$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft File: CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft (raw, json) Hash identifier: 1rkpR9+8JCSaggDg76fN9D8B4NWzHInmUXNYjCLArPE= Subject key identifier: A3:C4:F9:CC:F9:D7:D0:B1:58:3D:56:1C:09:1D:E3:9F:FA:15:7F:78 Authority key identifier: CC:6E:CC:46:20:C3:32:98:BA:AE:F1:70:9A:D6:D0:59:5C:D2:56:5C Certificate issuer: /CN=CC6ECC4620C33298BAAEF1709AD6D0595CD2565C Certificate serial: 5A9D60DC8D389E880552FA3287598060631046A2 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft Manifest number: 69 Signing time: Thu 18 Sep 2025 01:51:34 +0000 Manifest this update: Thu 18 Sep 2025 01:46:34 +0000 Manifest next update: Fri 19 Sep 2025 04:26:34 +0000 Files and hashes: 1: 326130353a646663313a393630303a3a2f34302d3430203d3e20323136343535.roa (hash: EPbQn4nTyAleGN23OETUsYn80EOl1eLpliPnGLTdXDk=) 2: CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl (hash: fXMmwLcb8GxT79nx8mEIKIB8OKnZcYnVHnIQliDg6s0=) 3: 326130353a646663313a383530303a3a2f34302d3430203d3e20323136343535.roa (hash: oi3cTY9RPbSSa44GzFqVMPw4EmmK/P6XuRB3HCSy6ZU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Sep 2025 04:26:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:9d:60:dc:8d:38:9e:88:05:52:fa:32:87:59:80:60:63:10:46:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC6ECC4620C33298BAAEF1709AD6D0595CD2565C Validity Not Before: Sep 18 01:46:34 2025 GMT Not After : Sep 19 04:26:34 2025 GMT Subject: CN=A3C4F9CCF9D7D0B1583D561C091DE39FFA157F78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:00:ce:d9:35:e7:25:a9:3b:64:bc:48:b9:01: 8c:83:70:22:2f:e6:fd:8a:0d:99:83:95:41:4b:92: 84:dc:d4:52:08:b8:40:70:71:81:8f:85:bd:cb:7e: 74:ab:9c:c4:32:09:ba:39:7e:e7:ff:d0:56:f3:d6: e6:97:39:f3:e2:a3:de:93:65:45:cc:7a:5d:13:a8: cc:18:6f:a7:59:c3:56:0c:a4:05:53:ec:0e:ef:21: 0d:ac:a0:05:18:a9:61:e1:2d:5d:15:71:42:b0:c8: 45:f1:3d:47:3e:37:c6:a5:cd:7c:60:a0:45:2c:d9: 92:67:f7:06:36:59:b8:7b:02:dc:2c:89:ab:74:e5: bd:5e:56:31:15:8c:e7:b8:0e:67:2f:b7:77:84:fe: 9d:90:22:38:cd:d5:79:7d:3a:50:40:ef:9b:29:66: df:47:cb:e0:76:b6:60:73:64:89:31:fd:d8:7e:4e: c1:ce:50:1a:bd:b7:a3:0f:ca:57:0b:91:97:4f:50: b0:5b:d8:e0:f1:82:22:b4:19:96:31:46:1a:80:99: 02:3f:0e:58:20:17:95:26:d2:f0:a9:53:ec:1f:a0: 00:fe:ad:3a:04:aa:ee:88:c0:89:e2:eb:e4:65:92: 59:a7:fc:04:cc:8c:1e:fd:e3:bc:77:ce:a5:31:07: db:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:C4:F9:CC:F9:D7:D0:B1:58:3D:56:1C:09:1D:E3:9F:FA:15:7F:78 X509v3 Authority Key Identifier: keyid:CC:6E:CC:46:20:C3:32:98:BA:AE:F1:70:9A:D6:D0:59:5C:D2:56:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:cb:51:5b:23:2f:a5:36:64:09:9a:2a:c8:90:c7:c0:42:7e: 91:7c:61:65:b1:1c:9c:8f:b8:cc:08:b0:fc:2b:18:f0:63:a6: 60:fd:b4:fa:80:21:10:2c:6e:9b:f8:51:fe:54:7d:7c:ec:a5: 81:ee:60:5b:c0:90:98:98:9d:95:cd:9a:f7:f5:d0:f3:85:67: 42:42:c1:03:e7:0d:73:73:91:29:61:93:1b:32:9b:bd:33:74: f5:8d:5e:b1:78:db:ef:66:fb:60:1a:c0:52:bf:fe:5e:f7:1d: bb:5c:8e:a1:57:0e:da:4e:fc:cf:84:76:b1:da:4a:83:2f:7e: 99:6a:be:4b:33:5b:8b:e2:8c:5b:fe:82:b0:d8:ef:95:4d:58: 57:86:f0:48:70:f2:2c:59:41:11:f5:13:9e:18:e7:f8:5a:e2: 8c:93:4f:13:b5:2d:1d:9e:0b:51:0e:e0:83:66:56:06:a4:a5: 49:a9:7f:61:5e:fc:25:0d:99:6c:d1:47:4b:83:ce:fc:65:c4: 08:cc:68:b7:7d:48:c0:bf:51:2e:26:97:da:dc:06:33:1d:c4: be:14:74:a0:38:0e:cc:e8:f6:df:f2:2b:45:df:04:e6:19:e4: 2f:b9:ec:c7:7a:94:b4:07:a7:29:a0:4b:d5:a7:d6:3c:db:c4: a2:fd:95:a8 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUWp1g3I04nogFUvoyh1mAYGMQRqIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M2RUNDNDYyMEMzMzI5OEJBQUVGMTcwOUFENkQwNTk1 Q0QyNTY1QzAeFw0yNTA5MTgwMTQ2MzRaFw0yNTA5MTkwNDI2MzRaMDMxMTAvBgNV BAMTKEEzQzRGOUNDRjlEN0QwQjE1ODNENTYxQzA5MURFMzlGRkExNTdGNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBAM7ZNeclqTtkvEi5AYyDcCIv 5v2KDZmDlUFLkoTc1FIIuEBwcYGPhb3LfnSrnMQyCbo5fuf/0Fbz1uaXOfPio96T ZUXMel0TqMwYb6dZw1YMpAVT7A7vIQ2soAUYqWHhLV0VcUKwyEXxPUc+N8alzXxg oEUs2ZJn9wY2Wbh7Atwsiat05b1eVjEVjOe4Dmcvt3eE/p2QIjjN1Xl9OlBA75sp Zt9Hy+B2tmBzZIkx/dh+TsHOUBq9t6MPylcLkZdPULBb2ODxgiK0GZYxRhqAmQI/ DlggF5Um0vCpU+wfoAD+rToEqu6IwIni6+Rlklmn/ATMjB7947x3zqUxB9sdAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUo8T5zPnX0LFYPVYcCR3jn/oVf3gwHwYDVR0j BBgwFoAUzG7MRiDDMpi6rvFwmtbQWVzSVlwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1 NjRhLzMvQ0M2RUNDNDYyMEMzMzI5OEJBQUVGMTcwOUFENkQwNTk1Q0QyNTY1Qy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0NDNkVDQzQ2MjBDMzMy OThCQUFFRjE3MDlBRDZEMDU5NUNEMjU2NUMuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1NjRh LzMvQ0M2RUNDNDYyMEMzMzI5OEJBQUVGMTcwOUFENkQwNTk1Q0QyNTY1Qy5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAD7LUVsjL6U2ZAmaKsiQx8BCfpF8YWWxHJyPuMwIsPwrGPBjpmD9tPqA IRAsbpv4Uf5UfXzspYHuYFvAkJiYnZXNmvf10POFZ0JCwQPnDXNzkSlhkxsym70z dPWNXrF42+9m+2AawFK//l73HbtcjqFXDtpO/M+EdrHaSoMvfplqvkszW4vijFv+ grDY75VNWFeG8Ehw8ixZQRH1E54Y5/ha4oyTTxO1LR2eC1EO4INmVgakpUmpf2Fe /CUNmWzRR0uDzvxlxAjMaLd9SMC/US4ml9rcBjMdxL4UdKA4Dszo9t/yK0XfBOYZ 5C+57Md6lLQHpymgS9Wn1jzbxKL9lag= -----END CERTIFICATE-----Generated at Thu Sep 18 13:04:39 2025 by rpki-client