$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft File: 6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft (raw, json) Hash identifier: 0JqubTTxW8t94TO+X2mG97RCEfflr8FPzPIWG5aotLI= Subject key identifier: 74:C4:D7:A3:74:8E:E4:D9:87:2F:21:56:BA:99:29:21:38:11:1B:B8 Authority key identifier: 69:86:DC:82:81:2C:47:DA:14:99:4B:8E:6E:72:7B:72:E0:B2:F8:D8 Certificate issuer: /CN=6986DC82812C47DA14994B8E6E727B72E0B2F8D8 Certificate serial: 26CB755FA76012818381234A20869BD6CC5A78DF Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft Manifest number: 01C8 Signing time: Mon 21 Sep 2026 18:11:45 +0000 Manifest this update: Mon 21 Sep 2026 18:06:45 +0000 Manifest next update: Tue 22 Sep 2026 20:11:45 +0000 Files and hashes: 1: 6986DC82812C47DA14994B8E6E727B72E0B2F8D8.crl (hash: RgFfyawnS22MNmmN2wXO+bIl+Q9JHiDyYWFwXmKMA+s=) 2: 326130613a363034303a343430303a3a2f34382d3438203d3e203530313034.roa (hash: Hi/9N+5IQGx093OQEgbXr/N8qqlN06r+epXMCIP3zqE=) 3: 326130613a363034303a343430303a3a2f34382d3438203d3e20313532333638.roa (hash: gotlPq13MIgn9CpWrSq139KCagvKTA63f16ENY1QYXI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.crl rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 18:34:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:cb:75:5f:a7:60:12:81:83:81:23:4a:20:86:9b:d6:cc:5a:78:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6986DC82812C47DA14994B8E6E727B72E0B2F8D8 Validity Not Before: Sep 21 18:06:45 2026 GMT Not After : Sep 22 20:11:45 2026 GMT Subject: CN=74C4D7A3748EE4D9872F2156BA99292138111BB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2c:cf:33:c0:ef:f7:36:40:d9:0e:e1:29:f5: 61:ef:c4:e1:19:cd:65:ff:d9:e4:59:f6:5c:e7:fe: 0b:c5:bd:d4:cc:3e:f8:8f:c5:7d:f9:cb:18:30:39: f0:15:5e:42:3e:8f:35:5c:4a:58:d1:95:6f:4b:f4: c0:ca:07:4e:28:47:cb:2d:b0:97:40:89:87:c6:b7: bb:32:8a:80:fb:7f:da:79:0c:32:43:1b:89:7d:be: 8f:e0:c8:45:0a:d0:b3:89:ed:0c:6a:19:70:a1:f3: bc:9b:b7:ec:ec:ec:7e:77:f7:73:d2:5b:87:fa:48: 85:c9:4c:85:50:67:63:45:a7:66:c4:24:b5:b1:c9: 95:03:eb:de:92:68:01:95:86:a1:ad:07:c9:a0:dd: 6b:e8:f7:95:5a:e4:8e:5b:8e:c8:97:cd:5c:b0:68: c1:4c:41:13:f7:44:e5:71:c4:6b:8c:91:49:c2:01: 26:b4:69:7e:ed:8c:83:ed:7f:80:4c:7b:b6:70:19: 92:3a:6e:c8:7c:bb:5d:9a:37:d5:63:2c:f2:04:96: 12:d2:52:d4:ec:63:af:58:b2:6a:8a:2d:e5:8b:f2: 8d:19:27:c5:29:4e:cb:38:62:a4:38:ef:56:5b:f5: 4d:25:e3:a0:0a:10:d6:2a:89:0c:c9:56:ad:0c:a6: 80:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C4:D7:A3:74:8E:E4:D9:87:2F:21:56:BA:99:29:21:38:11:1B:B8 X509v3 Authority Key Identifier: keyid:69:86:DC:82:81:2C:47:DA:14:99:4B:8E:6E:72:7B:72:E0:B2:F8:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:9f:78:71:78:b0:3c:55:cd:50:cc:eb:36:06:05:31:22:3c: 47:02:e5:05:4c:7d:58:95:e6:91:68:a4:94:d7:30:01:90:c7: b1:54:0c:ba:9f:a9:77:47:9f:86:64:9a:ef:1d:0e:e9:60:8e: a1:4c:31:de:87:00:85:ce:63:7d:84:1a:09:af:84:5a:c9:dd: 8e:27:13:d8:dd:6a:2f:06:bc:7f:c1:a6:4f:5c:9a:6a:88:7c: da:a2:2b:68:c8:72:66:23:f3:39:08:89:65:e3:52:bc:b9:02: c3:b5:cd:1e:4e:63:78:3b:df:1f:7d:d9:fa:e6:56:7e:22:cb: ba:ac:37:54:8f:ab:50:77:bb:ac:cb:e7:2d:0a:ee:c0:9a:dd: 15:2d:83:c7:89:32:ac:c6:7f:38:e5:19:0e:b8:a3:6b:38:d8: 28:dc:41:1f:30:2d:ed:fb:0a:ec:e6:53:2f:f5:79:6a:55:74: 43:51:82:0a:ef:16:6c:b1:19:55:5d:4d:b5:80:ae:ae:ba:5d: 95:0d:c4:60:8d:8d:ce:e4:ec:93:b5:14:50:cf:2d:05:5f:70: 85:d8:9a:08:5f:c8:b1:a3:45:9a:8c:82:0d:94:48:71:de:8b: 88:7b:2b:c8:ab:01:d3:54:79:8e:8e:af:c1:4f:0d:30:31:09: b2:04:34:19 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUJst1X6dgEoGDgSNKIIab1sxaeN8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk4NkRDODI4MTJDNDdEQTE0OTk0QjhFNkU3MjdCNzJF MEIyRjhEODAeFw0yNjA5MjExODA2NDVaFw0yNjA5MjIyMDExNDVaMDMxMTAvBgNV BAMTKDc0QzREN0EzNzQ4RUU0RDk4NzJGMjE1NkJBOTkyOTIxMzgxMTFCQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqLM8zwO/3NkDZDuEp9WHvxOEZ zWX/2eRZ9lzn/gvFvdTMPviPxX35yxgwOfAVXkI+jzVcSljRlW9L9MDKB04oR8st sJdAiYfGt7syioD7f9p5DDJDG4l9vo/gyEUK0LOJ7QxqGXCh87ybt+zs7H5393PS W4f6SIXJTIVQZ2NFp2bEJLWxyZUD696SaAGVhqGtB8mg3Wvo95Va5I5bjsiXzVyw aMFMQRP3ROVxxGuMkUnCASa0aX7tjIPtf4BMe7ZwGZI6bsh8u12aN9VjLPIElhLS UtTsY69YsmqKLeWL8o0ZJ8UpTss4YqQ471Zb9U0l46AKENYqiQzJVq0MpoAnAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUdMTXo3SO5NmHLyFWupkpITgRG7gwHwYDVR0j BBgwFoAUaYbcgoEsR9oUmUuObnJ7cuCy+NgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVk OGM0LzkvNjk4NkRDODI4MTJDNDdEQTE0OTk0QjhFNkU3MjdCNzJFMEIyRjhEOC5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzY5ODZEQzgyODEyQzQ3 REExNDk5NEI4RTZFNzI3QjcyRTBCMkY4RDguY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVkOGM0 LzkvNjk4NkRDODI4MTJDNDdEQTE0OTk0QjhFNkU3MjdCNzJFMEIyRjhEOC5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBACWfeHF4sDxVzVDM6zYGBTEiPEcC5QVMfViV5pFopJTXMAGQx7FUDLqf qXdHn4Zkmu8dDulgjqFMMd6HAIXOY32EGgmvhFrJ3Y4nE9jdai8GvH/Bpk9cmmqI fNqiK2jIcmYj8zkIiWXjUry5AsO1zR5OY3g73x992frmVn4iy7qsN1SPq1B3u6zL 5y0K7sCa3RUtg8eJMqzGfzjlGQ64o2s42CjcQR8wLe37CuzmUy/1eWpVdENRggrv FmyxGVVdTbWArq66XZUNxGCNjc7k7JO1FFDPLQVfcIXYmghfyLGjRZqMgg2USHHe i4h7K8irAdNUeY6Or8FPDTAxCbIENBk= -----END CERTIFICATE-----Generated at Tue Sep 22 06:50:52 2026 by rpki-client