$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft File: CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft (raw, json) Hash identifier: 8gcFeAQFzHCRXMEq9IDuB1OVYbrPIqcFNznZxNLUL50= Subject key identifier: BD:70:76:8F:03:E5:80:13:CA:F3:CB:D9:8A:9D:3E:03:C3:BC:7D:98 Authority key identifier: CC:6E:CC:46:20:C3:32:98:BA:AE:F1:70:9A:D6:D0:59:5C:D2:56:5C Certificate issuer: /CN=CC6ECC4620C33298BAAEF1709AD6D0595CD2565C Certificate serial: 3AB21579B7A6BBF47E592CB69E9CF547162B2E73 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft Manifest number: 0253 Signing time: Sun 20 Sep 2026 09:23:13 +0000 Manifest this update: Sun 20 Sep 2026 09:18:13 +0000 Manifest next update: Mon 21 Sep 2026 10:07:13 +0000 Files and hashes: 1: 326130353a646663313a383530303a3a2f34302d3430203d3e20323136343535.roa (hash: b9rd9SGbXvvvzK+D0FWbq0BInp6dAR3HKF/6onJHEfc=) 2: CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl (hash: WjG5KhfUq2HN4NofJ6q+wvNzga72h70li3R+L30QNxw=) 3: 326130353a646663313a393630303a3a2f34302d3430203d3e20323136343535.roa (hash: s3vZksQWbyouGRJqfpkziZUFeKyXQLPp4pKI5MlbQ60=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 10:07:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:b2:15:79:b7:a6:bb:f4:7e:59:2c:b6:9e:9c:f5:47:16:2b:2e:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC6ECC4620C33298BAAEF1709AD6D0595CD2565C Validity Not Before: Sep 20 09:18:13 2026 GMT Not After : Sep 21 10:07:13 2026 GMT Subject: CN=BD70768F03E58013CAF3CBD98A9D3E03C3BC7D98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:5f:fc:e3:fe:17:3c:7c:66:f1:62:72:43:53: b8:90:ca:39:70:4c:0b:8b:9e:fe:c1:22:bd:45:2d: b4:43:33:92:ed:54:f3:aa:f3:5c:a0:b7:7f:2b:3b: 56:dc:bb:70:4e:35:83:6e:c8:d8:5f:9d:8f:58:f0: 96:17:cc:5a:4e:ae:8b:77:9a:fe:ac:4b:01:41:00: 15:93:e4:d7:21:31:7c:1b:3c:04:99:5c:05:36:34: 28:c5:e2:06:00:47:51:ff:e2:5e:94:c7:ef:60:ef: bc:c7:80:50:aa:6d:a4:f1:2f:13:7c:bc:76:2c:b1: c4:9c:55:e9:c5:f4:11:24:04:25:6b:d7:55:b1:56: a4:25:9f:b7:69:dc:ad:d2:e1:c8:b5:9a:63:2a:5f: f6:e2:9e:04:3b:bd:7c:1a:93:0c:1d:96:ae:af:51: 90:39:70:fb:e8:a9:e7:0e:1e:a6:86:37:25:6d:a3: bf:b5:ba:8e:25:b5:59:0c:5c:e8:78:e6:2d:98:9d: d4:11:f7:c2:e2:fd:a9:84:36:f9:7e:66:e7:f0:6a: 47:3c:71:73:3c:61:71:22:04:e6:4f:b5:34:05:52: 4c:e7:6a:27:a5:5d:83:7a:a6:9d:db:b2:57:78:30: 57:b6:17:f9:5e:c9:f2:9d:a8:cb:1a:31:47:0d:77: c2:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:70:76:8F:03:E5:80:13:CA:F3:CB:D9:8A:9D:3E:03:C3:BC:7D:98 X509v3 Authority Key Identifier: keyid:CC:6E:CC:46:20:C3:32:98:BA:AE:F1:70:9A:D6:D0:59:5C:D2:56:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:dd:b3:b1:04:14:a9:c4:58:ad:50:42:3c:95:73:9f:89:8b: f0:60:9d:9a:07:be:e6:ca:8f:22:63:58:3b:03:89:95:8a:07: 9c:cb:38:c2:dc:01:3c:8b:b2:57:2a:a2:49:fd:dd:58:9a:77: 98:fd:c9:b3:c4:52:54:d8:12:9c:65:07:97:86:f3:81:d5:b0: 58:a6:e6:ab:a6:f8:23:66:3a:11:a1:72:55:fc:89:bb:e8:f1: 1e:2d:51:23:76:57:95:70:f6:ab:a9:57:bb:d6:14:d1:40:be: 57:d8:5c:1e:0a:1a:58:b3:b0:91:41:2a:ba:90:c9:05:53:2a: 73:63:67:c0:70:b1:d6:d7:ce:34:65:d4:24:32:a2:86:52:76: 07:bc:af:67:ea:50:08:dc:1c:5c:81:97:eb:52:5b:cd:01:9f: c4:24:0c:45:a4:98:ee:57:5b:e9:27:20:6f:b0:96:0a:bc:1f: 9b:e3:12:cf:c8:f3:b5:60:7d:b7:ae:f6:97:20:ed:67:5c:9f: 24:29:a4:50:8f:d2:6f:be:37:cf:b2:19:b5:3c:f2:bf:78:d4: 9f:d2:8f:8e:df:36:54:04:75:c2:83:78:f7:07:73:b7:13:85: ba:d6:31:22:8e:ef:42:31:df:00:60:2c:8f:48:de:5d:1d:0b: ff:dc:1a:ec -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUOrIVebemu/R+WSy2npz1RxYrLnMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M2RUNDNDYyMEMzMzI5OEJBQUVGMTcwOUFENkQwNTk1 Q0QyNTY1QzAeFw0yNjA5MjAwOTE4MTNaFw0yNjA5MjExMDA3MTNaMDMxMTAvBgNV BAMTKEJENzA3NjhGMDNFNTgwMTNDQUYzQ0JEOThBOUQzRTAzQzNCQzdEOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2X/zj/hc8fGbxYnJDU7iQyjlw TAuLnv7BIr1FLbRDM5LtVPOq81ygt38rO1bcu3BONYNuyNhfnY9Y8JYXzFpOrot3 mv6sSwFBABWT5NchMXwbPASZXAU2NCjF4gYAR1H/4l6Ux+9g77zHgFCqbaTxLxN8 vHYsscScVenF9BEkBCVr11WxVqQln7dp3K3S4ci1mmMqX/bingQ7vXwakwwdlq6v UZA5cPvoqecOHqaGNyVto7+1uo4ltVkMXOh45i2YndQR98Li/amENvl+Zufwakc8 cXM8YXEiBOZPtTQFUkznaielXYN6pp3bsld4MFe2F/leyfKdqMsaMUcNd8KvAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUvXB2jwPlgBPK88vZip0+A8O8fZgwHwYDVR0j BBgwFoAUzG7MRiDDMpi6rvFwmtbQWVzSVlwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1 NjRhLzMvQ0M2RUNDNDYyMEMzMzI5OEJBQUVGMTcwOUFENkQwNTk1Q0QyNTY1Qy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0NDNkVDQzQ2MjBDMzMy OThCQUFFRjE3MDlBRDZEMDU5NUNEMjU2NUMuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1NjRh LzMvQ0M2RUNDNDYyMEMzMzI5OEJBQUVGMTcwOUFENkQwNTk1Q0QyNTY1Qy5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAAbds7EEFKnEWK1QQjyVc5+Ji/BgnZoHvubKjyJjWDsDiZWKB5zLOMLc ATyLslcqokn93Viad5j9ybPEUlTYEpxlB5eG84HVsFim5qum+CNmOhGhclX8ibvo 8R4tUSN2V5Vw9qupV7vWFNFAvlfYXB4KGlizsJFBKrqQyQVTKnNjZ8BwsdbXzjRl 1CQyooZSdge8r2fqUAjcHFyBl+tSW80Bn8QkDEWkmO5XW+knIG+wlgq8H5vjEs/I 87Vgfbeu9pcg7WdcnyQppFCP0m++N8+yGbU88r941J/Sj47fNlQEdcKDePcHc7cT hbrWMSKO70Ix3wBgLI9I3l0dC//cGuw= -----END CERTIFICATE-----Generated at Mon Sep 21 01:38:55 2026 by rpki-client