$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft File: 0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft (raw, json) Hash identifier: 367Zb0TCnvqshSxnydz3wVR5R94QJutAiCJy1whz8ic= Subject key identifier: B2:68:21:CF:E2:CB:03:97:EA:2F:B3:5D:FE:59:3A:CA:32:33:FD:F2 Authority key identifier: 0B:3B:68:A2:06:B6:AF:84:A3:4A:A1:B7:63:2E:99:AB:06:F5:20:77 Certificate issuer: /CN=0B3B68A206B6AF84A34AA1B7632E99AB06F52077 Certificate serial: 027C40A2FA610FE2637A77CB562AAF036D44F11D Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft Manifest number: 62 Signing time: Thu 16 Apr 2026 19:19:05 +0000 Manifest this update: Thu 16 Apr 2026 19:14:05 +0000 Manifest next update: Fri 17 Apr 2026 21:19:05 +0000 Files and hashes: 1: 0B3B68A206B6AF84A34AA1B7632E99AB06F52077.crl (hash: fE3FqRDYzH00umVxg25TrkOlocbt5Aa41e4BPiE0tbE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.crl rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 21:19:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:7c:40:a2:fa:61:0f:e2:63:7a:77:cb:56:2a:af:03:6d:44:f1:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B3B68A206B6AF84A34AA1B7632E99AB06F52077 Validity Not Before: Apr 16 19:14:05 2026 GMT Not After : Apr 17 21:19:05 2026 GMT Subject: CN=B26821CFE2CB0397EA2FB35DFE593ACA3233FDF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b7:c5:e7:ea:23:ab:62:a0:ed:db:13:43:4b: f3:33:93:af:ba:63:b9:cb:4b:6d:4c:e3:c4:22:c7: 51:be:bd:f1:8a:76:4f:09:fe:12:4b:5b:39:f3:70: ed:09:c4:f3:e6:4a:93:a5:ec:b8:89:98:41:25:2a: 61:a3:a0:82:fd:e9:25:4a:96:6b:fc:2f:a6:d7:2c: d0:63:77:08:d7:6b:77:5b:11:3a:b6:0d:42:51:5b: 79:21:20:1f:4e:8f:4f:b2:00:82:82:cf:ee:00:17: c0:63:e1:3c:9e:07:50:b5:d8:25:02:b7:2f:ae:31: 9f:40:ba:65:73:01:b0:4c:5a:3a:9c:8e:81:db:e0: af:96:2f:55:d1:e8:02:28:c2:0b:89:57:d3:55:28: c5:d7:30:4e:a3:67:ac:2d:18:47:a3:4f:11:7c:08: 43:89:e2:85:50:6f:e2:fc:f4:2c:eb:0b:e6:f7:79: 68:b0:fb:9f:d0:59:79:ca:34:74:56:b2:14:a3:e2: 79:1a:15:17:fb:e0:e0:a9:03:4b:18:96:89:6f:e8: 83:fa:7a:c4:58:15:bc:40:0f:8d:55:0f:cf:4b:24: 53:36:64:3c:72:6b:83:83:12:bb:04:e1:fa:bd:50: 76:cb:53:a1:3f:05:4f:70:a1:16:f9:cc:c5:1b:c9: 8c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:68:21:CF:E2:CB:03:97:EA:2F:B3:5D:FE:59:3A:CA:32:33:FD:F2 X509v3 Authority Key Identifier: keyid:0B:3B:68:A2:06:B6:AF:84:A3:4A:A1:B7:63:2E:99:AB:06:F5:20:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:fa:fa:d8:72:56:12:af:a4:75:e0:78:e4:44:73:96:d8:bc: 58:aa:47:e5:9b:23:b3:a5:e5:2a:ab:a1:7b:c2:aa:a3:6c:68: 1e:f7:a8:14:a7:2a:94:7e:08:49:06:2d:e8:dd:b3:6f:9a:47: 83:63:58:e7:89:6e:74:0f:34:f3:09:b3:e9:2f:67:a8:3a:ba: 6e:d4:1d:5e:13:ea:a6:16:d5:8a:8c:9a:d7:28:42:68:23:9f: 89:6d:3a:44:3f:53:78:18:83:74:3e:86:82:e0:77:33:ed:a7: 80:36:a3:9c:18:22:5b:0c:35:36:8f:90:d5:7f:0c:fd:cf:ca: 67:32:97:9d:12:f5:6b:ee:aa:39:66:de:19:de:85:fe:53:47: 56:59:d7:e3:d3:6f:9b:5d:7b:59:ff:2a:3d:63:ba:c1:d0:ae: 69:95:b9:10:bc:60:5e:93:0e:83:56:30:92:6d:ab:a2:d6:8d: 00:58:47:de:80:3a:8e:30:3a:9c:62:d7:94:f3:ca:d7:04:fb: b1:f8:fb:ea:44:9b:74:ab:a7:d7:ec:7b:0b:12:2b:da:05:e2: 1f:2c:a3:f1:af:56:9d:a0:c9:26:a7:ca:2f:46:45:27:85:c2: 2b:17:8d:fc:32:d8:4b:2b:9f:5c:3c:bc:16:2e:4c:eb:e8:b4: dd:56:6f:dc -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgIUAnxAovphD+JjenfLViqvA21E8R0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEIzQjY4QTIwNkI2QUY4NEEzNEFBMUI3NjMyRTk5QUIw NkY1MjA3NzAeFw0yNjA0MTYxOTE0MDVaFw0yNjA0MTcyMTE5MDVaMDMxMTAvBgNV BAMTKEIyNjgyMUNGRTJDQjAzOTdFQTJGQjM1REZFNTkzQUNBMzIzM0ZERjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCst8Xn6iOrYqDt2xNDS/Mzk6+6 Y7nLS21M48Qix1G+vfGKdk8J/hJLWznzcO0JxPPmSpOl7LiJmEElKmGjoIL96SVK lmv8L6bXLNBjdwjXa3dbETq2DUJRW3khIB9Oj0+yAIKCz+4AF8Bj4TyeB1C12CUC ty+uMZ9AumVzAbBMWjqcjoHb4K+WL1XR6AIowguJV9NVKMXXME6jZ6wtGEejTxF8 CEOJ4oVQb+L89CzrC+b3eWiw+5/QWXnKNHRWshSj4nkaFRf74OCpA0sYlolv6IP6 esRYFbxAD41VD89LJFM2ZDxya4ODErsE4fq9UHbLU6E/BU9woRb5zMUbyYxtAgMB AAGjggJhMIICXTAdBgNVHQ4EFgQUsmghz+LLA5fqL7Nd/lk6yjIz/fIwHwYDVR0j BBgwFoAUCztooga2r4SjSqG3Yy6Zqwb1IHcwDgYDVR0PAQH/BAQDAgeAMIGXBgNV HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzFiZjhlOTc3LTcyNzgtNDZjZi1hYmQxLTk5Y2QxZmQy YmU0ZS8xMC8wQjNCNjhBMjA2QjZBRjg0QTM0QUExQjc2MzJFOTlBQjA2RjUyMDc3 LmNybDB6BggrBgEFBQcBAQRuMGwwagYIKwYBBQUHMAKGXnJzeW5jOi8vY2xvdWRp ZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xPVURJRS1SUEtJLzQvMEIzQjY4QTIwNkI2 QUY4NEEzNEFBMUI3NjMyRTk5QUIwNkY1MjA3Ny5jZXIwgaAGCCsGAQUFBwELBIGT MIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi ZTRlLzEwLzBCM0I2OEEyMDZCNkFGODRBMzRBQTFCNzYzMkU5OUFCMDZGNTIwNzcu bWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQ MAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3 DQEBCwUAA4IBAQBd+vrYclYSr6R14HjkRHOW2LxYqkflmyOzpeUqq6F7wqqjbGge 96gUpyqUfghJBi3o3bNvmkeDY1jniW50DzTzCbPpL2eoOrpu1B1eE+qmFtWKjJrX KEJoI5+JbTpEP1N4GIN0PoaC4Hcz7aeANqOcGCJbDDU2j5DVfwz9z8pnMpedEvVr 7qo5Zt4Z3oX+U0dWWdfj02+bXXtZ/yo9Y7rB0K5plbkQvGBekw6DVjCSbaui1o0A WEfegDqOMDqcYteU88rXBPux+PvqRJt0q6fX7HsLEivaBeIfLKPxr1adoMkmp8ov RkUnhcIrF438MthLK59cPLwWLkzr6LTdVm/c -----END CERTIFICATE-----Generated at Fri Apr 17 07:55:26 2026 by rpki-client