$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft File: B729F0C7BF295C6844FD328B324A1ED8598032F9.mft (raw, json) Hash identifier: fa3yodPy3T6TyWWLI8iuLCd0JyVHI/zsMFlo0g4xQ1E= Subject key identifier: 7A:03:CD:35:EA:4B:A3:48:58:EA:90:57:05:35:45:C1:E8:81:9B:07 Authority key identifier: B7:29:F0:C7:BF:29:5C:68:44:FD:32:8B:32:4A:1E:D8:59:80:32:F9 Certificate issuer: /CN=B729F0C7BF295C6844FD328B324A1ED8598032F9 Certificate serial: 5AA1E9CC8C78083FF34DC4C9A90C57055C7C9462 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft Manifest number: 0144 Signing time: Mon 02 Mar 2026 00:10:48 +0000 Manifest this update: Mon 02 Mar 2026 00:05:48 +0000 Manifest next update: Tue 03 Mar 2026 03:08:48 +0000 Files and hashes: 1: 326130353a646663313a383230303a3a2f34302d3438203d3e20323136343532.roa (hash: tbMEmJLRx8p/XooueSgD+2D8XMkhb8zPBfDKGLGOZ18=) 2: B729F0C7BF295C6844FD328B324A1ED8598032F9.crl (hash: xIGaQL8CtoQ3zQ90X7erJUNMsZQqLThYw6yXDdl60nw=) 3: 326130353a646663313a383236303a3a2f34342d3438203d3e203331383938.roa (hash: NyB2Q3nplRrrVqQaiZpQzKBuInw96biJRlaf2Wfrra4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.crl rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 09:02:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:a1:e9:cc:8c:78:08:3f:f3:4d:c4:c9:a9:0c:57:05:5c:7c:94:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B729F0C7BF295C6844FD328B324A1ED8598032F9 Validity Not Before: Mar 2 00:05:48 2026 GMT Not After : Mar 3 03:08:48 2026 GMT Subject: CN=7A03CD35EA4BA34858EA9057053545C1E8819B07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f1:6e:a0:ec:04:2f:47:0a:18:4e:2f:ba:f2: 10:46:0b:b2:84:f1:ec:da:ee:77:e0:35:a1:d3:64: 3e:0c:6e:6f:7e:bc:97:9d:cb:b7:be:84:fc:63:20: e1:d8:ab:af:ad:bc:2a:c8:e1:94:87:e1:4d:d5:ea: 7a:fe:d2:79:64:15:96:49:9f:35:d6:10:b2:2d:61: b7:2f:73:58:94:ae:d7:fe:2a:1f:74:7a:7b:d0:9f: bf:17:ac:e3:a3:59:5c:b6:5a:da:5c:0e:cf:1a:7c: c2:38:17:f8:b5:de:58:0e:5f:5a:7c:8d:e3:bc:fd: 2e:91:f8:30:a0:4d:ad:07:9f:a4:ff:56:23:cb:61: a4:1e:f1:88:45:92:8f:b1:8a:80:29:db:b0:dd:ae: b3:f8:f0:4f:5b:b4:d6:a4:56:7d:82:bc:b5:01:3a: b8:6b:0d:35:4a:f4:cb:6d:ba:75:4d:c0:b5:ad:c2: 7e:31:db:f1:4e:24:42:22:59:48:f0:ba:4a:0c:d9: 39:39:bc:c1:af:39:a8:0f:25:9a:78:52:99:a5:23: d2:37:98:01:00:73:79:85:bb:b3:30:39:22:4f:d8: 06:26:99:5b:1d:0d:93:1d:36:0f:ba:2c:64:a6:b6: d4:16:20:f4:d1:b3:4b:c3:9d:fa:39:72:98:f3:79: 97:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:03:CD:35:EA:4B:A3:48:58:EA:90:57:05:35:45:C1:E8:81:9B:07 X509v3 Authority Key Identifier: keyid:B7:29:F0:C7:BF:29:5C:68:44:FD:32:8B:32:4A:1E:D8:59:80:32:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:90:76:b9:89:11:4a:c7:72:60:57:85:72:40:9a:14:d3:dd: 08:54:a1:3e:b5:27:73:50:e1:3b:d7:f5:e6:b3:60:e0:d5:ed: c4:4d:3c:54:e3:42:2e:61:b5:c7:97:f1:d2:5e:df:56:d1:44: 05:c2:8e:d9:43:8b:78:14:f7:43:da:5b:c3:48:58:bc:4f:d0: c4:0e:ff:9b:f3:f4:6e:32:1b:c9:f4:46:bc:71:7c:70:de:f3: 0b:32:22:d2:1b:6e:bb:7c:25:1f:18:b3:45:8c:e6:8b:2e:d8: b7:9d:81:5a:bb:2f:63:d6:e1:7f:ca:80:9a:a5:97:95:95:78: b6:1d:9c:36:a9:0f:54:70:3c:3b:54:16:d8:15:a4:b1:32:63: cf:36:52:ed:14:5a:57:fc:31:06:6c:e5:97:00:a2:01:6c:ec: 62:3e:08:81:96:a5:c5:a1:31:28:1b:3f:f7:a1:ba:e8:3d:d3: 51:79:4a:90:47:9e:32:a7:9a:95:49:db:56:98:fe:5d:64:cd: 08:13:1e:a6:51:4e:ca:dc:fa:bf:08:6a:cf:04:37:51:0b:a4: bc:7f:24:c5:be:ab:a4:68:f6:75:77:be:84:2e:40:03:64:44: df:bc:38:0c:fd:e9:11:49:60:6b:82:4d:33:3b:6e:89:d3:a9: d3:7e:a3:4c -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUWqHpzIx4CD/zTcTJqQxXBVx8lGIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcyOUYwQzdCRjI5NUM2ODQ0RkQzMjhCMzI0QTFFRDg1 OTgwMzJGOTAeFw0yNjAzMDIwMDA1NDhaFw0yNjAzMDMwMzA4NDhaMDMxMTAvBgNV BAMTKDdBMDNDRDM1RUE0QkEzNDg1OEVBOTA1NzA1MzU0NUMxRTg4MTlCMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC38W6g7AQvRwoYTi+68hBGC7KE 8eza7nfgNaHTZD4Mbm9+vJedy7e+hPxjIOHYq6+tvCrI4ZSH4U3V6nr+0nlkFZZJ nzXWELItYbcvc1iUrtf+Kh90envQn78XrOOjWVy2WtpcDs8afMI4F/i13lgOX1p8 jeO8/S6R+DCgTa0Hn6T/ViPLYaQe8YhFko+xioAp27DdrrP48E9btNakVn2CvLUB OrhrDTVK9MttunVNwLWtwn4x2/FOJEIiWUjwukoM2Tk5vMGvOagPJZp4UpmlI9I3 mAEAc3mFu7MwOSJP2AYmmVsdDZMdNg+6LGSmttQWIPTRs0vDnfo5cpjzeZdXAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUegPNNepLo0hY6pBXBTVFweiBmwcwHwYDVR0j BBgwFoAUtynwx78pXGhE/TKLMkoe2FmAMvkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNk OGVmLzMvQjcyOUYwQzdCRjI5NUM2ODQ0RkQzMjhCMzI0QTFFRDg1OTgwMzJGOS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0I3MjlGMEM3QkYyOTVD Njg0NEZEMzI4QjMyNEExRUQ4NTk4MDMyRjkuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNkOGVm LzMvQjcyOUYwQzdCRjI5NUM2ODQ0RkQzMjhCMzI0QTFFRDg1OTgwMzJGOS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAGyQdrmJEUrHcmBXhXJAmhTT3QhUoT61J3NQ4TvX9eazYODV7cRNPFTj Qi5htceX8dJe31bRRAXCjtlDi3gU90PaW8NIWLxP0MQO/5vz9G4yG8n0RrxxfHDe 8wsyItIbbrt8JR8Ys0WM5osu2LedgVq7L2PW4X/KgJqll5WVeLYdnDapD1RwPDtU FtgVpLEyY882Uu0UWlf8MQZs5ZcAogFs7GI+CIGWpcWhMSgbP/ehuug901F5SpBH njKnmpVJ21aY/l1kzQgTHqZRTsrc+r8Ias8EN1ELpLx/JMW+q6Ro9nV3voQuQANk RN+8OAz96RFJYGuCTTM7bonTqdN+o0w= -----END CERTIFICATE-----Generated at Mon Mar 2 02:07:30 2026 by rpki-client