$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft File: CECA73092344CA9B6F74C1A83D6C747962186C47.mft (raw, json) Hash identifier: hvzoZ7B+gx0Wjqa3uMq7Gw+AK2CyNhYtKq770bEcWeM= Subject key identifier: C1:BA:B6:17:DB:01:A2:11:50:40:37:25:33:8E:6C:2F:E7:85:B0:AF Authority key identifier: CE:CA:73:09:23:44:CA:9B:6F:74:C1:A8:3D:6C:74:79:62:18:6C:47 Certificate issuer: /CN=CECA73092344CA9B6F74C1A83D6C747962186C47 Certificate serial: 0750F46728DEE0DD27BAA866C0EFD0BE620087CC Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/CECA73092344CA9B6F74C1A83D6C747962186C47.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft Manifest number: 0187 Signing time: Tue 03 Nov 2026 00:30:13 +0000 Manifest this update: Tue 03 Nov 2026 00:25:13 +0000 Manifest next update: Wed 04 Nov 2026 03:13:13 +0000 Files and hashes: 1: CECA73092344CA9B6F74C1A83D6C747962186C47.crl (hash: H1wAeKOkTdWynsZHyMmquWB3flL0D+yZQoGOP+eFOSQ=) 2: 326130663a316363353a323730303a3a2f34302d3438203d3e20323035303038.roa (hash: BnIiTt7lYkg61/5kI8GlQeZ2K6jYXq5LpIVfYOf0DDs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.crl rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/CECA73092344CA9B6F74C1A83D6C747962186C47.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Nov 2026 23:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:50:f4:67:28:de:e0:dd:27:ba:a8:66:c0:ef:d0:be:62:00:87:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CECA73092344CA9B6F74C1A83D6C747962186C47 Validity Not Before: Nov 3 00:25:13 2026 GMT Not After : Nov 4 03:13:13 2026 GMT Subject: CN=C1BAB617DB01A21150403725338E6C2FE785B0AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b6:2e:7a:d8:e1:34:ce:5e:43:22:7f:2c:ba: 9c:c6:cd:10:16:da:fc:17:64:ca:a8:d2:06:a8:31: e2:7c:2d:96:60:5f:97:c5:15:fc:6a:b4:1a:d2:db: 4e:dc:6b:90:b8:75:53:28:b3:cc:a2:5b:2b:98:86: 17:ec:2a:f9:39:e6:82:94:b9:54:80:e4:0d:9f:6c: b7:f4:a2:e0:2c:dd:64:01:23:7c:9c:9b:09:2c:ff: 97:79:e2:eb:78:63:f5:97:61:1f:a7:6a:d6:dc:87: f8:32:20:79:55:0c:91:0c:8b:ff:9a:2b:4d:c7:02: b5:fb:c5:53:42:ec:d5:15:7d:bf:c1:d2:f6:54:4f: f6:f3:90:82:0b:3c:3a:3f:35:ca:df:a8:bf:72:35: 62:10:16:ca:ac:fa:c3:89:9f:d4:e3:f4:13:3a:cb: d0:5a:31:f7:f8:09:20:22:77:1d:be:14:55:40:a9: 06:92:20:0e:1a:39:33:76:c2:49:97:ce:ea:a7:f0: 9a:ba:f6:8f:7f:b8:7b:91:41:1e:d4:c1:88:df:0d: 96:be:1e:34:85:05:e7:bb:26:ee:89:d5:11:36:5f: 97:29:1b:48:eb:b1:30:d9:ac:a6:de:31:d2:27:d3: 03:a1:f0:44:eb:ac:1c:7f:9e:5d:86:8f:e8:95:61: 10:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:BA:B6:17:DB:01:A2:11:50:40:37:25:33:8E:6C:2F:E7:85:B0:AF X509v3 Authority Key Identifier: keyid:CE:CA:73:09:23:44:CA:9B:6F:74:C1:A8:3D:6C:74:79:62:18:6C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/CECA73092344CA9B6F74C1A83D6C747962186C47.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:26:52:01:04:8e:0c:31:f6:49:7f:b0:82:af:d7:e0:f5:b8: bc:81:65:6c:41:2d:8f:3a:2c:42:09:bd:4c:28:36:e8:4b:7d: 78:d0:98:32:1d:54:dc:f4:af:e3:f0:dd:8f:78:90:b7:ce:18: d6:64:24:48:32:1a:23:6b:19:44:1a:b9:37:04:cb:0b:cd:65: c1:de:62:8e:f4:4c:3b:e1:46:b2:d8:2a:29:64:1d:ea:39:7d: 33:a7:23:43:cf:51:96:4e:b2:49:a7:8e:c7:fe:09:9b:26:78: ab:54:7e:bb:51:43:52:2b:86:b8:47:4f:79:13:6f:b6:fd:5f: 2a:4c:9f:5a:8a:34:59:82:7a:da:14:8f:f6:f8:15:35:c2:fa: d8:f9:2d:c6:e8:a3:86:b3:36:f0:7f:01:ff:d1:35:07:fe:c0: c8:04:d8:21:ba:e4:f7:a2:67:77:3b:16:84:43:ec:48:94:47: 63:aa:03:a9:ae:ea:f1:b0:ff:76:d8:83:72:96:67:72:17:bf: 0b:dc:1d:70:68:57:59:d2:ae:fc:6b:31:a8:55:1e:2b:aa:70: 8b:98:d3:10:51:10:53:a5:d6:6a:3f:1e:5c:f0:13:e8:ae:db: 07:a9:39:55:66:a9:fe:44:5c:c2:6f:97:c4:d5:aa:3f:be:76: cc:69:70:1b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUB1D0Zyje4N0nuqhmwO/QvmIAh8wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDQTczMDkyMzQ0Q0E5QjZGNzRDMUE4M0Q2Qzc0Nzk2 MjE4NkM0NzAeFw0yNjExMDMwMDI1MTNaFw0yNjExMDQwMzEzMTNaMDMxMTAvBgNV BAMTKEMxQkFCNjE3REIwMUEyMTE1MDQwMzcyNTMzOEU2QzJGRTc4NUIwQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpti562OE0zl5DIn8supzGzRAW 2vwXZMqo0gaoMeJ8LZZgX5fFFfxqtBrS207ca5C4dVMos8yiWyuYhhfsKvk55oKU uVSA5A2fbLf0ouAs3WQBI3ycmwks/5d54ut4Y/WXYR+natbch/gyIHlVDJEMi/+a K03HArX7xVNC7NUVfb/B0vZUT/bzkIILPDo/NcrfqL9yNWIQFsqs+sOJn9Tj9BM6 y9BaMff4CSAidx2+FFVAqQaSIA4aOTN2wkmXzuqn8Jq69o9/uHuRQR7UwYjfDZa+ HjSFBee7Ju6J1RE2X5cpG0jrsTDZrKbeMdIn0wOh8ETrrBx/nl2Gj+iVYRAVAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUwbq2F9sBohFQQDclM45sL+eFsK8wHwYDVR0j BBgwFoAUzspzCSNEyptvdMGoPWx0eWIYbEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjI4NWJlNmYtNTExMS00YzNjLTgyNTQtZDJlNDE1NTEw Mjg0LzIvQ0VDQTczMDkyMzQ0Q0E5QjZGNzRDMUE4M0Q2Qzc0Nzk2MjE4NkM0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9DRUNBNzMwOTIzNDRDQTlCNkY3NEMxQTgz RDZDNzQ3OTYyMTg2QzQ3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzIyODViZTZmLTUxMTEtNGMzYy04MjU0LWQyZTQxNTUxMDI4NC8yL0NFQ0E3MzA5 MjM0NENBOUI2Rjc0QzFBODNENkM3NDc5NjIxODZDNDcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQByJlIB BI4MMfZJf7CCr9fg9bi8gWVsQS2POixCCb1MKDboS3140JgyHVTc9K/j8N2PeJC3 zhjWZCRIMhojaxlEGrk3BMsLzWXB3mKO9Ew74Uay2CopZB3qOX0zpyNDz1GWTrJJ p47H/gmbJnirVH67UUNSK4a4R095E2+2/V8qTJ9aijRZgnraFI/2+BU1wvrY+S3G 6KOGszbwfwH/0TUH/sDIBNghuuT3omd3OxaEQ+xIlEdjqgOprurxsP922INylmdy F78L3B1waFdZ0q78azGoVR4rqnCLmNMQURBTpdZqPx5c8BPortsHqTlVZqn+RFzC b5fE1ao/vnbMaXAb -----END CERTIFICATE-----Generated at Tue Nov 3 08:36:17 2026 by rpki-client