$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft File: 4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft (raw, json) Hash identifier: 9a6T4ZDHW/y+x5bM24sl7nm9VB9ZPYihOprE2vxchYY= Subject key identifier: 5A:1E:C9:ED:31:57:AE:97:3B:C8:19:9A:B1:05:88:EF:25:DA:20:15 Authority key identifier: 4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57 Certificate issuer: /CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057 Certificate serial: 0E3569CAB7B956024010FC9EFE169B72F1E18CE5 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft Manifest number: 0142 Signing time: Sun 01 Mar 2026 17:33:32 +0000 Manifest this update: Sun 01 Mar 2026 17:28:32 +0000 Manifest next update: Mon 02 Mar 2026 17:33:32 +0000 Files and hashes: 1: 326130613a363034303a623166373a3a2f34382d3438203d3e203530373535.roa (hash: q63trgvlirS+Vgtt9rQwfx5g58dhjqx1zfXsQI8nfBQ=) 2: 326130613a363034303a623166353a3a2f34382d3438203d3e20323030363736.roa (hash: evMMfqo4Ez8yHDdFKOgCCAQkkBtJLTT2mhkV7j/a8vQ=) 3: 326130613a363034303a623166323a3a2f34382d3438203d3e20323030363736.roa (hash: 9V8f+kjKeAUUM95gFyLo820Chs0Y7IHMYFLg0AJNvf4=) 4: 326130613a363034303a623166343a3a2f34382d3438203d3e20323030363736.roa (hash: 8vNlACv4VljcfTfQph4BWYbiB6JxXxu9u3pkSEnSFS8=) 5: 326130613a363034303a623166303a3a2f34382d3438203d3e20323030363736.roa (hash: f56ZeNhzC2SfQF3WtfvHaAXxQIIVMtYJhNScjVogZ9M=) 6: 326130613a363034303a623166333a3a2f34382d3438203d3e203530373535.roa (hash: zj+PtOUjRL+jh8fX/z3gQawz9pZ6f2aTfcfOK+OABQw=) 7: 326130613a363034303a623166313a3a2f34382d3438203d3e20323030363736.roa (hash: jmju8VqIF7uHPknsXmKVCF/NlSPLUXdtHx+4q+t6HvI=) 8: 326130613a363034303a623166333a3a2f34382d3438203d3e20323030363736.roa (hash: 16vtCR02Wpx8fBrNg3BBjazTebmU9P6zPt+x/DW89rE=) 9: 326130613a363034303a623166363a3a2f34382d3438203d3e203530373535.roa (hash: R34yyXLS2JN3du0sWYjJzaZCEqLgwBOyYDGo+BSfbs4=) 10: 326130613a363034303a656430303a3a2f34302d3430203d3e2030.roa (hash: uqRsJY7KhhwwPaijQCvC3gE+TqC4+OLuBx54eDmXu1Q=) 11: 326130613a363034303a623166383a3a2f34382d3438203d3e203530373535.roa (hash: NCGL0xwyR9g2r6A71GgXDrp+Nhm2k3T8HoQFr0k0das=) 12: 4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl (hash: szqLWUTYcCeF6WOFNj2YEsGQj0bdNiMzkcR1NwAMvGw=) 13: 326130613a363034303a623166663a3a2f34382d3438203d3e2030.roa (hash: sgKT96rKThQB6ppVhmCDbggp5qDvA2cp3RmFQMzSxHo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 09:02:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:35:69:ca:b7:b9:56:02:40:10:fc:9e:fe:16:9b:72:f1:e1:8c:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057 Validity Not Before: Mar 1 17:28:32 2026 GMT Not After : Mar 2 17:33:32 2026 GMT Subject: CN=5A1EC9ED3157AE973BC8199AB10588EF25DA2015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:20:cf:1c:af:ac:72:16:74:e7:71:73:a1:fb: 51:e5:34:67:da:18:19:da:bb:5e:6a:2d:08:3b:e5: 55:fd:28:6a:a5:6a:fc:a8:5f:0a:2e:ca:0f:c8:42: 7e:c0:2d:fa:76:5e:21:7d:e6:38:9d:5a:21:f0:5a: 8d:cb:59:d7:1d:f3:4e:60:c3:ec:e7:9e:3c:7a:c7: 1c:13:4f:3e:ca:dc:83:85:96:6a:e2:40:cb:d9:aa: 6a:93:2f:7a:0a:51:ce:48:d6:77:b8:a5:0f:85:7b: 84:f0:dd:e2:c1:70:76:b3:bc:f9:0a:a9:3f:28:4f: 39:aa:96:b8:1d:2a:86:b2:6e:8d:c6:cd:61:1b:74: ff:37:48:17:f6:c3:25:1f:11:d4:77:ae:4c:eb:5a: 31:76:2b:f9:41:fc:23:f3:49:94:6b:73:5e:45:32: cc:6e:45:59:9d:e9:e6:c7:2e:70:54:82:df:b5:54: 61:39:7e:10:77:4c:0e:15:ee:fc:5b:45:08:3d:5e: 10:0b:4b:3c:a4:2d:05:56:64:91:03:fb:28:d2:5e: c3:f1:3e:1f:29:e7:03:54:40:0d:b0:eb:c4:cb:04: dc:8d:8d:92:a2:80:8b:65:03:40:1f:61:37:5a:00: 65:aa:de:8f:4c:2b:6c:4a:5a:44:34:b4:07:ff:3b: 06:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:1E:C9:ED:31:57:AE:97:3B:C8:19:9A:B1:05:88:EF:25:DA:20:15 X509v3 Authority Key Identifier: keyid:4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:3e:fc:9a:6e:6f:be:d5:75:95:01:09:c2:73:76:ab:0a:a1: 80:a6:e7:99:f0:d5:e2:8a:f7:11:5d:9b:82:a5:42:db:3a:53: 62:53:6a:be:b9:ef:6c:83:a0:5d:7b:49:e0:22:6b:7f:d7:01: b2:d2:68:01:10:ef:01:ae:25:fa:4c:73:ec:d2:8d:50:74:00: 36:6a:c3:18:26:67:a7:d2:86:50:ac:3e:2e:3a:79:63:a0:3e: 51:64:77:b4:0b:29:58:9f:6f:73:8e:64:79:32:58:04:a9:cc: 9b:8c:b6:35:77:c1:55:b5:7e:1f:c9:63:55:7b:f3:8e:2e:78: 12:fb:0d:e0:27:53:e2:f5:bb:97:24:00:86:08:96:dc:2c:6d: 99:64:2d:28:96:2d:91:8c:96:16:8e:5e:90:2d:30:1d:e8:65: 40:b7:ed:87:4c:5a:29:d4:61:d6:2c:be:64:4a:9e:89:c5:bc: be:18:03:17:f7:13:7d:a6:ba:0e:7b:87:47:3c:d9:50:d9:16: 1a:90:54:28:63:0d:24:31:c2:d4:e3:cc:ef:a8:41:bf:7d:db: f4:01:94:52:38:13:69:b4:87:1e:70:a0:00:af:ba:05:19:41: 47:77:eb:b6:df:3f:cc:f8:42:da:5d:7b:ab:8c:66:31:38:54: 12:40:ab:4d -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUDjVpyre5VgJAEPye/habcvHhjOUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZEQzU3MUE1Q0RBMTM5NThCQ0U0NzVGMEU1RDkxMDFE QjgxMjA1NzAeFw0yNjAzMDExNzI4MzJaFw0yNjAzMDIxNzMzMzJaMDMxMTAvBgNV BAMTKDVBMUVDOUVEMzE1N0FFOTczQkM4MTk5QUIxMDU4OEVGMjVEQTIwMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2IM8cr6xyFnTncXOh+1HlNGfa GBnau15qLQg75VX9KGqlavyoXwouyg/IQn7ALfp2XiF95jidWiHwWo3LWdcd805g w+znnjx6xxwTTz7K3IOFlmriQMvZqmqTL3oKUc5I1ne4pQ+Fe4Tw3eLBcHazvPkK qT8oTzmqlrgdKoaybo3GzWEbdP83SBf2wyUfEdR3rkzrWjF2K/lB/CPzSZRrc15F MsxuRVmd6ebHLnBUgt+1VGE5fhB3TA4V7vxbRQg9XhALSzykLQVWZJED+yjSXsPx Ph8p5wNUQA2w68TLBNyNjZKigItlA0AfYTdaAGWq3o9MK2xKWkQ0tAf/OwZfAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUWh7J7TFXrpc7yBmasQWI7yXaIBUwHwYDVR0j BBgwFoAUT9xXGlzaE5WLzkdfDl2RAduBIFcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1 Y2U3LzMvNEZEQzU3MUE1Q0RBMTM5NThCQ0U0NzVGMEU1RDkxMDFEQjgxMjA1Ny5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzRGREM1NzFBNUNEQTEz OTU4QkNFNDc1RjBFNUQ5MTAxREI4MTIwNTcuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1Y2U3 LzMvNEZEQzU3MUE1Q0RBMTM5NThCQ0U0NzVGMEU1RDkxMDFEQjgxMjA1Ny5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBALc+/Jpub77VdZUBCcJzdqsKoYCm55nw1eKK9xFdm4KlQts6U2JTar65 72yDoF17SeAia3/XAbLSaAEQ7wGuJfpMc+zSjVB0ADZqwxgmZ6fShlCsPi46eWOg PlFkd7QLKVifb3OOZHkyWASpzJuMtjV3wVW1fh/JY1V7844ueBL7DeAnU+L1u5ck AIYIltwsbZlkLSiWLZGMlhaOXpAtMB3oZUC37YdMWinUYdYsvmRKnonFvL4YAxf3 E32mug57h0c82VDZFhqQVChjDSQxwtTjzO+oQb992/QBlFI4E2m0hx5woACvugUZ QUd367bfP8z4Qtpde6uMZjE4VBJAq00= -----END CERTIFICATE-----Generated at Mon Mar 2 01:59:05 2026 by rpki-client