$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft File: CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft (raw, json) Hash identifier: y4a9Vk/6LnVqSy36zV7+0GyNTs7sAHZhqY0mKO1242o= Subject key identifier: BB:7F:AD:E1:B0:24:B4:05:CB:66:D0:71:F2:5D:EB:C0:39:54:CA:92 Authority key identifier: CC:6E:CC:46:20:C3:32:98:BA:AE:F1:70:9A:D6:D0:59:5C:D2:56:5C Certificate issuer: /CN=CC6ECC4620C33298BAAEF1709AD6D0595CD2565C Certificate serial: 22FDAAE181AF6E84182BCD795CE776E95E4A89D9 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft Manifest number: 94 Signing time: Mon 20 Oct 2025 08:13:06 +0000 Manifest this update: Mon 20 Oct 2025 08:08:06 +0000 Manifest next update: Tue 21 Oct 2025 09:50:06 +0000 Files and hashes: 1: 326130353a646663313a383530303a3a2f34302d3430203d3e20323136343535.roa (hash: oi3cTY9RPbSSa44GzFqVMPw4EmmK/P6XuRB3HCSy6ZU=) 2: CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl (hash: Lqnz+oB+aT29niGajX2ByMhmCpmoVCEYVlp+h6p1+gE=) 3: 326130353a646663313a393630303a3a2f34302d3430203d3e20323136343535.roa (hash: EPbQn4nTyAleGN23OETUsYn80EOl1eLpliPnGLTdXDk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 09:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:fd:aa:e1:81:af:6e:84:18:2b:cd:79:5c:e7:76:e9:5e:4a:89:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC6ECC4620C33298BAAEF1709AD6D0595CD2565C Validity Not Before: Oct 20 08:08:06 2025 GMT Not After : Oct 21 09:50:06 2025 GMT Subject: CN=BB7FADE1B024B405CB66D071F25DEBC03954CA92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b8:79:89:03:19:c4:c6:cb:87:0b:4e:d7:83: 1a:aa:e8:d0:52:d6:c5:a7:66:f3:b6:b9:e1:4d:77: ab:66:7f:e4:88:57:68:fe:d0:7f:cd:0f:57:68:7c: 2f:d8:24:e9:b5:a8:9d:b5:42:1c:14:61:46:ca:e3: 8b:bf:7b:04:2b:a4:f8:0b:4c:46:a3:3a:d2:95:01: fa:97:b7:ba:0a:e5:7f:13:ca:b1:32:15:a2:49:84: e0:49:c5:48:9d:14:60:48:14:79:06:5d:d1:94:00: 9c:b4:9f:c8:3b:38:0f:e7:d4:59:5e:b6:1f:8d:3e: 7e:dd:09:6b:c5:72:40:05:c1:95:4b:d3:7a:50:51: 42:5a:51:bd:f1:4e:bc:ea:d0:71:ac:38:dd:6d:74: c0:c6:05:bf:72:25:b0:c5:ac:c2:c2:24:64:af:27: 45:81:e5:24:2a:c2:22:2e:44:29:c0:c6:96:95:f5: 05:c4:85:36:d1:2f:a4:ef:91:07:e4:14:27:c7:3d: 62:01:90:9a:69:03:09:ef:a3:6b:6d:a7:d4:e7:38: 55:58:9e:30:fb:03:bf:8b:6b:d6:1b:2f:1a:f7:95: af:ba:0e:29:60:fe:2f:90:09:f8:9f:77:8e:15:db: 1e:a8:86:5d:d2:0c:cd:d6:6e:2d:43:60:39:f4:f1: 57:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:7F:AD:E1:B0:24:B4:05:CB:66:D0:71:F2:5D:EB:C0:39:54:CA:92 X509v3 Authority Key Identifier: keyid:CC:6E:CC:46:20:C3:32:98:BA:AE:F1:70:9A:D6:D0:59:5C:D2:56:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:12:0c:60:97:70:80:a3:bc:4c:fc:af:6f:db:ff:50:75:61: 96:38:03:53:e3:51:d8:60:8e:83:d3:72:7d:73:eb:f1:a2:ef: 22:30:5f:8d:c2:e4:79:4d:fb:d5:b2:e1:6d:d5:34:19:c4:22: 42:50:99:65:a2:91:51:a2:cd:8e:95:e0:8a:9c:ab:82:a1:bb: fd:c3:47:1a:05:06:0f:4c:bf:63:91:ff:24:11:6e:59:99:c8: 73:b5:25:50:f2:9f:18:25:11:b1:6a:d1:0e:fb:be:bf:6e:19: 0d:dc:8e:ae:93:3e:6c:1c:f7:7a:0c:9d:34:ff:22:fb:bc:c1: 8d:7d:05:11:eb:22:50:1c:23:ca:dc:78:8d:da:47:12:db:08: 1b:50:21:b9:d0:26:52:2c:17:5d:8d:2d:0f:23:40:93:78:5f: c8:3d:ed:2f:70:1f:a7:1b:44:d6:e2:35:6f:5a:31:6f:ea:eb: 02:2d:a5:c6:a4:15:93:e1:d7:60:31:52:30:a4:6c:3e:4b:72: b3:07:0b:14:d7:84:ed:80:e8:98:e4:f5:89:d4:42:bc:14:ee: f1:e5:5e:21:ce:74:f4:8e:2f:25:b3:d4:b2:18:b5:7e:72:71: e0:82:4a:0e:46:d4:15:41:a0:ec:62:c8:9d:be:47:f8:eb:d8: 26:0f:3d:34 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUIv2q4YGvboQYK815XOd26V5KidkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M2RUNDNDYyMEMzMzI5OEJBQUVGMTcwOUFENkQwNTk1 Q0QyNTY1QzAeFw0yNTEwMjAwODA4MDZaFw0yNTEwMjEwOTUwMDZaMDMxMTAvBgNV BAMTKEJCN0ZBREUxQjAyNEI0MDVDQjY2RDA3MUYyNURFQkMwMzk1NENBOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCuHmJAxnExsuHC07Xgxqq6NBS 1sWnZvO2ueFNd6tmf+SIV2j+0H/ND1dofC/YJOm1qJ21QhwUYUbK44u/ewQrpPgL TEajOtKVAfqXt7oK5X8TyrEyFaJJhOBJxUidFGBIFHkGXdGUAJy0n8g7OA/n1Fle th+NPn7dCWvFckAFwZVL03pQUUJaUb3xTrzq0HGsON1tdMDGBb9yJbDFrMLCJGSv J0WB5SQqwiIuRCnAxpaV9QXEhTbRL6TvkQfkFCfHPWIBkJppAwnvo2ttp9TnOFVY njD7A7+La9YbLxr3la+6Dilg/i+QCfifd44V2x6ohl3SDM3Wbi1DYDn08VfFAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUu3+t4bAktAXLZtBx8l3rwDlUypIwHwYDVR0j BBgwFoAUzG7MRiDDMpi6rvFwmtbQWVzSVlwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1 NjRhLzMvQ0M2RUNDNDYyMEMzMzI5OEJBQUVGMTcwOUFENkQwNTk1Q0QyNTY1Qy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0NDNkVDQzQ2MjBDMzMy OThCQUFFRjE3MDlBRDZEMDU5NUNEMjU2NUMuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1NjRh LzMvQ0M2RUNDNDYyMEMzMzI5OEJBQUVGMTcwOUFENkQwNTk1Q0QyNTY1Qy5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAMMSDGCXcICjvEz8r2/b/1B1YZY4A1PjUdhgjoPTcn1z6/Gi7yIwX43C 5HlN+9Wy4W3VNBnEIkJQmWWikVGizY6V4Iqcq4Khu/3DRxoFBg9Mv2OR/yQRblmZ yHO1JVDynxglEbFq0Q77vr9uGQ3cjq6TPmwc93oMnTT/Ivu8wY19BRHrIlAcI8rc eI3aRxLbCBtQIbnQJlIsF12NLQ8jQJN4X8g97S9wH6cbRNbiNW9aMW/q6wItpcak FZPh12AxUjCkbD5LcrMHCxTXhO2A6Jjk9YnUQrwU7vHlXiHOdPSOLyWz1LIYtX5y ceCCSg5G1BVBoOxiyJ2+R/jr2CYPPTQ= -----END CERTIFICATE-----Generated at Mon Oct 20 19:41:37 2025 by rpki-client