$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft File: 3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft (raw, json) Hash identifier: OF5eRVIg/WppApWnfs6Z8mFw7wMbgBr/zXEztL0DCxo= Subject key identifier: CB:EF:20:E5:34:2F:2E:F8:95:35:45:80:45:FB:C2:81:F6:7F:E8:DF Authority key identifier: 3C:19:D9:EE:5E:B0:20:A8:65:2D:68:59:87:FE:CF:2A:76:BB:02:77 Certificate issuer: /CN=3C19D9EE5EB020A8652D685987FECF2A76BB0277 Certificate serial: 591C9AF062A810D3F5969A7DCEA8BC73B9BCA12F Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft Manifest number: 9C Signing time: Fri 17 Apr 2026 09:58:12 +0000 Manifest this update: Fri 17 Apr 2026 09:53:12 +0000 Manifest next update: Sat 18 Apr 2026 10:04:12 +0000 Files and hashes: 1: 326130353a646663313a383130303a3a2f34302d3438203d3e20323131343331.roa (hash: IJWnIfIqrQT/KRXbAy3Xfm9Y9DxNBR6JISgHxbdVPos=) 2: 3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl (hash: 0kwovt4VYvb1oCmKw9/DglPyKtJ5hnzoPLfBmx4f0Fg=) 3: 326130353a646663313a383031303a3a2f34342d3438203d3e20323132313534.roa (hash: vZabrxyGvueVve0UIFCKkMx6oLP4C5qFMGRoAro/NOA=) 4: 326130353a646663313a383063303a3a2f34322d3438203d3e20313937383134.roa (hash: +8Gtqve25qz7dj6RoaEfhzyMxoqEmhyXwj7/4y6S5ts=) 5: 326130353a646663313a383166303a3a2f34342d3438203d3e20323131343331.roa (hash: LLsi5WyK1XwYJWDjn6LXybqAQvMFc3aggLJjCnG0b1I=) 6: 326130353a646663313a383030303a3a2f34342d3438203d3e20323034323931.roa (hash: TnmWJuZNY0DPgipWjil2ZXNBS0GgRAuBPJ9ypq6d80U=) 7: 326130353a646663313a383030303a3a2f34302d3434203d3e20323131343331.roa (hash: +461HFOd1+OqFF4HxgiLMZU5WmlfmbOlhpC36OHo5OY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 10:04:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:1c:9a:f0:62:a8:10:d3:f5:96:9a:7d:ce:a8:bc:73:b9:bc:a1:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C19D9EE5EB020A8652D685987FECF2A76BB0277 Validity Not Before: Apr 17 09:53:12 2026 GMT Not After : Apr 18 10:04:12 2026 GMT Subject: CN=CBEF20E5342F2EF89535458045FBC281F67FE8DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fe:42:81:33:82:61:d6:e1:de:e6:08:db:74: 0b:d8:b3:90:dd:63:00:f4:ed:d9:9d:47:a7:08:f5: ca:4e:b0:ca:6c:00:b7:b7:67:a4:28:72:14:72:16: 7f:78:b6:5f:4e:88:af:1f:f0:8b:bb:ee:aa:10:7e: 1f:ec:21:17:7e:06:7a:79:82:a1:f1:88:f6:4d:b7: ec:3d:f1:e8:9c:75:20:5c:14:e8:46:9e:ba:d8:5c: 89:c7:22:eb:f3:30:19:10:3e:ad:39:ec:69:00:4f: 2c:19:64:f7:1c:d4:83:ea:a6:94:c7:a4:4e:97:59: e8:4f:80:4f:61:58:48:26:25:ab:22:e3:99:21:ae: eb:d2:8e:a9:27:74:77:a0:76:fa:6f:5d:5a:96:46: 69:56:6a:60:55:ee:29:0e:3d:47:9f:47:6d:f0:a2: b4:3b:36:59:ec:c1:53:15:3e:05:73:71:1f:bc:f4: 21:08:31:b3:a7:7e:7d:81:7f:af:19:19:38:b8:63: a4:1a:d5:4e:4d:a3:88:b3:72:7d:c0:06:c3:79:8d: 54:47:6f:e8:1c:af:7b:17:c1:2e:18:a8:90:86:b0: e0:84:6c:de:b8:02:f8:df:2e:50:f0:64:11:9f:6c: c7:84:75:9f:b3:09:6a:11:f3:4c:52:e7:fe:16:89: ae:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:EF:20:E5:34:2F:2E:F8:95:35:45:80:45:FB:C2:81:F6:7F:E8:DF X509v3 Authority Key Identifier: keyid:3C:19:D9:EE:5E:B0:20:A8:65:2D:68:59:87:FE:CF:2A:76:BB:02:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:47:a0:fc:e8:1b:0c:c9:c1:df:f7:85:84:a9:eb:43:f6:86: 68:ff:11:b5:87:60:0c:f9:7f:f4:1d:65:ff:df:75:20:90:54: cd:9a:e3:11:5e:4f:81:59:91:d8:86:49:b4:ce:1c:60:c8:5c: f5:c7:c4:20:a6:9e:52:92:f5:82:26:33:b5:d3:8b:94:03:47: 80:4e:70:60:ff:71:24:f4:5d:0b:5e:2e:2b:f2:0f:0f:c5:1d: 99:53:99:23:e0:c6:e0:df:d6:fd:73:cc:0a:5c:7d:16:03:37: e3:8b:b0:74:1a:55:39:b7:00:e2:87:7f:07:e9:68:37:0a:fd: 77:93:42:c2:91:e9:8f:ba:88:70:3f:ca:0d:37:49:b1:96:bb: 85:8a:f9:0b:3a:df:01:d9:1f:7d:45:67:bf:8a:0b:1d:5d:99: 4e:e1:3e:cd:25:09:8f:83:15:3f:7f:24:36:d2:bf:5d:bf:cb: 24:22:f8:31:c7:41:08:3c:f5:32:8c:64:ab:9e:f2:55:82:10: f9:3b:e3:e2:2c:7c:4e:53:0d:1b:d0:6c:23:68:a7:b9:33:c6: 46:c9:93:48:fd:1f:42:ce:ec:8d:b4:19:6c:5d:dc:04:94:4a: e0:19:51:8e:5f:c6:a6:04:54:ef:90:1a:69:93:a7:06:a2:4d: 80:79:48:50 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUWRya8GKoENP1lpp9zqi8c7m8oS8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MxOUQ5RUU1RUIwMjBBODY1MkQ2ODU5ODdGRUNGMkE3 NkJCMDI3NzAeFw0yNjA0MTcwOTUzMTJaFw0yNjA0MTgxMDA0MTJaMDMxMTAvBgNV BAMTKENCRUYyMEU1MzQyRjJFRjg5NTM1NDU4MDQ1RkJDMjgxRjY3RkU4REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7/kKBM4Jh1uHe5gjbdAvYs5Dd YwD07dmdR6cI9cpOsMpsALe3Z6QochRyFn94tl9OiK8f8Iu77qoQfh/sIRd+Bnp5 gqHxiPZNt+w98eicdSBcFOhGnrrYXInHIuvzMBkQPq057GkATywZZPcc1IPqppTH pE6XWehPgE9hWEgmJasi45khruvSjqkndHegdvpvXVqWRmlWamBV7ikOPUefR23w orQ7NlnswVMVPgVzcR+89CEIMbOnfn2Bf68ZGTi4Y6Qa1U5No4izcn3ABsN5jVRH b+gcr3sXwS4YqJCGsOCEbN64AvjfLlDwZBGfbMeEdZ+zCWoR80xS5/4Wia7jAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUy+8g5TQvLviVNUWARfvCgfZ/6N8wHwYDVR0j BBgwFoAUPBnZ7l6wIKhlLWhZh/7PKna7AncwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzk5MjY1ZWYtMjJhOS00MTAwLWEyM2QtNTFhOWQ5ZmVl YjdkLzUvM0MxOUQ5RUU1RUIwMjBBODY1MkQ2ODU5ODdGRUNGMkE3NkJCMDI3Ny5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzNDMTlEOUVFNUVCMDIw QTg2NTJENjg1OTg3RkVDRjJBNzZCQjAyNzcuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvYzk5MjY1ZWYtMjJhOS00MTAwLWEyM2QtNTFhOWQ5ZmVlYjdk LzUvM0MxOUQ5RUU1RUIwMjBBODY1MkQ2ODU5ODdGRUNGMkE3NkJCMDI3Ny5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBALtHoPzoGwzJwd/3hYSp60P2hmj/EbWHYAz5f/QdZf/fdSCQVM2a4xFe T4FZkdiGSbTOHGDIXPXHxCCmnlKS9YImM7XTi5QDR4BOcGD/cST0XQteLivyDw/F HZlTmSPgxuDf1v1zzApcfRYDN+OLsHQaVTm3AOKHfwfpaDcK/XeTQsKR6Y+6iHA/ yg03SbGWu4WK+Qs63wHZH31FZ7+KCx1dmU7hPs0lCY+DFT9/JDbSv12/yyQi+DHH QQg89TKMZKue8lWCEPk74+IsfE5TDRvQbCNop7kzxkbJk0j9H0LO7I20GWxd3ASU SuAZUY5fxqYEVO+QGmmTpwaiTYB5SFA= -----END CERTIFICATE-----Generated at Fri Apr 17 18:15:13 2026 by rpki-client