$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft File: CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft (raw, json) Hash identifier: JM7WJXAWGODzTEZJNhGDEvJ7/zk7yeNwswPDa5ZUu0s= Subject key identifier: 2D:E3:86:7B:53:60:97:7D:80:BB:B2:A5:DB:06:66:F9:9C:58:4D:90 Authority key identifier: CC:6E:CC:46:20:C3:32:98:BA:AE:F1:70:9A:D6:D0:59:5C:D2:56:5C Certificate issuer: /CN=CC6ECC4620C33298BAAEF1709AD6D0595CD2565C Certificate serial: 0AC6F8D2C203A802AF2DE39F9C11AB95B7D41BB3 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft Manifest number: 0297 Signing time: Tue 10 Nov 2026 09:44:02 +0000 Manifest this update: Tue 10 Nov 2026 09:39:02 +0000 Manifest next update: Wed 11 Nov 2026 13:25:02 +0000 Files and hashes: 1: CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl (hash: gkBmX/pkLxXcVgEEtW/PuS5MHhx9W2G/enhhhnrPA0A=) 2: 326130353a646663313a383530303a3a2f34302d3430203d3e20323136343535.roa (hash: b9rd9SGbXvvvzK+D0FWbq0BInp6dAR3HKF/6onJHEfc=) 3: 326130353a646663313a393630303a3a2f34302d3430203d3e20323136343535.roa (hash: s3vZksQWbyouGRJqfpkziZUFeKyXQLPp4pKI5MlbQ60=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Nov 2026 11:33:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:c6:f8:d2:c2:03:a8:02:af:2d:e3:9f:9c:11:ab:95:b7:d4:1b:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC6ECC4620C33298BAAEF1709AD6D0595CD2565C Validity Not Before: Nov 10 09:39:02 2026 GMT Not After : Nov 11 13:25:02 2026 GMT Subject: CN=2DE3867B5360977D80BBB2A5DB0666F99C584D90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:b4:58:7b:4a:5a:07:6d:89:f5:82:35:46:1b: dc:b4:00:25:52:91:64:a4:52:76:5a:51:70:96:27: 43:c3:0a:9d:23:1a:a6:af:bf:f4:24:37:28:bb:09: f3:fc:7f:3b:26:62:06:1b:ac:55:f1:be:8a:be:7f: ef:05:dc:82:04:6a:29:17:06:8e:f9:f4:3d:fb:25: 94:61:ae:cc:c0:9a:b7:74:65:32:1c:67:79:38:07: 5f:0f:d1:f9:22:98:3d:7f:b6:e5:e3:f3:5c:87:37: d9:b3:53:9e:11:ee:f0:67:d3:cf:f1:6c:78:c3:da: 99:3a:b5:07:e7:cb:cd:f1:74:7d:b8:15:9b:1a:ee: 21:64:05:f8:cf:a3:db:63:4b:79:75:21:d6:2c:85: 7c:14:fe:e0:ad:13:5e:3e:c5:86:dc:c1:e1:02:a1: 16:98:9b:02:52:fd:af:f5:38:35:d7:37:08:be:97: 5e:c6:98:0e:b6:9f:e5:7e:fd:85:18:9e:4c:e2:95: 08:23:c5:c3:8f:f8:e0:18:75:ad:43:bc:7f:3d:60: 5a:48:b6:b5:b2:6f:63:ca:ca:7e:17:47:63:c1:85: 46:9d:49:80:38:61:74:4c:53:06:2b:65:ca:4d:be: 8b:1c:7f:81:ad:e0:60:f1:9c:e5:c9:31:be:0b:93: 9e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:E3:86:7B:53:60:97:7D:80:BB:B2:A5:DB:06:66:F9:9C:58:4D:90 X509v3 Authority Key Identifier: keyid:CC:6E:CC:46:20:C3:32:98:BA:AE:F1:70:9A:D6:D0:59:5C:D2:56:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:6f:76:8a:c0:fe:48:6e:41:b5:fd:51:e2:19:fa:e2:da:24: 5d:33:af:f8:e9:8d:1a:ea:ae:cf:94:02:0a:89:ae:64:97:04: df:6e:18:b9:f4:9a:64:bf:db:4b:e9:c1:55:43:1a:ba:84:d7: b5:3a:ad:ac:86:c1:f2:bd:ca:2f:ff:5a:e5:e6:d4:62:53:36: dc:04:90:7d:67:42:85:c5:6f:56:2c:55:33:15:f1:e3:f8:82: 3b:5c:66:83:f9:5f:13:71:75:76:fe:50:fe:a8:c7:a7:f6:26: 50:82:08:0d:c4:6f:34:76:60:71:31:4c:4d:b0:38:b3:10:d2: fa:d0:a8:fc:2d:22:9a:ea:70:ef:f5:f6:0c:c6:5c:fe:f2:94: c4:fc:ac:b8:2b:2a:f5:0b:d7:aa:4c:5e:9e:c0:fa:a9:21:60: e1:a6:7a:2d:61:03:d6:ad:27:07:87:f7:d4:0b:5e:3c:79:1b: 35:1a:2a:70:d5:a2:ea:5d:71:33:c4:c5:89:bd:24:90:a6:40: e9:8b:4a:45:ea:30:20:35:8a:29:04:cc:1e:ce:c0:94:ae:2a: e3:da:8d:f9:e9:08:77:82:18:9e:fd:c9:f2:5a:22:2e:33:6b: 9d:40:f7:61:77:75:55:a0:79:6c:ad:b2:47:ac:7d:b1:f2:f7: 65:a0:09:2c -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUCsb40sIDqAKvLeOfnBGrlbfUG7MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M2RUNDNDYyMEMzMzI5OEJBQUVGMTcwOUFENkQwNTk1 Q0QyNTY1QzAeFw0yNjExMTAwOTM5MDJaFw0yNjExMTExMzI1MDJaMDMxMTAvBgNV BAMTKDJERTM4NjdCNTM2MDk3N0Q4MEJCQjJBNURCMDY2NkY5OUM1ODREOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0tFh7SloHbYn1gjVGG9y0ACVS kWSkUnZaUXCWJ0PDCp0jGqavv/QkNyi7CfP8fzsmYgYbrFXxvoq+f+8F3IIEaikX Bo759D37JZRhrszAmrd0ZTIcZ3k4B18P0fkimD1/tuXj81yHN9mzU54R7vBn08/x bHjD2pk6tQfny83xdH24FZsa7iFkBfjPo9tjS3l1IdYshXwU/uCtE14+xYbcweEC oRaYmwJS/a/1ODXXNwi+l17GmA62n+V+/YUYnkzilQgjxcOP+OAYda1DvH89YFpI trWyb2PKyn4XR2PBhUadSYA4YXRMUwYrZcpNvoscf4Gt4GDxnOXJMb4Lk54ZAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQULeOGe1Ngl32Au7Kl2wZm+ZxYTZAwHwYDVR0j BBgwFoAUzG7MRiDDMpi6rvFwmtbQWVzSVlwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1 NjRhLzMvQ0M2RUNDNDYyMEMzMzI5OEJBQUVGMTcwOUFENkQwNTk1Q0QyNTY1Qy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0NDNkVDQzQ2MjBDMzMy OThCQUFFRjE3MDlBRDZEMDU5NUNEMjU2NUMuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1NjRh LzMvQ0M2RUNDNDYyMEMzMzI5OEJBQUVGMTcwOUFENkQwNTk1Q0QyNTY1Qy5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAGdvdorA/khuQbX9UeIZ+uLaJF0zr/jpjRrqrs+UAgqJrmSXBN9uGLn0 mmS/20vpwVVDGrqE17U6rayGwfK9yi//WuXm1GJTNtwEkH1nQoXFb1YsVTMV8eP4 gjtcZoP5XxNxdXb+UP6ox6f2JlCCCA3EbzR2YHExTE2wOLMQ0vrQqPwtIprqcO/1 9gzGXP7ylMT8rLgrKvUL16pMXp7A+qkhYOGmei1hA9atJweH99QLXjx5GzUaKnDV oupdcTPExYm9JJCmQOmLSkXqMCA1iikEzB7OwJSuKuPajfnpCHeCGJ79yfJaIi4z a51A92F3dVWgeWytskesfbHy92WgCSw= -----END CERTIFICATE-----Generated at Tue Nov 10 19:30:13 2026 by rpki-client