$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft File: B729F0C7BF295C6844FD328B324A1ED8598032F9.mft (raw, json) Hash identifier: NJx//BmKIhtErSQMo7jrwRFqRvsleom3ePsm1jFGfhA= Subject key identifier: 39:24:00:DD:2B:E1:6D:36:E9:26:30:C0:0A:9A:E9:DB:E4:AE:D9:D4 Authority key identifier: B7:29:F0:C7:BF:29:5C:68:44:FD:32:8B:32:4A:1E:D8:59:80:32:F9 Certificate issuer: /CN=B729F0C7BF295C6844FD328B324A1ED8598032F9 Certificate serial: 1A1368F7678C7E1C8E54087AF98D3D51DD56CBB2 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft Manifest number: 0257 Signing time: Wed 23 Sep 2026 22:29:37 +0000 Manifest this update: Wed 23 Sep 2026 22:24:37 +0000 Manifest next update: Thu 24 Sep 2026 22:39:37 +0000 Files and hashes: 1: 326130353a646663313a383236303a3a2f34342d3438203d3e203331383938.roa (hash: 0vTIJjguwD6ZK/UD8aNqhNS77f9gmxngYOuYo0s0sec=) 2: 326130353a646663313a383230303a3a2f34302d3438203d3e20323136343532.roa (hash: YjEWO425Fp9BmEsaR7rNNKxgXNYuMwOnITmnIsrwlT4=) 3: B729F0C7BF295C6844FD328B324A1ED8598032F9.crl (hash: tykgoh+NSw87y2x6nQvmilEJnLyhS62gC14G19N3QUw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.crl rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 22:39:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:13:68:f7:67:8c:7e:1c:8e:54:08:7a:f9:8d:3d:51:dd:56:cb:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B729F0C7BF295C6844FD328B324A1ED8598032F9 Validity Not Before: Sep 23 22:24:37 2026 GMT Not After : Sep 24 22:39:37 2026 GMT Subject: CN=392400DD2BE16D36E92630C00A9AE9DBE4AED9D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c5:da:52:48:25:37:a6:cb:ac:a5:e2:19:3e: b9:72:54:01:c4:22:25:53:4f:97:c1:37:9e:05:b0: 85:75:43:4e:8f:16:b9:56:22:bf:88:c3:ab:de:d0: 7c:31:a9:b9:f0:fe:d0:54:17:f1:e7:af:b8:1c:14: f3:a8:60:ce:ba:b4:c9:16:4b:57:b6:d6:de:07:d2: 7d:b8:c2:b2:ad:40:41:ce:e9:cf:80:7e:76:e6:e2: bf:16:f0:3e:a4:70:f2:a2:43:bb:02:57:79:f8:aa: 14:c1:0b:81:8f:16:e2:58:77:a4:69:14:05:c6:c5: ff:ac:8d:df:d9:52:38:9c:a1:4f:c4:a3:7f:4d:f2: c1:75:5c:c5:49:9b:60:96:8e:06:b0:db:d0:6a:c2: 00:a0:a8:2d:47:e2:14:cf:fc:6f:f1:c5:a3:c1:73: 65:14:cc:03:5d:32:8d:6a:af:e3:fb:d8:34:3d:f9: 6d:f2:48:87:ae:f4:8b:b9:83:dd:cb:a8:c7:8b:a4: 24:05:d4:d4:17:cb:fb:0f:1e:99:dc:e7:0a:ac:03: bd:88:b2:3d:dc:50:0f:d4:8b:39:1b:c6:30:8d:4a: 00:5f:5d:38:7e:ac:70:25:b6:bd:05:24:cb:ea:c0: 5d:0c:e2:b1:ef:d2:0e:05:84:7d:0a:19:ea:08:4a: e6:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:24:00:DD:2B:E1:6D:36:E9:26:30:C0:0A:9A:E9:DB:E4:AE:D9:D4 X509v3 Authority Key Identifier: keyid:B7:29:F0:C7:BF:29:5C:68:44:FD:32:8B:32:4A:1E:D8:59:80:32:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:08:ad:85:58:a3:67:fc:62:8e:67:3d:30:df:ec:55:dc:dd: 85:68:5d:3c:16:a6:f0:cb:0a:2b:21:25:f7:72:eb:8f:2c:b4: aa:0c:73:9b:95:b4:9f:bb:91:60:b0:5f:4e:88:79:4b:7c:13: bf:29:ac:95:f2:cc:5f:58:38:45:57:ac:8e:7d:bd:d2:16:4f: 86:ac:88:fa:71:b8:ff:1f:30:4f:31:7c:b8:df:99:b9:cb:27: 74:0d:d0:3e:29:a6:f2:3b:9f:7b:f2:b4:a3:a8:a3:d5:84:cb: eb:99:26:8e:eb:3b:44:57:18:3c:a2:91:af:86:97:59:3d:ae: c7:45:d2:11:3c:49:bb:5f:7a:5c:d5:1c:3b:da:19:34:08:6b: 82:59:f9:8a:3c:a3:ec:49:3d:0f:06:59:3b:b8:d3:64:23:2b: 3b:36:77:87:34:92:eb:cd:3f:34:18:c2:34:14:2a:c3:69:ef: f7:1a:d8:cc:78:1e:64:7d:66:3e:e8:e8:7f:bc:d6:cf:2b:38: e5:7b:82:e2:c5:93:d8:82:83:13:8d:16:e0:6b:5f:b4:55:21: ab:e1:d3:e4:31:b4:a7:52:a3:db:4d:eb:c9:43:a6:0b:25:05: 42:0f:12:35:99:38:76:38:39:58:4b:4c:39:dc:23:36:50:5f: f9:b3:71:c7 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUGhNo92eMfhyOVAh6+Y09Ud1Wy7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcyOUYwQzdCRjI5NUM2ODQ0RkQzMjhCMzI0QTFFRDg1 OTgwMzJGOTAeFw0yNjA5MjMyMjI0MzdaFw0yNjA5MjQyMjM5MzdaMDMxMTAvBgNV BAMTKDM5MjQwMEREMkJFMTZEMzZFOTI2MzBDMDBBOUFFOURCRTRBRUQ5RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoxdpSSCU3psuspeIZPrlyVAHE IiVTT5fBN54FsIV1Q06PFrlWIr+Iw6ve0Hwxqbnw/tBUF/Hnr7gcFPOoYM66tMkW S1e21t4H0n24wrKtQEHO6c+Afnbm4r8W8D6kcPKiQ7sCV3n4qhTBC4GPFuJYd6Rp FAXGxf+sjd/ZUjicoU/Eo39N8sF1XMVJm2CWjgaw29BqwgCgqC1H4hTP/G/xxaPB c2UUzANdMo1qr+P72DQ9+W3ySIeu9Iu5g93LqMeLpCQF1NQXy/sPHpnc5wqsA72I sj3cUA/UizkbxjCNSgBfXTh+rHAltr0FJMvqwF0M4rHv0g4FhH0KGeoISuZRAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUOSQA3SvhbTbpJjDACprp2+Su2dQwHwYDVR0j BBgwFoAUtynwx78pXGhE/TKLMkoe2FmAMvkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNk OGVmLzMvQjcyOUYwQzdCRjI5NUM2ODQ0RkQzMjhCMzI0QTFFRDg1OTgwMzJGOS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0I3MjlGMEM3QkYyOTVD Njg0NEZEMzI4QjMyNEExRUQ4NTk4MDMyRjkuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNkOGVm LzMvQjcyOUYwQzdCRjI5NUM2ODQ0RkQzMjhCMzI0QTFFRDg1OTgwMzJGOS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBADAIrYVYo2f8Yo5nPTDf7FXc3YVoXTwWpvDLCishJfdy648stKoMc5uV tJ+7kWCwX06IeUt8E78prJXyzF9YOEVXrI59vdIWT4asiPpxuP8fME8xfLjfmbnL J3QN0D4ppvI7n3vytKOoo9WEy+uZJo7rO0RXGDyika+Gl1k9rsdF0hE8SbtfelzV HDvaGTQIa4JZ+Yo8o+xJPQ8GWTu402QjKzs2d4c0kuvNPzQYwjQUKsNp7/ca2Mx4 HmR9Zj7o6H+81s8rOOV7guLFk9iCgxONFuBrX7RVIavh0+QxtKdSo9tN68lDpgsl BUIPEjWZOHY4OVhLTDncIzZQX/mzccc= -----END CERTIFICATE-----Generated at Thu Sep 24 14:16:39 2026 by rpki-client