$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft File: 4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft (raw, json) Hash identifier: Q4u/w6MzrtCHzkL5LWa/1j67lc26CKWX4RdtLh7l62Y= Subject key identifier: 66:41:1B:90:52:8E:54:94:84:1B:E1:DB:37:13:18:93:3A:8E:B8:62 Authority key identifier: 4C:8F:14:A9:80:41:CC:D9:EA:EF:C4:56:FF:5A:AF:BF:49:01:C6:81 Certificate issuer: /CN=4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681 Certificate serial: 5B599AF5EDE8787FE2BE80D159F53A960E9E1018 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft Manifest number: 013D Signing time: Sun 01 Mar 2026 07:33:40 +0000 Manifest this update: Sun 01 Mar 2026 07:28:40 +0000 Manifest next update: Mon 02 Mar 2026 09:31:40 +0000 Files and hashes: 1: 4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.crl (hash: w1mCbJGjE7ZM7pjnfEqBF3Dg0fo9k9SQrBXgNz2JpNk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.crl rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 09:02:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:59:9a:f5:ed:e8:78:7f:e2:be:80:d1:59:f5:3a:96:0e:9e:10:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681 Validity Not Before: Mar 1 07:28:40 2026 GMT Not After : Mar 2 09:31:40 2026 GMT Subject: CN=66411B90528E5494841BE1DB371318933A8EB862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2f:ae:78:12:5d:45:5b:cc:ec:aa:ac:a3:47: 29:c6:47:8f:0d:ad:fd:27:65:e2:57:d2:c6:6d:3f: 5d:d4:3d:13:a2:fa:16:bc:5a:96:bc:6b:02:0b:e0: 1d:e6:2f:eb:e0:c4:22:0b:23:0f:35:db:71:e2:eb: ba:b8:51:bf:06:35:48:5a:01:21:00:c8:dc:f3:f0: b7:a9:3f:91:48:4a:6c:09:4c:15:d6:f1:d0:c0:ef: 93:7c:6d:12:28:9f:b6:83:1b:75:31:70:e3:8a:f7: d3:9e:e9:49:93:9e:b3:fd:81:77:d5:38:ad:14:c9: a9:a3:78:6e:ed:3c:d3:27:0e:0e:f2:27:14:e2:a7: b8:e8:67:f0:b9:62:9b:44:9f:b0:e4:ea:09:9c:a7: a9:64:eb:19:ed:3a:bf:25:c2:52:35:ac:1e:08:58: 1b:f3:9b:84:49:a9:72:50:f7:a0:db:c1:59:35:ce: 35:fb:4a:f0:18:c4:e6:3e:0d:53:b1:ca:8c:57:70: 90:e1:93:87:5d:a3:54:76:06:d6:ca:49:1e:d2:c7: 93:31:8e:4d:35:76:3e:5a:04:8c:34:09:9b:cf:9f: 25:b4:95:18:8e:3b:f4:36:78:9a:37:6d:15:9b:fd: 22:84:04:ec:23:9e:6d:fd:b2:2c:3b:8e:71:4e:6f: 56:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:41:1B:90:52:8E:54:94:84:1B:E1:DB:37:13:18:93:3A:8E:B8:62 X509v3 Authority Key Identifier: keyid:4C:8F:14:A9:80:41:CC:D9:EA:EF:C4:56:FF:5A:AF:BF:49:01:C6:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:9f:fd:eb:c8:4e:db:1b:6a:6f:cc:fd:0f:a0:df:59:f6:14: a4:c4:77:0c:90:49:26:ab:2f:ab:4e:8c:29:a6:83:07:42:b5: d7:23:d2:41:df:c9:e1:2d:be:af:1c:84:59:01:54:9d:2d:16: 76:46:33:46:c2:7b:fe:28:1c:ec:65:f2:fa:fa:56:58:62:e3: 9c:d8:85:61:7f:82:d2:26:24:a4:cb:61:e0:11:34:1e:5e:9d: 5e:7b:d7:76:98:db:13:04:19:68:e4:2d:2d:87:e4:5b:5f:fa: 21:36:ba:1f:55:d7:11:10:72:46:28:f0:20:16:9f:07:b7:0c: ba:d9:29:58:d3:c9:12:5d:43:6c:78:1b:46:58:74:d4:b7:ee: 11:ad:9e:10:f6:ae:e3:36:c0:89:b6:93:58:ad:1e:1a:e2:19: 9c:54:25:96:e2:48:44:1b:c9:dc:94:4d:5c:0d:f7:8c:dd:8a: 25:5e:e5:d2:83:e8:89:5b:f6:85:99:f7:57:a7:fd:88:f4:ef: 3f:b8:6d:62:bc:e6:48:00:19:f4:49:a1:85:a8:39:1d:01:73: 20:54:b8:22:21:4e:fd:c2:98:d1:8e:25:9f:27:e4:67:b2:7e: 20:ce:74:5c:0c:45:c9:47:03:b1:ec:53:8b:7d:5f:37:79:00: 05:7d:e5:06 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUW1ma9e3oeH/ivoDRWfU6lg6eEBgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEM4RjE0QTk4MDQxQ0NEOUVBRUZDNDU2RkY1QUFGQkY0 OTAxQzY4MTAeFw0yNjAzMDEwNzI4NDBaFw0yNjAzMDIwOTMxNDBaMDMxMTAvBgNV BAMTKDY2NDExQjkwNTI4RTU0OTQ4NDFCRTFEQjM3MTMxODkzM0E4RUI4NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2L654El1FW8zsqqyjRynGR48N rf0nZeJX0sZtP13UPROi+ha8Wpa8awIL4B3mL+vgxCILIw8123Hi67q4Ub8GNUha ASEAyNzz8LepP5FISmwJTBXW8dDA75N8bRIon7aDG3UxcOOK99Oe6UmTnrP9gXfV OK0UyamjeG7tPNMnDg7yJxTip7joZ/C5YptEn7Dk6gmcp6lk6xntOr8lwlI1rB4I WBvzm4RJqXJQ96DbwVk1zjX7SvAYxOY+DVOxyoxXcJDhk4ddo1R2BtbKSR7Sx5Mx jk01dj5aBIw0CZvPnyW0lRiOO/Q2eJo3bRWb/SKEBOwjnm39siw7jnFOb1ZpAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUZkEbkFKOVJSEG+HbNxMYkzqOuGIwHwYDVR0j BBgwFoAUTI8UqYBBzNnq78RW/1qvv0kBxoEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFhZmM4 ZWI4LzQvNEM4RjE0QTk4MDQxQ0NEOUVBRUZDNDU2RkY1QUFGQkY0OTAxQzY4MS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzRDOEYxNEE5ODA0MUND RDlFQUVGQzQ1NkZGNUFBRkJGNDkwMUM2ODEuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFhZmM4ZWI4 LzQvNEM4RjE0QTk4MDQxQ0NEOUVBRUZDNDU2RkY1QUFGQkY0OTAxQzY4MS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAHKf/evITtsbam/M/Q+g31n2FKTEdwyQSSarL6tOjCmmgwdCtdcj0kHf yeEtvq8chFkBVJ0tFnZGM0bCe/4oHOxl8vr6Vlhi45zYhWF/gtImJKTLYeARNB5e nV5713aY2xMEGWjkLS2H5Ftf+iE2uh9V1xEQckYo8CAWnwe3DLrZKVjTyRJdQ2x4 G0ZYdNS37hGtnhD2ruM2wIm2k1itHhriGZxUJZbiSEQbydyUTVwN94zdiiVe5dKD 6Ilb9oWZ91en/Yj07z+4bWK85kgAGfRJoYWoOR0BcyBUuCIhTv3CmNGOJZ8n5Gey fiDOdFwMRclHA7HsU4t9Xzd5AAV95QY= -----END CERTIFICATE-----Generated at Mon Mar 2 00:12:34 2026 by rpki-client