$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft File: 3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft (raw, json) Hash identifier: zrzj93pIUbA9p8fE5MwQcAYkuSoBum9kHVHXHgTz++8= Subject key identifier: D5:57:DE:D0:83:62:9E:12:6D:7C:50:38:27:D6:FA:B8:55:6D:C7:F5 Authority key identifier: 3C:19:D9:EE:5E:B0:20:A8:65:2D:68:59:87:FE:CF:2A:76:BB:02:77 Certificate issuer: /CN=3C19D9EE5EB020A8652D685987FECF2A76BB0277 Certificate serial: 6CF3A4D89D356793B62642C9B451B3BB31D26F00 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft Manifest number: 7F Signing time: Thu 26 Mar 2026 09:22:49 +0000 Manifest this update: Thu 26 Mar 2026 09:17:49 +0000 Manifest next update: Fri 27 Mar 2026 10:28:49 +0000 Files and hashes: 1: 326130353a646663313a383130303a3a2f34302d3438203d3e20323131343331.roa (hash: IJWnIfIqrQT/KRXbAy3Xfm9Y9DxNBR6JISgHxbdVPos=) 2: 326130353a646663313a383030303a3a2f34342d3438203d3e20323034323931.roa (hash: TnmWJuZNY0DPgipWjil2ZXNBS0GgRAuBPJ9ypq6d80U=) 3: 326130353a646663313a383063303a3a2f34322d3438203d3e20313937383134.roa (hash: +8Gtqve25qz7dj6RoaEfhzyMxoqEmhyXwj7/4y6S5ts=) 4: 326130353a646663313a383030303a3a2f34302d3434203d3e20323131343331.roa (hash: +461HFOd1+OqFF4HxgiLMZU5WmlfmbOlhpC36OHo5OY=) 5: 326130353a646663313a383031303a3a2f34342d3438203d3e20323132313534.roa (hash: vZabrxyGvueVve0UIFCKkMx6oLP4C5qFMGRoAro/NOA=) 6: 326130353a646663313a383166303a3a2f34342d3438203d3e20323131343331.roa (hash: LLsi5WyK1XwYJWDjn6LXybqAQvMFc3aggLJjCnG0b1I=) 7: 3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl (hash: 3bkmF0/YDJvDTBeebKXv3u41j/vHlQdvk9t+dQ9ImsU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 05:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:f3:a4:d8:9d:35:67:93:b6:26:42:c9:b4:51:b3:bb:31:d2:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C19D9EE5EB020A8652D685987FECF2A76BB0277 Validity Not Before: Mar 26 09:17:49 2026 GMT Not After : Mar 27 10:28:49 2026 GMT Subject: CN=D557DED083629E126D7C503827D6FAB8556DC7F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:65:42:cf:ba:4f:77:17:cf:69:1f:e6:bf:07: f9:a2:92:f6:70:fd:70:07:4e:84:66:a6:2f:f0:2b: 30:44:1d:b8:d6:02:c7:5e:68:34:42:24:87:01:3f: 80:06:87:1e:db:3a:d3:a1:58:18:c4:b4:9c:71:32: c5:93:19:7d:1e:85:a0:01:53:d3:52:e9:cf:99:69: a8:d8:8e:3d:d5:ff:fc:8e:55:03:d5:72:d6:95:a6: ac:13:9f:65:0c:54:37:d2:30:63:01:4a:38:24:dc: f2:73:1e:15:01:4c:b5:e8:40:1b:ca:47:14:c9:41: d5:8e:d2:c4:7b:e1:33:6c:58:73:9b:0f:66:bc:b7: e7:f9:48:e4:97:0b:c5:26:4c:8b:cc:93:8d:62:8b: ac:93:63:cb:8a:07:15:ea:e9:3b:55:cb:c6:35:6e: c6:e5:2a:cf:70:fd:34:b7:2c:ec:60:ef:79:73:5a: 7f:e2:9c:06:33:49:c0:69:3a:71:97:62:0c:cd:cd: 44:21:67:be:c6:10:88:c0:81:ea:b4:a8:b3:a3:43: d2:5f:bc:0c:52:b4:fa:d3:d9:ba:22:68:a4:5c:7c: b5:8f:50:b0:79:2f:53:06:26:50:ce:44:f2:15:f9: 27:94:1b:7a:d4:7a:37:d5:17:d6:fd:73:ef:45:e9: 5f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:57:DE:D0:83:62:9E:12:6D:7C:50:38:27:D6:FA:B8:55:6D:C7:F5 X509v3 Authority Key Identifier: keyid:3C:19:D9:EE:5E:B0:20:A8:65:2D:68:59:87:FE:CF:2A:76:BB:02:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:8f:6e:8b:b0:73:da:ad:a1:bc:3f:72:9f:5e:2a:55:ef:c8: 19:56:17:f0:ec:7d:a3:40:93:1e:2c:33:e8:2a:d8:b4:d2:48: c3:6a:2e:10:ed:b0:31:16:33:f9:09:a3:af:51:14:27:20:6b: 51:21:97:8c:94:86:e4:ae:3d:4a:42:f2:3e:d1:9b:a2:bc:1b: 92:35:0e:90:7c:7b:a1:fc:77:6f:df:26:95:7c:60:27:1d:16: 96:6d:74:79:9a:31:ca:48:8c:55:4c:6d:36:78:e2:ea:5a:55: 07:c2:0a:96:5f:14:6e:52:89:8d:58:57:b4:11:99:ae:ef:8f: e3:17:84:79:db:8d:26:85:af:0f:e4:0f:7d:44:1d:d3:8e:5b: b5:95:01:34:65:70:f7:50:f3:c9:1d:84:89:4d:d3:7f:b9:f0: 5f:8e:41:71:8b:10:ad:18:8d:7e:c7:cf:68:47:8d:e5:75:9b: f0:a7:25:0e:d0:5c:54:9c:43:5a:f4:b0:50:4e:15:c3:02:fe: 1b:51:62:ed:db:04:2c:0d:7c:b2:af:30:c7:3c:66:b7:e2:f2: 7d:4f:eb:75:01:05:5b:1a:4c:99:4c:cd:19:c7:e1:13:88:b3: 0d:85:85:85:dc:ee:17:a5:26:aa:e3:25:e7:15:69:16:13:78: 6b:6c:1c:57 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUbPOk2J01Z5O2JkLJtFGzuzHSbwAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MxOUQ5RUU1RUIwMjBBODY1MkQ2ODU5ODdGRUNGMkE3 NkJCMDI3NzAeFw0yNjAzMjYwOTE3NDlaFw0yNjAzMjcxMDI4NDlaMDMxMTAvBgNV BAMTKEQ1NTdERUQwODM2MjlFMTI2RDdDNTAzODI3RDZGQUI4NTU2REM3RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcZULPuk93F89pH+a/B/mikvZw /XAHToRmpi/wKzBEHbjWAsdeaDRCJIcBP4AGhx7bOtOhWBjEtJxxMsWTGX0ehaAB U9NS6c+ZaajYjj3V//yOVQPVctaVpqwTn2UMVDfSMGMBSjgk3PJzHhUBTLXoQBvK RxTJQdWO0sR74TNsWHObD2a8t+f5SOSXC8UmTIvMk41ii6yTY8uKBxXq6TtVy8Y1 bsblKs9w/TS3LOxg73lzWn/inAYzScBpOnGXYgzNzUQhZ77GEIjAgeq0qLOjQ9Jf vAxStPrT2boiaKRcfLWPULB5L1MGJlDORPIV+SeUG3rUejfVF9b9c+9F6V9zAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQU1Vfe0INinhJtfFA4J9b6uFVtx/UwHwYDVR0j BBgwFoAUPBnZ7l6wIKhlLWhZh/7PKna7AncwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzk5MjY1ZWYtMjJhOS00MTAwLWEyM2QtNTFhOWQ5ZmVl YjdkLzUvM0MxOUQ5RUU1RUIwMjBBODY1MkQ2ODU5ODdGRUNGMkE3NkJCMDI3Ny5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzNDMTlEOUVFNUVCMDIw QTg2NTJENjg1OTg3RkVDRjJBNzZCQjAyNzcuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvYzk5MjY1ZWYtMjJhOS00MTAwLWEyM2QtNTFhOWQ5ZmVlYjdk LzUvM0MxOUQ5RUU1RUIwMjBBODY1MkQ2ODU5ODdGRUNGMkE3NkJCMDI3Ny5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAB2Pbouwc9qtobw/cp9eKlXvyBlWF/DsfaNAkx4sM+gq2LTSSMNqLhDt sDEWM/kJo69RFCcga1Ehl4yUhuSuPUpC8j7Rm6K8G5I1DpB8e6H8d2/fJpV8YCcd FpZtdHmaMcpIjFVMbTZ44upaVQfCCpZfFG5SiY1YV7QRma7vj+MXhHnbjSaFrw/k D31EHdOOW7WVATRlcPdQ88kdhIlN03+58F+OQXGLEK0YjX7Hz2hHjeV1m/CnJQ7Q XFScQ1r0sFBOFcMC/htRYu3bBCwNfLKvMMc8Zrfi8n1P63UBBVsaTJlMzRnH4ROI sw2FhYXc7helJqrjJecVaRYTeGtsHFc= -----END CERTIFICATE-----Generated at Thu Mar 26 16:52:30 2026 by rpki-client