$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft File: CECA73092344CA9B6F74C1A83D6C747962186C47.mft (raw, json) Hash identifier: w8mwRoo1v7hXrjWU+gPSVv3O5YvVZOYXt+UCN3cK8R0= Subject key identifier: 8A:6F:9C:E5:FA:79:9E:33:1D:CE:C0:33:9C:A1:1F:B4:7E:51:28:A8 Authority key identifier: CE:CA:73:09:23:44:CA:9B:6F:74:C1:A8:3D:6C:74:79:62:18:6C:47 Certificate issuer: /CN=CECA73092344CA9B6F74C1A83D6C747962186C47 Certificate serial: 55E6F46D5D83834BAC1DD800CA01935DD86F2204 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/CECA73092344CA9B6F74C1A83D6C747962186C47.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft Manifest number: 0101 Signing time: Thu 23 Jul 2026 23:20:11 +0000 Manifest this update: Thu 23 Jul 2026 23:15:11 +0000 Manifest next update: Sat 25 Jul 2026 01:48:11 +0000 Files and hashes: 1: CECA73092344CA9B6F74C1A83D6C747962186C47.crl (hash: VAHNqDDHDxRcRIZH5jw1lW0efQuo+Ygs3r7V1k1togw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.crl rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/CECA73092344CA9B6F74C1A83D6C747962186C47.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 17:14:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:e6:f4:6d:5d:83:83:4b:ac:1d:d8:00:ca:01:93:5d:d8:6f:22:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CECA73092344CA9B6F74C1A83D6C747962186C47 Validity Not Before: Jul 23 23:15:11 2026 GMT Not After : Jul 25 01:48:11 2026 GMT Subject: CN=8A6F9CE5FA799E331DCEC0339CA11FB47E5128A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:23:f2:d1:17:0e:6d:c3:b6:7b:e7:88:c1:52: 4c:6a:c6:36:65:74:40:15:a6:81:d1:0e:ef:44:e9: 65:05:32:90:eb:09:95:0d:cf:60:d7:d6:6d:b6:b7: 60:e8:a6:47:17:fa:88:e9:73:22:63:09:b9:d6:9b: 94:0a:16:16:09:8d:ab:f7:ca:76:cd:9b:6d:19:65: 2c:b4:90:04:35:fc:1c:3f:9a:8f:ba:b3:1c:ca:ac: b6:60:e6:89:b9:4b:f4:26:dd:6a:e6:1d:91:af:e1: c8:7c:2e:e0:42:21:37:d9:87:2f:0f:bd:0d:49:33: d4:d4:f6:3b:e8:90:d7:e7:df:9f:bc:0b:39:73:b5: f0:45:9d:ac:fe:69:46:29:c8:c4:1d:16:e6:b6:c0: f6:8e:d7:64:23:d0:f0:a9:58:3b:a7:70:c2:66:06: 67:c4:0d:77:27:a9:a9:12:34:27:e7:94:72:dc:d2: c0:9e:0c:6c:29:69:c0:b9:a0:2b:30:e1:be:da:43: f5:5e:7b:56:39:14:69:a1:e2:53:3a:67:93:6d:a4: 4a:1f:38:b5:31:7c:84:57:e7:e4:43:d1:d5:bd:c9: ed:ed:c4:b7:37:ea:9f:0e:b8:8b:64:8d:14:9e:49: 1f:db:6f:3c:7e:03:44:09:31:b6:b7:8b:72:02:2a: 15:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:6F:9C:E5:FA:79:9E:33:1D:CE:C0:33:9C:A1:1F:B4:7E:51:28:A8 X509v3 Authority Key Identifier: keyid:CE:CA:73:09:23:44:CA:9B:6F:74:C1:A8:3D:6C:74:79:62:18:6C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/CECA73092344CA9B6F74C1A83D6C747962186C47.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:d6:df:71:b0:08:fb:62:b1:0b:9a:16:60:ab:75:c6:39:d9: c4:e8:1d:69:00:29:26:e6:a9:7f:61:f2:02:c6:bb:5d:52:f2: a2:69:08:50:06:78:ca:7d:a8:3b:b7:b1:52:85:f7:42:0a:79: 49:e8:df:69:0f:f1:61:a6:ee:39:31:f1:c3:18:3e:61:80:7e: be:87:b3:d7:46:fb:d2:66:61:15:b1:35:b8:b4:95:62:03:59: ab:d5:1f:a6:df:e1:6d:ea:16:53:b0:e8:c9:ac:51:0d:91:37: b8:f6:1a:12:00:e5:4b:9c:b0:8f:2d:37:31:77:b0:6f:5f:3e: fb:09:72:fa:19:53:e0:b3:7c:8f:18:78:74:7b:e7:b5:a8:37: a2:c1:e1:24:ee:fd:0c:da:7c:45:17:c7:78:b9:10:15:13:ee: 0c:9b:50:af:ce:71:a8:14:ac:93:7e:16:55:ca:7c:ad:07:cb: b7:3b:55:84:49:b1:54:ac:ce:b1:09:29:65:f9:2f:fa:40:23: 31:de:b6:fc:b0:71:63:d0:50:fc:e3:67:3e:fb:b5:95:a5:b5: f7:08:80:ba:4a:70:e4:16:fb:4e:b5:f5:b1:35:cd:64:73:e1: 01:96:ac:26:eb:87:28:49:bc:43:f5:0f:6e:bb:04:1a:89:3e: db:54:9a:fb -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUVeb0bV2Dg0usHdgAygGTXdhvIgQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDQTczMDkyMzQ0Q0E5QjZGNzRDMUE4M0Q2Qzc0Nzk2 MjE4NkM0NzAeFw0yNjA3MjMyMzE1MTFaFw0yNjA3MjUwMTQ4MTFaMDMxMTAvBgNV BAMTKDhBNkY5Q0U1RkE3OTlFMzMxRENFQzAzMzlDQTExRkI0N0U1MTI4QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtI/LRFw5tw7Z754jBUkxqxjZl dEAVpoHRDu9E6WUFMpDrCZUNz2DX1m22t2DopkcX+ojpcyJjCbnWm5QKFhYJjav3 ynbNm20ZZSy0kAQ1/Bw/mo+6sxzKrLZg5om5S/Qm3WrmHZGv4ch8LuBCITfZhy8P vQ1JM9TU9jvokNfn35+8CzlztfBFnaz+aUYpyMQdFua2wPaO12Qj0PCpWDuncMJm BmfEDXcnqakSNCfnlHLc0sCeDGwpacC5oCsw4b7aQ/Vee1Y5FGmh4lM6Z5NtpEof OLUxfIRX5+RD0dW9ye3txLc36p8OuItkjRSeSR/bbzx+A0QJMba3i3ICKhV/AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUim+c5fp5njMdzsAznKEftH5RKKgwHwYDVR0j BBgwFoAUzspzCSNEyptvdMGoPWx0eWIYbEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjI4NWJlNmYtNTExMS00YzNjLTgyNTQtZDJlNDE1NTEw Mjg0LzIvQ0VDQTczMDkyMzQ0Q0E5QjZGNzRDMUE4M0Q2Qzc0Nzk2MjE4NkM0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9DRUNBNzMwOTIzNDRDQTlCNkY3NEMxQTgz RDZDNzQ3OTYyMTg2QzQ3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzIyODViZTZmLTUxMTEtNGMzYy04MjU0LWQyZTQxNTUxMDI4NC8yL0NFQ0E3MzA5 MjM0NENBOUI2Rjc0QzFBODNENkM3NDc5NjIxODZDNDcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB/1t9x sAj7YrELmhZgq3XGOdnE6B1pACkm5ql/YfICxrtdUvKiaQhQBnjKfag7t7FShfdC CnlJ6N9pD/Fhpu45MfHDGD5hgH6+h7PXRvvSZmEVsTW4tJViA1mr1R+m3+Ft6hZT sOjJrFENkTe49hoSAOVLnLCPLTcxd7BvXz77CXL6GVPgs3yPGHh0e+e1qDeiweEk 7v0M2nxFF8d4uRAVE+4Mm1CvznGoFKyTfhZVynytB8u3O1WESbFUrM6xCSll+S/6 QCMx3rb8sHFj0FD842c++7WVpbX3CIC6SnDkFvtOtfWxNc1kc+EBlqwm64coSbxD 9Q9uuwQaiT7bVJr7 -----END CERTIFICATE-----Generated at Fri Jul 24 08:22:32 2026 by rpki-client