$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft File: 3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft (raw, json) Hash identifier: ed6X7DELMhc9jg0q3mLbqTklR3gGbHwxtNkGxW9c6pU= Subject key identifier: AC:A8:C7:23:84:76:0E:98:1C:67:29:B1:AE:63:46:39:75:7F:42:78 Authority key identifier: 3C:19:D9:EE:5E:B0:20:A8:65:2D:68:59:87:FE:CF:2A:76:BB:02:77 Certificate issuer: /CN=3C19D9EE5EB020A8652D685987FECF2A76BB0277 Certificate serial: 44673739634B3BE3B04035EEE6A6876C0576F17A Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft Manifest number: 5E Signing time: Sun 01 Mar 2026 02:56:31 +0000 Manifest this update: Sun 01 Mar 2026 02:51:31 +0000 Manifest next update: Mon 02 Mar 2026 06:08:31 +0000 Files and hashes: 1: 326130353a646663313a383030303a3a2f34302d3434203d3e20323131343331.roa (hash: +461HFOd1+OqFF4HxgiLMZU5WmlfmbOlhpC36OHo5OY=) 2: 3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl (hash: rvfAsjhlLq5mDC3CZ72+9R0ZGxDeaKpWK7V67+PQSgQ=) 3: 326130353a646663313a383031303a3a2f34342d3438203d3e20323132313534.roa (hash: vZabrxyGvueVve0UIFCKkMx6oLP4C5qFMGRoAro/NOA=) 4: 326130353a646663313a383130303a3a2f34302d3438203d3e20323131343331.roa (hash: IJWnIfIqrQT/KRXbAy3Xfm9Y9DxNBR6JISgHxbdVPos=) 5: 326130353a646663313a383030303a3a2f34342d3438203d3e20323034323931.roa (hash: TnmWJuZNY0DPgipWjil2ZXNBS0GgRAuBPJ9ypq6d80U=) 6: 326130353a646663313a383166303a3a2f34342d3438203d3e20323131343331.roa (hash: LLsi5WyK1XwYJWDjn6LXybqAQvMFc3aggLJjCnG0b1I=) 7: 326130353a646663313a383063303a3a2f34322d3438203d3e20313937383134.roa (hash: +8Gtqve25qz7dj6RoaEfhzyMxoqEmhyXwj7/4y6S5ts=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 06:08:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:67:37:39:63:4b:3b:e3:b0:40:35:ee:e6:a6:87:6c:05:76:f1:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C19D9EE5EB020A8652D685987FECF2A76BB0277 Validity Not Before: Mar 1 02:51:31 2026 GMT Not After : Mar 2 06:08:31 2026 GMT Subject: CN=ACA8C72384760E981C6729B1AE634639757F4278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:98:04:52:00:02:d2:8f:f0:c2:c9:f0:41:f0: bd:40:0a:b3:6c:a8:3c:1a:8f:c1:e4:7d:ad:4d:b8: 77:ef:4d:ea:94:ef:d1:31:4a:28:cc:89:b4:f9:24: d0:ad:9d:53:f8:ae:f3:28:3d:84:34:4e:6b:bb:05: 90:bb:0c:3b:83:d5:eb:dd:52:74:b9:25:33:e6:7f: 51:aa:59:f0:b8:d1:e7:f3:f5:2f:31:b0:8f:99:bf: af:ed:3a:8c:31:d0:d7:9a:84:ff:e5:ef:da:41:9c: ee:b9:65:36:63:0d:be:4c:26:d1:24:5b:b5:55:28: e9:45:d5:e7:47:c9:43:37:d7:f1:d6:48:63:63:c8: d2:c9:df:ca:d8:ec:4e:d4:64:58:32:80:32:6b:bd: f6:d3:67:a5:8a:4d:77:06:48:56:0d:37:66:47:71: 33:7d:7d:ef:0a:8f:a7:2b:9e:8a:30:b8:26:a7:b6: dd:97:36:67:db:b8:9d:e2:fd:8f:5a:11:14:8e:cc: 7d:8a:69:fb:f3:1d:c5:cb:2b:65:04:f7:d7:80:d5: a6:e5:66:54:1f:c2:d4:0f:0e:f5:97:b1:5b:4b:e9: cb:51:42:1e:79:46:8d:9b:07:4a:af:e2:5e:a1:c5: ca:6a:cc:ff:5f:c6:4d:9a:a6:7f:af:00:fa:b5:29: b6:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:A8:C7:23:84:76:0E:98:1C:67:29:B1:AE:63:46:39:75:7F:42:78 X509v3 Authority Key Identifier: keyid:3C:19:D9:EE:5E:B0:20:A8:65:2D:68:59:87:FE:CF:2A:76:BB:02:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:99:19:d1:bd:c5:2d:db:75:6a:ad:cf:eb:18:44:4a:a8:97: b2:2f:aa:8f:c1:98:e8:ba:19:f5:e1:a1:d0:8a:a2:d3:2b:62: b4:6f:9a:2f:25:88:0c:a6:b2:71:db:75:ae:cf:b4:73:b8:a2: 85:f2:53:29:0a:e1:f9:c5:a5:a8:af:46:fb:96:e8:b1:af:7c: e5:06:32:b2:01:65:d2:5a:8e:24:4a:d8:b1:9d:a1:5c:7b:78: 7e:22:f6:6f:3c:f5:3d:a0:47:55:54:89:e9:1e:6b:b3:4a:72: 3f:92:5d:16:6d:3e:a8:29:84:34:d9:9c:c7:d6:64:b6:9b:30: cc:6a:be:b5:34:c5:b7:64:ec:20:bd:47:88:16:19:ab:ee:71: 64:13:fd:8c:90:6e:3f:9c:c8:13:08:39:a6:06:88:6f:f1:eb: 81:26:51:9a:b2:e6:d0:06:b4:8b:d5:d2:64:46:61:08:f8:0f: 03:66:b9:bd:e2:a8:c4:61:fe:e2:13:37:e7:0c:3b:dc:4a:8b: 53:8b:7a:9a:39:6a:f7:9e:62:fc:dd:d8:6f:bd:0b:f7:3b:82: d5:38:b4:39:b4:02:12:3c:72:ad:75:f2:99:df:5d:8f:d6:e2: 4b:ff:71:99:7b:f5:67:0e:c8:0e:7b:62:0f:68:27:7a:64:89: 80:70:9c:4f -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIURGc3OWNLO+OwQDXu5qaHbAV28XowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MxOUQ5RUU1RUIwMjBBODY1MkQ2ODU5ODdGRUNGMkE3 NkJCMDI3NzAeFw0yNjAzMDEwMjUxMzFaFw0yNjAzMDIwNjA4MzFaMDMxMTAvBgNV BAMTKEFDQThDNzIzODQ3NjBFOTgxQzY3MjlCMUFFNjM0NjM5NzU3RjQyNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKmARSAALSj/DCyfBB8L1ACrNs qDwaj8Hkfa1NuHfvTeqU79ExSijMibT5JNCtnVP4rvMoPYQ0Tmu7BZC7DDuD1evd UnS5JTPmf1GqWfC40efz9S8xsI+Zv6/tOowx0NeahP/l79pBnO65ZTZjDb5MJtEk W7VVKOlF1edHyUM31/HWSGNjyNLJ38rY7E7UZFgygDJrvfbTZ6WKTXcGSFYNN2ZH cTN9fe8Kj6crnoowuCantt2XNmfbuJ3i/Y9aERSOzH2KafvzHcXLK2UE99eA1abl ZlQfwtQPDvWXsVtL6ctRQh55Ro2bB0qv4l6hxcpqzP9fxk2apn+vAPq1KbbpAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUrKjHI4R2DpgcZymxrmNGOXV/QngwHwYDVR0j BBgwFoAUPBnZ7l6wIKhlLWhZh/7PKna7AncwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzk5MjY1ZWYtMjJhOS00MTAwLWEyM2QtNTFhOWQ5ZmVl YjdkLzUvM0MxOUQ5RUU1RUIwMjBBODY1MkQ2ODU5ODdGRUNGMkE3NkJCMDI3Ny5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzNDMTlEOUVFNUVCMDIw QTg2NTJENjg1OTg3RkVDRjJBNzZCQjAyNzcuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvYzk5MjY1ZWYtMjJhOS00MTAwLWEyM2QtNTFhOWQ5ZmVlYjdk LzUvM0MxOUQ5RUU1RUIwMjBBODY1MkQ2ODU5ODdGRUNGMkE3NkJCMDI3Ny5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAMGZGdG9xS3bdWqtz+sYREqol7Ivqo/BmOi6GfXhodCKotMrYrRvmi8l iAymsnHbda7PtHO4ooXyUykK4fnFpaivRvuW6LGvfOUGMrIBZdJajiRK2LGdoVx7 eH4i9m889T2gR1VUiekea7NKcj+SXRZtPqgphDTZnMfWZLabMMxqvrU0xbdk7CC9 R4gWGavucWQT/YyQbj+cyBMIOaYGiG/x64EmUZqy5tAGtIvV0mRGYQj4DwNmub3i qMRh/uITN+cMO9xKi1OLepo5aveeYvzd2G+9C/c7gtU4tDm0AhI8cq118pnfXY/W 4kv/cZl79WcOyA57Yg9oJ3pkiYBwnE8= -----END CERTIFICATE-----Generated at Sun Mar 1 22:21:50 2026 by rpki-client