$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft File: B729F0C7BF295C6844FD328B324A1ED8598032F9.mft (raw, json) Hash identifier: GYZz9mqrC82QqZ6KkYdE8XeIyxtESt/uVsIyv1v+42M= Subject key identifier: 5E:17:53:C6:7E:FD:F8:72:A7:57:57:AD:12:B0:AE:5D:C1:3C:81:AB Authority key identifier: B7:29:F0:C7:BF:29:5C:68:44:FD:32:8B:32:4A:1E:D8:59:80:32:F9 Certificate issuer: /CN=B729F0C7BF295C6844FD328B324A1ED8598032F9 Certificate serial: 06797D67CF4D28F0E4B869DA1600C8583885D984 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft Manifest number: 0254 Signing time: Mon 21 Sep 2026 16:09:37 +0000 Manifest this update: Mon 21 Sep 2026 16:04:37 +0000 Manifest next update: Tue 22 Sep 2026 19:57:37 +0000 Files and hashes: 1: B729F0C7BF295C6844FD328B324A1ED8598032F9.crl (hash: hxuQPvGrK7l3lmU6aKBaRyD4SRhh14hYqdGwzwn1KzY=) 2: 326130353a646663313a383236303a3a2f34342d3438203d3e203331383938.roa (hash: 0vTIJjguwD6ZK/UD8aNqhNS77f9gmxngYOuYo0s0sec=) 3: 326130353a646663313a383230303a3a2f34302d3438203d3e20323136343532.roa (hash: YjEWO425Fp9BmEsaR7rNNKxgXNYuMwOnITmnIsrwlT4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.crl rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 18:34:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:79:7d:67:cf:4d:28:f0:e4:b8:69:da:16:00:c8:58:38:85:d9:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B729F0C7BF295C6844FD328B324A1ED8598032F9 Validity Not Before: Sep 21 16:04:37 2026 GMT Not After : Sep 22 19:57:37 2026 GMT Subject: CN=5E1753C67EFDF872A75757AD12B0AE5DC13C81AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:df:06:a3:33:04:f5:d1:46:e2:3e:89:df:89: 5c:cd:df:81:23:58:8a:0f:3a:19:45:61:a2:68:7a: 84:25:f5:8f:2e:d2:79:10:d8:55:5a:0e:a0:1c:5c: 42:c0:fb:83:9a:18:37:d0:5f:32:a8:39:00:4e:c3: 33:ba:0b:05:76:c2:13:f2:6a:00:e7:d5:a3:72:8a: f0:bb:f1:f9:c9:6d:e0:68:25:4d:36:c3:31:e5:bc: 20:75:80:01:26:fd:ae:2f:c9:04:2b:5f:a3:99:c5: 10:6b:00:24:1d:58:01:e9:2e:ef:85:4f:43:6f:1a: 27:fd:ab:10:99:a7:eb:1b:91:77:f1:db:15:8d:9a: 1c:2c:22:bd:4c:80:fa:e7:c1:fa:b1:1d:22:be:e5: 36:77:e0:58:e1:4a:68:24:87:03:c1:77:d0:28:90: 05:58:32:3f:73:c2:13:e8:75:4c:fd:9c:a0:e1:52: 36:ef:d6:93:5a:59:07:cd:f7:cc:69:c2:eb:34:05: 05:67:d6:11:73:69:d9:4f:1e:9f:37:43:67:fe:2d: 7c:0e:fb:31:7b:d2:2d:82:b2:41:a0:5a:82:ba:0f: a6:3c:31:4f:92:e7:99:52:be:80:d6:92:00:78:64: 7c:3e:ea:94:a1:e5:7e:92:3c:7a:88:c4:d8:f6:e0: 24:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:17:53:C6:7E:FD:F8:72:A7:57:57:AD:12:B0:AE:5D:C1:3C:81:AB X509v3 Authority Key Identifier: keyid:B7:29:F0:C7:BF:29:5C:68:44:FD:32:8B:32:4A:1E:D8:59:80:32:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:2a:f8:02:94:1d:2a:4b:83:7b:c2:c4:f8:f2:1b:c2:e3:10: e5:c0:9e:2e:4c:5e:7e:fa:ab:80:74:1f:be:92:8f:40:37:38: e2:0d:4a:0d:9d:cb:df:18:4c:62:0f:a4:5d:56:0f:b2:1a:51: 65:25:f5:95:f5:db:ef:08:62:1e:04:39:31:bd:9a:5c:41:08: a9:0a:4b:78:a3:c5:f3:33:b9:60:64:64:c5:a4:a6:2d:d3:ae: bb:f0:8e:2c:b9:a2:6e:23:52:6f:e7:9d:8a:91:74:3a:47:4d: 73:61:6a:1a:2c:f2:d8:25:53:84:37:90:18:5d:ab:8f:d4:33: c6:f4:0e:7d:ab:62:fc:b2:44:e0:16:a8:49:66:2b:13:13:04: 00:fb:0c:95:7c:4d:a4:d3:a6:cf:f5:b2:3a:61:d2:d4:8d:49: f6:02:d7:a4:65:75:cf:24:01:40:0f:05:ab:54:aa:7f:17:79: 99:1c:e7:a4:33:bd:e9:49:5c:9e:c8:ab:6b:47:75:43:14:33: 0b:2b:6e:c2:da:59:c3:d1:b2:ca:fa:b2:df:27:af:2f:d0:fe: 41:b8:c6:25:80:f4:28:23:87:89:d0:cd:a6:20:4f:2f:45:90: 4b:73:2c:aa:d9:21:6c:c7:ce:f6:5a:f8:46:7a:a4:d1:8a:c6: 13:77:58:ad -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUBnl9Z89NKPDkuGnaFgDIWDiF2YQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcyOUYwQzdCRjI5NUM2ODQ0RkQzMjhCMzI0QTFFRDg1 OTgwMzJGOTAeFw0yNjA5MjExNjA0MzdaFw0yNjA5MjIxOTU3MzdaMDMxMTAvBgNV BAMTKDVFMTc1M0M2N0VGREY4NzJBNzU3NTdBRDEyQjBBRTVEQzEzQzgxQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg3wajMwT10UbiPonfiVzN34Ej WIoPOhlFYaJoeoQl9Y8u0nkQ2FVaDqAcXELA+4OaGDfQXzKoOQBOwzO6CwV2whPy agDn1aNyivC78fnJbeBoJU02wzHlvCB1gAEm/a4vyQQrX6OZxRBrACQdWAHpLu+F T0NvGif9qxCZp+sbkXfx2xWNmhwsIr1MgPrnwfqxHSK+5TZ34FjhSmgkhwPBd9Ao kAVYMj9zwhPodUz9nKDhUjbv1pNaWQfN98xpwus0BQVn1hFzadlPHp83Q2f+LXwO +zF70i2CskGgWoK6D6Y8MU+S55lSvoDWkgB4ZHw+6pSh5X6SPHqIxNj24CTVAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUXhdTxn79+HKnV1etErCuXcE8gaswHwYDVR0j BBgwFoAUtynwx78pXGhE/TKLMkoe2FmAMvkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNk OGVmLzMvQjcyOUYwQzdCRjI5NUM2ODQ0RkQzMjhCMzI0QTFFRDg1OTgwMzJGOS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0I3MjlGMEM3QkYyOTVD Njg0NEZEMzI4QjMyNEExRUQ4NTk4MDMyRjkuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNkOGVm LzMvQjcyOUYwQzdCRjI5NUM2ODQ0RkQzMjhCMzI0QTFFRDg1OTgwMzJGOS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAKEq+AKUHSpLg3vCxPjyG8LjEOXAni5MXn76q4B0H76Sj0A3OOINSg2d y98YTGIPpF1WD7IaUWUl9ZX12+8IYh4EOTG9mlxBCKkKS3ijxfMzuWBkZMWkpi3T rrvwjiy5om4jUm/nnYqRdDpHTXNhahos8tglU4Q3kBhdq4/UM8b0Dn2rYvyyROAW qElmKxMTBAD7DJV8TaTTps/1sjph0tSNSfYC16Rldc8kAUAPBatUqn8XeZkc56Qz velJXJ7Iq2tHdUMUMwsrbsLaWcPRssr6st8nry/Q/kG4xiWA9Cgjh4nQzaYgTy9F kEtzLKrZIWzHzvZa+EZ6pNGKxhN3WK0= -----END CERTIFICATE-----Generated at Tue Sep 22 06:53:47 2026 by rpki-client