$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.mft File: FF4F1D48A6088FEC5ED73270F82068A436391A71.mft (raw, json) Hash identifier: WjBcMnDplX3IWqA+busI7dtccOp9kJbFWwxO7uoB0HU= Subject key identifier: 3A:8D:05:21:F6:91:89:A4:DA:3F:C0:EA:CA:30:64:5A:47:48:0A:46 Authority key identifier: FF:4F:1D:48:A6:08:8F:EC:5E:D7:32:70:F8:20:68:A4:36:39:1A:71 Certificate issuer: /CN=FF4F1D48A6088FEC5ED73270F82068A436391A71 Certificate serial: 06F311B1B8364522E5B1C29B968476EED0FC3852 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/FF4F1D48A6088FEC5ED73270F82068A436391A71.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.mft Manifest number: 01C7 Signing time: Wed 23 Sep 2026 09:35:00 +0000 Manifest this update: Wed 23 Sep 2026 09:30:00 +0000 Manifest next update: Thu 24 Sep 2026 10:05:00 +0000 Files and hashes: 1: FF4F1D48A6088FEC5ED73270F82068A436391A71.crl (hash: P6yj2loThGM5vmSjd6ocFmIL16iLcNgLnSH55Iu0ZcM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.crl rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/FF4F1D48A6088FEC5ED73270F82068A436391A71.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 04:17:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:f3:11:b1:b8:36:45:22:e5:b1:c2:9b:96:84:76:ee:d0:fc:38:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF4F1D48A6088FEC5ED73270F82068A436391A71 Validity Not Before: Sep 23 09:30:00 2026 GMT Not After : Sep 24 10:05:00 2026 GMT Subject: CN=3A8D0521F69189A4DA3FC0EACA30645A47480A46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:62:97:6e:e6:13:8e:33:ce:2d:fd:10:3c:9f: 1a:45:dd:f0:00:29:e5:98:b5:bf:4d:5a:d1:e1:a2: 77:e9:06:bc:33:16:b6:09:09:ad:7f:28:4e:9d:07: eb:35:9b:ca:44:58:ef:22:97:2e:b8:b0:83:09:3f: 49:45:dc:22:b6:35:10:10:ea:5e:54:ab:44:e3:d1: 07:d6:f5:a2:3f:8e:10:84:74:ad:46:d3:73:6d:77: d9:b3:b6:5d:cc:c6:87:bf:c5:d5:11:3d:23:07:bd: cc:bb:b5:9b:0b:ac:85:88:5b:59:ba:00:06:5f:63: 7a:2e:4f:1a:e9:75:be:4e:66:67:b0:66:eb:23:49: 4f:39:3c:d2:b4:d4:5c:99:2b:b0:37:cc:25:5a:37: e1:5c:f6:7e:fc:35:8a:cc:8f:a5:6d:5d:98:8e:b4: de:ef:77:5c:7d:b6:06:94:b2:08:67:56:e5:5c:ca: ee:fb:bc:0a:35:59:cb:77:0d:39:70:07:08:3c:7c: 97:1e:31:33:c5:e7:0d:9b:aa:1a:2e:21:20:da:4e: db:e2:52:eb:06:79:03:13:0c:ce:d3:4a:f5:42:ec: 47:cd:32:c8:0f:2c:fa:db:a1:c3:d2:72:60:9a:0c: d1:d1:c6:db:ab:6d:a2:5e:f2:b7:50:96:0e:17:30: 9e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:8D:05:21:F6:91:89:A4:DA:3F:C0:EA:CA:30:64:5A:47:48:0A:46 X509v3 Authority Key Identifier: keyid:FF:4F:1D:48:A6:08:8F:EC:5E:D7:32:70:F8:20:68:A4:36:39:1A:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/FF4F1D48A6088FEC5ED73270F82068A436391A71.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:4d:d4:f8:cc:22:fe:31:86:6e:27:cd:5e:e2:32:e3:c7:3a: ec:19:65:64:b2:7a:4d:0d:7c:9d:51:63:26:ba:72:9e:2a:76: 0d:eb:2a:b0:cc:80:85:e5:4a:13:4f:06:f8:b7:3f:9e:fa:65: 1f:a0:3d:3e:42:a7:61:6e:8e:6c:39:fe:f3:e4:7e:7f:d1:68: 55:6a:56:aa:69:05:7a:49:b0:89:fa:b0:b4:de:d6:e7:be:2e: 5c:b5:aa:e1:41:cb:fc:57:b7:c8:bf:d0:33:07:45:4f:a0:39: cd:64:10:cc:fb:1a:d3:31:81:48:e5:52:20:8d:b3:e0:2b:ec: 3e:57:da:61:88:70:04:47:53:4e:9a:9d:92:2c:b2:2b:9d:79: c1:ec:a2:f4:a2:43:95:e0:44:73:c3:54:9a:f0:08:5c:28:e7: e6:fd:06:ff:82:20:2e:47:d8:92:a4:6c:05:73:3a:f3:d6:e5: bd:ba:09:34:af:8f:30:fa:32:91:bf:f7:b3:8d:d7:30:21:d4: f4:e4:30:81:91:b9:92:a3:49:e3:9e:16:f0:25:e5:ce:63:72: f7:5f:e6:6b:95:6a:e9:c2:d7:a1:8d:0f:d5:ef:b0:b1:18:be: c5:25:48:1f:c2:9e:5f:02:5d:e7:da:08:8e:f6:d1:53:a9:ed: f2:6e:ab:60 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUBvMRsbg2RSLlscKbloR27tD8OFIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY0RjFENDhBNjA4OEZFQzVFRDczMjcwRjgyMDY4QTQz NjM5MUE3MTAeFw0yNjA5MjMwOTMwMDBaFw0yNjA5MjQxMDA1MDBaMDMxMTAvBgNV BAMTKDNBOEQwNTIxRjY5MTg5QTREQTNGQzBFQUNBMzA2NDVBNDc0ODBBNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Ypdu5hOOM84t/RA8nxpF3fAA KeWYtb9NWtHhonfpBrwzFrYJCa1/KE6dB+s1m8pEWO8ily64sIMJP0lF3CK2NRAQ 6l5Uq0Tj0QfW9aI/jhCEdK1G03Ntd9mztl3Mxoe/xdURPSMHvcy7tZsLrIWIW1m6 AAZfY3ouTxrpdb5OZmewZusjSU85PNK01FyZK7A3zCVaN+Fc9n78NYrMj6VtXZiO tN7vd1x9tgaUsghnVuVcyu77vAo1Wct3DTlwBwg8fJceMTPF5w2bqhouISDaTtvi UusGeQMTDM7TSvVC7EfNMsgPLPrbocPScmCaDNHRxturbaJe8rdQlg4XMJ6BAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUOo0FIfaRiaTaP8DqyjBkWkdICkYwHwYDVR0j BBgwFoAU/08dSKYIj+xe1zJw+CBopDY5GnEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjJhODA2ODItYzU0Yy00ZDVhLTk0NTYtYjIzOTI1MzA5 NzMyLzIvRkY0RjFENDhBNjA4OEZFQzVFRDczMjcwRjgyMDY4QTQzNjM5MUE3MS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0ZGNEYxRDQ4QTYwODhG RUM1RUQ3MzI3MEY4MjA2OEE0MzYzOTFBNzEuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMjJhODA2ODItYzU0Yy00ZDVhLTk0NTYtYjIzOTI1MzA5NzMy LzIvRkY0RjFENDhBNjA4OEZFQzVFRDczMjcwRjgyMDY4QTQzNjM5MUE3MS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBABRN1PjMIv4xhm4nzV7iMuPHOuwZZWSyek0NfJ1RYya6cp4qdg3rKrDM gIXlShNPBvi3P576ZR+gPT5Cp2Fujmw5/vPkfn/RaFVqVqppBXpJsIn6sLTe1ue+ Lly1quFBy/xXt8i/0DMHRU+gOc1kEMz7GtMxgUjlUiCNs+Ar7D5X2mGIcARHU06a nZIssiudecHsovSiQ5XgRHPDVJrwCFwo5+b9Bv+CIC5H2JKkbAVzOvPW5b26CTSv jzD6MpG/97ON1zAh1PTkMIGRuZKjSeOeFvAl5c5jcvdf5muVaunC16GND9XvsLEY vsUlSB/Cnl8CXefaCI720VOp7fJuq2A= -----END CERTIFICATE-----Generated at Wed Sep 23 22:36:15 2026 by rpki-client