$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft File: CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft (raw, json) Hash identifier: YxcYlZuqxLJV+ec/GEOV6hkhtcrh/g7ZKY+jz2rBouA= Subject key identifier: BD:2D:6C:81:BF:CF:17:43:29:0D:22:AD:1D:89:51:EA:58:D9:94:39 Authority key identifier: CC:6E:CC:46:20:C3:32:98:BA:AE:F1:70:9A:D6:D0:59:5C:D2:56:5C Certificate issuer: /CN=CC6ECC4620C33298BAAEF1709AD6D0595CD2565C Certificate serial: 3179A387DF07A450712EC59D8B93C3C6AAF52BE7 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft Manifest number: 01B7 Signing time: Tue 26 May 2026 21:51:42 +0000 Manifest this update: Tue 26 May 2026 21:46:42 +0000 Manifest next update: Thu 28 May 2026 01:45:42 +0000 Files and hashes: 1: 326130353a646663313a393630303a3a2f34302d3430203d3e20323136343535.roa (hash: EPbQn4nTyAleGN23OETUsYn80EOl1eLpliPnGLTdXDk=) 2: 326130353a646663313a383530303a3a2f34302d3430203d3e20323136343535.roa (hash: oi3cTY9RPbSSa44GzFqVMPw4EmmK/P6XuRB3HCSy6ZU=) 3: CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl (hash: hYzx2P9iKI9by9y2fCFMWx9I3Dd+XcHRk4UvWP9NoHc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 28 May 2026 01:42:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:79:a3:87:df:07:a4:50:71:2e:c5:9d:8b:93:c3:c6:aa:f5:2b:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC6ECC4620C33298BAAEF1709AD6D0595CD2565C Validity Not Before: May 26 21:46:42 2026 GMT Not After : May 28 01:45:42 2026 GMT Subject: CN=BD2D6C81BFCF1743290D22AD1D8951EA58D99439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c9:51:fd:0c:d8:db:09:34:11:1b:09:c1:25: 6d:a8:e2:72:97:63:86:de:bc:7b:80:ce:5e:51:a4: 3a:95:f0:2b:40:3a:57:e8:30:ce:6c:9b:66:8c:0f: 5a:3a:4a:07:be:da:36:c8:d5:97:38:be:6c:64:06: d0:7c:8b:e9:cc:00:38:48:09:47:ea:43:87:f7:58: 3e:4f:47:94:97:a5:2f:de:dc:7d:ff:90:c0:e1:e7: 3a:ed:5d:03:42:25:61:bc:21:b3:7a:fb:2b:36:ec: 37:5a:bf:5c:54:26:bc:da:df:97:2d:b4:01:e1:6f: 34:52:46:4d:14:63:11:7a:4e:d5:64:f3:a4:11:71: 49:54:95:a3:e5:b1:c9:6c:80:70:f3:c0:12:f1:a6: 98:e1:bf:91:b4:4c:67:fd:b4:02:98:bb:5d:03:7b: 74:d8:c5:82:30:f1:95:88:7a:eb:e4:1c:ee:9e:57: cf:81:c3:06:21:9b:5c:cc:e1:36:b8:b3:ca:aa:04: 33:50:a5:3a:a3:83:4a:02:c2:09:ec:f2:fe:63:e3: 8c:33:4b:c8:71:5e:ee:bc:88:51:3e:30:79:ca:c4: af:db:24:d2:ef:5b:9e:7b:90:96:c9:bd:8b:5a:eb: 6d:d5:b4:02:74:b5:45:cc:b5:31:61:6e:88:b2:1d: 13:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:2D:6C:81:BF:CF:17:43:29:0D:22:AD:1D:89:51:EA:58:D9:94:39 X509v3 Authority Key Identifier: keyid:CC:6E:CC:46:20:C3:32:98:BA:AE:F1:70:9A:D6:D0:59:5C:D2:56:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:dc:72:3f:ff:8f:7c:09:91:1d:ce:18:aa:e9:ea:7e:14:01: 23:2f:46:eb:1b:4a:13:3e:b7:8e:6d:b8:00:2a:92:cb:79:49: 22:ae:39:3f:da:41:46:32:db:5d:fc:f5:67:2f:18:96:a9:1b: 68:f5:c6:fd:a3:fc:e9:d3:0f:16:83:0d:48:d7:ab:ad:84:b3: 04:34:55:ed:44:a5:8e:d0:24:bc:a3:5f:e2:33:d0:3a:ee:a2: c5:22:45:11:ed:60:e4:3b:3f:7e:bf:fd:9a:95:64:eb:32:89: 85:56:75:b5:2a:ef:04:27:27:f5:17:6e:50:9c:bd:a6:83:e6: 1a:ec:71:9e:55:b0:f7:1f:e6:6f:80:49:33:93:1a:da:a8:e9: fa:b3:34:a0:9a:18:93:12:53:4d:4f:37:6c:95:c5:e2:bd:8a: 9f:b3:da:ea:76:7f:bf:24:2a:ea:b4:7b:b5:c0:9d:18:c6:91: ca:e2:f9:fb:1e:e9:ae:bf:89:0f:27:55:7c:c3:b2:2e:c1:ea: fc:86:fd:3c:a4:e9:ea:7e:13:07:b1:ed:1c:9b:a0:12:15:8d: 31:c0:2a:d8:b0:de:96:0f:f9:7d:16:3b:a6:f9:70:39:3a:c7: 8f:5f:30:40:7c:a2:39:69:cc:69:0c:0d:33:16:85:8b:38:69: d7:a8:26:de -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUMXmjh98HpFBxLsWdi5PDxqr1K+cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M2RUNDNDYyMEMzMzI5OEJBQUVGMTcwOUFENkQwNTk1 Q0QyNTY1QzAeFw0yNjA1MjYyMTQ2NDJaFw0yNjA1MjgwMTQ1NDJaMDMxMTAvBgNV BAMTKEJEMkQ2QzgxQkZDRjE3NDMyOTBEMjJBRDFEODk1MUVBNThEOTk0MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFyVH9DNjbCTQRGwnBJW2o4nKX Y4bevHuAzl5RpDqV8CtAOlfoMM5sm2aMD1o6Sge+2jbI1Zc4vmxkBtB8i+nMADhI CUfqQ4f3WD5PR5SXpS/e3H3/kMDh5zrtXQNCJWG8IbN6+ys27Ddav1xUJrza35ct tAHhbzRSRk0UYxF6TtVk86QRcUlUlaPlsclsgHDzwBLxppjhv5G0TGf9tAKYu10D e3TYxYIw8ZWIeuvkHO6eV8+BwwYhm1zM4Ta4s8qqBDNQpTqjg0oCwgns8v5j44wz S8hxXu68iFE+MHnKxK/bJNLvW557kJbJvYta623VtAJ0tUXMtTFhboiyHRMbAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUvS1sgb/PF0MpDSKtHYlR6ljZlDkwHwYDVR0j BBgwFoAUzG7MRiDDMpi6rvFwmtbQWVzSVlwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1 NjRhLzMvQ0M2RUNDNDYyMEMzMzI5OEJBQUVGMTcwOUFENkQwNTk1Q0QyNTY1Qy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0NDNkVDQzQ2MjBDMzMy OThCQUFFRjE3MDlBRDZEMDU5NUNEMjU2NUMuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1NjRh LzMvQ0M2RUNDNDYyMEMzMzI5OEJBQUVGMTcwOUFENkQwNTk1Q0QyNTY1Qy5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBALHccj//j3wJkR3OGKrp6n4UASMvRusbShM+t45tuAAqkst5SSKuOT/a QUYy21389WcvGJapG2j1xv2j/OnTDxaDDUjXq62EswQ0Ve1EpY7QJLyjX+Iz0Dru osUiRRHtYOQ7P36//ZqVZOsyiYVWdbUq7wQnJ/UXblCcvaaD5hrscZ5VsPcf5m+A STOTGtqo6fqzNKCaGJMSU01PN2yVxeK9ip+z2up2f78kKuq0e7XAnRjGkcri+fse 6a6/iQ8nVXzDsi7B6vyG/Tyk6ep+Ewex7RyboBIVjTHAKtiw3pYP+X0WO6b5cDk6 x49fMEB8ojlpzGkMDTMWhYs4adeoJt4= -----END CERTIFICATE-----Generated at Wed May 27 16:16:12 2026 by rpki-client