$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft File: 4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft (raw, json) Hash identifier: bfVMOFGh/TTJ8441eRmLB6SJV6D1WprsHStzj+Lk/cc= Subject key identifier: 1B:3A:66:71:D9:53:C5:89:09:66:4A:47:26:62:D1:84:80:05:BA:62 Authority key identifier: 4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57 Certificate issuer: /CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057 Certificate serial: 0E9AA0E25D7FA579C90B60BFF6225AE90FCD5DBB Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft Manifest number: 0255 Signing time: Wed 23 Sep 2026 08:51:08 +0000 Manifest this update: Wed 23 Sep 2026 08:46:08 +0000 Manifest next update: Thu 24 Sep 2026 10:14:08 +0000 Files and hashes: 1: 326130613a363034303a623166363a3a2f34382d3438203d3e203530373535.roa (hash: wugX3FqzZIQPjBl7AwvgQMAVaLwsouojOXLSMlZcTJ4=) 2: 326130613a363034303a623166353a3a2f34382d3438203d3e20323030363736.roa (hash: lj+8qLUABxRWME0NPnYLhXc7Q9mboRiSfwlMOOMRGf0=) 3: 326130613a363034303a623166373a3a2f34382d3438203d3e203530373535.roa (hash: Zej5k6azfqZdpRgzIVoziRVVqBAFYW5Z82wumsiKQRI=) 4: 326130613a363034303a656430303a3a2f34302d3430203d3e2030.roa (hash: o3l9HmXdTaRr7QEUzlZUguF0y8FsRdpH47Ocd6jZ4Wc=) 5: 326130613a363034303a623166313a3a2f34382d3438203d3e20323030363736.roa (hash: BQAJsIHDKp+WibSEzaYJlb2U3HhnlfWtftOClSXrGv8=) 6: 326130613a363034303a623166333a3a2f34382d3438203d3e20323030363736.roa (hash: M+XKjYxBTHtjkzc8U29w8G5bFlSY71eD0eQWnk4BUcU=) 7: 4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl (hash: 2Sp7eLtiDy0Z/FC/QMXm91jOt6DXJKjM+PrEIYGi2SY=) 8: 326130613a363034303a623166333a3a2f34382d3438203d3e203530373535.roa (hash: y0TBpQqqxyyx4Zi6QH9/slZALaHhIk7//cojMpVgoaU=) 9: 326130613a363034303a623166383a3a2f34382d3438203d3e203530373535.roa (hash: YV5J5MkUPewoTX1hUWUWk2r1xYeLwwRy5/ujgo4sYdI=) 10: 326130613a363034303a623166343a3a2f34382d3438203d3e20323030363736.roa (hash: NL6EPb5wnDp44lr9FJxSfl2w41sMyn89zsl2NAJN1S8=) 11: 326130613a363034303a623166303a3a2f34382d3438203d3e20323030363736.roa (hash: nr0EeUwFCYdT0u41I7YugdCfJTvW+lp7pLcoJPTRJ7Q=) 12: 326130613a363034303a623166663a3a2f34382d3438203d3e2030.roa (hash: DlTS9/n3nMzPBzhKqYlsCkDKeu9i4KOh/svpSxWmqkM=) 13: 326130613a363034303a623166323a3a2f34382d3438203d3e20323030363736.roa (hash: GfDTo5P3qIg8CFRKTrJhl2ZS/FY+3t9O8Sx9C2rOTZk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 10:14:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:9a:a0:e2:5d:7f:a5:79:c9:0b:60:bf:f6:22:5a:e9:0f:cd:5d:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057 Validity Not Before: Sep 23 08:46:08 2026 GMT Not After : Sep 24 10:14:08 2026 GMT Subject: CN=1B3A6671D953C58909664A472662D1848005BA62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:02:39:a9:7a:cd:94:b3:04:a4:45:80:cf:3c: 18:88:8c:f5:30:69:9e:71:e3:e6:32:d1:ee:a2:2d: 18:ea:d2:c0:32:47:2d:63:53:4d:14:ce:15:11:e4: 3f:f0:cc:70:e5:fb:5d:cb:4c:cb:9b:0c:43:ee:59: f4:9a:e2:5b:90:c7:95:c8:59:3b:08:0c:4e:63:ec: d2:7b:ea:8f:7d:cc:1f:da:e7:2b:8d:87:b2:16:cf: 33:ee:59:28:14:e3:ab:a8:4f:a6:03:3b:3e:9f:e4: 4e:ce:9e:37:9b:d6:39:5b:1f:7a:44:88:ce:54:24: 52:ca:82:b4:09:3e:4a:3b:63:e2:be:a4:15:8a:22: 3b:36:7b:ed:ee:f6:3f:ca:44:34:73:0f:7e:3b:f9: 40:e3:a7:84:c8:b1:1c:a1:0a:bb:22:db:2e:e4:f8: 8b:50:b9:0b:89:ad:ae:82:9c:87:d4:7b:e9:f3:3b: f5:0f:97:04:a6:00:e1:2b:fc:db:28:65:90:78:66: 5f:24:03:ed:38:ce:6f:89:77:2b:dc:e2:a5:88:28: 06:fb:3c:21:0d:c0:7c:0e:b2:d3:64:1f:66:30:5c: db:5c:ef:3a:cf:e4:b3:ca:34:26:8f:f0:26:cf:9f: 9b:b1:db:85:93:d3:ad:52:56:16:14:fb:82:2f:33: 5c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:3A:66:71:D9:53:C5:89:09:66:4A:47:26:62:D1:84:80:05:BA:62 X509v3 Authority Key Identifier: keyid:4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:c2:8b:cb:48:ca:ea:c8:71:cb:d3:b6:d9:7b:f1:5b:23:42: bd:13:69:b8:34:94:8c:1f:40:08:1e:d1:22:74:19:5a:f4:d2: 87:10:44:d1:7d:81:f4:4c:18:32:78:87:21:fe:5c:83:a5:10: 56:c3:f9:6b:0a:8d:42:e4:d8:94:fd:e5:4b:09:bd:7e:d0:d9: 21:0a:47:f0:d4:13:0e:22:d7:ee:d0:97:0e:42:77:d4:0f:0c: bb:27:39:74:03:9f:09:0f:ef:a2:40:9c:43:b1:3e:c1:4a:95: b4:e5:1a:a9:e3:bd:69:93:5d:a4:8a:b6:ef:8f:36:8d:04:9e: d4:e8:92:4b:b0:55:0b:b1:0f:96:78:46:11:a1:ca:63:bb:e2: 99:95:25:03:9a:34:b4:34:ed:97:ad:af:f8:98:f5:4a:b3:62: 96:35:2f:5a:dc:f2:b3:1a:8d:38:08:0b:ac:ed:cd:8b:8f:d8: 31:69:3f:13:ff:be:6d:d0:6f:27:02:1e:5c:21:2c:ed:d4:00: 88:d2:f7:82:44:d4:d1:a3:d2:13:f0:bd:2c:06:4a:a8:e7:ab: 17:43:40:f1:fe:9e:de:6d:36:e4:84:53:ef:4a:65:a8:00:c9: e6:56:39:a4:77:7e:cf:96:85:10:e5:ac:ce:66:2d:38:89:2d: 48:1a:0a:ac -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUDpqg4l1/pXnJC2C/9iJa6Q/NXbswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZEQzU3MUE1Q0RBMTM5NThCQ0U0NzVGMEU1RDkxMDFE QjgxMjA1NzAeFw0yNjA5MjMwODQ2MDhaFw0yNjA5MjQxMDE0MDhaMDMxMTAvBgNV BAMTKDFCM0E2NjcxRDk1M0M1ODkwOTY2NEE0NzI2NjJEMTg0ODAwNUJBNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzAjmpes2UswSkRYDPPBiIjPUw aZ5x4+Yy0e6iLRjq0sAyRy1jU00UzhUR5D/wzHDl+13LTMubDEPuWfSa4luQx5XI WTsIDE5j7NJ76o99zB/a5yuNh7IWzzPuWSgU46uoT6YDOz6f5E7Onjeb1jlbH3pE iM5UJFLKgrQJPko7Y+K+pBWKIjs2e+3u9j/KRDRzD347+UDjp4TIsRyhCrsi2y7k +ItQuQuJra6CnIfUe+nzO/UPlwSmAOEr/NsoZZB4Zl8kA+04zm+Jdyvc4qWIKAb7 PCENwHwOstNkH2YwXNtc7zrP5LPKNCaP8CbPn5ux24WT061SVhYU+4IvM1x3AgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUGzpmcdlTxYkJZkpHJmLRhIAFumIwHwYDVR0j BBgwFoAUT9xXGlzaE5WLzkdfDl2RAduBIFcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1 Y2U3LzMvNEZEQzU3MUE1Q0RBMTM5NThCQ0U0NzVGMEU1RDkxMDFEQjgxMjA1Ny5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzRGREM1NzFBNUNEQTEz OTU4QkNFNDc1RjBFNUQ5MTAxREI4MTIwNTcuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1Y2U3 LzMvNEZEQzU3MUE1Q0RBMTM5NThCQ0U0NzVGMEU1RDkxMDFEQjgxMjA1Ny5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAKbCi8tIyurIccvTttl78VsjQr0Tabg0lIwfQAge0SJ0GVr00ocQRNF9 gfRMGDJ4hyH+XIOlEFbD+WsKjULk2JT95UsJvX7Q2SEKR/DUEw4i1+7Qlw5Cd9QP DLsnOXQDnwkP76JAnEOxPsFKlbTlGqnjvWmTXaSKtu+PNo0EntTokkuwVQuxD5Z4 RhGhymO74pmVJQOaNLQ07Zetr/iY9UqzYpY1L1rc8rMajTgIC6ztzYuP2DFpPxP/ vm3QbycCHlwhLO3UAIjS94JE1NGj0hPwvSwGSqjnqxdDQPH+nt5tNuSEU+9KZagA yeZWOaR3fs+WhRDlrM5mLTiJLUgaCqw= -----END CERTIFICATE-----Generated at Thu Sep 24 03:44:15 2026 by rpki-client