
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft
File: 3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft (raw, json)
Hash identifier: 7SOPuyD7QDQBNrBF9a1fZTt9SqfuZouwoeLxnp2aTak=
Subject key identifier: 62:EB:20:04:A7:47:54:8A:95:3B:52:E9:D2:60:C6:A6:C2:BC:ED:D0
Authority key identifier: 3C:19:D9:EE:5E:B0:20:A8:65:2D:68:59:87:FE:CF:2A:76:BB:02:77
Certificate issuer: /CN=3C19D9EE5EB020A8652D685987FECF2A76BB0277
Certificate serial: 6576C00E6E105171B8CD50C18AF195E82B867090
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft
Manifest number: 011A
Signing time: Tue 28 Jul 2026 23:55:33 +0000
Manifest this update: Tue 28 Jul 2026 23:50:33 +0000
Manifest next update: Thu 30 Jul 2026 02:04:33 +0000
Files and hashes: 1: 326130353a646663313a383063303a3a2f34322d3438203d3e20313937383134.roa (hash: +8Gtqve25qz7dj6RoaEfhzyMxoqEmhyXwj7/4y6S5ts=)
2: 3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl (hash: 549cxdUONBclzUV+D70NtcKG1e7aMzOKROWn0CYajCg=)
3: 326130353a646663313a383030303a3a2f34342d3438203d3e20323034323931.roa (hash: TnmWJuZNY0DPgipWjil2ZXNBS0GgRAuBPJ9ypq6d80U=)
4: 326130353a646663313a383166303a3a2f34342d3438203d3e20323131343331.roa (hash: LLsi5WyK1XwYJWDjn6LXybqAQvMFc3aggLJjCnG0b1I=)
5: 326130353a646663313a383130303a3a2f34302d3438203d3e20323131343331.roa (hash: IJWnIfIqrQT/KRXbAy3Xfm9Y9DxNBR6JISgHxbdVPos=)
6: 326130353a646663313a383031303a3a2f34342d3438203d3e20323132313534.roa (hash: vZabrxyGvueVve0UIFCKkMx6oLP4C5qFMGRoAro/NOA=)
7: 326130353a646663313a383030303a3a2f34302d3434203d3e20323131343331.roa (hash: +461HFOd1+OqFF4HxgiLMZU5WmlfmbOlhpC36OHo5OY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl
rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:76:c0:0e:6e:10:51:71:b8:cd:50:c1:8a:f1:95:e8:2b:86:70:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C19D9EE5EB020A8652D685987FECF2A76BB0277
Validity
Not Before: Jul 28 23:50:33 2026 GMT
Not After : Jul 30 02:04:33 2026 GMT
Subject: CN=62EB2004A747548A953B52E9D260C6A6C2BCEDD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:36:c6:a3:2d:a2:de:20:20:ea:ab:80:8d:a6:
8c:a3:67:15:31:e8:4c:db:80:9f:cd:6e:41:3b:cc:
43:14:ff:41:3f:a5:f6:64:13:de:60:3a:bd:d0:19:
6f:ac:e2:ba:aa:1b:d4:b8:a3:b4:1d:37:23:8c:59:
53:86:77:6b:3d:38:77:34:68:ef:15:a9:2a:57:91:
b8:27:73:d9:fb:8e:09:4c:4f:34:73:44:ea:9e:6a:
b9:c0:58:58:98:de:3e:70:26:14:21:ef:52:45:e3:
f7:06:ee:0e:7c:43:30:2e:01:80:3b:8f:2c:e8:3f:
77:6c:05:24:4d:04:20:51:a2:c1:54:84:f8:18:71:
40:ce:26:70:08:7e:04:08:a4:84:fa:b3:5f:db:ac:
4e:c8:95:5b:00:e3:70:9b:ee:d0:12:88:ca:75:4b:
83:9a:7b:6a:47:67:7a:38:b0:4b:e1:c2:c1:c2:cf:
32:bd:6b:89:ed:a3:dd:d1:b5:12:de:b6:1b:ff:ab:
19:97:6b:7b:d2:79:48:94:60:f9:84:b3:e8:7a:75:
2b:73:1b:31:8a:6a:32:dc:7a:21:1d:6b:32:92:87:
fe:a6:f0:45:7c:8b:d3:7b:44:d4:2f:0d:f8:3f:4e:
38:64:75:a5:1f:28:c3:1f:dd:c1:f4:92:55:c6:1f:
25:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:EB:20:04:A7:47:54:8A:95:3B:52:E9:D2:60:C6:A6:C2:BC:ED:D0
X509v3 Authority Key Identifier:
keyid:3C:19:D9:EE:5E:B0:20:A8:65:2D:68:59:87:FE:CF:2A:76:BB:02:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:ea:6c:7d:0a:1b:a2:0a:58:03:81:64:8d:f1:e1:ac:a6:32:
d5:56:73:e4:5c:34:88:14:74:25:91:25:4d:a9:0b:03:31:93:
26:01:90:d8:a3:84:b3:7b:23:b1:10:95:80:e2:61:a2:a4:c6:
45:eb:71:d6:2e:e9:68:6e:a6:ab:54:fc:0b:ce:13:86:94:f5:
1a:a6:76:bd:6d:d4:ce:c0:a6:ab:b4:60:7d:75:cd:fb:54:a0:
d9:7c:d8:40:c4:30:f3:f5:84:bb:3c:90:a2:16:b9:00:86:02:
68:d2:cd:1f:90:fa:56:61:8b:bd:85:05:78:aa:0d:a6:de:ce:
3c:37:66:42:a4:2d:ee:cc:89:4f:08:f3:e3:85:e4:9a:86:55:
77:f5:50:38:0b:3f:61:fb:f3:68:6a:cc:37:f6:ed:7a:57:60:
2b:16:96:50:ec:75:c5:a5:b9:85:8b:65:3d:b6:62:3c:4a:dc:
db:a6:01:79:00:1e:a5:d3:1b:a2:89:9a:56:1a:df:18:bd:df:
1a:87:1b:5f:83:ff:58:7e:93:c9:de:c0:6b:84:af:f1:ea:37:
46:9c:d7:df:70:65:d4:db:ae:d2:5f:7b:40:b7:b0:07:8c:0e:
79:a1:cf:71:d3:08:b3:54:7c:2a:66:50:21:06:56:34:42:1d:
29:39:41:4c
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIUZXbADm4QUXG4zVDBivGV6CuGcJAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0MxOUQ5RUU1RUIwMjBBODY1MkQ2ODU5ODdGRUNGMkE3
NkJCMDI3NzAeFw0yNjA3MjgyMzUwMzNaFw0yNjA3MzAwMjA0MzNaMDMxMTAvBgNV
BAMTKDYyRUIyMDA0QTc0NzU0OEE5NTNCNTJFOUQyNjBDNkE2QzJCQ0VERDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrNsajLaLeICDqq4CNpoyjZxUx
6EzbgJ/NbkE7zEMU/0E/pfZkE95gOr3QGW+s4rqqG9S4o7QdNyOMWVOGd2s9OHc0
aO8VqSpXkbgnc9n7jglMTzRzROqearnAWFiY3j5wJhQh71JF4/cG7g58QzAuAYA7
jyzoP3dsBSRNBCBRosFUhPgYcUDOJnAIfgQIpIT6s1/brE7IlVsA43Cb7tASiMp1
S4Oae2pHZ3o4sEvhwsHCzzK9a4nto93RtRLethv/qxmXa3vSeUiUYPmEs+h6dStz
GzGKajLceiEdazKSh/6m8EV8i9N7RNQvDfg/TjhkdaUfKMMf3cH0klXGHyXTAgMB
AAGjggJdMIICWTAdBgNVHQ4EFgQUYusgBKdHVIqVO1Lp0mDGpsK87dAwHwYDVR0j
BBgwFoAUPBnZ7l6wIKhlLWhZh/7PKna7AncwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzk5MjY1ZWYtMjJhOS00MTAwLWEyM2QtNTFhOWQ5ZmVl
YjdkLzUvM0MxOUQ5RUU1RUIwMjBBODY1MkQ2ODU5ODdGRUNGMkE3NkJCMDI3Ny5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzNDMTlEOUVFNUVCMDIw
QTg2NTJENjg1OTg3RkVDRjJBNzZCQjAyNzcuY2VyMIGeBggrBgEFBQcBCwSBkTCB
jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYzk5MjY1ZWYtMjJhOS00MTAwLWEyM2QtNTFhOWQ5ZmVlYjdk
LzUvM0MxOUQ5RUU1RUIwMjBBODY1MkQ2ODU5ODdGRUNGMkE3NkJCMDI3Ny5tZnQw
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC
AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL
BQADggEBABzqbH0KG6IKWAOBZI3x4aymMtVWc+RcNIgUdCWRJU2pCwMxkyYBkNij
hLN7I7EQlYDiYaKkxkXrcdYu6WhupqtU/AvOE4aU9Rqmdr1t1M7Apqu0YH11zftU
oNl82EDEMPP1hLs8kKIWuQCGAmjSzR+Q+lZhi72FBXiqDabezjw3ZkKkLe7MiU8I
8+OF5JqGVXf1UDgLP2H782hqzDf27XpXYCsWllDsdcWluYWLZT22YjxK3NumAXkA
HqXTG6KJmlYa3xi93xqHG1+D/1h+k8newGuEr/HqN0ac199wZdTbrtJfe0C3sAeM
Dnmhz3HTCLNUfCpmUCEGVjRCHSk5QUw=
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:04:07 2026 by rpki-client