$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft File: 553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft (raw, json) Hash identifier: FENPHKNeQcQi6f/V4aF7MB9/v3+xscDXJB3GEtrHpDQ= Subject key identifier: F1:B7:2C:A7:E4:F4:07:47:B8:79:7E:4E:BF:E2:A4:7C:42:05:19:A4 Authority key identifier: 55:3D:76:11:EA:6B:CE:5E:C7:96:69:E4:B1:F1:47:F5:9C:2A:0E:EE Certificate issuer: /CN=553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE Certificate serial: 3A2548C490EF68C6E1661F1FD5FB09E277F489E7 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft Manifest number: 0143 Signing time: Sun 01 Mar 2026 20:03:14 +0000 Manifest this update: Sun 01 Mar 2026 19:58:14 +0000 Manifest next update: Mon 02 Mar 2026 23:13:14 +0000 Files and hashes: 1: 553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.crl (hash: 9sB8D85iqNKsst3/e+VMt3tRuH5b3obTHK9QAT0cwt8=) 2: 326130613a363034303a646230303a3a2f34302d3438203d3e20323131313531.roa (hash: +fw3SQMO92ygFCahRkoicBXvG1K7ggV1DgUpkn+lL98=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.crl rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 23:13:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:25:48:c4:90:ef:68:c6:e1:66:1f:1f:d5:fb:09:e2:77:f4:89:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE Validity Not Before: Mar 1 19:58:14 2026 GMT Not After : Mar 2 23:13:14 2026 GMT Subject: CN=F1B72CA7E4F40747B8797E4EBFE2A47C420519A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:be:04:82:4e:c7:d2:5e:72:b5:cd:04:2e:8d: ef:6e:c5:f0:36:ea:6f:e5:91:1c:f2:22:50:71:0d: 4c:23:bb:b4:28:35:4c:6e:b9:c5:ab:25:57:6e:15: 82:2f:9e:c3:9f:de:d4:9a:f4:25:38:0e:e8:59:ab: 1d:f7:09:eb:da:46:2f:3f:b1:dc:bc:9f:3a:0f:a9: 8a:ee:4d:65:60:f2:79:2b:c6:75:06:58:3c:41:ea: 00:7e:a6:14:50:3c:25:34:a9:ca:d7:e7:66:87:71: 26:8b:8a:7f:2e:f6:53:5b:10:fd:d6:59:e5:55:ce: 7e:45:a3:af:8b:13:f9:dc:66:85:81:fa:94:7d:f3: 24:6e:53:65:c0:e4:e4:2b:8f:ba:91:1e:11:30:63: 9a:3b:db:8f:3d:8e:d7:bb:09:22:16:97:00:7b:55: e4:c5:e8:ae:6f:79:e7:e2:56:71:a7:d1:ce:6f:fa: 21:c6:96:3e:12:76:a5:04:b0:73:49:63:17:a4:20: ce:00:34:af:d3:d0:c3:63:ba:ee:68:87:d3:73:37: 1a:33:20:48:61:6d:7e:58:0f:b9:aa:71:98:1a:9a: 7d:96:fa:02:e7:d7:38:0f:06:86:f7:22:87:0d:91: 83:6f:c0:ff:66:58:a9:90:a9:3e:e3:bb:b9:75:b4: b4:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:B7:2C:A7:E4:F4:07:47:B8:79:7E:4E:BF:E2:A4:7C:42:05:19:A4 X509v3 Authority Key Identifier: keyid:55:3D:76:11:EA:6B:CE:5E:C7:96:69:E4:B1:F1:47:F5:9C:2A:0E:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:9f:20:d6:67:ee:2f:d4:b3:f6:8f:22:27:6b:e2:fa:71:31: 5b:d1:c8:12:6b:5f:69:33:96:71:ac:3c:09:27:06:c6:04:ef: 9d:b5:cd:49:87:3f:16:50:dd:0f:f5:02:5c:a1:fc:68:b0:e0: cc:f8:b9:23:40:aa:be:56:00:0c:83:e1:7a:94:f2:bb:f1:49: d1:6e:65:32:45:3e:8d:ad:07:9b:8a:e9:b0:49:87:4f:53:f7: 1a:e5:95:b8:ad:9d:35:7e:24:43:38:59:2c:b4:a6:54:fc:06: 11:f2:b5:84:81:f3:48:e9:f9:3f:62:ad:7d:29:88:5e:f5:b4: 43:31:15:53:3b:75:59:49:27:01:11:af:56:13:51:a3:60:66: 26:b3:90:11:43:1b:1b:1d:8f:80:30:5b:71:88:ab:30:14:05: 14:c5:08:79:ba:7b:aa:3a:89:f8:e8:f2:e6:34:11:e7:b5:db: 70:8e:9b:13:c1:8e:fd:7c:08:69:a1:24:3e:0a:ad:d0:33:d5: 1d:77:30:c6:84:2b:42:e3:54:11:32:ee:6a:36:73:06:dd:79: 22:e8:57:d0:80:14:a0:6e:57:bb:68:6c:46:b6:01:93:d5:52: 46:55:c2:1e:57:e1:21:2d:fe:a3:72:90:aa:d2:9b:8b:5b:6b: e6:dd:a3:c0 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUOiVIxJDvaMbhZh8f1fsJ4nf0iecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUzRDc2MTFFQTZCQ0U1RUM3OTY2OUU0QjFGMTQ3RjU5 QzJBMEVFRTAeFw0yNjAzMDExOTU4MTRaFw0yNjAzMDIyMzEzMTRaMDMxMTAvBgNV BAMTKEYxQjcyQ0E3RTRGNDA3NDdCODc5N0U0RUJGRTJBNDdDNDIwNTE5QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTvgSCTsfSXnK1zQQuje9uxfA2 6m/lkRzyIlBxDUwju7QoNUxuucWrJVduFYIvnsOf3tSa9CU4DuhZqx33CevaRi8/ sdy8nzoPqYruTWVg8nkrxnUGWDxB6gB+phRQPCU0qcrX52aHcSaLin8u9lNbEP3W WeVVzn5Fo6+LE/ncZoWB+pR98yRuU2XA5OQrj7qRHhEwY5o72489jte7CSIWlwB7 VeTF6K5veefiVnGn0c5v+iHGlj4SdqUEsHNJYxekIM4ANK/T0MNjuu5oh9NzNxoz IEhhbX5YD7mqcZgamn2W+gLn1zgPBob3IocNkYNvwP9mWKmQqT7ju7l1tLTnAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQU8bcsp+T0B0e4eX5Ov+KkfEIFGaQwHwYDVR0j BBgwFoAUVT12Eeprzl7HlmnksfFH9ZwqDu4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzEyODI3MWUtYzI2OS00OTU0LTg3ZGItZDE4NGRmMTdm ODVjLzQvNTUzRDc2MTFFQTZCQ0U1RUM3OTY2OUU0QjFGMTQ3RjU5QzJBMEVFRS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzU1M0Q3NjExRUE2QkNF NUVDNzk2NjlFNEIxRjE0N0Y1OUMyQTBFRUUuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvYzEyODI3MWUtYzI2OS00OTU0LTg3ZGItZDE4NGRmMTdmODVj LzQvNTUzRDc2MTFFQTZCQ0U1RUM3OTY2OUU0QjFGMTQ3RjU5QzJBMEVFRS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAImfINZn7i/Us/aPIidr4vpxMVvRyBJrX2kzlnGsPAknBsYE7521zUmH PxZQ3Q/1Alyh/Giw4Mz4uSNAqr5WAAyD4XqU8rvxSdFuZTJFPo2tB5uK6bBJh09T 9xrllbitnTV+JEM4WSy0plT8BhHytYSB80jp+T9irX0piF71tEMxFVM7dVlJJwER r1YTUaNgZiazkBFDGxsdj4AwW3GIqzAUBRTFCHm6e6o6ifjo8uY0Eee123COmxPB jv18CGmhJD4KrdAz1R13MMaEK0LjVBEy7mo2cwbdeSLoV9CAFKBuV7tobEa2AZPV UkZVwh5X4SEt/qNykKrSm4tba+bdo8A= -----END CERTIFICATE-----Generated at Mon Mar 2 12:39:56 2026 by rpki-client