$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft File: CECA73092344CA9B6F74C1A83D6C747962186C47.mft (raw, json) Hash identifier: KcQyxJ5K89m0FmOOBemd9tZF2UqJmKLbvhZbnr2FjCE= Subject key identifier: 54:2B:8E:D6:7D:F5:90:BF:8A:3F:AA:20:4C:A6:69:05:03:F6:57:19 Authority key identifier: CE:CA:73:09:23:44:CA:9B:6F:74:C1:A8:3D:6C:74:79:62:18:6C:47 Certificate issuer: /CN=CECA73092344CA9B6F74C1A83D6C747962186C47 Certificate serial: 1E8E2CAE7538CAA8D74EADAC4BF5A8748786297C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/CECA73092344CA9B6F74C1A83D6C747962186C47.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft Manifest number: 61 Signing time: Wed 25 Mar 2026 12:38:19 +0000 Manifest this update: Wed 25 Mar 2026 12:33:19 +0000 Manifest next update: Thu 26 Mar 2026 15:14:19 +0000 Files and hashes: 1: CECA73092344CA9B6F74C1A83D6C747962186C47.crl (hash: wlRQc5xwL/+tthjn1avVQERM6igfo0BAu1vwYUfrVcU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.crl rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/CECA73092344CA9B6F74C1A83D6C747962186C47.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:14:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:8e:2c:ae:75:38:ca:a8:d7:4e:ad:ac:4b:f5:a8:74:87:86:29:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CECA73092344CA9B6F74C1A83D6C747962186C47 Validity Not Before: Mar 25 12:33:19 2026 GMT Not After : Mar 26 15:14:19 2026 GMT Subject: CN=542B8ED67DF590BF8A3FAA204CA6690503F65719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:96:6e:3d:ae:f2:73:24:3c:6f:64:9c:2f:7c: 01:68:66:8b:99:fd:ad:61:d0:c7:ba:21:f6:a4:c9: a1:03:e3:63:f2:0a:1e:ad:7d:ea:f2:13:90:b4:01: 5f:27:21:63:1f:de:a3:74:b2:a5:24:6e:30:27:27: 48:43:a8:a8:20:e0:f0:ec:10:83:52:6a:88:46:28: 1a:7d:53:f4:c8:6a:39:1c:a0:eb:93:0d:63:08:37: c3:be:8d:c5:d9:96:61:7f:c0:2e:3f:b3:fa:9e:0b: 0c:ab:cd:04:ab:4a:c8:c3:9c:4f:28:a9:5c:89:2b: 9c:79:90:91:3f:1e:6d:7a:7a:b7:97:36:4a:e1:4b: cd:7b:6e:25:73:3c:c1:82:70:fb:3c:12:42:db:29: ad:c6:17:b8:9d:85:3d:f3:34:07:d6:e7:0f:eb:d8: 49:8e:f4:1f:02:8a:aa:0e:d7:f5:02:b2:2e:04:84: 40:dd:b6:c7:f0:30:77:5c:5a:9a:6c:cd:60:75:35: 2c:09:43:b5:4c:e9:6f:ba:13:79:35:2b:fd:d8:39: 3c:f6:ee:1e:d4:b5:41:2c:fc:6a:1b:0d:0c:d9:c5: ca:21:c4:80:87:85:17:d3:c8:28:cf:8a:31:a1:f6: dc:a0:b1:d4:2c:cd:47:41:7a:f4:93:11:21:de:a9: 69:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:2B:8E:D6:7D:F5:90:BF:8A:3F:AA:20:4C:A6:69:05:03:F6:57:19 X509v3 Authority Key Identifier: keyid:CE:CA:73:09:23:44:CA:9B:6F:74:C1:A8:3D:6C:74:79:62:18:6C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/CECA73092344CA9B6F74C1A83D6C747962186C47.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:ca:f7:78:1d:66:da:7e:63:3f:58:92:48:99:ce:00:e7:1a: 14:48:ee:d5:ba:3b:a3:15:63:05:84:3b:cf:85:d5:d8:4d:29: 8f:ca:98:20:6e:c4:32:5b:b4:17:28:7d:e0:5e:e9:d7:c6:9a: 28:cf:76:e0:e4:26:85:fa:2c:4d:ee:fc:9e:a2:fa:0f:33:2f: 20:44:3b:f8:b6:23:3d:74:ef:67:25:a3:8e:33:a3:26:e1:bd: b7:cd:ed:e6:73:33:d5:e9:62:7c:82:71:99:c3:34:ef:c2:72: 40:01:8a:20:11:df:25:1d:91:8a:f2:16:37:6b:72:a9:d2:d6: 82:2b:dd:ea:9a:1e:71:b9:de:d5:0f:af:76:cb:79:05:20:00: 80:96:18:60:9a:9a:d2:8c:7e:5f:8a:6f:ac:4d:c4:61:1f:f7: cf:9b:aa:0c:52:b2:95:c5:8c:70:d6:e9:5e:a2:87:03:29:5f: 1e:f7:c1:67:15:d5:ae:12:09:e6:c6:39:7d:4e:41:5e:7b:b4: 13:ce:43:d4:6d:08:9f:b1:31:4c:6e:59:dc:62:c3:60:c5:3f: bc:64:6e:48:53:47:fc:ee:62:bc:b0:d1:99:75:4f:15:e7:f3: f9:6b:e3:69:c3:3b:7e:a4:0f:a1:8f:73:1a:51:93:b5:45:80: d6:63:96:09 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUHo4srnU4yqjXTq2sS/WodIeGKXwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDQTczMDkyMzQ0Q0E5QjZGNzRDMUE4M0Q2Qzc0Nzk2 MjE4NkM0NzAeFw0yNjAzMjUxMjMzMTlaFw0yNjAzMjYxNTE0MTlaMDMxMTAvBgNV BAMTKDU0MkI4RUQ2N0RGNTkwQkY4QTNGQUEyMDRDQTY2OTA1MDNGNjU3MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYlm49rvJzJDxvZJwvfAFoZouZ /a1h0Me6IfakyaED42PyCh6tferyE5C0AV8nIWMf3qN0sqUkbjAnJ0hDqKgg4PDs EINSaohGKBp9U/TIajkcoOuTDWMIN8O+jcXZlmF/wC4/s/qeCwyrzQSrSsjDnE8o qVyJK5x5kJE/Hm16ereXNkrhS817biVzPMGCcPs8EkLbKa3GF7idhT3zNAfW5w/r 2EmO9B8CiqoO1/UCsi4EhEDdtsfwMHdcWppszWB1NSwJQ7VM6W+6E3k1K/3YOTz2 7h7UtUEs/GobDQzZxcohxICHhRfTyCjPijGh9tygsdQszUdBevSTESHeqWm5AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUVCuO1n31kL+KP6ogTKZpBQP2VxkwHwYDVR0j BBgwFoAUzspzCSNEyptvdMGoPWx0eWIYbEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjI4NWJlNmYtNTExMS00YzNjLTgyNTQtZDJlNDE1NTEw Mjg0LzIvQ0VDQTczMDkyMzQ0Q0E5QjZGNzRDMUE4M0Q2Qzc0Nzk2MjE4NkM0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9DRUNBNzMwOTIzNDRDQTlCNkY3NEMxQTgz RDZDNzQ3OTYyMTg2QzQ3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzIyODViZTZmLTUxMTEtNGMzYy04MjU0LWQyZTQxNTUxMDI4NC8yL0NFQ0E3MzA5 MjM0NENBOUI2Rjc0QzFBODNENkM3NDc5NjIxODZDNDcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCcyvd4 HWbafmM/WJJImc4A5xoUSO7VujujFWMFhDvPhdXYTSmPypggbsQyW7QXKH3gXunX xpooz3bg5CaF+ixN7vyeovoPMy8gRDv4tiM9dO9nJaOOM6Mm4b23ze3mczPV6WJ8 gnGZwzTvwnJAAYogEd8lHZGK8hY3a3Kp0taCK93qmh5xud7VD692y3kFIACAlhhg mprSjH5fim+sTcRhH/fPm6oMUrKVxYxw1uleoocDKV8e98FnFdWuEgnmxjl9TkFe e7QTzkPUbQifsTFMblncYsNgxT+8ZG5IU0f87mK8sNGZdU8V5/P5a+Npwzt+pA+h j3MaUZO1RYDWY5YJ -----END CERTIFICATE-----Generated at Thu Mar 26 08:56:10 2026 by rpki-client