$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.mft File: FF4F1D48A6088FEC5ED73270F82068A436391A71.mft (raw, json) Hash identifier: RmBfeWtcXWF7+W75g1l7EJ6pe56rKzjeD2hh3rIpAkk= Subject key identifier: 1D:8A:5F:7B:2C:E3:A4:51:A2:3D:EE:4C:40:CA:4B:C5:47:AF:13:DA Authority key identifier: FF:4F:1D:48:A6:08:8F:EC:5E:D7:32:70:F8:20:68:A4:36:39:1A:71 Certificate issuer: /CN=FF4F1D48A6088FEC5ED73270F82068A436391A71 Certificate serial: 79C620E08379CE9FCE6AB1AEECF3E70223A49926 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/FF4F1D48A6088FEC5ED73270F82068A436391A71.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.mft Manifest number: 0127 Signing time: Tue 26 May 2026 20:21:17 +0000 Manifest this update: Tue 26 May 2026 20:16:17 +0000 Manifest next update: Wed 27 May 2026 22:15:17 +0000 Files and hashes: 1: FF4F1D48A6088FEC5ED73270F82068A436391A71.crl (hash: mZpOrO6n/oFjU88qdFXoi+CkXG703kNXFOK8vFLqgVI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.crl rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/FF4F1D48A6088FEC5ED73270F82068A436391A71.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 27 May 2026 22:15:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:c6:20:e0:83:79:ce:9f:ce:6a:b1:ae:ec:f3:e7:02:23:a4:99:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF4F1D48A6088FEC5ED73270F82068A436391A71 Validity Not Before: May 26 20:16:17 2026 GMT Not After : May 27 22:15:17 2026 GMT Subject: CN=1D8A5F7B2CE3A451A23DEE4C40CA4BC547AF13DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:0d:cf:58:2f:a6:3b:03:df:81:ca:3d:64:0a: 89:64:5b:47:7f:fb:7f:53:63:85:df:b7:c4:49:bd: 84:a1:83:bd:76:54:a5:1b:fd:17:8b:9c:0d:24:fe: 7b:88:af:b4:92:d7:ea:f5:db:fb:ae:e9:ab:ef:0d: f1:89:ae:55:73:7d:e1:e8:a1:df:0b:6c:af:24:a8: ff:38:bc:16:0c:09:b7:c7:bf:1e:c1:59:8e:35:d6: 42:8a:95:13:2d:ce:a4:2f:2d:66:62:52:dd:89:c4: 45:17:6d:67:6e:f2:8a:96:b9:0e:25:c3:4d:44:a4: c0:20:99:26:54:b2:07:16:86:c3:8a:e0:97:44:c5: 24:1e:67:a7:4d:19:48:2c:00:11:45:1d:10:43:60: be:14:5a:31:01:57:9c:12:8b:18:11:7c:6a:be:ae: f8:90:1c:46:68:f9:05:ae:83:e8:9a:7d:6e:f5:bd: b9:26:c4:29:6f:8d:30:19:38:9c:ef:52:70:45:25: 08:ce:24:8b:80:07:0f:50:47:95:1f:97:c8:84:67: 60:9a:d0:cb:e8:da:e5:3b:e6:55:d3:56:36:e5:07: e8:63:2a:11:10:f6:d0:95:bf:6a:f7:92:08:f8:fd: a9:e8:94:dd:d7:f9:9f:ad:04:ef:e9:94:47:ac:8b: 4a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:8A:5F:7B:2C:E3:A4:51:A2:3D:EE:4C:40:CA:4B:C5:47:AF:13:DA X509v3 Authority Key Identifier: keyid:FF:4F:1D:48:A6:08:8F:EC:5E:D7:32:70:F8:20:68:A4:36:39:1A:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/FF4F1D48A6088FEC5ED73270F82068A436391A71.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:e4:8e:a2:c4:33:68:5c:89:94:6a:d6:7a:b5:bf:73:4c:25: c6:4f:0e:44:7e:aa:91:7a:07:c6:34:fd:1d:05:ec:8f:8d:32: 58:4b:78:fd:b7:f6:b8:7b:0c:fc:61:e5:36:79:4b:26:26:41: 40:46:f3:6a:ba:4b:f9:f3:ce:51:5f:ce:00:ad:02:f6:22:b0: 60:50:78:3c:5a:2f:15:e6:c9:01:3c:3d:6b:a4:d4:63:84:19: da:2f:d7:4b:21:34:54:3c:7c:f9:6c:b1:dc:1a:dd:92:27:cf: 70:e3:cc:33:2b:c3:89:ca:d1:20:5d:83:7a:c0:5f:06:db:34: 23:ef:a5:9f:63:f3:a5:00:14:63:cc:ab:79:e6:cb:ae:bd:64: 11:3e:5a:73:e8:4f:27:82:08:9c:01:3f:47:43:65:e1:db:58: f8:4a:e7:79:7b:08:4a:eb:73:3c:fe:c5:20:4e:08:83:c8:fe: 19:bd:39:e2:62:a8:e0:d0:75:20:9e:27:74:33:cc:0b:04:d0: 6b:5d:fe:b4:56:e7:24:77:18:f2:05:e9:82:fb:12:ce:1e:aa: 4e:08:ba:1a:55:93:fa:a8:a5:dc:9f:81:c0:6e:57:f0:9d:08: f4:21:6e:c3:59:30:d8:5d:bb:01:3e:ff:26:a7:7e:4f:66:e4: 91:8e:e3:36 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUecYg4IN5zp/OarGu7PPnAiOkmSYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY0RjFENDhBNjA4OEZFQzVFRDczMjcwRjgyMDY4QTQz NjM5MUE3MTAeFw0yNjA1MjYyMDE2MTdaFw0yNjA1MjcyMjE1MTdaMDMxMTAvBgNV BAMTKDFEOEE1RjdCMkNFM0E0NTFBMjNERUU0QzQwQ0E0QkM1NDdBRjEzREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJDc9YL6Y7A9+Byj1kColkW0d/ +39TY4Xft8RJvYShg712VKUb/ReLnA0k/nuIr7SS1+r12/uu6avvDfGJrlVzfeHo od8LbK8kqP84vBYMCbfHvx7BWY411kKKlRMtzqQvLWZiUt2JxEUXbWdu8oqWuQ4l w01EpMAgmSZUsgcWhsOK4JdExSQeZ6dNGUgsABFFHRBDYL4UWjEBV5wSixgRfGq+ rviQHEZo+QWug+iafW71vbkmxClvjTAZOJzvUnBFJQjOJIuABw9QR5Ufl8iEZ2Ca 0Mvo2uU75lXTVjblB+hjKhEQ9tCVv2r3kgj4/anolN3X+Z+tBO/plEesi0pdAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUHYpfeyzjpFGiPe5MQMpLxUevE9owHwYDVR0j BBgwFoAU/08dSKYIj+xe1zJw+CBopDY5GnEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjJhODA2ODItYzU0Yy00ZDVhLTk0NTYtYjIzOTI1MzA5 NzMyLzIvRkY0RjFENDhBNjA4OEZFQzVFRDczMjcwRjgyMDY4QTQzNjM5MUE3MS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0ZGNEYxRDQ4QTYwODhG RUM1RUQ3MzI3MEY4MjA2OEE0MzYzOTFBNzEuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMjJhODA2ODItYzU0Yy00ZDVhLTk0NTYtYjIzOTI1MzA5NzMy LzIvRkY0RjFENDhBNjA4OEZFQzVFRDczMjcwRjgyMDY4QTQzNjM5MUE3MS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAEnkjqLEM2hciZRq1nq1v3NMJcZPDkR+qpF6B8Y0/R0F7I+NMlhLeP23 9rh7DPxh5TZ5SyYmQUBG82q6S/nzzlFfzgCtAvYisGBQeDxaLxXmyQE8PWuk1GOE Gdov10shNFQ8fPlssdwa3ZInz3DjzDMrw4nK0SBdg3rAXwbbNCPvpZ9j86UAFGPM q3nmy669ZBE+WnPoTyeCCJwBP0dDZeHbWPhK53l7CErrczz+xSBOCIPI/hm9OeJi qODQdSCeJ3QzzAsE0Gtd/rRW5yR3GPIF6YL7Es4eqk4IuhpVk/qopdyfgcBuV/Cd CPQhbsNZMNhduwE+/yanfk9m5JGO4zY= -----END CERTIFICATE-----Generated at Wed May 27 16:16:10 2026 by rpki-client