$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft File: CECA73092344CA9B6F74C1A83D6C747962186C47.mft (raw, json) Hash identifier: boAEpfdGWha8DgYyITRuqJYx29wTWezye4J3Wy0Q084= Subject key identifier: E5:89:EE:34:0A:C3:D8:05:00:04:15:14:77:E0:B5:10:18:EB:B8:4F Authority key identifier: CE:CA:73:09:23:44:CA:9B:6F:74:C1:A8:3D:6C:74:79:62:18:6C:47 Certificate issuer: /CN=CECA73092344CA9B6F74C1A83D6C747962186C47 Certificate serial: 2AAA6AFA3E2558A22B9EB27037628E5D1589D83A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/CECA73092344CA9B6F74C1A83D6C747962186C47.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft Manifest number: 41 Signing time: Sun 01 Mar 2026 08:38:07 +0000 Manifest this update: Sun 01 Mar 2026 08:33:07 +0000 Manifest next update: Mon 02 Mar 2026 11:51:07 +0000 Files and hashes: 1: CECA73092344CA9B6F74C1A83D6C747962186C47.crl (hash: 5seCANcMXi0gbkBqEcj4M+3TTXqZM8joVxaSqvU+plU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.crl rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/CECA73092344CA9B6F74C1A83D6C747962186C47.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 11:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:aa:6a:fa:3e:25:58:a2:2b:9e:b2:70:37:62:8e:5d:15:89:d8:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CECA73092344CA9B6F74C1A83D6C747962186C47 Validity Not Before: Mar 1 08:33:07 2026 GMT Not After : Mar 2 11:51:07 2026 GMT Subject: CN=E589EE340AC3D8050004151477E0B51018EBB84F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:0b:7c:bc:7e:00:c2:d8:4d:3e:06:27:a3:a8: 9b:d3:de:92:76:6f:7b:0c:9b:79:bc:96:39:0e:a2: 56:01:f7:07:25:b5:2a:c8:1e:56:a9:42:43:40:a8: 97:92:c3:63:a9:48:39:76:ce:76:d5:8a:05:a4:3d: ae:1d:87:ca:25:ef:99:4a:e5:03:6c:da:9b:66:97: 57:22:43:3f:4b:58:e6:49:cf:1f:c3:23:a4:6a:9a: 24:5d:0d:fd:b3:f6:51:05:00:a1:b2:9c:3c:1f:e2: c4:ed:a5:1e:cb:8a:3d:b6:c0:c1:9c:b1:85:d8:1a: d4:21:08:3b:8b:2d:07:28:f2:f3:b7:d2:d1:6e:cc: 9f:9b:cd:fa:81:9e:fc:d5:0e:f6:18:a0:d9:41:15: 39:a6:fa:0a:26:20:07:3a:11:40:c9:8a:ef:82:72: b1:1a:3a:24:e5:63:95:10:8e:eb:49:d9:65:34:ad: 18:22:b2:a0:74:5c:b0:bc:3b:76:47:2b:56:32:81: 64:2a:80:eb:de:85:2d:c1:16:c1:70:96:49:78:c2: 6a:08:4e:2c:66:6f:29:8d:c1:ca:37:a4:23:23:7e: 1c:32:29:6a:76:35:42:4c:a8:29:ea:eb:eb:00:11: 48:5d:5a:b9:87:17:5b:9e:43:79:f5:e0:f6:a4:3e: 78:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:89:EE:34:0A:C3:D8:05:00:04:15:14:77:E0:B5:10:18:EB:B8:4F X509v3 Authority Key Identifier: keyid:CE:CA:73:09:23:44:CA:9B:6F:74:C1:A8:3D:6C:74:79:62:18:6C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/CECA73092344CA9B6F74C1A83D6C747962186C47.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:00:02:96:9e:7e:39:80:16:be:4a:cd:67:09:ea:25:ae:b0: fa:f6:12:14:2d:d8:54:55:fc:fc:3b:66:5d:a6:9b:84:00:b8: 1f:79:15:3a:02:32:a2:ad:92:cc:03:f9:30:79:66:fb:4f:2c: c4:b7:7f:76:27:95:94:6c:51:7b:54:a5:7a:7b:54:e4:85:84: 94:6c:0a:ef:08:e5:5c:bc:75:d5:a3:ac:76:6a:0b:cb:93:c4: aa:08:38:74:41:ad:fc:c6:c8:c9:9e:48:7a:e2:80:9b:a0:41: 8c:4c:c5:74:e2:0d:a6:a6:d6:3d:4e:dd:70:9d:1f:38:43:90: 56:9a:ff:54:b7:a4:72:56:63:97:b9:2f:21:df:6d:0c:65:93: c3:69:cc:93:7d:ab:fc:68:56:36:4c:0b:fa:bb:70:19:1c:49: 83:f7:dc:c8:9b:28:d9:a0:65:2c:8d:a1:93:11:60:d6:16:8b: 78:49:b9:c0:c1:fc:06:49:24:37:ed:d2:ca:0e:cc:ca:31:9c: 6d:9b:27:80:4b:ce:77:f4:aa:80:3e:d0:41:05:8e:d0:7b:99: 18:52:2b:63:58:a7:72:0a:23:91:eb:7f:72:24:3b:84:a9:25: 20:26:c7:5a:5b:f5:8d:49:75:d6:47:37:bb:ed:65:be:f3:eb: 26:97:71:23 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUKqpq+j4lWKIrnrJwN2KOXRWJ2DowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDQTczMDkyMzQ0Q0E5QjZGNzRDMUE4M0Q2Qzc0Nzk2 MjE4NkM0NzAeFw0yNjAzMDEwODMzMDdaFw0yNjAzMDIxMTUxMDdaMDMxMTAvBgNV BAMTKEU1ODlFRTM0MEFDM0Q4MDUwMDA0MTUxNDc3RTBCNTEwMThFQkI4NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwC3y8fgDC2E0+BiejqJvT3pJ2 b3sMm3m8ljkOolYB9wcltSrIHlapQkNAqJeSw2OpSDl2znbVigWkPa4dh8ol75lK 5QNs2ptml1ciQz9LWOZJzx/DI6RqmiRdDf2z9lEFAKGynDwf4sTtpR7Lij22wMGc sYXYGtQhCDuLLQco8vO30tFuzJ+bzfqBnvzVDvYYoNlBFTmm+gomIAc6EUDJiu+C crEaOiTlY5UQjutJ2WU0rRgisqB0XLC8O3ZHK1YygWQqgOvehS3BFsFwlkl4wmoI TixmbymNwco3pCMjfhwyKWp2NUJMqCnq6+sAEUhdWrmHF1ueQ3n14PakPnhrAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU5YnuNArD2AUABBUUd+C1EBjruE8wHwYDVR0j BBgwFoAUzspzCSNEyptvdMGoPWx0eWIYbEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjI4NWJlNmYtNTExMS00YzNjLTgyNTQtZDJlNDE1NTEw Mjg0LzIvQ0VDQTczMDkyMzQ0Q0E5QjZGNzRDMUE4M0Q2Qzc0Nzk2MjE4NkM0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9DRUNBNzMwOTIzNDRDQTlCNkY3NEMxQTgz RDZDNzQ3OTYyMTg2QzQ3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzIyODViZTZmLTUxMTEtNGMzYy04MjU0LWQyZTQxNTUxMDI4NC8yL0NFQ0E3MzA5 MjM0NENBOUI2Rjc0QzFBODNENkM3NDc5NjIxODZDNDcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAjAAKW nn45gBa+Ss1nCeolrrD69hIULdhUVfz8O2ZdppuEALgfeRU6AjKirZLMA/kweWb7 TyzEt392J5WUbFF7VKV6e1TkhYSUbArvCOVcvHXVo6x2agvLk8SqCDh0Qa38xsjJ nkh64oCboEGMTMV04g2mptY9Tt1wnR84Q5BWmv9Ut6RyVmOXuS8h320MZZPDacyT fav8aFY2TAv6u3AZHEmD99zImyjZoGUsjaGTEWDWFot4SbnAwfwGSSQ37dLKDszK MZxtmyeAS8539KqAPtBBBY7Qe5kYUitjWKdyCiOR639yJDuEqSUgJsdaW/WNSXXW Rze77WW+8+sml3Ej -----END CERTIFICATE-----Generated at Mon Mar 2 00:05:01 2026 by rpki-client