$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft File: 0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft (raw, json) Hash identifier: ezLW4SCmHjonVQx8PtsnQwLIFMOC4opHD7qpbNUkt4w= Subject key identifier: BA:8D:0F:DF:74:A5:FE:DD:C2:90:0E:CC:BC:AC:D7:9A:F3:3A:C4:3B Authority key identifier: 0B:3B:68:A2:06:B6:AF:84:A3:4A:A1:B7:63:2E:99:AB:06:F5:20:77 Certificate issuer: /CN=0B3B68A206B6AF84A34AA1B7632E99AB06F52077 Certificate serial: 2AA50C145DBE835981411C76673420C57B06133A Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft Manifest number: F1 Signing time: Tue 28 Jul 2026 10:46:38 +0000 Manifest this update: Tue 28 Jul 2026 10:41:38 +0000 Manifest next update: Wed 29 Jul 2026 12:26:38 +0000 Files and hashes: 1: 0B3B68A206B6AF84A34AA1B7632E99AB06F52077.crl (hash: 6L4fUEf2/BwGHPDRW/pVdgYO5PsleS5pMF8ykWJlr0w=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.crl rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 12:26:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:a5:0c:14:5d:be:83:59:81:41:1c:76:67:34:20:c5:7b:06:13:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B3B68A206B6AF84A34AA1B7632E99AB06F52077 Validity Not Before: Jul 28 10:41:38 2026 GMT Not After : Jul 29 12:26:38 2026 GMT Subject: CN=BA8D0FDF74A5FEDDC2900ECCBCACD79AF33AC43B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:9d:a8:e7:28:95:00:2e:3b:c0:d4:dc:5d:fa: 7e:04:be:4a:b9:73:1c:48:75:54:c0:b7:72:13:41: dd:4c:f2:06:dc:c4:a4:10:ca:95:91:0b:00:2b:70: c3:f3:3a:09:d1:ac:21:6a:c4:ff:7b:af:3c:07:2b: 57:51:7d:9a:c5:c9:49:5c:5d:b7:53:a0:87:c6:09: e7:48:04:db:fc:aa:b3:23:e5:49:46:3b:61:5b:73: 64:25:32:a7:18:c8:72:43:13:5d:b1:5c:87:1d:42: 33:44:8c:e7:cd:96:f9:4a:de:bf:dc:37:7c:2e:e1: 6f:ab:69:28:e2:4c:89:20:4a:41:32:1c:dd:1d:89: 8e:57:69:cc:01:91:0b:35:bc:23:71:7f:93:79:e7: 94:ce:5a:ae:dc:34:24:ed:e6:53:a4:59:65:b1:33: 9f:d1:e4:e3:04:64:07:04:75:37:75:c2:34:53:10: b3:96:9c:3d:ff:52:f3:ed:0f:e9:bd:e0:3c:0b:c2: 07:d9:6c:e3:be:ba:60:05:9c:c7:15:5e:bc:10:d4: 92:3e:96:3d:53:30:d1:cd:71:7f:70:f5:28:bf:98: f1:44:4a:00:82:d2:12:27:9a:27:af:13:23:59:0a: a0:f5:cb:ff:ab:81:a9:d5:3d:3b:30:4f:da:12:69: 81:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:8D:0F:DF:74:A5:FE:DD:C2:90:0E:CC:BC:AC:D7:9A:F3:3A:C4:3B X509v3 Authority Key Identifier: keyid:0B:3B:68:A2:06:B6:AF:84:A3:4A:A1:B7:63:2E:99:AB:06:F5:20:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:cf:78:28:2c:ad:65:0f:d2:b8:c6:cf:85:12:d2:f3:fc:86: 68:b7:fa:cf:0d:a8:94:86:78:5b:b8:1e:31:46:40:ec:6c:8f: e4:e1:d9:ed:46:24:03:c0:84:a8:b1:3e:51:aa:77:1d:75:8c: 52:88:9d:61:5c:79:96:af:65:87:ce:3f:58:52:46:60:1c:9f: 28:f0:31:37:25:6d:40:97:83:93:90:98:f9:6f:d0:f8:d6:ba: ca:6d:73:8d:ec:2d:2a:0c:eb:e4:a9:3c:88:4b:20:60:3f:ca: ab:cd:4a:12:ae:77:1e:53:15:03:92:8b:64:ae:03:a7:2a:5d: 92:5d:c8:59:73:27:c7:b5:14:b5:6c:9b:3b:40:89:0b:48:85: 19:ba:a9:95:5a:4d:5e:f8:31:96:02:7a:6c:05:a2:0e:b5:fe: 83:9a:e6:7c:37:f9:0e:21:12:fe:4e:ac:c9:56:f6:11:b8:17: c8:d4:67:d8:f2:93:e5:37:9b:92:37:76:11:0b:81:b3:ff:bf: c1:d9:ff:c5:43:40:b1:d6:df:10:70:d0:c4:2a:11:49:14:aa: 46:b1:97:38:bb:4c:55:1b:32:7a:b0:8a:83:b4:b7:e4:33:e7: 4f:05:ef:ce:59:0d:e9:f3:8c:25:56:22:fa:89:47:f7:a7:67: 13:39:cc:da -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgIUKqUMFF2+g1mBQRx2ZzQgxXsGEzowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEIzQjY4QTIwNkI2QUY4NEEzNEFBMUI3NjMyRTk5QUIw NkY1MjA3NzAeFw0yNjA3MjgxMDQxMzhaFw0yNjA3MjkxMjI2MzhaMDMxMTAvBgNV BAMTKEJBOEQwRkRGNzRBNUZFRERDMjkwMEVDQ0JDQUNENzlBRjMzQUM0M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDanajnKJUALjvA1Nxd+n4Evkq5 cxxIdVTAt3ITQd1M8gbcxKQQypWRCwArcMPzOgnRrCFqxP97rzwHK1dRfZrFyUlc XbdToIfGCedIBNv8qrMj5UlGO2Fbc2QlMqcYyHJDE12xXIcdQjNEjOfNlvlK3r/c N3wu4W+raSjiTIkgSkEyHN0diY5XacwBkQs1vCNxf5N555TOWq7cNCTt5lOkWWWx M5/R5OMEZAcEdTd1wjRTELOWnD3/UvPtD+m94DwLwgfZbOO+umAFnMcVXrwQ1JI+ lj1TMNHNcX9w9Si/mPFESgCC0hInmievEyNZCqD1y/+rganVPTswT9oSaYF7AgMB AAGjggJhMIICXTAdBgNVHQ4EFgQUuo0P33Sl/t3CkA7MvKzXmvM6xDswHwYDVR0j BBgwFoAUCztooga2r4SjSqG3Yy6Zqwb1IHcwDgYDVR0PAQH/BAQDAgeAMIGXBgNV HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzFiZjhlOTc3LTcyNzgtNDZjZi1hYmQxLTk5Y2QxZmQy YmU0ZS8xMC8wQjNCNjhBMjA2QjZBRjg0QTM0QUExQjc2MzJFOTlBQjA2RjUyMDc3 LmNybDB6BggrBgEFBQcBAQRuMGwwagYIKwYBBQUHMAKGXnJzeW5jOi8vY2xvdWRp ZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xPVURJRS1SUEtJLzQvMEIzQjY4QTIwNkI2 QUY4NEEzNEFBMUI3NjMyRTk5QUIwNkY1MjA3Ny5jZXIwgaAGCCsGAQUFBwELBIGT MIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi ZTRlLzEwLzBCM0I2OEEyMDZCNkFGODRBMzRBQTFCNzYzMkU5OUFCMDZGNTIwNzcu bWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQ MAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3 DQEBCwUAA4IBAQBYz3goLK1lD9K4xs+FEtLz/IZot/rPDaiUhnhbuB4xRkDsbI/k 4dntRiQDwISosT5RqncddYxSiJ1hXHmWr2WHzj9YUkZgHJ8o8DE3JW1Al4OTkJj5 b9D41rrKbXON7C0qDOvkqTyISyBgP8qrzUoSrnceUxUDkotkrgOnKl2SXchZcyfH tRS1bJs7QIkLSIUZuqmVWk1e+DGWAnpsBaIOtf6DmuZ8N/kOIRL+TqzJVvYRuBfI 1GfY8pPlN5uSN3YRC4Gz/7/B2f/FQ0Cx1t8QcNDEKhFJFKpGsZc4u0xVGzJ6sIqD tLfkM+dPBe/OWQ3p84wlViL6iUf3p2cTOcza -----END CERTIFICATE-----Generated at Tue Jul 28 20:39:11 2026 by rpki-client