$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft File: 0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft (raw, json) Hash identifier: Jp10ys9ce39t+Zwgk7Q1jseC1QvdmfW1JY7bdUhpZU4= Subject key identifier: 0E:B3:42:83:3E:63:8F:E8:EF:46:4C:1C:03:56:38:D6:AC:54:61:EA Authority key identifier: 0B:3B:68:A2:06:B6:AF:84:A3:4A:A1:B7:63:2E:99:AB:06:F5:20:77 Certificate issuer: /CN=0B3B68A206B6AF84A34AA1B7632E99AB06F52077 Certificate serial: 1EDE08C4545DCEE024CF66A2CE80DFA522EC0A8A Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft Manifest number: 013F Signing time: Tue 22 Sep 2026 09:07:57 +0000 Manifest this update: Tue 22 Sep 2026 09:02:57 +0000 Manifest next update: Wed 23 Sep 2026 09:13:57 +0000 Files and hashes: 1: 0B3B68A206B6AF84A34AA1B7632E99AB06F52077.crl (hash: fZA+LPnIvDEIK4wgjMOEu7TWH741/7Mj5GJBu4u2Qzs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.crl rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 23:56:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:de:08:c4:54:5d:ce:e0:24:cf:66:a2:ce:80:df:a5:22:ec:0a:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B3B68A206B6AF84A34AA1B7632E99AB06F52077 Validity Not Before: Sep 22 09:02:57 2026 GMT Not After : Sep 23 09:13:57 2026 GMT Subject: CN=0EB342833E638FE8EF464C1C035638D6AC5461EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e9:e6:35:dc:fb:98:3b:8c:53:a3:bc:11:d7: 2e:db:df:53:96:80:5d:d4:c2:70:c5:ba:f0:f6:a4: 73:e2:2b:b3:86:73:dc:ec:9a:b8:8e:58:9a:06:91: ff:76:66:07:2d:39:b3:a0:f9:5f:33:7e:b5:4c:d2: a7:78:3d:53:b3:2f:75:0f:8d:b6:4f:04:13:63:51: 0b:d2:e6:7e:0d:37:f1:d2:cc:f9:b5:e7:90:be:2e: a9:76:05:ec:4b:83:44:ab:cb:8f:aa:98:ea:e3:47: 5d:f2:f6:b7:1d:e8:b4:77:15:76:12:40:e9:58:56: fb:3b:7f:ec:d7:65:6d:4a:17:9d:4c:04:cf:f4:ad: d8:5b:c8:ea:3b:78:98:4d:9c:ae:1a:b4:52:5b:9f: 4c:62:72:0e:cd:85:11:26:3e:d9:a3:57:1c:57:48: fe:2e:e4:a1:8a:d3:f8:db:8e:df:5d:5a:6f:39:83: b8:30:86:44:04:e0:ab:6e:60:3a:b6:53:2d:e3:54: d8:fd:8c:7a:49:af:23:2e:0b:fb:56:6c:1d:2b:49: c4:e3:38:20:a5:09:1f:1a:79:60:75:fe:ce:b8:53: fb:7c:00:2e:66:74:19:12:97:68:2d:cd:8d:c9:7c: 68:eb:01:1c:4d:ab:9c:41:87:68:ce:aa:c4:e1:73: 88:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:B3:42:83:3E:63:8F:E8:EF:46:4C:1C:03:56:38:D6:AC:54:61:EA X509v3 Authority Key Identifier: keyid:0B:3B:68:A2:06:B6:AF:84:A3:4A:A1:B7:63:2E:99:AB:06:F5:20:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:3e:cb:12:a4:d8:e0:b5:81:40:4b:05:42:ad:0e:74:3c:d2: c0:e5:03:58:ad:20:fb:65:91:16:59:24:91:eb:ac:1d:4a:97: 40:df:19:f2:9b:38:da:fe:e6:93:e3:16:02:96:ad:33:d9:dd: 53:66:19:33:a3:a2:be:b8:08:a8:65:e8:f3:17:4b:39:b1:0a: c5:45:4c:80:8d:24:f1:fb:f9:4d:47:ed:a7:6e:d0:8e:26:7a: ea:45:e7:9b:9f:21:cf:1d:80:01:a3:85:08:0a:29:06:bd:6b: 50:5c:78:86:c2:d2:61:a4:db:0c:5c:72:63:50:06:3f:df:08: 4c:f6:9c:7a:65:ec:7d:cd:b4:34:1b:52:3b:6d:75:60:73:2a: c8:54:71:51:df:f0:fc:26:5a:5c:ee:d8:47:e3:fd:9c:f9:60: c2:1c:2b:fa:c9:a0:8d:61:e8:83:df:cc:f7:1a:66:f6:49:ec: d9:9f:f6:95:2f:a6:fb:bd:1c:fa:98:d8:e3:67:48:0c:4c:93: 0f:b9:a2:58:22:65:61:53:52:67:60:c2:ae:c2:4a:ee:d2:9a: d6:c2:b1:9a:61:58:59:04:a1:3e:e0:de:1c:a6:ed:7d:90:36: c5:5e:14:33:4f:03:34:96:31:7f:11:7f:80:6b:8f:3e:5a:7f: 22:70:85:71 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgIUHt4IxFRdzuAkz2aizoDfpSLsCoowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEIzQjY4QTIwNkI2QUY4NEEzNEFBMUI3NjMyRTk5QUIw NkY1MjA3NzAeFw0yNjA5MjIwOTAyNTdaFw0yNjA5MjMwOTEzNTdaMDMxMTAvBgNV BAMTKDBFQjM0MjgzM0U2MzhGRThFRjQ2NEMxQzAzNTYzOEQ2QUM1NDYxRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC86eY13PuYO4xTo7wR1y7b31OW gF3UwnDFuvD2pHPiK7OGc9zsmriOWJoGkf92ZgctObOg+V8zfrVM0qd4PVOzL3UP jbZPBBNjUQvS5n4NN/HSzPm155C+Lql2BexLg0Sry4+qmOrjR13y9rcd6LR3FXYS QOlYVvs7f+zXZW1KF51MBM/0rdhbyOo7eJhNnK4atFJbn0xicg7NhREmPtmjVxxX SP4u5KGK0/jbjt9dWm85g7gwhkQE4KtuYDq2Uy3jVNj9jHpJryMuC/tWbB0rScTj OCClCR8aeWB1/s64U/t8AC5mdBkSl2gtzY3JfGjrARxNq5xBh2jOqsThc4jFAgMB AAGjggJhMIICXTAdBgNVHQ4EFgQUDrNCgz5jj+jvRkwcA1Y41qxUYeowHwYDVR0j BBgwFoAUCztooga2r4SjSqG3Yy6Zqwb1IHcwDgYDVR0PAQH/BAQDAgeAMIGXBgNV HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzFiZjhlOTc3LTcyNzgtNDZjZi1hYmQxLTk5Y2QxZmQy YmU0ZS8xMC8wQjNCNjhBMjA2QjZBRjg0QTM0QUExQjc2MzJFOTlBQjA2RjUyMDc3 LmNybDB6BggrBgEFBQcBAQRuMGwwagYIKwYBBQUHMAKGXnJzeW5jOi8vY2xvdWRp ZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xPVURJRS1SUEtJLzQvMEIzQjY4QTIwNkI2 QUY4NEEzNEFBMUI3NjMyRTk5QUIwNkY1MjA3Ny5jZXIwgaAGCCsGAQUFBwELBIGT MIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi ZTRlLzEwLzBCM0I2OEEyMDZCNkFGODRBMzRBQTFCNzYzMkU5OUFCMDZGNTIwNzcu bWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQ MAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3 DQEBCwUAA4IBAQAJPssSpNjgtYFASwVCrQ50PNLA5QNYrSD7ZZEWWSSR66wdSpdA 3xnymzja/uaT4xYClq0z2d1TZhkzo6K+uAioZejzF0s5sQrFRUyAjSTx+/lNR+2n btCOJnrqReebnyHPHYABo4UICikGvWtQXHiGwtJhpNsMXHJjUAY/3whM9px6Zex9 zbQ0G1I7bXVgcyrIVHFR3/D8Jlpc7thH4/2c+WDCHCv6yaCNYeiD38z3Gmb2SezZ n/aVL6b7vRz6mNjjZ0gMTJMPuaJYImVhU1JnYMKuwkru0prWwrGaYVhZBKE+4N4c pu19kDbFXhQzTwM0ljF/EX+Aa48+Wn8icIVx -----END CERTIFICATE-----Generated at Tue Sep 22 15:53:16 2026 by rpki-client