$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft File: CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft (raw, json) Hash identifier: CbEVx7ZWGudV45v5PjcLyIlmYbaNg5tdGji5nd4VDKE= Subject key identifier: 32:A8:EB:5A:F2:93:BA:1B:EC:62:D6:4B:D9:FE:0A:05:C7:15:96:25 Authority key identifier: CC:6E:CC:46:20:C3:32:98:BA:AE:F1:70:9A:D6:D0:59:5C:D2:56:5C Certificate issuer: /CN=CC6ECC4620C33298BAAEF1709AD6D0595CD2565C Certificate serial: 5AD2B2CBF912FA9A53793F903D1CA539FC5CAA79 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft Manifest number: 01F6 Signing time: Sat 11 Jul 2026 22:57:56 +0000 Manifest this update: Sat 11 Jul 2026 22:52:56 +0000 Manifest next update: Mon 13 Jul 2026 00:14:56 +0000 Files and hashes: 1: CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl (hash: veO4TWGuKTOYt8QgesNT69oMQYiHFGPkn6Eg3N1ewKY=) 2: 326130353a646663313a393630303a3a2f34302d3430203d3e20323136343535.roa (hash: s3vZksQWbyouGRJqfpkziZUFeKyXQLPp4pKI5MlbQ60=) 3: 326130353a646663313a383530303a3a2f34302d3430203d3e20323136343535.roa (hash: b9rd9SGbXvvvzK+D0FWbq0BInp6dAR3HKF/6onJHEfc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 12 Jul 2026 20:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:d2:b2:cb:f9:12:fa:9a:53:79:3f:90:3d:1c:a5:39:fc:5c:aa:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC6ECC4620C33298BAAEF1709AD6D0595CD2565C Validity Not Before: Jul 11 22:52:56 2026 GMT Not After : Jul 13 00:14:56 2026 GMT Subject: CN=32A8EB5AF293BA1BEC62D64BD9FE0A05C7159625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b3:13:51:4d:02:84:bf:1d:35:cc:c5:c3:95: d4:f1:dd:65:33:d8:42:23:2a:5a:d7:fe:95:7c:fd: 53:55:3d:f6:b3:c2:b9:d4:8a:59:39:1e:63:74:62: 4a:c1:70:9e:85:3a:c9:8d:9c:f2:bb:ae:26:74:39: e0:fa:4f:60:1c:50:9b:5d:fd:da:cb:12:7a:f4:b8: 25:05:66:4b:8f:13:72:79:1b:a7:86:44:9f:88:9f: 4d:79:cf:1a:7a:02:38:29:3f:b9:cd:9d:e6:5c:9d: 21:7c:28:00:7b:3e:fa:de:d5:c4:f1:b7:13:7b:98: a1:d2:cb:bc:b8:ed:97:87:55:7d:0d:fc:e5:d9:ef: 8c:fa:ce:23:26:79:87:32:eb:01:87:f2:bf:ce:8d: 22:fe:39:e1:0a:d2:f8:de:ac:0c:8b:ac:4a:88:20: 2a:0b:aa:2d:28:76:b3:3c:0b:71:97:b2:e9:8f:a7: aa:9a:f2:c6:e2:a7:21:60:a3:c5:eb:5a:53:d9:7e: 85:5f:58:1d:d0:33:9b:e2:cc:c7:92:35:c7:5a:38: 42:e4:02:25:20:0a:00:32:e5:e1:90:4a:48:5f:9e: 71:f9:60:71:9f:ca:2e:05:32:ef:d5:d5:37:67:1e: d5:e3:6f:33:67:1a:83:28:74:87:18:a4:4a:b9:e1: 9c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A8:EB:5A:F2:93:BA:1B:EC:62:D6:4B:D9:FE:0A:05:C7:15:96:25 X509v3 Authority Key Identifier: keyid:CC:6E:CC:46:20:C3:32:98:BA:AE:F1:70:9A:D6:D0:59:5C:D2:56:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:c6:ef:ab:39:ca:0a:54:db:fa:cd:a6:ad:ee:a0:4c:bd:35: 05:fb:c8:07:a0:0c:e6:27:3d:04:b9:18:7c:38:d5:ae:b3:68: ea:f7:09:2d:6c:06:32:9c:2b:bb:13:84:f3:85:0c:05:a5:87: 7a:51:eb:05:0c:d1:23:39:9e:ea:ea:2e:d0:12:9f:cb:34:85: 87:8a:f2:c6:cc:f6:cb:67:1b:57:33:c1:24:1f:6c:88:16:e3: 35:9f:26:33:55:02:93:36:65:e8:6f:11:82:62:41:b4:9c:0c: c0:4a:63:02:c7:7a:40:32:f3:79:ef:ab:bb:3d:9b:f9:b3:8f: 9a:8c:f6:9e:0e:63:0a:e5:d3:8c:17:26:91:71:78:5b:5c:7c: 71:5f:a9:9c:57:da:ab:0d:4b:73:64:e4:62:a9:31:9c:42:8e: 74:7e:76:07:cf:f1:e7:ac:ab:34:c5:b4:dc:b4:f7:53:46:4f: d3:69:ce:da:29:90:b5:95:5b:8f:1c:75:04:a2:d9:11:be:32: 34:d4:07:67:56:ec:c7:e8:25:a2:fc:7f:0d:71:a1:59:39:fc: aa:7c:6c:bb:e1:10:a7:ad:fb:1b:91:8a:5d:23:ad:a0:e3:01: 25:2c:b0:8d:59:db:0d:f0:63:a6:7c:07:11:50:99:40:99:f0: 34:2f:e4:3d -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUWtKyy/kS+ppTeT+QPRylOfxcqnkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M2RUNDNDYyMEMzMzI5OEJBQUVGMTcwOUFENkQwNTk1 Q0QyNTY1QzAeFw0yNjA3MTEyMjUyNTZaFw0yNjA3MTMwMDE0NTZaMDMxMTAvBgNV BAMTKDMyQThFQjVBRjI5M0JBMUJFQzYyRDY0QkQ5RkUwQTA1QzcxNTk2MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0sxNRTQKEvx01zMXDldTx3WUz 2EIjKlrX/pV8/VNVPfazwrnUilk5HmN0YkrBcJ6FOsmNnPK7riZ0OeD6T2AcUJtd /drLEnr0uCUFZkuPE3J5G6eGRJ+In015zxp6AjgpP7nNneZcnSF8KAB7Pvre1cTx txN7mKHSy7y47ZeHVX0N/OXZ74z6ziMmeYcy6wGH8r/OjSL+OeEK0vjerAyLrEqI ICoLqi0odrM8C3GXsumPp6qa8sbipyFgo8XrWlPZfoVfWB3QM5vizMeSNcdaOELk AiUgCgAy5eGQSkhfnnH5YHGfyi4FMu/V1TdnHtXjbzNnGoModIcYpEq54ZwZAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUMqjrWvKTuhvsYtZL2f4KBccVliUwHwYDVR0j BBgwFoAUzG7MRiDDMpi6rvFwmtbQWVzSVlwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1 NjRhLzMvQ0M2RUNDNDYyMEMzMzI5OEJBQUVGMTcwOUFENkQwNTk1Q0QyNTY1Qy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0NDNkVDQzQ2MjBDMzMy OThCQUFFRjE3MDlBRDZEMDU5NUNEMjU2NUMuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1NjRh LzMvQ0M2RUNDNDYyMEMzMzI5OEJBQUVGMTcwOUFENkQwNTk1Q0QyNTY1Qy5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAKXG76s5ygpU2/rNpq3uoEy9NQX7yAegDOYnPQS5GHw41a6zaOr3CS1s BjKcK7sThPOFDAWlh3pR6wUM0SM5nurqLtASn8s0hYeK8sbM9stnG1czwSQfbIgW 4zWfJjNVApM2ZehvEYJiQbScDMBKYwLHekAy83nvq7s9m/mzj5qM9p4OYwrl04wX JpFxeFtcfHFfqZxX2qsNS3Nk5GKpMZxCjnR+dgfP8eesqzTFtNy091NGT9Npztop kLWVW48cdQSi2RG+MjTUB2dW7MfoJaL8fw1xoVk5/Kp8bLvhEKet+xuRil0jraDj ASUssI1Z2w3wY6Z8BxFQmUCZ8DQv5D0= -----END CERTIFICATE-----Generated at Sun Jul 12 04:40:05 2026 by rpki-client