$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft File: CECA73092344CA9B6F74C1A83D6C747962186C47.mft (raw, json) Hash identifier: wDC06xaIIn8/YFdhKNz30my5ucOdHxqR5NtaaN/tJEE= Subject key identifier: 10:C2:11:24:10:E2:2F:99:5D:E0:DB:56:73:F6:41:FB:F5:ED:5A:C6 Authority key identifier: CE:CA:73:09:23:44:CA:9B:6F:74:C1:A8:3D:6C:74:79:62:18:6C:47 Certificate issuer: /CN=CECA73092344CA9B6F74C1A83D6C747962186C47 Certificate serial: 77DDA0915F22B7C8766C470FCCA13D6F1E2C97A7 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/CECA73092344CA9B6F74C1A83D6C747962186C47.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft Manifest number: 0156 Signing time: Fri 25 Sep 2026 00:50:49 +0000 Manifest this update: Fri 25 Sep 2026 00:45:49 +0000 Manifest next update: Sat 26 Sep 2026 01:21:49 +0000 Files and hashes: 1: CECA73092344CA9B6F74C1A83D6C747962186C47.crl (hash: PpQlrg9zUjCeC8kdyUTa6D/IOzmlPHzD6nTXXGjT3Gs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.crl rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/CECA73092344CA9B6F74C1A83D6C747962186C47.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 23:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:dd:a0:91:5f:22:b7:c8:76:6c:47:0f:cc:a1:3d:6f:1e:2c:97:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CECA73092344CA9B6F74C1A83D6C747962186C47 Validity Not Before: Sep 25 00:45:49 2026 GMT Not After : Sep 26 01:21:49 2026 GMT Subject: CN=10C2112410E22F995DE0DB5673F641FBF5ED5AC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b4:b8:b1:fa:69:6c:5f:73:51:c6:c5:23:3a: 63:08:68:1d:fe:7f:b4:7f:3b:12:09:45:b1:38:d2: af:d4:53:03:b1:91:96:7f:b2:c8:31:17:d0:ca:44: 3b:90:c5:36:54:ab:07:b8:8d:56:81:40:ec:3c:3c: e7:c9:ea:f9:80:f4:85:9e:53:3f:f4:d9:29:2d:f7: e0:5c:69:c3:ae:6d:a6:16:1a:4e:35:91:37:39:65: d4:34:6e:5d:8a:c5:db:3a:4b:2a:5d:a4:5f:21:7b: 44:c6:2c:22:3e:bd:fe:c5:08:72:46:14:3a:f2:09: 23:24:9d:b0:24:3b:f6:ad:c1:cd:8a:68:8d:b6:84: a6:67:ec:89:a4:c3:93:9f:98:00:09:dc:67:32:62: 86:51:a0:f1:72:26:d3:f7:cf:9a:7e:f0:49:9a:4b: 53:19:08:69:74:32:50:25:15:b3:1c:4a:a7:e3:35: cb:7c:7e:8b:df:9c:d7:0a:0d:8b:e2:e6:39:36:4d: fd:bb:24:57:5f:c6:36:1e:40:62:03:2a:a6:ab:0e: 20:46:11:a3:bc:68:26:07:96:4a:ed:9c:01:42:37: e4:d0:74:5b:c2:71:5f:ec:94:e1:a2:ab:75:f9:23: 22:fd:f8:5a:64:58:9a:22:d5:30:e8:0b:9e:07:c9: f2:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:C2:11:24:10:E2:2F:99:5D:E0:DB:56:73:F6:41:FB:F5:ED:5A:C6 X509v3 Authority Key Identifier: keyid:CE:CA:73:09:23:44:CA:9B:6F:74:C1:A8:3D:6C:74:79:62:18:6C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/CECA73092344CA9B6F74C1A83D6C747962186C47.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:10:ba:ff:9f:d1:d4:23:5b:02:fd:b1:29:b2:6b:9b:2b:88: 16:90:f0:75:9c:ab:cd:13:e6:80:77:a5:31:e8:5c:d2:40:03: 91:1f:4a:d0:c7:c9:c7:ee:c4:74:c8:1e:71:a2:31:43:18:e3: a0:85:15:6c:5d:0f:b4:2f:5a:77:5c:e5:63:94:f3:3c:15:d4: 00:30:6d:65:2b:60:0c:37:30:5f:05:ae:89:7a:d0:95:dc:a2: c1:44:c2:71:6e:53:7c:d7:df:86:ff:47:bf:30:06:fd:89:dc: f2:29:ef:ef:6f:b9:01:99:89:fb:12:af:5d:ab:ab:e2:30:78: 07:85:80:9a:1c:45:0c:ff:34:32:68:8e:1e:63:94:7a:6d:8e: 2e:1d:e8:99:5a:8d:db:be:e4:0d:78:9d:d7:8c:e8:c3:c1:ac: df:37:96:55:59:81:c6:50:14:c8:09:3d:78:4e:07:9b:72:84: 60:ff:e0:eb:f2:31:ef:c5:9a:82:41:c4:dd:6c:39:cf:59:5b: b4:65:f5:13:98:17:ce:62:4d:1f:3c:3d:df:2b:56:02:95:a9: 0b:bf:a0:f5:21:e3:8e:05:18:49:eb:70:b3:6a:a6:ba:ae:b3: 85:a3:c1:79:e0:dd:8b:10:29:66:79:ae:21:54:ae:81:d9:22: d5:ee:85:24 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUd92gkV8it8h2bEcPzKE9bx4sl6cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDQTczMDkyMzQ0Q0E5QjZGNzRDMUE4M0Q2Qzc0Nzk2 MjE4NkM0NzAeFw0yNjA5MjUwMDQ1NDlaFw0yNjA5MjYwMTIxNDlaMDMxMTAvBgNV BAMTKDEwQzIxMTI0MTBFMjJGOTk1REUwREI1NjczRjY0MUZCRjVFRDVBQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCotLix+mlsX3NRxsUjOmMIaB3+ f7R/OxIJRbE40q/UUwOxkZZ/ssgxF9DKRDuQxTZUqwe4jVaBQOw8POfJ6vmA9IWe Uz/02Skt9+BcacOubaYWGk41kTc5ZdQ0bl2Kxds6SypdpF8he0TGLCI+vf7FCHJG FDryCSMknbAkO/atwc2KaI22hKZn7Imkw5OfmAAJ3GcyYoZRoPFyJtP3z5p+8Ema S1MZCGl0MlAlFbMcSqfjNct8fovfnNcKDYvi5jk2Tf27JFdfxjYeQGIDKqarDiBG EaO8aCYHlkrtnAFCN+TQdFvCcV/slOGiq3X5IyL9+FpkWJoi1TDoC54HyfJlAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUEMIRJBDiL5ld4NtWc/ZB+/XtWsYwHwYDVR0j BBgwFoAUzspzCSNEyptvdMGoPWx0eWIYbEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjI4NWJlNmYtNTExMS00YzNjLTgyNTQtZDJlNDE1NTEw Mjg0LzIvQ0VDQTczMDkyMzQ0Q0E5QjZGNzRDMUE4M0Q2Qzc0Nzk2MjE4NkM0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9DRUNBNzMwOTIzNDRDQTlCNkY3NEMxQTgz RDZDNzQ3OTYyMTg2QzQ3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzIyODViZTZmLTUxMTEtNGMzYy04MjU0LWQyZTQxNTUxMDI4NC8yL0NFQ0E3MzA5 MjM0NENBOUI2Rjc0QzFBODNENkM3NDc5NjIxODZDNDcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCHELr/ n9HUI1sC/bEpsmubK4gWkPB1nKvNE+aAd6Ux6FzSQAORH0rQx8nH7sR0yB5xojFD GOOghRVsXQ+0L1p3XOVjlPM8FdQAMG1lK2AMNzBfBa6JetCV3KLBRMJxblN819+G /0e/MAb9idzyKe/vb7kBmYn7Eq9dq6viMHgHhYCaHEUM/zQyaI4eY5R6bY4uHeiZ Wo3bvuQNeJ3XjOjDwazfN5ZVWYHGUBTICT14TgebcoRg/+Dr8jHvxZqCQcTdbDnP WVu0ZfUTmBfOYk0fPD3fK1YClakLv6D1IeOOBRhJ63Czaqa6rrOFo8F54N2LEClm ea4hVK6B2SLV7oUk -----END CERTIFICATE-----Generated at Fri Sep 25 09:03:35 2026 by rpki-client