$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft File: 3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft (raw, json) Hash identifier: JW/APEL9cThC+FfvmDAGvtyxeUXseR5/ovsZ94TlSIc= Subject key identifier: A4:32:F1:51:20:55:88:5F:50:41:91:D5:DC:42:4F:79:6A:E8:BE:62 Authority key identifier: 3C:19:D9:EE:5E:B0:20:A8:65:2D:68:59:87:FE:CF:2A:76:BB:02:77 Certificate issuer: /CN=3C19D9EE5EB020A8652D685987FECF2A76BB0277 Certificate serial: 55692068C050EB82C309564F67A09C6DDA0D483B Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft Manifest number: 9A Signing time: Wed 15 Apr 2026 20:25:42 +0000 Manifest this update: Wed 15 Apr 2026 20:20:42 +0000 Manifest next update: Thu 16 Apr 2026 23:39:42 +0000 Files and hashes: 1: 326130353a646663313a383031303a3a2f34342d3438203d3e20323132313534.roa (hash: vZabrxyGvueVve0UIFCKkMx6oLP4C5qFMGRoAro/NOA=) 2: 3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl (hash: 0O3bGJD/wFcnMW/9W3gIKEKO/SEd5YG2H6mPjBM5W9g=) 3: 326130353a646663313a383166303a3a2f34342d3438203d3e20323131343331.roa (hash: LLsi5WyK1XwYJWDjn6LXybqAQvMFc3aggLJjCnG0b1I=) 4: 326130353a646663313a383130303a3a2f34302d3438203d3e20323131343331.roa (hash: IJWnIfIqrQT/KRXbAy3Xfm9Y9DxNBR6JISgHxbdVPos=) 5: 326130353a646663313a383030303a3a2f34302d3434203d3e20323131343331.roa (hash: +461HFOd1+OqFF4HxgiLMZU5WmlfmbOlhpC36OHo5OY=) 6: 326130353a646663313a383063303a3a2f34322d3438203d3e20313937383134.roa (hash: +8Gtqve25qz7dj6RoaEfhzyMxoqEmhyXwj7/4y6S5ts=) 7: 326130353a646663313a383030303a3a2f34342d3438203d3e20323034323931.roa (hash: TnmWJuZNY0DPgipWjil2ZXNBS0GgRAuBPJ9ypq6d80U=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 16 Apr 2026 21:11:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:69:20:68:c0:50:eb:82:c3:09:56:4f:67:a0:9c:6d:da:0d:48:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C19D9EE5EB020A8652D685987FECF2A76BB0277 Validity Not Before: Apr 15 20:20:42 2026 GMT Not After : Apr 16 23:39:42 2026 GMT Subject: CN=A432F1512055885F504191D5DC424F796AE8BE62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:59:3f:4f:7e:9c:b5:78:c5:f0:72:00:b1:99: 89:f7:53:f7:bf:68:8c:4d:64:5e:8b:4a:bd:25:ee: fb:7f:4b:fd:c7:95:4e:cf:7e:33:05:e2:ef:86:6f: 61:6b:c7:8b:24:1e:c2:02:58:35:3a:a8:6b:ea:03: ef:42:e6:9c:f0:e4:20:bd:d8:8f:33:f8:77:c4:9e: 5b:78:ff:df:f5:3e:89:cc:70:76:4c:1a:6c:7c:aa: 12:bb:5b:65:68:cc:75:71:de:b4:45:82:f1:f4:95: 2e:cf:35:64:58:83:ae:cd:61:ac:da:f5:db:5d:3b: 43:f3:dc:bf:d5:2b:20:76:f1:d9:b4:37:45:f1:78: 9e:e8:a5:08:69:3b:e0:60:bf:fc:e8:91:17:de:47: b4:7f:28:10:a8:e9:96:98:8d:76:0d:53:81:97:d5: c6:e5:1b:2c:c5:eb:a1:84:44:90:50:c4:93:c1:eb: fd:2c:cf:98:d8:40:e5:ce:db:f9:23:e4:55:3f:c8: 5c:ed:2f:61:3c:66:f5:34:ea:5a:cd:ac:29:94:c6: f1:10:f8:48:ad:89:4b:1c:63:c4:78:f8:5e:71:89: 17:94:04:ef:90:01:0b:6d:86:3b:92:e5:b4:a4:9e: 14:e8:1f:ef:5d:a1:1a:97:a4:6b:d4:91:40:cc:58: d3:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:32:F1:51:20:55:88:5F:50:41:91:D5:DC:42:4F:79:6A:E8:BE:62 X509v3 Authority Key Identifier: keyid:3C:19:D9:EE:5E:B0:20:A8:65:2D:68:59:87:FE:CF:2A:76:BB:02:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:59:f2:f6:91:e4:98:7e:ff:e3:03:4b:b9:01:1c:37:70:41: 1f:0e:22:51:20:eb:0b:38:1c:e6:90:cf:f4:10:89:f9:54:80: 34:0a:e7:d4:d6:d0:50:71:8d:02:ad:ad:83:63:87:39:2b:d5: c4:ba:fc:c5:31:a3:e6:51:b1:8f:d4:f9:78:34:bf:d2:a5:39: 2b:9f:a0:19:82:3c:d9:1c:49:42:c0:c2:bf:fe:8e:9b:8e:a2: 42:e0:d2:5d:cd:76:af:de:39:f3:8a:bc:2d:be:3e:ba:74:48: 8b:ad:53:d7:90:08:c2:87:33:5f:b3:12:f0:f1:ad:ce:b3:0d: d7:81:3c:00:4e:11:6c:88:a6:20:00:bc:d5:34:53:f6:bb:96: 9b:92:b6:6b:52:be:0d:f7:72:80:fa:68:f8:40:8f:30:24:9e: 24:06:25:73:07:8a:fe:ea:1e:53:cd:e2:79:e6:92:c6:e9:8c: ef:7a:31:e0:fa:88:3d:11:97:79:31:56:3a:fc:12:77:bb:a5: b6:ef:c7:9d:be:33:8c:59:d9:76:0c:48:6c:ac:cd:4a:9c:19: ce:59:2e:0f:f7:62:20:01:55:a1:f3:6d:2a:c4:89:28:01:7e: 39:38:27:8e:08:07:3b:dc:10:86:f5:ee:29:f0:35:fc:40:28: df:cf:82:f2 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUVWkgaMBQ64LDCVZPZ6CcbdoNSDswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MxOUQ5RUU1RUIwMjBBODY1MkQ2ODU5ODdGRUNGMkE3 NkJCMDI3NzAeFw0yNjA0MTUyMDIwNDJaFw0yNjA0MTYyMzM5NDJaMDMxMTAvBgNV BAMTKEE0MzJGMTUxMjA1NTg4NUY1MDQxOTFENURDNDI0Rjc5NkFFOEJFNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJWT9Pfpy1eMXwcgCxmYn3U/e/ aIxNZF6LSr0l7vt/S/3HlU7PfjMF4u+Gb2Frx4skHsICWDU6qGvqA+9C5pzw5CC9 2I8z+HfEnlt4/9/1PonMcHZMGmx8qhK7W2VozHVx3rRFgvH0lS7PNWRYg67NYaza 9dtdO0Pz3L/VKyB28dm0N0XxeJ7opQhpO+Bgv/zokRfeR7R/KBCo6ZaYjXYNU4GX 1cblGyzF66GERJBQxJPB6/0sz5jYQOXO2/kj5FU/yFztL2E8ZvU06lrNrCmUxvEQ +EitiUscY8R4+F5xiReUBO+QAQtthjuS5bSknhToH+9doRqXpGvUkUDMWNNNAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUpDLxUSBViF9QQZHV3EJPeWrovmIwHwYDVR0j BBgwFoAUPBnZ7l6wIKhlLWhZh/7PKna7AncwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzk5MjY1ZWYtMjJhOS00MTAwLWEyM2QtNTFhOWQ5ZmVl YjdkLzUvM0MxOUQ5RUU1RUIwMjBBODY1MkQ2ODU5ODdGRUNGMkE3NkJCMDI3Ny5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzNDMTlEOUVFNUVCMDIw QTg2NTJENjg1OTg3RkVDRjJBNzZCQjAyNzcuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvYzk5MjY1ZWYtMjJhOS00MTAwLWEyM2QtNTFhOWQ5ZmVlYjdk LzUvM0MxOUQ5RUU1RUIwMjBBODY1MkQ2ODU5ODdGRUNGMkE3NkJCMDI3Ny5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAHZZ8vaR5Jh+/+MDS7kBHDdwQR8OIlEg6ws4HOaQz/QQiflUgDQK59TW 0FBxjQKtrYNjhzkr1cS6/MUxo+ZRsY/U+Xg0v9KlOSufoBmCPNkcSULAwr/+jpuO okLg0l3Ndq/eOfOKvC2+Prp0SIutU9eQCMKHM1+zEvDxrc6zDdeBPABOEWyIpiAA vNU0U/a7lpuStmtSvg33coD6aPhAjzAkniQGJXMHiv7qHlPN4nnmksbpjO96MeD6 iD0Rl3kxVjr8Ene7pbbvx52+M4xZ2XYMSGyszUqcGc5ZLg/3YiABVaHzbSrEiSgB fjk4J44IBzvcEIb17inwNfxAKN/PgvI= -----END CERTIFICATE-----Generated at Thu Apr 16 09:37:22 2026 by rpki-client