$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft File: 4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft (raw, json) Hash identifier: ZTPetzAuQ5uTG1JYiraSM8ak4URQT5dwtgS7Jqe//B0= Subject key identifier: 14:CF:8D:A1:E4:C6:1B:13:40:3E:9E:F2:D2:7D:F8:98:1B:A8:94:BC Authority key identifier: 4C:8F:14:A9:80:41:CC:D9:EA:EF:C4:56:FF:5A:AF:BF:49:01:C6:81 Certificate issuer: /CN=4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681 Certificate serial: 60940F3490D92285D63D85D2FC9533F615AEDB1C Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft Manifest number: 014B Signing time: Wed 11 Mar 2026 20:08:50 +0000 Manifest this update: Wed 11 Mar 2026 20:03:50 +0000 Manifest next update: Thu 12 Mar 2026 22:48:50 +0000 Files and hashes: 1: 4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.crl (hash: 5qyL5H359Nv1Ine7X2sz5pDdyGWyz5/HgVM20DT75ec=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.crl rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 12 Mar 2026 22:48:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:94:0f:34:90:d9:22:85:d6:3d:85:d2:fc:95:33:f6:15:ae:db:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681 Validity Not Before: Mar 11 20:03:50 2026 GMT Not After : Mar 12 22:48:50 2026 GMT Subject: CN=14CF8DA1E4C61B13403E9EF2D27DF8981BA894BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:73:12:63:4c:68:52:6a:82:77:1c:d9:dc:d9: 01:7e:51:27:ed:4b:82:12:fa:4c:f5:22:e6:f9:2f: ea:83:e8:ea:ab:13:98:e4:a6:31:c6:85:3a:cd:03: 4f:c4:34:78:ee:8b:02:0c:dc:d7:dd:85:26:97:fb: de:10:92:9d:0c:52:d7:8d:5f:1d:19:3c:ed:3d:ea: 0e:00:25:81:1d:e7:92:a8:12:cc:8a:ae:9d:bb:80: f4:2f:c8:65:4a:f2:8e:86:09:30:70:b2:3b:fb:ed: 1e:63:3d:58:8b:e3:af:cf:0b:f5:1f:34:6a:53:1f: 2e:12:13:fd:a0:a6:de:ec:1c:0b:a2:be:08:53:7d: ad:e7:75:d9:b0:b9:02:33:9f:02:ef:fb:f8:59:47: bc:05:53:f5:9a:94:11:a1:4c:fc:6d:22:80:94:cb: 8e:79:f4:44:1c:9d:0b:75:5e:d8:40:3b:95:2d:d1: a9:06:5b:03:a0:ec:0c:c0:65:a5:af:2d:f4:2e:66: 85:32:78:1f:26:0f:3a:3e:2e:90:fa:df:ec:1b:db: 54:6c:6a:21:70:23:64:20:a2:45:8e:f1:dd:30:9f: 02:c1:e1:aa:7e:1b:fb:c8:25:45:fc:79:bb:34:fc: 2f:ca:e4:8c:b2:cc:02:49:b6:d6:d2:f2:ba:13:97: a8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:CF:8D:A1:E4:C6:1B:13:40:3E:9E:F2:D2:7D:F8:98:1B:A8:94:BC X509v3 Authority Key Identifier: keyid:4C:8F:14:A9:80:41:CC:D9:EA:EF:C4:56:FF:5A:AF:BF:49:01:C6:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:b4:27:4e:28:51:5c:5b:59:b5:a2:1b:f3:a5:c4:18:92:19: 6f:8b:6d:cc:a5:a2:43:cc:37:3d:4a:80:dd:f0:23:3c:bb:6f: db:f8:74:0c:d7:85:e4:d9:e0:fe:d3:d9:ae:e3:9a:3d:2d:8a: f4:c0:f0:c1:4d:96:ed:48:f8:61:88:4e:b6:ac:ec:1e:6c:05: 77:18:9c:71:a4:8c:d4:c9:42:1d:f1:22:bc:ba:87:d5:85:c6: 7c:67:9b:b4:f6:2f:65:61:04:bb:5b:c0:8f:00:d7:96:3b:f7: 3c:03:18:d9:dd:7b:4a:f7:8a:7f:96:5c:6a:d6:c4:69:d9:7f: 6d:e5:96:64:1f:c5:f3:72:68:6a:56:84:79:47:56:69:08:4e: 25:a1:af:33:c9:c5:a6:b3:79:2f:26:31:54:5f:af:7a:f7:a8: 03:0f:14:d6:f2:65:5b:6b:b6:8d:45:01:04:ff:d7:18:db:0b: d1:bb:4c:e2:e3:a7:03:38:c0:e5:cc:83:ae:99:f6:19:d2:68: 84:51:04:28:94:31:ca:58:1e:19:ed:ec:83:2a:dd:2b:c5:21: 6e:c0:d6:3d:b7:ff:6a:19:c3:3f:86:4a:26:c7:3e:aa:20:60: ab:d2:fe:b2:32:71:70:c6:c1:be:03:49:08:94:35:a0:8a:fe: 0b:4d:6d:23 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUYJQPNJDZIoXWPYXS/JUz9hWu2xwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEM4RjE0QTk4MDQxQ0NEOUVBRUZDNDU2RkY1QUFGQkY0 OTAxQzY4MTAeFw0yNjAzMTEyMDAzNTBaFw0yNjAzMTIyMjQ4NTBaMDMxMTAvBgNV BAMTKDE0Q0Y4REExRTRDNjFCMTM0MDNFOUVGMkQyN0RGODk4MUJBODk0QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDscxJjTGhSaoJ3HNnc2QF+USft S4IS+kz1Iub5L+qD6OqrE5jkpjHGhTrNA0/ENHjuiwIM3NfdhSaX+94Qkp0MUteN Xx0ZPO096g4AJYEd55KoEsyKrp27gPQvyGVK8o6GCTBwsjv77R5jPViL46/PC/Uf NGpTHy4SE/2gpt7sHAuivghTfa3nddmwuQIznwLv+/hZR7wFU/WalBGhTPxtIoCU y4559EQcnQt1XthAO5Ut0akGWwOg7AzAZaWvLfQuZoUyeB8mDzo+LpD63+wb21Rs aiFwI2QgokWO8d0wnwLB4ap+G/vIJUX8ebs0/C/K5IyyzAJJttbS8roTl6hhAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUFM+NoeTGGxNAPp7y0n34mBuolLwwHwYDVR0j BBgwFoAUTI8UqYBBzNnq78RW/1qvv0kBxoEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFhZmM4 ZWI4LzQvNEM4RjE0QTk4MDQxQ0NEOUVBRUZDNDU2RkY1QUFGQkY0OTAxQzY4MS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzRDOEYxNEE5ODA0MUND RDlFQUVGQzQ1NkZGNUFBRkJGNDkwMUM2ODEuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFhZmM4ZWI4 LzQvNEM4RjE0QTk4MDQxQ0NEOUVBRUZDNDU2RkY1QUFGQkY0OTAxQzY4MS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAHq0J04oUVxbWbWiG/OlxBiSGW+LbcylokPMNz1KgN3wIzy7b9v4dAzX heTZ4P7T2a7jmj0tivTA8MFNlu1I+GGITras7B5sBXcYnHGkjNTJQh3xIry6h9WF xnxnm7T2L2VhBLtbwI8A15Y79zwDGNnde0r3in+WXGrWxGnZf23llmQfxfNyaGpW hHlHVmkITiWhrzPJxaazeS8mMVRfr3r3qAMPFNbyZVtrto1FAQT/1xjbC9G7TOLj pwM4wOXMg66Z9hnSaIRRBCiUMcpYHhnt7IMq3SvFIW7A1j23/2oZwz+GSibHPqog YKvS/rIycXDGwb4DSQiUNaCK/gtNbSM= -----END CERTIFICATE-----Generated at Thu Mar 12 10:07:04 2026 by rpki-client