$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft File: 0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft (raw, json) Hash identifier: pnSBILrKYX+hCdysDXdey2IE5JH08RQkQGlv8WZK5mo= Subject key identifier: B0:9B:44:E6:49:82:1E:07:46:A3:AD:BB:FD:4B:8C:36:D4:8F:1D:2B Authority key identifier: 0B:3B:68:A2:06:B6:AF:84:A3:4A:A1:B7:63:2E:99:AB:06:F5:20:77 Certificate issuer: /CN=0B3B68A206B6AF84A34AA1B7632E99AB06F52077 Certificate serial: 3AACAE2606AAB6A4BD3FE4084BD98E795E1CAE Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft Manifest number: 9A Signing time: Wed 27 May 2026 08:04:26 +0000 Manifest this update: Wed 27 May 2026 07:59:26 +0000 Manifest next update: Thu 28 May 2026 11:02:26 +0000 Files and hashes: 1: 0B3B68A206B6AF84A34AA1B7632E99AB06F52077.crl (hash: HD7qAef85kOj2JQ68e/0QyJq0HYVL5VSmRVIFImwM/0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.crl rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 28 May 2026 01:42:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:ac:ae:26:06:aa:b6:a4:bd:3f:e4:08:4b:d9:8e:79:5e:1c:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B3B68A206B6AF84A34AA1B7632E99AB06F52077 Validity Not Before: May 27 07:59:26 2026 GMT Not After : May 28 11:02:26 2026 GMT Subject: CN=B09B44E649821E0746A3ADBBFD4B8C36D48F1D2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d0:e6:6b:63:5f:a2:6a:8e:7c:89:2e:3f:37: a0:8c:e9:e0:b4:94:72:32:bb:a4:7b:7b:41:32:7b: e0:27:96:38:e4:47:26:63:61:c5:f3:7b:d0:01:88: d6:10:b9:3c:d7:c2:c2:99:47:91:37:ed:45:d6:6f: 8b:bc:53:dc:d5:f7:f6:20:ce:1e:07:70:86:41:14: 75:97:c7:a3:89:44:9e:aa:19:1e:17:fe:80:ba:bf: 33:6d:58:42:3f:f3:02:3e:72:33:51:9d:89:4a:8d: 7f:26:15:43:8c:ea:59:8e:9a:b8:74:55:4f:a4:fc: 73:ee:63:62:96:77:45:7b:70:e1:db:41:d3:c8:69: 85:e3:cb:3e:8c:31:1c:36:d1:fa:fd:31:b5:a0:e9: b4:bb:dc:4a:87:a6:46:ab:b6:56:c9:7d:de:15:c0: 25:b4:93:69:a0:6a:9c:b6:1c:70:e9:c9:c2:3e:c6: 48:a4:37:a7:63:8a:3a:a0:15:ed:1e:45:fd:6e:c6: 5e:7a:6b:2e:7f:05:11:dd:ce:41:fe:c6:a3:60:15: 5c:d2:a0:c2:98:c9:3e:ab:80:fa:94:a6:72:e3:fb: 95:6f:57:95:e6:7f:03:f1:6e:e7:2b:fd:27:7e:49: d3:d2:5f:03:99:ea:73:59:98:71:57:78:a6:84:ed: 73:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:9B:44:E6:49:82:1E:07:46:A3:AD:BB:FD:4B:8C:36:D4:8F:1D:2B X509v3 Authority Key Identifier: keyid:0B:3B:68:A2:06:B6:AF:84:A3:4A:A1:B7:63:2E:99:AB:06:F5:20:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:64:8f:13:7a:87:64:84:68:d0:1c:7b:4b:f6:1b:97:9e:31: 64:30:28:83:7b:32:44:23:f2:d5:73:54:53:54:8b:3e:3a:df: 1c:11:c1:5c:51:b0:35:53:6d:71:60:28:bc:f8:53:c7:96:9b: 17:fc:1d:dd:89:40:32:50:65:b2:91:f1:a8:13:9f:2b:50:ba: 24:79:23:ff:a1:8f:3e:66:3d:69:ce:e3:d9:21:67:d8:23:bf: dc:6f:1a:b5:81:a3:d4:80:aa:38:28:55:1d:d3:19:51:60:0e: ea:92:1d:3e:3c:f7:3f:07:99:fb:81:23:89:90:0a:24:74:e0: 32:9f:df:aa:7f:15:12:a5:da:5f:54:d3:35:68:2c:b7:05:04: cd:36:55:a6:7f:f9:74:67:04:a3:2e:b0:06:c2:e2:9b:4f:a6: 79:a2:40:77:42:b5:a6:55:50:95:07:51:f9:79:b0:41:36:23: e1:bd:d2:e1:f6:94:52:7a:4e:a2:8b:a9:86:29:49:ff:b3:ba: 46:b5:de:e2:90:17:4a:a7:7e:aa:cb:dc:37:35:09:2b:50:17: 21:f6:5f:42:ab:a0:09:7b:d6:a6:b1:7d:00:b2:81:1f:f5:38: ba:88:b2:d5:f7:1b:3c:cf:1b:7f:14:45:ea:30:2f:06:07:03: 54:47:56:fd -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgITOqyuJgaqtqS9P+QIS9mOeV4crjANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygwQjNCNjhBMjA2QjZBRjg0QTM0QUExQjc2MzJFOTlBQjA2 RjUyMDc3MB4XDTI2MDUyNzA3NTkyNloXDTI2MDUyODExMDIyNlowMzExMC8GA1UE AxMoQjA5QjQ0RTY0OTgyMUUwNzQ2QTNBREJCRkQ0QjhDMzZENDhGMUQyQjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ/Q5mtjX6JqjnyJLj83oIzp4LSU cjK7pHt7QTJ74CeWOORHJmNhxfN70AGI1hC5PNfCwplHkTftRdZvi7xT3NX39iDO HgdwhkEUdZfHo4lEnqoZHhf+gLq/M21YQj/zAj5yM1GdiUqNfyYVQ4zqWY6auHRV T6T8c+5jYpZ3RXtw4dtB08hphePLPowxHDbR+v0xtaDptLvcSoemRqu2Vsl93hXA JbSTaaBqnLYccOnJwj7GSKQ3p2OKOqAV7R5F/W7GXnprLn8FEd3OQf7Go2AVXNKg wpjJPquA+pSmcuP7lW9XleZ/A/Fu5yv9J35J09JfA5nqc1mYcVd4poTtc6UCAwEA AaOCAmEwggJdMB0GA1UdDgQWBBSwm0TmSYIeB0ajrbv9S4w21I8dKzAfBgNVHSME GDAWgBQLO2iiBravhKNKobdjLpmrBvUgdzAOBgNVHQ8BAf8EBAMCB4AwgZcGA1Ud HwSBjzCBjDCBiaCBhqCBg4aBgHJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi ZTRlLzEwLzBCM0I2OEEyMDZCNkFGODRBMzRBQTFCNzYzMkU5OUFCMDZGNTIwNzcu Y3JsMHoGCCsGAQUFBwEBBG4wbDBqBggrBgEFBQcwAoZecnN5bmM6Ly9jbG91ZGll LXJlcG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvNC8wQjNCNjhBMjA2QjZB Rjg0QTM0QUExQjc2MzJFOTlBQjA2RjUyMDc3LmNlcjCBoAYIKwYBBQUHAQsEgZMw gZAwgY0GCCsGAQUFBzALhoGAcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5u ZXQvcmVwb3NpdG9yeS8xYmY4ZTk3Ny03Mjc4LTQ2Y2YtYWJkMS05OWNkMWZkMmJl NGUvMTAvMEIzQjY4QTIwNkI2QUY4NEEzNEFBMUI3NjMyRTk5QUIwNkY1MjA3Ny5t ZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw BgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcN AQELBQADggEBAHBkjxN6h2SEaNAce0v2G5eeMWQwKIN7MkQj8tVzVFNUiz463xwR wVxRsDVTbXFgKLz4U8eWmxf8Hd2JQDJQZbKR8agTnytQuiR5I/+hjz5mPWnO49kh Z9gjv9xvGrWBo9SAqjgoVR3TGVFgDuqSHT489z8HmfuBI4mQCiR04DKf36p/FRKl 2l9U0zVoLLcFBM02VaZ/+XRnBKMusAbC4ptPpnmiQHdCtaZVUJUHUfl5sEE2I+G9 0uH2lFJ6TqKLqYYpSf+zuka13uKQF0qnfqrL3Dc1CStQFyH2X0KroAl71qaxfQCy gR/1OLqIstX3GzzPG38UReowLwYHA1RHVv0= -----END CERTIFICATE-----Generated at Wed May 27 16:16:12 2026 by rpki-client