$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft File: ECC2D1AF90663968C0983906E34503A5F531FBA9.mft (raw, json) Hash identifier: HKldDnNZZhELPmqHDbwchWZY3sigANo7OspE7uxmDLs= Subject key identifier: C6:8B:F2:1A:F1:FD:DA:82:4E:EE:59:B8:3A:B3:A3:D0:79:98:BA:93 Authority key identifier: EC:C2:D1:AF:90:66:39:68:C0:98:39:06:E3:45:03:A5:F5:31:FB:A9 Certificate issuer: /CN=ECC2D1AF90663968C0983906E34503A5F531FBA9 Certificate serial: 55CB8CDB8105F3FF1290DC1B3DDCA947E3B10DF2 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/ECC2D1AF90663968C0983906E34503A5F531FBA9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft Manifest number: 0158 Signing time: Tue 22 Sep 2026 00:21:50 +0000 Manifest this update: Tue 22 Sep 2026 00:16:50 +0000 Manifest next update: Wed 23 Sep 2026 03:53:50 +0000 Files and hashes: 1: ECC2D1AF90663968C0983906E34503A5F531FBA9.crl (hash: FQwv/vQmzMcwc3taRpkci7b5hlha394cxqjRejU9Hh0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.crl rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/ECC2D1AF90663968C0983906E34503A5F531FBA9.cer rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 14:40:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:cb:8c:db:81:05:f3:ff:12:90:dc:1b:3d:dc:a9:47:e3:b1:0d:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ECC2D1AF90663968C0983906E34503A5F531FBA9 Validity Not Before: Sep 22 00:16:50 2026 GMT Not After : Sep 23 03:53:50 2026 GMT Subject: CN=C68BF21AF1FDDA824EEE59B83AB3A3D07998BA93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:f6:5a:79:d1:f2:51:c6:0c:e1:bf:d6:cf:1e: 93:2e:c8:42:a7:17:42:14:95:e2:4c:f6:06:22:53: a4:fd:4a:93:53:c6:f5:68:bd:70:58:6a:87:e7:a3: ec:70:97:cc:80:1d:be:3a:22:6b:f4:8c:66:c9:93: 21:08:23:58:8c:81:30:7d:da:6a:af:a0:4c:ba:3f: 22:64:cb:66:1a:4f:82:aa:d2:12:47:f5:f0:4e:ce: 7a:20:d7:1f:a6:d7:bb:bb:b0:55:8d:3b:f4:d5:99: e2:73:a1:d9:c4:24:ee:95:c5:b4:a3:a6:dd:46:de: e3:79:a5:32:4e:d9:3c:5c:c2:a6:1a:2f:8d:e2:4d: 76:b1:2c:8c:02:53:e3:ac:17:75:23:a0:1e:f6:10: 18:d1:a9:dc:e4:9b:7f:2c:54:a2:95:c5:ec:bc:1b: d1:6b:51:81:5a:94:0c:35:eb:db:df:ed:c6:e5:bb: 0f:6b:8e:71:64:81:08:e6:f8:ed:d6:1c:c8:6f:37: 33:43:c8:e0:84:ee:8e:3c:dd:75:f0:91:10:74:c7: dc:ae:25:ea:34:d1:fc:84:dd:91:74:7a:a3:5c:2b: 0c:5a:95:28:cb:c8:9e:a4:fb:52:7c:4f:4e:0e:74: 5d:75:29:21:d7:57:0b:45:50:4b:17:f6:7a:a0:86: e2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:8B:F2:1A:F1:FD:DA:82:4E:EE:59:B8:3A:B3:A3:D0:79:98:BA:93 X509v3 Authority Key Identifier: keyid:EC:C2:D1:AF:90:66:39:68:C0:98:39:06:E3:45:03:A5:F5:31:FB:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/ECC2D1AF90663968C0983906E34503A5F531FBA9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:1d:f9:9d:9a:00:ac:06:38:6e:9e:93:58:23:e0:17:21:88: f7:ba:2b:b3:98:4a:10:85:8d:1b:21:24:35:07:2f:5d:f5:eb: 61:23:32:67:e0:e5:82:43:0d:c5:a0:48:71:27:77:22:fb:93: 44:62:4a:98:7a:d6:2a:b5:bc:dc:d3:00:ff:37:7b:65:82:f2: 5e:27:05:b4:19:eb:97:28:36:0c:57:54:96:7d:a4:77:77:1f: f6:be:a3:b7:3d:3e:b1:cb:dc:09:9c:69:8f:f8:45:51:51:5c: 7b:be:50:80:57:ac:17:f8:37:59:10:b4:08:5a:95:7a:d0:bd: d1:4e:f6:6c:66:5e:89:f9:74:8e:8b:00:79:72:88:5f:6c:6a: 66:5e:f0:f7:6b:3b:be:ae:63:68:cb:94:fa:50:a9:5b:e5:85: 1d:99:19:c1:85:b7:40:01:12:06:ef:f7:a0:0e:60:d7:8c:3e: 24:87:69:5d:db:45:66:f6:96:c1:42:6c:eb:cc:5f:1b:d8:16: 50:df:3e:0d:7c:f8:a6:c5:85:68:7e:9d:74:9e:c3:25:b8:b4: 79:c4:5a:90:f7:0d:f1:8d:11:75:e1:e6:60:3a:ad:7d:d5:9d: 96:e0:33:f3:5f:08:8c:44:72:ab:0e:ce:7f:c3:16:81:1d:8c: 2f:4a:7a:18 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUVcuM24EF8/8SkNwbPdypR+OxDfIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUNDMkQxQUY5MDY2Mzk2OEMwOTgzOTA2RTM0NTAzQTVG NTMxRkJBOTAeFw0yNjA5MjIwMDE2NTBaFw0yNjA5MjMwMzUzNTBaMDMxMTAvBgNV BAMTKEM2OEJGMjFBRjFGRERBODI0RUVFNTlCODNBQjNBM0QwNzk5OEJBOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt9lp50fJRxgzhv9bPHpMuyEKn F0IUleJM9gYiU6T9SpNTxvVovXBYaofno+xwl8yAHb46Imv0jGbJkyEII1iMgTB9 2mqvoEy6PyJky2YaT4Kq0hJH9fBOznog1x+m17u7sFWNO/TVmeJzodnEJO6VxbSj pt1G3uN5pTJO2TxcwqYaL43iTXaxLIwCU+OsF3UjoB72EBjRqdzkm38sVKKVxey8 G9FrUYFalAw169vf7cbluw9rjnFkgQjm+O3WHMhvNzNDyOCE7o483XXwkRB0x9yu Jeo00fyE3ZF0eqNcKwxalSjLyJ6k+1J8T04OdF11KSHXVwtFUEsX9nqghuIfAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUxovyGvH92oJO7lm4OrOj0HmYupMwHwYDVR0j BBgwFoAU7MLRr5BmOWjAmDkG40UDpfUx+6kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTUxN2I1ZDAtMzMxNy00YjQ5LThlYzUtYmU5MGJjNzAw NjJmLzMvRUNDMkQxQUY5MDY2Mzk2OEMwOTgzOTA2RTM0NTAzQTVGNTMxRkJBOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODFmOTc4Mi04OThlLTRi ODMtOTVlNi00ZmY0YWI3NWM5ZGMvMi9FQ0MyRDFBRjkwNjYzOTY4QzA5ODM5MDZF MzQ1MDNBNUY1MzFGQkE5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE1MTdiNWQwLTMzMTctNGI0OS04ZWM1LWJlOTBiYzcwMDYyZi8zL0VDQzJEMUFG OTA2NjM5NjhDMDk4MzkwNkUzNDUwM0E1RjUzMUZCQTkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA+Hfmd mgCsBjhunpNYI+AXIYj3uiuzmEoQhY0bISQ1By9d9ethIzJn4OWCQw3FoEhxJ3ci +5NEYkqYetYqtbzc0wD/N3tlgvJeJwW0GeuXKDYMV1SWfaR3dx/2vqO3PT6xy9wJ nGmP+EVRUVx7vlCAV6wX+DdZELQIWpV60L3RTvZsZl6J+XSOiwB5cohfbGpmXvD3 azu+rmNoy5T6UKlb5YUdmRnBhbdAARIG7/egDmDXjD4kh2ld20Vm9pbBQmzrzF8b 2BZQ3z4NfPimxYVofp10nsMluLR5xFqQ9w3xjRF14eZgOq191Z2W4DPzXwiMRHKr Ds5/wxaBHYwvSnoY -----END CERTIFICATE-----Generated at Tue Sep 22 08:38:56 2026 by rpki-client