$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.mft File: FF4F1D48A6088FEC5ED73270F82068A436391A71.mft (raw, json) Hash identifier: O7a2qO78RUdnB347QVixtvf4aEsPLgruQEwkG9lq8S0= Subject key identifier: DD:56:B7:7E:0E:DE:C0:72:43:97:E7:54:85:CA:01:DB:E7:5A:CE:C7 Authority key identifier: FF:4F:1D:48:A6:08:8F:EC:5E:D7:32:70:F8:20:68:A4:36:39:1A:71 Certificate issuer: /CN=FF4F1D48A6088FEC5ED73270F82068A436391A71 Certificate serial: 35B4E861F4278AD601228F7DDA1887B57D46C242 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/FF4F1D48A6088FEC5ED73270F82068A436391A71.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.mft Manifest number: F2 Signing time: Fri 17 Apr 2026 02:12:27 +0000 Manifest this update: Fri 17 Apr 2026 02:07:27 +0000 Manifest next update: Sat 18 Apr 2026 04:30:27 +0000 Files and hashes: 1: FF4F1D48A6088FEC5ED73270F82068A436391A71.crl (hash: jThjgOAgcdWeqSxHctmOBqpsvziawT8NyXfujsyRIbQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.crl rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/FF4F1D48A6088FEC5ED73270F82068A436391A71.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 04:30:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:b4:e8:61:f4:27:8a:d6:01:22:8f:7d:da:18:87:b5:7d:46:c2:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF4F1D48A6088FEC5ED73270F82068A436391A71 Validity Not Before: Apr 17 02:07:27 2026 GMT Not After : Apr 18 04:30:27 2026 GMT Subject: CN=DD56B77E0EDEC0724397E75485CA01DBE75ACEC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:75:33:10:23:51:8a:dc:a5:4f:c2:10:51:3b: 3d:84:fe:7e:d8:df:29:b1:21:3c:b6:41:7f:70:5e: 93:29:6d:e6:19:43:ae:6a:34:0b:bd:e5:b9:be:19: 26:80:7e:24:3f:ff:9f:d1:9d:db:8e:4c:c6:65:6f: aa:79:2f:3f:e3:6d:e7:06:9e:8c:08:eb:9c:69:1f: ea:4a:a5:77:ec:9c:2c:6c:b0:dd:7c:4a:10:07:38: c2:ca:00:96:d9:8c:90:57:5e:1a:6f:dd:05:1e:8c: 5a:c8:61:ed:df:6c:c0:2e:ab:d2:5b:ee:d0:b3:60: ae:0f:34:ba:3b:1c:50:e0:b7:11:e5:41:56:8f:0d: 4c:74:ac:ad:fb:60:07:5f:ef:0e:08:4f:d7:28:ef: a6:61:1e:46:40:db:19:ed:5b:60:de:79:f1:26:31: a2:15:26:88:e7:77:72:51:1d:78:b4:9e:0b:d3:5d: fe:3a:40:93:47:bd:1f:61:d5:a2:0b:ff:28:df:a2: ac:9c:cb:fa:ab:6c:66:78:74:fc:1b:0e:5a:ee:0e: 5d:fa:70:3c:8b:8c:c6:23:e7:68:5b:4e:55:48:1a: f9:2b:e3:f3:89:d6:14:16:54:a0:21:8d:3c:ee:7a: fc:5a:68:54:8f:c6:8c:53:2f:e6:f6:92:d8:e3:d5: 1b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:56:B7:7E:0E:DE:C0:72:43:97:E7:54:85:CA:01:DB:E7:5A:CE:C7 X509v3 Authority Key Identifier: keyid:FF:4F:1D:48:A6:08:8F:EC:5E:D7:32:70:F8:20:68:A4:36:39:1A:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/FF4F1D48A6088FEC5ED73270F82068A436391A71.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:ec:34:ae:c2:4c:27:e5:c8:03:b1:e8:1d:bd:84:dd:7f:8c: 50:fb:16:38:84:b0:08:3f:41:1e:47:aa:85:da:f2:b0:89:d5: 57:8e:a3:1b:e8:9e:07:a5:78:78:e2:b3:66:d4:6c:ea:0b:ca: 4e:55:b1:9f:c0:9a:8d:fd:f7:2b:2a:a2:ad:c7:00:67:5f:20: d7:19:d3:9b:43:c7:db:5d:12:dc:ff:14:7f:d7:9c:7d:57:0f: ac:5d:55:aa:c3:fe:f9:83:16:8c:92:d5:20:e1:80:8e:7c:a3: a7:4a:6c:58:12:1a:b3:d8:ae:22:51:c6:61:32:26:64:0c:89: 84:2a:3d:d2:e7:25:c8:05:6a:69:fe:75:4f:c6:e9:fa:15:49: 1f:87:67:36:4b:c9:55:9a:75:c8:75:0f:c9:4f:25:a8:92:2d: 3c:da:76:3f:84:df:76:31:d3:c0:01:bd:c9:50:87:d7:96:df: 7f:a7:d2:13:fe:2f:9b:60:c8:6b:0c:76:fc:2b:44:06:7e:30: f4:fa:c9:a6:d9:67:8f:67:31:d3:4e:d7:c7:49:9e:01:4e:b7: b1:99:3e:ec:ae:3e:e4:68:28:39:f2:82:e2:17:65:ec:a7:c5: c3:81:cb:de:27:56:39:a6:84:1f:97:d7:ae:ae:ea:c3:fb:99: eb:e9:79:21 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUNbToYfQnitYBIo992hiHtX1GwkIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY0RjFENDhBNjA4OEZFQzVFRDczMjcwRjgyMDY4QTQz NjM5MUE3MTAeFw0yNjA0MTcwMjA3MjdaFw0yNjA0MTgwNDMwMjdaMDMxMTAvBgNV BAMTKERENTZCNzdFMEVERUMwNzI0Mzk3RTc1NDg1Q0EwMURCRTc1QUNFQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVdTMQI1GK3KVPwhBROz2E/n7Y 3ymxITy2QX9wXpMpbeYZQ65qNAu95bm+GSaAfiQ//5/RnduOTMZlb6p5Lz/jbecG nowI65xpH+pKpXfsnCxssN18ShAHOMLKAJbZjJBXXhpv3QUejFrIYe3fbMAuq9Jb 7tCzYK4PNLo7HFDgtxHlQVaPDUx0rK37YAdf7w4IT9co76ZhHkZA2xntW2DeefEm MaIVJojnd3JRHXi0ngvTXf46QJNHvR9h1aIL/yjfoqycy/qrbGZ4dPwbDlruDl36 cDyLjMYj52hbTlVIGvkr4/OJ1hQWVKAhjTzuevxaaFSPxoxTL+b2ktjj1RvnAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQU3Va3fg7ewHJDl+dUhcoB2+dazscwHwYDVR0j BBgwFoAU/08dSKYIj+xe1zJw+CBopDY5GnEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjJhODA2ODItYzU0Yy00ZDVhLTk0NTYtYjIzOTI1MzA5 NzMyLzIvRkY0RjFENDhBNjA4OEZFQzVFRDczMjcwRjgyMDY4QTQzNjM5MUE3MS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0ZGNEYxRDQ4QTYwODhG RUM1RUQ3MzI3MEY4MjA2OEE0MzYzOTFBNzEuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMjJhODA2ODItYzU0Yy00ZDVhLTk0NTYtYjIzOTI1MzA5NzMy LzIvRkY0RjFENDhBNjA4OEZFQzVFRDczMjcwRjgyMDY4QTQzNjM5MUE3MS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAAPsNK7CTCflyAOx6B29hN1/jFD7FjiEsAg/QR5HqoXa8rCJ1VeOoxvo ngeleHjis2bUbOoLyk5VsZ/Amo399ysqoq3HAGdfINcZ05tDx9tdEtz/FH/XnH1X D6xdVarD/vmDFoyS1SDhgI58o6dKbFgSGrPYriJRxmEyJmQMiYQqPdLnJcgFamn+ dU/G6foVSR+HZzZLyVWadch1D8lPJaiSLTzadj+E33Yx08ABvclQh9eW33+n0hP+ L5tgyGsMdvwrRAZ+MPT6yabZZ49nMdNO18dJngFOt7GZPuyuPuRoKDnyguIXZeyn xcOBy94nVjmmhB+X166u6sP7mevpeSE= -----END CERTIFICATE-----Generated at Fri Apr 17 15:14:22 2026 by rpki-client