$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft File: 553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft (raw, json) Hash identifier: /gdRrUENMxGnicyL1C8ExEd5MJ1DLzmMEJ3SvxFDoxk= Subject key identifier: BA:DD:07:FD:4F:AB:BC:70:97:74:68:AE:7F:CE:63:5A:4E:66:95:8B Authority key identifier: 55:3D:76:11:EA:6B:CE:5E:C7:96:69:E4:B1:F1:47:F5:9C:2A:0E:EE Certificate issuer: /CN=553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE Certificate serial: 2AFA8B3111C7F1506A54DCEDF9FF6BA1A090DCC0 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft Manifest number: 01A4 Signing time: Wed 13 May 2026 00:18:02 +0000 Manifest this update: Wed 13 May 2026 00:13:02 +0000 Manifest next update: Thu 14 May 2026 00:20:02 +0000 Files and hashes: 1: 553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.crl (hash: xrb96GnMOLl4dPldTtHqKtcAhulAzuFg4ENR85qWHx0=) 2: 326130613a363034303a646230303a3a2f34302d3438203d3e20323131313531.roa (hash: +fw3SQMO92ygFCahRkoicBXvG1K7ggV1DgUpkn+lL98=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.crl rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 16:33:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:fa:8b:31:11:c7:f1:50:6a:54:dc:ed:f9:ff:6b:a1:a0:90:dc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE Validity Not Before: May 13 00:13:02 2026 GMT Not After : May 14 00:20:02 2026 GMT Subject: CN=BADD07FD4FABBC70977468AE7FCE635A4E66958B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c5:3b:06:65:65:9b:d0:6f:6b:fb:09:5f:2b: f6:7a:f0:d0:44:ea:4d:50:42:42:c9:ed:a8:aa:01: c6:c0:13:50:86:1e:83:bc:b8:58:41:61:18:5f:a7: 76:cf:fe:8c:6e:75:b3:8c:9a:4f:90:a8:f2:d3:fd: 84:5d:6b:d0:b5:35:91:62:99:58:17:23:9c:05:06: 56:d4:6d:ba:b7:ca:c2:30:09:a0:65:c1:8c:4d:e2: 35:af:ea:51:65:1e:bc:fa:ef:da:04:61:3c:fc:e5: 01:1c:15:9e:43:59:bc:81:fe:25:7c:be:b5:6a:63: 28:3e:bd:11:21:29:de:77:22:4e:27:80:43:5d:32: f6:93:9c:de:5c:36:71:8e:0f:5d:6c:c9:8d:4d:e9: ce:df:cf:6b:a0:6d:bc:e4:45:fd:15:4b:01:b1:6a: 3c:54:7d:44:ae:dd:a8:96:24:13:68:55:55:ae:37: cc:15:d6:55:00:47:ee:e7:14:a0:a8:95:3a:07:89: 1e:88:d2:a8:28:16:52:52:8d:e8:f9:ce:3c:c1:1b: a6:fe:08:23:3e:25:7f:e5:98:9d:f0:7a:56:54:fc: d3:5d:e6:2a:6e:a0:c6:74:1f:8c:82:cc:fe:51:c3: f3:78:24:87:0d:1c:7e:4f:d2:3f:bd:5d:84:40:af: ea:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:DD:07:FD:4F:AB:BC:70:97:74:68:AE:7F:CE:63:5A:4E:66:95:8B X509v3 Authority Key Identifier: keyid:55:3D:76:11:EA:6B:CE:5E:C7:96:69:E4:B1:F1:47:F5:9C:2A:0E:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:68:31:22:3c:8f:cf:e3:4a:ac:87:29:d2:a9:34:14:5a:be: 57:f3:fb:fb:f7:14:6b:4a:1c:54:1b:c5:d8:24:92:ae:d7:18: 8a:f8:7d:61:fb:f1:af:09:b4:92:0e:ee:c9:35:86:bb:22:2b: 1e:1a:3d:e8:38:d4:ff:76:e9:c7:19:62:b3:4f:89:77:10:da: 10:a9:80:ae:11:d8:02:46:f2:f0:92:f8:a2:e8:f5:00:6b:bd: ef:42:93:26:1b:58:27:a1:cb:8e:46:5c:78:32:7d:dc:b4:aa: 42:12:09:2a:37:c0:10:19:3f:d2:dc:08:1d:e4:79:79:c5:6f: 60:ea:4a:fb:80:33:85:78:af:73:42:44:ed:dc:5c:16:ba:a7: 36:2e:88:f4:31:d5:5b:3d:e4:96:f4:e8:79:b9:80:a2:fc:03: b0:65:db:49:25:26:b1:47:fe:05:9d:94:52:c8:de:f0:0f:f8: 41:7c:90:ac:dd:6f:55:83:4a:b1:ab:72:dd:4f:48:fb:36:f3: b7:51:ed:f8:5f:fc:ea:b9:bb:a7:16:4b:3a:d5:a7:f7:39:ff: 1e:1a:34:4e:55:cc:1b:8b:6a:6d:3b:db:05:f9:ab:34:f3:42: 94:d2:d7:c6:97:c6:c5:15:ff:16:9f:27:62:86:73:87:20:a3: 1d:ae:09:01 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUKvqLMRHH8VBqVNzt+f9roaCQ3MAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUzRDc2MTFFQTZCQ0U1RUM3OTY2OUU0QjFGMTQ3RjU5 QzJBMEVFRTAeFw0yNjA1MTMwMDEzMDJaFw0yNjA1MTQwMDIwMDJaMDMxMTAvBgNV BAMTKEJBREQwN0ZENEZBQkJDNzA5Nzc0NjhBRTdGQ0U2MzVBNEU2Njk1OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9xTsGZWWb0G9r+wlfK/Z68NBE 6k1QQkLJ7aiqAcbAE1CGHoO8uFhBYRhfp3bP/oxudbOMmk+QqPLT/YRda9C1NZFi mVgXI5wFBlbUbbq3ysIwCaBlwYxN4jWv6lFlHrz679oEYTz85QEcFZ5DWbyB/iV8 vrVqYyg+vREhKd53Ik4ngENdMvaTnN5cNnGOD11syY1N6c7fz2ugbbzkRf0VSwGx ajxUfUSu3aiWJBNoVVWuN8wV1lUAR+7nFKColToHiR6I0qgoFlJSjej5zjzBG6b+ CCM+JX/lmJ3welZU/NNd5ipuoMZ0H4yCzP5Rw/N4JIcNHH5P0j+9XYRAr+qfAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUut0H/U+rvHCXdGiuf85jWk5mlYswHwYDVR0j BBgwFoAUVT12Eeprzl7HlmnksfFH9ZwqDu4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzEyODI3MWUtYzI2OS00OTU0LTg3ZGItZDE4NGRmMTdm ODVjLzQvNTUzRDc2MTFFQTZCQ0U1RUM3OTY2OUU0QjFGMTQ3RjU5QzJBMEVFRS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzU1M0Q3NjExRUE2QkNF NUVDNzk2NjlFNEIxRjE0N0Y1OUMyQTBFRUUuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvYzEyODI3MWUtYzI2OS00OTU0LTg3ZGItZDE4NGRmMTdmODVj LzQvNTUzRDc2MTFFQTZCQ0U1RUM3OTY2OUU0QjFGMTQ3RjU5QzJBMEVFRS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAI5oMSI8j8/jSqyHKdKpNBRavlfz+/v3FGtKHFQbxdgkkq7XGIr4fWH7 8a8JtJIO7sk1hrsiKx4aPeg41P926ccZYrNPiXcQ2hCpgK4R2AJG8vCS+KLo9QBr ve9CkyYbWCehy45GXHgyfdy0qkISCSo3wBAZP9LcCB3keXnFb2DqSvuAM4V4r3NC RO3cXBa6pzYuiPQx1Vs95Jb06Hm5gKL8A7Bl20klJrFH/gWdlFLI3vAP+EF8kKzd b1WDSrGrct1PSPs287dR7fhf/Oq5u6cWSzrVp/c5/x4aNE5VzBuLam072wX5qzTz QpTS18aXxsUV/xafJ2KGc4cgox2uCQE= -----END CERTIFICATE-----Generated at Wed May 13 02:53:01 2026 by rpki-client