$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft File: CECA73092344CA9B6F74C1A83D6C747962186C47.mft (raw, json) Hash identifier: jzL8qNt+fwhT97b3o2spBDpN1yZR7rurrYDFjEB9Cms= Subject key identifier: 27:96:04:2C:C0:1D:91:59:8E:E2:7D:B2:19:EA:D2:1C:7F:40:FE:24 Authority key identifier: CE:CA:73:09:23:44:CA:9B:6F:74:C1:A8:3D:6C:74:79:62:18:6C:47 Certificate issuer: /CN=CECA73092344CA9B6F74C1A83D6C747962186C47 Certificate serial: 09070DD7AEF02EC578C50BE5AFB1A57A6DB82A65 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/CECA73092344CA9B6F74C1A83D6C747962186C47.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft Manifest number: C2 Signing time: Sat 06 Jun 2026 16:39:00 +0000 Manifest this update: Sat 06 Jun 2026 16:34:00 +0000 Manifest next update: Sun 07 Jun 2026 19:08:00 +0000 Files and hashes: 1: CECA73092344CA9B6F74C1A83D6C747962186C47.crl (hash: 5JOuaDyKWNx6OkbxsOPfdlD+Tuw10iO+Wem6eoefU+E=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.crl rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/CECA73092344CA9B6F74C1A83D6C747962186C47.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Jun 2026 19:08:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:07:0d:d7:ae:f0:2e:c5:78:c5:0b:e5:af:b1:a5:7a:6d:b8:2a:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CECA73092344CA9B6F74C1A83D6C747962186C47 Validity Not Before: Jun 6 16:34:00 2026 GMT Not After : Jun 7 19:08:00 2026 GMT Subject: CN=2796042CC01D91598EE27DB219EAD21C7F40FE24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:48:00:ec:97:0d:5b:0b:71:ca:40:d0:04:5a: d1:e5:5a:e5:dc:b7:5e:f0:36:bb:08:e3:4b:03:bd: 17:44:e9:18:88:1e:a1:3f:97:99:b9:a0:4b:d0:e4: 69:44:c4:4f:5d:88:49:12:cc:ae:49:e2:64:a5:ec: 31:7b:a0:2d:ca:f9:2c:18:9b:03:3a:ab:fe:f8:83: 7f:a2:60:44:4d:37:78:5f:94:43:a0:11:d3:c2:ea: ca:5a:24:da:70:f3:6d:01:42:80:7b:5c:f0:2a:e7: d9:85:73:4a:3f:bc:5e:7f:52:c0:c9:b8:06:92:12: a3:01:a3:9f:3b:3e:6d:65:c9:35:54:45:d0:a6:97: ee:91:ea:f2:84:13:39:09:09:30:0e:0d:cb:f7:ae: 1b:08:a1:d4:32:ea:b9:ed:d9:31:eb:10:d9:9c:6e: 37:5f:f9:ae:de:6d:fc:98:4b:4e:f5:7c:b4:4a:9a: 2b:4e:a0:14:bd:26:0b:61:a3:b5:fb:32:95:d2:8f: 4f:b5:a0:d8:d1:3a:c7:cd:8c:41:3c:6b:a4:06:7c: 86:69:3e:b8:67:79:2e:41:d4:37:00:4d:00:16:30: 21:ea:fc:b2:26:93:31:fb:e7:88:96:10:d9:29:be: 92:9f:56:a9:48:15:ae:fa:f5:b6:7e:ed:e3:4c:03: ac:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:96:04:2C:C0:1D:91:59:8E:E2:7D:B2:19:EA:D2:1C:7F:40:FE:24 X509v3 Authority Key Identifier: keyid:CE:CA:73:09:23:44:CA:9B:6F:74:C1:A8:3D:6C:74:79:62:18:6C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/CECA73092344CA9B6F74C1A83D6C747962186C47.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:b0:f0:7e:39:35:63:be:39:fa:88:ec:85:0a:57:83:56:32: e2:49:2f:8a:79:de:75:21:c1:8f:de:44:60:f3:2e:69:72:c4: 8c:ab:58:c7:bd:f2:aa:99:de:e6:31:90:fb:19:1a:d5:6b:0a: 6e:09:7e:74:83:e2:82:43:3c:66:2a:7b:61:96:cd:46:ad:c9: 07:76:c7:5c:99:40:e0:cf:e3:20:05:21:6d:b3:6a:cd:3b:67: 0e:a7:4d:9e:01:bf:3d:9d:82:98:3d:53:9c:70:c6:34:6c:7d: 83:ab:f8:1f:2f:a6:a0:8c:58:0e:d5:42:8d:57:9b:bf:15:df: e7:01:0d:fa:1a:5b:8f:8d:a3:8c:a9:df:02:83:87:76:60:23: 1f:f2:08:64:f7:3c:d4:3e:c7:aa:1c:f6:c0:28:28:9c:c7:f1: c9:d4:b2:63:9b:b3:c5:79:31:0b:df:cc:00:3f:ac:d7:b0:48: 6a:31:1b:12:11:17:4a:26:a7:69:ba:3c:bb:01:91:32:79:bd: 99:63:ff:2e:f0:9c:0c:3d:a1:bb:e5:13:04:63:f0:58:f0:57: 66:ef:79:43:40:13:5f:92:c3:01:15:7b:7d:b1:80:7b:a4:3e: 64:91:a9:f8:47:2b:03:8e:29:74:52:a0:dd:fc:e7:d4:28:8a: f3:c1:58:07 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUCQcN167wLsV4xQvlr7Glem24KmUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDQTczMDkyMzQ0Q0E5QjZGNzRDMUE4M0Q2Qzc0Nzk2 MjE4NkM0NzAeFw0yNjA2MDYxNjM0MDBaFw0yNjA2MDcxOTA4MDBaMDMxMTAvBgNV BAMTKDI3OTYwNDJDQzAxRDkxNTk4RUUyN0RCMjE5RUFEMjFDN0Y0MEZFMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaSADslw1bC3HKQNAEWtHlWuXc t17wNrsI40sDvRdE6RiIHqE/l5m5oEvQ5GlExE9diEkSzK5J4mSl7DF7oC3K+SwY mwM6q/74g3+iYERNN3hflEOgEdPC6spaJNpw820BQoB7XPAq59mFc0o/vF5/UsDJ uAaSEqMBo587Pm1lyTVURdCml+6R6vKEEzkJCTAODcv3rhsIodQy6rnt2THrENmc bjdf+a7ebfyYS071fLRKmitOoBS9Jgtho7X7MpXSj0+1oNjROsfNjEE8a6QGfIZp PrhneS5B1DcATQAWMCHq/LImkzH754iWENkpvpKfVqlIFa769bZ+7eNMA6wnAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUJ5YELMAdkVmO4n2yGerSHH9A/iQwHwYDVR0j BBgwFoAUzspzCSNEyptvdMGoPWx0eWIYbEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjI4NWJlNmYtNTExMS00YzNjLTgyNTQtZDJlNDE1NTEw Mjg0LzIvQ0VDQTczMDkyMzQ0Q0E5QjZGNzRDMUE4M0Q2Qzc0Nzk2MjE4NkM0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9DRUNBNzMwOTIzNDRDQTlCNkY3NEMxQTgz RDZDNzQ3OTYyMTg2QzQ3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzIyODViZTZmLTUxMTEtNGMzYy04MjU0LWQyZTQxNTUxMDI4NC8yL0NFQ0E3MzA5 MjM0NENBOUI2Rjc0QzFBODNENkM3NDc5NjIxODZDNDcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCDsPB+ OTVjvjn6iOyFCleDVjLiSS+Ked51IcGP3kRg8y5pcsSMq1jHvfKqmd7mMZD7GRrV awpuCX50g+KCQzxmKnthls1GrckHdsdcmUDgz+MgBSFts2rNO2cOp02eAb89nYKY PVOccMY0bH2Dq/gfL6agjFgO1UKNV5u/Fd/nAQ36GluPjaOMqd8Cg4d2YCMf8ghk 9zzUPseqHPbAKCicx/HJ1LJjm7PFeTEL38wAP6zXsEhqMRsSERdKJqdpujy7AZEy eb2ZY/8u8JwMPaG75RMEY/BY8Fdm73lDQBNfksMBFXt9sYB7pD5kkan4RysDjil0 UqDd/OfUKIrzwVgH -----END CERTIFICATE-----Generated at Sun Jun 7 08:03:31 2026 by rpki-client