$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft File: ECC2D1AF90663968C0983906E34503A5F531FBA9.mft (raw, json) Hash identifier: wz4ypHf0sin94TfGehOnkdSwqiNUUxyr7grbFLy955Y= Subject key identifier: 04:FE:F0:2A:6C:0D:E7:1B:37:17:1C:8B:0F:8A:06:EC:AD:BA:9D:CC Authority key identifier: EC:C2:D1:AF:90:66:39:68:C0:98:39:06:E3:45:03:A5:F5:31:FB:A9 Certificate issuer: /CN=ECC2D1AF90663968C0983906E34503A5F531FBA9 Certificate serial: 7EBBBE0BC1E699A1D812A81ED75EC6CF56A62D83 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/ECC2D1AF90663968C0983906E34503A5F531FBA9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft Manifest number: 010D Signing time: Tue 28 Jul 2026 15:15:02 +0000 Manifest this update: Tue 28 Jul 2026 15:10:02 +0000 Manifest next update: Wed 29 Jul 2026 17:09:02 +0000 Files and hashes: 1: ECC2D1AF90663968C0983906E34503A5F531FBA9.crl (hash: c+yvqj7Xnt2jCEQF29gEwzcdzR7Wnyf0k6hqn1mW34k=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.crl rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/ECC2D1AF90663968C0983906E34503A5F531FBA9.cer rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 17:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:bb:be:0b:c1:e6:99:a1:d8:12:a8:1e:d7:5e:c6:cf:56:a6:2d:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ECC2D1AF90663968C0983906E34503A5F531FBA9 Validity Not Before: Jul 28 15:10:02 2026 GMT Not After : Jul 29 17:09:02 2026 GMT Subject: CN=04FEF02A6C0DE71B37171C8B0F8A06ECADBA9DCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:de:9d:ae:e9:f2:ad:c7:f5:2a:11:8e:c8:bd: 3d:4c:08:51:62:7c:34:f1:eb:a7:7a:39:20:6a:93: 30:fb:74:31:76:1d:9c:15:83:03:4e:49:0a:37:20: 36:de:0d:2a:44:b3:80:b4:ec:e7:91:12:37:de:35: 55:e6:b3:21:dd:09:f6:4d:55:99:47:62:45:00:97: c9:91:5f:cc:48:2f:eb:8c:73:d6:d2:f6:33:4c:dd: 37:b4:d6:78:6b:f6:4f:90:09:d8:e2:c6:6e:6a:61: 96:d9:8d:6d:9c:39:09:84:37:8a:d5:9f:41:b4:2e: 4c:ba:f6:3b:ac:5d:dd:17:d5:2f:c3:5a:d3:d5:09: c2:06:e1:d5:e4:09:91:20:c0:7f:a7:68:b9:52:ce: d8:a7:48:a8:ce:2e:6f:9f:0e:1e:7f:4f:d1:07:05: 23:4c:8b:1c:75:38:5e:81:8b:81:a0:b8:43:7e:c0: 81:ed:2e:cf:df:b3:b6:b8:ec:48:40:c6:45:ae:2e: 3d:1e:bb:c3:9b:8b:62:72:1e:cf:75:58:36:27:94: 2f:ba:b7:52:c4:34:fc:a3:8c:c5:54:d0:60:27:c5: 32:d0:e2:2b:f0:7f:b9:04:37:c2:65:eb:ab:7f:e5: 3a:00:c6:a3:40:70:64:51:1c:b5:9a:ec:77:2c:2d: bc:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:FE:F0:2A:6C:0D:E7:1B:37:17:1C:8B:0F:8A:06:EC:AD:BA:9D:CC X509v3 Authority Key Identifier: keyid:EC:C2:D1:AF:90:66:39:68:C0:98:39:06:E3:45:03:A5:F5:31:FB:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/ECC2D1AF90663968C0983906E34503A5F531FBA9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:e7:07:4f:28:c5:f2:2c:71:5a:b2:83:06:a1:4c:3c:cd:76: 72:1f:46:82:d5:7c:85:50:d0:44:89:73:a7:39:83:d0:17:2a: e9:22:1f:eb:e4:8a:b6:a2:97:5e:4b:6a:d4:12:df:2c:f0:99: 00:c8:ea:39:7c:7c:d8:84:ab:7c:3c:31:c7:b8:f8:9e:96:e2: 79:37:17:ee:fd:fa:35:40:e1:f5:d7:00:92:81:ac:0f:90:b7: c9:86:54:8a:80:cc:80:58:cd:18:06:9b:07:ae:8f:8c:6b:c8: 58:c6:25:95:fb:fb:7b:72:b2:8f:c6:46:d4:44:c8:ac:a6:a9: bd:4a:94:46:7d:0b:b7:3a:4e:92:28:e8:99:aa:c1:fb:0a:0a: 06:36:29:61:79:52:b3:ba:74:c2:31:2e:88:83:88:54:8b:27: 31:90:e0:04:31:6b:ab:c1:c0:6d:4c:93:85:bf:2b:11:ea:f6: e0:9c:bc:d7:a3:61:d4:47:fb:0f:95:8c:2d:aa:ad:4a:0a:21: 1a:da:66:c3:6b:11:8e:5c:d1:67:83:11:73:5e:42:96:29:09: df:4a:09:5b:f3:3c:7e:fc:d8:d7:49:70:d4:9a:fa:55:f3:ec: 76:b8:c5:93:1b:99:33:a5:13:ee:d7:02:c7:3a:d8:a0:90:61: 43:ad:63:2e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUfru+C8HmmaHYEqge117Gz1amLYMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUNDMkQxQUY5MDY2Mzk2OEMwOTgzOTA2RTM0NTAzQTVG NTMxRkJBOTAeFw0yNjA3MjgxNTEwMDJaFw0yNjA3MjkxNzA5MDJaMDMxMTAvBgNV BAMTKDA0RkVGMDJBNkMwREU3MUIzNzE3MUM4QjBGOEEwNkVDQURCQTlEQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ3p2u6fKtx/UqEY7IvT1MCFFi fDTx66d6OSBqkzD7dDF2HZwVgwNOSQo3IDbeDSpEs4C07OeREjfeNVXmsyHdCfZN VZlHYkUAl8mRX8xIL+uMc9bS9jNM3Te01nhr9k+QCdjixm5qYZbZjW2cOQmEN4rV n0G0Lky69jusXd0X1S/DWtPVCcIG4dXkCZEgwH+naLlSztinSKjOLm+fDh5/T9EH BSNMixx1OF6Bi4GguEN+wIHtLs/fs7a47EhAxkWuLj0eu8Obi2JyHs91WDYnlC+6 t1LENPyjjMVU0GAnxTLQ4ivwf7kEN8Jl66t/5ToAxqNAcGRRHLWa7HcsLbxtAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUBP7wKmwN5xs3FxyLD4oG7K26ncwwHwYDVR0j BBgwFoAU7MLRr5BmOWjAmDkG40UDpfUx+6kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTUxN2I1ZDAtMzMxNy00YjQ5LThlYzUtYmU5MGJjNzAw NjJmLzMvRUNDMkQxQUY5MDY2Mzk2OEMwOTgzOTA2RTM0NTAzQTVGNTMxRkJBOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODFmOTc4Mi04OThlLTRi ODMtOTVlNi00ZmY0YWI3NWM5ZGMvMi9FQ0MyRDFBRjkwNjYzOTY4QzA5ODM5MDZF MzQ1MDNBNUY1MzFGQkE5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE1MTdiNWQwLTMzMTctNGI0OS04ZWM1LWJlOTBiYzcwMDYyZi8zL0VDQzJEMUFG OTA2NjM5NjhDMDk4MzkwNkUzNDUwM0E1RjUzMUZCQTkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCB5wdP KMXyLHFasoMGoUw8zXZyH0aC1XyFUNBEiXOnOYPQFyrpIh/r5Iq2opdeS2rUEt8s 8JkAyOo5fHzYhKt8PDHHuPieluJ5Nxfu/fo1QOH11wCSgawPkLfJhlSKgMyAWM0Y BpsHro+Ma8hYxiWV+/t7crKPxkbURMispqm9SpRGfQu3Ok6SKOiZqsH7CgoGNilh eVKzunTCMS6Ig4hUiycxkOAEMWurwcBtTJOFvysR6vbgnLzXo2HUR/sPlYwtqq1K CiEa2mbDaxGOXNFngxFzXkKWKQnfSglb8zx+/NjXSXDUmvpV8+x2uMWTG5kzpRPu 1wLHOtigkGFDrWMu -----END CERTIFICATE-----Generated at Wed Jul 29 04:27:36 2026 by rpki-client