$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft File: B729F0C7BF295C6844FD328B324A1ED8598032F9.mft (raw, json) Hash identifier: 1UUohvoQFDOLBfxNhHyfr4H6BPecWRIpyODBcFXPuV8= Subject key identifier: B5:EF:06:22:54:83:05:9F:79:B7:0E:53:BC:2C:7D:8D:4F:AC:3B:C8 Authority key identifier: B7:29:F0:C7:BF:29:5C:68:44:FD:32:8B:32:4A:1E:D8:59:80:32:F9 Certificate issuer: /CN=B729F0C7BF295C6844FD328B324A1ED8598032F9 Certificate serial: 5CA11962C28A78EAAD2A56B038C529B7528D2F4A Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft Manifest number: 0164 Signing time: Thu 26 Mar 2026 12:20:57 +0000 Manifest this update: Thu 26 Mar 2026 12:15:57 +0000 Manifest next update: Fri 27 Mar 2026 13:30:57 +0000 Files and hashes: 1: B729F0C7BF295C6844FD328B324A1ED8598032F9.crl (hash: 1gY0S+hSYAlwFU7ZYBiYHHT0DvmR933K9Pw+Y0Dq2oo=) 2: 326130353a646663313a383230303a3a2f34302d3438203d3e20323136343532.roa (hash: tbMEmJLRx8p/XooueSgD+2D8XMkhb8zPBfDKGLGOZ18=) 3: 326130353a646663313a383236303a3a2f34342d3438203d3e203331383938.roa (hash: NyB2Q3nplRrrVqQaiZpQzKBuInw96biJRlaf2Wfrra4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.crl rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 05:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:a1:19:62:c2:8a:78:ea:ad:2a:56:b0:38:c5:29:b7:52:8d:2f:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B729F0C7BF295C6844FD328B324A1ED8598032F9 Validity Not Before: Mar 26 12:15:57 2026 GMT Not After : Mar 27 13:30:57 2026 GMT Subject: CN=B5EF06225483059F79B70E53BC2C7D8D4FAC3BC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:64:c8:1c:e8:1b:ac:60:3c:56:55:e2:82:06: 1e:0d:ba:e8:66:35:f2:57:4d:e5:2f:3c:24:8f:5f: 16:2a:2b:8f:1a:b4:47:e5:06:ac:f6:a1:71:bd:e6: cc:34:72:14:75:b8:3a:a8:17:57:62:bf:ac:39:b4: 93:a4:b3:a0:75:87:73:e6:cc:b8:5f:24:6f:da:a8: 58:dc:47:01:37:d0:9f:45:7e:5b:ab:ef:10:78:7b: 88:64:30:1d:49:87:54:52:6c:76:f3:18:f1:cb:0c: 3e:c1:dd:6c:db:10:c2:d5:67:b2:fe:99:1f:eb:c6: 30:8c:c7:5a:58:ae:8e:4c:57:1c:54:a1:c7:00:ad: ba:4b:45:8e:33:bf:84:76:aa:03:42:2c:a1:a4:fd: 8f:65:4b:30:54:96:e3:59:3f:33:8f:3d:a3:a6:40: c5:38:b1:2c:c1:dc:d9:09:c1:a8:6f:c0:56:31:7a: e7:d9:5e:73:fa:f8:aa:12:4a:4c:73:af:fa:bc:9b: 6c:70:d4:b7:a9:3d:4c:c4:ed:06:39:39:80:29:88: a2:a6:a7:4a:cc:72:e1:8c:ea:26:6f:3e:2e:65:02: 5b:48:14:e2:66:bc:7e:86:34:19:59:4f:6b:e9:54: 76:8e:8c:6a:75:eb:51:d4:b5:50:b2:0f:16:d8:09: ce:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:EF:06:22:54:83:05:9F:79:B7:0E:53:BC:2C:7D:8D:4F:AC:3B:C8 X509v3 Authority Key Identifier: keyid:B7:29:F0:C7:BF:29:5C:68:44:FD:32:8B:32:4A:1E:D8:59:80:32:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:38:ba:ba:07:28:f8:14:99:8c:c9:3e:64:54:95:f4:66:52: bd:af:88:0f:3f:7b:c6:3c:48:98:cc:86:d9:a3:df:20:6a:f2: 8f:96:fc:ef:8e:b4:2e:b1:e7:90:79:ae:a6:8b:a7:6a:83:e7: 0a:63:70:80:7e:de:3a:87:bc:14:49:8f:97:68:ef:f8:22:b7: a2:1e:f0:8f:16:6e:f1:c0:3d:a1:5a:6b:fd:e2:c2:a4:81:b3: 90:f9:5b:d1:5e:b5:da:78:9e:07:ad:1d:28:b6:43:36:2c:a1: 93:45:b9:ad:a4:53:aa:9d:ba:aa:70:a1:51:0b:de:c8:b1:52: db:d4:95:f1:13:0d:a1:3a:bb:38:a6:08:10:c8:cb:07:c9:27: 9f:6c:48:21:f8:80:13:55:f7:2c:2e:35:e2:57:eb:cc:43:99: 84:a0:f0:69:61:ac:2d:d9:ee:8a:eb:ae:4e:51:38:ff:3f:5f: 86:6c:c2:29:4b:36:0a:ec:e1:10:58:be:a6:f1:c3:a9:7e:19: 13:e2:89:4a:64:10:5f:54:f5:48:fb:9c:76:eb:fa:bf:27:ba: a6:f0:75:22:c9:2d:2b:56:80:14:6d:bc:72:94:98:96:0f:1f: 8f:22:97:61:a6:ca:45:77:3e:cc:19:eb:2f:2d:fa:b5:45:c1: f4:36:df:9d -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUXKEZYsKKeOqtKlawOMUpt1KNL0owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcyOUYwQzdCRjI5NUM2ODQ0RkQzMjhCMzI0QTFFRDg1 OTgwMzJGOTAeFw0yNjAzMjYxMjE1NTdaFw0yNjAzMjcxMzMwNTdaMDMxMTAvBgNV BAMTKEI1RUYwNjIyNTQ4MzA1OUY3OUI3MEU1M0JDMkM3RDhENEZBQzNCQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZZMgc6BusYDxWVeKCBh4Nuuhm NfJXTeUvPCSPXxYqK48atEflBqz2oXG95sw0chR1uDqoF1div6w5tJOks6B1h3Pm zLhfJG/aqFjcRwE30J9Fflur7xB4e4hkMB1Jh1RSbHbzGPHLDD7B3WzbEMLVZ7L+ mR/rxjCMx1pYro5MVxxUoccArbpLRY4zv4R2qgNCLKGk/Y9lSzBUluNZPzOPPaOm QMU4sSzB3NkJwahvwFYxeufZXnP6+KoSSkxzr/q8m2xw1LepPUzE7QY5OYApiKKm p0rMcuGM6iZvPi5lAltIFOJmvH6GNBlZT2vpVHaOjGp161HUtVCyDxbYCc7PAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUte8GIlSDBZ95tw5TvCx9jU+sO8gwHwYDVR0j BBgwFoAUtynwx78pXGhE/TKLMkoe2FmAMvkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNk OGVmLzMvQjcyOUYwQzdCRjI5NUM2ODQ0RkQzMjhCMzI0QTFFRDg1OTgwMzJGOS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0I3MjlGMEM3QkYyOTVD Njg0NEZEMzI4QjMyNEExRUQ4NTk4MDMyRjkuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNkOGVm LzMvQjcyOUYwQzdCRjI5NUM2ODQ0RkQzMjhCMzI0QTFFRDg1OTgwMzJGOS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBALs4uroHKPgUmYzJPmRUlfRmUr2viA8/e8Y8SJjMhtmj3yBq8o+W/O+O tC6x55B5rqaLp2qD5wpjcIB+3jqHvBRJj5do7/git6Ie8I8WbvHAPaFaa/3iwqSB s5D5W9Fetdp4ngetHSi2QzYsoZNFua2kU6qduqpwoVEL3sixUtvUlfETDaE6uzim CBDIywfJJ59sSCH4gBNV9ywuNeJX68xDmYSg8GlhrC3Z7orrrk5ROP8/X4ZswilL Ngrs4RBYvqbxw6l+GRPiiUpkEF9U9Uj7nHbr+r8nuqbwdSLJLStWgBRtvHKUmJYP H48il2GmykV3PswZ6y8t+rVFwfQ2350= -----END CERTIFICATE-----Generated at Thu Mar 26 19:40:30 2026 by rpki-client