$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft File: CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft (raw, json) Hash identifier: 62+Azg6E11DNFuKLtyETPAjvw3Z21P4idTSsIgqn9ns= Subject key identifier: 9A:83:7A:36:8F:4B:3A:0D:50:D8:67:53:F4:F6:3B:97:AD:8F:76:21 Authority key identifier: CC:6E:CC:46:20:C3:32:98:BA:AE:F1:70:9A:D6:D0:59:5C:D2:56:5C Certificate issuer: /CN=CC6ECC4620C33298BAAEF1709AD6D0595CD2565C Certificate serial: 25F296537EF0D624F505DDBC906A8D522E7132BF Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft Manifest number: 0258 Signing time: Thu 24 Sep 2026 03:38:13 +0000 Manifest this update: Thu 24 Sep 2026 03:33:13 +0000 Manifest next update: Fri 25 Sep 2026 06:17:13 +0000 Files and hashes: 1: CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl (hash: v9mKkgVbOhH/yJcIkBm9QP5KYY87k9trDt34+nvfD7k=) 2: 326130353a646663313a393630303a3a2f34302d3430203d3e20323136343535.roa (hash: s3vZksQWbyouGRJqfpkziZUFeKyXQLPp4pKI5MlbQ60=) 3: 326130353a646663313a383530303a3a2f34302d3430203d3e20323136343535.roa (hash: b9rd9SGbXvvvzK+D0FWbq0BInp6dAR3HKF/6onJHEfc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 04:36:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:f2:96:53:7e:f0:d6:24:f5:05:dd:bc:90:6a:8d:52:2e:71:32:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC6ECC4620C33298BAAEF1709AD6D0595CD2565C Validity Not Before: Sep 24 03:33:13 2026 GMT Not After : Sep 25 06:17:13 2026 GMT Subject: CN=9A837A368F4B3A0D50D86753F4F63B97AD8F7621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:50:ee:dc:64:98:1d:19:b8:97:ab:23:b9:84: 91:1b:c7:02:9e:d3:a8:fa:01:68:05:3b:38:0c:d4: a7:a4:fe:0a:b0:b7:7b:97:75:dc:40:79:db:8d:41: 31:36:54:e5:f1:ae:64:54:f0:3b:7a:16:35:5c:24: fe:9c:cc:1c:99:05:a9:41:bb:57:ce:b7:ef:54:de: be:93:88:34:b0:67:6a:0a:fd:4b:e6:e0:28:f6:37: a2:10:00:03:3c:44:89:a3:d4:f1:2a:8f:ff:a9:24: fb:83:80:fd:03:a5:c7:da:c2:a1:af:60:3a:5b:d4: 80:93:96:90:bf:32:60:e6:34:43:af:3d:46:ab:cd: cb:a6:9f:0a:d5:8c:40:04:2a:29:b5:f7:77:d3:48: 77:90:7a:17:e4:3c:30:22:3b:bf:a2:59:ee:80:a7: 10:8f:4d:a4:3b:1b:13:a3:e2:37:4b:bc:48:ae:f9: 69:8f:8b:9a:73:73:5b:58:bd:c6:2f:91:a9:af:24: 02:53:f6:33:59:60:44:55:0a:46:77:5f:32:75:d9: da:04:90:d3:86:85:4e:76:69:6e:58:2f:88:44:7a: d7:27:3a:8e:bb:46:f3:6a:55:d4:5e:da:45:5a:87: 08:3f:86:87:b7:c6:fc:9b:e7:05:a5:b8:1b:6f:78: 7b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:83:7A:36:8F:4B:3A:0D:50:D8:67:53:F4:F6:3B:97:AD:8F:76:21 X509v3 Authority Key Identifier: keyid:CC:6E:CC:46:20:C3:32:98:BA:AE:F1:70:9A:D6:D0:59:5C:D2:56:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:1c:96:1f:32:ab:5c:5f:d4:d6:00:2a:28:b8:e8:10:e9:76: fb:44:b8:b8:81:aa:64:0b:d4:d5:21:e8:f7:2e:20:14:0a:db: 6c:33:10:12:cf:be:ab:85:72:86:11:ef:08:8a:8f:5d:22:14: e8:21:43:45:21:9a:ba:8d:92:f9:41:f7:e0:dc:38:14:7c:08: c0:07:d8:b4:92:7f:dc:6d:34:98:92:17:16:26:ad:34:48:a8: 2a:18:f4:4a:58:a0:d5:99:7d:b0:a3:3e:08:3f:1f:88:72:27: 05:dc:30:d6:7e:b6:0c:65:76:74:c8:90:fc:48:e8:f4:17:ad: 56:9e:8e:21:f4:e5:4b:df:82:cf:7d:b8:6f:44:c5:1a:b1:84: 17:06:e7:ab:26:f8:17:40:0c:55:4e:19:10:56:57:e1:b9:13: 92:a5:5a:75:95:0a:94:e0:37:27:94:9c:08:81:6d:8b:31:40: 25:02:42:75:a9:46:34:63:82:e8:bc:fa:c9:bc:c0:e5:fe:f1: b5:de:7e:e0:db:93:d5:5a:6a:e1:4a:5f:c6:23:f6:1a:bd:30: 83:4b:a7:80:d9:b7:8b:cd:ca:a7:6d:15:f8:04:db:28:82:8b: aa:e9:8e:38:ca:5f:40:37:b2:cf:99:69:60:01:0c:3a:75:5f: d8:84:f7:19 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUJfKWU37w1iT1Bd28kGqNUi5xMr8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M2RUNDNDYyMEMzMzI5OEJBQUVGMTcwOUFENkQwNTk1 Q0QyNTY1QzAeFw0yNjA5MjQwMzMzMTNaFw0yNjA5MjUwNjE3MTNaMDMxMTAvBgNV BAMTKDlBODM3QTM2OEY0QjNBMEQ1MEQ4Njc1M0Y0RjYzQjk3QUQ4Rjc2MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvUO7cZJgdGbiXqyO5hJEbxwKe 06j6AWgFOzgM1Kek/gqwt3uXddxAeduNQTE2VOXxrmRU8Dt6FjVcJP6czByZBalB u1fOt+9U3r6TiDSwZ2oK/Uvm4Cj2N6IQAAM8RImj1PEqj/+pJPuDgP0DpcfawqGv YDpb1ICTlpC/MmDmNEOvPUarzcumnwrVjEAEKim193fTSHeQehfkPDAiO7+iWe6A pxCPTaQ7GxOj4jdLvEiu+WmPi5pzc1tYvcYvkamvJAJT9jNZYERVCkZ3XzJ12doE kNOGhU52aW5YL4hEetcnOo67RvNqVdRe2kVahwg/hoe3xvyb5wWluBtveHutAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUmoN6No9LOg1Q2GdT9PY7l62PdiEwHwYDVR0j BBgwFoAUzG7MRiDDMpi6rvFwmtbQWVzSVlwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1 NjRhLzMvQ0M2RUNDNDYyMEMzMzI5OEJBQUVGMTcwOUFENkQwNTk1Q0QyNTY1Qy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0NDNkVDQzQ2MjBDMzMy OThCQUFFRjE3MDlBRDZEMDU5NUNEMjU2NUMuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1NjRh LzMvQ0M2RUNDNDYyMEMzMzI5OEJBQUVGMTcwOUFENkQwNTk1Q0QyNTY1Qy5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBADcclh8yq1xf1NYAKii46BDpdvtEuLiBqmQL1NUh6PcuIBQK22wzEBLP vquFcoYR7wiKj10iFOghQ0UhmrqNkvlB9+DcOBR8CMAH2LSSf9xtNJiSFxYmrTRI qCoY9EpYoNWZfbCjPgg/H4hyJwXcMNZ+tgxldnTIkPxI6PQXrVaejiH05Uvfgs99 uG9ExRqxhBcG56sm+BdADFVOGRBWV+G5E5KlWnWVCpTgNyeUnAiBbYsxQCUCQnWp RjRjgui8+sm8wOX+8bXefuDbk9VaauFKX8Yj9hq9MINLp4DZt4vNyqdtFfgE2yiC i6rpjjjKX0A3ss+ZaWABDDp1X9iE9xk= -----END CERTIFICATE-----Generated at Thu Sep 24 15:54:48 2026 by rpki-client