$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft File: 6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft (raw, json) Hash identifier: PAekqZ/84+BJGKOhTloBHEUbGfpLrflKcQ0bBnf8G5c= Subject key identifier: B7:60:02:78:BF:3B:66:0D:9F:95:4E:13:2E:59:33:19:1C:FD:FB:D0 Authority key identifier: 69:86:DC:82:81:2C:47:DA:14:99:4B:8E:6E:72:7B:72:E0:B2:F8:D8 Certificate issuer: /CN=6986DC82812C47DA14994B8E6E727B72E0B2F8D8 Certificate serial: 2AB56729321A26FC957A8858643FCF8114699C72 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft Manifest number: 01E2 Signing time: Sun 11 Oct 2026 12:10:59 +0000 Manifest this update: Sun 11 Oct 2026 12:05:59 +0000 Manifest next update: Mon 12 Oct 2026 12:40:59 +0000 Files and hashes: 1: 326130613a363034303a343430303a3a2f34382d3438203d3e203530313034.roa (hash: Hi/9N+5IQGx093OQEgbXr/N8qqlN06r+epXMCIP3zqE=) 2: 6986DC82812C47DA14994B8E6E727B72E0B2F8D8.crl (hash: LqV9LhgPkOZwuNHs4FH3hbPPELBAb4sbtSpdCgMNJfk=) 3: 326130613a363034303a343430303a3a2f34382d3438203d3e20313532333638.roa (hash: gotlPq13MIgn9CpWrSq139KCagvKTA63f16ENY1QYXI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.crl rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Oct 2026 03:31:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:b5:67:29:32:1a:26:fc:95:7a:88:58:64:3f:cf:81:14:69:9c:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6986DC82812C47DA14994B8E6E727B72E0B2F8D8 Validity Not Before: Oct 11 12:05:59 2026 GMT Not After : Oct 12 12:40:59 2026 GMT Subject: CN=B7600278BF3B660D9F954E132E5933191CFDFBD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:54:b5:40:b8:6f:22:52:f8:2b:a8:3d:93:9d: 5c:7e:1a:8c:cf:1c:c0:ee:89:be:4e:17:05:32:99: 97:b7:de:02:cb:de:51:4f:85:08:23:41:7d:f1:a1: ce:53:f5:08:cc:68:7d:91:b5:bf:be:6e:99:cd:7a: 33:3c:b2:a7:1c:02:58:68:e9:47:26:1b:6b:65:37: 77:6d:ef:45:2c:64:c4:ee:ef:c5:3d:39:53:d2:4f: b6:3e:5d:51:2a:f0:8d:9e:ec:6e:87:2e:b4:e5:80: 75:c0:cd:d4:e3:3f:91:27:01:25:a2:60:03:a6:72: c9:65:9c:a2:5d:53:c1:2d:2a:95:cf:b9:5c:b2:90: aa:d0:0d:a2:0a:ca:0d:34:44:e9:b2:23:d9:94:54: 34:9d:3b:bd:e6:af:f6:d7:c3:85:85:1a:9d:04:a1: 03:2e:d3:76:b7:69:49:3f:ac:1d:6d:02:c9:2c:83: 70:17:a5:3a:06:89:62:36:e0:27:0c:c7:32:bc:bd: 82:21:13:27:6d:2b:91:fc:bb:f7:5d:94:4d:31:54: 08:58:4f:fd:3a:a9:5d:4f:ff:ac:50:f2:50:2d:3a: 12:2b:07:1b:a8:a6:68:e3:ca:d9:0a:48:2b:24:1c: 39:a7:80:35:ec:9d:51:29:83:fd:d0:f8:80:2f:6c: ed:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:60:02:78:BF:3B:66:0D:9F:95:4E:13:2E:59:33:19:1C:FD:FB:D0 X509v3 Authority Key Identifier: keyid:69:86:DC:82:81:2C:47:DA:14:99:4B:8E:6E:72:7B:72:E0:B2:F8:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:12:a0:6f:09:9c:d1:30:f7:22:07:98:f5:6d:10:83:26:b5: f4:e2:d8:d9:3e:f7:42:63:c7:3a:ce:66:d8:87:ac:ea:bd:02: d3:f8:e4:7a:bd:c0:59:6b:d9:fb:b3:f7:bb:53:96:60:2d:f7: ce:8b:86:9d:2e:b4:6a:38:1d:d1:9a:46:d2:66:85:e8:84:80: 4c:7d:a5:45:3a:32:95:3a:6a:59:53:31:02:69:4e:09:de:14: 94:60:21:a2:19:b7:1c:57:a5:26:ac:68:77:8b:c6:2a:3b:bf: 41:61:b8:b4:a8:76:ff:dc:35:9e:60:71:66:c5:26:9d:12:07: a4:dd:2f:e8:71:c5:81:62:bf:9c:f0:ed:24:83:c7:25:41:f7: fa:bc:2a:a6:b2:0e:50:27:0c:18:d9:67:78:19:69:00:73:61: a0:58:07:bf:f8:66:12:33:f3:9a:ad:35:79:35:b6:9f:0b:78: 58:71:1f:86:87:69:55:63:0c:33:4d:c8:e3:c6:90:00:ec:5c: 47:e6:2e:6c:3a:c6:15:2e:32:1f:0e:2b:63:12:62:5f:e7:34: 40:4b:66:f6:f8:c5:76:7f:d4:b4:6d:8d:52:7f:00:69:68:ca: a8:04:1f:65:75:31:1c:3e:d3:39:e7:1b:a6:fa:e0:08:f8:35: 46:9a:af:76 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUKrVnKTIaJvyVeohYZD/PgRRpnHIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk4NkRDODI4MTJDNDdEQTE0OTk0QjhFNkU3MjdCNzJF MEIyRjhEODAeFw0yNjEwMTExMjA1NTlaFw0yNjEwMTIxMjQwNTlaMDMxMTAvBgNV BAMTKEI3NjAwMjc4QkYzQjY2MEQ5Rjk1NEUxMzJFNTkzMzE5MUNGREZCRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQVLVAuG8iUvgrqD2TnVx+GozP HMDuib5OFwUymZe33gLL3lFPhQgjQX3xoc5T9QjMaH2Rtb++bpnNejM8sqccAlho 6UcmG2tlN3dt70UsZMTu78U9OVPST7Y+XVEq8I2e7G6HLrTlgHXAzdTjP5EnASWi YAOmcsllnKJdU8EtKpXPuVyykKrQDaIKyg00ROmyI9mUVDSdO73mr/bXw4WFGp0E oQMu03a3aUk/rB1tAsksg3AXpToGiWI24CcMxzK8vYIhEydtK5H8u/ddlE0xVAhY T/06qV1P/6xQ8lAtOhIrBxuopmjjytkKSCskHDmngDXsnVEpg/3Q+IAvbO2FAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUt2ACeL87Zg2flU4TLlkzGRz9+9AwHwYDVR0j BBgwFoAUaYbcgoEsR9oUmUuObnJ7cuCy+NgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVk OGM0LzkvNjk4NkRDODI4MTJDNDdEQTE0OTk0QjhFNkU3MjdCNzJFMEIyRjhEOC5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzY5ODZEQzgyODEyQzQ3 REExNDk5NEI4RTZFNzI3QjcyRTBCMkY4RDguY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVkOGM0 LzkvNjk4NkRDODI4MTJDNDdEQTE0OTk0QjhFNkU3MjdCNzJFMEIyRjhEOC5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAIgSoG8JnNEw9yIHmPVtEIMmtfTi2Nk+90JjxzrOZtiHrOq9AtP45Hq9 wFlr2fuz97tTlmAt986Lhp0utGo4HdGaRtJmheiEgEx9pUU6MpU6allTMQJpTgne FJRgIaIZtxxXpSasaHeLxio7v0FhuLSodv/cNZ5gcWbFJp0SB6TdL+hxxYFiv5zw 7SSDxyVB9/q8KqayDlAnDBjZZ3gZaQBzYaBYB7/4ZhIz85qtNXk1tp8LeFhxH4aH aVVjDDNNyOPGkADsXEfmLmw6xhUuMh8OK2MSYl/nNEBLZvb4xXZ/1LRtjVJ/AGlo yqgEH2V1MRw+0znnG6b64Aj4NUaar3Y= -----END CERTIFICATE-----Generated at Sun Oct 11 18:58:40 2026 by rpki-client