$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft File: 4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft (raw, json) Hash identifier: I/8U195ZwXEQ1iQ7DneBWVJVpHSTiV95izdyxJUy484= Subject key identifier: DF:41:57:E8:82:22:59:50:E3:3D:40:AC:C0:ED:60:15:F3:A0:24:9C Authority key identifier: 4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57 Certificate issuer: /CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057 Certificate serial: 090ED573F008AD0B8CE1157D5B14F6795FAA78EE Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft Manifest number: 0252 Signing time: Mon 21 Sep 2026 05:11:07 +0000 Manifest this update: Mon 21 Sep 2026 05:06:07 +0000 Manifest next update: Tue 22 Sep 2026 06:34:07 +0000 Files and hashes: 1: 326130613a363034303a623166383a3a2f34382d3438203d3e203530373535.roa (hash: YV5J5MkUPewoTX1hUWUWk2r1xYeLwwRy5/ujgo4sYdI=) 2: 326130613a363034303a623166333a3a2f34382d3438203d3e20323030363736.roa (hash: M+XKjYxBTHtjkzc8U29w8G5bFlSY71eD0eQWnk4BUcU=) 3: 326130613a363034303a623166663a3a2f34382d3438203d3e2030.roa (hash: DlTS9/n3nMzPBzhKqYlsCkDKeu9i4KOh/svpSxWmqkM=) 4: 326130613a363034303a623166313a3a2f34382d3438203d3e20323030363736.roa (hash: BQAJsIHDKp+WibSEzaYJlb2U3HhnlfWtftOClSXrGv8=) 5: 326130613a363034303a656430303a3a2f34302d3430203d3e2030.roa (hash: o3l9HmXdTaRr7QEUzlZUguF0y8FsRdpH47Ocd6jZ4Wc=) 6: 326130613a363034303a623166323a3a2f34382d3438203d3e20323030363736.roa (hash: GfDTo5P3qIg8CFRKTrJhl2ZS/FY+3t9O8Sx9C2rOTZk=) 7: 326130613a363034303a623166363a3a2f34382d3438203d3e203530373535.roa (hash: wugX3FqzZIQPjBl7AwvgQMAVaLwsouojOXLSMlZcTJ4=) 8: 4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl (hash: ZB2QncjUx/mviyFYkqdC3ktZkSrNjU4KQC4/lY3L2rs=) 9: 326130613a363034303a623166353a3a2f34382d3438203d3e20323030363736.roa (hash: lj+8qLUABxRWME0NPnYLhXc7Q9mboRiSfwlMOOMRGf0=) 10: 326130613a363034303a623166333a3a2f34382d3438203d3e203530373535.roa (hash: y0TBpQqqxyyx4Zi6QH9/slZALaHhIk7//cojMpVgoaU=) 11: 326130613a363034303a623166303a3a2f34382d3438203d3e20323030363736.roa (hash: nr0EeUwFCYdT0u41I7YugdCfJTvW+lp7pLcoJPTRJ7Q=) 12: 326130613a363034303a623166373a3a2f34382d3438203d3e203530373535.roa (hash: Zej5k6azfqZdpRgzIVoziRVVqBAFYW5Z82wumsiKQRI=) 13: 326130613a363034303a623166343a3a2f34382d3438203d3e20323030363736.roa (hash: NL6EPb5wnDp44lr9FJxSfl2w41sMyn89zsl2NAJN1S8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 06:34:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:0e:d5:73:f0:08:ad:0b:8c:e1:15:7d:5b:14:f6:79:5f:aa:78:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057 Validity Not Before: Sep 21 05:06:07 2026 GMT Not After : Sep 22 06:34:07 2026 GMT Subject: CN=DF4157E882225950E33D40ACC0ED6015F3A0249C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d7:62:d6:33:0d:91:f9:77:d5:a3:00:f6:43: 86:08:48:48:05:64:25:75:b8:d5:81:4a:48:35:57: 49:fb:97:cd:b7:07:78:06:a8:eb:ae:a3:13:df:e2: fd:60:bc:20:95:37:0c:e4:e5:73:f3:4f:91:33:08: 91:93:d1:77:46:99:9f:c4:8c:c5:27:7c:6e:65:bd: ca:e7:9a:be:09:4f:ea:fa:ea:a7:3b:76:4b:c6:07: 6c:c0:31:22:9f:9e:06:0b:b1:e3:2b:87:52:cc:a4: 39:a7:e3:5f:62:66:5d:d0:53:fd:76:0f:bb:d5:04: 8a:8b:62:41:b7:fb:fa:ee:7e:66:20:01:8c:c1:bd: 4b:3d:84:87:f6:63:48:82:7a:07:74:d2:3b:0a:fc: 22:df:b8:50:7e:29:05:f4:66:07:36:31:be:44:6a: a2:cc:8b:ae:b9:02:5d:d9:f8:e8:53:75:ac:ee:94: a5:35:8f:1c:e1:a2:bf:96:4f:35:4d:99:c8:ca:48: 67:b8:51:b1:1b:ce:22:07:bf:72:02:13:c3:53:52: 1f:b3:0d:55:a7:b6:db:ad:87:59:bb:1b:08:0d:dd: 6c:45:7d:9d:8e:df:75:aa:79:7a:4f:4c:43:2d:fe: a0:38:3c:71:36:47:07:22:f5:b9:48:d9:ae:c7:05: d7:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:41:57:E8:82:22:59:50:E3:3D:40:AC:C0:ED:60:15:F3:A0:24:9C X509v3 Authority Key Identifier: keyid:4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:f9:0a:78:5e:e6:f2:99:1d:91:7d:f7:e3:55:9c:d5:e5:70: 38:cd:d3:28:98:5a:60:80:e7:2a:9b:3c:31:59:e4:e2:5f:c6: 6a:f6:b9:95:7f:1e:7a:c3:d6:69:0f:73:a0:a3:19:d6:5c:d7: c1:32:e2:8e:8e:61:96:f4:0c:3c:83:40:a9:1d:2d:2a:18:61: d4:af:53:79:f5:a7:e0:82:0d:b7:57:44:45:c8:d6:f1:f8:e5: d9:82:2d:97:8a:09:5b:a1:71:71:e6:5c:e3:53:84:f6:4a:fa: e7:d1:7d:b8:9b:38:bd:b8:fc:d1:93:ab:4d:d8:08:34:5b:1b: 8e:7d:1e:fc:ce:54:d3:8c:5c:08:6d:b8:c5:57:c6:61:df:be: db:db:41:c7:66:87:f8:34:a8:d7:7e:d4:3b:42:8e:3f:af:35: 9a:da:25:0b:90:da:08:db:a7:29:41:99:0c:ca:ee:e8:ca:a9: f6:a5:be:97:a0:3e:17:20:85:fe:ff:c2:bc:78:f3:a3:59:39: 29:c7:3b:74:e2:6a:32:f4:d5:0f:f1:ec:de:77:d2:51:a8:6b: 33:c0:f4:86:95:00:df:46:da:1c:4f:d3:b1:cc:9f:53:b9:1b: f9:ff:24:d0:ed:c9:6d:74:d4:16:49:12:ec:0f:81:e7:0d:df: 70:ba:f5:0d -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUCQ7Vc/AIrQuM4RV9WxT2eV+qeO4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZEQzU3MUE1Q0RBMTM5NThCQ0U0NzVGMEU1RDkxMDFE QjgxMjA1NzAeFw0yNjA5MjEwNTA2MDdaFw0yNjA5MjIwNjM0MDdaMDMxMTAvBgNV BAMTKERGNDE1N0U4ODIyMjU5NTBFMzNENDBBQ0MwRUQ2MDE1RjNBMDI0OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr12LWMw2R+XfVowD2Q4YISEgF ZCV1uNWBSkg1V0n7l823B3gGqOuuoxPf4v1gvCCVNwzk5XPzT5EzCJGT0XdGmZ/E jMUnfG5lvcrnmr4JT+r66qc7dkvGB2zAMSKfngYLseMrh1LMpDmn419iZl3QU/12 D7vVBIqLYkG3+/rufmYgAYzBvUs9hIf2Y0iCegd00jsK/CLfuFB+KQX0Zgc2Mb5E aqLMi665Al3Z+OhTdazulKU1jxzhor+WTzVNmcjKSGe4UbEbziIHv3ICE8NTUh+z DVWnttuth1m7GwgN3WxFfZ2O33WqeXpPTEMt/qA4PHE2Rwci9blI2a7HBddrAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQU30FX6IIiWVDjPUCswO1gFfOgJJwwHwYDVR0j BBgwFoAUT9xXGlzaE5WLzkdfDl2RAduBIFcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1 Y2U3LzMvNEZEQzU3MUE1Q0RBMTM5NThCQ0U0NzVGMEU1RDkxMDFEQjgxMjA1Ny5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzRGREM1NzFBNUNEQTEz OTU4QkNFNDc1RjBFNUQ5MTAxREI4MTIwNTcuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1Y2U3 LzMvNEZEQzU3MUE1Q0RBMTM5NThCQ0U0NzVGMEU1RDkxMDFEQjgxMjA1Ny5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAKz5Cnhe5vKZHZF99+NVnNXlcDjN0yiYWmCA5yqbPDFZ5OJfxmr2uZV/ HnrD1mkPc6CjGdZc18Ey4o6OYZb0DDyDQKkdLSoYYdSvU3n1p+CCDbdXREXI1vH4 5dmCLZeKCVuhcXHmXONThPZK+ufRfbibOL24/NGTq03YCDRbG459HvzOVNOMXAht uMVXxmHfvtvbQcdmh/g0qNd+1DtCjj+vNZraJQuQ2gjbpylBmQzK7ujKqfalvpeg Phcghf7/wrx486NZOSnHO3TiajL01Q/x7N530lGoazPA9IaVAN9G2hxP07HMn1O5 G/n/JNDtyW101BZJEuwPgecN33C69Q0= -----END CERTIFICATE-----Generated at Mon Sep 21 16:00:39 2026 by rpki-client