$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft File: ECC2D1AF90663968C0983906E34503A5F531FBA9.mft (raw, json) Hash identifier: rrcm2XiSAh24QR8enQ1+rOdnmcciugEpR3CtCJCy+P4= Subject key identifier: 9D:86:7C:C6:AC:A0:2F:7B:7E:AD:7E:EF:D6:3B:FA:1F:BA:ED:86:99 Authority key identifier: EC:C2:D1:AF:90:66:39:68:C0:98:39:06:E3:45:03:A5:F5:31:FB:A9 Certificate issuer: /CN=ECC2D1AF90663968C0983906E34503A5F531FBA9 Certificate serial: 6BB01A03A7C73820FBD163D8E6DF5982DC47B015 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/ECC2D1AF90663968C0983906E34503A5F531FBA9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft Manifest number: CE Signing time: Thu 11 Jun 2026 07:56:42 +0000 Manifest this update: Thu 11 Jun 2026 07:51:42 +0000 Manifest next update: Fri 12 Jun 2026 09:49:42 +0000 Files and hashes: 1: ECC2D1AF90663968C0983906E34503A5F531FBA9.crl (hash: iwosRU9m/2t6rc4ZMuzeqzOSXXK3HtR+6GLC3j8YhV4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.crl rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/ECC2D1AF90663968C0983906E34503A5F531FBA9.cer rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 09:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:b0:1a:03:a7:c7:38:20:fb:d1:63:d8:e6:df:59:82:dc:47:b0:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ECC2D1AF90663968C0983906E34503A5F531FBA9 Validity Not Before: Jun 11 07:51:42 2026 GMT Not After : Jun 12 09:49:42 2026 GMT Subject: CN=9D867CC6ACA02F7B7EAD7EEFD63BFA1FBAED8699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9d:56:69:de:9f:54:17:69:b0:08:06:84:26: 01:b6:09:28:2c:e9:77:18:89:50:af:98:f5:3c:94: 89:9f:b2:5e:c0:0e:ae:00:34:51:d6:5a:ed:d2:62: bc:6e:07:e1:c6:b3:bb:f1:64:06:a4:19:24:3b:90: e8:24:77:15:d1:56:18:94:ee:b3:47:73:90:3a:39: 60:a6:8f:e0:9b:20:1f:be:af:b4:e5:59:c3:41:ce: e9:ce:46:6f:12:0b:55:c8:55:ea:2f:4a:a3:25:54: e0:88:f7:04:87:de:8f:03:0c:62:b7:34:8e:14:a3: 4a:bb:66:d7:5a:97:94:c7:95:53:84:8f:6f:b7:bd: b4:15:cd:76:d9:4c:15:31:7c:e9:d2:d5:ef:bf:8a: 8f:07:13:b3:ce:c0:f0:b5:63:16:6c:97:91:89:b3: 05:14:86:4b:6a:32:ae:dc:33:f1:3b:9e:4c:42:b6: 2e:e0:a1:ba:ae:78:97:43:3e:3a:a2:67:63:4a:cf: 51:29:cc:e4:d6:2f:26:2a:79:ec:95:ad:04:29:55: c7:cd:c0:2d:78:0a:65:4b:29:21:c1:15:12:70:0b: 92:bd:37:3b:df:c9:d3:8b:b3:b0:89:97:21:68:25: 50:3e:ad:ac:da:4c:8a:b0:4f:3c:5a:c4:05:ee:48: 5a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:86:7C:C6:AC:A0:2F:7B:7E:AD:7E:EF:D6:3B:FA:1F:BA:ED:86:99 X509v3 Authority Key Identifier: keyid:EC:C2:D1:AF:90:66:39:68:C0:98:39:06:E3:45:03:A5:F5:31:FB:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/ECC2D1AF90663968C0983906E34503A5F531FBA9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:af:a5:58:94:3c:d1:ec:d7:e1:7b:6d:22:7a:9d:de:68:ce: 21:6d:33:0c:ea:18:ff:46:0e:3a:2d:31:4c:c8:f7:0b:1d:bf: d6:82:b8:6f:b7:89:72:05:cd:54:23:b6:b0:df:41:b7:9d:31: 53:4d:43:85:a3:49:25:fe:85:a4:f4:7c:31:f1:05:e7:e5:6b: 32:fc:07:74:7f:6f:64:99:63:b9:40:b9:bd:13:90:19:2d:76: 88:cc:4a:32:57:e8:4a:c4:9a:65:95:93:23:8b:7d:26:0d:4f: 9b:9d:e3:af:04:dd:e6:11:cd:1b:86:a1:0b:5a:1c:65:98:0b: d6:4d:04:f3:df:1b:98:de:df:0a:58:e2:7a:39:40:67:66:7d: b3:c8:7e:39:ea:eb:91:5b:58:33:a8:06:9d:69:24:9a:7a:ac: 7b:9d:88:dc:31:65:63:9e:1e:22:4d:1d:5b:05:67:c8:b0:8c: 0b:32:8c:d4:08:76:b6:ba:dc:4d:b1:05:64:c4:b2:64:2d:e3: fb:b6:12:72:a8:1a:12:09:f2:b3:6b:02:1f:bc:46:b1:33:da: 70:d8:42:54:86:10:da:fb:88:06:67:98:4b:dc:65:72:2a:a0: de:e1:c8:d6:7f:ce:cf:39:04:5d:73:7b:60:39:15:e2:21:23: 41:a9:c8:c7 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUa7AaA6fHOCD70WPY5t9ZgtxHsBUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUNDMkQxQUY5MDY2Mzk2OEMwOTgzOTA2RTM0NTAzQTVG NTMxRkJBOTAeFw0yNjA2MTEwNzUxNDJaFw0yNjA2MTIwOTQ5NDJaMDMxMTAvBgNV BAMTKDlEODY3Q0M2QUNBMDJGN0I3RUFEN0VFRkQ2M0JGQTFGQkFFRDg2OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKnVZp3p9UF2mwCAaEJgG2CSgs 6XcYiVCvmPU8lImfsl7ADq4ANFHWWu3SYrxuB+HGs7vxZAakGSQ7kOgkdxXRVhiU 7rNHc5A6OWCmj+CbIB++r7TlWcNBzunORm8SC1XIVeovSqMlVOCI9wSH3o8DDGK3 NI4Uo0q7Ztdal5THlVOEj2+3vbQVzXbZTBUxfOnS1e+/io8HE7POwPC1YxZsl5GJ swUUhktqMq7cM/E7nkxCti7gobqueJdDPjqiZ2NKz1EpzOTWLyYqeeyVrQQpVcfN wC14CmVLKSHBFRJwC5K9NzvfydOLs7CJlyFoJVA+razaTIqwTzxaxAXuSFppAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUnYZ8xqygL3t+rX7v1jv6H7rthpkwHwYDVR0j BBgwFoAU7MLRr5BmOWjAmDkG40UDpfUx+6kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTUxN2I1ZDAtMzMxNy00YjQ5LThlYzUtYmU5MGJjNzAw NjJmLzMvRUNDMkQxQUY5MDY2Mzk2OEMwOTgzOTA2RTM0NTAzQTVGNTMxRkJBOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODFmOTc4Mi04OThlLTRi ODMtOTVlNi00ZmY0YWI3NWM5ZGMvMi9FQ0MyRDFBRjkwNjYzOTY4QzA5ODM5MDZF MzQ1MDNBNUY1MzFGQkE5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE1MTdiNWQwLTMzMTctNGI0OS04ZWM1LWJlOTBiYzcwMDYyZi8zL0VDQzJEMUFG OTA2NjM5NjhDMDk4MzkwNkUzNDUwM0E1RjUzMUZCQTkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA2r6VY lDzR7Nfhe20iep3eaM4hbTMM6hj/Rg46LTFMyPcLHb/Wgrhvt4lyBc1UI7aw30G3 nTFTTUOFo0kl/oWk9Hwx8QXn5Wsy/Ad0f29kmWO5QLm9E5AZLXaIzEoyV+hKxJpl lZMji30mDU+bneOvBN3mEc0bhqELWhxlmAvWTQTz3xuY3t8KWOJ6OUBnZn2zyH45 6uuRW1gzqAadaSSaeqx7nYjcMWVjnh4iTR1bBWfIsIwLMozUCHa2utxNsQVkxLJk LeP7thJyqBoSCfKzawIfvEaxM9pw2EJUhhDa+4gGZ5hL3GVyKqDe4cjWf87POQRd c3tgORXiISNBqcjH -----END CERTIFICATE-----Generated at Thu Jun 11 22:58:40 2026 by rpki-client