$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft File: B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft (raw, json) Hash identifier: F6f3ak83X+R35MPKoUEPRyCyC51SoqpEarlLjy1DgYo= Subject key identifier: 56:F8:00:D6:A2:08:47:23:0D:AB:2D:AC:56:89:0B:6A:99:9F:AF:AE Authority key identifier: B2:17:28:4E:A3:D5:38:44:B2:AF:52:70:AB:BA:A3:10:5B:8B:3F:45 Certificate issuer: /CN=B217284EA3D53844B2AF5270ABBAA3105B8B3F45 Certificate serial: 2D15F380439D9B2BA2D1F00F71EE135434E08221 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft Manifest number: 0169 Signing time: Fri 27 Mar 2026 15:56:56 +0000 Manifest this update: Fri 27 Mar 2026 15:51:56 +0000 Manifest next update: Sat 28 Mar 2026 17:50:56 +0000 Files and hashes: 1: B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl (hash: 8OFLDxHdLvm7+loqB3/b+Nc9MbzCXAUx63PhU2WiI2s=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 28 Mar 2026 17:50:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:15:f3:80:43:9d:9b:2b:a2:d1:f0:0f:71:ee:13:54:34:e0:82:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B217284EA3D53844B2AF5270ABBAA3105B8B3F45 Validity Not Before: Mar 27 15:51:56 2026 GMT Not After : Mar 28 17:50:56 2026 GMT Subject: CN=56F800D6A20847230DAB2DAC56890B6A999FAFAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:87:2e:20:27:9c:32:11:da:1c:01:b7:2a:68: e6:df:e4:13:28:b3:8c:28:73:8f:53:b7:c1:c4:30: af:98:b4:02:5b:a3:b0:0d:5d:71:2b:24:8f:60:89: 00:88:5a:aa:98:b1:31:ca:14:5c:b5:b1:52:18:75: 10:7c:ec:66:8a:e4:f0:de:9f:df:0f:9c:25:ec:a3: 92:46:b1:30:08:dd:9a:85:9f:a7:6f:f3:4b:9b:aa: 20:be:72:b3:f6:49:1f:ed:97:6b:6c:0b:c8:cc:1e: 57:fb:41:cc:d3:f1:c0:db:92:78:af:da:47:15:63: d6:a6:a0:3f:30:c1:21:ad:99:5c:ed:7e:11:1a:53: e0:22:1b:49:7b:57:dd:9e:bd:8b:9c:88:68:10:fd: 51:34:a9:ed:da:12:ee:8c:b9:c0:e2:eb:13:df:66: c5:e6:4c:be:43:1f:1c:eb:be:0b:4f:ac:a9:2c:e6: 17:31:d9:49:bb:06:57:90:6f:33:bb:df:57:5e:6e: 94:7c:e3:a9:9f:d0:45:8d:06:b3:02:10:0d:56:f6: e5:23:cc:56:c5:c4:ae:9d:94:5e:7f:62:93:60:4e: 9b:21:0b:8c:24:30:4b:25:5e:99:b6:bf:a7:a0:b5: 99:9b:96:22:83:c7:86:31:29:21:5c:86:18:8c:f1: 51:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F8:00:D6:A2:08:47:23:0D:AB:2D:AC:56:89:0B:6A:99:9F:AF:AE X509v3 Authority Key Identifier: keyid:B2:17:28:4E:A3:D5:38:44:B2:AF:52:70:AB:BA:A3:10:5B:8B:3F:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:ce:92:17:53:9a:cf:c0:40:87:58:ad:b0:8f:a6:e3:9a:de: e6:38:02:2d:f1:67:8c:45:66:1f:84:79:50:06:a1:7d:2d:4d: 7c:7f:4d:23:d2:58:e2:a0:59:37:87:5c:85:25:70:e5:51:a5: 5a:b1:68:72:dd:df:f7:f1:bd:22:c8:c2:1a:a7:f6:f1:3a:14: f5:d7:37:b9:0c:7f:c3:c7:7c:d3:3d:28:4b:f6:95:69:34:dd: 6a:2e:d3:de:81:d3:c2:97:f0:f8:2b:1f:5d:45:f6:95:c2:2d: 9e:af:15:7f:d5:78:48:41:fb:e9:43:8e:54:30:38:6e:25:f7: dc:ba:61:fa:06:ec:b3:5e:04:97:ec:77:0b:fe:64:c5:34:71: 1d:6d:7a:a5:9d:06:dd:7f:99:b5:3c:5f:d6:e1:5b:dd:33:b3: 9a:7c:3d:8c:e0:00:07:6b:89:c6:d2:0d:fa:43:ea:f7:fc:d7: 48:b7:5f:87:7d:2c:a1:8a:f2:b2:38:25:30:da:7c:6a:1a:d7: 80:6d:6d:82:dd:8e:71:a0:43:9e:a0:f2:8b:2d:42:c4:82:73: c0:2c:77:5a:0d:36:1a:17:ee:2b:dc:81:3f:31:b6:46:a6:a5: 94:fa:11:28:3c:d1:43:81:1d:58:ef:e8:a4:d3:c6:f9:c5:f0: 1f:cb:ff:64 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIULRXzgEOdmyui0fAPce4TVDTggiEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIxNzI4NEVBM0Q1Mzg0NEIyQUY1MjcwQUJCQUEzMTA1 QjhCM0Y0NTAeFw0yNjAzMjcxNTUxNTZaFw0yNjAzMjgxNzUwNTZaMDMxMTAvBgNV BAMTKDU2RjgwMEQ2QTIwODQ3MjMwREFCMkRBQzU2ODkwQjZBOTk5RkFGQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvhy4gJ5wyEdocAbcqaObf5BMo s4woc49Tt8HEMK+YtAJbo7ANXXErJI9giQCIWqqYsTHKFFy1sVIYdRB87GaK5PDe n98PnCXso5JGsTAI3ZqFn6dv80ubqiC+crP2SR/tl2tsC8jMHlf7QczT8cDbkniv 2kcVY9amoD8wwSGtmVztfhEaU+AiG0l7V92evYuciGgQ/VE0qe3aEu6MucDi6xPf ZsXmTL5DHxzrvgtPrKks5hcx2Um7BleQbzO731debpR846mf0EWNBrMCEA1W9uUj zFbFxK6dlF5/YpNgTpshC4wkMEslXpm2v6egtZmbliKDx4YxKSFchhiM8VGVAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUVvgA1qIIRyMNqy2sVokLapmfr64wHwYDVR0j BBgwFoAUshcoTqPVOESyr1Jwq7qjEFuLP0UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzUvQjIxNzI4NEVBM0Q1Mzg0NEIyQUY1MjcwQUJCQUEzMTA1QjhCM0Y0NS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0IyMTcyODRFQTNENTM4 NDRCMkFGNTI3MEFCQkFBMzEwNUI4QjNGNDUuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2NhZTNm LzUvQjIxNzI4NEVBM0Q1Mzg0NEIyQUY1MjcwQUJCQUEzMTA1QjhCM0Y0NS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAD7OkhdTms/AQIdYrbCPpuOa3uY4Ai3xZ4xFZh+EeVAGoX0tTXx/TSPS WOKgWTeHXIUlcOVRpVqxaHLd3/fxvSLIwhqn9vE6FPXXN7kMf8PHfNM9KEv2lWk0 3Wou096B08KX8PgrH11F9pXCLZ6vFX/VeEhB++lDjlQwOG4l99y6YfoG7LNeBJfs dwv+ZMU0cR1teqWdBt1/mbU8X9bhW90zs5p8PYzgAAdricbSDfpD6vf810i3X4d9 LKGK8rI4JTDafGoa14BtbYLdjnGgQ56g8ostQsSCc8Asd1oNNhoX7ivcgT8xtkam pZT6ESg80UOBHVjv6KTTxvnF8B/L/2Q= -----END CERTIFICATE-----Generated at Sat Mar 28 11:23:00 2026 by rpki-client