$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft File: 553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft (raw, json) Hash identifier: vTOUpXBimMrvuNumiDMrvWKJe5VyL8v1dGD7IJMBtdE= Subject key identifier: 74:46:D6:74:88:1E:39:EE:55:B1:24:D8:E2:B0:D1:2C:D5:1E:B9:2B Authority key identifier: 55:3D:76:11:EA:6B:CE:5E:C7:96:69:E4:B1:F1:47:F5:9C:2A:0E:EE Certificate issuer: /CN=553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE Certificate serial: 4CE5FBFEBA90846A49187143B1D9213F6C2E7AA8 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft Manifest number: 0181 Signing time: Thu 16 Apr 2026 13:48:39 +0000 Manifest this update: Thu 16 Apr 2026 13:43:39 +0000 Manifest next update: Fri 17 Apr 2026 17:03:39 +0000 Files and hashes: 1: 553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.crl (hash: 1WqSYLlgr/kch09MjKYzuVa0zHNjPeKTD3lYiGXTc/c=) 2: 326130613a363034303a646230303a3a2f34302d3438203d3e20323131313531.roa (hash: +fw3SQMO92ygFCahRkoicBXvG1K7ggV1DgUpkn+lL98=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.crl rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 17:03:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:e5:fb:fe:ba:90:84:6a:49:18:71:43:b1:d9:21:3f:6c:2e:7a:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE Validity Not Before: Apr 16 13:43:39 2026 GMT Not After : Apr 17 17:03:39 2026 GMT Subject: CN=7446D674881E39EE55B124D8E2B0D12CD51EB92B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:24:bd:38:43:63:d4:7f:da:a9:4d:ac:79:a8: 18:4b:db:6c:dc:45:75:0c:7e:12:f7:b9:47:39:ca: 41:f9:d8:b0:bd:68:6a:1a:4c:7d:c3:bc:98:c4:f3: 5b:40:f6:c2:c5:64:7a:fd:13:e0:99:08:51:f7:93: 71:24:b6:a2:dc:db:c4:02:b4:86:24:07:19:0e:cd: d9:84:09:31:87:c0:c5:31:6e:90:3f:5a:0c:3a:0c: c4:a3:7e:59:62:c9:49:94:16:74:54:46:61:3e:7c: c2:0b:e3:66:48:70:6b:70:4a:25:b9:77:4e:9a:6e: d9:fa:8e:81:f0:7c:de:ae:a9:c4:df:94:c6:80:b0: 5a:86:a5:70:d3:c7:91:6f:30:de:2f:a8:69:a2:42: 61:5a:39:7d:f5:5f:17:fc:48:97:0d:d7:ce:00:7c: 02:64:50:27:bb:ac:ad:71:f7:7e:c3:94:fd:87:4b: 7e:a1:aa:04:36:9b:b3:09:bf:b5:11:80:8e:ec:58: d8:80:05:c7:71:ce:53:e1:bc:64:88:30:7c:62:bf: 7a:e4:c6:38:80:36:25:e8:18:2d:0f:92:0f:19:68: d8:43:75:fc:b2:c0:65:74:1c:90:f5:26:ae:9e:c5: 90:c2:69:10:1d:5c:84:45:9b:83:d8:8f:a7:f5:e6: 96:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:46:D6:74:88:1E:39:EE:55:B1:24:D8:E2:B0:D1:2C:D5:1E:B9:2B X509v3 Authority Key Identifier: keyid:55:3D:76:11:EA:6B:CE:5E:C7:96:69:E4:B1:F1:47:F5:9C:2A:0E:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:3c:8d:3a:5d:91:a7:94:47:8a:6a:67:50:6c:1d:70:0d:79: 57:5a:9d:6a:8d:fe:08:f0:dd:7a:7c:04:f1:19:d2:9b:9b:47: ac:98:5b:19:91:3a:f7:93:b7:04:7e:23:e6:c3:c6:5a:3d:b4: 38:4f:1d:5d:6d:9c:e9:94:21:e4:21:5d:f6:b2:2b:bc:de:60: ac:83:d6:4c:8f:9f:67:bf:f7:40:59:73:7a:5c:b0:af:aa:c2: 91:86:eb:10:5e:8c:c3:74:ed:23:a9:64:dd:4b:50:f5:21:87: cf:b3:19:b0:0c:bd:63:4a:19:dc:53:b5:3f:00:43:72:55:e8: fd:60:de:3d:da:01:9e:08:11:70:26:42:cb:bb:f4:3a:70:e6: 33:74:85:e8:10:67:2d:00:f3:ba:2d:bf:26:b9:64:85:fa:96: da:c3:29:49:86:a1:ad:b0:4e:18:a4:33:36:38:f1:62:2a:ac: 81:cd:ce:11:a2:33:6b:a9:01:14:a9:4b:48:06:c6:0d:5e:a7: b3:ba:b4:ac:fa:d2:ec:c6:34:16:0f:f0:ae:c4:80:76:de:a2: 9f:0a:52:fb:25:cc:58:4d:22:d0:dc:2d:22:90:0e:66:eb:e2: 5a:61:0d:ab:a9:53:b3:8b:62:e8:5f:d5:4c:66:9b:f0:73:cc: c5:08:43:c9 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUTOX7/rqQhGpJGHFDsdkhP2wueqgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUzRDc2MTFFQTZCQ0U1RUM3OTY2OUU0QjFGMTQ3RjU5 QzJBMEVFRTAeFw0yNjA0MTYxMzQzMzlaFw0yNjA0MTcxNzAzMzlaMDMxMTAvBgNV BAMTKDc0NDZENjc0ODgxRTM5RUU1NUIxMjREOEUyQjBEMTJDRDUxRUI5MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZJL04Q2PUf9qpTax5qBhL22zc RXUMfhL3uUc5ykH52LC9aGoaTH3DvJjE81tA9sLFZHr9E+CZCFH3k3EktqLc28QC tIYkBxkOzdmECTGHwMUxbpA/Wgw6DMSjflliyUmUFnRURmE+fMIL42ZIcGtwSiW5 d06abtn6joHwfN6uqcTflMaAsFqGpXDTx5FvMN4vqGmiQmFaOX31Xxf8SJcN184A fAJkUCe7rK1x937DlP2HS36hqgQ2m7MJv7URgI7sWNiABcdxzlPhvGSIMHxiv3rk xjiANiXoGC0Pkg8ZaNhDdfyywGV0HJD1Jq6exZDCaRAdXIRFm4PYj6f15pZjAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUdEbWdIgeOe5VsSTY4rDRLNUeuSswHwYDVR0j BBgwFoAUVT12Eeprzl7HlmnksfFH9ZwqDu4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzEyODI3MWUtYzI2OS00OTU0LTg3ZGItZDE4NGRmMTdm ODVjLzQvNTUzRDc2MTFFQTZCQ0U1RUM3OTY2OUU0QjFGMTQ3RjU5QzJBMEVFRS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzU1M0Q3NjExRUE2QkNF NUVDNzk2NjlFNEIxRjE0N0Y1OUMyQTBFRUUuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvYzEyODI3MWUtYzI2OS00OTU0LTg3ZGItZDE4NGRmMTdmODVj LzQvNTUzRDc2MTFFQTZCQ0U1RUM3OTY2OUU0QjFGMTQ3RjU5QzJBMEVFRS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAE08jTpdkaeUR4pqZ1BsHXANeVdanWqN/gjw3Xp8BPEZ0pubR6yYWxmR OveTtwR+I+bDxlo9tDhPHV1tnOmUIeQhXfayK7zeYKyD1kyPn2e/90BZc3pcsK+q wpGG6xBejMN07SOpZN1LUPUhh8+zGbAMvWNKGdxTtT8AQ3JV6P1g3j3aAZ4IEXAm Qsu79Dpw5jN0hegQZy0A87otvya5ZIX6ltrDKUmGoa2wThikMzY48WIqrIHNzhGi M2upARSpS0gGxg1ep7O6tKz60uzGNBYP8K7EgHbeop8KUvslzFhNItDcLSKQDmbr 4lphDaupU7OLYuhf1Uxmm/BzzMUIQ8k= -----END CERTIFICATE-----Generated at Fri Apr 17 07:07:21 2026 by rpki-client