:9f:8a:06:a6:9b:e4:76:2c: ba:a9:c3:a0:63:37:6d:42:fc:a9:eb:db:ab:c9:20: 98:60:68:9d:b8:8d:a2:4c:f1:93:64:b8:9b:68:f6: e7:80:5d:33:f8:26:8d:f0:bf:af:5b:82:f2:c6:6a: 9a:da:e3:0f:d5:8c:41:ae:4d:72:20:26:3e:aa:7b: 01:e1:6f:b6:8a:a5:10:7a:61:22:81:a9:e1:36:62: 13:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:1F:01:25:70:2F:B5:EF:7B:98:B2:70:F9:09:0A:66:AF:D4:EA:FC X509v3 Authority Key Identifier: keyid:4C:8F:14:A9:80:41:CC:D9:EA:EF:C4:56:FF:5A:AF:BF:49:01:C6:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:ca:b4:05:8a:ce:66:ae:ed:06:f5:66:d6:b4:7e:cd:4f:d6: 48:da:b3:ee:bc:47:10:f8:d2:88:d8:e4:63:01:0a:a4:36:d5: 6c:58:5c:b6:8d:58:ea:de:8d:4b:03:af:f9:6f:c8:bc:70:2c: 84:ad:45:34:2f:d6:43:11:ba:36:5a:94:81:01:19:18:dc:9a: 3e:a0:f7:90:41:23:4b:1e:f1:3a:26:87:d0:90:91:49:1b:86: ec:85:0e:50:ca:24:51:ad:07:7c:02:ff:a8:36:a7:9e:04:10: a8:42:4a:41:d7:0e:b2:9c:89:25:ff:fd:23:6c:fd:50:aa:cf: 1c:0a:5a:b7:c9:48:60:8b:6e:01:2e:8b:fc:70:d1:6a:dd:d6: cb:ed:17:f3:3b:47:f8:a9:d0:21:34:80:a5:68:46:72:25:cf: ba:ca:51:59:82:bb:c2:9d:ce:cc:7f:9f:ad:9b:14:b9:00:ff: 95:8f:fa:53:72:3a:95:12:81:84:6c:cc:48:ba:75:36:e7:4d: 27:87:32:0d:f6:42:4b:78:4c:46:16:6a:94:9b:ca:62:67:98: 62:cd:53:1e:ce:91:58:8c:82:68:ae:df:f1:c3:20:aa:24:67: d4:5c:d8:d2:d2:da:40:c6:48:76:5c:23:4d:44:59:f2:ed:d8: 12:22:e3:a9 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUIQUT1mjKJ4EWbJT09jWQhkRwB6owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEM4RjE0QTk4MDQxQ0NEOUVBRUZDNDU2RkY1QUFGQkY0 OTAxQzY4MTAeFw0yNTExMDUxNjUwMTZaFw0yNTExMDYxNzI2MTZaMDMxMTAvBgNV BAMTKDkyMUYwMTI1NzAyRkI1RUY3Qjk4QjI3MEY5MDkwQTY2QUZENEVBRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7xuqzGnXlwHcHY/VsMR3zXZKC +1FnmmTS1w/qTvlOyl/utWs5xuGYuWuvV0gPajiv3+4tPVJg6UI1lzi0ZPkiSlqQ YF7xRBzvOBfMTkj6HKT6dn702lLaosOO+TT0FxDut8icD5qQ23mHvjp0qaoV2JIq RDMjPqrWhTYItbZuDXipCjGlK/GC0WO0jKMKa2TdDtgSf9GuBi5hM8teyB4vTXxa 6viz/O3X/r+figamm+R2LLqpw6BjN21C/Knr26vJIJhgaJ24jaJM8ZNkuJto9ueA XTP4Jo3wv69bgvLGapra4w/VjEGuTXIgJj6qewHhb7aKpRB6YSKBqeE2YhNDAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUkh8BJXAvte97mLJw+QkKZq/U6vwwHwYDVR0j BBgwFoAUTI8UqYBBzNnq78RW/1qvv0kBxoEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFhZmM4 ZWI4LzQvNEM4RjE0QTk4MDQxQ0NEOUVBRUZDNDU2RkY1QUFGQkY0OTAxQzY4MS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzRDOEYxNEE5ODA0MUND RDlFQUVGQzQ1NkZGNUFBRkJGNDkwMUM2ODEuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFhZmM4ZWI4 LzQvNEM4RjE0QTk4MDQxQ0NEOUVBRUZDNDU2RkY1QUFGQkY0OTAxQzY4MS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBABTKtAWKzmau7Qb1Zta0fs1P1kjas+68RxD40ojY5GMBCqQ21WxYXLaN WOrejUsDr/lvyLxwLIStRTQv1kMRujZalIEBGRjcmj6g95BBI0se8Tomh9CQkUkb huyFDlDKJFGtB3wC/6g2p54EEKhCSkHXDrKciSX//SNs/VCqzxwKWrfJSGCLbgEu i/xw0Wrd1svtF/M7R/ip0CE0gKVoRnIlz7rKUVmCu8Kdzsx/n62bFLkA/5WP+lNy OpUSgYRszEi6dTbnTSeHMg32Qkt4TEYWapSbymJnmGLNUx7OkViMgmiu3/HDIKok Z9Rc2NLS2kDGSHZcI01EWfLt2BIi46k= -----END CERTIFICATE-----Generated at Thu Nov 6 00:23:19 2025 by rpki-client