$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft File: B729F0C7BF295C6844FD328B324A1ED8598032F9.mft (raw, json) Hash identifier: paxBvV9V1LtAz1IP0UFWSxsmN+vtgcD7kZqzPutB4Lg= Subject key identifier: C4:7D:6D:58:8D:83:B3:19:86:F3:46:B3:3F:51:3D:38:D7:BA:98:57 Authority key identifier: B7:29:F0:C7:BF:29:5C:68:44:FD:32:8B:32:4A:1E:D8:59:80:32:F9 Certificate issuer: /CN=B729F0C7BF295C6844FD328B324A1ED8598032F9 Certificate serial: 60D339411BC9690A599BBDC074A3C60185159741 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft Manifest number: 0283 Signing time: Tue 27 Oct 2026 01:29:42 +0000 Manifest this update: Tue 27 Oct 2026 01:24:42 +0000 Manifest next update: Wed 28 Oct 2026 05:04:42 +0000 Files and hashes: 1: 326130353a646663313a383236303a3a2f34342d3438203d3e203331383938.roa (hash: 0vTIJjguwD6ZK/UD8aNqhNS77f9gmxngYOuYo0s0sec=) 2: 326130353a646663313a383230303a3a2f34302d3438203d3e20323136343532.roa (hash: YjEWO425Fp9BmEsaR7rNNKxgXNYuMwOnITmnIsrwlT4=) 3: B729F0C7BF295C6844FD328B324A1ED8598032F9.crl (hash: L4F23CKxv18BvitQahup/eeIt1u0neauRIVZjkf2u1c=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.crl rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 05:04:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:d3:39:41:1b:c9:69:0a:59:9b:bd:c0:74:a3:c6:01:85:15:97:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B729F0C7BF295C6844FD328B324A1ED8598032F9 Validity Not Before: Oct 27 01:24:42 2026 GMT Not After : Oct 28 05:04:42 2026 GMT Subject: CN=C47D6D588D83B31986F346B33F513D38D7BA9857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:16:2d:ac:70:0a:db:e3:3d:1f:4e:03:9c:e0: fe:e1:9f:18:42:4e:2e:03:e5:78:b7:c1:b3:f2:6c: 87:52:b8:3c:0a:a8:e1:59:ee:f9:58:e9:56:e4:fc: 75:b6:37:d3:a6:7d:09:6b:bc:9b:c9:3e:5a:9c:67: 64:64:2a:15:84:6e:92:55:64:f0:2c:c6:5c:fe:7b: 8d:a1:cb:3b:ad:cc:47:dd:cc:9d:68:34:e8:51:04: 17:59:3e:06:b7:d4:f1:02:88:0e:ef:19:25:04:e7: 28:49:c5:35:71:77:67:a0:c3:b4:95:1d:54:0b:ae: fe:b4:46:79:9b:ac:74:53:85:c4:ac:2f:d4:a0:3b: 2d:24:17:db:67:1c:21:3d:75:30:ed:4c:96:4d:c2: 22:f4:d0:a3:e8:ee:73:80:00:25:0a:dc:7b:6a:1b: 58:3e:cd:7d:d9:a5:1f:dd:b6:f7:14:9e:fb:42:94: f7:cf:c0:b5:92:4c:8b:39:ed:16:03:2c:3d:ae:db: 3d:8b:e2:a7:a4:ac:db:2d:b0:f0:54:c3:ed:ac:dc: 4d:03:6d:fd:f7:d8:ca:8a:ef:22:0f:6c:d1:a4:93: 5a:64:1c:50:b1:ba:c0:9e:d7:0f:c3:a7:ca:00:8d: 55:a7:bd:c0:5c:66:3f:76:ea:42:4c:ec:5f:0b:d4: 0f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:7D:6D:58:8D:83:B3:19:86:F3:46:B3:3F:51:3D:38:D7:BA:98:57 X509v3 Authority Key Identifier: keyid:B7:29:F0:C7:BF:29:5C:68:44:FD:32:8B:32:4A:1E:D8:59:80:32:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:f0:7c:30:6c:26:51:47:5b:57:64:d7:f8:df:89:d2:ec:e0: 20:63:51:12:6d:36:3a:23:4a:b3:2e:58:72:ed:d7:69:13:e2: 99:25:33:5e:50:39:ad:78:e2:66:b8:9d:86:ed:f5:cc:56:c9: 9a:bf:32:95:be:23:25:40:2c:e6:b8:d4:08:e6:e4:98:be:6a: 4d:be:02:d6:5f:66:be:55:f7:cd:46:58:a7:cb:64:4c:e0:ce: 8c:32:35:20:76:fc:76:3c:af:21:e2:49:4c:c4:b1:dc:e7:57: b9:68:85:39:e7:2f:6d:47:7e:5a:ad:d4:27:58:eb:db:a0:a1: 23:7d:b2:3d:f8:8a:25:b6:98:9d:fc:ed:c1:7e:cc:0d:9c:9f: de:bf:c1:cd:4f:18:89:0d:28:d2:35:73:8c:0d:47:6a:64:58: b8:f8:9b:ef:ac:89:5a:f7:0d:91:37:4b:e8:01:f4:86:54:65: f6:1c:e5:51:b1:65:33:53:33:bf:d2:fc:b1:6a:35:33:01:cd: 53:a4:f4:58:a2:c6:8b:5d:5a:25:f9:97:b2:5e:70:a8:54:47: ff:5c:e4:11:72:c5:d3:e1:55:26:03:d6:dd:ed:4f:8d:20:b3: 48:e0:4b:99:fe:bc:3d:1c:5c:bc:7d:92:d3:9b:39:c7:3a:b0: d3:b8:bf:0f -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUYNM5QRvJaQpZm73AdKPGAYUVl0EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcyOUYwQzdCRjI5NUM2ODQ0RkQzMjhCMzI0QTFFRDg1 OTgwMzJGOTAeFw0yNjEwMjcwMTI0NDJaFw0yNjEwMjgwNTA0NDJaMDMxMTAvBgNV BAMTKEM0N0Q2RDU4OEQ4M0IzMTk4NkYzNDZCMzNGNTEzRDM4RDdCQTk4NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqFi2scArb4z0fTgOc4P7hnxhC Ti4D5Xi3wbPybIdSuDwKqOFZ7vlY6Vbk/HW2N9OmfQlrvJvJPlqcZ2RkKhWEbpJV ZPAsxlz+e42hyzutzEfdzJ1oNOhRBBdZPga31PECiA7vGSUE5yhJxTVxd2egw7SV HVQLrv60RnmbrHRThcSsL9SgOy0kF9tnHCE9dTDtTJZNwiL00KPo7nOAACUK3Htq G1g+zX3ZpR/dtvcUnvtClPfPwLWSTIs57RYDLD2u2z2L4qekrNstsPBUw+2s3E0D bf332MqK7yIPbNGkk1pkHFCxusCe1w/Dp8oAjVWnvcBcZj926kJM7F8L1A9lAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUxH1tWI2DsxmG80azP1E9ONe6mFcwHwYDVR0j BBgwFoAUtynwx78pXGhE/TKLMkoe2FmAMvkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNk OGVmLzMvQjcyOUYwQzdCRjI5NUM2ODQ0RkQzMjhCMzI0QTFFRDg1OTgwMzJGOS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0I3MjlGMEM3QkYyOTVD Njg0NEZEMzI4QjMyNEExRUQ4NTk4MDMyRjkuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNkOGVm LzMvQjcyOUYwQzdCRjI5NUM2ODQ0RkQzMjhCMzI0QTFFRDg1OTgwMzJGOS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAIbwfDBsJlFHW1dk1/jfidLs4CBjURJtNjojSrMuWHLt12kT4pklM15Q Oa144ma4nYbt9cxWyZq/MpW+IyVALOa41Ajm5Ji+ak2+AtZfZr5V981GWKfLZEzg zowyNSB2/HY8ryHiSUzEsdznV7lohTnnL21Hflqt1CdY69ugoSN9sj34iiW2mJ38 7cF+zA2cn96/wc1PGIkNKNI1c4wNR2pkWLj4m++siVr3DZE3S+gB9IZUZfYc5VGx ZTNTM7/S/LFqNTMBzVOk9FiixotdWiX5l7JecKhUR/9c5BFyxdPhVSYD1t3tT40g s0jgS5n+vD0cXLx9ktObOcc6sNO4vw8= -----END CERTIFICATE-----Generated at Tue Oct 27 18:36:41 2026 by rpki-client