$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft File: 553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft (raw, json) Hash identifier: zgtJ8vGpTZYVlQEZCLeH8HIU6uCvgqIWRoItQtdaeyk= Subject key identifier: 14:42:E4:A8:B0:B6:A7:32:80:8D:33:85:03:96:CF:3E:8D:14:82:E0 Authority key identifier: 55:3D:76:11:EA:6B:CE:5E:C7:96:69:E4:B1:F1:47:F5:9C:2A:0E:EE Certificate issuer: /CN=553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE Certificate serial: 04DC5F2C7AAF9DDAD2977DBB97ADEA57AC92A1D9 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft Manifest number: 0160 Signing time: Mon 23 Mar 2026 13:58:14 +0000 Manifest this update: Mon 23 Mar 2026 13:53:14 +0000 Manifest next update: Tue 24 Mar 2026 14:07:14 +0000 Files and hashes: 1: 553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.crl (hash: kN4EO51nYGD5Cs6SRJG1Pm06LFbshnHiytmO3uKe4Cc=) 2: 326130613a363034303a646230303a3a2f34302d3438203d3e20323131313531.roa (hash: +fw3SQMO92ygFCahRkoicBXvG1K7ggV1DgUpkn+lL98=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.crl rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 24 Mar 2026 06:22:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:dc:5f:2c:7a:af:9d:da:d2:97:7d:bb:97:ad:ea:57:ac:92:a1:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE Validity Not Before: Mar 23 13:53:14 2026 GMT Not After : Mar 24 14:07:14 2026 GMT Subject: CN=1442E4A8B0B6A732808D33850396CF3E8D1482E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4b:3d:7c:1e:19:a8:80:5e:0f:0d:b9:7d:bd: a1:af:af:2f:1e:d0:23:05:60:38:1d:8f:84:eb:ab: 0d:6b:34:3b:7b:5e:ce:fd:12:2c:ce:c3:a2:c7:f4: 34:d7:b1:6c:a6:ef:01:58:20:63:a6:e4:a9:67:87: 9e:15:41:a9:a3:11:b4:d8:7e:4c:38:80:25:72:05: f8:7e:09:50:e0:c4:cf:c3:50:a4:77:a3:9f:70:c9: ae:79:fb:d3:f3:f2:55:c2:cc:bc:1c:d6:cf:dc:b0: 5f:99:88:ea:be:85:5d:03:26:b9:ff:19:db:97:33: 93:84:a2:c0:cc:44:d1:53:b4:db:2f:d2:79:2b:9e: 7a:03:85:bc:e0:fd:3e:a9:99:30:bf:60:74:fd:24: ea:9a:68:63:f0:f7:c3:d1:86:45:e3:14:ff:b7:0f: ad:21:c8:b1:c6:f8:b5:d0:7a:df:14:33:bb:61:24: cf:0e:91:29:5a:46:6a:d3:0d:3e:8a:dd:62:0d:e6: df:1d:f7:d7:6e:46:66:de:50:f2:23:52:44:a2:3f: 6e:1c:a3:c6:67:46:b2:73:4d:dc:46:6d:3b:2d:a8: 2f:4d:eb:73:a4:03:51:12:0f:f1:ac:27:be:a0:f3: 44:d8:84:54:bf:6b:f8:ae:fd:91:46:44:dd:b2:ce: bd:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:42:E4:A8:B0:B6:A7:32:80:8D:33:85:03:96:CF:3E:8D:14:82:E0 X509v3 Authority Key Identifier: keyid:55:3D:76:11:EA:6B:CE:5E:C7:96:69:E4:B1:F1:47:F5:9C:2A:0E:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:f6:be:b7:d9:32:c4:58:62:35:9b:d6:36:85:59:c0:50:7b: ff:b2:94:20:42:29:b9:bd:3b:7e:f7:f5:b4:31:40:25:16:c9: 6e:d2:6c:35:9e:85:ae:38:85:9c:b2:28:53:d0:0f:ed:be:04: 66:f6:b1:2f:39:0b:ab:3b:63:f9:c8:4f:cc:aa:f3:fd:4a:39: 76:74:1e:a0:69:35:24:05:47:62:b6:36:a2:86:d9:41:c1:6c: 51:a0:1e:ee:49:ba:ff:83:04:dc:49:6a:61:c3:eb:a7:7c:cf: 4b:1b:03:ae:48:1c:dc:20:c9:95:65:c9:6a:c4:08:1e:25:5b: ca:35:05:4a:9a:fe:80:93:a4:82:b1:99:d5:e3:51:d3:af:5f: 55:d7:2b:94:8b:bb:bd:ac:69:3c:22:32:2e:cd:9f:b0:e3:2a: ff:70:7e:d3:85:4a:be:5b:8f:10:25:36:e4:68:b4:3c:dd:b3: 0c:01:e5:3c:9c:f6:7b:65:99:ed:26:fe:2a:d6:0f:c3:76:88: 89:1a:e1:a6:97:a1:6d:97:fc:f7:1c:85:e3:56:67:d5:6d:67: 45:7b:98:49:14:e6:ef:48:b3:b8:78:ae:32:e7:4f:e5:5e:07: c0:df:33:0d:3e:68:d9:8b:0c:85:6f:1a:e5:df:a1:54:fb:2d: d6:ba:31:90 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUBNxfLHqvndrSl327l63qV6ySodkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUzRDc2MTFFQTZCQ0U1RUM3OTY2OUU0QjFGMTQ3RjU5 QzJBMEVFRTAeFw0yNjAzMjMxMzUzMTRaFw0yNjAzMjQxNDA3MTRaMDMxMTAvBgNV BAMTKDE0NDJFNEE4QjBCNkE3MzI4MDhEMzM4NTAzOTZDRjNFOEQxNDgyRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgSz18HhmogF4PDbl9vaGvry8e 0CMFYDgdj4Trqw1rNDt7Xs79EizOw6LH9DTXsWym7wFYIGOm5Klnh54VQamjEbTY fkw4gCVyBfh+CVDgxM/DUKR3o59wya55+9Pz8lXCzLwc1s/csF+ZiOq+hV0DJrn/ GduXM5OEosDMRNFTtNsv0nkrnnoDhbzg/T6pmTC/YHT9JOqaaGPw98PRhkXjFP+3 D60hyLHG+LXQet8UM7thJM8OkSlaRmrTDT6K3WIN5t8d99duRmbeUPIjUkSiP24c o8ZnRrJzTdxGbTstqC9N63OkA1ESD/GsJ76g80TYhFS/a/iu/ZFGRN2yzr1LAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUFELkqLC2pzKAjTOFA5bPPo0UguAwHwYDVR0j BBgwFoAUVT12Eeprzl7HlmnksfFH9ZwqDu4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzEyODI3MWUtYzI2OS00OTU0LTg3ZGItZDE4NGRmMTdm ODVjLzQvNTUzRDc2MTFFQTZCQ0U1RUM3OTY2OUU0QjFGMTQ3RjU5QzJBMEVFRS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzU1M0Q3NjExRUE2QkNF NUVDNzk2NjlFNEIxRjE0N0Y1OUMyQTBFRUUuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvYzEyODI3MWUtYzI2OS00OTU0LTg3ZGItZDE4NGRmMTdmODVj LzQvNTUzRDc2MTFFQTZCQ0U1RUM3OTY2OUU0QjFGMTQ3RjU5QzJBMEVFRS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAFj2vrfZMsRYYjWb1jaFWcBQe/+ylCBCKbm9O3739bQxQCUWyW7SbDWe ha44hZyyKFPQD+2+BGb2sS85C6s7Y/nIT8yq8/1KOXZ0HqBpNSQFR2K2NqKG2UHB bFGgHu5Juv+DBNxJamHD66d8z0sbA65IHNwgyZVlyWrECB4lW8o1BUqa/oCTpIKx mdXjUdOvX1XXK5SLu72saTwiMi7Nn7DjKv9wftOFSr5bjxAlNuRotDzdswwB5Tyc 9ntlme0m/irWD8N2iIka4aaXoW2X/PccheNWZ9VtZ0V7mEkU5u9Is7h4rjLnT+Ve B8DfMw0+aNmLDIVvGuXfoVT7Lda6MZA= -----END CERTIFICATE-----Generated at Mon Mar 23 22:48:38 2026 by rpki-client