$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft File: CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft (raw, json) Hash identifier: ygWqmQWdrFNPy5zACBSWcX1ZAficmqXKy12+iLesrno= Subject key identifier: 32:01:11:13:85:FA:7A:EC:13:58:E6:95:43:40:FD:59:55:3B:0E:AA Authority key identifier: CC:6E:CC:46:20:C3:32:98:BA:AE:F1:70:9A:D6:D0:59:5C:D2:56:5C Certificate issuer: /CN=CC6ECC4620C33298BAAEF1709AD6D0595CD2565C Certificate serial: 12E1D6C5ED1D61A548E4A4350B328853817776CF Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft Manifest number: 0233 Signing time: Thu 27 Aug 2026 01:59:01 +0000 Manifest this update: Thu 27 Aug 2026 01:54:01 +0000 Manifest next update: Fri 28 Aug 2026 02:42:01 +0000 Files and hashes: 1: CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl (hash: cxot3TI6aR8Atd/Aw+eE5Xa0O/dqkcw4rZg13cwYidQ=) 2: 326130353a646663313a393630303a3a2f34302d3430203d3e20323136343535.roa (hash: s3vZksQWbyouGRJqfpkziZUFeKyXQLPp4pKI5MlbQ60=) 3: 326130353a646663313a383530303a3a2f34302d3430203d3e20323136343535.roa (hash: b9rd9SGbXvvvzK+D0FWbq0BInp6dAR3HKF/6onJHEfc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 27 Aug 2026 20:12:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:e1:d6:c5:ed:1d:61:a5:48:e4:a4:35:0b:32:88:53:81:77:76:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC6ECC4620C33298BAAEF1709AD6D0595CD2565C Validity Not Before: Aug 27 01:54:01 2026 GMT Not After : Aug 28 02:42:01 2026 GMT Subject: CN=3201111385FA7AEC1358E6954340FD59553B0EAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d3:07:24:00:06:16:ba:60:db:6d:5a:82:30: 21:0c:d6:79:16:77:af:17:38:39:1e:21:39:d7:b3: d1:e5:eb:66:7b:01:73:17:48:4f:25:94:43:7d:ba: ea:5d:88:61:df:1c:ff:27:79:f7:4f:16:69:90:b7: 47:3d:06:0b:cc:7c:bd:6a:1f:47:2a:0a:3e:5d:e1: 9b:00:2a:2a:df:07:a7:0a:c9:c5:0b:0b:01:f0:cd: 2a:df:f6:22:c9:e9:05:90:a6:a2:f5:fe:c1:f2:42: 73:1f:81:9d:02:d4:14:b7:bf:05:89:61:c6:a6:a4: 98:8c:48:a0:04:18:6e:8b:51:3e:5b:50:10:f0:bd: b3:69:98:45:f8:b6:60:95:64:70:e6:21:6b:0c:e2: c4:f7:72:74:50:eb:f9:da:fd:d3:45:52:07:bd:8e: 3c:42:31:7d:3c:2e:10:43:dc:2e:81:ba:0f:7c:9a: d3:2c:c9:13:3a:cb:96:09:3b:f3:89:e1:ef:df:c1: fd:01:28:31:dd:02:e2:f7:a3:52:c6:37:ff:49:2b: 5e:56:eb:37:a8:ea:b2:80:d8:d8:d3:28:e8:d9:b4: 8b:0f:b8:89:6e:53:86:b9:3d:61:ff:e5:d5:84:d9: 14:cd:0e:f5:94:f2:15:d3:74:78:30:2b:19:02:7d: bb:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:01:11:13:85:FA:7A:EC:13:58:E6:95:43:40:FD:59:55:3B:0E:AA X509v3 Authority Key Identifier: keyid:CC:6E:CC:46:20:C3:32:98:BA:AE:F1:70:9A:D6:D0:59:5C:D2:56:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:37:a5:bd:28:08:4c:81:aa:65:23:bb:d3:eb:5f:ee:b1:a4: 46:1a:e9:99:47:ac:06:35:bb:c3:8d:7e:17:a6:fe:90:0f:1d: 3a:9f:bc:86:16:41:df:42:0c:92:2a:6b:02:22:b1:49:f1:b3: af:39:61:82:19:58:08:ef:cc:67:db:c3:bc:0c:f7:48:4d:9f: 44:1e:c4:ad:75:71:9b:1f:87:e6:a3:30:be:05:71:b2:b5:e6: cb:4b:99:39:2c:06:a7:2c:4d:8a:be:db:b5:9c:af:e1:b0:81: 0a:f0:38:65:8a:16:31:47:9e:86:36:6d:ce:8f:37:98:8d:07: ef:cc:11:ff:3d:c1:2e:c2:41:e4:79:cb:dd:d6:63:05:53:7e: 54:72:fa:2c:e4:ff:92:dd:ce:e6:0f:20:6d:1b:67:f8:4d:54: c3:59:03:0b:fc:60:cc:ba:16:ce:66:85:1c:21:94:a3:c0:1c: b2:9f:9f:09:f3:8e:31:b5:dd:b1:42:12:89:53:ba:ec:cc:e0: a8:7c:06:5d:80:30:5b:f5:ad:25:7a:33:6e:e5:4c:db:6c:e5: 60:30:df:7f:e7:26:49:e9:95:3f:f8:e2:f6:07:9a:2d:93:56: d5:1e:68:9a:67:10:9c:4e:4f:15:79:6e:d8:6e:c3:f9:82:23: c5:22:ef:af -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUEuHWxe0dYaVI5KQ1CzKIU4F3ds8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M2RUNDNDYyMEMzMzI5OEJBQUVGMTcwOUFENkQwNTk1 Q0QyNTY1QzAeFw0yNjA4MjcwMTU0MDFaFw0yNjA4MjgwMjQyMDFaMDMxMTAvBgNV BAMTKDMyMDExMTEzODVGQTdBRUMxMzU4RTY5NTQzNDBGRDU5NTUzQjBFQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj0wckAAYWumDbbVqCMCEM1nkW d68XODkeITnXs9Hl62Z7AXMXSE8llEN9uupdiGHfHP8nefdPFmmQt0c9BgvMfL1q H0cqCj5d4ZsAKirfB6cKycULCwHwzSrf9iLJ6QWQpqL1/sHyQnMfgZ0C1BS3vwWJ YcampJiMSKAEGG6LUT5bUBDwvbNpmEX4tmCVZHDmIWsM4sT3cnRQ6/na/dNFUge9 jjxCMX08LhBD3C6Bug98mtMsyRM6y5YJO/OJ4e/fwf0BKDHdAuL3o1LGN/9JK15W 6zeo6rKA2NjTKOjZtIsPuIluU4a5PWH/5dWE2RTNDvWU8hXTdHgwKxkCfbtvAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUMgERE4X6euwTWOaVQ0D9WVU7DqowHwYDVR0j BBgwFoAUzG7MRiDDMpi6rvFwmtbQWVzSVlwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1 NjRhLzMvQ0M2RUNDNDYyMEMzMzI5OEJBQUVGMTcwOUFENkQwNTk1Q0QyNTY1Qy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0NDNkVDQzQ2MjBDMzMy OThCQUFFRjE3MDlBRDZEMDU5NUNEMjU2NUMuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1NjRh LzMvQ0M2RUNDNDYyMEMzMzI5OEJBQUVGMTcwOUFENkQwNTk1Q0QyNTY1Qy5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAHs3pb0oCEyBqmUju9PrX+6xpEYa6ZlHrAY1u8ONfhem/pAPHTqfvIYW Qd9CDJIqawIisUnxs685YYIZWAjvzGfbw7wM90hNn0QexK11cZsfh+ajML4FcbK1 5stLmTksBqcsTYq+27Wcr+GwgQrwOGWKFjFHnoY2bc6PN5iNB+/MEf89wS7CQeR5 y93WYwVTflRy+izk/5LdzuYPIG0bZ/hNVMNZAwv8YMy6Fs5mhRwhlKPAHLKfnwnz jjG13bFCEolTuuzM4Kh8Bl2AMFv1rSV6M27lTNts5WAw33/nJknplT/44vYHmi2T VtUeaJpnEJxOTxV5bthuw/mCI8Ui768= -----END CERTIFICATE-----Generated at Thu Aug 27 04:09:47 2026 by rpki-client