
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft
File: 4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft (raw, json)
Hash identifier: SRPBH1eiGY9b60ONfvQTzgMBCkP2x2jTki/UN/LYbX0=
Subject key identifier: 67:03:01:22:87:3A:E1:43:7E:3B:01:00:D1:89:8F:0C:E2:03:4F:F5
Authority key identifier: 4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57
Certificate issuer: /CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057
Certificate serial: 3BAFD7308A841767BB9FCD001CD112D7672CB407
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft
Manifest number: 0203
Signing time: Thu 23 Jul 2026 15:02:01 +0000
Manifest this update: Thu 23 Jul 2026 14:57:01 +0000
Manifest next update: Fri 24 Jul 2026 15:12:01 +0000
Files and hashes: 1: 326130613a363034303a623166323a3a2f34382d3438203d3e20323030363736.roa (hash: GfDTo5P3qIg8CFRKTrJhl2ZS/FY+3t9O8Sx9C2rOTZk=)
2: 326130613a363034303a623166373a3a2f34382d3438203d3e203530373535.roa (hash: Zej5k6azfqZdpRgzIVoziRVVqBAFYW5Z82wumsiKQRI=)
3: 326130613a363034303a623166343a3a2f34382d3438203d3e20323030363736.roa (hash: NL6EPb5wnDp44lr9FJxSfl2w41sMyn89zsl2NAJN1S8=)
4: 326130613a363034303a623166663a3a2f34382d3438203d3e2030.roa (hash: DlTS9/n3nMzPBzhKqYlsCkDKeu9i4KOh/svpSxWmqkM=)
5: 326130613a363034303a623166383a3a2f34382d3438203d3e203530373535.roa (hash: YV5J5MkUPewoTX1hUWUWk2r1xYeLwwRy5/ujgo4sYdI=)
6: 326130613a363034303a623166303a3a2f34382d3438203d3e20323030363736.roa (hash: nr0EeUwFCYdT0u41I7YugdCfJTvW+lp7pLcoJPTRJ7Q=)
7: 326130613a363034303a623166353a3a2f34382d3438203d3e20323030363736.roa (hash: lj+8qLUABxRWME0NPnYLhXc7Q9mboRiSfwlMOOMRGf0=)
8: 326130613a363034303a623166313a3a2f34382d3438203d3e20323030363736.roa (hash: BQAJsIHDKp+WibSEzaYJlb2U3HhnlfWtftOClSXrGv8=)
9: 326130613a363034303a656430303a3a2f34302d3430203d3e2030.roa (hash: o3l9HmXdTaRr7QEUzlZUguF0y8FsRdpH47Ocd6jZ4Wc=)
10: 326130613a363034303a623166363a3a2f34382d3438203d3e203530373535.roa (hash: wugX3FqzZIQPjBl7AwvgQMAVaLwsouojOXLSMlZcTJ4=)
11: 326130613a363034303a623166333a3a2f34382d3438203d3e203530373535.roa (hash: y0TBpQqqxyyx4Zi6QH9/slZALaHhIk7//cojMpVgoaU=)
12: 4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl (hash: 1xIKoXTrTdkuog8ORQcJ1hZwr7BoriyJHI4rJQNO2YQ=)
13: 326130613a363034303a623166333a3a2f34382d3438203d3e20323030363736.roa (hash: M+XKjYxBTHtjkzc8U29w8G5bFlSY71eD0eQWnk4BUcU=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl
rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:12:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:af:d7:30:8a:84:17:67:bb:9f:cd:00:1c:d1:12:d7:67:2c:b4:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057
Validity
Not Before: Jul 23 14:57:01 2026 GMT
Not After : Jul 24 15:12:01 2026 GMT
Subject: CN=67030122873AE1437E3B0100D1898F0CE2034FF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:15:eb:5b:d6:1b:25:4e:b5:7e:b2:22:a6:da:
ac:82:a6:1f:df:8c:73:1a:c9:aa:f1:af:2d:6e:d6:
36:a0:7c:84:97:0d:51:87:8e:2e:f3:5e:36:5e:6d:
c9:24:d0:b1:9b:6c:59:a9:7e:8c:d2:c9:a3:e6:b5:
55:df:98:a1:28:18:ab:19:ce:f7:1e:b3:ab:19:db:
6f:9c:0a:b1:26:fd:8a:a5:42:dc:cf:d6:40:67:c1:
26:73:4a:e0:2a:5a:a2:dd:f6:16:c2:0a:20:59:21:
6b:5c:8c:95:20:fb:7c:c3:6e:58:ef:93:b9:cc:50:
58:54:2d:09:64:a4:c4:e2:42:33:c7:fb:1e:03:36:
d5:e2:8d:88:4f:73:07:24:0c:d4:58:e9:a4:dc:e4:
3e:71:a9:6e:02:20:e1:ef:57:51:48:15:92:d7:1a:
23:27:ef:96:ad:dd:e9:e5:74:b6:17:8a:a1:cc:5e:
40:84:87:43:20:56:be:65:db:24:35:b4:be:18:60:
27:56:13:2b:d7:97:9c:ec:ca:26:9a:1b:57:59:57:
a1:e0:1e:e6:1a:48:2e:11:f5:79:cc:83:98:07:1a:
b0:39:04:c1:50:f7:c2:7d:e0:bc:27:5d:41:93:6d:
92:15:c0:da:12:8a:f3:0e:15:15:a6:19:6a:d1:d7:
05:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:03:01:22:87:3A:E1:43:7E:3B:01:00:D1:89:8F:0C:E2:03:4F:F5
X509v3 Authority Key Identifier:
keyid:4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:2c:61:5f:e5:88:3c:c8:ba:9c:61:92:e3:ba:1a:bc:ce:ca:
43:63:d9:39:0c:3e:f8:95:85:11:d4:8a:46:13:db:e0:69:f4:
90:21:e6:e7:47:0d:13:75:47:39:f9:a6:cb:de:93:ab:23:4e:
6e:3d:35:e0:9e:50:0e:d7:f9:97:b4:b2:d1:22:48:8b:82:e4:
66:29:ce:cd:4d:00:e3:5c:73:18:c8:93:01:fa:af:5b:5c:97:
54:aa:c6:ae:3a:d0:6d:82:97:b2:99:8c:e2:e2:43:c9:88:f4:
81:58:27:4a:f1:bb:0d:b1:17:00:4e:f6:93:7f:b6:c1:12:74:
4d:48:c3:38:ae:34:b9:20:0b:5f:93:99:08:66:fd:ae:5a:b1:
e0:59:8a:24:5f:f2:71:a2:2b:a4:c3:eb:af:f1:a2:67:93:81:
3b:75:a6:75:43:a9:a9:a7:0f:55:52:e7:20:8f:a6:bf:cf:03:
6c:21:ff:7d:0a:62:d8:cd:98:77:11:cc:6d:ef:be:59:a3:79:
28:5d:d3:5e:36:1f:85:a7:3c:17:17:fc:a3:7a:d1:77:1f:7d:
3a:5f:7b:fe:80:da:84:96:97:3c:4c:ab:29:e4:b2:7f:bc:c5:
ec:15:8a:87:14:64:94:a6:17:97:f2:65:6b:b1:b3:df:20:ec:
e8:fa:25:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:42:49 2026 by rpki-client