$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft File: CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft (raw, json) Hash identifier: qztsOXWquTjkckR0A2ux2V+Hf5oUpg6eI2hxotFgpUY= Subject key identifier: 77:8A:CD:69:CD:FB:8F:85:8E:44:A9:1F:CA:5D:D3:3E:21:44:67:49 Authority key identifier: CC:6E:CC:46:20:C3:32:98:BA:AE:F1:70:9A:D6:D0:59:5C:D2:56:5C Certificate issuer: /CN=CC6ECC4620C33298BAAEF1709AD6D0595CD2565C Certificate serial: 1B98207855234431617988D231805A56099D1F68 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft Manifest number: 0144 Signing time: Sun 01 Mar 2026 11:01:20 +0000 Manifest this update: Sun 01 Mar 2026 10:56:20 +0000 Manifest next update: Mon 02 Mar 2026 14:36:20 +0000 Files and hashes: 1: CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl (hash: H3AGN6KUw+wGkMTfYTXKp6Uq3USo6o/0lD8WsCBTYM8=) 2: 326130353a646663313a393630303a3a2f34302d3430203d3e20323136343535.roa (hash: EPbQn4nTyAleGN23OETUsYn80EOl1eLpliPnGLTdXDk=) 3: 326130353a646663313a383530303a3a2f34302d3430203d3e20323136343535.roa (hash: oi3cTY9RPbSSa44GzFqVMPw4EmmK/P6XuRB3HCSy6ZU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 09:02:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:98:20:78:55:23:44:31:61:79:88:d2:31:80:5a:56:09:9d:1f:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC6ECC4620C33298BAAEF1709AD6D0595CD2565C Validity Not Before: Mar 1 10:56:20 2026 GMT Not After : Mar 2 14:36:20 2026 GMT Subject: CN=778ACD69CDFB8F858E44A91FCA5DD33E21446749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:06:41:40:10:f6:78:ee:c2:c3:1e:00:30:53: a2:43:eb:aa:28:0e:89:62:3f:bf:56:80:b6:3a:25: 9a:77:b8:3b:03:38:fe:d2:e0:41:c7:9a:e2:85:5c: 3d:63:e9:38:47:a4:ae:bd:df:31:3f:80:37:a7:0a: 05:f7:6c:e7:79:72:59:b7:35:87:6f:d7:0b:dd:04: 4b:b3:af:52:93:07:4c:9f:31:45:f1:eb:bc:4b:2c: 8b:63:2a:54:88:c6:a8:a3:0b:ec:36:0d:25:9b:f9: 32:e4:b9:cf:9f:69:eb:19:f7:8d:ef:d0:4f:aa:2a: c5:eb:e6:23:0b:e0:c6:a6:7e:ff:4b:dd:84:01:5b: c5:6e:cf:ed:27:3e:48:cf:7e:72:9c:6a:fe:ee:99: 65:43:8f:76:0b:dd:9f:2b:b4:6b:b4:cc:31:b3:87: 30:0e:d9:56:b2:43:a8:a6:2d:f9:58:ce:93:41:e8: 33:44:b9:2b:e6:80:1b:42:21:a8:b6:8a:dd:6e:c1: aa:cd:a3:62:27:12:5d:5d:12:39:54:85:ac:50:b6: 5b:76:de:fc:58:9c:94:d0:3f:37:97:f9:69:39:29: 7c:0e:51:8a:7c:b1:5d:62:ae:d8:2a:56:af:09:90: e3:8e:cf:ed:69:f8:f0:d1:c0:17:6a:20:bf:f5:23: 80:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:8A:CD:69:CD:FB:8F:85:8E:44:A9:1F:CA:5D:D3:3E:21:44:67:49 X509v3 Authority Key Identifier: keyid:CC:6E:CC:46:20:C3:32:98:BA:AE:F1:70:9A:D6:D0:59:5C:D2:56:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:a0:30:42:34:81:b5:ee:b6:ca:9d:29:a8:f1:5b:71:37:2d: 4c:c2:ec:c6:9f:7e:f0:31:43:b9:38:50:40:71:5a:85:7b:fc: 50:4a:ef:9c:1a:fb:a7:dc:a0:c0:c2:4f:ee:dc:be:37:7a:54: 16:1d:a3:45:e1:7e:57:7b:93:26:0a:41:4e:bc:6f:03:57:c0: c4:e3:0d:48:a0:ac:66:ef:27:df:0f:ae:23:8c:11:51:69:bd: 27:07:0c:4e:01:b1:be:15:9f:1b:1d:c0:3d:6d:7c:15:2f:71: 71:d6:c4:6f:03:07:4a:aa:88:3f:d8:a6:b6:e0:2b:b4:67:65: 98:00:d9:42:b6:e6:48:2f:97:5e:00:1f:91:67:0f:18:6d:37: ad:fa:21:f6:d8:ef:45:52:1e:1a:e4:9c:8c:db:5c:81:b8:a8: 1b:d6:5e:72:35:fe:4d:8a:23:80:bb:46:f9:d2:d2:10:46:e9: d8:9a:13:86:be:a5:7e:18:94:19:27:93:5b:77:70:eb:1a:22: 3a:f2:6c:85:ff:8d:05:87:c6:a9:c4:0b:b9:ab:c3:cf:5b:52: 04:cd:88:84:35:a8:ac:2e:cc:24:59:fa:74:dc:61:98:7a:0e: c4:b0:32:f9:81:aa:f0:14:a2:9c:e2:42:68:ee:25:22:42:7b: 94:6d:98:6c -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUG5ggeFUjRDFheYjSMYBaVgmdH2gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M2RUNDNDYyMEMzMzI5OEJBQUVGMTcwOUFENkQwNTk1 Q0QyNTY1QzAeFw0yNjAzMDExMDU2MjBaFw0yNjAzMDIxNDM2MjBaMDMxMTAvBgNV BAMTKDc3OEFDRDY5Q0RGQjhGODU4RTQ0QTkxRkNBNUREMzNFMjE0NDY3NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYBkFAEPZ47sLDHgAwU6JD66oo DoliP79WgLY6JZp3uDsDOP7S4EHHmuKFXD1j6ThHpK693zE/gDenCgX3bOd5clm3 NYdv1wvdBEuzr1KTB0yfMUXx67xLLItjKlSIxqijC+w2DSWb+TLkuc+faesZ943v 0E+qKsXr5iML4Mamfv9L3YQBW8Vuz+0nPkjPfnKcav7umWVDj3YL3Z8rtGu0zDGz hzAO2VayQ6imLflYzpNB6DNEuSvmgBtCIai2it1uwarNo2InEl1dEjlUhaxQtlt2 3vxYnJTQPzeX+Wk5KXwOUYp8sV1irtgqVq8JkOOOz+1p+PDRwBdqIL/1I4C7AgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUd4rNac37j4WORKkfyl3TPiFEZ0kwHwYDVR0j BBgwFoAUzG7MRiDDMpi6rvFwmtbQWVzSVlwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1 NjRhLzMvQ0M2RUNDNDYyMEMzMzI5OEJBQUVGMTcwOUFENkQwNTk1Q0QyNTY1Qy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0NDNkVDQzQ2MjBDMzMy OThCQUFFRjE3MDlBRDZEMDU5NUNEMjU2NUMuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1NjRh LzMvQ0M2RUNDNDYyMEMzMzI5OEJBQUVGMTcwOUFENkQwNTk1Q0QyNTY1Qy5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAImgMEI0gbXutsqdKajxW3E3LUzC7MaffvAxQ7k4UEBxWoV7/FBK75wa +6fcoMDCT+7cvjd6VBYdo0Xhfld7kyYKQU68bwNXwMTjDUigrGbvJ98PriOMEVFp vScHDE4Bsb4VnxsdwD1tfBUvcXHWxG8DB0qqiD/YprbgK7RnZZgA2UK25kgvl14A H5FnDxhtN636IfbY70VSHhrknIzbXIG4qBvWXnI1/k2KI4C7RvnS0hBG6diaE4a+ pX4YlBknk1t3cOsaIjrybIX/jQWHxqnEC7mrw89bUgTNiIQ1qKwuzCRZ+nTcYZh6 DsSwMvmBqvAUopziQmjuJSJCe5RtmGw= -----END CERTIFICATE-----Generated at Sun Mar 1 22:16:35 2026 by rpki-client