$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft File: ECC2D1AF90663968C0983906E34503A5F531FBA9.mft (raw, json) Hash identifier: ExHHgajM5ySQV0Nrm+YkG+I6XUbbU7W24O77NF4SGcc= Subject key identifier: 32:31:C7:5C:B9:AF:7D:A6:46:19:BD:D2:41:FD:78:8A:3F:F0:94:E6 Authority key identifier: EC:C2:D1:AF:90:66:39:68:C0:98:39:06:E3:45:03:A5:F5:31:FB:A9 Certificate issuer: /CN=ECC2D1AF90663968C0983906E34503A5F531FBA9 Certificate serial: 70B9BCCE78F110F389596A67D9D82589762E27C8 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/ECC2D1AF90663968C0983906E34503A5F531FBA9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft Manifest number: 46 Signing time: Sun 01 Mar 2026 04:42:55 +0000 Manifest this update: Sun 01 Mar 2026 04:37:55 +0000 Manifest next update: Mon 02 Mar 2026 05:56:55 +0000 Files and hashes: 1: ECC2D1AF90663968C0983906E34503A5F531FBA9.crl (hash: U9R7Sz40QMewCR2fejVeaaquBQE4lgauAtbpkB208jI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.crl rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/ECC2D1AF90663968C0983906E34503A5F531FBA9.cer rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 05:56:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:b9:bc:ce:78:f1:10:f3:89:59:6a:67:d9:d8:25:89:76:2e:27:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ECC2D1AF90663968C0983906E34503A5F531FBA9 Validity Not Before: Mar 1 04:37:55 2026 GMT Not After : Mar 2 05:56:55 2026 GMT Subject: CN=3231C75CB9AF7DA64619BDD241FD788A3FF094E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d3:70:93:a8:5c:f7:60:9a:f7:93:d5:cf:ee: 9c:98:d6:0e:f2:34:56:be:e4:01:1e:42:5c:53:bd: 66:ea:4e:8a:75:d3:a8:17:84:19:39:2d:3b:86:26: dd:ee:2c:42:95:20:03:ee:04:dc:a0:c4:b3:e7:b5: 3e:dc:34:1c:98:1c:97:e2:6a:39:06:74:19:18:03: ac:c3:f2:88:f1:f2:65:a3:71:8a:3b:aa:3b:2c:06: 1f:4a:f0:0a:b5:4e:29:e7:62:5c:7b:cc:25:bd:68: 26:7d:6e:62:64:73:e2:95:c6:b3:88:7b:82:9d:44: 6b:64:37:c0:7a:d1:ff:9f:1a:ea:ff:8c:bc:eb:ba: 5d:5b:fa:06:b7:18:6b:fd:40:ce:46:d2:eb:c9:eb: 59:95:e0:be:34:61:14:08:9c:40:f7:e5:ae:53:9c: d1:8b:83:70:2e:33:ad:cd:68:1a:2d:dd:5b:0d:38: b2:43:bf:e0:41:95:f9:86:07:39:5d:a3:7c:e0:57: c4:49:09:34:0f:2d:b1:31:12:d8:26:0c:03:37:8c: 79:88:45:a4:0e:2b:58:e8:83:63:d8:55:52:e9:a7: f3:5c:b9:26:39:a3:5c:67:55:fe:ab:11:38:2a:33: 9f:4f:9f:71:67:44:70:c7:a3:0d:94:60:e8:45:36: 84:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:31:C7:5C:B9:AF:7D:A6:46:19:BD:D2:41:FD:78:8A:3F:F0:94:E6 X509v3 Authority Key Identifier: keyid:EC:C2:D1:AF:90:66:39:68:C0:98:39:06:E3:45:03:A5:F5:31:FB:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/ECC2D1AF90663968C0983906E34503A5F531FBA9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:9b:24:79:09:8d:5b:d4:27:e9:c1:ce:29:b4:18:d1:de:ab: a5:48:8c:e7:60:a2:59:10:fc:2c:bf:c5:5c:2e:dd:9a:9a:6b: 55:ef:83:19:66:1b:ba:21:a5:af:f7:3f:08:7a:f0:d8:2a:18: 2a:78:f0:b3:8c:8b:64:1f:2a:b0:24:0d:48:38:60:72:ef:60: f8:63:01:47:85:40:2d:f4:da:16:66:ba:05:c6:fd:91:eb:82: 6f:db:31:c9:c3:82:0a:91:f3:c6:bf:86:bc:bb:31:3d:2a:58: 38:cf:6d:a0:95:f5:b6:94:cc:00:9f:c4:25:23:23:f5:b6:e3: 9d:bc:ad:6a:fa:02:c4:41:c9:9d:8b:87:c4:3d:bb:30:15:ff: f0:db:a3:c7:4f:01:45:47:e2:bd:3a:16:75:be:99:81:6b:0a: 30:b9:c5:8d:68:14:d8:ed:76:6a:45:45:d4:a4:ff:55:d3:15: 18:11:58:6d:bb:c4:01:7b:29:1c:26:6f:09:de:ba:53:49:46: d7:81:1f:11:d5:6e:3b:c1:93:5b:64:f7:97:f2:5b:86:18:41: 4c:62:9a:7b:19:d9:18:5a:a4:6a:99:4c:46:41:c9:60:a5:c5: 1f:4c:bf:51:67:97:3e:40:9a:ad:fd:ab:90:45:8f:80:86:4e: c4:b9:23:51 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUcLm8znjxEPOJWWpn2dgliXYuJ8gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUNDMkQxQUY5MDY2Mzk2OEMwOTgzOTA2RTM0NTAzQTVG NTMxRkJBOTAeFw0yNjAzMDEwNDM3NTVaFw0yNjAzMDIwNTU2NTVaMDMxMTAvBgNV BAMTKDMyMzFDNzVDQjlBRjdEQTY0NjE5QkREMjQxRkQ3ODhBM0ZGMDk0RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR03CTqFz3YJr3k9XP7pyY1g7y NFa+5AEeQlxTvWbqTop106gXhBk5LTuGJt3uLEKVIAPuBNygxLPntT7cNByYHJfi ajkGdBkYA6zD8ojx8mWjcYo7qjssBh9K8Aq1TinnYlx7zCW9aCZ9bmJkc+KVxrOI e4KdRGtkN8B60f+fGur/jLzrul1b+ga3GGv9QM5G0uvJ61mV4L40YRQInED35a5T nNGLg3AuM63NaBot3VsNOLJDv+BBlfmGBzldo3zgV8RJCTQPLbExEtgmDAM3jHmI RaQOK1jog2PYVVLpp/NcuSY5o1xnVf6rETgqM59Pn3FnRHDHow2UYOhFNoTFAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUMjHHXLmvfaZGGb3SQf14ij/wlOYwHwYDVR0j BBgwFoAU7MLRr5BmOWjAmDkG40UDpfUx+6kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTUxN2I1ZDAtMzMxNy00YjQ5LThlYzUtYmU5MGJjNzAw NjJmLzMvRUNDMkQxQUY5MDY2Mzk2OEMwOTgzOTA2RTM0NTAzQTVGNTMxRkJBOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODFmOTc4Mi04OThlLTRi ODMtOTVlNi00ZmY0YWI3NWM5ZGMvMi9FQ0MyRDFBRjkwNjYzOTY4QzA5ODM5MDZF MzQ1MDNBNUY1MzFGQkE5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE1MTdiNWQwLTMzMTctNGI0OS04ZWM1LWJlOTBiYzcwMDYyZi8zL0VDQzJEMUFG OTA2NjM5NjhDMDk4MzkwNkUzNDUwM0E1RjUzMUZCQTkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBZmyR5 CY1b1Cfpwc4ptBjR3qulSIznYKJZEPwsv8VcLt2ammtV74MZZhu6IaWv9z8IevDY KhgqePCzjItkHyqwJA1IOGBy72D4YwFHhUAt9NoWZroFxv2R64Jv2zHJw4IKkfPG v4a8uzE9Klg4z22glfW2lMwAn8QlIyP1tuOdvK1q+gLEQcmdi4fEPbswFf/w26PH TwFFR+K9OhZ1vpmBawowucWNaBTY7XZqRUXUpP9V0xUYEVhtu8QBeykcJm8J3rpT SUbXgR8R1W47wZNbZPeX8luGGEFMYpp7GdkYWqRqmUxGQclgpcUfTL9RZ5c+QJqt /auQRY+Ahk7EuSNR -----END CERTIFICATE-----Generated at Mon Mar 2 00:00:47 2026 by rpki-client