$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft File: 6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft (raw, json) Hash identifier: vSpmf/h5n8t1TLJqGx3Z4d8AcXz+r8xsdhzAfFLSPB4= Subject key identifier: F9:D7:73:59:0A:86:24:27:E9:28:01:42:E5:E2:64:5A:73:D4:44:A8 Authority key identifier: 69:86:DC:82:81:2C:47:DA:14:99:4B:8E:6E:72:7B:72:E0:B2:F8:D8 Certificate issuer: /CN=6986DC82812C47DA14994B8E6E727B72E0B2F8D8 Certificate serial: 6A75F2BD1A0AA500ECC3E71E2D2AF156932CF3FD Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft Manifest number: 0140 Signing time: Sat 13 Jun 2026 10:44:20 +0000 Manifest this update: Sat 13 Jun 2026 10:39:20 +0000 Manifest next update: Sun 14 Jun 2026 12:26:20 +0000 Files and hashes: 1: 326130613a363034303a343430303a3a2f34382d3438203d3e203530313034.roa (hash: Hi/9N+5IQGx093OQEgbXr/N8qqlN06r+epXMCIP3zqE=) 2: 6986DC82812C47DA14994B8E6E727B72E0B2F8D8.crl (hash: VbS3FB6X6jA1WsTDH77SbT9ZBu2xYhyk73W4Tb0c8Wg=) 3: 326130613a363034303a343430303a3a2f34382d3438203d3e20313532333638.roa (hash: gotlPq13MIgn9CpWrSq139KCagvKTA63f16ENY1QYXI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.crl rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 07:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:75:f2:bd:1a:0a:a5:00:ec:c3:e7:1e:2d:2a:f1:56:93:2c:f3:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6986DC82812C47DA14994B8E6E727B72E0B2F8D8 Validity Not Before: Jun 13 10:39:20 2026 GMT Not After : Jun 14 12:26:20 2026 GMT Subject: CN=F9D773590A862427E9280142E5E2645A73D444A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:f1:02:a4:39:d1:fe:fa:b9:e3:69:2a:3a:cb: b3:61:1b:41:80:e1:da:21:e1:a2:87:e4:67:5b:8f: 2d:90:6d:7b:0d:63:f4:72:83:74:93:41:2f:ac:59: 05:0d:b2:1a:47:79:89:79:01:d8:a9:e8:65:8b:bb: 57:ca:82:e3:cf:c7:97:2c:b0:28:0d:86:77:c0:95: 0d:cb:ff:1e:f8:46:4c:12:d2:d1:6f:34:cf:5b:31: d7:1b:0e:c6:4c:b4:4f:6b:97:56:57:0c:0e:84:e3: 7d:78:71:d4:c9:cf:69:7f:fe:bb:d0:e3:0f:52:3c: ba:04:eb:bd:09:35:99:78:1c:ae:e0:f1:d1:97:a7: 49:57:a8:90:6e:a2:04:4b:a7:19:36:3c:f7:b6:1c: 33:90:d8:69:c7:2a:d5:0f:e2:ac:19:17:45:0c:f4: a5:ad:02:4e:14:e7:34:07:49:49:ce:7b:b9:e1:fb: d9:c2:f8:d4:2e:be:35:3f:2e:1d:c8:2c:97:41:6e: 2d:6a:a0:ad:67:d3:11:bf:b5:32:8a:57:85:9e:09: d2:18:a4:48:a9:5e:b9:5c:44:3f:f7:9b:5f:f6:65: 8f:ce:0b:24:cc:6a:af:3e:37:ce:28:b5:78:64:06: 0a:ec:1e:df:4e:4e:6c:a7:55:27:87:44:a9:f2:40: 04:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:D7:73:59:0A:86:24:27:E9:28:01:42:E5:E2:64:5A:73:D4:44:A8 X509v3 Authority Key Identifier: keyid:69:86:DC:82:81:2C:47:DA:14:99:4B:8E:6E:72:7B:72:E0:B2:F8:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:f7:8c:03:a3:8b:5e:02:eb:b4:73:15:a1:1a:1e:d4:6f:79: b4:2a:04:44:b1:8b:78:72:01:0c:ef:97:75:ec:ff:14:31:cd: 65:3b:de:93:7a:9e:6e:64:79:37:06:dd:a3:df:05:b1:ce:7c: 77:6e:e3:61:8d:80:60:fe:a8:12:9a:10:96:d8:9d:04:7f:70: d6:2d:c3:ec:7c:06:dc:e8:67:98:b7:7b:8e:b4:c2:23:7a:44: 9a:52:f2:c5:c7:74:28:63:ed:f9:43:cd:39:6a:f9:66:74:91: eb:71:c4:f8:43:3b:58:5c:93:19:41:66:cb:04:47:1b:dc:75: 3d:84:d5:d2:f7:bb:56:c5:09:ea:21:80:28:e2:55:4b:31:35: 00:26:a4:5f:d1:bb:5e:fb:35:11:47:6d:1a:e0:cb:ff:fe:af: bd:19:21:e0:55:61:98:84:f8:d0:53:25:e7:9d:c6:34:eb:b5: 9d:a2:4f:c1:31:d7:3a:eb:5d:fa:7e:9d:36:79:62:9e:91:5d: f9:11:98:00:f8:ec:5e:64:1c:a7:87:41:dc:73:dc:50:a3:2c: c0:88:2b:65:eb:d2:c8:8f:6f:a2:9a:bf:54:01:5d:3b:85:44: af:b6:2a:65:08:87:63:b3:02:72:6e:3b:35:b1:0a:d4:b7:5e: 27:71:2a:1a -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUanXyvRoKpQDsw+ceLSrxVpMs8/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk4NkRDODI4MTJDNDdEQTE0OTk0QjhFNkU3MjdCNzJF MEIyRjhEODAeFw0yNjA2MTMxMDM5MjBaFw0yNjA2MTQxMjI2MjBaMDMxMTAvBgNV BAMTKEY5RDc3MzU5MEE4NjI0MjdFOTI4MDE0MkU1RTI2NDVBNzNENDQ0QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm8QKkOdH++rnjaSo6y7NhG0GA 4doh4aKH5Gdbjy2QbXsNY/Ryg3STQS+sWQUNshpHeYl5Adip6GWLu1fKguPPx5cs sCgNhnfAlQ3L/x74RkwS0tFvNM9bMdcbDsZMtE9rl1ZXDA6E4314cdTJz2l//rvQ 4w9SPLoE670JNZl4HK7g8dGXp0lXqJBuogRLpxk2PPe2HDOQ2GnHKtUP4qwZF0UM 9KWtAk4U5zQHSUnOe7nh+9nC+NQuvjU/Lh3ILJdBbi1qoK1n0xG/tTKKV4WeCdIY pEipXrlcRD/3m1/2ZY/OCyTMaq8+N84otXhkBgrsHt9OTmynVSeHRKnyQAQJAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQU+ddzWQqGJCfpKAFC5eJkWnPURKgwHwYDVR0j BBgwFoAUaYbcgoEsR9oUmUuObnJ7cuCy+NgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVk OGM0LzkvNjk4NkRDODI4MTJDNDdEQTE0OTk0QjhFNkU3MjdCNzJFMEIyRjhEOC5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzY5ODZEQzgyODEyQzQ3 REExNDk5NEI4RTZFNzI3QjcyRTBCMkY4RDguY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVkOGM0 LzkvNjk4NkRDODI4MTJDNDdEQTE0OTk0QjhFNkU3MjdCNzJFMEIyRjhEOC5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAJf3jAOji14C67RzFaEaHtRvebQqBESxi3hyAQzvl3Xs/xQxzWU73pN6 nm5keTcG3aPfBbHOfHdu42GNgGD+qBKaEJbYnQR/cNYtw+x8BtzoZ5i3e460wiN6 RJpS8sXHdChj7flDzTlq+WZ0ketxxPhDO1hckxlBZssERxvcdT2E1dL3u1bFCeoh gCjiVUsxNQAmpF/Ru177NRFHbRrgy//+r70ZIeBVYZiE+NBTJeedxjTrtZ2iT8Ex 1zrrXfp+nTZ5Yp6RXfkRmAD47F5kHKeHQdxz3FCjLMCIK2Xr0siPb6Kav1QBXTuF RK+2KmUIh2OzAnJuOzWxCtS3XidxKho= -----END CERTIFICATE-----Generated at Sat Jun 13 14:23:26 2026 by rpki-client