$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft File: 6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft (raw, json) Hash identifier: lwmwvvWHvPUrNVam/Woq8sLhGmWu6SFZ5vp0nL9lDyI= Subject key identifier: 26:46:84:B4:2D:50:68:C8:12:92:2E:F6:48:62:C7:79:5B:AA:25:3E Authority key identifier: 69:86:DC:82:81:2C:47:DA:14:99:4B:8E:6E:72:7B:72:E0:B2:F8:D8 Certificate issuer: /CN=6986DC82812C47DA14994B8E6E727B72E0B2F8D8 Certificate serial: 6E8836D4172B9585469EFAAFFD2F3A0C15F30665 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft Manifest number: 01CA Signing time: Wed 23 Sep 2026 07:46:45 +0000 Manifest this update: Wed 23 Sep 2026 07:41:45 +0000 Manifest next update: Thu 24 Sep 2026 11:27:45 +0000 Files and hashes: 1: 326130613a363034303a343430303a3a2f34382d3438203d3e20313532333638.roa (hash: gotlPq13MIgn9CpWrSq139KCagvKTA63f16ENY1QYXI=) 2: 6986DC82812C47DA14994B8E6E727B72E0B2F8D8.crl (hash: 0+cpcJ4bLOa4S5xk8kNGz+ruhOHsXJgsjCu6GA0rKTM=) 3: 326130613a363034303a343430303a3a2f34382d3438203d3e203530313034.roa (hash: Hi/9N+5IQGx093OQEgbXr/N8qqlN06r+epXMCIP3zqE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.crl rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 04:17:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:88:36:d4:17:2b:95:85:46:9e:fa:af:fd:2f:3a:0c:15:f3:06:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6986DC82812C47DA14994B8E6E727B72E0B2F8D8 Validity Not Before: Sep 23 07:41:45 2026 GMT Not After : Sep 24 11:27:45 2026 GMT Subject: CN=264684B42D5068C812922EF64862C7795BAA253E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:58:78:80:f9:d9:65:aa:24:e9:e0:df:96:59: dc:ec:51:a7:2e:aa:55:e8:dd:c6:f2:cc:86:29:0a: cb:df:e1:ac:7a:9a:41:ea:af:f5:09:f6:8a:db:ea: 43:45:03:ac:4e:b7:fa:90:df:67:c7:2d:cb:cf:af: cd:15:2a:b6:5f:4d:04:9a:88:e9:d6:1b:d1:72:1a: 2e:5c:74:aa:9c:fa:1b:04:0b:60:8a:8e:2e:fd:6a: b2:08:3e:45:11:51:cb:16:51:a0:96:ec:45:c9:97: 49:c8:57:ab:b5:f6:76:87:c8:01:12:29:54:36:0d: ab:5f:09:92:cc:69:98:28:f6:c5:5e:1f:f7:d7:0f: 2c:c4:e2:e1:99:6c:55:60:c7:09:1b:87:71:f9:e5: ed:55:f7:5e:6c:b5:bf:36:61:ec:af:54:37:34:a1: 0f:fb:c1:98:03:7d:16:04:41:51:ef:0f:7c:cf:56: 0b:bb:4b:e0:f2:4e:33:1f:61:58:ed:88:27:69:fc: 11:cc:d6:80:fa:55:0a:6f:5a:5d:18:2c:61:2d:29: 2f:e1:a1:8c:1f:b2:0a:4a:f5:42:1a:64:a8:90:ee: 62:db:21:44:dc:e9:c6:ef:a9:7b:5f:f4:94:dc:8f: 4f:a2:01:15:15:2d:57:e9:b8:5a:c2:11:4a:5b:48: 4f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:46:84:B4:2D:50:68:C8:12:92:2E:F6:48:62:C7:79:5B:AA:25:3E X509v3 Authority Key Identifier: keyid:69:86:DC:82:81:2C:47:DA:14:99:4B:8E:6E:72:7B:72:E0:B2:F8:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:31:43:88:b3:39:71:88:40:6d:4b:d6:76:74:7c:2a:4d:27: fe:d8:b0:09:23:47:f6:10:df:39:81:5f:01:48:46:51:23:77: 39:62:b2:70:f7:01:8f:b3:4b:9b:b1:e7:34:e5:2d:3f:95:6a: 71:0f:bf:c0:14:d5:a8:c0:01:18:89:e6:5e:a6:11:9d:a5:c1: 74:1c:e3:a7:b2:ad:68:cd:c6:77:4a:11:5d:80:2a:45:c1:03: 88:4e:be:6d:75:0c:c1:43:b3:90:86:51:78:3a:6d:78:d9:fd: 02:48:be:0a:7b:7b:8a:88:a8:d4:4f:84:a2:55:94:9e:07:d6: b0:55:81:60:22:ed:0e:cc:05:40:c7:ec:77:6d:1d:9d:fc:e6: 46:a5:d2:c1:32:95:55:32:47:e5:97:23:ac:8b:54:b7:88:c5: dc:3f:e6:40:08:21:da:3f:e9:fb:cf:93:37:dc:a4:98:89:fe: 87:54:89:79:a7:86:df:52:7a:88:10:0c:13:3b:c5:b1:aa:c9: 81:27:b9:78:ff:24:cc:53:e6:37:4d:fc:3a:10:45:c7:12:5c: da:48:21:54:28:46:db:30:6c:80:1e:c5:52:6b:2e:36:3f:39: ca:e5:d4:98:75:f1:83:ba:14:36:6c:b6:7e:67:b1:35:1a:2a: 85:05:cc:11 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUbog21BcrlYVGnvqv/S86DBXzBmUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk4NkRDODI4MTJDNDdEQTE0OTk0QjhFNkU3MjdCNzJF MEIyRjhEODAeFw0yNjA5MjMwNzQxNDVaFw0yNjA5MjQxMTI3NDVaMDMxMTAvBgNV BAMTKDI2NDY4NEI0MkQ1MDY4QzgxMjkyMkVGNjQ4NjJDNzc5NUJBQTI1M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9WHiA+dllqiTp4N+WWdzsUacu qlXo3cbyzIYpCsvf4ax6mkHqr/UJ9orb6kNFA6xOt/qQ32fHLcvPr80VKrZfTQSa iOnWG9FyGi5cdKqc+hsEC2CKji79arIIPkURUcsWUaCW7EXJl0nIV6u19naHyAES KVQ2DatfCZLMaZgo9sVeH/fXDyzE4uGZbFVgxwkbh3H55e1V915stb82YeyvVDc0 oQ/7wZgDfRYEQVHvD3zPVgu7S+DyTjMfYVjtiCdp/BHM1oD6VQpvWl0YLGEtKS/h oYwfsgpK9UIaZKiQ7mLbIUTc6cbvqXtf9JTcj0+iARUVLVfpuFrCEUpbSE/FAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUJkaEtC1QaMgSki72SGLHeVuqJT4wHwYDVR0j BBgwFoAUaYbcgoEsR9oUmUuObnJ7cuCy+NgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVk OGM0LzkvNjk4NkRDODI4MTJDNDdEQTE0OTk0QjhFNkU3MjdCNzJFMEIyRjhEOC5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzY5ODZEQzgyODEyQzQ3 REExNDk5NEI4RTZFNzI3QjcyRTBCMkY4RDguY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVkOGM0 LzkvNjk4NkRDODI4MTJDNDdEQTE0OTk0QjhFNkU3MjdCNzJFMEIyRjhEOC5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBACsxQ4izOXGIQG1L1nZ0fCpNJ/7YsAkjR/YQ3zmBXwFIRlEjdzlisnD3 AY+zS5ux5zTlLT+VanEPv8AU1ajAARiJ5l6mEZ2lwXQc46eyrWjNxndKEV2AKkXB A4hOvm11DMFDs5CGUXg6bXjZ/QJIvgp7e4qIqNRPhKJVlJ4H1rBVgWAi7Q7MBUDH 7HdtHZ385kal0sEylVUyR+WXI6yLVLeIxdw/5kAIIdo/6fvPkzfcpJiJ/odUiXmn ht9SeogQDBM7xbGqyYEnuXj/JMxT5jdN/DoQRccSXNpIIVQoRtswbIAexVJrLjY/ Ocrl1Jh18YO6FDZstn5nsTUaKoUFzBE= -----END CERTIFICATE-----Generated at Wed Sep 23 20:34:32 2026 by rpki-client