$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft File: 3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft (raw, json) Hash identifier: RWdZRR9JtYidwqwQlhfWVZLZwZW5hN+Cs/iXSQ9fTZg= Subject key identifier: DD:72:FC:E0:A6:95:2D:92:AE:96:96:8C:FA:CD:34:BC:C4:9A:59:EE Authority key identifier: 3C:19:D9:EE:5E:B0:20:A8:65:2D:68:59:87:FE:CF:2A:76:BB:02:77 Certificate issuer: /CN=3C19D9EE5EB020A8652D685987FECF2A76BB0277 Certificate serial: 4893F555D68A13DCD816BFC2254D33230F404FB7 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft Manifest number: 0113 Signing time: Thu 23 Jul 2026 13:39:35 +0000 Manifest this update: Thu 23 Jul 2026 13:34:35 +0000 Manifest next update: Fri 24 Jul 2026 15:12:35 +0000 Files and hashes: 1: 326130353a646663313a383063303a3a2f34322d3438203d3e20313937383134.roa (hash: +8Gtqve25qz7dj6RoaEfhzyMxoqEmhyXwj7/4y6S5ts=) 2: 326130353a646663313a383030303a3a2f34342d3438203d3e20323034323931.roa (hash: TnmWJuZNY0DPgipWjil2ZXNBS0GgRAuBPJ9ypq6d80U=) 3: 326130353a646663313a383031303a3a2f34342d3438203d3e20323132313534.roa (hash: vZabrxyGvueVve0UIFCKkMx6oLP4C5qFMGRoAro/NOA=) 4: 3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl (hash: +VgBuOSTnZXbLGp8lvKGA80NNPf0kM3BrOlGexkJm3Q=) 5: 326130353a646663313a383130303a3a2f34302d3438203d3e20323131343331.roa (hash: IJWnIfIqrQT/KRXbAy3Xfm9Y9DxNBR6JISgHxbdVPos=) 6: 326130353a646663313a383030303a3a2f34302d3434203d3e20323131343331.roa (hash: +461HFOd1+OqFF4HxgiLMZU5WmlfmbOlhpC36OHo5OY=) 7: 326130353a646663313a383166303a3a2f34342d3438203d3e20323131343331.roa (hash: LLsi5WyK1XwYJWDjn6LXybqAQvMFc3aggLJjCnG0b1I=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 15:12:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:93:f5:55:d6:8a:13:dc:d8:16:bf:c2:25:4d:33:23:0f:40:4f:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C19D9EE5EB020A8652D685987FECF2A76BB0277 Validity Not Before: Jul 23 13:34:35 2026 GMT Not After : Jul 24 15:12:35 2026 GMT Subject: CN=DD72FCE0A6952D92AE96968CFACD34BCC49A59EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:43:9f:26:cc:79:7a:42:12:8f:c3:7f:5e:70: 24:6e:33:6a:a8:af:5c:2e:a1:f8:15:7b:64:d8:55: f5:f8:30:a9:9e:50:0b:d0:c8:19:34:7b:45:ed:41: 8a:c7:61:18:e7:26:7c:53:61:41:7b:92:bf:77:95: dd:0a:24:89:87:a7:85:57:4a:f9:b7:f1:61:a0:33: d0:72:d3:d3:d9:c9:a3:d9:a7:3d:4d:81:18:cf:8d: 20:55:db:96:4a:f6:63:da:34:da:14:4a:e9:e5:1c: ce:af:ae:3b:c1:aa:57:e5:c9:38:a4:3c:c3:8f:40: 89:d1:d1:cc:e7:1f:2f:52:12:50:b8:e6:e4:5a:fe: b9:63:40:e8:cb:3a:f2:2d:d3:98:e6:ae:1b:fa:9d: ee:13:aa:5b:c4:22:31:e2:d9:14:12:ab:73:41:7a: 73:9a:e0:94:fe:f4:4e:95:1e:63:c5:93:0e:9b:fc: 68:fe:d0:2d:2d:ed:23:b3:55:4f:55:5d:6b:cb:ba: 4c:1c:0c:f4:da:72:e6:85:66:8c:87:4b:a2:de:48: b7:a2:dc:9f:e2:22:71:28:38:d2:29:a2:52:f6:1f: 32:30:f5:10:e1:0c:05:40:d7:1b:1a:f7:34:ae:5d: fe:da:40:95:1c:29:fd:7d:f2:d1:31:2d:5c:e0:a9: 5f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:72:FC:E0:A6:95:2D:92:AE:96:96:8C:FA:CD:34:BC:C4:9A:59:EE X509v3 Authority Key Identifier: keyid:3C:19:D9:EE:5E:B0:20:A8:65:2D:68:59:87:FE:CF:2A:76:BB:02:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:a9:f3:f0:81:06:56:fe:73:44:87:cd:60:7c:3a:d1:67:96: db:9e:a1:34:31:2a:1d:48:5c:8a:d8:a1:ab:f3:89:61:7d:4c: 65:6f:64:77:48:5b:93:c9:4d:c7:1c:7a:8f:d7:0a:55:4c:fe: 4c:c3:81:3a:92:b9:d5:e7:1e:9b:b1:60:40:af:af:5f:f4:ae: f1:9b:0b:81:81:8d:d4:77:cb:72:dd:d9:14:ca:ca:fe:58:37: a2:be:f2:67:5c:31:9c:14:47:45:3e:5e:80:11:5c:57:bc:6d: 70:cc:9a:20:7e:dd:7c:9f:26:3a:cb:4f:41:7e:d5:65:bd:33: fc:d4:ad:03:6e:e9:ff:01:1e:bd:af:3c:73:c1:57:2b:a8:d8: e7:7e:6d:d8:79:b3:dc:e8:1b:b6:e1:13:2c:a7:ee:ad:bb:7c: d4:af:6b:d5:c3:73:ca:13:f0:f6:c7:6a:d1:10:41:67:f3:28: a2:dc:60:ca:a5:18:85:ae:75:25:6d:93:8a:35:7d:7a:fa:55: d1:4f:8c:2c:55:30:bf:ff:75:d4:e8:e2:fb:18:28:33:f5:b6: e5:51:91:c0:60:67:6d:11:7b:43:dc:24:55:65:a9:02:83:a5: ce:b1:50:bd:e6:fa:ed:69:04:e2:6e:27:cb:46:d0:c6:d2:93: 6e:d6:d2:80 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUSJP1VdaKE9zYFr/CJU0zIw9AT7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MxOUQ5RUU1RUIwMjBBODY1MkQ2ODU5ODdGRUNGMkE3 NkJCMDI3NzAeFw0yNjA3MjMxMzM0MzVaFw0yNjA3MjQxNTEyMzVaMDMxMTAvBgNV BAMTKERENzJGQ0UwQTY5NTJEOTJBRTk2OTY4Q0ZBQ0QzNEJDQzQ5QTU5RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkQ58mzHl6QhKPw39ecCRuM2qo r1wuofgVe2TYVfX4MKmeUAvQyBk0e0XtQYrHYRjnJnxTYUF7kr93ld0KJImHp4VX Svm38WGgM9By09PZyaPZpz1NgRjPjSBV25ZK9mPaNNoUSunlHM6vrjvBqlflyTik PMOPQInR0cznHy9SElC45uRa/rljQOjLOvIt05jmrhv6ne4TqlvEIjHi2RQSq3NB enOa4JT+9E6VHmPFkw6b/Gj+0C0t7SOzVU9VXWvLukwcDPTacuaFZoyHS6LeSLei 3J/iInEoONIpolL2HzIw9RDhDAVA1xsa9zSuXf7aQJUcKf198tExLVzgqV9JAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQU3XL84KaVLZKulpaM+s00vMSaWe4wHwYDVR0j BBgwFoAUPBnZ7l6wIKhlLWhZh/7PKna7AncwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzk5MjY1ZWYtMjJhOS00MTAwLWEyM2QtNTFhOWQ5ZmVl YjdkLzUvM0MxOUQ5RUU1RUIwMjBBODY1MkQ2ODU5ODdGRUNGMkE3NkJCMDI3Ny5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzNDMTlEOUVFNUVCMDIw QTg2NTJENjg1OTg3RkVDRjJBNzZCQjAyNzcuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvYzk5MjY1ZWYtMjJhOS00MTAwLWEyM2QtNTFhOWQ5ZmVlYjdk LzUvM0MxOUQ5RUU1RUIwMjBBODY1MkQ2ODU5ODdGRUNGMkE3NkJCMDI3Ny5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAHKp8/CBBlb+c0SHzWB8OtFnltueoTQxKh1IXIrYoavziWF9TGVvZHdI W5PJTccceo/XClVM/kzDgTqSudXnHpuxYECvr1/0rvGbC4GBjdR3y3Ld2RTKyv5Y N6K+8mdcMZwUR0U+XoARXFe8bXDMmiB+3XyfJjrLT0F+1WW9M/zUrQNu6f8BHr2v PHPBVyuo2Od+bdh5s9zoG7bhEyyn7q27fNSva9XDc8oT8PbHatEQQWfzKKLcYMql GIWudSVtk4o1fXr6VdFPjCxVML//ddTo4vsYKDP1tuVRkcBgZ20Re0PcJFVlqQKD pc6xUL3m+u1pBOJuJ8tG0MbSk27W0oA= -----END CERTIFICATE-----Generated at Fri Jul 24 05:11:19 2026 by rpki-client