$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft File: CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft (raw, json) Hash identifier: GD5xvC+Nsf8Spy+z+eGF56fQo9CEnK0WrFU9q10+KPM= Subject key identifier: B8:EB:8C:92:D0:2F:23:FE:32:F3:45:38:09:4D:1A:C9:D9:15:5E:02 Authority key identifier: CC:6E:CC:46:20:C3:32:98:BA:AE:F1:70:9A:D6:D0:59:5C:D2:56:5C Certificate issuer: /CN=CC6ECC4620C33298BAAEF1709AD6D0595CD2565C Certificate serial: 10EE8BD8DF012FC442335654B381EBF6F4849DEA Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft Manifest number: 0168 Signing time: Fri 27 Mar 2026 23:16:57 +0000 Manifest this update: Fri 27 Mar 2026 23:11:57 +0000 Manifest next update: Sun 29 Mar 2026 03:10:57 +0000 Files and hashes: 1: CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl (hash: Jth5/tvwXPPJ+pk+yCcEzMO6gMnm6CgvFsBTatvCNYY=) 2: 326130353a646663313a383530303a3a2f34302d3430203d3e20323136343535.roa (hash: oi3cTY9RPbSSa44GzFqVMPw4EmmK/P6XuRB3HCSy6ZU=) 3: 326130353a646663313a393630303a3a2f34302d3430203d3e20323136343535.roa (hash: EPbQn4nTyAleGN23OETUsYn80EOl1eLpliPnGLTdXDk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Mar 2026 00:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:ee:8b:d8:df:01:2f:c4:42:33:56:54:b3:81:eb:f6:f4:84:9d:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC6ECC4620C33298BAAEF1709AD6D0595CD2565C Validity Not Before: Mar 27 23:11:57 2026 GMT Not After : Mar 29 03:10:57 2026 GMT Subject: CN=B8EB8C92D02F23FE32F34538094D1AC9D9155E02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:06:b3:6e:aa:7e:c9:e0:4f:60:d7:6d:c9:8d: 98:7a:54:42:60:5c:8f:21:b8:6a:f8:c8:97:be:6f: 8d:1f:5b:75:f1:fa:ea:50:d3:23:81:0c:b5:5e:0f: 54:36:5d:07:87:2f:5f:9e:66:d4:57:ca:21:1a:d9: 2e:c9:89:20:12:3c:bd:a3:68:b2:c3:76:8f:26:7f: 36:bd:42:81:8c:1c:36:c1:a2:a1:f5:30:3e:5f:4e: 11:57:2e:38:0c:af:e4:f1:1b:c9:2b:6a:1c:05:36: 42:27:4c:5d:c1:6c:34:1f:ec:8a:f4:5a:a2:18:f2: 26:de:21:58:95:db:c3:1e:a5:88:51:05:96:8e:f0: 5a:cc:16:4d:33:b6:a3:13:54:79:20:70:51:e7:a4: c4:90:47:ad:14:c0:3a:5e:4a:fd:0f:75:4b:4e:70: 5e:69:7b:d3:11:bb:41:a7:b9:65:73:5b:3e:7f:57: db:63:90:05:af:dc:16:8f:b7:77:5f:c9:91:c1:e2: 07:d0:21:46:46:37:3d:e4:f9:dc:ab:0d:95:1d:1d: 1e:06:46:e6:81:6b:88:01:4f:b9:9a:d5:ab:41:8f: dc:9a:48:1b:5a:1c:24:77:8e:28:8f:07:ae:f8:30: fc:d5:f9:40:78:aa:18:ec:05:68:02:a7:30:11:2e: 4e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:EB:8C:92:D0:2F:23:FE:32:F3:45:38:09:4D:1A:C9:D9:15:5E:02 X509v3 Authority Key Identifier: keyid:CC:6E:CC:46:20:C3:32:98:BA:AE:F1:70:9A:D6:D0:59:5C:D2:56:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:99:5d:39:5a:fb:0b:57:b8:13:07:09:dd:1a:e9:21:ed:ba: 51:ad:8d:dd:22:44:89:09:d2:28:90:47:16:d5:23:e3:4b:b4: f1:52:67:0f:68:b3:57:e8:10:48:2d:76:85:61:67:c7:65:a3: 47:f8:4e:a1:f4:2f:f2:56:80:4e:e7:0b:e7:91:d3:2a:30:ec: ef:f6:4c:92:39:c5:45:55:52:98:86:9d:5c:30:d9:d9:6e:93: f3:37:eb:da:65:5b:17:05:32:9d:fa:a9:5f:7f:ff:16:9e:74: 74:c4:57:42:c2:59:a0:1e:96:6c:b1:2f:03:4f:db:4f:d6:38: 6a:a1:16:1b:98:1c:a8:3a:b3:f9:ba:72:1c:77:f1:65:79:e1: 9d:96:23:81:6e:c5:1a:fa:ff:47:2a:13:e4:52:5c:3f:63:b7: 7a:e2:02:db:54:67:a2:57:04:65:b2:87:8e:19:ab:46:ca:a7: 33:2a:10:9a:8e:78:aa:99:0f:2d:92:e8:91:66:6e:4f:b2:c0: b0:10:83:b0:71:34:bd:b4:ef:9b:c2:02:b1:ec:f5:a4:f6:c3: df:5d:f9:9d:58:f9:74:77:08:0f:41:6e:58:61:cf:54:a2:80: 16:32:3c:58:ec:4b:55:74:93:60:95:6e:10:dc:57:3b:3e:45: 28:d0:d6:d4 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUEO6L2N8BL8RCM1ZUs4Hr9vSEneowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M2RUNDNDYyMEMzMzI5OEJBQUVGMTcwOUFENkQwNTk1 Q0QyNTY1QzAeFw0yNjAzMjcyMzExNTdaFw0yNjAzMjkwMzEwNTdaMDMxMTAvBgNV BAMTKEI4RUI4QzkyRDAyRjIzRkUzMkYzNDUzODA5NEQxQUM5RDkxNTVFMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXBrNuqn7J4E9g123JjZh6VEJg XI8huGr4yJe+b40fW3Xx+upQ0yOBDLVeD1Q2XQeHL1+eZtRXyiEa2S7JiSASPL2j aLLDdo8mfza9QoGMHDbBoqH1MD5fThFXLjgMr+TxG8krahwFNkInTF3BbDQf7Ir0 WqIY8ibeIViV28MepYhRBZaO8FrMFk0ztqMTVHkgcFHnpMSQR60UwDpeSv0PdUtO cF5pe9MRu0GnuWVzWz5/V9tjkAWv3BaPt3dfyZHB4gfQIUZGNz3k+dyrDZUdHR4G RuaBa4gBT7ma1atBj9yaSBtaHCR3jiiPB674MPzV+UB4qhjsBWgCpzARLk59AgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUuOuMktAvI/4y80U4CU0aydkVXgIwHwYDVR0j BBgwFoAUzG7MRiDDMpi6rvFwmtbQWVzSVlwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1 NjRhLzMvQ0M2RUNDNDYyMEMzMzI5OEJBQUVGMTcwOUFENkQwNTk1Q0QyNTY1Qy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0NDNkVDQzQ2MjBDMzMy OThCQUFFRjE3MDlBRDZEMDU5NUNEMjU2NUMuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1NjRh LzMvQ0M2RUNDNDYyMEMzMzI5OEJBQUVGMTcwOUFENkQwNTk1Q0QyNTY1Qy5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAFqZXTla+wtXuBMHCd0a6SHtulGtjd0iRIkJ0iiQRxbVI+NLtPFSZw9o s1foEEgtdoVhZ8dlo0f4TqH0L/JWgE7nC+eR0yow7O/2TJI5xUVVUpiGnVww2dlu k/M369plWxcFMp36qV9//xaedHTEV0LCWaAelmyxLwNP20/WOGqhFhuYHKg6s/m6 chx38WV54Z2WI4FuxRr6/0cqE+RSXD9jt3riAttUZ6JXBGWyh44Zq0bKpzMqEJqO eKqZDy2S6JFmbk+ywLAQg7BxNL2075vCArHs9aT2w99d+Z1Y+XR3CA9Bblhhz1Si gBYyPFjsS1V0k2CVbhDcVzs+RSjQ1tQ= -----END CERTIFICATE-----Generated at Sat Mar 28 10:30:37 2026 by rpki-client