$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft File: 0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft (raw, json) Hash identifier: 8mvWoV3YZDvrP48mFeG7itq9JE/+TKWcBCb0KutoUFw= Subject key identifier: 3A:4E:CA:02:D2:5C:44:CD:2E:D9:DD:96:E7:A9:79:25:28:F4:D6:73 Authority key identifier: 0B:3B:68:A2:06:B6:AF:84:A3:4A:A1:B7:63:2E:99:AB:06:F5:20:77 Certificate issuer: /CN=0B3B68A206B6AF84A34AA1B7632E99AB06F52077 Certificate serial: 4DE600ADC3725F251F61D5FFE61C49FA5BB48F50 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft Manifest number: 5A Signing time: Fri 10 Apr 2026 22:17:35 +0000 Manifest this update: Fri 10 Apr 2026 22:12:35 +0000 Manifest next update: Sat 11 Apr 2026 22:44:35 +0000 Files and hashes: 1: 0B3B68A206B6AF84A34AA1B7632E99AB06F52077.crl (hash: c4sEFMEqLJKasXVO5CrG3tFvrg4vCREtPXFe4+1RIP4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.crl rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Apr 2026 22:44:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:e6:00:ad:c3:72:5f:25:1f:61:d5:ff:e6:1c:49:fa:5b:b4:8f:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B3B68A206B6AF84A34AA1B7632E99AB06F52077 Validity Not Before: Apr 10 22:12:35 2026 GMT Not After : Apr 11 22:44:35 2026 GMT Subject: CN=3A4ECA02D25C44CD2ED9DD96E7A9792528F4D673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ed:cf:02:ba:6f:29:11:6a:4b:21:6f:86:23: 64:23:7e:ca:18:c5:a8:b9:da:7c:34:97:3c:64:56: b9:88:95:99:bb:59:db:02:7a:1d:69:e3:c8:f4:8b: 54:01:7c:e9:7c:1c:ef:ec:a4:91:e0:37:49:f1:5b: 20:82:95:2f:de:0c:5f:ef:c2:f2:04:d6:98:bf:f2: 67:e2:31:11:1c:60:3c:ac:6e:9f:ab:20:17:a3:41: ea:0c:3a:01:06:99:84:cb:38:e7:96:49:01:e6:85: 7d:2d:45:3e:00:a4:56:6d:2e:b7:91:09:eb:54:7f: 2e:49:5b:0b:20:a3:ac:27:9e:57:a3:48:b7:dd:e3: 33:19:4e:a7:9b:f6:fe:32:95:58:dc:3c:5b:bd:9c: 5c:2e:e7:dd:a3:4e:57:05:49:78:bb:29:09:d2:4c: 99:bf:00:b4:66:dc:b2:74:87:d9:75:82:40:d6:38: b8:b5:d7:ec:2f:f1:54:40:db:15:f2:ab:e2:41:f4: c1:48:c6:4e:79:1d:1c:4e:72:48:70:a2:ca:c0:25: 6d:34:83:1c:67:d7:85:87:77:5e:15:7e:69:7c:5f: 56:84:3f:4b:ce:b4:2f:5a:bc:b5:1e:05:fb:5a:eb: af:dd:20:8c:ec:58:53:5b:07:7a:cd:75:1b:ae:7f: 72:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:4E:CA:02:D2:5C:44:CD:2E:D9:DD:96:E7:A9:79:25:28:F4:D6:73 X509v3 Authority Key Identifier: keyid:0B:3B:68:A2:06:B6:AF:84:A3:4A:A1:B7:63:2E:99:AB:06:F5:20:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:f3:2e:37:b0:0a:d7:06:07:01:ef:16:4f:04:4f:7c:79:62: 07:11:82:06:fb:c6:df:9b:68:95:7b:91:8b:95:db:6f:06:84: fb:b0:dc:ad:c6:0a:a1:39:a4:2f:f2:f4:fc:06:e5:c2:e9:f3: 24:2c:bd:9f:95:67:d5:51:8f:76:00:9d:1b:01:be:71:99:4e: 38:8f:44:4c:2e:b1:53:35:69:0c:4a:88:80:b1:6a:92:66:3c: 7b:31:2d:9c:9b:39:13:22:62:12:bb:18:de:d6:2b:9a:7e:ea: d6:3f:e0:54:12:4f:36:ec:b3:6f:3b:80:35:e0:bf:bd:72:f5: d9:31:dc:95:fb:47:6c:ab:d9:b0:8a:6d:e6:f6:e8:cf:b0:9d: 24:d5:b8:df:ff:59:e2:73:a6:85:2e:e3:41:61:b1:b1:e3:c3: 96:93:6e:b7:7b:48:c2:ea:c8:c6:53:65:11:89:74:07:a3:6c: fd:4b:8d:b9:25:3d:cd:d1:e9:fd:63:a3:0f:90:97:af:8c:61: b1:ea:48:70:3e:81:40:11:75:32:77:b3:f5:e8:48:12:d3:52: c9:00:d5:69:d2:7f:95:f0:ba:85:71:cd:8f:08:3a:b3:d8:6c: 46:df:bf:d7:e9:dc:7b:26:a0:91:9e:a1:74:a2:a8:1d:48:d0: 85:35:86:fc -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgIUTeYArcNyXyUfYdX/5hxJ+lu0j1AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEIzQjY4QTIwNkI2QUY4NEEzNEFBMUI3NjMyRTk5QUIw NkY1MjA3NzAeFw0yNjA0MTAyMjEyMzVaFw0yNjA0MTEyMjQ0MzVaMDMxMTAvBgNV BAMTKDNBNEVDQTAyRDI1QzQ0Q0QyRUQ5REQ5NkU3QTk3OTI1MjhGNEQ2NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa7c8Cum8pEWpLIW+GI2QjfsoY xai52nw0lzxkVrmIlZm7WdsCeh1p48j0i1QBfOl8HO/spJHgN0nxWyCClS/eDF/v wvIE1pi/8mfiMREcYDysbp+rIBejQeoMOgEGmYTLOOeWSQHmhX0tRT4ApFZtLreR CetUfy5JWwsgo6wnnlejSLfd4zMZTqeb9v4ylVjcPFu9nFwu592jTlcFSXi7KQnS TJm/ALRm3LJ0h9l1gkDWOLi11+wv8VRA2xXyq+JB9MFIxk55HRxOckhwosrAJW00 gxxn14WHd14Vfml8X1aEP0vOtC9avLUeBfta66/dIIzsWFNbB3rNdRuuf3JdAgMB AAGjggJhMIICXTAdBgNVHQ4EFgQUOk7KAtJcRM0u2d2W56l5JSj01nMwHwYDVR0j BBgwFoAUCztooga2r4SjSqG3Yy6Zqwb1IHcwDgYDVR0PAQH/BAQDAgeAMIGXBgNV HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzFiZjhlOTc3LTcyNzgtNDZjZi1hYmQxLTk5Y2QxZmQy YmU0ZS8xMC8wQjNCNjhBMjA2QjZBRjg0QTM0QUExQjc2MzJFOTlBQjA2RjUyMDc3 LmNybDB6BggrBgEFBQcBAQRuMGwwagYIKwYBBQUHMAKGXnJzeW5jOi8vY2xvdWRp ZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xPVURJRS1SUEtJLzQvMEIzQjY4QTIwNkI2 QUY4NEEzNEFBMUI3NjMyRTk5QUIwNkY1MjA3Ny5jZXIwgaAGCCsGAQUFBwELBIGT MIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi ZTRlLzEwLzBCM0I2OEEyMDZCNkFGODRBMzRBQTFCNzYzMkU5OUFCMDZGNTIwNzcu bWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQ MAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3 DQEBCwUAA4IBAQBS8y43sArXBgcB7xZPBE98eWIHEYIG+8bfm2iVe5GLldtvBoT7 sNytxgqhOaQv8vT8BuXC6fMkLL2flWfVUY92AJ0bAb5xmU44j0RMLrFTNWkMSoiA sWqSZjx7MS2cmzkTImISuxje1iuafurWP+BUEk827LNvO4A14L+9cvXZMdyV+0ds q9mwim3m9ujPsJ0k1bjf/1nic6aFLuNBYbGx48OWk263e0jC6sjGU2URiXQHo2z9 S425JT3N0en9Y6MPkJevjGGx6khwPoFAEXUyd7P16EgS01LJANVp0n+V8LqFcc2P CDqz2GxG37/X6dx7JqCRnqF0oqgdSNCFNYb8 -----END CERTIFICATE-----Generated at Sat Apr 11 10:40:48 2026 by rpki-client