$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft File: B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft (raw, json) Hash identifier: 6wakAM6XVBZEWDR5aSYn0vuMCmup8hOganJWhzL+FOw= Subject key identifier: 97:7D:1E:93:F3:D5:22:BD:58:B6:AF:ED:98:B6:C6:CC:BC:43:63:E6 Authority key identifier: B2:17:28:4E:A3:D5:38:44:B2:AF:52:70:AB:BA:A3:10:5B:8B:3F:45 Certificate issuer: /CN=B217284EA3D53844B2AF5270ABBAA3105B8B3F45 Certificate serial: 0ECE8601D3A9A0D4A0EBECEF4A734EF46F21275E Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft Manifest number: 0187 Signing time: Sun 19 Apr 2026 06:39:25 +0000 Manifest this update: Sun 19 Apr 2026 06:34:25 +0000 Manifest next update: Mon 20 Apr 2026 08:45:25 +0000 Files and hashes: 1: B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl (hash: eSAT0QqPNNQyadtyNceezXkSZ/MQ6mo79jKVZH9w7NE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 02:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:ce:86:01:d3:a9:a0:d4:a0:eb:ec:ef:4a:73:4e:f4:6f:21:27:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B217284EA3D53844B2AF5270ABBAA3105B8B3F45 Validity Not Before: Apr 19 06:34:25 2026 GMT Not After : Apr 20 08:45:25 2026 GMT Subject: CN=977D1E93F3D522BD58B6AFED98B6C6CCBC4363E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:82:cf:3c:4c:a9:08:ad:3e:ed:80:53:31:b4: ea:4e:ad:b0:03:d9:39:13:ad:ce:bd:fd:6c:5d:bf: 40:dc:ab:f4:f3:22:10:53:f9:98:fa:63:df:28:d5: d0:bd:01:d6:fb:2e:21:fd:40:68:73:aa:48:06:77: 91:37:98:18:e6:27:5e:0c:c9:76:ea:0c:11:17:ec: 65:ac:9f:d3:98:ab:cb:6b:db:d6:d5:1f:f7:86:28: 28:bd:1e:93:b1:3b:94:cd:ee:e7:d1:9e:25:0a:f6: 69:d7:94:cc:24:e2:ed:0f:c8:22:ae:95:03:85:8b: 39:fd:80:53:a6:49:d9:e7:ce:25:f7:88:5f:ef:6e: 3e:ad:fc:6a:1a:32:29:85:af:ad:fe:65:6e:08:3d: 42:a3:49:37:4c:eb:49:99:3d:81:8b:dd:5b:2a:06: 5f:aa:96:17:3c:b1:d9:0b:d5:43:83:12:c7:88:8d: 8b:82:23:e4:f4:59:f5:43:33:35:9d:28:70:2c:97: 1c:ef:21:7a:3f:17:ec:ee:83:d3:81:1b:54:50:a0: b0:23:d6:95:fa:7d:0e:42:17:54:12:52:4b:5b:33: f4:d7:ad:77:74:50:9e:9b:98:a4:c4:fe:80:f2:0c: f9:b4:79:47:0d:ad:96:53:4c:64:a6:d1:ed:67:c9: 64:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:7D:1E:93:F3:D5:22:BD:58:B6:AF:ED:98:B6:C6:CC:BC:43:63:E6 X509v3 Authority Key Identifier: keyid:B2:17:28:4E:A3:D5:38:44:B2:AF:52:70:AB:BA:A3:10:5B:8B:3F:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:c2:76:72:99:37:64:74:ca:97:d3:3d:2a:8c:8a:29:2d:b5: bc:eb:af:3a:ab:20:a2:b5:8f:ae:83:2a:5f:60:ab:72:ef:09: e3:ed:31:c4:d0:f3:b1:dc:e4:11:29:b8:3b:2d:ed:6d:92:b1: a9:76:1f:f1:78:f1:a2:b7:18:15:b2:56:33:60:9e:c3:4a:69: 70:7f:ad:9e:a4:d9:8f:a1:9d:de:6d:a0:4e:3b:a8:49:30:f2: 9d:f5:c2:77:fb:5a:9a:50:a3:2d:31:e4:b0:d1:c9:32:3f:74: 31:b2:7d:0a:e0:ac:16:60:70:2c:64:44:27:01:db:bf:a5:46: 7e:0f:b0:ed:66:d1:e6:d7:0f:d6:04:09:07:93:57:73:97:90: ca:3e:6c:7a:ca:35:96:2c:0f:78:22:92:02:85:4b:58:13:bd: 26:42:74:c0:1e:36:2c:8e:fd:91:41:68:0d:32:cd:67:01:b9: ef:b8:e1:b1:e1:eb:02:f2:ad:31:cc:4c:a9:e6:fc:cd:fc:7a: a7:d2:5f:47:0e:60:e3:04:ba:d8:8d:7c:fd:2c:5a:55:14:ef: c8:fe:e9:4d:2c:85:ce:2a:9b:d0:4d:10:b8:ad:63:dd:ea:d9: 4b:8b:f1:1e:55:9b:48:b2:cd:88:90:43:4e:01:3e:02:78:9c: e2:86:37:2c -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUDs6GAdOpoNSg6+zvSnNO9G8hJ14wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIxNzI4NEVBM0Q1Mzg0NEIyQUY1MjcwQUJCQUEzMTA1 QjhCM0Y0NTAeFw0yNjA0MTkwNjM0MjVaFw0yNjA0MjAwODQ1MjVaMDMxMTAvBgNV BAMTKDk3N0QxRTkzRjNENTIyQkQ1OEI2QUZFRDk4QjZDNkNDQkM0MzYzRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlgs88TKkIrT7tgFMxtOpOrbAD 2TkTrc69/Wxdv0Dcq/TzIhBT+Zj6Y98o1dC9Adb7LiH9QGhzqkgGd5E3mBjmJ14M yXbqDBEX7GWsn9OYq8tr29bVH/eGKCi9HpOxO5TN7ufRniUK9mnXlMwk4u0PyCKu lQOFizn9gFOmSdnnziX3iF/vbj6t/GoaMimFr63+ZW4IPUKjSTdM60mZPYGL3Vsq Bl+qlhc8sdkL1UODEseIjYuCI+T0WfVDMzWdKHAslxzvIXo/F+zug9OBG1RQoLAj 1pX6fQ5CF1QSUktbM/TXrXd0UJ6bmKTE/oDyDPm0eUcNrZZTTGSm0e1nyWQBAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUl30ek/PVIr1Ytq/tmLbGzLxDY+YwHwYDVR0j BBgwFoAUshcoTqPVOESyr1Jwq7qjEFuLP0UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzUvQjIxNzI4NEVBM0Q1Mzg0NEIyQUY1MjcwQUJCQUEzMTA1QjhCM0Y0NS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0IyMTcyODRFQTNENTM4 NDRCMkFGNTI3MEFCQkFBMzEwNUI4QjNGNDUuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2NhZTNm LzUvQjIxNzI4NEVBM0Q1Mzg0NEIyQUY1MjcwQUJCQUEzMTA1QjhCM0Y0NS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAAnCdnKZN2R0ypfTPSqMiikttbzrrzqrIKK1j66DKl9gq3LvCePtMcTQ 87Hc5BEpuDst7W2Ssal2H/F48aK3GBWyVjNgnsNKaXB/rZ6k2Y+hnd5toE47qEkw 8p31wnf7WppQoy0x5LDRyTI/dDGyfQrgrBZgcCxkRCcB27+lRn4PsO1m0ebXD9YE CQeTV3OXkMo+bHrKNZYsD3gikgKFS1gTvSZCdMAeNiyO/ZFBaA0yzWcBue+44bHh 6wLyrTHMTKnm/M38eqfSX0cOYOMEutiNfP0sWlUU78j+6U0shc4qm9BNELitY93q 2UuL8R5Vm0iyzYiQQ04BPgJ4nOKGNyw= -----END CERTIFICATE-----Generated at Sun Apr 19 08:55:49 2026 by rpki-client