$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft File: ECC2D1AF90663968C0983906E34503A5F531FBA9.mft (raw, json) Hash identifier: nBMQsMAoWoe8o7jvLygQcMTpN+bxt5E8kTCNMrdDosg= Subject key identifier: 9F:A3:F2:40:06:FB:51:11:E0:AF:74:3C:80:5A:A6:AF:EB:64:CB:61 Authority key identifier: EC:C2:D1:AF:90:66:39:68:C0:98:39:06:E3:45:03:A5:F5:31:FB:A9 Certificate issuer: /CN=ECC2D1AF90663968C0983906E34503A5F531FBA9 Certificate serial: 52D10FCA120261D05BEA8479C095A267D2C0E224 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/ECC2D1AF90663968C0983906E34503A5F531FBA9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft Manifest number: 91 Signing time: Mon 27 Apr 2026 04:11:02 +0000 Manifest this update: Mon 27 Apr 2026 04:06:02 +0000 Manifest next update: Tue 28 Apr 2026 06:12:02 +0000 Files and hashes: 1: ECC2D1AF90663968C0983906E34503A5F531FBA9.crl (hash: SVE5B0zenbg3fVZayCP2znRnpeYaJbA2qaqNF9fvjac=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.crl rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/ECC2D1AF90663968C0983906E34503A5F531FBA9.cer rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 06:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:d1:0f:ca:12:02:61:d0:5b:ea:84:79:c0:95:a2:67:d2:c0:e2:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ECC2D1AF90663968C0983906E34503A5F531FBA9 Validity Not Before: Apr 27 04:06:02 2026 GMT Not After : Apr 28 06:12:02 2026 GMT Subject: CN=9FA3F24006FB5111E0AF743C805AA6AFEB64CB61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:cc:6a:95:a9:5a:e5:9d:d0:bb:a7:4c:2d:98: 20:22:ce:bf:f1:21:ce:9b:60:29:dd:11:d8:ea:72: 3a:a6:cd:47:c0:25:04:40:6c:a2:a0:e5:67:55:e1: 57:81:f9:4e:b2:0b:41:6d:11:d6:19:47:2f:9d:6b: 1c:84:80:db:87:f4:fb:01:fe:28:66:c1:30:8b:44: 8d:34:78:28:a4:1f:57:32:26:7c:91:c6:9a:c7:61: 48:96:fb:b6:7c:82:b7:bb:41:bf:95:8b:9f:7d:8f: 2f:c5:4e:3f:be:e3:b9:9f:01:b9:ce:1e:e6:3b:35: cf:14:ae:df:05:24:b8:47:cc:69:16:ac:08:43:e2: 31:ae:b4:1d:ee:c9:ce:a8:fa:3e:3e:fd:cd:05:2d: 00:a2:23:f8:f5:e2:a0:17:8a:dd:aa:51:89:2e:d4: 09:9e:ec:50:25:b3:62:3c:a0:d1:5f:f5:d0:e9:be: 86:88:77:82:62:fa:26:60:a0:e9:df:36:dd:d9:42: 9c:02:a5:65:b0:75:e3:86:29:f2:63:f8:19:65:ce: 2a:17:e4:21:86:a5:8d:cd:4a:01:28:06:0f:f0:ab: f9:db:7e:e5:0f:4b:22:68:9d:b4:96:dc:df:08:16: 70:ac:a5:13:6b:7e:af:d7:db:4d:d3:54:5d:d7:f6: 64:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:A3:F2:40:06:FB:51:11:E0:AF:74:3C:80:5A:A6:AF:EB:64:CB:61 X509v3 Authority Key Identifier: keyid:EC:C2:D1:AF:90:66:39:68:C0:98:39:06:E3:45:03:A5:F5:31:FB:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/ECC2D1AF90663968C0983906E34503A5F531FBA9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:74:5a:d9:1f:36:12:76:96:7b:f9:56:71:14:cf:af:fc:7b: 71:08:14:c5:c3:51:5f:d9:ec:bf:a7:63:29:8d:d6:51:27:88: 4d:cb:b6:8d:40:fa:d8:25:87:1b:98:1b:c7:d4:cb:09:8f:6e: d4:9a:8e:cc:ab:3a:d3:0d:33:c8:f7:f0:56:3e:9e:27:ea:22: 50:95:dc:67:37:d7:f9:99:98:c6:da:03:70:10:80:7c:ef:ca: 91:83:88:1c:19:8e:b0:23:9f:31:1e:50:0a:a6:94:31:01:d3: fc:af:63:21:5e:cb:d0:f2:38:98:31:cf:4f:d8:e9:08:e5:9b: fc:79:d4:db:e4:9e:05:81:62:63:0d:b1:ac:90:10:da:6e:1a: 32:92:bb:22:9a:02:94:60:68:73:a2:b8:70:81:88:bb:4c:cf: 99:da:5b:2a:b0:51:9a:6e:1f:ac:5a:11:5d:bd:b4:85:98:4a: 06:cc:3a:b3:4f:4d:f8:01:ac:71:62:57:f1:bf:81:63:72:0f: 60:1b:c2:ce:77:15:a7:db:95:f0:b8:8d:74:89:99:02:95:5b: c3:41:41:ea:00:cf:ba:67:af:b3:9f:df:11:82:bb:fd:90:83: ea:4b:71:de:6b:91:12:53:80:92:4e:ab:a9:32:ac:5d:73:0e: 88:e9:0f:94 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUUtEPyhICYdBb6oR5wJWiZ9LA4iQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUNDMkQxQUY5MDY2Mzk2OEMwOTgzOTA2RTM0NTAzQTVG NTMxRkJBOTAeFw0yNjA0MjcwNDA2MDJaFw0yNjA0MjgwNjEyMDJaMDMxMTAvBgNV BAMTKDlGQTNGMjQwMDZGQjUxMTFFMEFGNzQzQzgwNUFBNkFGRUI2NENCNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvzGqVqVrlndC7p0wtmCAizr/x Ic6bYCndEdjqcjqmzUfAJQRAbKKg5WdV4VeB+U6yC0FtEdYZRy+daxyEgNuH9PsB /ihmwTCLRI00eCikH1cyJnyRxprHYUiW+7Z8gre7Qb+Vi599jy/FTj++47mfAbnO HuY7Nc8Urt8FJLhHzGkWrAhD4jGutB3uyc6o+j4+/c0FLQCiI/j14qAXit2qUYku 1Ame7FAls2I8oNFf9dDpvoaId4Ji+iZgoOnfNt3ZQpwCpWWwdeOGKfJj+BllzioX 5CGGpY3NSgEoBg/wq/nbfuUPSyJonbSW3N8IFnCspRNrfq/X203TVF3X9mS/AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUn6PyQAb7URHgr3Q8gFqmr+tky2EwHwYDVR0j BBgwFoAU7MLRr5BmOWjAmDkG40UDpfUx+6kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTUxN2I1ZDAtMzMxNy00YjQ5LThlYzUtYmU5MGJjNzAw NjJmLzMvRUNDMkQxQUY5MDY2Mzk2OEMwOTgzOTA2RTM0NTAzQTVGNTMxRkJBOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODFmOTc4Mi04OThlLTRi ODMtOTVlNi00ZmY0YWI3NWM5ZGMvMi9FQ0MyRDFBRjkwNjYzOTY4QzA5ODM5MDZF MzQ1MDNBNUY1MzFGQkE5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE1MTdiNWQwLTMzMTctNGI0OS04ZWM1LWJlOTBiYzcwMDYyZi8zL0VDQzJEMUFG OTA2NjM5NjhDMDk4MzkwNkUzNDUwM0E1RjUzMUZCQTkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCLdFrZ HzYSdpZ7+VZxFM+v/HtxCBTFw1Ff2ey/p2MpjdZRJ4hNy7aNQPrYJYcbmBvH1MsJ j27Umo7MqzrTDTPI9/BWPp4n6iJQldxnN9f5mZjG2gNwEIB878qRg4gcGY6wI58x HlAKppQxAdP8r2MhXsvQ8jiYMc9P2OkI5Zv8edTb5J4FgWJjDbGskBDabhoykrsi mgKUYGhzorhwgYi7TM+Z2lsqsFGabh+sWhFdvbSFmEoGzDqzT034AaxxYlfxv4Fj cg9gG8LOdxWn25XwuI10iZkClVvDQUHqAM+6Z6+zn98Rgrv9kIPqS3Hea5ESU4CS TqupMqxdcw6I6Q+U -----END CERTIFICATE-----Generated at Mon Apr 27 17:24:49 2026 by rpki-client