$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft File: B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft (raw, json) Hash identifier: F0lzt/ZOsRDHx0fW81kZDP4qJz+KnFfwYQi5drORiu0= Subject key identifier: 2F:D6:0D:37:53:13:91:32:3F:9C:7F:0C:3D:44:BE:76:78:E0:F9:A0 Authority key identifier: B2:17:28:4E:A3:D5:38:44:B2:AF:52:70:AB:BA:A3:10:5B:8B:3F:45 Certificate issuer: /CN=B217284EA3D53844B2AF5270ABBAA3105B8B3F45 Certificate serial: 205DB695A9BD4838F55911AA3CFE8FE297A9343F Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft Manifest number: 01A6 Signing time: Tue 12 May 2026 18:14:42 +0000 Manifest this update: Tue 12 May 2026 18:09:42 +0000 Manifest next update: Wed 13 May 2026 20:32:42 +0000 Files and hashes: 1: B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl (hash: 5lm6lX9co6M2y+PYmvm/tFO7sJd8FQHl8UqcjjH8C2k=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 16:33:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:5d:b6:95:a9:bd:48:38:f5:59:11:aa:3c:fe:8f:e2:97:a9:34:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B217284EA3D53844B2AF5270ABBAA3105B8B3F45 Validity Not Before: May 12 18:09:42 2026 GMT Not After : May 13 20:32:42 2026 GMT Subject: CN=2FD60D37531391323F9C7F0C3D44BE7678E0F9A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3d:29:f1:27:73:43:77:66:6c:0b:d6:17:70: de:a8:63:54:8f:c6:b4:e8:9f:be:ab:76:96:3c:6f: 65:d6:d0:f3:7e:0c:39:00:bd:e4:21:b9:7f:d9:8f: 29:e9:98:03:f9:a9:59:59:b8:9d:cf:13:48:bc:c7: ef:6d:8f:f9:34:96:6e:df:5d:6c:f0:36:41:e5:8b: f4:fe:09:a9:13:40:44:93:67:25:4b:05:a9:f8:54: a7:61:90:17:9a:f6:09:93:b3:d4:97:be:33:eb:22: 8b:84:f5:f5:fb:eb:e0:ae:de:d9:99:4b:90:a9:03: e4:cb:b0:50:5f:52:62:6d:a3:91:14:10:5d:1d:c7: 76:69:a3:57:e4:6b:2e:81:b1:d9:65:13:85:9d:c7: 59:fc:5b:f2:8f:6e:8f:29:a3:50:3f:a2:93:20:78: a8:d7:54:42:d5:77:84:33:8a:53:4c:9e:0a:03:86: 62:95:d8:21:9e:fc:d3:2e:1a:6f:e8:7b:eb:79:82: e5:8c:6f:9d:b4:d2:08:9f:d8:d7:15:e1:5e:cb:60: b1:6e:8b:ac:c9:fc:c5:bb:42:04:8b:a2:67:97:16: 60:6e:a6:6e:11:74:62:15:a6:be:fe:32:ea:fa:9e: 9e:a1:02:6c:de:8b:95:be:57:3b:b2:b4:04:7d:dd: 59:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:D6:0D:37:53:13:91:32:3F:9C:7F:0C:3D:44:BE:76:78:E0:F9:A0 X509v3 Authority Key Identifier: keyid:B2:17:28:4E:A3:D5:38:44:B2:AF:52:70:AB:BA:A3:10:5B:8B:3F:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:3f:43:07:24:9c:c0:b9:a8:9b:a4:46:bc:95:dd:42:2a:0e: 96:34:05:3c:88:54:7c:9d:e8:45:7a:64:01:40:91:3e:db:42: 3d:66:ef:5d:4f:07:7f:94:98:b9:b7:cd:6a:28:1e:ba:94:2f: 16:02:8f:f7:f2:4a:cb:7d:5c:7c:c2:9e:51:ce:d8:2b:b0:ae: 53:ad:f9:98:b0:b7:2e:7a:18:30:23:10:96:38:5c:89:25:76: e1:fa:4b:a8:b3:b2:40:77:94:94:86:f4:f3:0a:9d:86:fe:6c: 7d:d5:bd:16:65:19:49:a8:33:fa:46:62:5d:d5:96:f7:6b:25: 05:83:11:b3:3c:34:4c:d5:6a:8b:64:d8:e5:19:bd:2c:de:c2: d6:89:6c:f8:44:bd:17:a0:c3:ea:dc:ba:9b:ad:51:86:6d:89: 1c:3f:17:47:3f:c2:fd:55:a1:e6:ad:00:a4:2c:02:a8:f4:78: b8:2c:1e:05:e4:71:3d:76:df:12:26:70:a8:38:e6:9b:28:58: a7:b3:a4:bd:a6:ac:9f:8e:1e:dc:34:98:ae:fd:4c:a9:31:d8: 32:ae:13:7f:1e:61:fe:e7:43:14:9f:97:12:5c:7b:6a:b0:ff: 22:67:18:53:79:2d:b6:3b:60:86:d2:20:61:3f:bf:8a:64:4a: a3:c3:68:39 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUIF22lam9SDj1WRGqPP6P4pepND8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIxNzI4NEVBM0Q1Mzg0NEIyQUY1MjcwQUJCQUEzMTA1 QjhCM0Y0NTAeFw0yNjA1MTIxODA5NDJaFw0yNjA1MTMyMDMyNDJaMDMxMTAvBgNV BAMTKDJGRDYwRDM3NTMxMzkxMzIzRjlDN0YwQzNENDRCRTc2NzhFMEY5QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEPSnxJ3NDd2ZsC9YXcN6oY1SP xrTon76rdpY8b2XW0PN+DDkAveQhuX/ZjynpmAP5qVlZuJ3PE0i8x+9tj/k0lm7f XWzwNkHli/T+CakTQESTZyVLBan4VKdhkBea9gmTs9SXvjPrIouE9fX76+Cu3tmZ S5CpA+TLsFBfUmJto5EUEF0dx3Zpo1fkay6BsdllE4Wdx1n8W/KPbo8po1A/opMg eKjXVELVd4QzilNMngoDhmKV2CGe/NMuGm/oe+t5guWMb5200gif2NcV4V7LYLFu i6zJ/MW7QgSLomeXFmBupm4RdGIVpr7+Mur6np6hAmzei5W+VzuytAR93VltAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUL9YNN1MTkTI/nH8MPUS+dnjg+aAwHwYDVR0j BBgwFoAUshcoTqPVOESyr1Jwq7qjEFuLP0UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzUvQjIxNzI4NEVBM0Q1Mzg0NEIyQUY1MjcwQUJCQUEzMTA1QjhCM0Y0NS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0IyMTcyODRFQTNENTM4 NDRCMkFGNTI3MEFCQkFBMzEwNUI4QjNGNDUuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2NhZTNm LzUvQjIxNzI4NEVBM0Q1Mzg0NEIyQUY1MjcwQUJCQUEzMTA1QjhCM0Y0NS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAJA/QwcknMC5qJukRryV3UIqDpY0BTyIVHyd6EV6ZAFAkT7bQj1m711P B3+UmLm3zWooHrqULxYCj/fySst9XHzCnlHO2CuwrlOt+Ziwty56GDAjEJY4XIkl duH6S6izskB3lJSG9PMKnYb+bH3VvRZlGUmoM/pGYl3VlvdrJQWDEbM8NEzVaotk 2OUZvSzewtaJbPhEvRegw+rcuputUYZtiRw/F0c/wv1VoeatAKQsAqj0eLgsHgXk cT123xImcKg45psoWKezpL2mrJ+OHtw0mK79TKkx2DKuE38eYf7nQxSflxJce2qw /yJnGFN5LbY7YIbSIGE/v4pkSqPDaDk= -----END CERTIFICATE-----Generated at Wed May 13 05:35:27 2026 by rpki-client