$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft File: B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft (raw, json) Hash identifier: lVsfZyISVxBsoYd/yr5/3IvQKj8z6h89gFNgClIELjY= Subject key identifier: D3:36:9C:7E:5C:6D:20:CD:8F:82:BC:8A:A0:EE:61:15:97:16:DB:6A Authority key identifier: B2:17:28:4E:A3:D5:38:44:B2:AF:52:70:AB:BA:A3:10:5B:8B:3F:45 Certificate issuer: /CN=B217284EA3D53844B2AF5270ABBAA3105B8B3F45 Certificate serial: 49B3B77E0857067585595414C101D00B4707AAB0 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft Manifest number: 0146 Signing time: Sun 01 Mar 2026 14:17:35 +0000 Manifest this update: Sun 01 Mar 2026 14:12:35 +0000 Manifest next update: Mon 02 Mar 2026 15:34:35 +0000 Files and hashes: 1: B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl (hash: 1jn5YuU9sTtG35pbdEFGsZP/ZTSBD241e/jZwcznRuI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 15:34:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:b3:b7:7e:08:57:06:75:85:59:54:14:c1:01:d0:0b:47:07:aa:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B217284EA3D53844B2AF5270ABBAA3105B8B3F45 Validity Not Before: Mar 1 14:12:35 2026 GMT Not After : Mar 2 15:34:35 2026 GMT Subject: CN=D3369C7E5C6D20CD8F82BC8AA0EE61159716DB6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9d:b9:41:da:48:53:a4:49:c8:02:5c:8e:63: 78:d8:3e:b7:9e:54:72:f4:0c:27:9f:04:21:c9:4e: e7:d3:3f:de:50:1d:21:c8:b3:11:2b:bc:91:ba:48: 06:ae:d3:9d:ea:12:e2:d3:f6:43:92:f8:9b:ab:fe: 15:58:dd:f9:00:34:67:58:04:8e:62:82:8a:ed:91: 90:bc:76:88:3e:ac:01:d2:2b:a6:b8:69:6d:f0:73: 81:df:aa:f1:c9:11:3a:a4:f6:f3:c6:db:60:16:15: 7f:49:26:03:f9:d4:eb:83:54:f8:2b:cb:59:2d:a9: 16:f9:d6:f4:da:03:83:16:f3:42:74:b5:92:7f:dc: f6:54:d3:0b:69:c3:79:0c:2d:3b:93:58:f6:1d:16: e7:60:6a:f4:6c:af:77:a3:d4:f9:5e:3f:cc:a8:10: 36:a7:64:4c:95:0d:1b:47:57:bd:5d:33:7d:29:05: d8:6b:6a:a2:91:0b:5a:46:d4:92:de:12:92:1d:c4: f8:a6:73:62:c6:89:eb:e3:24:8a:29:58:55:bc:1e: 89:70:59:29:5d:9d:95:dc:5b:58:14:e3:3f:a2:cd: fc:45:e7:1d:4a:cb:0a:e3:9a:49:e8:21:d9:60:73: 9b:c6:19:a8:00:fc:28:b8:e7:86:72:78:db:9b:e3: 09:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:36:9C:7E:5C:6D:20:CD:8F:82:BC:8A:A0:EE:61:15:97:16:DB:6A X509v3 Authority Key Identifier: keyid:B2:17:28:4E:A3:D5:38:44:B2:AF:52:70:AB:BA:A3:10:5B:8B:3F:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:d2:a3:d5:85:13:7e:72:28:07:21:e1:f0:52:a0:d0:9b:89: 67:c9:98:d5:1d:b6:ba:4c:6b:ca:ec:f4:3f:33:a2:34:ab:ff: 13:36:6b:f3:ca:ba:a2:fb:c5:78:d9:c7:35:52:c8:8f:82:8b: 9e:eb:3b:ea:86:91:ae:28:d5:5b:1f:74:65:ba:5a:7d:28:fb: 2c:7d:3a:9b:84:07:02:bc:85:81:26:be:b6:a5:51:f1:42:28: 74:b4:e3:a6:ba:58:85:d6:6c:af:23:50:37:f8:89:a9:5d:c0: 03:37:c1:88:c6:f4:c8:0e:75:06:3d:bb:f8:30:4f:38:c6:85: 5c:20:2b:a3:7f:32:c7:97:09:a9:fb:92:01:62:fb:d4:91:95: ea:cd:8f:68:32:51:c6:bf:f2:fd:2a:7f:ae:6a:dd:63:8c:27: ec:f1:5b:14:67:1f:17:19:7e:05:f2:b2:c9:3f:87:71:f4:72: 69:14:0c:36:5f:a7:5b:c2:0e:70:14:f3:3a:32:1e:9f:a2:58: 1a:29:98:8a:35:6c:90:82:ee:d4:54:e2:2b:2e:01:a2:78:99: bb:bd:25:83:1b:1f:56:c2:89:50:1e:f3:b0:96:f8:e0:b7:e6: 28:cf:28:7e:31:dd:2e:7c:6d:40:28:4f:3a:f0:d3:c4:c2:99: ae:36:e3:e3 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUSbO3fghXBnWFWVQUwQHQC0cHqrAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIxNzI4NEVBM0Q1Mzg0NEIyQUY1MjcwQUJCQUEzMTA1 QjhCM0Y0NTAeFw0yNjAzMDExNDEyMzVaFw0yNjAzMDIxNTM0MzVaMDMxMTAvBgNV BAMTKEQzMzY5QzdFNUM2RDIwQ0Q4RjgyQkM4QUEwRUU2MTE1OTcxNkRCNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrnblB2khTpEnIAlyOY3jYPree VHL0DCefBCHJTufTP95QHSHIsxErvJG6SAau053qEuLT9kOS+Jur/hVY3fkANGdY BI5igortkZC8dog+rAHSK6a4aW3wc4HfqvHJETqk9vPG22AWFX9JJgP51OuDVPgr y1ktqRb51vTaA4MW80J0tZJ/3PZU0wtpw3kMLTuTWPYdFudgavRsr3ej1PleP8yo EDanZEyVDRtHV71dM30pBdhraqKRC1pG1JLeEpIdxPimc2LGievjJIopWFW8Holw WSldnZXcW1gU4z+izfxF5x1KywrjmknoIdlgc5vGGagA/Ci454ZyeNub4wnNAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQU0zacflxtIM2PgryKoO5hFZcW22owHwYDVR0j BBgwFoAUshcoTqPVOESyr1Jwq7qjEFuLP0UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzUvQjIxNzI4NEVBM0Q1Mzg0NEIyQUY1MjcwQUJCQUEzMTA1QjhCM0Y0NS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0IyMTcyODRFQTNENTM4 NDRCMkFGNTI3MEFCQkFBMzEwNUI4QjNGNDUuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2NhZTNm LzUvQjIxNzI4NEVBM0Q1Mzg0NEIyQUY1MjcwQUJCQUEzMTA1QjhCM0Y0NS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAKjSo9WFE35yKAch4fBSoNCbiWfJmNUdtrpMa8rs9D8zojSr/xM2a/PK uqL7xXjZxzVSyI+Ci57rO+qGka4o1VsfdGW6Wn0o+yx9OpuEBwK8hYEmvralUfFC KHS046a6WIXWbK8jUDf4ialdwAM3wYjG9MgOdQY9u/gwTzjGhVwgK6N/MseXCan7 kgFi+9SRlerNj2gyUca/8v0qf65q3WOMJ+zxWxRnHxcZfgXyssk/h3H0cmkUDDZf p1vCDnAU8zoyHp+iWBopmIo1bJCC7tRU4isuAaJ4mbu9JYMbH1bCiVAe87CW+OC3 5ijPKH4x3S58bUAoTzrw08TCma424+M= -----END CERTIFICATE-----Generated at Mon Mar 2 04:03:04 2026 by rpki-client