$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft File: B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft (raw, json) Hash identifier: BytT/cyZ2kVMOSQ1G01yTBiw3oL8tzfH/4qrbjTDN7c= Subject key identifier: A8:CC:D5:31:EB:4F:D4:1E:36:C5:74:F5:5A:89:31:75:98:1B:C7:D7 Authority key identifier: B2:17:28:4E:A3:D5:38:44:B2:AF:52:70:AB:BA:A3:10:5B:8B:3F:45 Certificate issuer: /CN=B217284EA3D53844B2AF5270ABBAA3105B8B3F45 Certificate serial: 5DBBFD59661BE7F7A6162AFA9D418EBE9B29076B Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft Manifest number: 028D Signing time: Sun 11 Oct 2026 01:25:47 +0000 Manifest this update: Sun 11 Oct 2026 01:20:47 +0000 Manifest next update: Mon 12 Oct 2026 02:44:47 +0000 Files and hashes: 1: B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl (hash: NSKXgTh6hJOJTlQpRq2TX75jR9JCaw3X8j2WC5JNqD4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Oct 2026 02:44:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:bb:fd:59:66:1b:e7:f7:a6:16:2a:fa:9d:41:8e:be:9b:29:07:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B217284EA3D53844B2AF5270ABBAA3105B8B3F45 Validity Not Before: Oct 11 01:20:47 2026 GMT Not After : Oct 12 02:44:47 2026 GMT Subject: CN=A8CCD531EB4FD41E36C574F55A893175981BC7D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f3:a2:ac:fc:48:8e:8c:3a:6b:c5:f1:85:cb: 45:4b:36:f7:c5:4b:47:53:a4:40:82:6d:81:4e:c7: b1:db:ac:2a:14:5d:d3:53:f0:b3:49:7d:8f:a4:11: b4:a0:a5:14:77:fa:c5:7a:98:e0:4e:fd:1e:6c:e8: b7:60:3c:dd:ae:74:38:42:96:71:8e:3d:57:80:b3: e2:34:bb:ca:f7:f2:cf:91:29:b1:51:d6:de:73:86: 38:c7:3d:72:d6:7d:0f:41:52:b4:5e:47:79:9b:f2: c7:6e:a2:73:e8:0f:20:5b:b1:d7:46:83:fc:e0:89: 43:74:fd:c5:9c:17:c6:bb:e8:07:db:24:f9:74:80: cb:9f:63:5b:4c:3b:83:15:fa:e1:a0:91:7f:fb:df: 71:93:8a:f6:85:45:4e:6a:0d:e9:14:95:35:9a:9f: af:0f:14:9b:a8:8c:98:54:54:25:61:d8:c8:7e:86: d3:4e:2b:b8:27:dd:e8:6d:3b:3e:c6:55:91:39:16: 8b:56:ba:a3:1e:4b:db:f3:0e:26:ce:fe:f6:31:46: 69:af:e5:a8:0e:47:59:17:31:62:64:e9:52:10:81: 59:56:94:b1:1b:68:dd:14:b0:0f:dc:3f:3e:11:4c: 63:11:43:73:c3:02:31:52:a3:e4:55:7c:92:f5:f4: cb:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:CC:D5:31:EB:4F:D4:1E:36:C5:74:F5:5A:89:31:75:98:1B:C7:D7 X509v3 Authority Key Identifier: keyid:B2:17:28:4E:A3:D5:38:44:B2:AF:52:70:AB:BA:A3:10:5B:8B:3F:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:1f:29:67:de:4e:4c:05:b8:ad:98:0f:e3:96:df:09:3a:4b: 5c:e9:e4:99:4f:4d:5d:17:11:49:7a:94:77:1b:30:ef:a3:45: 81:86:f6:0e:ed:be:4f:45:fc:c3:ba:6a:4e:1a:96:70:bf:b9: a9:40:d5:5d:c9:86:58:3c:11:ef:dc:96:46:43:08:e0:94:53: 6e:ae:45:61:f8:3d:5d:8f:b8:76:93:b1:09:d4:85:2f:79:13: e6:fd:b4:9c:83:76:a1:c8:3a:86:18:17:56:18:a0:1f:6c:f9: 61:4f:e0:9e:c0:73:3c:00:ac:97:98:ae:93:3b:90:d7:d6:91: 8f:d2:9d:7d:7a:25:ea:64:72:84:63:f5:56:a0:9e:34:43:95: 07:dd:36:be:54:ab:96:66:9d:19:38:1d:d0:98:d8:f1:21:71: 03:f9:a7:1e:a0:89:aa:39:fc:8b:0b:3f:c4:10:84:fa:75:92: 7f:c9:62:ef:c4:3b:09:f9:0d:f0:e0:79:d7:a1:da:19:24:bb: 64:87:2c:fa:fb:8a:ea:85:77:3b:1b:ec:60:ca:09:4d:7c:1b: 64:6d:8c:ad:65:64:83:2a:82:1c:a7:04:fa:26:ed:f4:0e:2f: 28:6d:b2:9d:58:1e:4b:68:00:1f:bf:d2:d2:92:eb:bb:c4:9a: d6:8a:41:a3 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUXbv9WWYb5/emFir6nUGOvpspB2swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIxNzI4NEVBM0Q1Mzg0NEIyQUY1MjcwQUJCQUEzMTA1 QjhCM0Y0NTAeFw0yNjEwMTEwMTIwNDdaFw0yNjEwMTIwMjQ0NDdaMDMxMTAvBgNV BAMTKEE4Q0NENTMxRUI0RkQ0MUUzNkM1NzRGNTVBODkzMTc1OTgxQkM3RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv86Ks/EiOjDprxfGFy0VLNvfF S0dTpECCbYFOx7HbrCoUXdNT8LNJfY+kEbSgpRR3+sV6mOBO/R5s6LdgPN2udDhC lnGOPVeAs+I0u8r38s+RKbFR1t5zhjjHPXLWfQ9BUrReR3mb8sduonPoDyBbsddG g/zgiUN0/cWcF8a76AfbJPl0gMufY1tMO4MV+uGgkX/733GTivaFRU5qDekUlTWa n68PFJuojJhUVCVh2Mh+htNOK7gn3ehtOz7GVZE5FotWuqMeS9vzDibO/vYxRmmv 5agOR1kXMWJk6VIQgVlWlLEbaN0UsA/cPz4RTGMRQ3PDAjFSo+RVfJL19Mu7AgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUqMzVMetP1B42xXT1WokxdZgbx9cwHwYDVR0j BBgwFoAUshcoTqPVOESyr1Jwq7qjEFuLP0UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzUvQjIxNzI4NEVBM0Q1Mzg0NEIyQUY1MjcwQUJCQUEzMTA1QjhCM0Y0NS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0IyMTcyODRFQTNENTM4 NDRCMkFGNTI3MEFCQkFBMzEwNUI4QjNGNDUuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2NhZTNm LzUvQjIxNzI4NEVBM0Q1Mzg0NEIyQUY1MjcwQUJCQUEzMTA1QjhCM0Y0NS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBACsfKWfeTkwFuK2YD+OW3wk6S1zp5JlPTV0XEUl6lHcbMO+jRYGG9g7t vk9F/MO6ak4alnC/ualA1V3Jhlg8Ee/clkZDCOCUU26uRWH4PV2PuHaTsQnUhS95 E+b9tJyDdqHIOoYYF1YYoB9s+WFP4J7AczwArJeYrpM7kNfWkY/SnX16JepkcoRj 9VagnjRDlQfdNr5Uq5ZmnRk4HdCY2PEhcQP5px6giao5/IsLP8QQhPp1kn/JYu/E Own5DfDgedeh2hkku2SHLPr7iuqFdzsb7GDKCU18G2RtjK1lZIMqghynBPom7fQO Lyhtsp1YHktoAB+/0tKS67vEmtaKQaM= -----END CERTIFICATE-----Generated at Sun Oct 11 14:34:12 2026 by rpki-client