$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft File: CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft (raw, json) Hash identifier: 7fA23Vh6Neb17WD6Z+kDXPa9uS4rJJtUtetsL02dmDg= Subject key identifier: ED:07:91:6F:49:B3:3B:93:C2:09:EF:9D:E9:C0:6D:A9:10:C6:B9:27 Authority key identifier: CC:6E:CC:46:20:C3:32:98:BA:AE:F1:70:9A:D6:D0:59:5C:D2:56:5C Certificate issuer: /CN=CC6ECC4620C33298BAAEF1709AD6D0595CD2565C Certificate serial: 5539E27FC7E5188BF7D661B9081C0EB35673181C Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft Manifest number: 026F Signing time: Sun 11 Oct 2026 08:03:26 +0000 Manifest this update: Sun 11 Oct 2026 07:58:26 +0000 Manifest next update: Mon 12 Oct 2026 11:20:26 +0000 Files and hashes: 1: 326130353a646663313a393630303a3a2f34302d3430203d3e20323136343535.roa (hash: s3vZksQWbyouGRJqfpkziZUFeKyXQLPp4pKI5MlbQ60=) 2: CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl (hash: 1m859E4AmxcxKM8+u9lR0uI6E+c7Gu1xFp0c1/38kBw=) 3: 326130353a646663313a383530303a3a2f34302d3430203d3e20323136343535.roa (hash: b9rd9SGbXvvvzK+D0FWbq0BInp6dAR3HKF/6onJHEfc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Oct 2026 11:20:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:39:e2:7f:c7:e5:18:8b:f7:d6:61:b9:08:1c:0e:b3:56:73:18:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC6ECC4620C33298BAAEF1709AD6D0595CD2565C Validity Not Before: Oct 11 07:58:26 2026 GMT Not After : Oct 12 11:20:26 2026 GMT Subject: CN=ED07916F49B33B93C209EF9DE9C06DA910C6B927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:17:43:e3:9c:09:62:40:07:18:66:6c:d6:4f: 87:08:8e:e9:c9:67:75:a4:2a:5c:1b:fa:8b:bf:56: 67:57:f6:f2:28:36:b1:7d:d1:de:e1:ea:dd:7d:fa: 7c:b7:a8:01:4b:62:96:b4:ec:0a:5d:ce:23:4e:af: 76:49:f0:1f:15:f4:5d:5c:a4:93:21:7a:e3:8b:31: be:fc:21:9f:7d:6a:15:6b:5d:8b:8f:f2:63:3f:0a: a0:09:6b:03:70:6f:4e:74:36:ff:61:c2:55:70:76: c8:89:da:bc:33:2b:34:bc:46:4d:f8:04:df:c0:9c: 0e:77:18:37:c0:13:48:0c:df:c2:4c:c7:c9:bc:f7: e4:83:1e:f2:fa:33:a3:cf:d8:a6:be:20:66:b8:27: 4f:95:80:57:6d:2e:25:63:65:cb:16:76:f6:4b:b2: 88:cb:f3:d5:c2:9f:d7:01:6f:04:5f:0c:7a:b0:27: 03:f1:99:14:10:3c:04:9a:57:42:94:7a:17:19:2b: 70:31:68:07:0c:56:bd:a5:c0:68:42:7d:64:6e:0c: 40:9d:60:01:aa:e2:79:c8:e9:87:fc:2d:4e:ee:7c: bb:03:a8:44:3c:ef:7f:3d:fe:2c:20:6f:a2:35:5d: a6:56:59:30:b8:e4:44:79:93:e5:23:0d:97:d1:d9: 0e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:07:91:6F:49:B3:3B:93:C2:09:EF:9D:E9:C0:6D:A9:10:C6:B9:27 X509v3 Authority Key Identifier: keyid:CC:6E:CC:46:20:C3:32:98:BA:AE:F1:70:9A:D6:D0:59:5C:D2:56:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:2f:f2:17:01:ea:4e:0c:04:02:08:a4:a2:23:9c:4a:a2:e8: d3:f9:7a:fc:4d:bb:5a:66:74:e0:3d:cc:68:7f:c6:e7:41:4f: 6d:6b:19:2e:4b:eb:11:6b:c5:33:31:fb:f1:68:0f:e1:52:c5: c1:44:f3:8f:77:4e:f3:f7:53:77:af:d8:28:40:c1:10:f0:ab: ce:32:9c:dc:f4:5e:8d:b5:db:2e:18:55:6a:b4:75:e5:12:8e: 83:06:96:31:63:23:b6:96:65:eb:04:9f:1c:a0:b8:25:c0:4f: bb:64:2b:7d:72:62:7c:95:41:4c:91:b7:a4:33:5c:71:0f:c5: 39:30:4a:7a:de:8f:82:df:76:b9:ae:0f:dc:6b:dd:4d:84:75: d4:7c:f7:3a:4b:52:c4:ba:eb:54:cd:8a:f2:51:e7:3a:32:8b: 4c:3e:37:37:2a:75:6c:2b:be:a1:6c:55:e3:8c:58:9a:0c:55: 5c:5f:75:4b:fd:da:83:7b:c5:98:b1:c2:dc:f8:71:3f:c7:37: 7b:f7:ae:a8:61:d1:96:65:0a:e1:01:89:fb:54:65:2c:e8:53: df:f5:a5:3f:af:d8:ac:a9:e5:b9:6a:b8:65:93:25:34:d8:19: 26:13:65:5f:a4:d0:43:1d:7b:6e:53:c1:99:38:db:24:f1:f8: b7:fb:b0:16 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUVTnif8flGIv31mG5CBwOs1ZzGBwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M2RUNDNDYyMEMzMzI5OEJBQUVGMTcwOUFENkQwNTk1 Q0QyNTY1QzAeFw0yNjEwMTEwNzU4MjZaFw0yNjEwMTIxMTIwMjZaMDMxMTAvBgNV BAMTKEVEMDc5MTZGNDlCMzNCOTNDMjA5RUY5REU5QzA2REE5MTBDNkI5MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqF0PjnAliQAcYZmzWT4cIjunJ Z3WkKlwb+ou/VmdX9vIoNrF90d7h6t19+ny3qAFLYpa07ApdziNOr3ZJ8B8V9F1c pJMheuOLMb78IZ99ahVrXYuP8mM/CqAJawNwb050Nv9hwlVwdsiJ2rwzKzS8Rk34 BN/AnA53GDfAE0gM38JMx8m89+SDHvL6M6PP2Ka+IGa4J0+VgFdtLiVjZcsWdvZL sojL89XCn9cBbwRfDHqwJwPxmRQQPASaV0KUehcZK3AxaAcMVr2lwGhCfWRuDECd YAGq4nnI6Yf8LU7ufLsDqEQ87389/iwgb6I1XaZWWTC45ER5k+UjDZfR2Q4HAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQU7QeRb0mzO5PCCe+d6cBtqRDGuScwHwYDVR0j BBgwFoAUzG7MRiDDMpi6rvFwmtbQWVzSVlwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1 NjRhLzMvQ0M2RUNDNDYyMEMzMzI5OEJBQUVGMTcwOUFENkQwNTk1Q0QyNTY1Qy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0NDNkVDQzQ2MjBDMzMy OThCQUFFRjE3MDlBRDZEMDU5NUNEMjU2NUMuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1NjRh LzMvQ0M2RUNDNDYyMEMzMzI5OEJBQUVGMTcwOUFENkQwNTk1Q0QyNTY1Qy5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBABYv8hcB6k4MBAIIpKIjnEqi6NP5evxNu1pmdOA9zGh/xudBT21rGS5L 6xFrxTMx+/FoD+FSxcFE8493TvP3U3ev2ChAwRDwq84ynNz0Xo212y4YVWq0deUS joMGljFjI7aWZesEnxyguCXAT7tkK31yYnyVQUyRt6QzXHEPxTkwSnrej4Lfdrmu D9xr3U2EddR89zpLUsS661TNivJR5zoyi0w+NzcqdWwrvqFsVeOMWJoMVVxfdUv9 2oN7xZixwtz4cT/HN3v3rqhh0ZZlCuEBiftUZSzoU9/1pT+v2Kyp5blquGWTJTTY GSYTZV+k0EMde25TwZk42yTx+Lf7sBY= -----END CERTIFICATE-----Generated at Mon Oct 12 00:04:58 2026 by rpki-client