
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft
File: B729F0C7BF295C6844FD328B324A1ED8598032F9.mft (raw, json)
Hash identifier: XhClvgroZUThttIcbmX3xcuCgnZAmjH3U/EPoE1nX60=
Subject key identifier: 53:9A:C2:44:5A:30:5C:DA:90:43:62:67:DA:5B:DC:D7:F7:B1:FA:06
Authority key identifier: B7:29:F0:C7:BF:29:5C:68:44:FD:32:8B:32:4A:1E:D8:59:80:32:F9
Certificate issuer: /CN=B729F0C7BF295C6844FD328B324A1ED8598032F9
Certificate serial: 08DA829B43F04A3EA4CA81BF5696B02399A3AA96
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft
Manifest number: 01C4
Signing time: Fri 05 Jun 2026 19:42:17 +0000
Manifest this update: Fri 05 Jun 2026 19:37:17 +0000
Manifest next update: Sat 06 Jun 2026 22:39:17 +0000
Files and hashes: 1: 326130353a646663313a383230303a3a2f34302d3438203d3e20323136343532.roa (hash: YjEWO425Fp9BmEsaR7rNNKxgXNYuMwOnITmnIsrwlT4=)
2: 326130353a646663313a383236303a3a2f34342d3438203d3e203331383938.roa (hash: 0vTIJjguwD6ZK/UD8aNqhNS77f9gmxngYOuYo0s0sec=)
3: B729F0C7BF295C6844FD328B324A1ED8598032F9.crl (hash: VR/Hyy6M9t8QH9YtXGLL9f+fNN5MbYvZGbUwKkiEo40=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.crl
rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 22:39:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:da:82:9b:43:f0:4a:3e:a4:ca:81:bf:56:96:b0:23:99:a3:aa:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B729F0C7BF295C6844FD328B324A1ED8598032F9
Validity
Not Before: Jun 5 19:37:17 2026 GMT
Not After : Jun 6 22:39:17 2026 GMT
Subject: CN=539AC2445A305CDA90436267DA5BDCD7F7B1FA06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:50:44:20:36:7b:d7:cf:3d:4e:dc:2a:d5:4d:
b1:cb:bd:6f:47:76:91:69:7f:10:1d:ad:5b:fb:fd:
1c:03:e7:ef:2a:51:5c:93:36:b9:3d:33:01:7b:4b:
49:01:8b:56:1e:54:d1:0c:82:05:cc:46:1b:77:6b:
b2:75:cc:46:3b:98:ce:1a:ff:e9:2a:5f:54:d5:7f:
fd:4a:d0:78:16:ef:90:a4:b6:e2:ff:4b:51:eb:7a:
85:c4:a8:ed:8f:ab:1d:ac:66:44:6c:16:bf:21:a8:
40:57:4b:fc:64:0e:3c:51:ce:8e:96:d0:44:8f:2c:
64:2c:bf:a1:10:99:52:82:61:db:8f:29:4b:c5:20:
4d:12:17:92:d3:78:b0:0d:81:a2:fe:74:6c:74:7a:
eb:f4:79:c0:a0:bd:2e:b9:24:11:59:b7:c3:b5:c0:
1a:dc:54:fe:ba:86:29:40:55:03:a5:32:20:6b:80:
0f:dd:fa:73:24:64:3f:e3:ee:29:86:c7:c3:44:d5:
1d:4e:b6:01:8b:8a:63:ac:ac:2f:77:d0:93:8a:c6:
18:03:be:a2:41:88:96:17:2d:9f:06:a8:3e:ca:de:
ce:9e:6e:2e:7c:ed:eb:2d:c9:5d:5a:f8:f1:8a:94:
78:c2:31:a2:6a:b0:30:e5:03:9e:cc:fe:10:9a:7b:
dd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:9A:C2:44:5A:30:5C:DA:90:43:62:67:DA:5B:DC:D7:F7:B1:FA:06
X509v3 Authority Key Identifier:
keyid:B7:29:F0:C7:BF:29:5C:68:44:FD:32:8B:32:4A:1E:D8:59:80:32:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:1c:fc:3d:e3:24:19:b4:cb:fc:33:5a:54:8d:b1:42:02:8d:
73:af:ba:5a:5a:07:a7:9c:89:7f:7d:c4:02:bc:0a:52:00:bb:
c8:27:66:9e:16:1e:2c:5f:f7:9b:05:21:83:7f:0f:de:ad:1b:
5f:0d:92:3a:46:85:e3:91:28:b8:a6:1a:82:70:37:cf:c0:c6:
5c:78:de:d7:9b:60:a4:a4:1e:5d:4e:d9:1a:d6:a1:76:eb:eb:
08:6f:65:6a:ed:57:63:dd:fd:b4:6f:31:71:34:26:bd:81:e6:
2e:73:e5:7a:45:bb:05:dd:95:ea:09:3b:e0:63:2a:fc:ec:ef:
60:98:a9:e6:82:a5:fc:db:52:b1:bb:a0:af:ea:3e:9a:c5:7c:
e7:27:18:76:4c:af:38:ce:6b:f7:75:96:8d:d2:d0:d7:0f:c7:
86:0f:71:82:0a:96:47:ef:cb:fa:72:13:b1:c8:d1:f2:ea:87:
8b:e1:1d:d1:6a:eb:d5:d5:40:a7:ae:e2:8d:dc:cc:08:b3:4e:
92:f4:44:7d:8a:8c:4b:19:37:cc:72:0c:ca:43:8e:5f:cc:39:
d1:e1:60:7c:ce:8e:bb:0d:bd:01:21:5f:5b:c4:b0:f7:ba:8f:
c0:4c:64:5b:91:76:b7:42:68:7b:57:91:f0:14:2e:80:74:ea:
7c:4b:38:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:56:17 2026 by rpki-client