$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft File: 6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft (raw, json) Hash identifier: r+Xxg2g6rdyH08WIH+jKxbdxGUvi/96p+8S/3CMvSSU= Subject key identifier: 44:38:BF:15:66:8D:BB:02:28:AF:03:48:CF:34:2D:EA:7E:81:D0:34 Authority key identifier: 69:86:DC:82:81:2C:47:DA:14:99:4B:8E:6E:72:7B:72:E0:B2:F8:D8 Certificate issuer: /CN=6986DC82812C47DA14994B8E6E727B72E0B2F8D8 Certificate serial: 55DD861F4DA71D51545E8E62F973AA44C33F4F28 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft Manifest number: 0166 Signing time: Sat 11 Jul 2026 13:08:14 +0000 Manifest this update: Sat 11 Jul 2026 13:03:14 +0000 Manifest next update: Sun 12 Jul 2026 16:33:14 +0000 Files and hashes: 1: 326130613a363034303a343430303a3a2f34382d3438203d3e20313532333638.roa (hash: gotlPq13MIgn9CpWrSq139KCagvKTA63f16ENY1QYXI=) 2: 6986DC82812C47DA14994B8E6E727B72E0B2F8D8.crl (hash: MAshHimu7m+q01u8CmQn3WRa58k4C3FbdKRWSdgPfag=) 3: 326130613a363034303a343430303a3a2f34382d3438203d3e203530313034.roa (hash: Hi/9N+5IQGx093OQEgbXr/N8qqlN06r+epXMCIP3zqE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.crl rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 12 Jul 2026 16:33:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:dd:86:1f:4d:a7:1d:51:54:5e:8e:62:f9:73:aa:44:c3:3f:4f:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6986DC82812C47DA14994B8E6E727B72E0B2F8D8 Validity Not Before: Jul 11 13:03:14 2026 GMT Not After : Jul 12 16:33:14 2026 GMT Subject: CN=4438BF15668DBB0228AF0348CF342DEA7E81D034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7b:11:48:88:81:99:42:61:e2:b8:e3:88:e2: 10:27:65:b2:56:00:8d:22:d0:50:f3:84:6b:ee:ec: 22:e5:2f:26:13:e5:1e:84:e3:6b:9c:56:ec:cc:41: 1d:ad:83:b1:bb:be:98:93:aa:e4:e4:bc:6c:2c:bf: 64:db:4a:e2:e2:6d:3f:7c:5f:2f:4b:5c:7e:00:61: 05:02:51:d1:f7:c9:85:4f:d2:0a:70:49:64:0f:3a: 61:30:13:56:bd:69:b9:30:b5:ae:30:3c:18:61:2d: 76:d7:36:3e:85:9e:70:95:b4:b9:cd:c7:39:8d:fd: 13:b6:52:13:ba:a6:5a:8d:37:f2:db:9f:42:40:17: 85:1f:65:f2:35:8c:c2:0f:68:be:75:e1:26:c1:71: a2:5d:03:25:1c:8c:6f:13:98:06:27:14:cd:8c:2e: 83:cb:e2:39:61:36:53:ef:5c:b1:15:a2:db:6a:1e: fd:f7:b6:1a:e5:5c:0c:64:34:c1:18:92:23:df:35: 9c:63:4c:fd:d5:81:ee:57:1e:3c:7a:46:5c:c7:81: 3b:6a:a5:60:06:b1:7c:cf:48:47:33:ce:d2:c7:a9: 66:ea:1d:5f:ee:37:23:cc:94:1b:e5:04:98:6f:2c: 8b:e8:ea:3e:0b:92:09:f7:f3:dd:a8:4c:a5:af:ee: 6c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:38:BF:15:66:8D:BB:02:28:AF:03:48:CF:34:2D:EA:7E:81:D0:34 X509v3 Authority Key Identifier: keyid:69:86:DC:82:81:2C:47:DA:14:99:4B:8E:6E:72:7B:72:E0:B2:F8:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:55:9c:0a:89:46:ee:66:0a:20:c6:eb:d4:6e:7a:5e:0f:65: 8d:a0:58:4e:8d:4c:16:ea:71:c8:94:08:f1:a4:b6:2e:a9:3a: 35:f6:cb:52:8a:f5:88:d6:f3:93:08:c7:b0:8c:2c:f9:97:92: 20:a9:92:21:01:73:84:cd:cc:40:e9:df:a1:86:1b:62:c6:23: 3c:bf:17:b7:25:ec:cc:08:51:c4:7a:1c:77:7f:ba:45:02:28: aa:43:87:f0:c4:38:c7:a1:01:8b:5b:ef:c9:20:fc:51:ce:8c: 7f:c5:39:96:a5:41:29:41:fa:71:ca:4d:a1:a9:b6:ed:2a:ae: af:bf:f5:5f:d5:41:bd:e0:dc:18:e0:34:ae:e4:ad:27:58:41: c3:0c:24:15:bc:42:52:68:83:e5:71:52:67:24:e9:4b:7f:07: 05:03:1f:2e:28:66:00:26:e5:f2:36:9f:3d:33:42:d8:c6:f0: 75:e7:6b:02:08:93:62:cc:3a:76:65:b8:ff:85:29:27:fd:3c: c8:c4:47:b1:a5:eb:cb:4a:9c:24:e1:de:2d:f2:eb:59:f4:35: 28:1f:dc:b7:df:f0:ae:73:49:89:f1:45:db:97:52:c4:c6:4d: 2a:72:1b:85:12:1a:7f:38:74:db:58:5a:01:73:6a:b6:51:35: 35:5f:dc:cc -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUVd2GH02nHVFUXo5i+XOqRMM/TygwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk4NkRDODI4MTJDNDdEQTE0OTk0QjhFNkU3MjdCNzJF MEIyRjhEODAeFw0yNjA3MTExMzAzMTRaFw0yNjA3MTIxNjMzMTRaMDMxMTAvBgNV BAMTKDQ0MzhCRjE1NjY4REJCMDIyOEFGMDM0OENGMzQyREVBN0U4MUQwMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAexFIiIGZQmHiuOOI4hAnZbJW AI0i0FDzhGvu7CLlLyYT5R6E42ucVuzMQR2tg7G7vpiTquTkvGwsv2TbSuLibT98 Xy9LXH4AYQUCUdH3yYVP0gpwSWQPOmEwE1a9abkwta4wPBhhLXbXNj6FnnCVtLnN xzmN/RO2UhO6plqNN/Lbn0JAF4UfZfI1jMIPaL514SbBcaJdAyUcjG8TmAYnFM2M LoPL4jlhNlPvXLEVottqHv33thrlXAxkNMEYkiPfNZxjTP3Vge5XHjx6RlzHgTtq pWAGsXzPSEczztLHqWbqHV/uNyPMlBvlBJhvLIvo6j4Lkgn3892oTKWv7mztAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQURDi/FWaNuwIorwNIzzQt6n6B0DQwHwYDVR0j BBgwFoAUaYbcgoEsR9oUmUuObnJ7cuCy+NgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVk OGM0LzkvNjk4NkRDODI4MTJDNDdEQTE0OTk0QjhFNkU3MjdCNzJFMEIyRjhEOC5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzY5ODZEQzgyODEyQzQ3 REExNDk5NEI4RTZFNzI3QjcyRTBCMkY4RDguY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVkOGM0 LzkvNjk4NkRDODI4MTJDNDdEQTE0OTk0QjhFNkU3MjdCNzJFMEIyRjhEOC5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAFBVnAqJRu5mCiDG69Ruel4PZY2gWE6NTBbqcciUCPGkti6pOjX2y1KK 9YjW85MIx7CMLPmXkiCpkiEBc4TNzEDp36GGG2LGIzy/F7cl7MwIUcR6HHd/ukUC KKpDh/DEOMehAYtb78kg/FHOjH/FOZalQSlB+nHKTaGptu0qrq+/9V/VQb3g3Bjg NK7krSdYQcMMJBW8QlJog+VxUmck6Ut/BwUDHy4oZgAm5fI2nz0zQtjG8HXnawII k2LMOnZluP+FKSf9PMjER7Gl68tKnCTh3i3y61n0NSgf3Lff8K5zSYnxRduXUsTG TSpyG4USGn84dNtYWgFzarZRNTVf3Mw= -----END CERTIFICATE-----Generated at Sun Jul 12 04:44:49 2026 by rpki-client