$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft File: 6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft (raw, json) Hash identifier: 8Z9tXcuObkmkDuGYjCV/DQnYdz5ZJcv86NYyK2s3dyM= Subject key identifier: FE:12:C9:85:B6:E7:34:89:EE:53:65:FA:0D:5C:B6:85:2E:13:A4:47 Authority key identifier: 6E:F8:DF:8B:74:C5:D8:BB:67:37:EC:42:CE:03:2A:B4:B0:3E:0C:51 Certificate issuer: /CN=6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51 Certificate serial: 0CCB40441F305A08D8DDA3C504B3B793C72BA195 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft Manifest number: 0141 Signing time: Mon 02 Mar 2026 00:36:26 +0000 Manifest this update: Mon 02 Mar 2026 00:31:26 +0000 Manifest next update: Tue 03 Mar 2026 03:21:26 +0000 Files and hashes: 1: 326130613a363034303a336638303a3a2f34312d3438203d3e203136353039.roa (hash: Wmi4Se034d+qqZcAnERqLlh4fra7054HHLp3mkWO2Ww=) 2: 6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.crl (hash: gdv+F6QPvh9mhZrJssx6i5Qwdkja0ehPUvwDxXQBfkQ=) 3: 326130613a363034303a336638303a3a2f34312d3438203d3e203134363138.roa (hash: aHvhuFqDO1GB7QIZ+LV93NwGnOmb8RZNrGiJRajypMI=) 4: 326130613a363034303a336630303a3a2f34302d3438203d3e20323033303639.roa (hash: rHPewLaTkppiYRuEKYbkMC6q0fSzfeWOiDhEN8UQLrI=) 5: 326130613a363034303a313130303a3a2f34302d3430203d3e20323033303639.roa (hash: pHFnoNPoWytPyebFL74GP4B+9dNFxdZc97XyE0fhg1o=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.crl rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 00:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:cb:40:44:1f:30:5a:08:d8:dd:a3:c5:04:b3:b7:93:c7:2b:a1:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51 Validity Not Before: Mar 2 00:31:26 2026 GMT Not After : Mar 3 03:21:26 2026 GMT Subject: CN=FE12C985B6E73489EE5365FA0D5CB6852E13A447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:8e:bb:28:bc:66:b9:68:4f:67:0d:f2:b5:56: 4b:bb:c5:45:b7:26:99:38:af:2c:4e:ef:c3:ce:c7: 51:be:52:19:f7:dc:ba:00:31:dc:c9:73:33:48:15: ec:26:f3:19:99:55:66:4c:4e:29:be:e9:b9:7a:26: 95:d0:fb:a3:fb:8f:fb:ea:f5:65:db:87:11:ab:20: 7c:7c:15:56:65:0b:85:5b:22:79:4e:33:92:51:11: 2c:1b:e1:68:34:b2:db:09:af:24:24:eb:f2:e4:e3: ad:f8:15:77:ab:f7:70:37:ea:32:23:7c:d6:06:87: 21:fd:d9:7b:8b:84:cb:25:92:de:01:2b:66:d6:57: 6f:e7:5a:30:d8:1a:29:de:e2:ec:15:0c:0b:42:e7: d0:03:ce:d6:5d:8e:ac:51:b6:2a:12:96:bd:dd:f1: ff:4d:54:78:bd:d0:f2:6c:06:59:e4:55:d1:fa:e0: 6e:f7:b8:48:b1:17:0f:dc:3c:bc:2c:b3:cb:75:50: 66:c8:f4:23:68:29:23:02:ea:3d:9a:6e:53:55:3e: b0:ba:7f:55:ed:37:d4:45:91:89:b9:43:54:59:84: d8:5f:6b:fd:c9:fe:55:5c:8a:9a:46:8d:04:0e:b0: 56:73:14:f1:fa:1b:01:12:29:fc:c1:59:f9:ab:4a: 3c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:12:C9:85:B6:E7:34:89:EE:53:65:FA:0D:5C:B6:85:2E:13:A4:47 X509v3 Authority Key Identifier: keyid:6E:F8:DF:8B:74:C5:D8:BB:67:37:EC:42:CE:03:2A:B4:B0:3E:0C:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:cf:2d:da:70:f8:40:07:95:09:d4:18:ba:d8:fd:c3:e6:9b: 31:05:6d:8f:aa:6d:d4:e0:ff:2b:5f:07:33:98:7e:4b:12:6e: b5:72:2a:fb:e3:1c:32:c7:db:d9:eb:f6:10:82:09:71:28:0b: f2:04:25:7f:1e:7b:b1:4a:e5:11:b6:04:2c:00:d0:a8:f7:98: cc:71:c9:e3:89:a0:4b:77:1c:26:6f:ec:93:ef:60:31:c8:de: f2:dc:34:72:a0:f0:a8:1e:15:5e:80:bf:f7:89:6e:3b:7a:d8: 6c:3d:31:d4:75:01:9d:88:11:e5:e2:73:92:1d:a6:d7:7d:79: 8a:67:96:87:c8:9b:e2:b5:ff:71:f3:9b:16:d0:43:2a:33:f6: 30:e6:39:20:21:95:14:59:d7:68:54:a9:b9:8d:ea:1a:ff:dc: 41:1a:aa:cd:6a:bd:e8:5f:c6:ea:bb:23:a1:b0:f2:a0:7d:e8: 76:4a:ae:89:40:40:5a:bc:46:31:a5:94:d6:27:87:d7:b5:51: 31:d6:5f:66:6f:35:14:6c:0e:4b:c9:22:1d:73:be:a3:92:ac: aa:e9:bb:8f:1f:64:2f:d9:a0:56:e0:d0:2a:8b:9c:38:13:e0: 07:73:b2:fb:77:40:9e:04:2d:f4:7c:8a:9e:35:d0:56:e9:4a: 17:62:45:2b -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgIUDMtARB8wWgjY3aPFBLO3k8croZUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkVGOERGOEI3NEM1RDhCQjY3MzdFQzQyQ0UwMzJBQjRC MDNFMEM1MTAeFw0yNjAzMDIwMDMxMjZaFw0yNjAzMDMwMzIxMjZaMDMxMTAvBgNV BAMTKEZFMTJDOTg1QjZFNzM0ODlFRTUzNjVGQTBENUNCNjg1MkUxM0E0NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzjrsovGa5aE9nDfK1Vku7xUW3 Jpk4ryxO78POx1G+Uhn33LoAMdzJczNIFewm8xmZVWZMTim+6bl6JpXQ+6P7j/vq 9WXbhxGrIHx8FVZlC4VbInlOM5JRESwb4Wg0stsJryQk6/Lk4634FXer93A36jIj fNYGhyH92XuLhMslkt4BK2bWV2/nWjDYGine4uwVDAtC59ADztZdjqxRtioSlr3d 8f9NVHi90PJsBlnkVdH64G73uEixFw/cPLwss8t1UGbI9CNoKSMC6j2ablNVPrC6 f1XtN9RFkYm5Q1RZhNhfa/3J/lVcippGjQQOsFZzFPH6GwESKfzBWfmrSjwbAgMB AAGjggJhMIICXTAdBgNVHQ4EFgQU/hLJhbbnNInuU2X6DVy2hS4TpEcwHwYDVR0j BBgwFoAUbvjfi3TF2LtnN+xCzgMqtLA+DFEwDgYDVR0PAQH/BAQDAgeAMIGXBgNV HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzFiZjhlOTc3LTcyNzgtNDZjZi1hYmQxLTk5Y2QxZmQy YmU0ZS8xMC82RUY4REY4Qjc0QzVEOEJCNjczN0VDNDJDRTAzMkFCNEIwM0UwQzUx LmNybDB6BggrBgEFBQcBAQRuMGwwagYIKwYBBQUHMAKGXnJzeW5jOi8vY2xvdWRp ZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xPVURJRS1SUEtJLzQvNkVGOERGOEI3NEM1 RDhCQjY3MzdFQzQyQ0UwMzJBQjRCMDNFMEM1MS5jZXIwgaAGCCsGAQUFBwELBIGT MIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi ZTRlLzEwLzZFRjhERjhCNzRDNUQ4QkI2NzM3RUM0MkNFMDMyQUI0QjAzRTBDNTEu bWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQ MAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3 DQEBCwUAA4IBAQDMzy3acPhAB5UJ1Bi62P3D5psxBW2Pqm3U4P8rXwczmH5LEm61 cir74xwyx9vZ6/YQgglxKAvyBCV/HnuxSuURtgQsANCo95jMccnjiaBLdxwmb+yT 72AxyN7y3DRyoPCoHhVegL/3iW47ethsPTHUdQGdiBHl4nOSHabXfXmKZ5aHyJvi tf9x85sW0EMqM/Yw5jkgIZUUWddoVKm5jeoa/9xBGqrNar3oX8bquyOhsPKgfeh2 Sq6JQEBavEYxpZTWJ4fXtVEx1l9mbzUUbA5LySIdc76jkqyq6buPH2Qv2aBW4NAq i5w4E+AHc7L7d0CeBC30fIqeNdBW6UoXYkUr -----END CERTIFICATE-----Generated at Mon Mar 2 12:14:28 2026 by rpki-client