$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft File: CECA73092344CA9B6F74C1A83D6C747962186C47.mft (raw, json) Hash identifier: 7oWkXxS+AGAxlFD8KHYGbD5wAti0Uzk6V+Ye3SEjGFg= Subject key identifier: 18:95:39:45:F4:1F:2B:E8:A5:AA:9E:39:DB:55:C5:99:2C:82:FB:91 Authority key identifier: CE:CA:73:09:23:44:CA:9B:6F:74:C1:A8:3D:6C:74:79:62:18:6C:47 Certificate issuer: /CN=CECA73092344CA9B6F74C1A83D6C747962186C47 Certificate serial: 267991C1ADEFE1233A1C43CBA37926A8E86DEC48 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/CECA73092344CA9B6F74C1A83D6C747962186C47.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft Manifest number: 0107 Signing time: Tue 28 Jul 2026 08:35:55 +0000 Manifest this update: Tue 28 Jul 2026 08:30:55 +0000 Manifest next update: Wed 29 Jul 2026 08:39:55 +0000 Files and hashes: 1: CECA73092344CA9B6F74C1A83D6C747962186C47.crl (hash: cjbQpiJdMMVHKnjCVqwqRRtxySPuiSTqnUJ60gYNi+I=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.crl rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/CECA73092344CA9B6F74C1A83D6C747962186C47.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 05:42:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:79:91:c1:ad:ef:e1:23:3a:1c:43:cb:a3:79:26:a8:e8:6d:ec:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CECA73092344CA9B6F74C1A83D6C747962186C47 Validity Not Before: Jul 28 08:30:55 2026 GMT Not After : Jul 29 08:39:55 2026 GMT Subject: CN=18953945F41F2BE8A5AA9E39DB55C5992C82FB91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:a7:62:34:3a:d9:05:39:8b:bc:28:a0:2e:29: e3:ea:57:41:75:64:6e:54:35:4c:10:d7:59:16:b7: e9:7a:59:58:d3:fe:07:72:26:54:a6:3b:42:66:a3: 69:d9:c3:7b:5b:f4:9c:20:5c:34:b9:ad:36:9d:29: ce:48:0b:e4:ef:83:f2:8a:a9:aa:9a:95:21:59:c0: 92:74:26:e3:6a:45:9a:ab:34:75:6a:f2:ce:14:a6: 24:d0:db:c6:b9:a7:22:e4:87:0d:76:72:46:73:c8: 21:cd:07:9e:ac:01:0b:ba:ac:0f:2b:3c:f2:e8:d6: cf:db:99:e2:20:48:57:e0:de:63:15:56:84:25:01: 7d:6a:eb:ff:e3:f0:4c:8f:cc:f0:fc:d2:17:fb:65: c7:f2:3f:27:da:75:98:aa:be:17:67:f3:91:af:2f: 15:89:3f:c7:34:11:11:8e:87:3a:69:a9:41:9e:74: d0:ef:28:22:58:bb:1d:23:88:53:31:f9:8c:a8:7d: 60:d2:51:d9:b5:d2:a7:86:91:4e:7d:46:b9:a7:26: db:8d:50:4d:87:17:32:f3:63:5d:70:ff:09:c1:e3: 0c:39:bd:bd:ab:ff:e9:c4:e1:5a:cf:12:82:9e:da: 99:6c:b9:d4:69:49:d0:02:36:8f:7d:50:41:85:74: f8:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:95:39:45:F4:1F:2B:E8:A5:AA:9E:39:DB:55:C5:99:2C:82:FB:91 X509v3 Authority Key Identifier: keyid:CE:CA:73:09:23:44:CA:9B:6F:74:C1:A8:3D:6C:74:79:62:18:6C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/CECA73092344CA9B6F74C1A83D6C747962186C47.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:86:d8:14:5a:40:96:6f:94:ba:3c:34:e2:d4:68:7c:9c:e0: 62:9d:70:cc:24:10:ed:33:cb:ee:e8:57:d7:5b:b6:3f:38:04: 6e:ff:d9:25:a1:bf:cc:7f:ab:64:86:7d:21:fe:fb:ed:cb:b7: b8:55:8e:4c:b7:50:35:3c:32:f8:4c:95:32:31:cf:16:d1:98: e4:7e:8a:fc:59:64:3f:28:d0:aa:58:4b:3e:d2:2b:c4:f3:c6: 34:25:4e:2a:2b:cc:0b:25:06:ff:99:81:08:f0:2e:29:3b:2a: 67:58:62:a3:d5:d4:2f:bb:62:a3:ef:84:07:8b:74:ea:6a:36: 67:a9:18:9c:02:c6:50:7b:86:8b:5b:86:b9:37:66:b6:7b:a2: 3c:e1:2d:1f:80:a5:dd:87:ac:6b:f6:3c:da:2a:37:3e:f1:85: 09:7d:bb:68:15:5c:78:34:a2:eb:e2:87:f9:d7:67:f6:f0:f3: 92:39:c5:61:8d:2e:ee:b5:1f:6c:48:98:c4:ac:6b:e8:d8:86: f6:af:4c:db:68:67:b8:f3:0d:ed:78:0e:ec:b3:ff:63:af:bf: ac:c1:e5:6d:ab:5e:ac:0b:91:e6:70:dd:34:64:9d:12:4b:db: 0c:02:a4:d8:45:cf:12:8e:6e:cd:ee:fe:28:23:50:29:d2:66: 91:69:16:10 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUJnmRwa3v4SM6HEPLo3kmqOht7EgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDQTczMDkyMzQ0Q0E5QjZGNzRDMUE4M0Q2Qzc0Nzk2 MjE4NkM0NzAeFw0yNjA3MjgwODMwNTVaFw0yNjA3MjkwODM5NTVaMDMxMTAvBgNV BAMTKDE4OTUzOTQ1RjQxRjJCRThBNUFBOUUzOURCNTVDNTk5MkM4MkZCOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqp2I0OtkFOYu8KKAuKePqV0F1 ZG5UNUwQ11kWt+l6WVjT/gdyJlSmO0Jmo2nZw3tb9JwgXDS5rTadKc5IC+Tvg/KK qaqalSFZwJJ0JuNqRZqrNHVq8s4UpiTQ28a5pyLkhw12ckZzyCHNB56sAQu6rA8r PPLo1s/bmeIgSFfg3mMVVoQlAX1q6//j8EyPzPD80hf7ZcfyPyfadZiqvhdn85Gv LxWJP8c0ERGOhzppqUGedNDvKCJYux0jiFMx+YyofWDSUdm10qeGkU59RrmnJtuN UE2HFzLzY11w/wnB4ww5vb2r/+nE4VrPEoKe2plsudRpSdACNo99UEGFdPg5AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUGJU5RfQfK+ilqp4521XFmSyC+5EwHwYDVR0j BBgwFoAUzspzCSNEyptvdMGoPWx0eWIYbEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjI4NWJlNmYtNTExMS00YzNjLTgyNTQtZDJlNDE1NTEw Mjg0LzIvQ0VDQTczMDkyMzQ0Q0E5QjZGNzRDMUE4M0Q2Qzc0Nzk2MjE4NkM0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9DRUNBNzMwOTIzNDRDQTlCNkY3NEMxQTgz RDZDNzQ3OTYyMTg2QzQ3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzIyODViZTZmLTUxMTEtNGMzYy04MjU0LWQyZTQxNTUxMDI4NC8yL0NFQ0E3MzA5 MjM0NENBOUI2Rjc0QzFBODNENkM3NDc5NjIxODZDNDcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAzhtgU WkCWb5S6PDTi1Gh8nOBinXDMJBDtM8vu6FfXW7Y/OARu/9klob/Mf6tkhn0h/vvt y7e4VY5Mt1A1PDL4TJUyMc8W0Zjkfor8WWQ/KNCqWEs+0ivE88Y0JU4qK8wLJQb/ mYEI8C4pOypnWGKj1dQvu2Kj74QHi3TqajZnqRicAsZQe4aLW4a5N2a2e6I84S0f gKXdh6xr9jzaKjc+8YUJfbtoFVx4NKLr4of512f28POSOcVhjS7utR9sSJjErGvo 2Ib2r0zbaGe48w3teA7ss/9jr7+sweVtq16sC5HmcN00ZJ0SS9sMAqTYRc8Sjm7N 7v4oI1Ap0maRaRYQ -----END CERTIFICATE-----Generated at Tue Jul 28 19:38:24 2026 by rpki-client