$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft File: 4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft (raw, json) Hash identifier: JfJxyDAl/xnv7Gthw60B4nerRkf/up70jdFsW10ncPE= Subject key identifier: 5E:59:CB:92:A5:3C:EE:9E:C1:57:D1:6B:8E:B8:AC:2F:57:5F:12:D2 Authority key identifier: 4C:8F:14:A9:80:41:CC:D9:EA:EF:C4:56:FF:5A:AF:BF:49:01:C6:81 Certificate issuer: /CN=4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681 Certificate serial: 1858D931303D5C74A00E4B991955A8A86B82A395 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft Manifest number: 017E Signing time: Fri 17 Apr 2026 07:56:42 +0000 Manifest this update: Fri 17 Apr 2026 07:51:42 +0000 Manifest next update: Sat 18 Apr 2026 09:10:42 +0000 Files and hashes: 1: 4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.crl (hash: Dp9nvlPBLcOLhpPDTjQqHVIeoln9zSmQecYWph2I3zU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.crl rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 03:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:58:d9:31:30:3d:5c:74:a0:0e:4b:99:19:55:a8:a8:6b:82:a3:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681 Validity Not Before: Apr 17 07:51:42 2026 GMT Not After : Apr 18 09:10:42 2026 GMT Subject: CN=5E59CB92A53CEE9EC157D16B8EB8AC2F575F12D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6a:6d:97:2b:d9:27:fd:4a:a9:a0:9d:2e:e0: 41:5a:ae:92:8b:df:5e:62:15:ab:a9:a7:9d:cb:9b: 2c:f6:ad:6a:13:cd:c5:ec:03:7b:de:fd:59:3b:bd: c4:e4:71:f6:a3:9c:aa:58:dc:f1:cd:b0:64:ab:f1: 8b:a6:a4:2b:00:b0:ee:71:5e:a2:6c:49:81:42:02: 3d:fb:09:23:08:17:db:1a:35:ac:5d:be:5b:14:78: a5:b1:01:6f:1e:49:55:39:22:d3:91:57:a5:2b:41: c0:16:c6:f2:78:d7:29:25:8f:41:df:00:6e:97:85: a9:11:bf:56:4c:39:dc:c6:68:8f:6a:d0:74:53:22: 78:26:07:f4:cc:ba:dd:99:4f:5a:76:99:45:25:bd: a6:db:dd:bd:da:20:7c:f6:b0:ab:18:40:d5:e4:9e: cd:d9:ba:d4:be:ed:ef:07:25:08:89:0d:ff:cb:f0: 71:6c:df:d7:c5:87:a2:71:83:fe:51:50:a7:cc:8c: c5:f6:02:28:3c:1c:0c:39:7d:24:cb:98:92:59:31: 8f:fb:02:0c:4e:6c:69:fd:d6:d5:31:c7:31:ed:0c: b1:ec:09:31:92:9d:eb:88:0f:fc:ea:7e:23:69:cd: 0e:13:4d:ba:16:72:20:b9:60:7c:93:1d:e8:b9:47: d7:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:59:CB:92:A5:3C:EE:9E:C1:57:D1:6B:8E:B8:AC:2F:57:5F:12:D2 X509v3 Authority Key Identifier: keyid:4C:8F:14:A9:80:41:CC:D9:EA:EF:C4:56:FF:5A:AF:BF:49:01:C6:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:e2:fc:31:f2:d8:b1:fa:ec:2c:de:2c:e7:ab:d2:ac:7d:13: 24:91:ad:fe:46:37:c5:d1:e2:21:62:ec:5b:8f:76:d9:19:0b: 7c:23:9a:92:a6:18:80:77:9b:3a:9e:90:ab:55:59:6e:54:d9: b4:7e:7a:62:17:75:3c:75:06:d2:6f:62:e8:e5:08:40:c4:32: c2:83:66:60:39:9c:25:c2:2e:7c:78:c7:da:d3:d2:1d:8c:1b: b1:d3:6c:e7:a0:7b:3b:f2:21:a5:66:8a:d4:11:17:66:72:c2: b8:c9:cf:bd:45:2a:d5:ca:81:dc:d8:b4:c5:53:83:f9:70:0e: ba:2b:a1:07:2f:2a:40:bc:a3:c0:8b:0e:ed:e4:9a:9b:8d:f5: 6d:83:60:4c:70:4d:6a:7f:0c:07:14:ac:7b:61:bc:5f:d8:83: fd:a0:be:9c:25:93:27:2d:73:ce:26:ba:26:89:5a:ab:43:54: 2c:4e:d7:d0:9d:a9:73:50:1d:f2:90:cd:72:a3:de:0a:47:4c: ed:bb:db:89:91:79:cc:51:36:66:93:7f:b3:c8:25:d0:df:bc: 85:06:88:d6:8a:4e:fa:ae:ed:ea:07:64:28:1e:75:67:69:29: ff:f7:01:ad:e7:92:77:74:98:e5:34:96:4f:2c:87:cc:45:8f: bf:db:b5:39 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUGFjZMTA9XHSgDkuZGVWoqGuCo5UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEM4RjE0QTk4MDQxQ0NEOUVBRUZDNDU2RkY1QUFGQkY0 OTAxQzY4MTAeFw0yNjA0MTcwNzUxNDJaFw0yNjA0MTgwOTEwNDJaMDMxMTAvBgNV BAMTKDVFNTlDQjkyQTUzQ0VFOUVDMTU3RDE2QjhFQjhBQzJGNTc1RjEyRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBam2XK9kn/UqpoJ0u4EFarpKL 315iFaupp53Lmyz2rWoTzcXsA3ve/Vk7vcTkcfajnKpY3PHNsGSr8YumpCsAsO5x XqJsSYFCAj37CSMIF9saNaxdvlsUeKWxAW8eSVU5ItORV6UrQcAWxvJ41yklj0Hf AG6XhakRv1ZMOdzGaI9q0HRTIngmB/TMut2ZT1p2mUUlvabb3b3aIHz2sKsYQNXk ns3ZutS+7e8HJQiJDf/L8HFs39fFh6Jxg/5RUKfMjMX2Aig8HAw5fSTLmJJZMY/7 AgxObGn91tUxxzHtDLHsCTGSneuID/zqfiNpzQ4TTboWciC5YHyTHei5R9eTAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUXlnLkqU87p7BV9FrjrisL1dfEtIwHwYDVR0j BBgwFoAUTI8UqYBBzNnq78RW/1qvv0kBxoEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFhZmM4 ZWI4LzQvNEM4RjE0QTk4MDQxQ0NEOUVBRUZDNDU2RkY1QUFGQkY0OTAxQzY4MS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzRDOEYxNEE5ODA0MUND RDlFQUVGQzQ1NkZGNUFBRkJGNDkwMUM2ODEuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFhZmM4ZWI4 LzQvNEM4RjE0QTk4MDQxQ0NEOUVBRUZDNDU2RkY1QUFGQkY0OTAxQzY4MS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAEXi/DHy2LH67CzeLOer0qx9EySRrf5GN8XR4iFi7FuPdtkZC3wjmpKm GIB3mzqekKtVWW5U2bR+emIXdTx1BtJvYujlCEDEMsKDZmA5nCXCLnx4x9rT0h2M G7HTbOegezvyIaVmitQRF2ZywrjJz71FKtXKgdzYtMVTg/lwDroroQcvKkC8o8CL Du3kmpuN9W2DYExwTWp/DAcUrHthvF/Yg/2gvpwlkyctc84muiaJWqtDVCxO19Cd qXNQHfKQzXKj3gpHTO2724mRecxRNmaTf7PIJdDfvIUGiNaKTvqu7eoHZCgedWdp Kf/3Aa3nknd0mOU0lk8sh8xFj7/btTk= -----END CERTIFICATE-----Generated at Fri Apr 17 10:58:45 2026 by rpki-client