$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft File: 3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft (raw, json) Hash identifier: B+Aaj/NbMiFXjXRjMklTW+SLd5/0rSZi5OEuKw/m8gI= Subject key identifier: AE:62:AF:9C:F7:FC:06:27:FB:A4:07:E4:BA:76:20:BE:E8:A6:4C:BF Authority key identifier: 3C:19:D9:EE:5E:B0:20:A8:65:2D:68:59:87:FE:CF:2A:76:BB:02:77 Certificate issuer: /CN=3C19D9EE5EB020A8652D685987FECF2A76BB0277 Certificate serial: 6C6B9DE8458E0146C86AFF00CB84D7155CD8378C Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft Manifest number: 5A Signing time: Thu 26 Feb 2026 00:16:38 +0000 Manifest this update: Thu 26 Feb 2026 00:11:38 +0000 Manifest next update: Fri 27 Feb 2026 02:22:38 +0000 Files and hashes: 1: 326130353a646663313a383130303a3a2f34302d3438203d3e20323131343331.roa (hash: IJWnIfIqrQT/KRXbAy3Xfm9Y9DxNBR6JISgHxbdVPos=) 2: 326130353a646663313a383031303a3a2f34342d3438203d3e20323132313534.roa (hash: vZabrxyGvueVve0UIFCKkMx6oLP4C5qFMGRoAro/NOA=) 3: 326130353a646663313a383166303a3a2f34342d3438203d3e20323131343331.roa (hash: LLsi5WyK1XwYJWDjn6LXybqAQvMFc3aggLJjCnG0b1I=) 4: 326130353a646663313a383063303a3a2f34322d3438203d3e20313937383134.roa (hash: +8Gtqve25qz7dj6RoaEfhzyMxoqEmhyXwj7/4y6S5ts=) 5: 326130353a646663313a383030303a3a2f34342d3438203d3e20323034323931.roa (hash: TnmWJuZNY0DPgipWjil2ZXNBS0GgRAuBPJ9ypq6d80U=) 6: 3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl (hash: 2t41GoRV+ncPudDBaqBE8XvQV44OWL7DKuxInGwY890=) 7: 326130353a646663313a383030303a3a2f34302d3434203d3e20323131343331.roa (hash: +461HFOd1+OqFF4HxgiLMZU5WmlfmbOlhpC36OHo5OY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Feb 2026 02:22:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:6b:9d:e8:45:8e:01:46:c8:6a:ff:00:cb:84:d7:15:5c:d8:37:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C19D9EE5EB020A8652D685987FECF2A76BB0277 Validity Not Before: Feb 26 00:11:38 2026 GMT Not After : Feb 27 02:22:38 2026 GMT Subject: CN=AE62AF9CF7FC0627FBA407E4BA7620BEE8A64CBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:cf:72:a0:53:b8:af:29:11:fb:e4:0e:f7:7e: 20:5b:7e:85:e4:b7:cf:b4:17:f4:ca:b9:a1:a9:c7: 0d:92:d1:f3:8f:94:0e:57:16:90:f0:22:2f:0b:14: 32:08:26:10:85:51:cb:78:de:92:2e:b6:24:0f:0e: f8:f2:eb:b1:68:f0:44:f1:fb:c2:27:c9:44:cf:91: fe:cb:0a:f8:f1:03:1b:99:5f:6b:b3:93:dd:46:c8: 09:6a:24:9c:54:14:46:b5:40:89:40:45:28:a3:3a: 65:44:85:1e:45:9b:48:a0:9d:e3:3a:8b:c6:f3:84: 22:6d:c5:dc:8c:a7:0d:af:98:1c:98:ae:e9:06:58: 01:68:c4:59:fe:df:61:c9:d0:11:1d:5f:d3:82:2f: 96:a2:29:a2:32:4a:4e:2e:3d:d6:1f:19:c9:aa:16: 71:35:bc:74:b4:b3:33:13:5d:25:ab:be:bc:f4:4f: d1:2a:75:e4:fd:ca:6b:c6:6f:08:ac:d6:d3:8d:60: 31:5a:1a:3e:08:80:28:b5:6b:76:35:fb:ec:6f:2a: 5f:b3:57:f8:1d:a7:4c:6c:0b:8b:8d:8c:2b:dd:7a: c6:55:ca:3e:2d:f0:be:cb:4b:d4:b1:21:a5:12:ec: be:c2:18:68:64:ff:a0:2f:c7:9a:2a:fa:76:0d:75: 1e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:62:AF:9C:F7:FC:06:27:FB:A4:07:E4:BA:76:20:BE:E8:A6:4C:BF X509v3 Authority Key Identifier: keyid:3C:19:D9:EE:5E:B0:20:A8:65:2D:68:59:87:FE:CF:2A:76:BB:02:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:00:a1:85:cc:a2:9c:7f:88:c1:a5:7c:59:f1:05:ce:7a:1a: 6c:b2:8c:03:39:1b:60:f4:9b:c4:12:9b:2c:ca:eb:7f:1d:c0: 61:63:9d:34:13:ff:52:ed:47:63:59:d2:d6:ff:be:5d:bc:c7: 09:3f:d2:d9:45:fe:11:29:a6:89:62:c7:78:e9:99:c5:40:35: 1e:86:53:f3:3a:4b:dc:ab:98:41:b2:04:77:2b:a5:10:87:96: ec:56:fa:df:c4:4e:0a:5b:7e:fa:d9:85:75:1c:8e:22:c5:c4: 12:94:99:65:cf:c2:19:be:f0:69:1f:59:96:e3:60:f9:1a:11: 61:82:f1:09:00:ae:ba:06:e5:fb:9d:46:e2:4d:4a:b9:ae:c4: 22:ef:03:6c:38:79:cb:c8:7c:b3:2f:f8:ac:aa:82:fa:78:05: 42:c7:c9:e4:cb:8e:0b:a5:55:1d:6e:fc:03:0e:10:6d:7a:7f: 41:c5:bb:56:05:a2:b5:59:c1:f9:fd:39:2a:00:38:f7:8e:e1: ea:05:94:ec:30:cb:8b:5d:94:b9:28:f9:a0:63:78:9f:22:f8: 89:40:0d:c1:15:ac:e7:a3:df:71:9c:32:9e:54:5e:f9:b2:f8: 58:0f:28:e6:41:49:62:5b:d0:8e:3d:e9:53:b4:82:2d:6e:10: c1:59:51:52 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUbGud6EWOAUbIav8Ay4TXFVzYN4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MxOUQ5RUU1RUIwMjBBODY1MkQ2ODU5ODdGRUNGMkE3 NkJCMDI3NzAeFw0yNjAyMjYwMDExMzhaFw0yNjAyMjcwMjIyMzhaMDMxMTAvBgNV BAMTKEFFNjJBRjlDRjdGQzA2MjdGQkE0MDdFNEJBNzYyMEJFRThBNjRDQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxz3KgU7ivKRH75A73fiBbfoXk t8+0F/TKuaGpxw2S0fOPlA5XFpDwIi8LFDIIJhCFUct43pIutiQPDvjy67Fo8ETx +8InyUTPkf7LCvjxAxuZX2uzk91GyAlqJJxUFEa1QIlARSijOmVEhR5Fm0igneM6 i8bzhCJtxdyMpw2vmByYrukGWAFoxFn+32HJ0BEdX9OCL5aiKaIySk4uPdYfGcmq FnE1vHS0szMTXSWrvrz0T9EqdeT9ymvGbwis1tONYDFaGj4IgCi1a3Y1++xvKl+z V/gdp0xsC4uNjCvdesZVyj4t8L7LS9SxIaUS7L7CGGhk/6Avx5oq+nYNdR49AgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUrmKvnPf8Bif7pAfkunYgvuimTL8wHwYDVR0j BBgwFoAUPBnZ7l6wIKhlLWhZh/7PKna7AncwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzk5MjY1ZWYtMjJhOS00MTAwLWEyM2QtNTFhOWQ5ZmVl YjdkLzUvM0MxOUQ5RUU1RUIwMjBBODY1MkQ2ODU5ODdGRUNGMkE3NkJCMDI3Ny5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzNDMTlEOUVFNUVCMDIw QTg2NTJENjg1OTg3RkVDRjJBNzZCQjAyNzcuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvYzk5MjY1ZWYtMjJhOS00MTAwLWEyM2QtNTFhOWQ5ZmVlYjdk LzUvM0MxOUQ5RUU1RUIwMjBBODY1MkQ2ODU5ODdGRUNGMkE3NkJCMDI3Ny5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBALMAoYXMopx/iMGlfFnxBc56GmyyjAM5G2D0m8QSmyzK638dwGFjnTQT /1LtR2NZ0tb/vl28xwk/0tlF/hEppolix3jpmcVANR6GU/M6S9yrmEGyBHcrpRCH luxW+t/ETgpbfvrZhXUcjiLFxBKUmWXPwhm+8GkfWZbjYPkaEWGC8QkArroG5fud RuJNSrmuxCLvA2w4ecvIfLMv+Kyqgvp4BULHyeTLjgulVR1u/AMOEG16f0HFu1YF orVZwfn9OSoAOPeO4eoFlOwwy4tdlLko+aBjeJ8i+IlADcEVrOej33GcMp5UXvmy +FgPKOZBSWJb0I496VO0gi1uEMFZUVI= -----END CERTIFICATE-----Generated at Thu Feb 26 10:38:28 2026 by rpki-client