$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft File: CECA73092344CA9B6F74C1A83D6C747962186C47.mft (raw, json) Hash identifier: kqZAfTeY9w7pb5WGVV4y13uVCuzNpd8AEAAzSwx/H5A= Subject key identifier: 4A:F0:37:03:4E:C5:71:13:F5:B6:76:53:E8:20:2F:53:07:BD:9B:5E Authority key identifier: CE:CA:73:09:23:44:CA:9B:6F:74:C1:A8:3D:6C:74:79:62:18:6C:47 Certificate issuer: /CN=CECA73092344CA9B6F74C1A83D6C747962186C47 Certificate serial: 124CD6270314D16295A79AC6214968E48B274009 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/CECA73092344CA9B6F74C1A83D6C747962186C47.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft Manifest number: CA Signing time: Fri 12 Jun 2026 19:41:38 +0000 Manifest this update: Fri 12 Jun 2026 19:36:38 +0000 Manifest next update: Sat 13 Jun 2026 21:06:38 +0000 Files and hashes: 1: CECA73092344CA9B6F74C1A83D6C747962186C47.crl (hash: DtxN557IxmIanO9iyleqvUGsEkd2wTiy9ijAVtZ1Jn4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.crl rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/CECA73092344CA9B6F74C1A83D6C747962186C47.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 21:06:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:4c:d6:27:03:14:d1:62:95:a7:9a:c6:21:49:68:e4:8b:27:40:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CECA73092344CA9B6F74C1A83D6C747962186C47 Validity Not Before: Jun 12 19:36:38 2026 GMT Not After : Jun 13 21:06:38 2026 GMT Subject: CN=4AF037034EC57113F5B67653E8202F5307BD9B5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ce:04:4e:97:6e:2d:6f:cd:f3:0a:e8:21:88: 18:3e:73:38:61:8a:91:13:77:8e:6a:14:a2:6a:11: 57:f8:7e:d2:ed:99:4a:aa:78:a3:f7:d1:a8:15:40: 2a:17:37:d6:d5:bf:75:1f:6a:a4:cb:8b:24:13:3f: 1c:91:db:1c:7c:fe:22:8f:01:12:21:61:70:b7:d3: cc:c6:b8:37:a8:99:cd:e7:6d:f4:09:84:a4:08:ca: 43:27:00:e8:78:00:2e:e7:9a:79:bf:bc:07:2f:e4: f5:37:6e:4c:68:6d:b0:27:62:8e:b3:57:a9:9e:78: 1e:31:46:29:f8:f1:98:3c:a9:a0:62:9f:a9:65:d1: cd:3d:13:3f:a0:7e:cb:c7:f6:f9:52:a1:89:e5:27: 3e:c3:9e:2a:2f:69:80:05:3f:78:a2:34:9b:94:d0: 69:be:39:e4:77:85:89:a3:88:a1:34:dc:b3:4a:b1: 48:a5:ed:25:c8:99:4a:30:ea:3e:0c:81:dd:fe:a7: 32:63:22:3f:51:3d:54:d1:12:8a:5f:72:0a:3f:64: 23:ef:79:5d:b7:b1:5a:b9:b4:52:4e:ec:72:4c:c3: 66:d0:eb:3d:57:38:81:a6:43:d2:a0:27:d7:f7:b9: a2:12:34:78:b9:09:b6:72:5c:51:4e:22:7e:fc:06: fe:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:F0:37:03:4E:C5:71:13:F5:B6:76:53:E8:20:2F:53:07:BD:9B:5E X509v3 Authority Key Identifier: keyid:CE:CA:73:09:23:44:CA:9B:6F:74:C1:A8:3D:6C:74:79:62:18:6C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/CECA73092344CA9B6F74C1A83D6C747962186C47.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:50:e8:7e:ab:f8:c8:b2:ba:56:24:ef:83:b7:34:44:58:5b: d1:48:cf:b8:87:bc:e8:e6:0a:49:73:2f:8e:58:c5:0e:91:60: bb:d7:4b:38:76:12:33:fd:82:e6:3f:ce:d9:4f:d4:8e:b0:1b: 59:e5:86:69:70:0a:87:1b:36:89:9e:04:a1:3c:0b:5b:76:93: 59:54:44:11:1f:04:30:43:17:ef:3a:5b:38:90:54:3a:9c:4c: df:89:96:7e:7b:d1:94:f9:15:f8:0b:e9:37:b9:fc:93:4e:98: d2:58:8f:bf:04:45:f2:b2:be:09:24:77:9a:3e:76:a3:be:91: 57:45:82:7a:cb:fc:3f:d3:1f:d4:4e:72:8b:15:e0:99:a2:61: ef:9d:bb:09:0d:3b:bb:3a:f3:c7:05:5b:fe:18:48:de:0e:6a: 09:f8:0d:d4:6e:68:c7:2f:2b:d1:b1:cf:35:44:32:95:b8:3e: 08:aa:72:a7:c8:cf:48:07:03:3b:3d:7c:19:db:41:ab:44:a7: 1a:a1:b2:cc:ac:ea:cf:b4:ea:2f:3f:d5:c1:1f:94:c6:32:96: 31:54:24:83:84:30:05:2e:62:2b:36:9e:e8:c0:24:cc:a3:29: dd:31:c6:19:43:f0:21:3a:13:23:c4:87:54:55:f3:de:96:bf: a4:52:3c:e4 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUEkzWJwMU0WKVp5rGIUlo5IsnQAkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDQTczMDkyMzQ0Q0E5QjZGNzRDMUE4M0Q2Qzc0Nzk2 MjE4NkM0NzAeFw0yNjA2MTIxOTM2MzhaFw0yNjA2MTMyMTA2MzhaMDMxMTAvBgNV BAMTKDRBRjAzNzAzNEVDNTcxMTNGNUI2NzY1M0U4MjAyRjUzMDdCRDlCNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5zgROl24tb83zCughiBg+czhh ipETd45qFKJqEVf4ftLtmUqqeKP30agVQCoXN9bVv3UfaqTLiyQTPxyR2xx8/iKP ARIhYXC308zGuDeomc3nbfQJhKQIykMnAOh4AC7nmnm/vAcv5PU3bkxobbAnYo6z V6meeB4xRin48Zg8qaBin6ll0c09Ez+gfsvH9vlSoYnlJz7DniovaYAFP3iiNJuU 0Gm+OeR3hYmjiKE03LNKsUil7SXImUow6j4Mgd3+pzJjIj9RPVTREopfcgo/ZCPv eV23sVq5tFJO7HJMw2bQ6z1XOIGmQ9KgJ9f3uaISNHi5CbZyXFFOIn78Bv4XAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUSvA3A07FcRP1tnZT6CAvUwe9m14wHwYDVR0j BBgwFoAUzspzCSNEyptvdMGoPWx0eWIYbEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjI4NWJlNmYtNTExMS00YzNjLTgyNTQtZDJlNDE1NTEw Mjg0LzIvQ0VDQTczMDkyMzQ0Q0E5QjZGNzRDMUE4M0Q2Qzc0Nzk2MjE4NkM0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9DRUNBNzMwOTIzNDRDQTlCNkY3NEMxQTgz RDZDNzQ3OTYyMTg2QzQ3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzIyODViZTZmLTUxMTEtNGMzYy04MjU0LWQyZTQxNTUxMDI4NC8yL0NFQ0E3MzA5 MjM0NENBOUI2Rjc0QzFBODNENkM3NDc5NjIxODZDNDcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAoUOh+ q/jIsrpWJO+DtzREWFvRSM+4h7zo5gpJcy+OWMUOkWC710s4dhIz/YLmP87ZT9SO sBtZ5YZpcAqHGzaJngShPAtbdpNZVEQRHwQwQxfvOls4kFQ6nEzfiZZ+e9GU+RX4 C+k3ufyTTpjSWI+/BEXysr4JJHeaPnajvpFXRYJ6y/w/0x/UTnKLFeCZomHvnbsJ DTu7OvPHBVv+GEjeDmoJ+A3UbmjHLyvRsc81RDKVuD4IqnKnyM9IBwM7PXwZ20Gr RKcaobLMrOrPtOovP9XBH5TGMpYxVCSDhDAFLmIrNp7owCTMoyndMcYZQ/AhOhMj xIdUVfPelr+kUjzk -----END CERTIFICATE-----Generated at Sat Jun 13 14:35:19 2026 by rpki-client