$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft File: 553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft (raw, json) Hash identifier: mUZ6AWMvFg2XRpz9gOeA11PTMcjDMh+jGuut/YqU6zE= Subject key identifier: 15:AD:B8:D4:1C:54:39:03:E7:68:9C:21:E3:C8:7A:25:64:CA:B6:B2 Authority key identifier: 55:3D:76:11:EA:6B:CE:5E:C7:96:69:E4:B1:F1:47:F5:9C:2A:0E:EE Certificate issuer: /CN=553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE Certificate serial: 404799809CD0B388AEC0118EB8F68F829B078B26 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft Manifest number: 01DE Signing time: Thu 25 Jun 2026 02:26:14 +0000 Manifest this update: Thu 25 Jun 2026 02:21:14 +0000 Manifest next update: Fri 26 Jun 2026 04:05:14 +0000 Files and hashes: 1: 326130613a363034303a646230303a3a2f34302d3438203d3e20323131313531.roa (hash: vZ0SQM9g2f1tCR7NnyvJP9u2KEUCCZK7pU4499plOHw=) 2: 553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.crl (hash: PDh27viLVfOrYTEoRguYcBqvYLnd3aHSBWxgijlxbLo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.crl rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Jun 2026 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:47:99:80:9c:d0:b3:88:ae:c0:11:8e:b8:f6:8f:82:9b:07:8b:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE Validity Not Before: Jun 25 02:21:14 2026 GMT Not After : Jun 26 04:05:14 2026 GMT Subject: CN=15ADB8D41C543903E7689C21E3C87A2564CAB6B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:30:05:26:58:0e:a5:8a:01:00:e6:47:7d:f0: 2d:e0:56:05:a6:20:9a:e7:bc:8a:bf:7f:53:3d:df: c1:97:0c:30:dd:df:85:da:6c:7b:7d:7d:8a:1e:e4: e1:1d:a9:8f:b6:7d:45:a6:ba:2f:20:8f:cc:ab:1b: 7e:a2:12:ba:2f:94:bc:8b:ac:75:e5:c4:c2:bc:96: 02:38:fd:7e:29:d3:08:ea:18:ff:8e:51:53:cf:2b: a7:35:b6:7a:82:2c:36:e9:5e:ae:74:70:3c:67:2b: a2:77:f1:72:a7:ad:71:0c:c5:1f:47:fe:e6:cf:02: d2:38:01:99:4f:0e:36:a1:eb:39:15:de:db:ae:c3: 66:36:0c:44:86:07:c5:75:1f:27:5d:e9:34:d1:bb: 54:3f:63:50:b0:ec:03:bb:85:36:ec:83:ac:ac:f6: 66:53:1b:d2:87:31:aa:ec:49:1e:a8:49:21:00:f1: db:77:e6:3c:88:48:75:2b:ce:ef:f3:99:02:4a:5c: 44:51:e0:cd:1d:ee:ec:32:9b:e9:1b:1a:d8:5b:df: 7e:54:73:4e:a2:42:55:9f:d2:36:7f:cb:56:29:ba: e7:52:ac:2d:3c:b9:3a:ba:75:82:df:36:9f:74:d0: d1:32:fe:78:54:ae:86:72:d9:3b:de:6c:26:7d:e1: 7c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:AD:B8:D4:1C:54:39:03:E7:68:9C:21:E3:C8:7A:25:64:CA:B6:B2 X509v3 Authority Key Identifier: keyid:55:3D:76:11:EA:6B:CE:5E:C7:96:69:E4:B1:F1:47:F5:9C:2A:0E:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:7b:a6:6c:b3:c0:0f:b3:61:77:a9:1f:9b:80:bf:9a:4a:5b: bb:f8:2a:9f:33:26:02:ae:1f:73:70:c4:8a:ab:ba:0e:bb:9c: 03:a6:54:7e:a1:d9:0c:fe:5e:1e:d4:d3:33:2b:78:fc:73:15: eb:e1:1b:d8:99:8f:3f:45:f2:7c:d2:b1:7d:1b:a4:de:df:e8: 73:2f:8c:ec:b9:9d:e2:cc:1b:85:07:54:50:f4:a3:0c:8a:23: 3d:6d:7d:1e:f3:96:17:62:ff:4f:26:42:38:ef:e5:3b:fb:6c: fc:0f:30:ab:ed:57:dd:8d:65:ed:be:76:23:61:88:8e:72:b5: 15:67:80:ac:0b:4e:33:49:95:45:78:07:3e:18:26:68:6b:f2: 52:e9:e0:f9:9a:af:ff:e2:46:20:11:b5:fe:88:f0:9e:d8:a1: fc:2e:15:c6:ac:89:1a:9f:19:71:45:91:01:55:a9:26:09:31: 60:4f:86:e1:63:98:72:e1:15:71:9f:a2:c9:85:aa:3c:a1:1e: 9d:d2:d9:ee:86:6c:45:ff:f7:df:0b:82:32:35:0d:b9:4c:ea: 77:43:63:57:f2:b8:ca:52:69:81:72:c1:e6:45:10:95:80:f0: 3f:2d:16:ee:43:01:a7:31:27:57:30:83:bc:ab:6a:23:41:70: 3d:86:ea:76 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUQEeZgJzQs4iuwBGOuPaPgpsHiyYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUzRDc2MTFFQTZCQ0U1RUM3OTY2OUU0QjFGMTQ3RjU5 QzJBMEVFRTAeFw0yNjA2MjUwMjIxMTRaFw0yNjA2MjYwNDA1MTRaMDMxMTAvBgNV BAMTKDE1QURCOEQ0MUM1NDM5MDNFNzY4OUMyMUUzQzg3QTI1NjRDQUI2QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUMAUmWA6ligEA5kd98C3gVgWm IJrnvIq/f1M938GXDDDd34XabHt9fYoe5OEdqY+2fUWmui8gj8yrG36iErovlLyL rHXlxMK8lgI4/X4p0wjqGP+OUVPPK6c1tnqCLDbpXq50cDxnK6J38XKnrXEMxR9H /ubPAtI4AZlPDjah6zkV3tuuw2Y2DESGB8V1Hydd6TTRu1Q/Y1Cw7AO7hTbsg6ys 9mZTG9KHMarsSR6oSSEA8dt35jyISHUrzu/zmQJKXERR4M0d7uwym+kbGthb335U c06iQlWf0jZ/y1YpuudSrC08uTq6dYLfNp900NEy/nhUroZy2TvebCZ94XwlAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUFa241BxUOQPnaJwh48h6JWTKtrIwHwYDVR0j BBgwFoAUVT12Eeprzl7HlmnksfFH9ZwqDu4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzEyODI3MWUtYzI2OS00OTU0LTg3ZGItZDE4NGRmMTdm ODVjLzQvNTUzRDc2MTFFQTZCQ0U1RUM3OTY2OUU0QjFGMTQ3RjU5QzJBMEVFRS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzU1M0Q3NjExRUE2QkNF NUVDNzk2NjlFNEIxRjE0N0Y1OUMyQTBFRUUuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvYzEyODI3MWUtYzI2OS00OTU0LTg3ZGItZDE4NGRmMTdmODVj LzQvNTUzRDc2MTFFQTZCQ0U1RUM3OTY2OUU0QjFGMTQ3RjU5QzJBMEVFRS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAIV7pmyzwA+zYXepH5uAv5pKW7v4Kp8zJgKuH3NwxIqrug67nAOmVH6h 2Qz+Xh7U0zMrePxzFevhG9iZjz9F8nzSsX0bpN7f6HMvjOy5neLMG4UHVFD0owyK Iz1tfR7zlhdi/08mQjjv5Tv7bPwPMKvtV92NZe2+diNhiI5ytRVngKwLTjNJlUV4 Bz4YJmhr8lLp4Pmar//iRiARtf6I8J7YofwuFcasiRqfGXFFkQFVqSYJMWBPhuFj mHLhFXGfosmFqjyhHp3S2e6GbEX/998LgjI1DblM6ndDY1fyuMpSaYFyweZFEJWA 8D8tFu5DAacxJ1cwg7yraiNBcD2G6nY= -----END CERTIFICATE-----Generated at Thu Jun 25 06:59:11 2026 by rpki-client