$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.mft File: FF4F1D48A6088FEC5ED73270F82068A436391A71.mft (raw, json) Hash identifier: oxEYYuyh44B/tAzZLh+kVdiph3Xu+Y+uv2+EqHu7Rp8= Subject key identifier: 3C:96:6B:F9:CB:F8:DA:6C:BC:32:6A:73:E1:00:2F:47:CE:2E:83:66 Authority key identifier: FF:4F:1D:48:A6:08:8F:EC:5E:D7:32:70:F8:20:68:A4:36:39:1A:71 Certificate issuer: /CN=FF4F1D48A6088FEC5ED73270F82068A436391A71 Certificate serial: 37F13FFEF95D355D2383BF54D598A32DF4C518FD Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/FF4F1D48A6088FEC5ED73270F82068A436391A71.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.mft Manifest number: D7 Signing time: Fri 27 Mar 2026 18:16:41 +0000 Manifest this update: Fri 27 Mar 2026 18:11:41 +0000 Manifest next update: Sat 28 Mar 2026 21:41:41 +0000 Files and hashes: 1: FF4F1D48A6088FEC5ED73270F82068A436391A71.crl (hash: b9E5QUA50Jlo/oxc/3Pn7H4SbOwLhiHhNU3Bn++zzDU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.crl rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/FF4F1D48A6088FEC5ED73270F82068A436391A71.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 28 Mar 2026 21:41:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:f1:3f:fe:f9:5d:35:5d:23:83:bf:54:d5:98:a3:2d:f4:c5:18:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF4F1D48A6088FEC5ED73270F82068A436391A71 Validity Not Before: Mar 27 18:11:41 2026 GMT Not After : Mar 28 21:41:41 2026 GMT Subject: CN=3C966BF9CBF8DA6CBC326A73E1002F47CE2E8366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0f:2d:fc:70:65:56:f3:b6:91:fe:3c:50:2a: 0b:de:a1:92:ab:90:5a:61:b0:1f:ad:95:74:a3:47: f0:b4:95:84:8d:2b:35:3a:ca:4a:fc:33:7e:8a:54: 30:02:22:a8:64:5e:22:7e:bb:1c:64:2b:c3:21:4f: 52:57:39:20:fd:5a:e0:96:01:e6:19:94:76:26:6b: 0a:dd:7d:d9:31:85:27:25:1b:fd:72:94:13:89:e4: f3:5e:e5:61:2b:10:61:96:cd:e4:14:b3:b4:48:f1: 65:ea:e2:36:e5:e0:ac:a4:20:ca:d5:81:38:11:31: de:17:22:ed:f4:e5:50:48:27:e8:c3:6d:dd:e5:8d: 07:ac:2f:db:85:31:3e:bd:5a:9a:35:9c:73:a3:13: a2:36:de:f7:2d:d5:45:d9:5b:6b:05:aa:9a:22:09: 41:54:50:02:15:b0:dd:7d:da:13:c5:92:61:8b:e2: 55:64:8e:af:87:1a:f2:77:df:a7:93:80:56:d4:b5: c5:a3:a8:02:91:03:28:bd:dc:21:e5:e4:25:97:1d: 1a:07:3f:3a:46:59:37:05:02:ed:98:53:e5:85:09: e1:c4:f8:3d:c6:75:71:40:03:8f:3b:68:bc:1f:d5: 58:b6:1f:d8:15:f5:7e:64:5f:2f:3d:2a:f8:bc:5d: eb:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:96:6B:F9:CB:F8:DA:6C:BC:32:6A:73:E1:00:2F:47:CE:2E:83:66 X509v3 Authority Key Identifier: keyid:FF:4F:1D:48:A6:08:8F:EC:5E:D7:32:70:F8:20:68:A4:36:39:1A:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/FF4F1D48A6088FEC5ED73270F82068A436391A71.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:85:8c:b8:4c:68:21:4c:11:d0:36:94:85:20:90:72:e5:3c: 05:29:27:3c:52:a8:db:04:f5:fa:77:bd:52:71:26:e2:43:82: eb:91:c0:ac:c4:86:ea:2b:5d:3e:66:a2:26:90:a3:b7:db:01: d6:aa:ff:e8:67:b5:f9:8c:07:f1:2d:4e:d9:9a:e6:bb:81:e9: 59:c0:7f:48:c5:d2:06:2d:2c:46:da:e3:74:cd:85:a3:9b:bd: 2b:58:56:9f:54:39:3c:1f:e9:61:6c:db:81:4a:cd:58:df:b8: 10:57:53:a6:ed:3c:da:14:9e:3b:e9:aa:00:39:ad:55:4c:34: 02:b2:03:1f:7d:c8:ad:4b:d7:7f:1f:af:2c:78:58:10:e0:86: 1f:c9:0b:a0:1b:f7:de:3c:a4:b0:94:d9:2a:88:aa:a4:6d:3c: 5b:a0:8f:61:39:a1:15:de:f7:dc:7c:83:bc:84:86:d7:3e:d3: b1:6d:59:38:ae:20:48:85:b4:ed:a9:78:50:41:4b:90:f8:53: ff:42:6a:15:5f:56:78:58:b8:09:18:dc:9e:30:51:2e:13:40: b8:9d:28:a8:fb:e4:ab:c2:3c:9c:9a:43:36:c2:96:4e:4a:ee: 7c:9d:6c:a3:d0:29:52:71:d8:63:f0:4c:c7:8e:d5:f9:13:3e: cc:8e:44:70 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUN/E//vldNV0jg79U1ZijLfTFGP0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY0RjFENDhBNjA4OEZFQzVFRDczMjcwRjgyMDY4QTQz NjM5MUE3MTAeFw0yNjAzMjcxODExNDFaFw0yNjAzMjgyMTQxNDFaMDMxMTAvBgNV BAMTKDNDOTY2QkY5Q0JGOERBNkNCQzMyNkE3M0UxMDAyRjQ3Q0UyRTgzNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Dy38cGVW87aR/jxQKgveoZKr kFphsB+tlXSjR/C0lYSNKzU6ykr8M36KVDACIqhkXiJ+uxxkK8MhT1JXOSD9WuCW AeYZlHYmawrdfdkxhSclG/1ylBOJ5PNe5WErEGGWzeQUs7RI8WXq4jbl4KykIMrV gTgRMd4XIu305VBIJ+jDbd3ljQesL9uFMT69Wpo1nHOjE6I23vct1UXZW2sFqpoi CUFUUAIVsN192hPFkmGL4lVkjq+HGvJ336eTgFbUtcWjqAKRAyi93CHl5CWXHRoH PzpGWTcFAu2YU+WFCeHE+D3GdXFAA487aLwf1Vi2H9gV9X5kXy89Kvi8XesRAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUPJZr+cv42my8Mmpz4QAvR84ug2YwHwYDVR0j BBgwFoAU/08dSKYIj+xe1zJw+CBopDY5GnEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjJhODA2ODItYzU0Yy00ZDVhLTk0NTYtYjIzOTI1MzA5 NzMyLzIvRkY0RjFENDhBNjA4OEZFQzVFRDczMjcwRjgyMDY4QTQzNjM5MUE3MS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0ZGNEYxRDQ4QTYwODhG RUM1RUQ3MzI3MEY4MjA2OEE0MzYzOTFBNzEuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMjJhODA2ODItYzU0Yy00ZDVhLTk0NTYtYjIzOTI1MzA5NzMy LzIvRkY0RjFENDhBNjA4OEZFQzVFRDczMjcwRjgyMDY4QTQzNjM5MUE3MS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAFmFjLhMaCFMEdA2lIUgkHLlPAUpJzxSqNsE9fp3vVJxJuJDguuRwKzE huorXT5moiaQo7fbAdaq/+hntfmMB/EtTtma5ruB6VnAf0jF0gYtLEba43TNhaOb vStYVp9UOTwf6WFs24FKzVjfuBBXU6btPNoUnjvpqgA5rVVMNAKyAx99yK1L138f ryx4WBDghh/JC6Ab9948pLCU2SqIqqRtPFugj2E5oRXe99x8g7yEhtc+07FtWTiu IEiFtO2peFBBS5D4U/9CahVfVnhYuAkY3J4wUS4TQLidKKj75KvCPJyaQzbClk5K 7nydbKPQKVJx2GPwTMeO1fkTPsyORHA= -----END CERTIFICATE-----Generated at Sat Mar 28 11:23:01 2026 by rpki-client