$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft File: ECC2D1AF90663968C0983906E34503A5F531FBA9.mft (raw, json) Hash identifier: YKAsiH7RN4O17LbdQDJA6qAqTmcGgi4ZMNWvVPEAh1M= Subject key identifier: 70:0D:D5:81:07:58:4E:28:21:01:81:36:8C:EA:66:F1:6F:DC:38:21 Authority key identifier: EC:C2:D1:AF:90:66:39:68:C0:98:39:06:E3:45:03:A5:F5:31:FB:A9 Certificate issuer: /CN=ECC2D1AF90663968C0983906E34503A5F531FBA9 Certificate serial: 4CC115294076A6F4589FD7CA827155E386493DCB Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/ECC2D1AF90663968C0983906E34503A5F531FBA9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft Manifest number: D0 Signing time: Fri 12 Jun 2026 19:46:42 +0000 Manifest this update: Fri 12 Jun 2026 19:41:42 +0000 Manifest next update: Sat 13 Jun 2026 23:18:42 +0000 Files and hashes: 1: ECC2D1AF90663968C0983906E34503A5F531FBA9.crl (hash: nMSfi6xnIS8iO/wJJjGPzYYfxD9bI3TrX8i4G1B1ssk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.crl rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/ECC2D1AF90663968C0983906E34503A5F531FBA9.cer rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 23:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:c1:15:29:40:76:a6:f4:58:9f:d7:ca:82:71:55:e3:86:49:3d:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ECC2D1AF90663968C0983906E34503A5F531FBA9 Validity Not Before: Jun 12 19:41:42 2026 GMT Not After : Jun 13 23:18:42 2026 GMT Subject: CN=700DD58107584E28210181368CEA66F16FDC3821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:bb:29:3b:b5:b4:c3:9f:ef:66:ef:17:29:8e: 24:8d:86:65:26:5b:86:f9:c6:2d:f6:e7:10:41:0b: 2a:3f:7d:db:aa:3b:35:5c:ce:af:87:de:36:9f:6d: 34:db:f0:db:18:bc:66:88:04:57:f5:96:18:12:e7: 57:e4:15:b0:80:6d:e3:2d:82:6d:a7:e4:2b:67:39: c3:af:c8:df:e3:8e:69:c0:b7:3a:ca:48:1b:14:c0: 96:c8:94:29:78:52:4f:fb:d4:ea:f3:33:62:b4:a7: 83:4c:e5:1e:9a:82:a7:35:08:ce:53:66:8a:e0:20: e2:c6:73:01:1a:f9:06:fd:e2:a5:a4:88:cf:15:f5: dd:29:2c:ed:c0:36:39:d0:ee:a5:3f:6c:81:04:d3: fe:7b:7d:7f:3b:78:47:3f:0e:b3:bb:8a:49:7b:d7: 86:e4:7b:e5:c0:6c:86:1e:db:d3:22:1e:32:66:3f: 6b:23:a1:2b:f4:d9:d8:d6:7e:9b:e8:0c:30:3e:d1: c2:6f:67:3d:ca:cd:2b:c2:9c:14:a1:95:df:b7:d9: 4c:71:57:24:ea:43:0f:8e:98:26:5d:5c:66:bd:0d: 62:b2:9a:4f:f6:33:ae:5f:b1:92:f4:a2:28:0b:b1: 26:2d:c2:4a:45:5d:54:c6:88:53:5b:80:d3:fe:f6: 21:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:0D:D5:81:07:58:4E:28:21:01:81:36:8C:EA:66:F1:6F:DC:38:21 X509v3 Authority Key Identifier: keyid:EC:C2:D1:AF:90:66:39:68:C0:98:39:06:E3:45:03:A5:F5:31:FB:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/ECC2D1AF90663968C0983906E34503A5F531FBA9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:fe:fa:d9:b2:f9:e4:bf:a6:ae:75:42:9d:ba:45:5a:b4:26: 9e:50:70:9e:be:a8:d3:96:49:96:77:cc:b9:50:cd:9a:52:68: 14:55:75:0a:95:a8:e4:f8:71:92:c2:8f:a4:97:d6:1c:c6:88: b5:11:6a:fd:c2:68:d7:a6:51:d1:e8:8e:d6:90:d1:30:03:c8: 51:16:0b:1f:53:c9:08:c1:5c:3b:ac:c3:65:87:07:7e:26:e3: ae:fe:5b:00:51:17:0d:a3:f4:ac:fe:d3:98:e4:b4:4b:1b:a6: 67:83:fc:39:d4:2b:9c:72:2c:90:74:63:89:70:d7:0c:d7:d3: 5b:ef:4b:89:4f:dc:fb:6f:31:61:2a:af:de:4e:79:4c:a5:34: 89:3f:fc:11:15:2d:35:1a:4b:da:c4:7f:85:dc:b8:64:ff:a7: 13:58:01:44:96:87:d4:f9:f7:1a:42:82:ff:5c:fc:69:3a:a7: 68:b0:83:1e:de:f8:d3:3e:c2:fe:1c:a3:34:11:85:1b:16:3d: 6d:2e:eb:58:9f:d7:2a:0b:88:5c:f7:67:21:1f:9a:40:e0:fc: 15:67:29:d4:42:20:eb:74:a7:4e:1a:68:d0:32:ef:08:57:65: e3:85:e2:bc:31:1e:68:c9:a5:58:b5:f3:b5:e0:b1:a5:0e:b8: 80:88:e1:f5 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUTMEVKUB2pvRYn9fKgnFV44ZJPcswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUNDMkQxQUY5MDY2Mzk2OEMwOTgzOTA2RTM0NTAzQTVG NTMxRkJBOTAeFw0yNjA2MTIxOTQxNDJaFw0yNjA2MTMyMzE4NDJaMDMxMTAvBgNV BAMTKDcwMERENTgxMDc1ODRFMjgyMTAxODEzNjhDRUE2NkYxNkZEQzM4MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtuyk7tbTDn+9m7xcpjiSNhmUm W4b5xi325xBBCyo/fduqOzVczq+H3jafbTTb8NsYvGaIBFf1lhgS51fkFbCAbeMt gm2n5CtnOcOvyN/jjmnAtzrKSBsUwJbIlCl4Uk/71OrzM2K0p4NM5R6agqc1CM5T ZorgIOLGcwEa+Qb94qWkiM8V9d0pLO3ANjnQ7qU/bIEE0/57fX87eEc/DrO7ikl7 14bke+XAbIYe29MiHjJmP2sjoSv02djWfpvoDDA+0cJvZz3KzSvCnBShld+32Uxx VyTqQw+OmCZdXGa9DWKymk/2M65fsZL0oigLsSYtwkpFXVTGiFNbgNP+9iEdAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUcA3VgQdYTighAYE2jOpm8W/cOCEwHwYDVR0j BBgwFoAU7MLRr5BmOWjAmDkG40UDpfUx+6kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTUxN2I1ZDAtMzMxNy00YjQ5LThlYzUtYmU5MGJjNzAw NjJmLzMvRUNDMkQxQUY5MDY2Mzk2OEMwOTgzOTA2RTM0NTAzQTVGNTMxRkJBOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODFmOTc4Mi04OThlLTRi ODMtOTVlNi00ZmY0YWI3NWM5ZGMvMi9FQ0MyRDFBRjkwNjYzOTY4QzA5ODM5MDZF MzQ1MDNBNUY1MzFGQkE5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE1MTdiNWQwLTMzMTctNGI0OS04ZWM1LWJlOTBiYzcwMDYyZi8zL0VDQzJEMUFG OTA2NjM5NjhDMDk4MzkwNkUzNDUwM0E1RjUzMUZCQTkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAR/vrZ svnkv6audUKdukVatCaeUHCevqjTlkmWd8y5UM2aUmgUVXUKlajk+HGSwo+kl9Yc xoi1EWr9wmjXplHR6I7WkNEwA8hRFgsfU8kIwVw7rMNlhwd+JuOu/lsAURcNo/Ss /tOY5LRLG6Zng/w51CucciyQdGOJcNcM19Nb70uJT9z7bzFhKq/eTnlMpTSJP/wR FS01GkvaxH+F3Lhk/6cTWAFElofU+fcaQoL/XPxpOqdosIMe3vjTPsL+HKM0EYUb Fj1tLutYn9cqC4hc92chH5pA4PwVZynUQiDrdKdOGmjQMu8IV2XjheK8MR5oyaVY tfO14LGlDriAiOH1 -----END CERTIFICATE-----Generated at Sat Jun 13 13:07:24 2026 by rpki-client