$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft File: 6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft (raw, json) Hash identifier: zJ5qHpo27rIbx1ZN7Kc+gzCq2oSVnMVM4un2dVuNHSo= Subject key identifier: 94:C0:F4:07:BE:62:E2:F1:63:E0:65:3C:93:34:F5:D9:A5:5B:A2:2F Authority key identifier: 6E:F8:DF:8B:74:C5:D8:BB:67:37:EC:42:CE:03:2A:B4:B0:3E:0C:51 Certificate issuer: /CN=6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51 Certificate serial: 68546587022216AEE8166129FAE76E409364CEE8 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft Manifest number: 0154 Signing time: Sun 15 Mar 2026 18:20:03 +0000 Manifest this update: Sun 15 Mar 2026 18:15:03 +0000 Manifest next update: Mon 16 Mar 2026 21:55:03 +0000 Files and hashes: 1: 6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.crl (hash: k/BRJrFcuuQfpjPPAHOZy50PGJ7hE3MeXV31FGSHw4E=) 2: 326130613a363034303a336630303a3a2f34302d3438203d3e20323033303639.roa (hash: rHPewLaTkppiYRuEKYbkMC6q0fSzfeWOiDhEN8UQLrI=) 3: 326130613a363034303a336638303a3a2f34312d3438203d3e203136353039.roa (hash: Wmi4Se034d+qqZcAnERqLlh4fra7054HHLp3mkWO2Ww=) 4: 326130613a363034303a313130303a3a2f34302d3430203d3e20323033303639.roa (hash: pHFnoNPoWytPyebFL74GP4B+9dNFxdZc97XyE0fhg1o=) 5: 326130613a363034303a336638303a3a2f34312d3438203d3e203134363138.roa (hash: aHvhuFqDO1GB7QIZ+LV93NwGnOmb8RZNrGiJRajypMI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.crl rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Mar 2026 19:57:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:54:65:87:02:22:16:ae:e8:16:61:29:fa:e7:6e:40:93:64:ce:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51 Validity Not Before: Mar 15 18:15:03 2026 GMT Not After : Mar 16 21:55:03 2026 GMT Subject: CN=94C0F407BE62E2F163E0653C9334F5D9A55BA22F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f0:4c:1d:98:9a:b9:4f:1d:3a:f4:2b:65:b9: 92:f7:83:e7:a5:2e:b3:de:a5:2e:57:37:8c:ab:ec: da:ab:c3:b8:f2:ad:10:19:4f:4f:1e:4b:b5:95:60: 80:80:43:55:43:f2:e8:c8:24:8a:44:18:a9:35:a8: 42:0c:be:7d:4c:8a:3d:61:d3:f2:a3:3d:78:fc:0d: a5:8d:5e:ac:32:e4:ac:3c:45:fe:da:cd:8e:ca:90: 3a:b1:d5:f5:4b:39:bd:a7:19:9e:fc:53:32:64:0f: 17:b4:5d:45:cd:a7:58:e2:9a:d3:90:89:52:d8:da: b8:8f:e4:dc:a1:a5:79:31:4a:43:92:16:69:69:39: cc:2f:4d:1d:84:d8:94:96:45:b1:1c:18:e6:f5:94: 34:da:c4:f2:d0:98:98:f5:c9:e6:c9:b4:a8:2f:ce: 92:36:78:4f:a1:ed:e3:b4:e6:52:98:df:a8:55:64: db:96:34:d7:73:dc:0f:48:01:5e:b4:f2:17:43:08: bc:b5:8f:b1:b0:4b:c6:30:26:ef:4d:41:21:f1:8c: 35:f3:fa:72:fb:37:db:b7:b1:e0:b2:2c:04:15:29: 6d:54:4b:bc:a9:6a:f0:4a:9d:ae:e4:d5:e0:da:2c: cc:4a:71:af:b6:a0:be:a7:2e:93:23:56:63:73:9e: ac:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:C0:F4:07:BE:62:E2:F1:63:E0:65:3C:93:34:F5:D9:A5:5B:A2:2F X509v3 Authority Key Identifier: keyid:6E:F8:DF:8B:74:C5:D8:BB:67:37:EC:42:CE:03:2A:B4:B0:3E:0C:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:04:7b:1e:65:67:f4:fd:86:60:17:61:09:0b:9a:dc:d4:76: 79:18:ed:f0:7e:94:49:ed:b3:d0:6b:ae:c0:d9:9e:04:92:78: 6e:d6:04:c0:d1:64:f3:25:df:96:fc:1d:91:1e:57:5c:60:db: 5c:60:d5:e6:e6:ae:0d:34:17:28:b8:92:bf:2b:10:1a:7d:06: 9c:f1:1d:59:de:33:f2:86:0c:c6:99:6f:8f:9a:ff:ef:43:c2: 7e:50:5a:c3:95:56:e1:9c:f1:14:6c:de:b1:d2:ff:49:cc:5d: f3:9f:df:ab:7e:8c:ae:8a:17:f6:c0:b2:6c:00:2e:56:6d:85: da:37:a7:21:f2:36:01:a6:cd:cd:87:52:7a:98:a2:57:9d:03: d0:68:0d:a0:de:1c:66:59:81:e2:be:e8:b8:29:ba:4f:4a:9f: 67:fc:4d:7e:5d:17:d2:b9:2d:ef:e4:89:b2:fe:ca:3c:96:e0: 66:fb:71:f5:38:a7:98:61:16:5d:ce:14:dd:7d:9f:93:e3:00: be:1a:54:46:63:1b:ef:36:e3:e1:29:94:90:ef:c0:42:bb:61: e1:2c:06:33:48:5d:07:0a:2f:d1:87:3f:69:3b:11:dc:b5:06: bb:c1:0a:b2:b4:78:79:2f:82:08:67:1f:3e:f6:d7:d6:f2:12: f4:ce:dc:d3 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgIUaFRlhwIiFq7oFmEp+uduQJNkzugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkVGOERGOEI3NEM1RDhCQjY3MzdFQzQyQ0UwMzJBQjRC MDNFMEM1MTAeFw0yNjAzMTUxODE1MDNaFw0yNjAzMTYyMTU1MDNaMDMxMTAvBgNV BAMTKDk0QzBGNDA3QkU2MkUyRjE2M0UwNjUzQzkzMzRGNUQ5QTU1QkEyMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw8EwdmJq5Tx069CtluZL3g+el LrPepS5XN4yr7Nqrw7jyrRAZT08eS7WVYICAQ1VD8ujIJIpEGKk1qEIMvn1Mij1h 0/KjPXj8DaWNXqwy5Kw8Rf7azY7KkDqx1fVLOb2nGZ78UzJkDxe0XUXNp1jimtOQ iVLY2riP5NyhpXkxSkOSFmlpOcwvTR2E2JSWRbEcGOb1lDTaxPLQmJj1yebJtKgv zpI2eE+h7eO05lKY36hVZNuWNNdz3A9IAV608hdDCLy1j7GwS8YwJu9NQSHxjDXz +nL7N9u3seCyLAQVKW1US7ypavBKna7k1eDaLMxKca+2oL6nLpMjVmNznqxxAgMB AAGjggJhMIICXTAdBgNVHQ4EFgQUlMD0B75i4vFj4GU8kzT12aVboi8wHwYDVR0j BBgwFoAUbvjfi3TF2LtnN+xCzgMqtLA+DFEwDgYDVR0PAQH/BAQDAgeAMIGXBgNV HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzFiZjhlOTc3LTcyNzgtNDZjZi1hYmQxLTk5Y2QxZmQy YmU0ZS8xMC82RUY4REY4Qjc0QzVEOEJCNjczN0VDNDJDRTAzMkFCNEIwM0UwQzUx LmNybDB6BggrBgEFBQcBAQRuMGwwagYIKwYBBQUHMAKGXnJzeW5jOi8vY2xvdWRp ZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xPVURJRS1SUEtJLzQvNkVGOERGOEI3NEM1 RDhCQjY3MzdFQzQyQ0UwMzJBQjRCMDNFMEM1MS5jZXIwgaAGCCsGAQUFBwELBIGT MIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi ZTRlLzEwLzZFRjhERjhCNzRDNUQ4QkI2NzM3RUM0MkNFMDMyQUI0QjAzRTBDNTEu bWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQ MAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3 DQEBCwUAA4IBAQB9BHseZWf0/YZgF2EJC5rc1HZ5GO3wfpRJ7bPQa67A2Z4Eknhu 1gTA0WTzJd+W/B2RHldcYNtcYNXm5q4NNBcouJK/KxAafQac8R1Z3jPyhgzGmW+P mv/vQ8J+UFrDlVbhnPEUbN6x0v9JzF3zn9+rfoyuihf2wLJsAC5WbYXaN6ch8jYB ps3Nh1J6mKJXnQPQaA2g3hxmWYHivui4KbpPSp9n/E1+XRfSuS3v5Imy/so8luBm +3H1OKeYYRZdzhTdfZ+T4wC+GlRGYxvvNuPhKZSQ78BCu2HhLAYzSF0HCi/Rhz9p OxHctQa7wQqytHh5L4IIZx8+9tfW8hL0ztzT -----END CERTIFICATE-----Generated at Mon Mar 16 02:39:09 2026 by rpki-client