$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft File: B729F0C7BF295C6844FD328B324A1ED8598032F9.mft (raw, json) Hash identifier: o2YVNL6x+1M2xHqkTBIcNarHIYpS17JXwYma7vAZFqk= Subject key identifier: 71:62:D6:EE:B2:85:F3:35:A1:71:4D:AB:80:1B:B9:45:9D:EB:2A:76 Authority key identifier: B7:29:F0:C7:BF:29:5C:68:44:FD:32:8B:32:4A:1E:D8:59:80:32:F9 Certificate issuer: /CN=B729F0C7BF295C6844FD328B324A1ED8598032F9 Certificate serial: 5B86DE57711251794C6F85D6F7BA1EA16F6112DF Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft Manifest number: 017C Signing time: Mon 13 Apr 2026 13:26:01 +0000 Manifest this update: Mon 13 Apr 2026 13:21:01 +0000 Manifest next update: Tue 14 Apr 2026 13:32:01 +0000 Files and hashes: 1: B729F0C7BF295C6844FD328B324A1ED8598032F9.crl (hash: 2zj9bGCk7Z2cs1myZ7P+AaJuAXUJ+manUZew7D48exQ=) 2: 326130353a646663313a383236303a3a2f34342d3438203d3e203331383938.roa (hash: NyB2Q3nplRrrVqQaiZpQzKBuInw96biJRlaf2Wfrra4=) 3: 326130353a646663313a383230303a3a2f34302d3438203d3e20323136343532.roa (hash: tbMEmJLRx8p/XooueSgD+2D8XMkhb8zPBfDKGLGOZ18=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.crl rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 14 Apr 2026 01:11:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:86:de:57:71:12:51:79:4c:6f:85:d6:f7:ba:1e:a1:6f:61:12:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B729F0C7BF295C6844FD328B324A1ED8598032F9 Validity Not Before: Apr 13 13:21:01 2026 GMT Not After : Apr 14 13:32:01 2026 GMT Subject: CN=7162D6EEB285F335A1714DAB801BB9459DEB2A76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0d:1c:2e:7f:7b:99:31:76:fb:bd:e7:24:cd: 1e:58:3d:b5:34:12:f8:a0:ff:04:9b:23:e8:d6:ba: 70:67:55:0d:c5:d3:27:cd:9e:7c:32:de:e5:4a:d9: 91:2a:6b:a3:9b:44:78:bf:0f:60:64:13:3c:8c:88: e7:34:57:10:5c:08:55:a8:b7:fd:9d:d8:b3:b4:6f: 65:c3:a9:48:cc:57:4a:48:e0:c7:fd:07:01:b4:89: ee:3a:37:f8:a0:bd:8c:de:63:32:63:d8:7d:ea:ec: a7:64:d4:30:75:a5:42:11:3b:4e:90:5c:2f:79:f7: 4f:16:eb:e8:6b:1c:e8:d8:49:c4:1d:15:56:a4:97: 1f:bd:5c:d9:16:75:2d:df:39:9b:d7:95:f4:21:e0: 8f:5f:bf:64:ff:d7:1d:9c:8f:9a:3e:c6:93:99:3d: 21:f4:b8:7e:6c:3d:53:58:56:3f:17:a6:ed:f8:18: d5:1c:bf:6c:5c:43:04:17:bb:0a:30:b6:24:bf:8f: b4:fb:66:a3:a9:30:bb:56:78:b5:03:56:a8:8c:b2: d1:6f:a8:ba:bf:f0:ea:c7:2b:22:9c:7f:5d:1f:f0: 38:61:18:a7:78:9e:7a:28:27:0c:23:18:86:dd:bf: ca:53:33:0b:2e:0f:16:7b:bb:9a:33:62:39:34:9f: 45:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:62:D6:EE:B2:85:F3:35:A1:71:4D:AB:80:1B:B9:45:9D:EB:2A:76 X509v3 Authority Key Identifier: keyid:B7:29:F0:C7:BF:29:5C:68:44:FD:32:8B:32:4A:1E:D8:59:80:32:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:51:6d:24:e8:63:25:cf:99:55:80:b9:15:a5:78:c4:f2:67: ce:95:f0:06:94:e0:45:46:7e:e2:0e:98:21:17:cc:81:ba:c8: e4:72:93:e6:22:ad:4c:a8:36:1f:70:9c:75:8c:cd:a4:01:7d: d7:66:af:b4:27:d7:af:02:a8:ee:65:9c:ad:c5:ca:3f:c6:39: fc:c7:5d:f0:fd:ff:af:33:a0:a3:13:c4:ec:62:bf:06:e3:40: 74:99:76:81:40:02:2c:ba:f1:8f:ef:44:a2:c7:15:56:ce:92: 4e:5c:a3:da:37:84:77:82:95:c9:f6:ed:a2:af:ba:c7:be:fb: b2:bd:85:de:88:05:46:0a:74:4b:c3:2b:db:36:0f:94:a9:cf: a4:c1:61:b3:4a:c9:f1:0f:e9:00:c7:ce:06:ee:f8:e0:c2:20: 71:04:98:4b:46:72:d1:29:c7:58:b2:eb:82:7b:9b:cb:25:c4: 95:46:fa:ec:67:25:2b:4f:ad:2b:ea:6b:55:a8:41:e2:fc:dc: b2:ad:53:b8:6d:86:98:bb:83:90:5f:01:8d:9f:2b:28:55:51: 71:f3:b5:74:90:b0:37:e9:48:80:9f:af:5f:b8:b6:99:ae:fd: 64:40:0d:37:b0:7a:77:87:71:ee:ee:a1:d6:8c:cf:0c:8b:e6: b2:0b:99:52 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUW4beV3ESUXlMb4XW97oeoW9hEt8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcyOUYwQzdCRjI5NUM2ODQ0RkQzMjhCMzI0QTFFRDg1 OTgwMzJGOTAeFw0yNjA0MTMxMzIxMDFaFw0yNjA0MTQxMzMyMDFaMDMxMTAvBgNV BAMTKDcxNjJENkVFQjI4NUYzMzVBMTcxNERBQjgwMUJCOTQ1OURFQjJBNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKDRwuf3uZMXb7veckzR5YPbU0 Evig/wSbI+jWunBnVQ3F0yfNnnwy3uVK2ZEqa6ObRHi/D2BkEzyMiOc0VxBcCFWo t/2d2LO0b2XDqUjMV0pI4Mf9BwG0ie46N/igvYzeYzJj2H3q7Kdk1DB1pUIRO06Q XC95908W6+hrHOjYScQdFVaklx+9XNkWdS3fOZvXlfQh4I9fv2T/1x2cj5o+xpOZ PSH0uH5sPVNYVj8Xpu34GNUcv2xcQwQXuwowtiS/j7T7ZqOpMLtWeLUDVqiMstFv qLq/8OrHKyKcf10f8DhhGKd4nnooJwwjGIbdv8pTMwsuDxZ7u5ozYjk0n0WDAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUcWLW7rKF8zWhcU2rgBu5RZ3rKnYwHwYDVR0j BBgwFoAUtynwx78pXGhE/TKLMkoe2FmAMvkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNk OGVmLzMvQjcyOUYwQzdCRjI5NUM2ODQ0RkQzMjhCMzI0QTFFRDg1OTgwMzJGOS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0I3MjlGMEM3QkYyOTVD Njg0NEZEMzI4QjMyNEExRUQ4NTk4MDMyRjkuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNkOGVm LzMvQjcyOUYwQzdCRjI5NUM2ODQ0RkQzMjhCMzI0QTFFRDg1OTgwMzJGOS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAEhRbSToYyXPmVWAuRWleMTyZ86V8AaU4EVGfuIOmCEXzIG6yORyk+Yi rUyoNh9wnHWMzaQBfddmr7Qn168CqO5lnK3Fyj/GOfzHXfD9/68zoKMTxOxivwbj QHSZdoFAAiy68Y/vRKLHFVbOkk5co9o3hHeClcn27aKvuse++7K9hd6IBUYKdEvD K9s2D5Spz6TBYbNKyfEP6QDHzgbu+ODCIHEEmEtGctEpx1iy64J7m8slxJVG+uxn JStPrSvqa1WoQeL83LKtU7hthpi7g5BfAY2fKyhVUXHztXSQsDfpSICfr1+4tpmu /WRADTeweneHce7uodaMzwyL5rILmVI= -----END CERTIFICATE-----Generated at Mon Apr 13 18:23:04 2026 by rpki-client