$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft File: 6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft (raw, json) Hash identifier: L9pXl/mAWIOqs5JVUB5AgOHNyeayu15HcejaYToLA74= Subject key identifier: B4:5B:76:FD:34:6E:DA:9B:36:AD:52:01:FC:8F:61:BC:74:56:8E:B2 Authority key identifier: 69:86:DC:82:81:2C:47:DA:14:99:4B:8E:6E:72:7B:72:E0:B2:F8:D8 Certificate issuer: /CN=6986DC82812C47DA14994B8E6E727B72E0B2F8D8 Certificate serial: 245FEE034F6449C90DCFFC4638D7307579EE4B12 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft Manifest number: 01A6 Signing time: Wed 26 Aug 2026 22:10:40 +0000 Manifest this update: Wed 26 Aug 2026 22:05:40 +0000 Manifest next update: Thu 27 Aug 2026 23:35:40 +0000 Files and hashes: 1: 6986DC82812C47DA14994B8E6E727B72E0B2F8D8.crl (hash: Z4BaKoiGGigrKjZJLCP0aShgZ3wLNfDLiFCDgqEab5A=) 2: 326130613a363034303a343430303a3a2f34382d3438203d3e203530313034.roa (hash: Hi/9N+5IQGx093OQEgbXr/N8qqlN06r+epXMCIP3zqE=) 3: 326130613a363034303a343430303a3a2f34382d3438203d3e20313532333638.roa (hash: gotlPq13MIgn9CpWrSq139KCagvKTA63f16ENY1QYXI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.crl rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 27 Aug 2026 20:12:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:5f:ee:03:4f:64:49:c9:0d:cf:fc:46:38:d7:30:75:79:ee:4b:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6986DC82812C47DA14994B8E6E727B72E0B2F8D8 Validity Not Before: Aug 26 22:05:40 2026 GMT Not After : Aug 27 23:35:40 2026 GMT Subject: CN=B45B76FD346EDA9B36AD5201FC8F61BC74568EB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f2:30:80:e4:46:05:53:ef:2d:1c:db:e3:9e: 4d:d5:9f:d6:57:eb:e3:5c:21:3c:5b:be:f6:07:1b: fc:6a:d1:1a:87:d9:73:c7:40:09:69:a4:dd:8f:a4: 9e:38:2f:d9:6f:14:af:69:57:29:2d:f0:25:b6:04: be:99:c3:71:25:99:93:54:ef:e1:ef:d6:2a:42:e1: 28:b4:7f:c7:62:73:31:9e:e2:be:c3:e0:f9:6c:cd: 37:f9:94:08:e5:1b:f8:1c:fc:bd:fb:2a:47:dd:10: 2a:f7:30:d0:82:1a:22:1f:ac:22:1d:96:b3:06:5a: 42:6d:a0:94:cb:a7:31:8b:7e:91:09:9a:fc:40:4a: 12:ed:ab:5f:66:1c:a2:32:61:79:23:26:ff:95:7c: 31:cb:01:40:d9:2e:90:4d:36:9a:be:f1:c8:76:f3: 11:b5:25:84:13:c2:8e:72:86:9e:95:00:a9:a2:0a: 42:6b:f3:5c:b1:c3:eb:1c:1a:ad:91:1c:46:08:f0: c9:a0:6f:e5:fb:81:5a:33:07:2d:d5:85:c7:4b:26: 1b:f5:ad:4b:bd:6e:30:56:0a:f2:fe:d2:b4:92:1d: b0:85:b2:cf:02:50:01:cc:6c:41:5e:00:43:e8:7a: 12:a5:56:ba:c2:e4:54:6f:4a:f8:a5:d0:74:a2:a1: e4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:5B:76:FD:34:6E:DA:9B:36:AD:52:01:FC:8F:61:BC:74:56:8E:B2 X509v3 Authority Key Identifier: keyid:69:86:DC:82:81:2C:47:DA:14:99:4B:8E:6E:72:7B:72:E0:B2:F8:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:0a:2b:89:c2:a0:e5:05:21:c8:b0:d6:2a:c2:9b:dc:a9:c2: 60:25:80:2d:a5:ed:ef:9e:a9:d1:a1:d6:8d:7a:e9:1f:63:5e: 63:ad:9c:15:35:e3:83:a2:39:c4:58:d7:91:34:2f:90:4d:79: 94:a3:cb:15:de:23:d3:b6:7b:20:00:13:f3:56:38:e2:82:93: d1:02:ad:0e:2d:11:47:b9:6f:2d:23:77:b2:fe:8a:25:1b:69: 05:05:a0:03:91:00:26:6a:b1:1b:a2:e8:e4:61:de:4a:c0:fd: b0:20:5f:89:23:25:d2:29:fd:f9:12:78:31:8b:e6:39:48:59: 32:98:21:c0:53:b2:fd:60:a4:56:43:7c:95:2e:e0:91:61:72: de:64:aa:6a:21:18:e1:0a:ac:03:97:30:ab:88:4a:68:24:80: dd:6e:94:cc:3d:e9:7f:d6:dc:58:19:3f:f8:7a:82:0a:2b:9b: 7c:e7:5c:c4:6c:7b:c4:89:17:71:53:d3:30:ad:09:af:2f:cc: 70:f8:c5:8d:ce:7a:22:b6:8b:a1:73:7e:a6:16:82:16:c1:3c: 8f:47:c7:98:43:75:09:79:54:ca:a5:3f:bf:31:93:9e:8d:25: 68:01:35:6b:41:44:81:2e:39:ab:2f:08:e8:a7:89:a6:bf:49: 8f:f8:64:7e -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUJF/uA09kSckNz/xGONcwdXnuSxIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk4NkRDODI4MTJDNDdEQTE0OTk0QjhFNkU3MjdCNzJF MEIyRjhEODAeFw0yNjA4MjYyMjA1NDBaFw0yNjA4MjcyMzM1NDBaMDMxMTAvBgNV BAMTKEI0NUI3NkZEMzQ2RURBOUIzNkFENTIwMUZDOEY2MUJDNzQ1NjhFQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi8jCA5EYFU+8tHNvjnk3Vn9ZX 6+NcITxbvvYHG/xq0RqH2XPHQAlppN2PpJ44L9lvFK9pVykt8CW2BL6Zw3ElmZNU 7+Hv1ipC4Si0f8diczGe4r7D4PlszTf5lAjlG/gc/L37KkfdECr3MNCCGiIfrCId lrMGWkJtoJTLpzGLfpEJmvxAShLtq19mHKIyYXkjJv+VfDHLAUDZLpBNNpq+8ch2 8xG1JYQTwo5yhp6VAKmiCkJr81yxw+scGq2RHEYI8Mmgb+X7gVozBy3VhcdLJhv1 rUu9bjBWCvL+0rSSHbCFss8CUAHMbEFeAEPoehKlVrrC5FRvSvil0HSioeRVAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUtFt2/TRu2ps2rVIB/I9hvHRWjrIwHwYDVR0j BBgwFoAUaYbcgoEsR9oUmUuObnJ7cuCy+NgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVk OGM0LzkvNjk4NkRDODI4MTJDNDdEQTE0OTk0QjhFNkU3MjdCNzJFMEIyRjhEOC5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzY5ODZEQzgyODEyQzQ3 REExNDk5NEI4RTZFNzI3QjcyRTBCMkY4RDguY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVkOGM0 LzkvNjk4NkRDODI4MTJDNDdEQTE0OTk0QjhFNkU3MjdCNzJFMEIyRjhEOC5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBADEKK4nCoOUFIciw1irCm9ypwmAlgC2l7e+eqdGh1o166R9jXmOtnBU1 44OiOcRY15E0L5BNeZSjyxXeI9O2eyAAE/NWOOKCk9ECrQ4tEUe5by0jd7L+iiUb aQUFoAORACZqsRui6ORh3krA/bAgX4kjJdIp/fkSeDGL5jlIWTKYIcBTsv1gpFZD fJUu4JFhct5kqmohGOEKrAOXMKuISmgkgN1ulMw96X/W3FgZP/h6ggorm3znXMRs e8SJF3FT0zCtCa8vzHD4xY3OeiK2i6FzfqYWghbBPI9Hx5hDdQl5VMqlP78xk56N JWgBNWtBRIEuOasvCOiniaa/SY/4ZH4= -----END CERTIFICATE-----Generated at Thu Aug 27 05:35:34 2026 by rpki-client