$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft File: 0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft (raw, json) Hash identifier: EI0qFFnd3o0QtHWCBzf4c4nKGEyoSFusQrauDe0N1gE= Subject key identifier: DD:60:7A:48:65:0F:2A:49:09:88:03:AE:0C:50:4E:FB:A0:02:5B:F4 Authority key identifier: 0B:3B:68:A2:06:B6:AF:84:A3:4A:A1:B7:63:2E:99:AB:06:F5:20:77 Certificate issuer: /CN=0B3B68A206B6AF84A34AA1B7632E99AB06F52077 Certificate serial: 66B99C4E2668B2783C9EC975E389E1297B06CF71 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft Manifest number: D9 Signing time: Sat 11 Jul 2026 12:31:20 +0000 Manifest this update: Sat 11 Jul 2026 12:26:20 +0000 Manifest next update: Sun 12 Jul 2026 12:43:20 +0000 Files and hashes: 1: 0B3B68A206B6AF84A34AA1B7632E99AB06F52077.crl (hash: qUeJQL8Vnwmo+IAixvv3n9QPsSXlm8LN7/N8WiElfGM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.crl rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 12 Jul 2026 12:43:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:b9:9c:4e:26:68:b2:78:3c:9e:c9:75:e3:89:e1:29:7b:06:cf:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B3B68A206B6AF84A34AA1B7632E99AB06F52077 Validity Not Before: Jul 11 12:26:20 2026 GMT Not After : Jul 12 12:43:20 2026 GMT Subject: CN=DD607A48650F2A49098803AE0C504EFBA0025BF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:06:29:28:49:d6:a1:93:1c:96:34:48:3d:c3: 85:fc:e4:02:4a:d0:7c:e0:14:4e:75:8d:b0:80:7c: ac:0b:d2:3d:25:2d:55:b1:74:c8:55:fe:ee:eb:9f: fe:f5:cf:a5:a2:9f:af:e2:7d:c1:f0:97:f2:9b:12: 31:17:50:84:e2:c4:00:88:62:92:f3:18:d4:c6:00: df:5d:47:70:de:42:e0:a8:46:ed:33:b9:ed:fd:2d: c0:6a:77:6f:f2:ec:71:fb:54:2a:e6:2f:71:5b:2e: 03:13:20:a6:cb:27:ba:8d:a3:82:f2:84:34:1a:8d: e7:77:c6:d9:83:1c:91:92:8c:bd:25:6e:10:f7:33: 3e:97:2b:d8:77:5a:45:ff:e3:7e:2f:b6:11:18:4d: db:53:8a:44:15:91:79:02:43:70:9b:7c:78:7f:81: 47:ac:c5:73:25:3b:12:38:26:a9:1e:67:02:d8:0b: e7:3e:87:43:f5:5c:29:f3:59:97:d7:cc:17:c8:0f: 8f:82:14:4b:9d:97:d1:af:40:c2:a6:ba:41:93:93: 6e:ae:7c:26:fe:32:ab:ab:be:57:e1:72:96:02:da: c6:da:43:bb:28:11:1f:51:a8:c5:d6:a1:10:b5:e9: 06:da:04:88:f3:eb:d9:35:52:11:57:fc:bd:f6:84: 00:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:60:7A:48:65:0F:2A:49:09:88:03:AE:0C:50:4E:FB:A0:02:5B:F4 X509v3 Authority Key Identifier: keyid:0B:3B:68:A2:06:B6:AF:84:A3:4A:A1:B7:63:2E:99:AB:06:F5:20:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:09:9e:b6:1a:f0:1c:a8:63:bd:fa:2e:51:18:fe:67:43:d2: 9f:1d:59:e7:5e:44:cd:92:94:d7:f8:c6:7b:91:28:4e:98:34: 4d:6a:3d:fc:14:90:ad:6c:bc:9e:b9:45:6c:86:92:9f:fe:be: 8d:a5:6a:81:d5:d9:fb:fa:03:d1:1b:e2:00:81:0a:40:f4:0f: 3e:cc:76:41:65:f7:ce:12:f5:c1:f7:62:d3:7b:59:29:ef:00: c9:17:44:b4:e1:0f:c8:bf:ba:70:5a:8a:5a:8a:0c:6e:4e:7d: 19:71:51:9b:21:2f:2d:d9:af:f3:e4:27:9a:d8:44:14:57:86: e7:cc:01:f6:8b:cb:e6:d8:f9:2b:c6:62:49:83:02:87:8a:bd: 74:74:b3:86:60:bb:75:14:4e:d3:3a:87:f9:aa:fb:23:da:0f: 0b:09:e6:d1:fc:83:86:21:f4:73:ea:18:af:18:71:2e:b2:75: 1d:eb:3a:c7:12:e4:9f:a5:33:c0:55:de:77:a3:48:1a:41:9d: ac:f0:1b:3e:9d:ff:dc:bf:cb:9d:0a:cb:8b:49:9a:77:92:b0: 47:6b:2f:69:a2:12:64:2d:85:df:e4:06:28:21:4b:d9:d2:6c: fd:6f:4a:de:cc:cd:98:5a:18:3b:fd:93:21:25:c1:af:3d:e6: 81:76:29:5d -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgIUZrmcTiZosng8nsl144nhKXsGz3EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEIzQjY4QTIwNkI2QUY4NEEzNEFBMUI3NjMyRTk5QUIw NkY1MjA3NzAeFw0yNjA3MTExMjI2MjBaFw0yNjA3MTIxMjQzMjBaMDMxMTAvBgNV BAMTKERENjA3QTQ4NjUwRjJBNDkwOTg4MDNBRTBDNTA0RUZCQTAwMjVCRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrBikoSdahkxyWNEg9w4X85AJK 0HzgFE51jbCAfKwL0j0lLVWxdMhV/u7rn/71z6Win6/ifcHwl/KbEjEXUITixACI YpLzGNTGAN9dR3DeQuCoRu0zue39LcBqd2/y7HH7VCrmL3FbLgMTIKbLJ7qNo4Ly hDQajed3xtmDHJGSjL0lbhD3Mz6XK9h3WkX/434vthEYTdtTikQVkXkCQ3CbfHh/ gUesxXMlOxI4JqkeZwLYC+c+h0P1XCnzWZfXzBfID4+CFEudl9GvQMKmukGTk26u fCb+MqurvlfhcpYC2sbaQ7soER9RqMXWoRC16QbaBIjz69k1UhFX/L32hAABAgMB AAGjggJhMIICXTAdBgNVHQ4EFgQU3WB6SGUPKkkJiAOuDFBO+6ACW/QwHwYDVR0j BBgwFoAUCztooga2r4SjSqG3Yy6Zqwb1IHcwDgYDVR0PAQH/BAQDAgeAMIGXBgNV HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzFiZjhlOTc3LTcyNzgtNDZjZi1hYmQxLTk5Y2QxZmQy YmU0ZS8xMC8wQjNCNjhBMjA2QjZBRjg0QTM0QUExQjc2MzJFOTlBQjA2RjUyMDc3 LmNybDB6BggrBgEFBQcBAQRuMGwwagYIKwYBBQUHMAKGXnJzeW5jOi8vY2xvdWRp ZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xPVURJRS1SUEtJLzQvMEIzQjY4QTIwNkI2 QUY4NEEzNEFBMUI3NjMyRTk5QUIwNkY1MjA3Ny5jZXIwgaAGCCsGAQUFBwELBIGT MIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi ZTRlLzEwLzBCM0I2OEEyMDZCNkFGODRBMzRBQTFCNzYzMkU5OUFCMDZGNTIwNzcu bWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQ MAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3 DQEBCwUAA4IBAQBuCZ62GvAcqGO9+i5RGP5nQ9KfHVnnXkTNkpTX+MZ7kShOmDRN aj38FJCtbLyeuUVshpKf/r6NpWqB1dn7+gPRG+IAgQpA9A8+zHZBZffOEvXB92LT e1kp7wDJF0S04Q/Iv7pwWopaigxuTn0ZcVGbIS8t2a/z5Cea2EQUV4bnzAH2i8vm 2PkrxmJJgwKHir10dLOGYLt1FE7TOof5qvsj2g8LCebR/IOGIfRz6hivGHEusnUd 6zrHEuSfpTPAVd53o0gaQZ2s8Bs+nf/cv8udCsuLSZp3krBHay9pohJkLYXf5AYo IUvZ0mz9b0rezM2YWhg7/ZMhJcGvPeaBdild -----END CERTIFICATE-----Generated at Sun Jul 12 04:44:12 2026 by rpki-client