
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft
File: 4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft (raw, json)
Hash identifier: Onqux4la/ofVAYZHcAoJ8OwxPNQY7M01UW+udZVx2PE=
Subject key identifier: 10:F7:D6:F7:C8:58:FC:04:61:EA:91:74:DA:BA:45:C4:88:7A:D9:E4
Authority key identifier: 4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57
Certificate issuer: /CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057
Certificate serial: 463F05AFE20481F99592DDE3D5110B4982D36AF3
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft
Manifest number: 020A
Signing time: Tue 28 Jul 2026 23:02:09 +0000
Manifest this update: Tue 28 Jul 2026 22:57:09 +0000
Manifest next update: Wed 29 Jul 2026 23:28:09 +0000
Files and hashes: 1: 326130613a363034303a656430303a3a2f34302d3430203d3e2030.roa (hash: o3l9HmXdTaRr7QEUzlZUguF0y8FsRdpH47Ocd6jZ4Wc=)
2: 4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl (hash: rKBEIFCwKl8GgcvUnkTn4/ULczAjlGjW9Hx2hLwwrrk=)
3: 326130613a363034303a623166383a3a2f34382d3438203d3e203530373535.roa (hash: YV5J5MkUPewoTX1hUWUWk2r1xYeLwwRy5/ujgo4sYdI=)
4: 326130613a363034303a623166313a3a2f34382d3438203d3e20323030363736.roa (hash: BQAJsIHDKp+WibSEzaYJlb2U3HhnlfWtftOClSXrGv8=)
5: 326130613a363034303a623166363a3a2f34382d3438203d3e203530373535.roa (hash: wugX3FqzZIQPjBl7AwvgQMAVaLwsouojOXLSMlZcTJ4=)
6: 326130613a363034303a623166373a3a2f34382d3438203d3e203530373535.roa (hash: Zej5k6azfqZdpRgzIVoziRVVqBAFYW5Z82wumsiKQRI=)
7: 326130613a363034303a623166303a3a2f34382d3438203d3e20323030363736.roa (hash: nr0EeUwFCYdT0u41I7YugdCfJTvW+lp7pLcoJPTRJ7Q=)
8: 326130613a363034303a623166323a3a2f34382d3438203d3e20323030363736.roa (hash: GfDTo5P3qIg8CFRKTrJhl2ZS/FY+3t9O8Sx9C2rOTZk=)
9: 326130613a363034303a623166663a3a2f34382d3438203d3e2030.roa (hash: DlTS9/n3nMzPBzhKqYlsCkDKeu9i4KOh/svpSxWmqkM=)
10: 326130613a363034303a623166343a3a2f34382d3438203d3e20323030363736.roa (hash: NL6EPb5wnDp44lr9FJxSfl2w41sMyn89zsl2NAJN1S8=)
11: 326130613a363034303a623166333a3a2f34382d3438203d3e203530373535.roa (hash: y0TBpQqqxyyx4Zi6QH9/slZALaHhIk7//cojMpVgoaU=)
12: 326130613a363034303a623166353a3a2f34382d3438203d3e20323030363736.roa (hash: lj+8qLUABxRWME0NPnYLhXc7Q9mboRiSfwlMOOMRGf0=)
13: 326130613a363034303a623166333a3a2f34382d3438203d3e20323030363736.roa (hash: M+XKjYxBTHtjkzc8U29w8G5bFlSY71eD0eQWnk4BUcU=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl
rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:3f:05:af:e2:04:81:f9:95:92:dd:e3:d5:11:0b:49:82:d3:6a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057
Validity
Not Before: Jul 28 22:57:09 2026 GMT
Not After : Jul 29 23:28:09 2026 GMT
Subject: CN=10F7D6F7C858FC0461EA9174DABA45C4887AD9E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:76:71:4e:71:ae:52:d7:06:fe:f5:48:61:00:
4e:ad:f6:3c:ac:eb:97:61:1f:ee:aa:80:13:c9:5d:
53:bc:0f:86:e9:4a:be:0e:b2:79:97:67:01:63:e4:
33:76:c0:c5:60:cb:b7:3c:8b:67:14:5e:94:4d:b0:
a7:f8:71:0f:9e:ed:28:c0:cf:7c:3b:3e:25:46:60:
90:97:b9:ee:83:73:5c:7e:65:70:b2:f6:5e:43:42:
46:fe:d1:db:16:f4:b6:ae:8b:3e:b0:61:8b:d0:48:
05:c5:b9:89:9f:6a:a9:bb:9a:6b:b8:95:af:f7:1d:
29:51:eb:c3:ce:8d:16:de:07:56:78:25:de:5e:0f:
92:ae:fd:fd:4a:00:97:11:9f:bc:33:56:2a:28:ed:
8c:b6:3c:01:78:96:6e:d4:60:5c:1e:95:3b:63:ab:
9a:9d:c5:99:58:c4:84:b1:1c:b1:2f:b0:57:38:d1:
c0:8c:8a:aa:05:e3:27:82:b4:07:fb:8e:e4:32:2f:
15:89:30:5f:1c:8d:91:a3:3c:cd:08:c1:27:77:e8:
f4:11:c2:ee:1c:b9:80:f8:f0:9f:c4:eb:14:d7:ec:
6d:94:bb:0a:e2:2d:70:65:0e:2f:d6:f3:4b:7a:ab:
88:bb:65:b5:47:fc:d8:d6:36:86:f8:a4:b0:c0:ef:
38:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F7:D6:F7:C8:58:FC:04:61:EA:91:74:DA:BA:45:C4:88:7A:D9:E4
X509v3 Authority Key Identifier:
keyid:4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:b6:c5:40:c4:16:fb:3c:85:ce:f2:4e:e4:d5:02:74:ff:21:
ce:4f:6b:ef:8b:da:ef:0e:fc:72:f7:a1:70:e4:bc:57:1f:8b:
82:77:a6:b1:03:09:ba:2c:36:e6:df:63:e3:1a:b6:d2:40:c7:
69:42:91:c5:7b:15:5d:11:84:2d:4e:5f:06:bc:21:a5:c9:a7:
b0:46:66:40:74:1e:f1:de:f4:53:af:78:5a:c7:1b:fd:e8:7c:
0d:ab:5a:d2:94:3f:20:1b:9a:34:df:20:cc:ff:b5:40:fb:55:
ab:1a:0a:36:be:fb:99:c4:76:70:f4:19:c2:b4:0f:76:d4:72:
0d:f0:92:4a:a2:46:4a:7c:4c:9e:8e:35:d9:f6:cc:f8:13:6a:
2d:a2:f5:5b:48:79:c1:8e:0f:9e:d8:33:7c:f3:29:fb:b0:6e:
5c:b2:46:2f:59:ad:d2:a4:62:cc:d8:b4:25:88:1c:94:51:b9:
33:82:b1:08:f6:cc:a8:2d:2a:2b:eb:62:a3:f8:79:5b:d5:3d:
16:71:ac:7e:c6:52:56:8b:65:5d:ad:a8:3c:85:51:52:6d:6f:
80:e0:ee:29:b2:11:61:0d:6a:0b:6f:95:ff:3c:b0:7d:64:17:
b8:fe:9c:4b:fa:7b:25:ec:36:2f:43:30:43:17:dd:da:7d:9b:
5a:ca:95:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:25:49 2026 by rpki-client