$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft File: 4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft (raw, json) Hash identifier: qvas7ko+vaMCNzBk1qsLLaar9zqFe5IrVcU0ccyJ/FQ= Subject key identifier: 11:6F:C3:5B:9A:20:66:2C:C4:04:96:A6:B6:22:37:F3:66:98:97:06 Authority key identifier: 4C:8F:14:A9:80:41:CC:D9:EA:EF:C4:56:FF:5A:AF:BF:49:01:C6:81 Certificate issuer: /CN=4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681 Certificate serial: 63DC08DBFDE8FF5CF8B587F94F9211BF3563F93E Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft Manifest number: 0162 Signing time: Fri 27 Mar 2026 23:59:39 +0000 Manifest this update: Fri 27 Mar 2026 23:54:39 +0000 Manifest next update: Sun 29 Mar 2026 02:32:39 +0000 Files and hashes: 1: 4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.crl (hash: hIXxVF0zAc3D932By2AsNy1xhTxxtPJEJh41TjMOvls=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.crl rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Mar 2026 00:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:dc:08:db:fd:e8:ff:5c:f8:b5:87:f9:4f:92:11:bf:35:63:f9:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681 Validity Not Before: Mar 27 23:54:39 2026 GMT Not After : Mar 29 02:32:39 2026 GMT Subject: CN=116FC35B9A20662CC40496A6B62237F366989706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:3d:b4:33:bb:7c:96:e5:0b:ed:f7:2b:d5:84: 3f:f9:ea:c3:5b:c3:90:66:16:75:1a:7a:8b:d3:11: 93:ca:79:e2:88:83:93:2d:c0:b6:3d:e9:32:2c:2a: ba:48:9c:de:68:e9:86:fa:12:32:96:c5:1d:36:aa: 91:16:74:b8:5d:3f:49:ca:c4:40:77:b3:f1:14:13: a0:54:d2:4f:8c:42:c8:03:7f:71:15:d7:96:d7:7d: e0:de:09:3b:7c:e9:fc:1d:9a:e4:8b:6f:f0:eb:95: 7a:4a:c3:1b:13:23:ab:83:af:3f:15:fe:48:61:9d: 7c:ca:3a:55:79:b6:27:62:93:18:b9:8f:40:db:5e: 38:0d:6d:4d:e9:2f:fb:52:e8:b6:c8:11:ec:b3:27: 49:20:f0:bb:05:db:f8:31:da:4b:5f:d5:62:e6:5d: ea:2c:1c:f3:c3:bf:22:16:7f:fc:97:b2:0c:fb:c2: ab:38:23:64:05:db:80:1d:1d:ea:fa:dc:74:bf:14: 68:84:6e:24:78:0f:14:86:33:c7:78:d7:c1:b1:46: 68:8b:63:57:38:ed:cc:bc:9a:46:04:49:f9:47:08: 4d:06:9e:1b:52:67:29:81:f6:cc:bc:3b:62:4c:c3: 75:f3:dc:2c:b7:59:60:07:bb:2a:de:45:02:94:2f: 73:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:6F:C3:5B:9A:20:66:2C:C4:04:96:A6:B6:22:37:F3:66:98:97:06 X509v3 Authority Key Identifier: keyid:4C:8F:14:A9:80:41:CC:D9:EA:EF:C4:56:FF:5A:AF:BF:49:01:C6:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:95:3f:5b:42:01:5e:0b:d4:8b:d0:8b:36:22:e4:f1:22:f2: 67:89:35:75:06:6b:33:38:94:24:2d:db:c5:03:df:14:49:88: c3:9e:d8:1a:d2:e2:ef:6d:f1:5c:9e:5c:d8:49:3b:e2:9e:03: e3:9b:cd:d6:c6:6d:c5:dd:aa:dc:4b:ac:f2:a6:a5:68:2d:4d: aa:03:5a:26:bd:85:51:a3:28:a5:c2:5e:3e:fd:db:40:ab:f2: d1:2a:38:7f:d1:bc:07:6e:a6:8b:88:92:ee:39:4c:60:12:67: 11:17:58:54:d7:18:25:59:71:f3:f3:b0:6a:88:de:3e:78:a3: 50:bd:25:97:5a:d4:b8:9d:72:87:ac:00:a6:3e:18:ac:c4:e1: 59:ea:54:c8:55:51:c1:be:56:58:88:c0:6b:f9:4f:de:dd:30: 34:38:99:e1:38:17:f8:47:e5:cd:66:8e:f7:67:eb:47:cf:cf: 60:38:7e:41:6f:f2:cd:be:2c:ac:06:b1:c7:82:e4:f3:71:1e: b1:ab:e9:b8:6e:b4:7e:4b:9d:b0:1d:d7:56:8f:2b:27:2f:42: b7:13:ec:8c:7a:34:67:47:8c:13:98:c1:30:54:65:7c:a0:8f: 7d:a5:9d:9a:dd:03:33:4b:3a:41:a1:44:d8:65:7b:d2:d8:2a: 7b:40:6b:12 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUY9wI2/3o/1z4tYf5T5IRvzVj+T4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEM4RjE0QTk4MDQxQ0NEOUVBRUZDNDU2RkY1QUFGQkY0 OTAxQzY4MTAeFw0yNjAzMjcyMzU0MzlaFw0yNjAzMjkwMjMyMzlaMDMxMTAvBgNV BAMTKDExNkZDMzVCOUEyMDY2MkNDNDA0OTZBNkI2MjIzN0YzNjY5ODk3MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkPbQzu3yW5Qvt9yvVhD/56sNb w5BmFnUaeovTEZPKeeKIg5MtwLY96TIsKrpInN5o6Yb6EjKWxR02qpEWdLhdP0nK xEB3s/EUE6BU0k+MQsgDf3EV15bXfeDeCTt86fwdmuSLb/DrlXpKwxsTI6uDrz8V /khhnXzKOlV5tidikxi5j0DbXjgNbU3pL/tS6LbIEeyzJ0kg8LsF2/gx2ktf1WLm XeosHPPDvyIWf/yXsgz7wqs4I2QF24AdHer63HS/FGiEbiR4DxSGM8d418GxRmiL Y1c47cy8mkYESflHCE0GnhtSZymB9sy8O2JMw3Xz3Cy3WWAHuyreRQKUL3OPAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUEW/DW5ogZizEBJamtiI382aYlwYwHwYDVR0j BBgwFoAUTI8UqYBBzNnq78RW/1qvv0kBxoEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFhZmM4 ZWI4LzQvNEM4RjE0QTk4MDQxQ0NEOUVBRUZDNDU2RkY1QUFGQkY0OTAxQzY4MS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzRDOEYxNEE5ODA0MUND RDlFQUVGQzQ1NkZGNUFBRkJGNDkwMUM2ODEuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFhZmM4ZWI4 LzQvNEM4RjE0QTk4MDQxQ0NEOUVBRUZDNDU2RkY1QUFGQkY0OTAxQzY4MS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAHuVP1tCAV4L1IvQizYi5PEi8meJNXUGazM4lCQt28UD3xRJiMOe2BrS 4u9t8VyeXNhJO+KeA+ObzdbGbcXdqtxLrPKmpWgtTaoDWia9hVGjKKXCXj7920Cr 8tEqOH/RvAdupouIku45TGASZxEXWFTXGCVZcfPzsGqI3j54o1C9JZda1Lidcoes AKY+GKzE4VnqVMhVUcG+VliIwGv5T97dMDQ4meE4F/hH5c1mjvdn60fPz2A4fkFv 8s2+LKwGsceC5PNxHrGr6bhutH5LnbAd11aPKycvQrcT7Ix6NGdHjBOYwTBUZXyg j32lnZrdAzNLOkGhRNhle9LYKntAaxI= -----END CERTIFICATE-----Generated at Sat Mar 28 11:23:01 2026 by rpki-client