$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft File: 0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft (raw, json) Hash identifier: usPiUs2OQTJhvoWLtJcLPYZ49qXwl/DpVhovbQrtu/E= Subject key identifier: 1D:38:6F:E4:70:5B:15:CE:0E:C7:61:58:43:B6:3C:2D:15:4F:49:6B Authority key identifier: 0B:3B:68:A2:06:B6:AF:84:A3:4A:A1:B7:63:2E:99:AB:06:F5:20:77 Certificate issuer: /CN=0B3B68A206B6AF84A34AA1B7632E99AB06F52077 Certificate serial: 0CF858A222877BEAAE025FD80F98070BBB4C6937 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft Manifest number: 23 Signing time: Mon 02 Mar 2026 17:01:39 +0000 Manifest this update: Mon 02 Mar 2026 16:56:39 +0000 Manifest next update: Tue 03 Mar 2026 20:11:39 +0000 Files and hashes: 1: 0B3B68A206B6AF84A34AA1B7632E99AB06F52077.crl (hash: 2ZWrmALQkkN/9U8BAeNtTjBg/j4H65IyErS/Ks16DUc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.crl rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 15:05:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:f8:58:a2:22:87:7b:ea:ae:02:5f:d8:0f:98:07:0b:bb:4c:69:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B3B68A206B6AF84A34AA1B7632E99AB06F52077 Validity Not Before: Mar 2 16:56:39 2026 GMT Not After : Mar 3 20:11:39 2026 GMT Subject: CN=1D386FE4705B15CE0EC7615843B63C2D154F496B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:05:e4:49:0c:f4:72:32:c2:14:8f:47:97:d2: e3:18:0c:74:c7:52:c8:74:18:9f:91:64:9c:1a:bb: ab:0a:82:78:a3:62:db:68:7c:a7:8d:1c:a0:f2:de: a3:14:1b:4f:4e:4a:00:5c:c4:13:02:09:a9:da:f5: 93:eb:4f:ee:4f:a2:92:05:60:92:75:0c:73:c2:71: e2:65:5c:c5:ef:ad:fc:5a:eb:e6:45:f7:24:41:93: 38:a1:2b:2b:60:c0:36:04:df:59:88:8a:20:d2:48: c7:52:21:b8:ba:a6:69:dc:24:72:6f:ba:92:99:3a: bc:6b:06:9e:88:8a:47:4d:10:05:ec:bb:b3:0e:4d: 0e:8f:8a:76:3d:86:41:c6:8a:b9:16:e1:4a:81:86: 04:ce:4b:5a:3d:53:26:cd:b5:80:ab:25:37:f3:b9: 75:59:a7:ec:45:15:8a:c9:93:1a:ac:50:0e:8b:1e: a3:8d:91:12:50:1f:58:31:cb:9e:41:f3:e7:32:7d: d6:ab:77:54:0d:35:23:e3:10:16:3a:5b:71:d9:45: 64:76:7b:63:6b:c2:fc:7a:22:76:7d:d3:0e:2f:21: 4b:e0:ca:34:b8:cd:4c:69:96:d7:f3:a5:29:f8:b7: 96:59:9e:96:51:fe:89:2d:64:2a:1e:29:51:c2:62: 36:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:38:6F:E4:70:5B:15:CE:0E:C7:61:58:43:B6:3C:2D:15:4F:49:6B X509v3 Authority Key Identifier: keyid:0B:3B:68:A2:06:B6:AF:84:A3:4A:A1:B7:63:2E:99:AB:06:F5:20:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:ec:8e:f3:e4:7c:d5:2b:d8:b6:d8:58:35:f9:2a:c3:d3:6f: c0:1c:94:25:c1:13:22:df:07:52:b0:f1:21:c5:c8:69:0c:37: 3e:ae:d3:3c:e5:51:d8:47:1e:97:85:1e:45:45:74:54:3f:69: 2e:0b:1f:05:54:ed:e1:be:e1:a5:08:0f:4c:f2:0b:3e:46:4b: 7d:fc:f3:ce:a1:cc:99:0c:61:8a:92:86:78:0e:bb:6e:b6:62: 72:24:82:7c:c1:17:8b:eb:f1:61:b6:a6:aa:a1:a7:72:e0:88: 43:88:15:8a:85:d1:6e:21:26:1e:fc:df:dd:e0:22:70:fd:30: ba:aa:14:a5:78:81:9d:a2:32:48:47:d6:92:60:f8:7f:db:af: 35:7a:27:9d:26:b4:0e:63:13:cd:00:12:e0:4a:65:80:61:05: 86:34:a2:24:27:50:e4:1e:76:84:7f:f9:0b:0b:18:2f:b6:45: f7:4b:95:13:39:0c:fe:09:d5:79:73:42:1e:b3:33:0b:7c:44: 0a:b1:08:06:8b:82:64:bb:20:3c:dd:db:cb:aa:95:19:e4:ad: d0:9b:01:0c:2b:c0:ce:f9:01:3e:dc:4b:c9:20:ff:30:e7:6c: f0:f5:a7:37:22:34:4a:7e:c4:99:78:32:dc:33:cb:79:59:20: 7e:e4:6b:8f -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgIUDPhYoiKHe+quAl/YD5gHC7tMaTcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEIzQjY4QTIwNkI2QUY4NEEzNEFBMUI3NjMyRTk5QUIw NkY1MjA3NzAeFw0yNjAzMDIxNjU2MzlaFw0yNjAzMDMyMDExMzlaMDMxMTAvBgNV BAMTKDFEMzg2RkU0NzA1QjE1Q0UwRUM3NjE1ODQzQjYzQzJEMTU0RjQ5NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsBeRJDPRyMsIUj0eX0uMYDHTH Ush0GJ+RZJwau6sKgnijYttofKeNHKDy3qMUG09OSgBcxBMCCana9ZPrT+5PopIF YJJ1DHPCceJlXMXvrfxa6+ZF9yRBkzihKytgwDYE31mIiiDSSMdSIbi6pmncJHJv upKZOrxrBp6IikdNEAXsu7MOTQ6PinY9hkHGirkW4UqBhgTOS1o9UybNtYCrJTfz uXVZp+xFFYrJkxqsUA6LHqONkRJQH1gxy55B8+cyfdard1QNNSPjEBY6W3HZRWR2 e2Nrwvx6InZ90w4vIUvgyjS4zUxpltfzpSn4t5ZZnpZR/oktZCoeKVHCYjY9AgMB AAGjggJhMIICXTAdBgNVHQ4EFgQUHThv5HBbFc4Ox2FYQ7Y8LRVPSWswHwYDVR0j BBgwFoAUCztooga2r4SjSqG3Yy6Zqwb1IHcwDgYDVR0PAQH/BAQDAgeAMIGXBgNV HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzFiZjhlOTc3LTcyNzgtNDZjZi1hYmQxLTk5Y2QxZmQy YmU0ZS8xMC8wQjNCNjhBMjA2QjZBRjg0QTM0QUExQjc2MzJFOTlBQjA2RjUyMDc3 LmNybDB6BggrBgEFBQcBAQRuMGwwagYIKwYBBQUHMAKGXnJzeW5jOi8vY2xvdWRp ZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xPVURJRS1SUEtJLzQvMEIzQjY4QTIwNkI2 QUY4NEEzNEFBMUI3NjMyRTk5QUIwNkY1MjA3Ny5jZXIwgaAGCCsGAQUFBwELBIGT MIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi ZTRlLzEwLzBCM0I2OEEyMDZCNkFGODRBMzRBQTFCNzYzMkU5OUFCMDZGNTIwNzcu bWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQ MAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3 DQEBCwUAA4IBAQBi7I7z5HzVK9i22Fg1+SrD02/AHJQlwRMi3wdSsPEhxchpDDc+ rtM85VHYRx6XhR5FRXRUP2kuCx8FVO3hvuGlCA9M8gs+Rkt9/PPOocyZDGGKkoZ4 DrtutmJyJIJ8wReL6/Fhtqaqoady4IhDiBWKhdFuISYe/N/d4CJw/TC6qhSleIGd ojJIR9aSYPh/2681eiedJrQOYxPNABLgSmWAYQWGNKIkJ1DkHnaEf/kLCxgvtkX3 S5UTOQz+CdV5c0IeszMLfEQKsQgGi4JkuyA83dvLqpUZ5K3QmwEMK8DO+QE+3EvJ IP8w52zw9ac3IjRKfsSZeDLcM8t5WSB+5GuP -----END CERTIFICATE-----Generated at Tue Mar 3 00:54:16 2026 by rpki-client