$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft File: CECA73092344CA9B6F74C1A83D6C747962186C47.mft (raw, json) Hash identifier: yZAJYGat2nOcSsY/6ZYnfxnIOdZChJJTMAk0cEHdO5s= Subject key identifier: E7:35:98:DB:0B:84:DB:19:E8:4F:91:F3:77:B5:37:95:11:BD:A3:D1 Authority key identifier: CE:CA:73:09:23:44:CA:9B:6F:74:C1:A8:3D:6C:74:79:62:18:6C:47 Certificate issuer: /CN=CECA73092344CA9B6F74C1A83D6C747962186C47 Certificate serial: 49834FAFD43F18EA343741A81E656E9B965E38D4 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/CECA73092344CA9B6F74C1A83D6C747962186C47.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft Manifest number: 45 Signing time: Wed 04 Mar 2026 07:53:09 +0000 Manifest this update: Wed 04 Mar 2026 07:48:09 +0000 Manifest next update: Thu 05 Mar 2026 09:43:09 +0000 Files and hashes: 1: CECA73092344CA9B6F74C1A83D6C747962186C47.crl (hash: 0K8DS7YaBGtj5ekKNOL56zG6QYNeea17caDOhBvDcnc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.crl rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/CECA73092344CA9B6F74C1A83D6C747962186C47.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Mar 2026 09:43:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:83:4f:af:d4:3f:18:ea:34:37:41:a8:1e:65:6e:9b:96:5e:38:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CECA73092344CA9B6F74C1A83D6C747962186C47 Validity Not Before: Mar 4 07:48:09 2026 GMT Not After : Mar 5 09:43:09 2026 GMT Subject: CN=E73598DB0B84DB19E84F91F377B5379511BDA3D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:24:6e:f3:9a:ef:a0:7e:8d:f8:14:8a:67:7d: 76:60:bc:47:77:c1:74:a4:b8:d0:89:19:8a:05:d2: e2:1a:86:b7:1b:5e:5c:c4:d6:4b:a6:9a:e1:98:31: b5:0b:c0:ba:39:bb:fc:e0:45:ca:8d:66:b3:20:b5: 9b:91:74:5c:c1:78:75:8c:d4:48:60:79:2c:f2:67: da:dd:fc:b1:52:06:de:e5:6f:51:95:7f:10:23:c1: a0:f5:77:4b:7a:15:ad:1e:dd:33:ae:2a:04:04:96: d6:28:24:aa:e6:23:b4:5a:1c:7c:65:f8:fc:c4:56: a8:ab:37:3b:c7:15:c1:f3:f3:2e:1f:66:23:fe:09: 1d:5f:68:96:b4:1c:04:88:f2:1b:92:07:a3:ef:fb: e4:f8:84:55:77:ce:75:a4:03:68:b8:02:e7:bc:95: af:42:fd:ac:f9:58:ff:77:16:15:97:0a:62:8c:b5: 69:03:95:b0:af:32:54:3e:90:34:c7:c9:60:9d:67: f9:bb:a4:43:af:52:b5:5c:4d:c8:bf:c4:ac:8e:cb: 23:27:58:48:17:47:6f:30:55:b8:7e:23:38:14:36: 4b:c8:c5:24:f6:5f:4e:f0:93:d8:a7:63:01:d9:59: 32:76:7a:5c:25:c6:21:72:c9:11:d0:63:2f:e5:6a: 90:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:35:98:DB:0B:84:DB:19:E8:4F:91:F3:77:B5:37:95:11:BD:A3:D1 X509v3 Authority Key Identifier: keyid:CE:CA:73:09:23:44:CA:9B:6F:74:C1:A8:3D:6C:74:79:62:18:6C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/CECA73092344CA9B6F74C1A83D6C747962186C47.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:4b:77:fd:77:a0:64:a4:35:03:2c:f5:2c:15:e6:d9:81:78: 7c:54:f8:ab:07:1e:60:48:4e:01:47:b5:e0:22:5b:e9:ec:c8: f0:b3:ef:46:45:76:ec:d4:84:53:d1:24:de:e8:26:9a:fc:d3: e8:35:31:97:c1:97:14:c1:e0:1e:69:5b:90:e0:9b:79:2c:ec: 57:96:cf:f9:56:52:1b:dd:3f:d9:4a:8b:8e:b3:34:18:07:a1: 11:3a:07:5d:04:58:9f:be:1b:7e:a1:61:99:01:98:96:a4:9a: 59:4c:87:58:8c:c7:dc:ea:e1:1c:ed:52:a7:6e:5b:c9:70:4b: 9e:a2:d4:16:89:fa:75:b0:e9:fc:1f:22:d6:77:40:36:b6:ac: b3:b0:ca:c9:c9:de:dd:c5:a0:00:80:6a:13:5c:39:ac:bc:09: 3b:76:46:ed:a6:34:8f:70:7c:f5:fa:3d:a9:2c:d3:28:af:39: d9:ab:d1:3f:df:d6:4f:01:e7:10:a0:9b:05:ba:0c:11:4c:6c: 24:bf:7c:37:0d:d8:af:71:df:e8:73:07:d0:68:71:7d:f4:e4: d2:9a:4f:da:d6:9e:39:9a:b8:ae:34:72:42:fa:b4:6e:a9:de: dd:78:47:7b:d3:57:4a:3b:8f:a0:32:51:df:3e:98:7f:92:04: cc:46:17:1d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUSYNPr9Q/GOo0N0GoHmVum5ZeONQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDQTczMDkyMzQ0Q0E5QjZGNzRDMUE4M0Q2Qzc0Nzk2 MjE4NkM0NzAeFw0yNjAzMDQwNzQ4MDlaFw0yNjAzMDUwOTQzMDlaMDMxMTAvBgNV BAMTKEU3MzU5OERCMEI4NERCMTlFODRGOTFGMzc3QjUzNzk1MTFCREEzRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUJG7zmu+gfo34FIpnfXZgvEd3 wXSkuNCJGYoF0uIahrcbXlzE1kummuGYMbULwLo5u/zgRcqNZrMgtZuRdFzBeHWM 1EhgeSzyZ9rd/LFSBt7lb1GVfxAjwaD1d0t6Fa0e3TOuKgQEltYoJKrmI7RaHHxl +PzEVqirNzvHFcHz8y4fZiP+CR1faJa0HASI8huSB6Pv++T4hFV3znWkA2i4Aue8 la9C/az5WP93FhWXCmKMtWkDlbCvMlQ+kDTHyWCdZ/m7pEOvUrVcTci/xKyOyyMn WEgXR28wVbh+IzgUNkvIxST2X07wk9inYwHZWTJ2elwlxiFyyRHQYy/lapBBAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU5zWY2wuE2xnoT5Hzd7U3lRG9o9EwHwYDVR0j BBgwFoAUzspzCSNEyptvdMGoPWx0eWIYbEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjI4NWJlNmYtNTExMS00YzNjLTgyNTQtZDJlNDE1NTEw Mjg0LzIvQ0VDQTczMDkyMzQ0Q0E5QjZGNzRDMUE4M0Q2Qzc0Nzk2MjE4NkM0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9DRUNBNzMwOTIzNDRDQTlCNkY3NEMxQTgz RDZDNzQ3OTYyMTg2QzQ3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzIyODViZTZmLTUxMTEtNGMzYy04MjU0LWQyZTQxNTUxMDI4NC8yL0NFQ0E3MzA5 MjM0NENBOUI2Rjc0QzFBODNENkM3NDc5NjIxODZDNDcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCTS3f9 d6BkpDUDLPUsFebZgXh8VPirBx5gSE4BR7XgIlvp7Mjws+9GRXbs1IRT0STe6Caa /NPoNTGXwZcUweAeaVuQ4Jt5LOxXls/5VlIb3T/ZSouOszQYB6EROgddBFifvht+ oWGZAZiWpJpZTIdYjMfc6uEc7VKnblvJcEueotQWifp1sOn8HyLWd0A2tqyzsMrJ yd7dxaAAgGoTXDmsvAk7dkbtpjSPcHz1+j2pLNMorznZq9E/39ZPAecQoJsFugwR TGwkv3w3Ddivcd/ocwfQaHF99OTSmk/a1p45mriuNHJC+rRuqd7deEd701dKO4+g MlHfPph/kgTMRhcd -----END CERTIFICATE-----Generated at Thu Mar 5 00:43:16 2026 by rpki-client