$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft File: CECA73092344CA9B6F74C1A83D6C747962186C47.mft (raw, json) Hash identifier: eGLvsGE89EkklJRwxuLdF74m2ikcYIBgWL+sOBRnnUE= Subject key identifier: ED:AF:A5:28:08:15:7A:A3:DD:72:33:ED:1D:1D:8D:20:57:64:BD:E5 Authority key identifier: CE:CA:73:09:23:44:CA:9B:6F:74:C1:A8:3D:6C:74:79:62:18:6C:47 Certificate issuer: /CN=CECA73092344CA9B6F74C1A83D6C747962186C47 Certificate serial: 0EB4F262C401071329333E477828FCA304CCD9D1 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/CECA73092344CA9B6F74C1A83D6C747962186C47.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft Manifest number: FE Signing time: Tue 21 Jul 2026 17:46:59 +0000 Manifest this update: Tue 21 Jul 2026 17:41:59 +0000 Manifest next update: Wed 22 Jul 2026 19:10:59 +0000 Files and hashes: 1: CECA73092344CA9B6F74C1A83D6C747962186C47.crl (hash: 5DQfmNHkYfn4E345NED1xu3hAEMNPEJaZOIiGiwrFE8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.crl rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/CECA73092344CA9B6F74C1A83D6C747962186C47.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 19:10:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:b4:f2:62:c4:01:07:13:29:33:3e:47:78:28:fc:a3:04:cc:d9:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CECA73092344CA9B6F74C1A83D6C747962186C47 Validity Not Before: Jul 21 17:41:59 2026 GMT Not After : Jul 22 19:10:59 2026 GMT Subject: CN=EDAFA52808157AA3DD7233ED1D1D8D205764BDE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:21:3d:ff:d7:d4:b3:82:59:61:0c:ee:49:b0: 16:28:30:9f:9f:bd:cc:50:85:84:6d:d8:50:dc:0f: 70:93:7c:4c:de:79:62:31:79:23:40:8b:8b:73:c7: e2:3d:14:b8:9f:7e:b3:7e:c9:cf:60:7c:06:6b:54: ab:1a:98:28:db:c6:a2:19:7e:04:8a:a0:3c:e4:96: 83:2c:f3:3c:02:7a:db:a4:f3:f5:a7:6f:73:a5:c8: af:03:9d:17:15:fd:5b:1a:fd:ca:ee:20:3f:c5:cc: 76:da:10:61:fe:e0:12:da:31:99:01:14:89:0d:da: 08:5d:68:be:f5:00:31:44:b1:ef:f2:48:99:ce:a0: f0:b1:e1:18:bf:dd:4d:2b:14:cd:5f:f1:1d:09:88: 98:1a:92:17:84:78:f7:3d:b6:92:02:d2:c2:2b:7f: ce:c9:7e:c3:c3:b4:e0:fa:9c:9d:db:9b:42:f3:05: cf:ea:61:fb:e2:31:c4:e7:81:8b:a4:f9:74:64:2d: b8:98:1a:32:d5:00:9d:a7:c1:f6:c7:88:df:c5:f6: 5a:21:87:ef:bd:14:4a:f1:2a:58:b4:63:fd:1e:c7: 06:1d:3c:f0:d8:5c:4c:be:30:57:8a:a7:de:b9:7a: 08:ae:e6:09:ca:8a:15:c9:d6:0b:dd:51:ee:31:57: f8:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:AF:A5:28:08:15:7A:A3:DD:72:33:ED:1D:1D:8D:20:57:64:BD:E5 X509v3 Authority Key Identifier: keyid:CE:CA:73:09:23:44:CA:9B:6F:74:C1:A8:3D:6C:74:79:62:18:6C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/CECA73092344CA9B6F74C1A83D6C747962186C47.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:31:5d:0a:79:68:e4:9f:e3:e8:cf:6b:ea:c3:17:64:3a:8c: 2b:9f:79:89:ae:07:a3:3d:61:76:bf:8a:a1:85:bb:db:01:92: 2c:af:8a:ec:89:ac:8d:27:07:4a:85:14:be:72:a6:8c:70:39: 36:fd:da:4b:38:12:71:f1:00:28:be:ae:53:8f:23:b9:ea:14: 24:36:8d:a1:89:25:95:5c:4a:c3:91:d6:74:0e:96:99:1d:8a: e0:fa:62:ef:d0:3b:a7:7d:d6:b2:48:ec:12:d4:d9:df:92:df: ef:9a:10:dc:88:39:9c:d9:15:70:18:1e:f8:89:ff:57:0f:4f: 2f:7d:c0:cb:e3:6e:c0:bb:7f:98:c7:c7:fd:85:e4:27:2c:25: 1b:4f:15:4b:9b:01:1a:18:0e:4d:2b:0b:40:bb:10:71:bd:b3: 6c:bc:28:fc:7a:99:83:f4:29:27:f8:ee:b6:a5:fb:61:e3:96: b2:28:9c:d3:47:73:83:f7:a1:e3:0f:6d:cd:ad:db:70:7e:49: d1:89:43:c6:a5:bc:92:bc:25:d5:a4:b5:d9:a1:2a:f3:ba:34: d5:08:81:f3:bc:a3:1f:3e:4f:64:91:45:ed:d0:79:57:b3:08: ad:4a:5c:7f:b5:43:80:1a:9e:7e:c8:c1:e3:da:6d:f0:8c:61: bd:b6:d2:69 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUDrTyYsQBBxMpMz5HeCj8owTM2dEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDQTczMDkyMzQ0Q0E5QjZGNzRDMUE4M0Q2Qzc0Nzk2 MjE4NkM0NzAeFw0yNjA3MjExNzQxNTlaFw0yNjA3MjIxOTEwNTlaMDMxMTAvBgNV BAMTKEVEQUZBNTI4MDgxNTdBQTNERDcyMzNFRDFEMUQ4RDIwNTc2NEJERTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvIT3/19SzgllhDO5JsBYoMJ+f vcxQhYRt2FDcD3CTfEzeeWIxeSNAi4tzx+I9FLiffrN+yc9gfAZrVKsamCjbxqIZ fgSKoDzkloMs8zwCetuk8/Wnb3OlyK8DnRcV/Vsa/cruID/FzHbaEGH+4BLaMZkB FIkN2ghdaL71ADFEse/ySJnOoPCx4Ri/3U0rFM1f8R0JiJgakheEePc9tpIC0sIr f87JfsPDtOD6nJ3bm0LzBc/qYfviMcTngYuk+XRkLbiYGjLVAJ2nwfbHiN/F9loh h++9FErxKli0Y/0exwYdPPDYXEy+MFeKp965egiu5gnKihXJ1gvdUe4xV/hDAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU7a+lKAgVeqPdcjPtHR2NIFdkveUwHwYDVR0j BBgwFoAUzspzCSNEyptvdMGoPWx0eWIYbEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjI4NWJlNmYtNTExMS00YzNjLTgyNTQtZDJlNDE1NTEw Mjg0LzIvQ0VDQTczMDkyMzQ0Q0E5QjZGNzRDMUE4M0Q2Qzc0Nzk2MjE4NkM0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9DRUNBNzMwOTIzNDRDQTlCNkY3NEMxQTgz RDZDNzQ3OTYyMTg2QzQ3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzIyODViZTZmLTUxMTEtNGMzYy04MjU0LWQyZTQxNTUxMDI4NC8yL0NFQ0E3MzA5 MjM0NENBOUI2Rjc0QzFBODNENkM3NDc5NjIxODZDNDcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAbMV0K eWjkn+Poz2vqwxdkOowrn3mJrgejPWF2v4qhhbvbAZIsr4rsiayNJwdKhRS+cqaM cDk2/dpLOBJx8QAovq5TjyO56hQkNo2hiSWVXErDkdZ0DpaZHYrg+mLv0Dunfday SOwS1Nnfkt/vmhDciDmc2RVwGB74if9XD08vfcDL427Au3+Yx8f9heQnLCUbTxVL mwEaGA5NKwtAuxBxvbNsvCj8epmD9Ckn+O62pfth45ayKJzTR3OD96HjD23Nrdtw fknRiUPGpbySvCXVpLXZoSrzujTVCIHzvKMfPk9kkUXt0HlXswitSlx/tUOAGp5+ yMHj2m3wjGG9ttJp -----END CERTIFICATE-----Generated at Wed Jul 22 11:36:47 2026 by rpki-client