$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft File: 6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft (raw, json) Hash identifier: 4pXMsEXYCu2h1B8lf98BaNtntYd9EG3G76xmj+TbXHc= Subject key identifier: CA:DD:A5:5E:95:E2:18:94:09:DF:ED:A7:DD:7E:21:36:86:5C:B3:1F Authority key identifier: 6E:F8:DF:8B:74:C5:D8:BB:67:37:EC:42:CE:03:2A:B4:B0:3E:0C:51 Certificate issuer: /CN=6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51 Certificate serial: 4DC8C2B8E922D8A4D5A850AF76277E40473AAF18 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft Manifest number: 01A5 Signing time: Tue 12 May 2026 21:25:24 +0000 Manifest this update: Tue 12 May 2026 21:20:23 +0000 Manifest next update: Wed 13 May 2026 22:28:23 +0000 Files and hashes: 1: 326130613a363034303a336638303a3a2f34312d3438203d3e203134363138.roa (hash: aHvhuFqDO1GB7QIZ+LV93NwGnOmb8RZNrGiJRajypMI=) 2: 326130613a363034303a336630303a3a2f34302d3438203d3e20323033303639.roa (hash: rHPewLaTkppiYRuEKYbkMC6q0fSzfeWOiDhEN8UQLrI=) 3: 326130613a363034303a313130303a3a2f34302d3430203d3e20323033303639.roa (hash: pHFnoNPoWytPyebFL74GP4B+9dNFxdZc97XyE0fhg1o=) 4: 326130613a363034303a336638303a3a2f34312d3438203d3e203136353039.roa (hash: Wmi4Se034d+qqZcAnERqLlh4fra7054HHLp3mkWO2Ww=) 5: 6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.crl (hash: MShwzmmLzDxZje6QJIxWd/QsMwV8D/GbyE3zHeGLDhI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.crl rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:c8:c2:b8:e9:22:d8:a4:d5:a8:50:af:76:27:7e:40:47:3a:af:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51 Validity Not Before: May 12 21:20:23 2026 GMT Not After : May 13 22:28:23 2026 GMT Subject: CN=CADDA55E95E2189409DFEDA7DD7E2136865CB31F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a5:d6:d7:b5:27:78:83:26:47:d5:9e:42:ed: 54:b5:75:4f:a0:6d:a2:61:da:9a:da:c4:86:19:63: a7:f3:e1:b2:c7:93:37:14:21:a5:ab:83:57:73:1d: fb:85:fc:f0:dd:1e:09:97:3a:6c:d4:ec:e2:05:39: 2f:a7:98:b3:fd:ff:2a:fc:53:b3:37:8a:e6:31:d7: 49:f0:6b:73:46:40:70:81:99:33:32:30:bc:3b:a7: 9b:66:3b:a2:90:3d:18:10:dd:87:be:c2:9a:79:7c: 9a:ac:4e:07:59:f4:33:15:15:d6:fe:a5:b1:af:d7: 0f:f9:93:54:16:c1:ac:2c:10:fe:67:39:18:a8:9f: f6:46:74:5a:6c:68:a8:ea:d9:50:28:7a:b2:f4:39: 72:bb:03:67:cc:ea:b5:04:e5:99:d6:5a:bc:0c:8b: 0f:fb:99:3c:92:c8:7c:a0:86:ea:1d:f2:ac:1b:e7: 1c:b5:ec:61:97:d0:cc:8e:64:f0:a2:36:01:21:20: c2:0f:e2:f1:8f:08:34:a4:15:5a:9f:38:3c:f0:8e: 41:34:33:b6:14:26:e6:6f:5c:83:3f:dc:c1:20:70: ae:a2:2c:c0:86:b7:43:3e:92:27:28:49:76:58:1d: d2:50:21:34:85:bd:54:3a:f3:cd:06:41:cf:67:fe: 23:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:DD:A5:5E:95:E2:18:94:09:DF:ED:A7:DD:7E:21:36:86:5C:B3:1F X509v3 Authority Key Identifier: keyid:6E:F8:DF:8B:74:C5:D8:BB:67:37:EC:42:CE:03:2A:B4:B0:3E:0C:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:c2:88:87:3e:75:8c:2d:b6:30:3f:57:6a:e3:84:e1:b4:73: 28:68:1b:86:17:41:46:17:fe:40:de:12:5f:aa:be:5d:f5:1c: f5:14:54:bb:08:0e:67:b8:fb:65:fd:0a:c3:1a:f1:92:00:87: 29:1d:43:e8:82:8b:a9:dc:7b:b4:39:ec:60:90:b9:cb:1e:4d: f9:98:4b:0c:f8:15:a7:55:6d:8f:64:b6:b8:aa:26:3c:45:fe: 38:72:62:de:bc:a3:a6:a6:15:07:da:ef:dd:ba:1a:56:c1:c7: f4:94:1c:2a:11:fe:7d:a6:eb:24:a9:66:c9:a5:cd:2d:a9:04: 77:71:ce:b4:9b:fe:3e:c4:6a:5c:63:6c:76:ac:c9:df:e0:62: 9b:f5:e3:bb:e1:e2:12:86:5e:fa:46:8c:30:df:9f:11:4e:12: 78:0d:5b:69:94:0f:2c:d8:12:77:db:68:4c:df:03:69:16:04: 77:75:9a:e7:17:7b:c6:d7:71:19:9a:06:4d:b5:3c:39:77:8f: af:e6:e1:04:61:b0:6c:9b:f0:43:f2:bd:d7:d2:ee:08:22:bc: 25:5d:66:da:cf:06:1a:cf:bc:20:5e:71:a1:98:23:99:b8:09: cb:71:86:9c:8e:bf:51:3e:8a:20:bc:8c:c9:b9:bd:d8:9c:0f: c5:16:f2:da -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgIUTcjCuOki2KTVqFCvdid+QEc6rxgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkVGOERGOEI3NEM1RDhCQjY3MzdFQzQyQ0UwMzJBQjRC MDNFMEM1MTAeFw0yNjA1MTIyMTIwMjNaFw0yNjA1MTMyMjI4MjNaMDMxMTAvBgNV BAMTKENBRERBNTVFOTVFMjE4OTQwOURGRURBN0REN0UyMTM2ODY1Q0IzMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2pdbXtSd4gyZH1Z5C7VS1dU+g baJh2praxIYZY6fz4bLHkzcUIaWrg1dzHfuF/PDdHgmXOmzU7OIFOS+nmLP9/yr8 U7M3iuYx10nwa3NGQHCBmTMyMLw7p5tmO6KQPRgQ3Ye+wpp5fJqsTgdZ9DMVFdb+ pbGv1w/5k1QWwawsEP5nORion/ZGdFpsaKjq2VAoerL0OXK7A2fM6rUE5ZnWWrwM iw/7mTySyHyghuod8qwb5xy17GGX0MyOZPCiNgEhIMIP4vGPCDSkFVqfODzwjkE0 M7YUJuZvXIM/3MEgcK6iLMCGt0M+kicoSXZYHdJQITSFvVQ6880GQc9n/iPFAgMB AAGjggJhMIICXTAdBgNVHQ4EFgQUyt2lXpXiGJQJ3+2n3X4hNoZcsx8wHwYDVR0j BBgwFoAUbvjfi3TF2LtnN+xCzgMqtLA+DFEwDgYDVR0PAQH/BAQDAgeAMIGXBgNV HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzFiZjhlOTc3LTcyNzgtNDZjZi1hYmQxLTk5Y2QxZmQy YmU0ZS8xMC82RUY4REY4Qjc0QzVEOEJCNjczN0VDNDJDRTAzMkFCNEIwM0UwQzUx LmNybDB6BggrBgEFBQcBAQRuMGwwagYIKwYBBQUHMAKGXnJzeW5jOi8vY2xvdWRp ZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xPVURJRS1SUEtJLzQvNkVGOERGOEI3NEM1 RDhCQjY3MzdFQzQyQ0UwMzJBQjRCMDNFMEM1MS5jZXIwgaAGCCsGAQUFBwELBIGT MIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi ZTRlLzEwLzZFRjhERjhCNzRDNUQ4QkI2NzM3RUM0MkNFMDMyQUI0QjAzRTBDNTEu bWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQ MAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3 DQEBCwUAA4IBAQB2woiHPnWMLbYwP1dq44ThtHMoaBuGF0FGF/5A3hJfqr5d9Rz1 FFS7CA5nuPtl/QrDGvGSAIcpHUPogoup3Hu0OexgkLnLHk35mEsM+BWnVW2PZLa4 qiY8Rf44cmLevKOmphUH2u/duhpWwcf0lBwqEf59puskqWbJpc0tqQR3cc60m/4+ xGpcY2x2rMnf4GKb9eO74eIShl76Roww358RThJ4DVtplA8s2BJ322hM3wNpFgR3 dZrnF3vG13EZmgZNtTw5d4+v5uEEYbBsm/BD8r3X0u4IIrwlXWbazwYaz7wgXnGh mCOZuAnLcYacjr9RPoogvIzJub3YnA/FFvLa -----END CERTIFICATE-----Generated at Wed May 13 00:42:48 2026 by rpki-client