$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft File: CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft (raw, json) Hash identifier: kE5k1apRDz01ip+WU9Hesgnd566h0cox9rLCR796oO4= Subject key identifier: A7:94:2B:4F:42:75:C3:DE:9F:0E:25:ED:03:D4:F9:F8:C5:30:0E:0F Authority key identifier: CC:6E:CC:46:20:C3:32:98:BA:AE:F1:70:9A:D6:D0:59:5C:D2:56:5C Certificate issuer: /CN=CC6ECC4620C33298BAAEF1709AD6D0595CD2565C Certificate serial: 1E3B16036B9ECFC5C35D3787E7578A447304D316 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft Manifest number: 01D4 Signing time: Tue 16 Jun 2026 22:22:30 +0000 Manifest this update: Tue 16 Jun 2026 22:17:30 +0000 Manifest next update: Wed 17 Jun 2026 23:36:30 +0000 Files and hashes: 1: CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl (hash: HK67wCbFXC6Eg1zo7wCXHILeQCBVl1ENcY5IhrSCZ/4=) 2: 326130353a646663313a393630303a3a2f34302d3430203d3e20323136343535.roa (hash: s3vZksQWbyouGRJqfpkziZUFeKyXQLPp4pKI5MlbQ60=) 3: 326130353a646663313a383530303a3a2f34302d3430203d3e20323136343535.roa (hash: b9rd9SGbXvvvzK+D0FWbq0BInp6dAR3HKF/6onJHEfc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Jun 2026 23:36:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:3b:16:03:6b:9e:cf:c5:c3:5d:37:87:e7:57:8a:44:73:04:d3:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC6ECC4620C33298BAAEF1709AD6D0595CD2565C Validity Not Before: Jun 16 22:17:30 2026 GMT Not After : Jun 17 23:36:30 2026 GMT Subject: CN=A7942B4F4275C3DE9F0E25ED03D4F9F8C5300E0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:42:b3:25:71:1d:cb:19:07:55:32:80:14:85: 58:1a:fd:63:1e:5b:7f:51:6c:88:a4:11:95:cd:3f: 86:dd:64:31:41:20:7d:d6:c2:df:dc:47:32:d4:ad: a3:0c:d3:6e:54:0f:07:b8:fb:73:15:e0:72:7e:52: 8f:9b:de:7c:df:49:67:ec:4d:c8:29:ae:59:79:07: 97:b7:c3:cc:33:86:d5:9a:26:9e:b7:06:7d:14:b7: 03:bf:26:eb:9f:30:26:eb:ed:c9:02:66:72:06:f4: 0c:5a:4e:eb:ec:b5:98:08:ec:90:e6:8b:d8:19:12: 8e:18:a0:94:6d:d7:8b:34:dc:7d:e2:02:4d:b7:80: 21:87:0c:8e:9f:81:0a:6f:10:7f:4b:fb:d7:8e:e7: 5c:b8:00:a4:0d:25:35:d8:05:4f:14:08:68:6d:d8: c5:eb:fa:26:fe:40:fc:eb:fc:e6:15:87:be:a2:29: 2e:86:ee:b3:24:97:91:86:f1:9f:03:a8:d5:48:4d: f0:e5:40:b9:d8:b6:9d:4f:be:08:d6:d2:41:a1:da: d4:f6:4c:f7:78:bc:44:6e:fc:ae:e6:ad:98:87:d6: 5d:ca:28:3f:bf:d4:e7:8f:d1:98:a4:4e:86:74:d5: c7:6d:72:9b:c3:17:fe:a2:76:49:92:e8:d3:d0:b2: d3:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:94:2B:4F:42:75:C3:DE:9F:0E:25:ED:03:D4:F9:F8:C5:30:0E:0F X509v3 Authority Key Identifier: keyid:CC:6E:CC:46:20:C3:32:98:BA:AE:F1:70:9A:D6:D0:59:5C:D2:56:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:6f:ef:8a:38:fc:3e:82:15:5e:22:98:7b:7a:85:06:52:89: 24:8f:25:be:ce:d4:bb:02:1d:6e:51:f7:18:9f:ed:af:66:84: d6:3b:34:3c:60:77:8d:2c:02:72:01:c0:a9:8c:d4:9f:86:95: db:58:49:ac:84:27:8c:d4:87:6f:b8:e0:7a:ea:b8:8b:9d:b4: 7f:cc:83:6b:7e:f3:60:45:9d:03:03:9f:42:57:0a:3d:8a:31: bf:bb:43:67:27:25:21:55:26:cf:24:15:a4:bd:d6:f4:95:9e: f1:a7:04:e9:b6:f9:74:49:0f:99:5f:d2:96:2f:f0:4e:6c:32: 7b:f2:af:49:d5:eb:06:f6:e9:dc:00:f0:ff:25:12:00:86:0f: 8b:c2:a8:cb:0d:5d:03:39:6d:44:27:81:08:f8:80:02:cc:08: 6d:31:10:82:76:a7:f3:77:a0:18:07:ab:a0:e8:da:11:97:56: 0f:95:cb:a6:fb:ec:fe:8e:f5:bb:c8:2e:b5:eb:13:7d:a6:aa: e0:76:e6:7b:eb:d4:43:9f:31:49:5e:b2:fd:4b:86:97:70:84: db:6d:40:9b:47:32:e8:7b:00:0d:87:f2:bc:47:bf:fc:41:f7: be:17:7e:56:f1:1c:f0:bb:05:19:5a:40:16:06:eb:39:8b:23: 96:a8:48:7f -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUHjsWA2uez8XDXTeH51eKRHME0xYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M2RUNDNDYyMEMzMzI5OEJBQUVGMTcwOUFENkQwNTk1 Q0QyNTY1QzAeFw0yNjA2MTYyMjE3MzBaFw0yNjA2MTcyMzM2MzBaMDMxMTAvBgNV BAMTKEE3OTQyQjRGNDI3NUMzREU5RjBFMjVFRDAzRDRGOUY4QzUzMDBFMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXQrMlcR3LGQdVMoAUhVga/WMe W39RbIikEZXNP4bdZDFBIH3Wwt/cRzLUraMM025UDwe4+3MV4HJ+Uo+b3nzfSWfs Tcgprll5B5e3w8wzhtWaJp63Bn0UtwO/JuufMCbr7ckCZnIG9AxaTuvstZgI7JDm i9gZEo4YoJRt14s03H3iAk23gCGHDI6fgQpvEH9L+9eO51y4AKQNJTXYBU8UCGht 2MXr+ib+QPzr/OYVh76iKS6G7rMkl5GG8Z8DqNVITfDlQLnYtp1PvgjW0kGh2tT2 TPd4vERu/K7mrZiH1l3KKD+/1OeP0ZikToZ01cdtcpvDF/6idkmS6NPQstOnAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUp5QrT0J1w96fDiXtA9T5+MUwDg8wHwYDVR0j BBgwFoAUzG7MRiDDMpi6rvFwmtbQWVzSVlwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1 NjRhLzMvQ0M2RUNDNDYyMEMzMzI5OEJBQUVGMTcwOUFENkQwNTk1Q0QyNTY1Qy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0NDNkVDQzQ2MjBDMzMy OThCQUFFRjE3MDlBRDZEMDU5NUNEMjU2NUMuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1NjRh LzMvQ0M2RUNDNDYyMEMzMzI5OEJBQUVGMTcwOUFENkQwNTk1Q0QyNTY1Qy5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAEpv74o4/D6CFV4imHt6hQZSiSSPJb7O1LsCHW5R9xif7a9mhNY7NDxg d40sAnIBwKmM1J+GldtYSayEJ4zUh2+44HrquIudtH/Mg2t+82BFnQMDn0JXCj2K Mb+7Q2cnJSFVJs8kFaS91vSVnvGnBOm2+XRJD5lf0pYv8E5sMnvyr0nV6wb26dwA 8P8lEgCGD4vCqMsNXQM5bUQngQj4gALMCG0xEIJ2p/N3oBgHq6Do2hGXVg+Vy6b7 7P6O9bvILrXrE32mquB25nvr1EOfMUlesv1LhpdwhNttQJtHMuh7AA2H8rxHv/xB 974XflbxHPC7BRlaQBYG6zmLI5aoSH8= -----END CERTIFICATE-----Generated at Wed Jun 17 12:24:40 2026 by rpki-client