$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft File: 6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft (raw, json) Hash identifier: VUg5ImdSv/2pSH/KI+GTO+KiY8XmJLcHZb3l9lHS4YI= Subject key identifier: B3:1B:8E:8A:BB:D5:1B:8A:A1:3E:45:D2:CF:D6:6E:57:08:93:38:09 Authority key identifier: 6E:F8:DF:8B:74:C5:D8:BB:67:37:EC:42:CE:03:2A:B4:B0:3E:0C:51 Certificate issuer: /CN=6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51 Certificate serial: 166AC39C6B6FDAD54D41EE7FEA8B9E5E2343D3CD Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft Manifest number: 02A1 Signing time: Mon 09 Nov 2026 11:53:00 +0000 Manifest this update: Mon 09 Nov 2026 11:48:00 +0000 Manifest next update: Tue 10 Nov 2026 14:16:00 +0000 Files and hashes: 1: 6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.crl (hash: liGVpwZolLDhom+hL43r3aEW7D3G70xWnu9D83yIC1I=) 2: 326130613a363034303a336638303a3a2f34312d3438203d3e203134363138.roa (hash: ZIuBwk2Q9o7H1LBTlQPRAM92cYe/3FAQ+wYOICqn9yc=) 3: 326130613a363034303a336630303a3a2f34302d3438203d3e20323033303639.roa (hash: w09/q37paAxT0xu6nJk+zKeBfyB3gsrZA5YOOkkxGkk=) 4: 326130613a363034303a313130303a3a2f34302d3430203d3e20323033303639.roa (hash: FpxciHRMcu92Dgeo/aZLzLKwNXy6EGrJgcdVPAlKEdg=) 5: 326130613a363034303a336638303a3a2f34312d3438203d3e203136353039.roa (hash: eBsqOoGIrV1lc0haZYlZZnvljOUHJXzG1G8J+aHN17U=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.crl rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Nov 2026 14:16:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:6a:c3:9c:6b:6f:da:d5:4d:41:ee:7f:ea:8b:9e:5e:23:43:d3:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51 Validity Not Before: Nov 9 11:48:00 2026 GMT Not After : Nov 10 14:16:00 2026 GMT Subject: CN=B31B8E8ABBD51B8AA13E45D2CFD66E5708933809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0d:05:5f:89:34:15:fa:4f:fb:3d:f9:e0:9e: cd:a8:38:c3:0d:93:12:cd:0e:fe:95:ee:3c:3b:c2: e1:48:90:fc:65:96:f4:50:9c:e7:71:bc:14:67:64: 8e:89:91:3c:51:58:4b:97:1f:19:1d:b6:4b:eb:6a: 87:9b:64:0d:9c:61:05:f5:1b:62:05:f7:e2:38:2c: 1a:4b:92:17:b9:ce:91:3d:4d:45:de:45:42:05:a9: 6c:88:6a:f7:a1:7b:b6:c8:9e:90:13:ca:f1:7a:3c: 96:8d:99:f4:58:ba:10:0d:aa:be:91:e4:3a:72:4b: 76:97:58:6c:f0:50:1b:9c:ad:af:b2:9d:7a:84:bf: c8:b9:5d:7f:36:01:fe:ed:0d:df:08:3e:91:3d:26: 72:85:34:8d:cb:fe:79:d1:d6:e3:03:78:bc:7c:21: 2d:14:eb:9e:c0:4e:de:01:64:9a:57:3d:70:3f:2c: 50:da:1c:fd:e7:69:f8:10:a8:d6:98:d5:3b:54:f0: c0:50:1e:0e:43:19:df:2b:ca:29:07:cf:99:d3:7d: 16:50:b2:41:cc:6a:12:46:fc:14:48:52:7a:16:b8: 0e:a2:c6:ae:d0:29:ee:7b:f6:bb:75:98:3f:0d:85: 13:87:e4:c6:3e:eb:da:95:d3:c3:6a:2d:80:45:dd: e2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:1B:8E:8A:BB:D5:1B:8A:A1:3E:45:D2:CF:D6:6E:57:08:93:38:09 X509v3 Authority Key Identifier: keyid:6E:F8:DF:8B:74:C5:D8:BB:67:37:EC:42:CE:03:2A:B4:B0:3E:0C:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:75:00:7e:1a:e8:ac:a5:76:3a:82:b7:1a:65:f0:ce:2b:21: 8a:b6:cb:aa:7e:68:bb:c8:92:1a:2a:09:db:09:a0:6d:aa:08: ce:1b:54:d2:89:c2:03:70:f1:1d:82:01:45:ce:82:ae:1b:85: 14:6e:91:55:99:3e:a2:91:4c:63:f5:1b:31:25:89:16:9f:d0: 87:5b:55:b4:55:39:fc:ac:b1:40:93:c2:88:85:c8:23:6c:e0: bb:9c:b7:87:98:a5:a1:a2:3f:fc:a8:8f:46:7e:23:ff:e5:d4: b5:46:78:ce:9d:52:16:8a:07:d3:d7:a9:28:d6:60:1c:41:23: f2:83:57:e4:ef:fa:58:47:f5:58:e4:42:d0:08:99:30:e6:55: 51:1a:84:da:a4:d8:76:f6:33:93:d4:c3:2b:53:70:bd:e1:6d: 78:63:55:92:95:82:c4:fc:3c:f1:bb:7d:40:fc:bf:29:87:f4: 16:e4:f8:49:a5:e2:0d:ad:cc:18:d5:ba:2f:27:6d:f2:36:b2: 03:ba:86:09:77:fe:af:6a:49:ee:b2:50:06:45:f0:ca:0d:e8: 40:f0:b1:78:f7:80:93:b8:02:20:1d:1e:2c:69:66:01:f8:30: 22:f3:68:0f:35:e4:30:56:f1:dd:9d:c9:de:e8:a0:2f:3e:14: 16:83:0f:c6 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgIUFmrDnGtv2tVNQe5/6oueXiND080wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkVGOERGOEI3NEM1RDhCQjY3MzdFQzQyQ0UwMzJBQjRC MDNFMEM1MTAeFw0yNjExMDkxMTQ4MDBaFw0yNjExMTAxNDE2MDBaMDMxMTAvBgNV BAMTKEIzMUI4RThBQkJENTFCOEFBMTNFNDVEMkNGRDY2RTU3MDg5MzM4MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKDQVfiTQV+k/7Pfngns2oOMMN kxLNDv6V7jw7wuFIkPxllvRQnOdxvBRnZI6JkTxRWEuXHxkdtkvraoebZA2cYQX1 G2IF9+I4LBpLkhe5zpE9TUXeRUIFqWyIavehe7bInpATyvF6PJaNmfRYuhANqr6R 5DpyS3aXWGzwUBucra+ynXqEv8i5XX82Af7tDd8IPpE9JnKFNI3L/nnR1uMDeLx8 IS0U657ATt4BZJpXPXA/LFDaHP3nafgQqNaY1TtU8MBQHg5DGd8ryikHz5nTfRZQ skHMahJG/BRIUnoWuA6ixq7QKe579rt1mD8NhROH5MY+69qV08NqLYBF3eLFAgMB AAGjggJhMIICXTAdBgNVHQ4EFgQUsxuOirvVG4qhPkXSz9ZuVwiTOAkwHwYDVR0j BBgwFoAUbvjfi3TF2LtnN+xCzgMqtLA+DFEwDgYDVR0PAQH/BAQDAgeAMIGXBgNV HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzFiZjhlOTc3LTcyNzgtNDZjZi1hYmQxLTk5Y2QxZmQy YmU0ZS8xMC82RUY4REY4Qjc0QzVEOEJCNjczN0VDNDJDRTAzMkFCNEIwM0UwQzUx LmNybDB6BggrBgEFBQcBAQRuMGwwagYIKwYBBQUHMAKGXnJzeW5jOi8vY2xvdWRp ZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xPVURJRS1SUEtJLzQvNkVGOERGOEI3NEM1 RDhCQjY3MzdFQzQyQ0UwMzJBQjRCMDNFMEM1MS5jZXIwgaAGCCsGAQUFBwELBIGT MIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi ZTRlLzEwLzZFRjhERjhCNzRDNUQ4QkI2NzM3RUM0MkNFMDMyQUI0QjAzRTBDNTEu bWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQ MAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3 DQEBCwUAA4IBAQBjdQB+GuispXY6grcaZfDOKyGKtsuqfmi7yJIaKgnbCaBtqgjO G1TSicIDcPEdggFFzoKuG4UUbpFVmT6ikUxj9RsxJYkWn9CHW1W0VTn8rLFAk8KI hcgjbOC7nLeHmKWhoj/8qI9GfiP/5dS1RnjOnVIWigfT16ko1mAcQSPyg1fk7/pY R/VY5ELQCJkw5lVRGoTapNh29jOT1MMrU3C94W14Y1WSlYLE/Dzxu31A/L8ph/QW 5PhJpeINrcwY1bovJ23yNrIDuoYJd/6vaknuslAGRfDKDehA8LF494CTuAIgHR4s aWYB+DAi82gPNeQwVvHdncne6KAvPhQWgw/G -----END CERTIFICATE-----Generated at Tue Nov 10 06:35:03 2026 by rpki-client