$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft File: CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft (raw, json) Hash identifier: /X6gX6SGAwvdibcMPjxJwssSP04qLk/nRpdCykay+VQ= Subject key identifier: 8F:16:44:94:E0:A4:04:67:EA:B6:93:04:2F:36:00:78:4C:31:61:02 Authority key identifier: CC:6E:CC:46:20:C3:32:98:BA:AE:F1:70:9A:D6:D0:59:5C:D2:56:5C Certificate issuer: /CN=CC6ECC4620C33298BAAEF1709AD6D0595CD2565C Certificate serial: 693408C3422E1C2A8A5EC906E44341CF10A8BDF1 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft Manifest number: 014A Signing time: Fri 06 Mar 2026 06:16:26 +0000 Manifest this update: Fri 06 Mar 2026 06:11:26 +0000 Manifest next update: Sat 07 Mar 2026 07:11:26 +0000 Files and hashes: 1: 326130353a646663313a393630303a3a2f34302d3430203d3e20323136343535.roa (hash: EPbQn4nTyAleGN23OETUsYn80EOl1eLpliPnGLTdXDk=) 2: 326130353a646663313a383530303a3a2f34302d3430203d3e20323136343535.roa (hash: oi3cTY9RPbSSa44GzFqVMPw4EmmK/P6XuRB3HCSy6ZU=) 3: CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl (hash: uN/94unjqa9kPPoHSCDR1KnSfMhZKDqvhZRq3wfBIcg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Mar 2026 07:11:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:34:08:c3:42:2e:1c:2a:8a:5e:c9:06:e4:43:41:cf:10:a8:bd:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC6ECC4620C33298BAAEF1709AD6D0595CD2565C Validity Not Before: Mar 6 06:11:26 2026 GMT Not After : Mar 7 07:11:26 2026 GMT Subject: CN=8F164494E0A40467EAB693042F3600784C316102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:55:5a:f7:fd:63:28:9a:2f:25:ff:a1:c0:91: d7:e9:7c:6c:3d:bc:d2:4c:1a:d2:ff:27:b7:ae:21: f4:0c:8c:ae:57:d2:0b:2b:25:21:2d:87:00:57:72: 90:62:d3:61:6a:45:c1:ab:e1:1b:12:1e:59:5e:26: 2d:24:68:b5:bc:b0:5c:78:be:e1:e5:6b:b9:45:17: 9c:56:e7:f8:1e:e8:d6:3f:38:b6:ce:3e:93:ba:d8: ae:06:d7:94:41:1f:59:ec:8f:98:a3:7c:38:d9:02: 55:70:e6:2d:c3:df:00:a1:ef:3a:99:ac:ad:00:49: 6d:b4:b2:e9:9e:e8:28:66:8d:e2:80:57:4b:28:9f: 1b:21:f6:e0:31:5e:34:12:dc:d2:0e:55:cb:ef:0f: d9:d1:72:24:ae:7b:d3:9e:3c:97:28:46:27:ab:58: 2b:a0:4b:03:16:8d:98:01:89:5b:01:d6:8f:90:cc: ca:40:3c:53:60:75:c3:70:06:37:36:4f:f5:7d:b8: 38:ff:57:0a:f1:f9:cd:c4:68:02:50:32:8d:dd:49: 1a:a3:e1:ff:71:ad:1b:7d:0d:aa:d6:f8:66:2c:62: 41:06:e1:7b:93:f0:f6:fb:84:9b:19:2e:e1:3e:cc: ca:9b:2e:e5:16:e0:fd:df:2b:ad:ed:63:fc:4f:fc: c6:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:16:44:94:E0:A4:04:67:EA:B6:93:04:2F:36:00:78:4C:31:61:02 X509v3 Authority Key Identifier: keyid:CC:6E:CC:46:20:C3:32:98:BA:AE:F1:70:9A:D6:D0:59:5C:D2:56:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:a3:b4:68:4c:43:f5:cc:66:cb:1f:24:ec:34:e5:73:31:3c: 54:6e:1a:9e:1c:25:5d:b3:fb:0e:38:c4:35:1d:41:0f:63:33: a0:8f:4f:e8:88:56:c3:9e:4e:c2:fe:cf:5a:96:8b:3c:48:a5: a5:8e:f0:4b:cc:e5:35:3a:b8:59:f2:f4:6b:de:96:b2:0e:e3: 75:bc:dc:e4:7a:1b:7f:1c:08:c9:30:64:b2:cf:4f:13:ff:fc: aa:6a:1b:9e:71:5d:55:73:16:15:59:f7:d0:ef:ee:f0:30:74: 84:98:8a:ea:e7:13:30:45:74:fd:bb:fe:e9:2e:81:32:45:c8: 17:0a:77:14:f2:f4:9e:ac:31:da:c1:ed:0a:ec:d2:3b:96:f6: 5c:4c:1f:4d:c3:d5:aa:2d:db:49:1d:a3:e7:3e:bc:34:f8:94: e5:22:3d:40:1b:5e:d3:f3:49:81:74:74:ab:e1:37:70:d1:88: ce:bd:ef:33:f8:45:9c:5d:8c:d5:7b:a1:d1:b5:3e:44:23:dd: 47:25:b1:77:b7:55:f1:97:ad:44:7e:1f:36:18:59:68:86:8c: 6c:53:10:e4:b6:c9:7a:2a:a4:63:8f:7b:14:0d:b7:f9:29:7d: 93:66:42:9c:4b:1b:2a:bb:02:d3:12:84:1b:ec:66:ec:4e:60: c9:fa:81:dd -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUaTQIw0IuHCqKXskG5ENBzxCovfEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M2RUNDNDYyMEMzMzI5OEJBQUVGMTcwOUFENkQwNTk1 Q0QyNTY1QzAeFw0yNjAzMDYwNjExMjZaFw0yNjAzMDcwNzExMjZaMDMxMTAvBgNV BAMTKDhGMTY0NDk0RTBBNDA0NjdFQUI2OTMwNDJGMzYwMDc4NEMzMTYxMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxVVr3/WMomi8l/6HAkdfpfGw9 vNJMGtL/J7euIfQMjK5X0gsrJSEthwBXcpBi02FqRcGr4RsSHlleJi0kaLW8sFx4 vuHla7lFF5xW5/ge6NY/OLbOPpO62K4G15RBH1nsj5ijfDjZAlVw5i3D3wCh7zqZ rK0ASW20sume6ChmjeKAV0sonxsh9uAxXjQS3NIOVcvvD9nRciSue9OePJcoRier WCugSwMWjZgBiVsB1o+QzMpAPFNgdcNwBjc2T/V9uDj/Vwrx+c3EaAJQMo3dSRqj 4f9xrRt9DarW+GYsYkEG4XuT8Pb7hJsZLuE+zMqbLuUW4P3fK63tY/xP/MabAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUjxZElOCkBGfqtpMELzYAeEwxYQIwHwYDVR0j BBgwFoAUzG7MRiDDMpi6rvFwmtbQWVzSVlwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1 NjRhLzMvQ0M2RUNDNDYyMEMzMzI5OEJBQUVGMTcwOUFENkQwNTk1Q0QyNTY1Qy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0NDNkVDQzQ2MjBDMzMy OThCQUFFRjE3MDlBRDZEMDU5NUNEMjU2NUMuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1NjRh LzMvQ0M2RUNDNDYyMEMzMzI5OEJBQUVGMTcwOUFENkQwNTk1Q0QyNTY1Qy5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAAWjtGhMQ/XMZssfJOw05XMxPFRuGp4cJV2z+w44xDUdQQ9jM6CPT+iI VsOeTsL+z1qWizxIpaWO8EvM5TU6uFny9GvelrIO43W83OR6G38cCMkwZLLPTxP/ /KpqG55xXVVzFhVZ99Dv7vAwdISYiurnEzBFdP27/ukugTJFyBcKdxTy9J6sMdrB 7Qrs0juW9lxMH03D1aot20kdo+c+vDT4lOUiPUAbXtPzSYF0dKvhN3DRiM697zP4 RZxdjNV7odG1PkQj3UclsXe3VfGXrUR+HzYYWWiGjGxTEOS2yXoqpGOPexQNt/kp fZNmQpxLGyq7AtMShBvsZuxOYMn6gd0= -----END CERTIFICATE-----Generated at Fri Mar 6 17:56:48 2026 by rpki-client