$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft File: ECC2D1AF90663968C0983906E34503A5F531FBA9.mft (raw, json) Hash identifier: PJpQRstoT/ghe7TLO5pbOoAd+XVxg/fJNW/Iv8HzCKg= Subject key identifier: DF:2D:0A:FF:DC:88:7E:A3:08:E7:7F:E5:49:95:D7:0E:55:88:DD:ED Authority key identifier: EC:C2:D1:AF:90:66:39:68:C0:98:39:06:E3:45:03:A5:F5:31:FB:A9 Certificate issuer: /CN=ECC2D1AF90663968C0983906E34503A5F531FBA9 Certificate serial: 362B361D3D3EFC3D20E91DF15BB37393E2B80A73 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/ECC2D1AF90663968C0983906E34503A5F531FBA9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft Manifest number: 55 Signing time: Thu 12 Mar 2026 11:22:56 +0000 Manifest this update: Thu 12 Mar 2026 11:17:56 +0000 Manifest next update: Fri 13 Mar 2026 14:39:56 +0000 Files and hashes: 1: ECC2D1AF90663968C0983906E34503A5F531FBA9.crl (hash: Zqfno7ivnf1LE+oRysDbpa+LdTlVTrOhIummE1IMhMo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.crl rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/ECC2D1AF90663968C0983906E34503A5F531FBA9.cer rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Mar 2026 04:28:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:2b:36:1d:3d:3e:fc:3d:20:e9:1d:f1:5b:b3:73:93:e2:b8:0a:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ECC2D1AF90663968C0983906E34503A5F531FBA9 Validity Not Before: Mar 12 11:17:56 2026 GMT Not After : Mar 13 14:39:56 2026 GMT Subject: CN=DF2D0AFFDC887EA308E77FE54995D70E5588DDED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f5:b5:a0:2a:8d:47:fb:b8:3a:21:79:48:a7: aa:dd:b3:97:09:01:36:98:91:05:60:7a:32:0f:35: ef:e8:05:40:29:7a:1c:6d:b6:58:34:15:6b:3b:ed: 0e:c7:e4:00:f0:28:16:2d:04:5a:d3:cf:f0:9f:03: a9:08:1a:f5:7d:77:b1:19:fa:b0:c5:16:71:52:ca: a7:8d:b7:02:1a:24:91:21:fb:52:b3:26:a4:d0:5c: f2:3e:16:0f:95:d3:a8:13:dd:db:f3:49:80:0c:31: b2:d1:e9:e8:26:2c:49:0b:9b:90:4c:ad:06:39:44: eb:0b:fb:ba:35:3a:3f:94:24:8e:24:b8:c0:96:8e: 09:49:33:7f:2d:c4:87:8c:e7:7d:af:e3:8b:bc:02: 4e:52:5f:a0:45:16:ee:d0:f5:a0:64:ed:1b:be:1f: a4:51:1a:eb:c6:f6:9c:e5:be:14:b5:ad:05:0f:f1: f8:25:00:02:20:89:e8:3f:06:08:51:4c:9d:10:e2: 83:e2:f3:ec:82:15:bd:9a:63:bf:60:a3:0f:fd:98: 18:9c:98:12:6b:6f:06:5b:3f:ae:84:86:8a:3e:09: df:27:be:1d:67:2c:c3:a4:47:58:0d:7b:75:7d:51: 03:60:3a:25:3d:95:80:f0:ce:ce:e7:77:86:f5:96: 1c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:2D:0A:FF:DC:88:7E:A3:08:E7:7F:E5:49:95:D7:0E:55:88:DD:ED X509v3 Authority Key Identifier: keyid:EC:C2:D1:AF:90:66:39:68:C0:98:39:06:E3:45:03:A5:F5:31:FB:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/ECC2D1AF90663968C0983906E34503A5F531FBA9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:8b:ae:5b:4a:72:ad:3f:ea:76:56:ac:a8:ca:53:3e:07:6c: dc:8c:4c:63:69:a1:67:af:79:e7:b5:ed:32:5b:62:d9:04:6c: b1:c9:a7:38:4d:d8:8e:de:8a:f0:fa:f0:22:38:28:bc:46:72: df:7c:e8:56:4f:80:ec:3b:ee:d3:aa:94:44:1f:db:0c:b8:f2: 07:ee:ec:e2:ed:ad:f9:47:a1:94:eb:fd:41:1f:cd:2d:72:4a: 41:76:e6:50:93:b6:fd:9c:ea:22:4d:bd:fd:cd:8f:af:ed:aa: f5:f4:ef:b0:18:03:6e:68:c4:be:34:cb:95:16:6e:de:fc:ac: b4:f7:3e:e1:d5:7f:93:a1:f0:46:f1:bc:14:a4:9e:54:20:10: 8d:83:87:11:2c:93:11:50:88:c0:59:1c:60:22:45:0e:68:6b: a1:cd:9f:b8:43:a1:af:a8:8e:c2:ab:05:4d:b6:d5:62:43:e0: d6:5b:96:3b:c4:18:35:f5:0c:14:1d:eb:6f:d7:9b:c3:98:c6: dd:97:26:b0:fb:e3:8c:72:2d:34:c9:f1:5a:2f:27:4f:b8:b1: b0:de:db:62:31:2f:7a:da:d7:3d:23:4e:9a:ed:a6:82:3f:fb: d4:bb:b2:41:92:88:22:87:75:41:6d:64:7f:09:f4:ed:89:6e: ed:f7:14:c3 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUNis2HT0+/D0g6R3xW7Nzk+K4CnMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUNDMkQxQUY5MDY2Mzk2OEMwOTgzOTA2RTM0NTAzQTVG NTMxRkJBOTAeFw0yNjAzMTIxMTE3NTZaFw0yNjAzMTMxNDM5NTZaMDMxMTAvBgNV BAMTKERGMkQwQUZGREM4ODdFQTMwOEU3N0ZFNTQ5OTVENzBFNTU4OERERUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN9bWgKo1H+7g6IXlIp6rds5cJ ATaYkQVgejIPNe/oBUApehxttlg0FWs77Q7H5ADwKBYtBFrTz/CfA6kIGvV9d7EZ +rDFFnFSyqeNtwIaJJEh+1KzJqTQXPI+Fg+V06gT3dvzSYAMMbLR6egmLEkLm5BM rQY5ROsL+7o1Oj+UJI4kuMCWjglJM38txIeM532v44u8Ak5SX6BFFu7Q9aBk7Ru+ H6RRGuvG9pzlvhS1rQUP8fglAAIgieg/BghRTJ0Q4oPi8+yCFb2aY79gow/9mBic mBJrbwZbP66Ehoo+Cd8nvh1nLMOkR1gNe3V9UQNgOiU9lYDwzs7nd4b1lhzTAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU3y0K/9yIfqMI53/lSZXXDlWI3e0wHwYDVR0j BBgwFoAU7MLRr5BmOWjAmDkG40UDpfUx+6kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTUxN2I1ZDAtMzMxNy00YjQ5LThlYzUtYmU5MGJjNzAw NjJmLzMvRUNDMkQxQUY5MDY2Mzk2OEMwOTgzOTA2RTM0NTAzQTVGNTMxRkJBOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODFmOTc4Mi04OThlLTRi ODMtOTVlNi00ZmY0YWI3NWM5ZGMvMi9FQ0MyRDFBRjkwNjYzOTY4QzA5ODM5MDZF MzQ1MDNBNUY1MzFGQkE5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE1MTdiNWQwLTMzMTctNGI0OS04ZWM1LWJlOTBiYzcwMDYyZi8zL0VDQzJEMUFG OTA2NjM5NjhDMDk4MzkwNkUzNDUwM0E1RjUzMUZCQTkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCTi65b SnKtP+p2VqyoylM+B2zcjExjaaFnr3nnte0yW2LZBGyxyac4TdiO3orw+vAiOCi8 RnLffOhWT4DsO+7TqpREH9sMuPIH7uzi7a35R6GU6/1BH80tckpBduZQk7b9nOoi Tb39zY+v7ar19O+wGANuaMS+NMuVFm7e/Ky09z7h1X+TofBG8bwUpJ5UIBCNg4cR LJMRUIjAWRxgIkUOaGuhzZ+4Q6GvqI7CqwVNttViQ+DWW5Y7xBg19QwUHetv15vD mMbdlyaw++OMci00yfFaLydPuLGw3ttiMS962tc9I06a7aaCP/vUu7JBkogih3VB bWR/CfTtiW7t9xTD -----END CERTIFICATE-----Generated at Thu Mar 12 21:39:16 2026 by rpki-client