$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft File: 553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft (raw, json) Hash identifier: hQI+vsu9SjWyPs7KbGg/iDATfZXDAttkLDpb5JZM9EY= Subject key identifier: 2C:59:2F:92:A3:E1:7B:52:64:0C:35:7B:9D:04:E9:6A:01:99:00:F1 Authority key identifier: 55:3D:76:11:EA:6B:CE:5E:C7:96:69:E4:B1:F1:47:F5:9C:2A:0E:EE Certificate issuer: /CN=553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE Certificate serial: 51210A0BE3C3B05BB24C0B9818E8848D135A5DB4 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft Manifest number: 019F Signing time: Sat 09 May 2026 05:07:50 +0000 Manifest this update: Sat 09 May 2026 05:02:50 +0000 Manifest next update: Sun 10 May 2026 06:21:50 +0000 Files and hashes: 1: 326130613a363034303a646230303a3a2f34302d3438203d3e20323131313531.roa (hash: +fw3SQMO92ygFCahRkoicBXvG1K7ggV1DgUpkn+lL98=) 2: 553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.crl (hash: kZAJLQqbPjMKeWXEnGwHrFUmUmTbWDOjb5l9Gi3/J8I=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.crl rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 10 May 2026 05:18:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:21:0a:0b:e3:c3:b0:5b:b2:4c:0b:98:18:e8:84:8d:13:5a:5d:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE Validity Not Before: May 9 05:02:50 2026 GMT Not After : May 10 06:21:50 2026 GMT Subject: CN=2C592F92A3E17B52640C357B9D04E96A019900F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:73:6a:db:d5:37:91:4e:f3:8b:c2:99:23:f8: ad:86:95:a2:9c:8c:8d:65:3e:75:10:61:32:6e:c0: 6d:38:06:4a:a3:f3:03:6a:8b:de:2c:c4:21:8a:bc: a7:16:7f:92:b4:30:be:13:e4:47:c4:f1:52:bf:97: e4:b7:9c:96:a2:40:79:61:c6:8c:93:6f:92:9f:20: 34:e9:f1:79:e7:bd:84:67:8b:8f:c4:5e:e3:7d:0b: f3:80:ca:91:e0:3f:3f:6f:03:4d:40:d8:3a:6a:cf: 05:b3:84:0b:b7:1b:91:18:01:a6:ec:56:53:75:82: 77:9a:93:d4:8d:cf:4f:9c:19:79:50:62:6e:16:a4: d8:a1:02:dc:f9:9c:8a:22:5b:ad:57:98:d2:cb:9b: e6:2c:8e:7c:37:51:23:97:10:53:63:30:57:c0:b0: d5:d2:ad:91:13:37:ec:d7:94:fd:df:aa:4b:0c:80: c8:f4:3a:8e:ff:0a:77:fa:f8:5c:7e:a9:96:82:66: 42:6c:3e:d1:02:18:c6:63:bb:c0:25:91:00:21:f0: c3:89:a5:da:41:64:45:90:28:aa:9d:41:35:f2:1b: ff:eb:66:b4:dd:f4:5d:18:b7:9d:c2:5d:38:d6:f5: 3d:2c:2f:22:12:b0:e4:c2:ed:98:0a:9c:64:38:c7: 85:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:59:2F:92:A3:E1:7B:52:64:0C:35:7B:9D:04:E9:6A:01:99:00:F1 X509v3 Authority Key Identifier: keyid:55:3D:76:11:EA:6B:CE:5E:C7:96:69:E4:B1:F1:47:F5:9C:2A:0E:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:74:e1:07:4d:e0:33:72:96:d1:d4:41:1c:6c:1e:86:21:d8: 41:0f:74:e8:fd:2e:b0:42:df:28:cc:f7:c0:49:0c:2b:5d:4c: 73:73:6a:c1:d5:2b:b6:de:9f:19:d7:58:68:97:2d:6e:49:d4: 76:ea:fc:f7:06:b5:e7:1c:9c:16:eb:ba:1f:bf:08:c7:2f:8b: 0e:0b:91:20:a8:3a:88:03:67:ba:55:2f:a8:36:60:ff:63:0d: 5d:04:03:ab:e6:b0:e0:41:9b:87:9e:40:65:6c:2b:99:11:4f: 23:53:b9:96:d2:78:5f:32:f1:c0:39:b6:8e:f0:50:bf:9f:19: 4a:1c:8b:56:de:39:68:41:cb:08:d1:79:1a:7a:3d:fc:bd:48: 5f:bc:ee:69:44:2d:52:28:73:02:9b:4f:b9:bf:26:5b:98:d4: 6b:fb:1b:a7:ba:47:e7:71:4d:11:c5:4a:56:5d:52:1d:6f:55: e2:9c:39:fb:be:a1:c9:78:15:bd:00:7b:b4:20:96:00:7f:a3: b7:28:ce:69:60:be:14:6e:8a:20:5e:08:02:74:e5:41:9b:4b: 64:77:e7:78:44:b9:c0:6a:16:91:61:ca:13:68:e6:1d:25:2c: ff:33:af:41:4f:c3:14:b7:7c:29:39:72:23:e0:81:a0:8a:8c: 6f:85:74:8c -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUUSEKC+PDsFuyTAuYGOiEjRNaXbQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUzRDc2MTFFQTZCQ0U1RUM3OTY2OUU0QjFGMTQ3RjU5 QzJBMEVFRTAeFw0yNjA1MDkwNTAyNTBaFw0yNjA1MTAwNjIxNTBaMDMxMTAvBgNV BAMTKDJDNTkyRjkyQTNFMTdCNTI2NDBDMzU3QjlEMDRFOTZBMDE5OTAwRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRc2rb1TeRTvOLwpkj+K2GlaKc jI1lPnUQYTJuwG04Bkqj8wNqi94sxCGKvKcWf5K0ML4T5EfE8VK/l+S3nJaiQHlh xoyTb5KfIDTp8XnnvYRni4/EXuN9C/OAypHgPz9vA01A2DpqzwWzhAu3G5EYAabs VlN1gneak9SNz0+cGXlQYm4WpNihAtz5nIoiW61XmNLLm+Ysjnw3USOXEFNjMFfA sNXSrZETN+zXlP3fqksMgMj0Oo7/Cnf6+Fx+qZaCZkJsPtECGMZju8AlkQAh8MOJ pdpBZEWQKKqdQTXyG//rZrTd9F0Yt53CXTjW9T0sLyISsOTC7ZgKnGQ4x4XPAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQULFkvkqPhe1JkDDV7nQTpagGZAPEwHwYDVR0j BBgwFoAUVT12Eeprzl7HlmnksfFH9ZwqDu4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzEyODI3MWUtYzI2OS00OTU0LTg3ZGItZDE4NGRmMTdm ODVjLzQvNTUzRDc2MTFFQTZCQ0U1RUM3OTY2OUU0QjFGMTQ3RjU5QzJBMEVFRS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzU1M0Q3NjExRUE2QkNF NUVDNzk2NjlFNEIxRjE0N0Y1OUMyQTBFRUUuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvYzEyODI3MWUtYzI2OS00OTU0LTg3ZGItZDE4NGRmMTdmODVj LzQvNTUzRDc2MTFFQTZCQ0U1RUM3OTY2OUU0QjFGMTQ3RjU5QzJBMEVFRS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAId04QdN4DNyltHUQRxsHoYh2EEPdOj9LrBC3yjM98BJDCtdTHNzasHV K7benxnXWGiXLW5J1Hbq/PcGteccnBbruh+/CMcviw4LkSCoOogDZ7pVL6g2YP9j DV0EA6vmsOBBm4eeQGVsK5kRTyNTuZbSeF8y8cA5to7wUL+fGUoci1beOWhBywjR eRp6Pfy9SF+87mlELVIocwKbT7m/JluY1Gv7G6e6R+dxTRHFSlZdUh1vVeKcOfu+ ocl4Fb0Ae7QglgB/o7cozmlgvhRuiiBeCAJ05UGbS2R353hEucBqFpFhyhNo5h0l LP8zr0FPwxS3fCk5ciPggaCKjG+FdIw= -----END CERTIFICATE-----Generated at Sat May 9 21:25:41 2026 by rpki-client