$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft File: B729F0C7BF295C6844FD328B324A1ED8598032F9.mft (raw, json) Hash identifier: CyR+Ud129MXACQc64Y7vP07htVnGM1YFCqhmG8fV1yo= Subject key identifier: E7:BD:BF:2A:1B:DD:9E:30:7B:2A:D6:5C:7A:70:A4:F4:78:B4:47:0A Authority key identifier: B7:29:F0:C7:BF:29:5C:68:44:FD:32:8B:32:4A:1E:D8:59:80:32:F9 Certificate issuer: /CN=B729F0C7BF295C6844FD328B324A1ED8598032F9 Certificate serial: 0B71C9CAD9F6DC33A50AEB7D97401FE7ACBA113E Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft Manifest number: 023D Signing time: Fri 04 Sep 2026 09:14:34 +0000 Manifest this update: Fri 04 Sep 2026 09:09:34 +0000 Manifest next update: Sat 05 Sep 2026 11:31:34 +0000 Files and hashes: 1: B729F0C7BF295C6844FD328B324A1ED8598032F9.crl (hash: pOw8KSK1ltv1PZY78MvaZ7gk9KbIYCDZuELIugyqTvA=) 2: 326130353a646663313a383236303a3a2f34342d3438203d3e203331383938.roa (hash: 0vTIJjguwD6ZK/UD8aNqhNS77f9gmxngYOuYo0s0sec=) 3: 326130353a646663313a383230303a3a2f34302d3438203d3e20323136343532.roa (hash: YjEWO425Fp9BmEsaR7rNNKxgXNYuMwOnITmnIsrwlT4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.crl rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 11:31:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:71:c9:ca:d9:f6:dc:33:a5:0a:eb:7d:97:40:1f:e7:ac:ba:11:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B729F0C7BF295C6844FD328B324A1ED8598032F9 Validity Not Before: Sep 4 09:09:34 2026 GMT Not After : Sep 5 11:31:34 2026 GMT Subject: CN=E7BDBF2A1BDD9E307B2AD65C7A70A4F478B4470A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:db:58:79:73:37:7e:f0:8c:53:c4:11:a3:83: a4:97:02:eb:8b:1f:8c:df:a0:14:91:fe:22:79:32: 0c:37:ac:f2:b1:b5:49:76:40:98:d7:09:d5:69:79: 81:55:e0:bd:6d:ef:1b:1c:f0:4b:66:e4:b7:7a:61: b8:2f:3b:c9:0c:02:fc:14:4a:ab:65:0a:d5:f4:66: 8c:a6:89:b7:ac:e6:62:14:eb:0d:72:86:5c:58:9f: 28:5f:d3:ef:a6:21:f1:66:cb:45:4c:99:2d:57:31: 15:66:c4:3c:29:87:34:79:06:b1:58:26:84:cf:e9: 6f:1c:04:94:d6:48:7a:ed:36:42:c8:4a:a7:73:8a: a5:20:01:ed:fa:60:a8:bb:7d:76:5a:e7:bc:89:77: e7:1d:12:c7:ad:25:5f:0b:a6:34:81:94:1e:10:3f: 70:16:8e:e3:ac:e4:0b:c2:e2:be:2b:b7:ec:c9:da: 80:fb:73:14:66:db:7d:cb:e1:93:bb:5b:c0:22:12: e9:88:6b:15:00:17:d8:57:ec:36:68:3d:b0:cd:b3: ca:44:61:16:cf:8b:45:c0:dc:4a:5c:f8:2a:0e:b8: e0:f0:f0:17:3c:90:c3:0e:4c:57:38:86:6b:af:c3: 3d:0c:2f:e1:af:b4:da:03:94:7d:5a:8c:ef:69:35: 8b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:BD:BF:2A:1B:DD:9E:30:7B:2A:D6:5C:7A:70:A4:F4:78:B4:47:0A X509v3 Authority Key Identifier: keyid:B7:29:F0:C7:BF:29:5C:68:44:FD:32:8B:32:4A:1E:D8:59:80:32:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:6d:b3:7b:f6:e1:08:2f:7b:0a:a4:88:b0:a6:f8:dd:50:4c: 60:b1:bd:85:b4:9d:97:47:5d:fd:8b:d1:87:45:f0:50:de:c3: 1c:01:34:42:fb:1f:65:fd:fd:e3:64:0a:c7:3f:40:dc:08:aa: 2b:2b:86:5b:97:33:00:47:8f:84:a2:89:5c:d7:e7:da:f1:bf: 52:5c:5d:05:4e:84:c4:9c:89:09:09:0e:c7:a2:cb:fe:81:92: b9:a6:89:42:fb:08:cf:0e:56:bd:db:ac:6f:d4:4c:23:46:92: 81:c4:eb:85:d7:d8:15:87:21:24:b1:c4:58:a0:ea:d9:db:11: 86:6d:6e:85:54:bd:e5:68:b3:63:32:1a:25:a8:47:30:35:22: 36:a6:a4:4c:02:9e:55:3d:b9:1a:5b:e7:ed:f0:5b:7e:1d:30: 63:5c:4f:cf:6d:31:ee:35:cc:ff:6a:66:1e:e6:58:99:c8:e3: 95:a3:12:be:c1:d9:ed:53:0e:63:ef:9a:35:4a:75:0f:53:16: f9:14:32:40:a7:f6:0b:54:4e:16:5b:b3:38:04:7d:11:31:9f: b4:3c:3b:e2:18:cb:c8:3e:b5:0a:cc:2d:b3:7a:33:d6:d0:66: 60:18:82:14:b3:18:ae:88:4f:51:42:36:80:54:d1:d1:df:cb: ae:f6:3e:d4 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUC3HJytn23DOlCut9l0Af56y6ET4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcyOUYwQzdCRjI5NUM2ODQ0RkQzMjhCMzI0QTFFRDg1 OTgwMzJGOTAeFw0yNjA5MDQwOTA5MzRaFw0yNjA5MDUxMTMxMzRaMDMxMTAvBgNV BAMTKEU3QkRCRjJBMUJERDlFMzA3QjJBRDY1QzdBNzBBNEY0NzhCNDQ3MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv21h5czd+8IxTxBGjg6SXAuuL H4zfoBSR/iJ5Mgw3rPKxtUl2QJjXCdVpeYFV4L1t7xsc8Etm5Ld6YbgvO8kMAvwU SqtlCtX0Zoymibes5mIU6w1yhlxYnyhf0++mIfFmy0VMmS1XMRVmxDwphzR5BrFY JoTP6W8cBJTWSHrtNkLISqdziqUgAe36YKi7fXZa57yJd+cdEsetJV8LpjSBlB4Q P3AWjuOs5AvC4r4rt+zJ2oD7cxRm233L4ZO7W8AiEumIaxUAF9hX7DZoPbDNs8pE YRbPi0XA3Epc+CoOuODw8Bc8kMMOTFc4hmuvwz0ML+GvtNoDlH1ajO9pNYs5AgMB AAGjggJdMIICWTAdBgNVHQ4EFgQU572/KhvdnjB7KtZcenCk9Hi0RwowHwYDVR0j BBgwFoAUtynwx78pXGhE/TKLMkoe2FmAMvkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNk OGVmLzMvQjcyOUYwQzdCRjI5NUM2ODQ0RkQzMjhCMzI0QTFFRDg1OTgwMzJGOS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0I3MjlGMEM3QkYyOTVD Njg0NEZEMzI4QjMyNEExRUQ4NTk4MDMyRjkuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNkOGVm LzMvQjcyOUYwQzdCRjI5NUM2ODQ0RkQzMjhCMzI0QTFFRDg1OTgwMzJGOS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAMlts3v24QgvewqkiLCm+N1QTGCxvYW0nZdHXf2L0YdF8FDewxwBNEL7 H2X9/eNkCsc/QNwIqisrhluXMwBHj4SiiVzX59rxv1JcXQVOhMSciQkJDseiy/6B krmmiUL7CM8OVr3brG/UTCNGkoHE64XX2BWHISSxxFig6tnbEYZtboVUveVos2My GiWoRzA1IjampEwCnlU9uRpb5+3wW34dMGNcT89tMe41zP9qZh7mWJnI45WjEr7B 2e1TDmPvmjVKdQ9TFvkUMkCn9gtUThZbszgEfRExn7Q8O+IYy8g+tQrMLbN6M9bQ ZmAYghSzGK6IT1FCNoBU0dHfy672PtQ= -----END CERTIFICATE-----Generated at Fri Sep 4 23:25:24 2026 by rpki-client