$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft File: 0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft (raw, json) Hash identifier: tlIz/NHL2yBO1xfzVO7ccVnSSkH2ix2aVvkbe/r3H/A= Subject key identifier: EE:F0:9F:9B:4C:8F:10:29:1A:29:68:97:AB:B7:8C:83:F4:4E:01:6F Authority key identifier: 0B:3B:68:A2:06:B6:AF:84:A3:4A:A1:B7:63:2E:99:AB:06:F5:20:77 Certificate issuer: /CN=0B3B68A206B6AF84A34AA1B7632E99AB06F52077 Certificate serial: 22D578F7B717E2CC1130F33B79876314BE4E1DB0 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft Manifest number: 49 Signing time: Sun 29 Mar 2026 21:28:25 +0000 Manifest this update: Sun 29 Mar 2026 21:23:25 +0000 Manifest next update: Tue 31 Mar 2026 00:24:25 +0000 Files and hashes: 1: 0B3B68A206B6AF84A34AA1B7632E99AB06F52077.crl (hash: LlJgqAARMmpmAHapdtlKmPEC8YNneIN8t+cTm+nJ5RQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.crl rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 31 Mar 2026 00:24:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:d5:78:f7:b7:17:e2:cc:11:30:f3:3b:79:87:63:14:be:4e:1d:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B3B68A206B6AF84A34AA1B7632E99AB06F52077 Validity Not Before: Mar 29 21:23:25 2026 GMT Not After : Mar 31 00:24:25 2026 GMT Subject: CN=EEF09F9B4C8F10291A296897ABB78C83F44E016F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7c:d2:1c:a3:51:71:e3:74:e0:2a:28:5e:63: db:1c:54:ac:dd:e0:57:3e:ea:0c:ae:16:72:db:06: 5b:03:8b:7a:d8:17:a6:56:36:a9:28:10:48:02:34: 6a:58:ef:b7:b1:1f:6a:d5:09:91:60:54:c2:a2:00: 0c:49:0b:e6:7b:7a:1b:59:c6:8e:fe:e3:e1:e6:64: a8:3d:be:5a:19:65:8c:79:c8:42:66:51:f6:6d:ce: 6c:5d:21:48:93:43:6b:2f:b4:65:f2:58:50:b4:92: 3e:7c:51:c3:82:79:e1:95:16:69:c0:e5:50:ea:03: 85:86:78:a3:7b:46:df:df:2d:09:eb:8c:d7:a0:0f: c3:95:f0:86:6e:ba:04:20:c8:3c:b1:5a:6d:a6:2c: 30:c6:4b:76:9f:26:a2:52:d7:d6:2b:bb:b2:c3:6b: d9:2b:79:72:a0:0e:e9:4e:ae:4d:7d:0a:ba:e8:2c: 53:70:e2:9d:70:28:0c:86:34:be:ca:4b:b1:dd:2b: ac:51:7a:ad:5d:c0:44:6c:f9:2c:d7:6a:1a:1b:73: d0:bc:d3:46:e4:44:61:5d:9e:be:93:65:39:1d:41: a6:5c:5a:61:f2:02:48:4b:f6:65:fe:71:15:ba:2b: 0e:43:5a:10:7a:dc:5f:b2:40:c0:f7:ee:4e:4f:61: 26:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:F0:9F:9B:4C:8F:10:29:1A:29:68:97:AB:B7:8C:83:F4:4E:01:6F X509v3 Authority Key Identifier: keyid:0B:3B:68:A2:06:B6:AF:84:A3:4A:A1:B7:63:2E:99:AB:06:F5:20:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:f6:89:29:6b:2e:76:6d:4a:65:9f:e2:6c:e4:8f:96:ca:be: 06:3a:ab:34:d4:58:89:fb:30:9a:4e:67:19:87:7c:b3:e7:71: 39:aa:04:cc:58:0f:28:4d:60:10:88:06:12:2e:92:2a:7e:50: bd:6c:2f:6c:07:3e:af:b3:b3:10:36:2e:65:c7:57:bf:8f:6d: 2d:97:4b:ea:57:14:bf:0d:6d:89:f0:62:02:d5:09:32:4f:ad: 64:5c:f9:04:29:82:3f:7a:b2:1c:c9:d3:00:2a:bd:06:b3:92: 07:b5:21:21:cf:18:5d:5e:12:72:dc:79:42:45:54:d6:e6:7f: 52:31:97:fd:9d:0b:60:40:9a:18:ed:69:d4:4c:29:b4:ca:d8: ee:5c:9e:8f:f7:5b:42:ba:26:92:6f:d2:cf:ce:3e:e7:a9:aa: 84:d8:66:31:b5:74:7b:ee:2d:26:bc:19:a0:fb:32:29:9f:d3: 44:7d:fc:02:29:b1:cc:f1:4a:77:58:04:a1:04:aa:7e:f8:a5: 8d:dd:36:dc:72:a7:ab:fa:78:9e:2d:20:21:31:d6:a2:17:cb: f7:5f:99:91:f5:9e:4d:ae:b9:42:0d:c8:d5:c8:21:63:24:7d: cb:c9:3a:4e:18:c6:d6:77:13:1c:1a:10:c0:36:ad:14:72:a9: 03:86:dc:12 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgIUItV497cX4swRMPM7eYdjFL5OHbAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEIzQjY4QTIwNkI2QUY4NEEzNEFBMUI3NjMyRTk5QUIw NkY1MjA3NzAeFw0yNjAzMjkyMTIzMjVaFw0yNjAzMzEwMDI0MjVaMDMxMTAvBgNV BAMTKEVFRjA5RjlCNEM4RjEwMjkxQTI5Njg5N0FCQjc4QzgzRjQ0RTAxNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1fNIco1Fx43TgKiheY9scVKzd 4Fc+6gyuFnLbBlsDi3rYF6ZWNqkoEEgCNGpY77exH2rVCZFgVMKiAAxJC+Z7ehtZ xo7+4+HmZKg9vloZZYx5yEJmUfZtzmxdIUiTQ2svtGXyWFC0kj58UcOCeeGVFmnA 5VDqA4WGeKN7Rt/fLQnrjNegD8OV8IZuugQgyDyxWm2mLDDGS3afJqJS19Yru7LD a9kreXKgDulOrk19CrroLFNw4p1wKAyGNL7KS7HdK6xReq1dwERs+SzXahobc9C8 00bkRGFdnr6TZTkdQaZcWmHyAkhL9mX+cRW6Kw5DWhB63F+yQMD37k5PYSbfAgMB AAGjggJhMIICXTAdBgNVHQ4EFgQU7vCfm0yPECkaKWiXq7eMg/ROAW8wHwYDVR0j BBgwFoAUCztooga2r4SjSqG3Yy6Zqwb1IHcwDgYDVR0PAQH/BAQDAgeAMIGXBgNV HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzFiZjhlOTc3LTcyNzgtNDZjZi1hYmQxLTk5Y2QxZmQy YmU0ZS8xMC8wQjNCNjhBMjA2QjZBRjg0QTM0QUExQjc2MzJFOTlBQjA2RjUyMDc3 LmNybDB6BggrBgEFBQcBAQRuMGwwagYIKwYBBQUHMAKGXnJzeW5jOi8vY2xvdWRp ZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xPVURJRS1SUEtJLzQvMEIzQjY4QTIwNkI2 QUY4NEEzNEFBMUI3NjMyRTk5QUIwNkY1MjA3Ny5jZXIwgaAGCCsGAQUFBwELBIGT MIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi ZTRlLzEwLzBCM0I2OEEyMDZCNkFGODRBMzRBQTFCNzYzMkU5OUFCMDZGNTIwNzcu bWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQ MAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3 DQEBCwUAA4IBAQCG9okpay52bUpln+Js5I+Wyr4GOqs01FiJ+zCaTmcZh3yz53E5 qgTMWA8oTWAQiAYSLpIqflC9bC9sBz6vs7MQNi5lx1e/j20tl0vqVxS/DW2J8GIC 1QkyT61kXPkEKYI/erIcydMAKr0Gs5IHtSEhzxhdXhJy3HlCRVTW5n9SMZf9nQtg QJoY7WnUTCm0ytjuXJ6P91tCuiaSb9LPzj7nqaqE2GYxtXR77i0mvBmg+zIpn9NE ffwCKbHM8Up3WAShBKp++KWN3Tbccqer+nieLSAhMdaiF8v3X5mR9Z5NrrlCDcjV yCFjJH3LyTpOGMbWdxMcGhDANq0UcqkDhtwS -----END CERTIFICATE-----Generated at Mon Mar 30 10:35:29 2026 by rpki-client