$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft File: 4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft (raw, json) Hash identifier: ePYSplSUMxPmmwUgS65KRGj9y/2TCGZlZeUYIA4evwc= Subject key identifier: 80:4C:43:14:4A:58:F1:0D:84:A1:CD:08:34:B1:C7:D6:70:0F:18:C0 Authority key identifier: 4C:8F:14:A9:80:41:CC:D9:EA:EF:C4:56:FF:5A:AF:BF:49:01:C6:81 Certificate issuer: /CN=4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681 Certificate serial: 33A6E06EFC3B77C7E321E2C996E07FE3B89C2296 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft Manifest number: 8E Signing time: Mon 20 Oct 2025 06:05:16 +0000 Manifest this update: Mon 20 Oct 2025 06:00:16 +0000 Manifest next update: Tue 21 Oct 2025 08:22:16 +0000 Files and hashes: 1: 4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.crl (hash: tTIqbaNONGS1vg2LZrsiJKIoke4+YaghCeIDTOyYoPU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.crl rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 08:22:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:a6:e0:6e:fc:3b:77:c7:e3:21:e2:c9:96:e0:7f:e3:b8:9c:22:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681 Validity Not Before: Oct 20 06:00:16 2025 GMT Not After : Oct 21 08:22:16 2025 GMT Subject: CN=804C43144A58F10D84A1CD0834B1C7D6700F18C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5c:d9:2c:be:ac:e8:95:67:a4:b2:a3:86:3f: 71:b7:81:ea:41:59:a2:51:5e:ba:dc:15:1b:e8:9b: ae:0b:7f:99:ed:32:7d:83:9b:a7:31:b8:cd:63:4f: 33:d0:69:26:ea:7f:ad:b8:6f:e0:2e:1d:c9:9f:0d: 87:b5:b1:5a:1e:5c:e8:f5:40:9c:77:dc:61:b0:61: 95:2e:f2:4f:14:34:84:39:3d:0c:77:b4:d6:41:f3: 74:ec:b0:52:96:7e:96:25:aa:d4:26:3c:bd:b1:04: 6b:4e:2b:e8:ea:d5:b9:77:2c:d0:28:83:29:0b:ce: 1a:15:4f:21:e3:83:c7:99:08:d5:f8:2b:d5:71:7b: f0:8b:99:38:1d:6a:6f:c2:0e:e0:b3:f1:15:4c:30: c8:17:a0:98:e8:28:81:bf:b2:cc:51:92:5b:90:37: 56:27:0f:9f:a2:61:9e:f8:67:ec:ca:1b:40:62:35: 67:e3:60:24:4a:df:c6:6f:ae:e9:0e:a6:0c:a9:5e: ba:da:7e:2a:69:de:8f:25:a9:8d:d1:fa:dd:69:15: e1:1e:50:5f:97:c3:4d:67:40:9c:d2:b8:01:fe:f4: e3:d0:2f:af:5e:d9:50:03:0d:eb:93:74:33:e2:3a: e7:48:15:8a:4b:09:ee:b0:f8:f9:af:2f:13:0f:fc: a1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:4C:43:14:4A:58:F1:0D:84:A1:CD:08:34:B1:C7:D6:70:0F:18:C0 X509v3 Authority Key Identifier: keyid:4C:8F:14:A9:80:41:CC:D9:EA:EF:C4:56:FF:5A:AF:BF:49:01:C6:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:c7:c1:66:94:00:e5:d6:32:ff:d0:06:0e:10:d9:88:9a:db: 3a:75:32:25:0c:d3:ca:3d:52:cc:4d:95:1b:38:3b:62:2e:84: 98:e9:ad:49:66:e5:2a:66:c7:d3:6d:a6:cd:62:14:f6:94:5b: 97:31:bc:06:75:a9:9c:55:1e:71:a9:a8:c5:4a:07:3e:55:50: 01:93:b6:e7:ef:ca:85:ff:0a:af:ee:8d:32:b7:cc:e2:05:31: 0c:ae:b5:69:d5:5a:e1:83:d7:ee:2e:38:c7:e7:52:3c:e9:cf: f5:7d:e3:ad:dc:dd:af:ad:a5:31:f4:b6:b6:31:b0:c1:2a:34: 2b:92:6e:8d:f2:b3:d3:e3:7d:8c:b7:66:73:48:26:fe:9e:a7: 41:94:1a:40:35:96:c7:0e:3c:38:e8:f7:4d:48:02:12:55:f1: af:aa:76:02:e2:8a:51:f5:56:87:12:e7:29:f4:b4:4e:23:8a: fe:e3:ca:71:24:95:07:84:5d:c8:23:f0:35:a6:9b:58:54:8d: 5b:2a:53:8a:6c:9c:46:65:75:ec:75:b2:7d:d3:df:16:8d:a9: 0a:2b:b7:4d:cd:b6:3d:64:b8:80:54:74:69:20:72:1e:0d:f5: 52:e9:c3:79:98:48:00:c5:60:84:7c:f3:de:35:4f:7f:0d:3d: 21:b5:88:2d -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUM6bgbvw7d8fjIeLJluB/47icIpYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEM4RjE0QTk4MDQxQ0NEOUVBRUZDNDU2RkY1QUFGQkY0 OTAxQzY4MTAeFw0yNTEwMjAwNjAwMTZaFw0yNTEwMjEwODIyMTZaMDMxMTAvBgNV BAMTKDgwNEM0MzE0NEE1OEYxMEQ4NEExQ0QwODM0QjFDN0Q2NzAwRjE4QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzXNksvqzolWeksqOGP3G3gepB WaJRXrrcFRvom64Lf5ntMn2Dm6cxuM1jTzPQaSbqf624b+AuHcmfDYe1sVoeXOj1 QJx33GGwYZUu8k8UNIQ5PQx3tNZB83TssFKWfpYlqtQmPL2xBGtOK+jq1bl3LNAo gykLzhoVTyHjg8eZCNX4K9Vxe/CLmTgdam/CDuCz8RVMMMgXoJjoKIG/ssxRkluQ N1YnD5+iYZ74Z+zKG0BiNWfjYCRK38ZvrukOpgypXrrafipp3o8lqY3R+t1pFeEe UF+Xw01nQJzSuAH+9OPQL69e2VADDeuTdDPiOudIFYpLCe6w+PmvLxMP/KHpAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUgExDFEpY8Q2Eoc0INLHH1nAPGMAwHwYDVR0j BBgwFoAUTI8UqYBBzNnq78RW/1qvv0kBxoEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFhZmM4 ZWI4LzQvNEM4RjE0QTk4MDQxQ0NEOUVBRUZDNDU2RkY1QUFGQkY0OTAxQzY4MS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzRDOEYxNEE5ODA0MUND RDlFQUVGQzQ1NkZGNUFBRkJGNDkwMUM2ODEuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFhZmM4ZWI4 LzQvNEM4RjE0QTk4MDQxQ0NEOUVBRUZDNDU2RkY1QUFGQkY0OTAxQzY4MS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAJLHwWaUAOXWMv/QBg4Q2Yia2zp1MiUM08o9UsxNlRs4O2IuhJjprUlm 5Spmx9Ntps1iFPaUW5cxvAZ1qZxVHnGpqMVKBz5VUAGTtufvyoX/Cq/ujTK3zOIF MQyutWnVWuGD1+4uOMfnUjzpz/V9463c3a+tpTH0trYxsMEqNCuSbo3ys9PjfYy3 ZnNIJv6ep0GUGkA1lscOPDjo901IAhJV8a+qdgLiilH1VocS5yn0tE4jiv7jynEk lQeEXcgj8DWmm1hUjVsqU4psnEZldex1sn3T3xaNqQort03Ntj1kuIBUdGkgch4N 9VLpw3mYSADFYIR88941T38NPSG1iC0= -----END CERTIFICATE-----Generated at Mon Oct 20 19:41:38 2025 by rpki-client