$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft File: 6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft (raw, json) Hash identifier: fyJYya7+ZUJyJqdY6ZzOmdvdtT+UFTSpCctZVbRVMMg= Subject key identifier: 0B:5A:11:B2:38:C3:52:53:39:70:D5:CF:BD:62:9D:D8:97:62:C2:5E Authority key identifier: 69:86:DC:82:81:2C:47:DA:14:99:4B:8E:6E:72:7B:72:E0:B2:F8:D8 Certificate issuer: /CN=6986DC82812C47DA14994B8E6E727B72E0B2F8D8 Certificate serial: 0463A185FE29C140EE73E356DDBB9386D6EF3401 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft Manifest number: 0176 Signing time: Thu 23 Jul 2026 15:18:14 +0000 Manifest this update: Thu 23 Jul 2026 15:13:14 +0000 Manifest next update: Fri 24 Jul 2026 18:37:14 +0000 Files and hashes: 1: 326130613a363034303a343430303a3a2f34382d3438203d3e203530313034.roa (hash: Hi/9N+5IQGx093OQEgbXr/N8qqlN06r+epXMCIP3zqE=) 2: 326130613a363034303a343430303a3a2f34382d3438203d3e20313532333638.roa (hash: gotlPq13MIgn9CpWrSq139KCagvKTA63f16ENY1QYXI=) 3: 6986DC82812C47DA14994B8E6E727B72E0B2F8D8.crl (hash: m/SxxPL9A2zjl1pcDApeUPKOt9KPNSBIt1joowEMzbo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.crl rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 16:54:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:63:a1:85:fe:29:c1:40:ee:73:e3:56:dd:bb:93:86:d6:ef:34:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6986DC82812C47DA14994B8E6E727B72E0B2F8D8 Validity Not Before: Jul 23 15:13:14 2026 GMT Not After : Jul 24 18:37:14 2026 GMT Subject: CN=0B5A11B238C352533970D5CFBD629DD89762C25E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4f:8c:78:95:b2:5f:69:11:24:d5:35:3e:07: 58:36:eb:8e:d9:b9:09:cb:ef:7f:6e:20:09:eb:b7: d5:14:94:d3:2d:64:1a:6b:43:0c:4f:db:14:78:9f: c1:66:52:b0:e4:81:23:81:d7:a8:df:82:6c:57:25: c8:5f:78:76:42:07:0d:2d:e8:26:96:85:ae:98:e7: e8:59:91:5b:1d:f7:6d:15:63:1c:b3:fa:e5:02:34: 5d:32:41:c3:c2:d3:90:d5:ed:e2:6c:78:54:cf:04: 15:86:41:aa:f0:6b:11:87:3d:57:27:a9:69:fe:91: f7:f3:99:2e:d4:85:a6:df:58:dc:78:69:31:74:f8: e6:4c:27:d3:47:2e:47:6f:76:83:ac:dc:da:10:2b: 9b:e0:68:3d:47:d5:98:b4:6e:35:6f:d5:c1:bb:d9: 96:a0:d1:bb:fb:8a:45:06:d3:91:32:ff:38:73:63: 6f:d3:a3:8d:94:d8:00:c2:b9:56:20:ae:23:a1:24: 6b:6c:ea:ef:ed:27:52:91:fe:39:a5:70:26:d0:d8: 49:59:b5:c6:9c:91:1c:bd:9d:3e:e8:a5:7e:ce:c3: fd:a6:ca:1f:bd:c9:23:86:2f:d2:6c:af:89:f7:40: ce:1b:b6:b5:e0:8b:b7:2b:71:a0:1d:dd:9c:b7:1a: cd:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:5A:11:B2:38:C3:52:53:39:70:D5:CF:BD:62:9D:D8:97:62:C2:5E X509v3 Authority Key Identifier: keyid:69:86:DC:82:81:2C:47:DA:14:99:4B:8E:6E:72:7B:72:E0:B2:F8:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:88:2e:03:46:33:12:7b:44:ef:1f:47:a5:be:87:95:60:31: 96:4d:fb:ec:7b:30:a6:9c:d9:b5:59:71:01:4e:c1:79:89:88: 68:fc:e5:33:3b:24:9f:ce:c8:36:30:ad:4c:ac:d6:14:ba:cc: 06:66:a9:66:d2:0e:0a:77:4a:e8:c9:21:e6:e1:70:ce:6f:c6: 10:57:b3:47:ce:8b:66:82:ae:bc:ae:f7:9d:70:ac:6d:d9:dd: b9:a8:a7:47:c1:48:70:04:c7:df:8b:d7:1c:c1:3d:de:56:dd: 5f:3b:f7:3e:ec:a0:36:d1:46:26:e9:a0:6d:2d:14:5f:f1:5a: ce:af:24:2c:b9:9e:34:a3:96:ac:aa:7c:65:39:c5:90:67:80: 61:bb:60:f7:b5:a2:9f:7b:99:04:3b:11:01:82:d6:1b:87:01: f0:89:3e:4b:36:3d:4e:3d:69:5f:96:01:d7:10:42:22:0c:46: 47:a4:b4:f3:e2:c0:88:6f:ae:9d:f7:e0:8e:eb:86:2e:5f:90: d7:ea:4b:8c:d7:19:12:dc:fb:90:ce:8a:91:e6:b7:92:b0:f5: 63:b9:f4:c2:b1:2a:c3:22:44:67:26:73:0f:d7:58:22:e7:5d: 0a:2b:88:0b:bf:b5:1c:11:21:62:4a:77:e0:2c:34:e5:0a:02: 2f:5a:b3:c1 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUBGOhhf4pwUDuc+NW3buThtbvNAEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk4NkRDODI4MTJDNDdEQTE0OTk0QjhFNkU3MjdCNzJF MEIyRjhEODAeFw0yNjA3MjMxNTEzMTRaFw0yNjA3MjQxODM3MTRaMDMxMTAvBgNV BAMTKDBCNUExMUIyMzhDMzUyNTMzOTcwRDVDRkJENjI5REQ4OTc2MkMyNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpT4x4lbJfaREk1TU+B1g2647Z uQnL739uIAnrt9UUlNMtZBprQwxP2xR4n8FmUrDkgSOB16jfgmxXJchfeHZCBw0t 6CaWha6Y5+hZkVsd920VYxyz+uUCNF0yQcPC05DV7eJseFTPBBWGQarwaxGHPVcn qWn+kffzmS7UhabfWNx4aTF0+OZMJ9NHLkdvdoOs3NoQK5vgaD1H1Zi0bjVv1cG7 2Zag0bv7ikUG05Ey/zhzY2/To42U2ADCuVYgriOhJGts6u/tJ1KR/jmlcCbQ2ElZ tcackRy9nT7opX7Ow/2myh+9ySOGL9Jsr4n3QM4btrXgi7crcaAd3Zy3Gs1bAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUC1oRsjjDUlM5cNXPvWKd2Jdiwl4wHwYDVR0j BBgwFoAUaYbcgoEsR9oUmUuObnJ7cuCy+NgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVk OGM0LzkvNjk4NkRDODI4MTJDNDdEQTE0OTk0QjhFNkU3MjdCNzJFMEIyRjhEOC5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzY5ODZEQzgyODEyQzQ3 REExNDk5NEI4RTZFNzI3QjcyRTBCMkY4RDguY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVkOGM0 LzkvNjk4NkRDODI4MTJDNDdEQTE0OTk0QjhFNkU3MjdCNzJFMEIyRjhEOC5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAHSILgNGMxJ7RO8fR6W+h5VgMZZN++x7MKac2bVZcQFOwXmJiGj85TM7 JJ/OyDYwrUys1hS6zAZmqWbSDgp3SujJIebhcM5vxhBXs0fOi2aCrryu951wrG3Z 3bmop0fBSHAEx9+L1xzBPd5W3V879z7soDbRRibpoG0tFF/xWs6vJCy5njSjlqyq fGU5xZBngGG7YPe1op97mQQ7EQGC1huHAfCJPks2PU49aV+WAdcQQiIMRkektPPi wIhvrp334I7rhi5fkNfqS4zXGRLc+5DOipHmt5Kw9WO59MKxKsMiRGcmcw/XWCLn XQoriAu/tRwRIWJKd+AsNOUKAi9as8E= -----END CERTIFICATE-----Generated at Fri Jul 24 02:42:45 2026 by rpki-client