$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft File: 6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft (raw, json) Hash identifier: JBenIyfrfm9AJfOuRSCYlyTU/eKSuXI/MRfwZO9ieNQ= Subject key identifier: 1B:EC:5B:1A:52:B1:15:7C:EA:49:BF:3D:EE:91:4F:AE:12:B2:50:7F Authority key identifier: 69:86:DC:82:81:2C:47:DA:14:99:4B:8E:6E:72:7B:72:E0:B2:F8:D8 Certificate issuer: /CN=6986DC82812C47DA14994B8E6E727B72E0B2F8D8 Certificate serial: 7804F27509321E273281E3F8072346E11DE905AF Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft Manifest number: 017C Signing time: Tue 28 Jul 2026 05:18:14 +0000 Manifest this update: Tue 28 Jul 2026 05:13:14 +0000 Manifest next update: Wed 29 Jul 2026 09:16:14 +0000 Files and hashes: 1: 6986DC82812C47DA14994B8E6E727B72E0B2F8D8.crl (hash: j14fRSw2ialx/ob60OQWO6FD81pyAmTYFt7D+5yFv5M=) 2: 326130613a363034303a343430303a3a2f34382d3438203d3e203530313034.roa (hash: Hi/9N+5IQGx093OQEgbXr/N8qqlN06r+epXMCIP3zqE=) 3: 326130613a363034303a343430303a3a2f34382d3438203d3e20313532333638.roa (hash: gotlPq13MIgn9CpWrSq139KCagvKTA63f16ENY1QYXI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.crl rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 09:16:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:04:f2:75:09:32:1e:27:32:81:e3:f8:07:23:46:e1:1d:e9:05:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6986DC82812C47DA14994B8E6E727B72E0B2F8D8 Validity Not Before: Jul 28 05:13:14 2026 GMT Not After : Jul 29 09:16:14 2026 GMT Subject: CN=1BEC5B1A52B1157CEA49BF3DEE914FAE12B2507F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b4:cc:c7:eb:b5:6a:ea:79:cb:ab:9a:39:8b: 54:c3:82:01:b6:2a:62:af:6b:28:6c:a7:57:3c:ff: 0b:36:e5:21:aa:04:a6:4d:36:58:be:2f:63:5c:78: eb:f2:e8:c4:a7:40:57:9b:a7:4e:a7:3c:ec:26:b0: ac:ef:1a:59:36:26:c1:3c:b3:b0:15:9d:bc:b4:17: ac:4f:51:af:1f:bb:95:be:9c:e6:45:94:c7:50:a6: 8c:68:39:03:b5:4a:09:a5:99:2c:8c:58:fa:90:c3: 8c:ec:1a:3b:c2:b8:5e:56:07:9c:0b:e0:3e:1f:94: 5b:29:49:7f:18:51:9f:fe:a2:43:97:17:bd:81:d5: 9c:d2:96:4a:b0:eb:cd:94:28:89:1c:6e:d3:22:eb: 88:a3:05:f2:b7:54:59:ea:53:37:95:e7:fb:3a:57: ef:60:e0:6a:6c:98:5d:33:4d:f9:ae:3f:ba:c1:d5: 12:0a:e0:e1:be:77:14:f0:28:03:f5:80:45:10:79: 0a:22:3b:89:64:e5:b0:62:63:94:c8:54:33:b0:23: af:60:fb:57:5e:85:a9:82:39:21:42:7b:7e:64:0a: ff:ee:8d:e6:de:5a:e6:7f:fd:5a:f8:60:8a:45:38: f5:6f:2e:01:8f:1b:e7:4e:bb:3d:87:8f:57:4d:f3: c9:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:EC:5B:1A:52:B1:15:7C:EA:49:BF:3D:EE:91:4F:AE:12:B2:50:7F X509v3 Authority Key Identifier: keyid:69:86:DC:82:81:2C:47:DA:14:99:4B:8E:6E:72:7B:72:E0:B2:F8:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:d4:ed:ea:9a:95:8d:60:32:a1:95:f5:ce:85:55:95:c5:e2: f1:24:98:53:75:67:a8:15:d9:a0:f0:57:03:01:68:41:e2:97: a5:62:28:64:45:b2:e7:d7:bd:e6:4a:59:d9:a2:d5:94:10:bf: d1:00:de:0a:25:49:26:fc:a5:2a:1e:01:93:d8:27:32:27:be: 52:e4:35:85:09:8f:7e:c5:f5:b5:05:fa:d8:ff:4e:f4:25:7d: b8:7a:3f:d6:6b:6c:6d:71:32:2e:f2:cb:4d:24:7c:ac:21:d6: 63:10:6b:72:78:4c:57:fb:70:84:a3:13:72:7c:c4:82:33:28: c6:a3:29:03:17:52:cc:7b:27:97:54:b1:22:cf:bb:02:7e:34: 8f:c3:04:a3:94:89:87:01:ea:8f:0c:66:64:79:d9:80:7c:07: 11:d3:b8:aa:4d:ee:e9:01:87:80:9a:07:f0:33:0d:26:a6:1f: 58:b6:9f:c6:38:c3:35:d8:72:b0:71:73:1d:dd:89:98:a8:70: f0:19:2d:bb:61:32:18:08:be:0e:a4:b1:09:81:3c:a4:8f:71: 84:a4:43:39:8b:15:ba:c0:1b:8d:65:71:54:a4:98:ee:d2:53: 18:0d:b3:9f:54:4e:fb:e7:3b:87:3a:41:c7:d3:0a:15:0d:77: da:da:ce:5b -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUeATydQkyHicygeP4ByNG4R3pBa8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk4NkRDODI4MTJDNDdEQTE0OTk0QjhFNkU3MjdCNzJF MEIyRjhEODAeFw0yNjA3MjgwNTEzMTRaFw0yNjA3MjkwOTE2MTRaMDMxMTAvBgNV BAMTKDFCRUM1QjFBNTJCMTE1N0NFQTQ5QkYzREVFOTE0RkFFMTJCMjUwN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDStMzH67Vq6nnLq5o5i1TDggG2 KmKvayhsp1c8/ws25SGqBKZNNli+L2NceOvy6MSnQFebp06nPOwmsKzvGlk2JsE8 s7AVnby0F6xPUa8fu5W+nOZFlMdQpoxoOQO1SgmlmSyMWPqQw4zsGjvCuF5WB5wL 4D4flFspSX8YUZ/+okOXF72B1ZzSlkqw682UKIkcbtMi64ijBfK3VFnqUzeV5/s6 V+9g4GpsmF0zTfmuP7rB1RIK4OG+dxTwKAP1gEUQeQoiO4lk5bBiY5TIVDOwI69g +1dehamCOSFCe35kCv/ujebeWuZ//Vr4YIpFOPVvLgGPG+dOuz2Hj1dN88njAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUG+xbGlKxFXzqSb897pFPrhKyUH8wHwYDVR0j BBgwFoAUaYbcgoEsR9oUmUuObnJ7cuCy+NgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVk OGM0LzkvNjk4NkRDODI4MTJDNDdEQTE0OTk0QjhFNkU3MjdCNzJFMEIyRjhEOC5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzY5ODZEQzgyODEyQzQ3 REExNDk5NEI4RTZFNzI3QjcyRTBCMkY4RDguY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVkOGM0 LzkvNjk4NkRDODI4MTJDNDdEQTE0OTk0QjhFNkU3MjdCNzJFMEIyRjhEOC5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAGvU7eqalY1gMqGV9c6FVZXF4vEkmFN1Z6gV2aDwVwMBaEHil6ViKGRF sufXveZKWdmi1ZQQv9EA3golSSb8pSoeAZPYJzInvlLkNYUJj37F9bUF+tj/TvQl fbh6P9ZrbG1xMi7yy00kfKwh1mMQa3J4TFf7cISjE3J8xIIzKMajKQMXUsx7J5dU sSLPuwJ+NI/DBKOUiYcB6o8MZmR52YB8BxHTuKpN7ukBh4CaB/AzDSamH1i2n8Y4 wzXYcrBxcx3diZiocPAZLbthMhgIvg6ksQmBPKSPcYSkQzmLFbrAG41lcVSkmO7S UxgNs59UTvvnO4c6QcfTChUNd9razls= -----END CERTIFICATE-----Generated at Wed Jul 29 04:26:18 2026 by rpki-client