$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft File: CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft (raw, json) Hash identifier: /8G35ilx4YtL7MAvh6QX9O92re0ziMyhRfKhxSXjK3Q= Subject key identifier: 63:64:E3:E0:D7:BB:60:BC:3A:AA:79:1A:7E:9B:20:37:2E:00:6C:3B Authority key identifier: CC:6E:CC:46:20:C3:32:98:BA:AE:F1:70:9A:D6:D0:59:5C:D2:56:5C Certificate issuer: /CN=CC6ECC4620C33298BAAEF1709AD6D0595CD2565C Certificate serial: 259FA8A93786B8648C3C1E6CE266397E307E2B0A Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft Manifest number: 01A3 Signing time: Tue 12 May 2026 07:01:30 +0000 Manifest this update: Tue 12 May 2026 06:56:30 +0000 Manifest next update: Wed 13 May 2026 08:18:30 +0000 Files and hashes: 1: 326130353a646663313a393630303a3a2f34302d3430203d3e20323136343535.roa (hash: EPbQn4nTyAleGN23OETUsYn80EOl1eLpliPnGLTdXDk=) 2: 326130353a646663313a383530303a3a2f34302d3430203d3e20323136343535.roa (hash: oi3cTY9RPbSSa44GzFqVMPw4EmmK/P6XuRB3HCSy6ZU=) 3: CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl (hash: gcOtcGsnWZJEubsNTCr84x3IlqC53Rwz3SvcYKYy8+c=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 08:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:9f:a8:a9:37:86:b8:64:8c:3c:1e:6c:e2:66:39:7e:30:7e:2b:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC6ECC4620C33298BAAEF1709AD6D0595CD2565C Validity Not Before: May 12 06:56:30 2026 GMT Not After : May 13 08:18:30 2026 GMT Subject: CN=6364E3E0D7BB60BC3AAA791A7E9B20372E006C3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:10:92:5a:1a:46:07:b4:29:1b:3f:b9:b5:a6: 1f:71:c2:4c:d1:30:68:2c:c5:85:7b:67:c1:a6:41: a9:86:6a:a3:59:94:33:4a:7c:f7:ce:4d:b1:d0:12: 09:f7:a5:7e:13:d7:3b:bb:77:db:fa:ec:dc:1c:d5: b6:32:ed:a0:56:07:03:07:a2:23:c1:ff:f9:cc:5a: fa:60:5c:19:64:28:f9:26:73:ad:fe:4b:2a:fc:14: 50:7b:cf:fd:c1:63:5e:c8:82:fd:34:3f:04:98:dd: 72:1e:37:8b:a7:1e:ca:3c:7d:71:22:aa:8d:47:9b: c6:ea:f0:f3:53:dd:d3:73:54:bc:31:42:57:f4:2b: eb:69:ad:19:6b:e6:1a:da:90:b7:b0:b5:89:26:22: 46:e0:67:4f:db:2e:0f:30:c4:e5:de:0d:1d:0d:3f: c8:b0:11:c3:03:e4:5d:18:52:d8:63:dc:9f:9a:80: 7b:c4:1c:14:5d:8f:a9:b5:7c:bb:c0:77:30:ea:b6: 04:07:f8:fa:10:62:14:fb:fe:b5:9b:80:19:9e:94: 7e:4f:2d:af:ac:fe:98:f0:4c:6a:29:df:83:fc:53: c4:7d:2d:2f:d9:05:2a:6c:a6:c6:6c:bc:f5:b3:0f: c4:bb:0a:f4:70:dc:cb:0f:14:29:a6:2c:c4:d1:6e: c3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:64:E3:E0:D7:BB:60:BC:3A:AA:79:1A:7E:9B:20:37:2E:00:6C:3B X509v3 Authority Key Identifier: keyid:CC:6E:CC:46:20:C3:32:98:BA:AE:F1:70:9A:D6:D0:59:5C:D2:56:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:d7:a0:c0:7c:92:5b:de:5f:cd:d0:77:f6:b3:1a:e9:ab:f9: 7a:61:56:cd:da:58:19:d1:49:b7:05:9e:91:ea:72:16:57:24: aa:9c:26:74:5c:18:e0:2f:47:d9:d0:31:c7:c9:f3:32:f8:d0: 0a:8f:8c:a0:12:b4:6c:11:85:95:f9:b2:3e:21:3f:9d:4b:7e: d0:0a:de:a0:ad:4b:5f:ae:25:43:02:39:97:a3:48:db:44:77: ab:81:b0:58:9d:70:03:9f:9a:7c:fb:10:d9:5b:41:e8:09:86: 5c:87:d0:e0:9d:03:23:38:62:4f:e2:b2:2a:18:7b:9b:ec:04: 4b:48:6d:7d:bb:4c:7f:2a:2c:38:1c:f7:b5:a3:27:56:71:84: da:dc:95:98:0b:e6:38:47:9b:30:13:fe:1a:ff:ec:a2:4f:4e: 98:fe:38:34:02:5c:ea:02:c5:0c:8c:ae:30:e7:a1:40:e1:9b: 42:ac:84:8f:d5:d2:86:08:ab:03:cb:68:f7:fa:88:d3:c2:79: 43:84:9f:f4:63:1e:3a:11:d5:d4:60:95:e8:23:2d:06:e7:1f: 8a:10:cb:cb:a5:5d:51:96:bb:a5:64:70:30:45:aa:aa:c4:54: db:54:9a:6f:c0:e7:1a:f8:13:7e:20:3a:59:37:76:75:c5:f0: 59:db:cf:e8 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUJZ+oqTeGuGSMPB5s4mY5fjB+KwowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M2RUNDNDYyMEMzMzI5OEJBQUVGMTcwOUFENkQwNTk1 Q0QyNTY1QzAeFw0yNjA1MTIwNjU2MzBaFw0yNjA1MTMwODE4MzBaMDMxMTAvBgNV BAMTKDYzNjRFM0UwRDdCQjYwQkMzQUFBNzkxQTdFOUIyMDM3MkUwMDZDM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+EJJaGkYHtCkbP7m1ph9xwkzR MGgsxYV7Z8GmQamGaqNZlDNKfPfOTbHQEgn3pX4T1zu7d9v67Nwc1bYy7aBWBwMH oiPB//nMWvpgXBlkKPkmc63+Syr8FFB7z/3BY17Igv00PwSY3XIeN4unHso8fXEi qo1Hm8bq8PNT3dNzVLwxQlf0K+tprRlr5hrakLewtYkmIkbgZ0/bLg8wxOXeDR0N P8iwEcMD5F0YUthj3J+agHvEHBRdj6m1fLvAdzDqtgQH+PoQYhT7/rWbgBmelH5P La+s/pjwTGop34P8U8R9LS/ZBSpspsZsvPWzD8S7CvRw3MsPFCmmLMTRbsNpAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUY2Tj4Ne7YLw6qnkafpsgNy4AbDswHwYDVR0j BBgwFoAUzG7MRiDDMpi6rvFwmtbQWVzSVlwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1 NjRhLzMvQ0M2RUNDNDYyMEMzMzI5OEJBQUVGMTcwOUFENkQwNTk1Q0QyNTY1Qy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0NDNkVDQzQ2MjBDMzMy OThCQUFFRjE3MDlBRDZEMDU5NUNEMjU2NUMuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1NjRh LzMvQ0M2RUNDNDYyMEMzMzI5OEJBQUVGMTcwOUFENkQwNTk1Q0QyNTY1Qy5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAI7XoMB8klveX83Qd/azGumr+XphVs3aWBnRSbcFnpHqchZXJKqcJnRc GOAvR9nQMcfJ8zL40AqPjKAStGwRhZX5sj4hP51LftAK3qCtS1+uJUMCOZejSNtE d6uBsFidcAOfmnz7ENlbQegJhlyH0OCdAyM4Yk/isioYe5vsBEtIbX27TH8qLDgc 97WjJ1ZxhNrclZgL5jhHmzAT/hr/7KJPTpj+ODQCXOoCxQyMrjDnoUDhm0KshI/V 0oYIqwPLaPf6iNPCeUOEn/RjHjoR1dRglegjLQbnH4oQy8ulXVGWu6VkcDBFqqrE VNtUmm/A5xr4E34gOlk3dnXF8Fnbz+g= -----END CERTIFICATE-----Generated at Wed May 13 00:30:58 2026 by rpki-client