$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft File: CECA73092344CA9B6F74C1A83D6C747962186C47.mft (raw, json) Hash identifier: N5jeMMkqPURA9sMckWrfn8xe2Ana/rnXuFXvFYWXLAU= Subject key identifier: B7:53:6E:80:14:7A:D1:21:02:9C:8A:64:BA:E0:9D:75:04:F2:AA:B6 Authority key identifier: CE:CA:73:09:23:44:CA:9B:6F:74:C1:A8:3D:6C:74:79:62:18:6C:47 Certificate issuer: /CN=CECA73092344CA9B6F74C1A83D6C747962186C47 Certificate serial: 15EADC7B91132D671BE055C90B461D4EE6A11AB2 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/CECA73092344CA9B6F74C1A83D6C747962186C47.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft Manifest number: 0140 Signing time: Tue 08 Sep 2026 17:46:18 +0000 Manifest this update: Tue 08 Sep 2026 17:41:18 +0000 Manifest next update: Wed 09 Sep 2026 21:35:18 +0000 Files and hashes: 1: CECA73092344CA9B6F74C1A83D6C747962186C47.crl (hash: BGZm0REbCsYVfHKKJg1dbdxG8iQkyibp3L987spTPuI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.crl rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/CECA73092344CA9B6F74C1A83D6C747962186C47.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 09 Sep 2026 21:35:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:ea:dc:7b:91:13:2d:67:1b:e0:55:c9:0b:46:1d:4e:e6:a1:1a:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CECA73092344CA9B6F74C1A83D6C747962186C47 Validity Not Before: Sep 8 17:41:18 2026 GMT Not After : Sep 9 21:35:18 2026 GMT Subject: CN=B7536E80147AD121029C8A64BAE09D7504F2AAB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:38:46:93:09:ba:47:38:ba:ee:99:7f:ba:c2: 87:b9:6c:3c:e0:d6:d9:43:dc:66:4b:f3:b7:4b:a4: 35:21:c3:ec:c2:05:1c:45:ea:dc:e4:8b:d0:cf:02: e8:4d:0a:b2:2d:7f:46:ac:da:16:ef:b0:bd:28:03: d2:22:16:2c:a8:ba:ff:d5:09:80:04:de:5e:28:98: b0:67:d8:4d:dc:5b:3c:f4:9d:c5:a8:c1:09:9f:a9: ed:49:a6:36:df:3a:0d:f1:c7:ce:46:9b:f8:32:be: 24:10:f0:b2:f7:26:cd:a8:d6:ba:3f:83:80:86:8a: 99:50:da:1c:b9:cc:a4:7e:68:73:99:4e:93:c4:97: 66:eb:c7:5b:77:3f:59:2f:b0:73:f7:dc:0e:65:75: bc:0f:d2:c9:71:0f:20:5b:06:ac:d5:d5:3c:06:50: 96:8f:92:23:b7:5c:0d:f6:a9:d3:3e:41:bf:84:bd: 85:2f:22:14:37:29:6b:88:0d:e3:08:47:a3:96:f6: 4e:15:c9:50:e3:11:36:f3:30:4d:a5:fc:93:8c:71: 03:90:5d:53:93:3f:47:13:fe:b9:d3:57:04:66:0c: fd:4a:66:ba:4b:22:6d:2c:0b:25:9f:18:24:b7:a0: 32:f8:04:9b:e6:b9:ff:20:49:3b:79:bd:00:d8:bb: b3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:53:6E:80:14:7A:D1:21:02:9C:8A:64:BA:E0:9D:75:04:F2:AA:B6 X509v3 Authority Key Identifier: keyid:CE:CA:73:09:23:44:CA:9B:6F:74:C1:A8:3D:6C:74:79:62:18:6C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/CECA73092344CA9B6F74C1A83D6C747962186C47.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:36:f7:52:e9:c3:c8:65:78:29:36:da:c4:fe:a1:a7:37:25: d1:78:3f:80:33:08:b7:78:2e:ef:ef:5b:51:f7:d7:83:0d:81: f7:aa:58:42:0f:dd:61:8b:df:98:72:ab:33:4b:62:62:43:56: 1c:de:a8:e9:bf:d1:9a:3e:af:ce:f8:aa:55:66:17:b6:5f:53: d7:8e:00:34:14:a2:66:c3:ee:84:41:f7:50:de:23:0e:f7:ce: a4:fc:c1:6c:5f:e0:e1:65:41:3b:6b:f7:11:72:30:12:be:03: 29:5d:ff:de:66:ae:9b:fc:ec:e2:d4:ea:8d:8c:d7:d6:48:7f: 98:d3:09:69:09:3e:d7:0f:eb:80:3a:28:40:ef:fb:f9:53:23: 4e:8b:67:fa:04:cb:11:ff:bd:ea:59:bd:62:2c:37:2d:f4:2a: 94:65:f5:33:ab:dd:8d:b7:a1:f0:4a:d4:0e:3c:7e:90:da:db: 31:b9:ea:63:e7:3d:04:93:90:e2:02:46:c7:9a:1d:88:6e:65: 32:d5:06:96:5b:4e:c1:08:46:1e:e7:b6:b6:3e:9c:45:40:78: e5:e5:ba:d4:d9:e0:40:18:9a:3a:31:39:82:0e:5c:24:bd:d2: e0:2a:d1:22:c9:67:d6:03:d6:b1:03:53:ae:82:98:33:4b:80: ab:4b:27:9f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUFerce5ETLWcb4FXJC0YdTuahGrIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDQTczMDkyMzQ0Q0E5QjZGNzRDMUE4M0Q2Qzc0Nzk2 MjE4NkM0NzAeFw0yNjA5MDgxNzQxMThaFw0yNjA5MDkyMTM1MThaMDMxMTAvBgNV BAMTKEI3NTM2RTgwMTQ3QUQxMjEwMjlDOEE2NEJBRTA5RDc1MDRGMkFBQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfOEaTCbpHOLrumX+6woe5bDzg 1tlD3GZL87dLpDUhw+zCBRxF6tzki9DPAuhNCrItf0as2hbvsL0oA9IiFiyouv/V CYAE3l4omLBn2E3cWzz0ncWowQmfqe1JpjbfOg3xx85Gm/gyviQQ8LL3Js2o1ro/ g4CGiplQ2hy5zKR+aHOZTpPEl2brx1t3P1kvsHP33A5ldbwP0slxDyBbBqzV1TwG UJaPkiO3XA32qdM+Qb+EvYUvIhQ3KWuIDeMIR6OW9k4VyVDjETbzME2l/JOMcQOQ XVOTP0cT/rnTVwRmDP1KZrpLIm0sCyWfGCS3oDL4BJvmuf8gSTt5vQDYu7MVAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUt1NugBR60SECnIpkuuCddQTyqrYwHwYDVR0j BBgwFoAUzspzCSNEyptvdMGoPWx0eWIYbEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjI4NWJlNmYtNTExMS00YzNjLTgyNTQtZDJlNDE1NTEw Mjg0LzIvQ0VDQTczMDkyMzQ0Q0E5QjZGNzRDMUE4M0Q2Qzc0Nzk2MjE4NkM0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9DRUNBNzMwOTIzNDRDQTlCNkY3NEMxQTgz RDZDNzQ3OTYyMTg2QzQ3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzIyODViZTZmLTUxMTEtNGMzYy04MjU0LWQyZTQxNTUxMDI4NC8yL0NFQ0E3MzA5 MjM0NENBOUI2Rjc0QzFBODNENkM3NDc5NjIxODZDNDcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQArNvdS 6cPIZXgpNtrE/qGnNyXReD+AMwi3eC7v71tR99eDDYH3qlhCD91hi9+YcqszS2Ji Q1Yc3qjpv9GaPq/O+KpVZhe2X1PXjgA0FKJmw+6EQfdQ3iMO986k/MFsX+DhZUE7 a/cRcjASvgMpXf/eZq6b/Ozi1OqNjNfWSH+Y0wlpCT7XD+uAOihA7/v5UyNOi2f6 BMsR/73qWb1iLDct9CqUZfUzq92Nt6HwStQOPH6Q2tsxuepj5z0Ek5DiAkbHmh2I bmUy1QaWW07BCEYe57a2PpxFQHjl5brU2eBAGJo6MTmCDlwkvdLgKtEiyWfWA9ax A1OugpgzS4CrSyef -----END CERTIFICATE-----Generated at Wed Sep 9 08:38:27 2026 by rpki-client