$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft File: 3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft (raw, json) Hash identifier: QkmRgJ/QfXqwNZ3pXqB5ZyzwwuQ/RR7CLD14VQ5zOyM= Subject key identifier: DF:B1:3F:CE:FE:23:28:43:11:47:0A:35:EC:48:32:9C:99:32:87:E5 Authority key identifier: 3C:19:D9:EE:5E:B0:20:A8:65:2D:68:59:87:FE:CF:2A:76:BB:02:77 Certificate issuer: /CN=3C19D9EE5EB020A8652D685987FECF2A76BB0277 Certificate serial: 08F1B09F0B5B9231FA8EF0B1BD234FB928F656C4 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft Manifest number: 0108 Signing time: Wed 15 Jul 2026 03:49:14 +0000 Manifest this update: Wed 15 Jul 2026 03:44:14 +0000 Manifest next update: Thu 16 Jul 2026 07:29:14 +0000 Files and hashes: 1: 326130353a646663313a383063303a3a2f34322d3438203d3e20313937383134.roa (hash: +8Gtqve25qz7dj6RoaEfhzyMxoqEmhyXwj7/4y6S5ts=) 2: 326130353a646663313a383031303a3a2f34342d3438203d3e20323132313534.roa (hash: vZabrxyGvueVve0UIFCKkMx6oLP4C5qFMGRoAro/NOA=) 3: 326130353a646663313a383030303a3a2f34302d3434203d3e20323131343331.roa (hash: +461HFOd1+OqFF4HxgiLMZU5WmlfmbOlhpC36OHo5OY=) 4: 326130353a646663313a383030303a3a2f34342d3438203d3e20323034323931.roa (hash: TnmWJuZNY0DPgipWjil2ZXNBS0GgRAuBPJ9ypq6d80U=) 5: 326130353a646663313a383166303a3a2f34342d3438203d3e20323131343331.roa (hash: LLsi5WyK1XwYJWDjn6LXybqAQvMFc3aggLJjCnG0b1I=) 6: 326130353a646663313a383130303a3a2f34302d3438203d3e20323131343331.roa (hash: IJWnIfIqrQT/KRXbAy3Xfm9Y9DxNBR6JISgHxbdVPos=) 7: 3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl (hash: 0qZOQH/Ogrh1guOn9TOuuOZeuP8Vn3VXQP8xRb9v2uU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 16 Jul 2026 07:29:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:f1:b0:9f:0b:5b:92:31:fa:8e:f0:b1:bd:23:4f:b9:28:f6:56:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C19D9EE5EB020A8652D685987FECF2A76BB0277 Validity Not Before: Jul 15 03:44:14 2026 GMT Not After : Jul 16 07:29:14 2026 GMT Subject: CN=DFB13FCEFE23284311470A35EC48329C993287E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:9a:6c:cc:5a:6e:db:de:ad:f0:f7:20:04:97: d1:bc:df:18:2b:54:bc:40:6e:c7:36:96:45:42:c8: 36:0a:42:5a:b1:f1:c8:9b:9b:1a:56:37:17:2b:f7: a0:83:f2:6d:b0:df:a2:83:37:4f:d6:f0:56:18:f4: 89:2e:c4:97:cd:23:e4:75:a6:d6:50:d8:29:d8:24: 8c:8b:6f:79:d0:9c:6c:f2:5f:50:e3:ea:23:59:24: 86:32:41:7a:80:7d:54:b8:3e:b2:87:ba:61:b3:41: ab:dd:f7:b3:15:5b:f3:56:9c:68:b7:11:79:48:27: e7:38:51:94:03:b5:3a:1b:fe:58:05:da:3d:31:01: 64:ba:6b:38:88:41:5d:a4:c0:40:e3:d3:f4:2b:e9: 57:4a:4b:ff:41:2c:66:ed:e4:95:c2:1f:90:da:da: ee:29:b7:01:fc:40:16:a8:54:4d:d7:38:c6:39:94: 6f:99:93:ce:38:0a:87:ee:c2:d7:b8:97:ec:6c:93: 24:d1:8e:16:09:50:f6:b8:2e:65:8e:80:8c:a4:cc: de:6e:64:47:dd:f3:3b:e2:ff:ad:ab:19:e9:17:84: d3:0f:4c:60:3b:46:30:ce:16:cd:e0:c4:f1:09:30: 48:02:72:d9:b5:68:5c:00:ad:df:c7:66:35:de:9c: 65:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B1:3F:CE:FE:23:28:43:11:47:0A:35:EC:48:32:9C:99:32:87:E5 X509v3 Authority Key Identifier: keyid:3C:19:D9:EE:5E:B0:20:A8:65:2D:68:59:87:FE:CF:2A:76:BB:02:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:9f:4d:34:33:54:f3:d9:2f:f8:98:3d:3e:50:83:ab:73:34: d9:da:99:cf:bc:e8:dc:64:71:f4:b5:13:36:3a:4d:95:06:60: 61:3e:ae:f9:06:6d:53:d3:29:31:94:a9:35:95:2a:0b:0d:8d: a7:35:c6:2c:b2:1f:5a:c8:4a:9f:0b:c9:99:0c:91:24:d1:72: a7:44:2c:2b:86:51:39:71:cb:9d:c5:c5:6a:f5:9c:b4:9a:fc: 3b:20:86:80:ab:38:95:be:e3:2c:98:c4:de:dc:b6:f8:2f:96: c9:b5:4d:ce:6a:fc:22:26:0d:75:bc:24:fb:5b:c2:7d:69:bd: d3:90:71:fe:3a:e5:1f:18:5b:2a:c1:35:dc:9f:b5:e7:4d:12: 02:8b:1e:41:a7:ce:f2:a3:d0:81:14:8c:dc:56:52:9b:bf:c2: fb:95:3b:77:e4:fa:52:ec:e8:97:63:4c:70:27:ea:98:24:9e: 39:3e:e2:50:91:81:ee:bf:2c:5c:2c:e7:2e:17:0a:70:92:c5: af:80:06:ec:ff:88:5b:3b:21:35:db:1a:50:5d:bc:00:bb:58: 89:ef:d8:22:02:20:17:c1:dc:d9:2c:0e:19:23:a7:a7:cf:5f: a7:26:38:c9:da:77:85:37:d1:5d:75:15:12:16:67:8c:e2:ac: b0:12:07:b1 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUCPGwnwtbkjH6jvCxvSNPuSj2VsQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MxOUQ5RUU1RUIwMjBBODY1MkQ2ODU5ODdGRUNGMkE3 NkJCMDI3NzAeFw0yNjA3MTUwMzQ0MTRaFw0yNjA3MTYwNzI5MTRaMDMxMTAvBgNV BAMTKERGQjEzRkNFRkUyMzI4NDMxMTQ3MEEzNUVDNDgzMjlDOTkzMjg3RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdmmzMWm7b3q3w9yAEl9G83xgr VLxAbsc2lkVCyDYKQlqx8cibmxpWNxcr96CD8m2w36KDN0/W8FYY9IkuxJfNI+R1 ptZQ2CnYJIyLb3nQnGzyX1Dj6iNZJIYyQXqAfVS4PrKHumGzQavd97MVW/NWnGi3 EXlIJ+c4UZQDtTob/lgF2j0xAWS6aziIQV2kwEDj0/Qr6VdKS/9BLGbt5JXCH5Da 2u4ptwH8QBaoVE3XOMY5lG+Zk844Cofuwte4l+xskyTRjhYJUPa4LmWOgIykzN5u ZEfd8zvi/62rGekXhNMPTGA7RjDOFs3gxPEJMEgCctm1aFwArd/HZjXenGWrAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQU37E/zv4jKEMRRwo17EgynJkyh+UwHwYDVR0j BBgwFoAUPBnZ7l6wIKhlLWhZh/7PKna7AncwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzk5MjY1ZWYtMjJhOS00MTAwLWEyM2QtNTFhOWQ5ZmVl YjdkLzUvM0MxOUQ5RUU1RUIwMjBBODY1MkQ2ODU5ODdGRUNGMkE3NkJCMDI3Ny5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzNDMTlEOUVFNUVCMDIw QTg2NTJENjg1OTg3RkVDRjJBNzZCQjAyNzcuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvYzk5MjY1ZWYtMjJhOS00MTAwLWEyM2QtNTFhOWQ5ZmVlYjdk LzUvM0MxOUQ5RUU1RUIwMjBBODY1MkQ2ODU5ODdGRUNGMkE3NkJCMDI3Ny5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAJefTTQzVPPZL/iYPT5Qg6tzNNnamc+86NxkcfS1EzY6TZUGYGE+rvkG bVPTKTGUqTWVKgsNjac1xiyyH1rISp8LyZkMkSTRcqdELCuGUTlxy53FxWr1nLSa /DsghoCrOJW+4yyYxN7ctvgvlsm1Tc5q/CImDXW8JPtbwn1pvdOQcf465R8YWyrB NdyftedNEgKLHkGnzvKj0IEUjNxWUpu/wvuVO3fk+lLs6JdjTHAn6pgknjk+4lCR ge6/LFws5y4XCnCSxa+ABuz/iFs7ITXbGlBdvAC7WInv2CICIBfB3NksDhkjp6fP X6cmOMnad4U30V11FRIWZ4zirLASB7E= -----END CERTIFICATE-----Generated at Wed Jul 15 14:32:00 2026 by rpki-client