$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft File: 6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft (raw, json) Hash identifier: AH4TY+bArXzyrLoTkT1wgeXfsiEACbXIShrp5E66dG0= Subject key identifier: 8A:30:C2:2A:55:2E:C2:B0:AA:6D:37:0B:0D:33:EA:AA:BA:C5:E3:0B Authority key identifier: 69:86:DC:82:81:2C:47:DA:14:99:4B:8E:6E:72:7B:72:E0:B2:F8:D8 Certificate issuer: /CN=6986DC82812C47DA14994B8E6E727B72E0B2F8D8 Certificate serial: 4E06B45C45D24DE98A14ABB48D9F856DB3A909C5 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft Manifest number: 70 Signing time: Wed 05 Nov 2025 02:13:32 +0000 Manifest this update: Wed 05 Nov 2025 02:08:32 +0000 Manifest next update: Thu 06 Nov 2025 04:28:32 +0000 Files and hashes: 1: 326130613a363034303a343430303a3a2f34382d3438203d3e20313532333638.roa (hash: cr9zAfMvxZve/7JXD2f4n3BhiKrPiLnrwH/qsV4egwU=) 2: 326130613a363034303a343430303a3a2f34382d3438203d3e203530313034.roa (hash: JDVDvoY2LzG4FOnjq1lk2gJuRJSJTwl39Idwnd4C3E8=) 3: 6986DC82812C47DA14994B8E6E727B72E0B2F8D8.crl (hash: bqL/QVrGqHQ6X1LVvbL+jSqGxLqEGsfebUEU1Ffld40=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.crl rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 22:27:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:06:b4:5c:45:d2:4d:e9:8a:14:ab:b4:8d:9f:85:6d:b3:a9:09:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6986DC82812C47DA14994B8E6E727B72E0B2F8D8 Validity Not Before: Nov 5 02:08:32 2025 GMT Not After : Nov 6 04:28:32 2025 GMT Subject: CN=8A30C22A552EC2B0AA6D370B0D33EAAABAC5E30B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:3a:19:f7:20:cb:75:03:fd:49:20:1a:0c:50: fb:fc:85:67:0c:91:9f:58:cd:e4:a0:84:b5:6f:42: ad:74:1a:8c:4a:e4:3b:97:17:af:e3:97:2f:e0:f4: aa:e7:94:ae:4a:18:fb:89:26:c7:b4:92:85:1b:22: 79:71:7b:00:1a:b7:c2:08:aa:7f:b5:7d:77:cc:fd: 50:5a:98:f2:a8:fa:72:b3:fd:ae:1e:b1:f9:56:7e: 98:a0:f2:be:7f:03:d9:0e:c4:93:a5:c1:ac:1a:cd: ef:f1:5d:47:1d:11:ee:0c:e6:c0:49:90:02:e4:1a: 6d:69:4b:78:1a:e9:e8:fa:77:97:21:ec:05:cb:19: 39:5d:f0:53:ce:ad:cb:54:4d:f2:dd:59:21:59:86: 01:be:3c:50:55:e0:12:b7:b4:a2:d4:3d:d2:96:26: fd:79:fb:2a:64:17:c9:14:89:05:e3:67:35:a4:b9: 44:0a:00:fe:ca:f2:2e:fa:0c:fd:89:da:8c:99:78: b0:9c:97:98:ff:fc:b4:b0:dc:7c:ac:d0:7a:ae:aa: d6:46:68:57:90:02:63:5b:47:25:36:00:e0:9d:24: 72:3b:99:fb:1a:90:b4:ee:bc:f5:a5:e2:de:d0:03: f2:2a:d6:4e:dc:6b:9b:67:16:24:7d:e0:07:94:e4: ed:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:30:C2:2A:55:2E:C2:B0:AA:6D:37:0B:0D:33:EA:AA:BA:C5:E3:0B X509v3 Authority Key Identifier: keyid:69:86:DC:82:81:2C:47:DA:14:99:4B:8E:6E:72:7B:72:E0:B2:F8:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:13:26:94:61:4c:e7:0e:d7:cd:c4:5c:f2:0e:0f:10:a0:5b: b2:1c:53:4e:6d:59:49:d8:de:3a:99:22:a8:6f:1c:11:ed:68: fa:35:aa:96:10:b7:5a:5e:93:b5:43:40:5e:ec:f0:cf:44:b3: 34:38:d2:33:21:13:ac:d0:cd:d6:82:ca:b5:ea:c7:fc:53:cf: de:10:fe:d0:9d:e2:b8:ca:c2:36:58:b6:72:36:90:fa:14:5d: 26:44:9a:be:f7:0f:48:01:55:7e:ab:62:a1:5a:f8:a1:c5:ef: b8:6d:3b:2e:6b:e0:f7:c4:d8:e7:45:00:76:c0:c4:04:06:4d: 3e:36:b2:76:1d:37:d8:33:eb:44:da:dd:26:aa:cd:87:6d:d7: a5:68:d1:e0:03:82:2a:63:63:f5:ce:ee:6e:7c:aa:10:97:14: f9:91:a0:94:e0:28:51:02:06:ec:34:c6:37:64:12:9f:ff:a3: f6:1d:e7:70:41:7c:0e:7f:b2:27:5d:39:d2:87:2c:02:f9:aa: d8:f6:51:0b:25:04:8c:0a:71:47:41:9f:18:99:bc:7b:16:2a: 49:c2:d9:eb:3a:97:08:99:fc:73:14:94:ff:8e:ca:ef:4c:7f: 89:8a:b1:07:09:d6:a6:96:29:aa:d4:c8:6c:4f:ca:c1:cc:f1: a4:d0:1f:b4 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUTga0XEXSTemKFKu0jZ+FbbOpCcUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk4NkRDODI4MTJDNDdEQTE0OTk0QjhFNkU3MjdCNzJF MEIyRjhEODAeFw0yNTExMDUwMjA4MzJaFw0yNTExMDYwNDI4MzJaMDMxMTAvBgNV BAMTKDhBMzBDMjJBNTUyRUMyQjBBQTZEMzcwQjBEMzNFQUFBQkFDNUUzMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgOhn3IMt1A/1JIBoMUPv8hWcM kZ9YzeSghLVvQq10GoxK5DuXF6/jly/g9KrnlK5KGPuJJse0koUbInlxewAat8II qn+1fXfM/VBamPKo+nKz/a4esflWfpig8r5/A9kOxJOlwawaze/xXUcdEe4M5sBJ kALkGm1pS3ga6ej6d5ch7AXLGTld8FPOrctUTfLdWSFZhgG+PFBV4BK3tKLUPdKW Jv15+ypkF8kUiQXjZzWkuUQKAP7K8i76DP2J2oyZeLCcl5j//LSw3Hys0HquqtZG aFeQAmNbRyU2AOCdJHI7mfsakLTuvPWl4t7QA/Iq1k7ca5tnFiR94AeU5O0tAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUijDCKlUuwrCqbTcLDTPqqrrF4wswHwYDVR0j BBgwFoAUaYbcgoEsR9oUmUuObnJ7cuCy+NgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVk OGM0LzkvNjk4NkRDODI4MTJDNDdEQTE0OTk0QjhFNkU3MjdCNzJFMEIyRjhEOC5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzY5ODZEQzgyODEyQzQ3 REExNDk5NEI4RTZFNzI3QjcyRTBCMkY4RDguY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVkOGM0 LzkvNjk4NkRDODI4MTJDNDdEQTE0OTk0QjhFNkU3MjdCNzJFMEIyRjhEOC5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAFgTJpRhTOcO183EXPIODxCgW7IcU05tWUnY3jqZIqhvHBHtaPo1qpYQ t1pek7VDQF7s8M9EszQ40jMhE6zQzdaCyrXqx/xTz94Q/tCd4rjKwjZYtnI2kPoU XSZEmr73D0gBVX6rYqFa+KHF77htOy5r4PfE2OdFAHbAxAQGTT42snYdN9gz60Ta 3SaqzYdt16Vo0eADgipjY/XO7m58qhCXFPmRoJTgKFECBuw0xjdkEp//o/Yd53BB fA5/siddOdKHLAL5qtj2UQslBIwKcUdBnxiZvHsWKknC2es6lwiZ/HMUlP+Oyu9M f4mKsQcJ1qaWKarUyGxPysHM8aTQH7Q= -----END CERTIFICATE-----Generated at Wed Nov 5 07:36:15 2025 by rpki-client