$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft File: 6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft (raw, json) Hash identifier: VF4Teq77RdxlUj2kyFguiz60sHGsJa2X/1eNBYHpeA4= Subject key identifier: F0:70:8A:96:38:7B:16:99:31:8F:0D:00:4F:D6:59:91:A9:79:6E:02 Authority key identifier: 6E:F8:DF:8B:74:C5:D8:BB:67:37:EC:42:CE:03:2A:B4:B0:3E:0C:51 Certificate issuer: /CN=6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51 Certificate serial: 7F735A2BF4A4A6341BCA31719E2D5AAF77F4BFC4 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft Manifest number: 0162 Signing time: Wed 25 Mar 2026 15:57:21 +0000 Manifest this update: Wed 25 Mar 2026 15:52:21 +0000 Manifest next update: Thu 26 Mar 2026 18:12:21 +0000 Files and hashes: 1: 326130613a363034303a336638303a3a2f34312d3438203d3e203134363138.roa (hash: aHvhuFqDO1GB7QIZ+LV93NwGnOmb8RZNrGiJRajypMI=) 2: 6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.crl (hash: vtODk0B3od7x/bBar9c3atMt+thK464UkGbX8T8GVOw=) 3: 326130613a363034303a336638303a3a2f34312d3438203d3e203136353039.roa (hash: Wmi4Se034d+qqZcAnERqLlh4fra7054HHLp3mkWO2Ww=) 4: 326130613a363034303a313130303a3a2f34302d3430203d3e20323033303639.roa (hash: pHFnoNPoWytPyebFL74GP4B+9dNFxdZc97XyE0fhg1o=) 5: 326130613a363034303a336630303a3a2f34302d3438203d3e20323033303639.roa (hash: rHPewLaTkppiYRuEKYbkMC6q0fSzfeWOiDhEN8UQLrI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.crl rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 18:12:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:73:5a:2b:f4:a4:a6:34:1b:ca:31:71:9e:2d:5a:af:77:f4:bf:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51 Validity Not Before: Mar 25 15:52:21 2026 GMT Not After : Mar 26 18:12:21 2026 GMT Subject: CN=F0708A96387B1699318F0D004FD65991A9796E02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:cc:e0:cd:38:d6:a6:9c:1c:11:17:93:ac:ce: f1:5d:b5:3d:c4:6a:d4:44:98:59:bf:42:ea:1f:0d: 43:c7:0c:dd:a5:8a:c8:65:47:fa:99:3a:5f:9d:38: f5:da:ca:00:64:48:46:d6:0d:dc:da:90:0e:b0:7c: 8e:2c:b7:3a:26:59:98:b7:cf:57:a6:50:8d:bf:55: 0a:51:3f:0b:20:d5:e5:7d:75:01:02:d2:f7:2b:38: d0:2e:cd:30:d9:37:6a:09:3d:f5:ef:61:8e:d5:59: 66:6b:77:ea:ca:e7:24:cf:dd:1b:03:9f:c6:2b:e1: 5a:d5:68:88:e7:bd:a8:62:e4:37:88:54:69:50:86: b5:55:0b:91:f8:31:e6:be:35:d7:fb:01:71:40:44: 6f:f0:bf:ee:e6:ee:e3:9d:a5:65:88:73:b0:23:4c: 4d:ff:af:99:e1:02:c3:df:b8:9a:1d:8d:9d:47:6e: 4c:a9:d6:f3:38:5a:fc:88:4f:53:66:b7:e6:d7:40: 52:9a:8f:d0:fe:27:97:c8:bf:88:3f:37:da:a5:67: cc:89:53:4c:0f:06:cd:36:fd:78:7f:ed:b2:ed:ee: 32:91:fa:e8:3d:f3:d7:08:9a:98:16:7d:1f:f5:6f: 9a:bd:68:ea:b2:f1:50:fd:9d:de:73:53:71:45:44: bd:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:70:8A:96:38:7B:16:99:31:8F:0D:00:4F:D6:59:91:A9:79:6E:02 X509v3 Authority Key Identifier: keyid:6E:F8:DF:8B:74:C5:D8:BB:67:37:EC:42:CE:03:2A:B4:B0:3E:0C:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:36:be:63:bd:2a:b6:78:9f:33:1a:76:8d:9a:d5:ed:30:3f: 76:1e:34:53:af:02:69:a3:3a:23:23:ec:20:28:6d:1c:c3:95: 32:6d:31:3c:86:72:10:35:7f:ad:b3:df:c6:86:20:8d:47:b6: e4:65:e3:97:05:c6:b5:73:5e:63:10:c9:3a:fd:20:a8:2d:9d: 3d:16:9d:e8:e7:6d:53:15:e4:ac:a6:ff:f9:b0:b2:ba:10:fa: 6b:b7:52:6a:10:66:13:de:45:68:26:ca:cd:07:d5:c9:f5:c3: 0d:14:93:f5:57:dd:ef:44:0c:ff:19:b7:c1:f5:9e:79:64:7e: 8f:76:be:28:10:56:d1:57:3f:00:1e:f7:ee:48:68:fc:4a:b6: ec:a9:e5:a3:40:ec:bf:d7:84:40:bf:14:bb:10:99:2d:3a:70: a1:00:8d:0a:12:2f:3d:0e:04:ec:55:fa:c2:6e:13:32:81:c3: 4f:2b:dc:a9:2e:52:bc:2b:64:c6:1f:ee:10:04:e7:91:de:8d: f0:97:f7:6e:28:d1:88:3d:09:17:17:fd:df:ec:f7:ca:2f:2a: 3d:07:7c:2a:ba:a4:e0:a9:02:2c:b3:5b:26:89:3e:e3:0f:db: f1:83:a7:1d:b0:b2:41:f4:f6:ee:a3:d4:49:a3:88:fc:aa:c6: 11:97:41:c7 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgIUf3NaK/SkpjQbyjFxni1ar3f0v8QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkVGOERGOEI3NEM1RDhCQjY3MzdFQzQyQ0UwMzJBQjRC MDNFMEM1MTAeFw0yNjAzMjUxNTUyMjFaFw0yNjAzMjYxODEyMjFaMDMxMTAvBgNV BAMTKEYwNzA4QTk2Mzg3QjE2OTkzMThGMEQwMDRGRDY1OTkxQTk3OTZFMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqzODNONamnBwRF5OszvFdtT3E atREmFm/QuofDUPHDN2lishlR/qZOl+dOPXaygBkSEbWDdzakA6wfI4stzomWZi3 z1emUI2/VQpRPwsg1eV9dQEC0vcrONAuzTDZN2oJPfXvYY7VWWZrd+rK5yTP3RsD n8Yr4VrVaIjnvahi5DeIVGlQhrVVC5H4Mea+Ndf7AXFARG/wv+7m7uOdpWWIc7Aj TE3/r5nhAsPfuJodjZ1Hbkyp1vM4WvyIT1Nmt+bXQFKaj9D+J5fIv4g/N9qlZ8yJ U0wPBs02/Xh/7bLt7jKR+ug989cImpgWfR/1b5q9aOqy8VD9nd5zU3FFRL2TAgMB AAGjggJhMIICXTAdBgNVHQ4EFgQU8HCKljh7Fpkxjw0AT9ZZkal5bgIwHwYDVR0j BBgwFoAUbvjfi3TF2LtnN+xCzgMqtLA+DFEwDgYDVR0PAQH/BAQDAgeAMIGXBgNV HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzFiZjhlOTc3LTcyNzgtNDZjZi1hYmQxLTk5Y2QxZmQy YmU0ZS8xMC82RUY4REY4Qjc0QzVEOEJCNjczN0VDNDJDRTAzMkFCNEIwM0UwQzUx LmNybDB6BggrBgEFBQcBAQRuMGwwagYIKwYBBQUHMAKGXnJzeW5jOi8vY2xvdWRp ZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xPVURJRS1SUEtJLzQvNkVGOERGOEI3NEM1 RDhCQjY3MzdFQzQyQ0UwMzJBQjRCMDNFMEM1MS5jZXIwgaAGCCsGAQUFBwELBIGT MIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi ZTRlLzEwLzZFRjhERjhCNzRDNUQ4QkI2NzM3RUM0MkNFMDMyQUI0QjAzRTBDNTEu bWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQ MAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3 DQEBCwUAA4IBAQCXNr5jvSq2eJ8zGnaNmtXtMD92HjRTrwJpozojI+wgKG0cw5Uy bTE8hnIQNX+ts9/GhiCNR7bkZeOXBca1c15jEMk6/SCoLZ09Fp3o521TFeSspv/5 sLK6EPprt1JqEGYT3kVoJsrNB9XJ9cMNFJP1V93vRAz/GbfB9Z55ZH6Pdr4oEFbR Vz8AHvfuSGj8SrbsqeWjQOy/14RAvxS7EJktOnChAI0KEi89DgTsVfrCbhMygcNP K9ypLlK8K2TGH+4QBOeR3o3wl/duKNGIPQkXF/3f7PfKLyo9B3wquqTgqQIss1sm iT7jD9vxg6cdsLJB9Pbuo9RJo4j8qsYRl0HH -----END CERTIFICATE-----Generated at Thu Mar 26 11:40:45 2026 by rpki-client