$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft File: ECC2D1AF90663968C0983906E34503A5F531FBA9.mft (raw, json) Hash identifier: 1VQSx8iuCZMS+gKre6Cq4neRumv7N20NBOjxkdbI/y0= Subject key identifier: 5E:E1:02:7A:9A:80:83:5A:16:B5:35:85:4B:69:C1:42:9C:D7:BD:1D Authority key identifier: EC:C2:D1:AF:90:66:39:68:C0:98:39:06:E3:45:03:A5:F5:31:FB:A9 Certificate issuer: /CN=ECC2D1AF90663968C0983906E34503A5F531FBA9 Certificate serial: 3EB8EECFEAE81E57D7A5A0E09D01481E2B256A6E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/ECC2D1AF90663968C0983906E34503A5F531FBA9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft Manifest number: 010A Signing time: Sun 26 Jul 2026 09:06:17 +0000 Manifest this update: Sun 26 Jul 2026 09:01:17 +0000 Manifest next update: Mon 27 Jul 2026 11:23:17 +0000 Files and hashes: 1: ECC2D1AF90663968C0983906E34503A5F531FBA9.crl (hash: RZuPOV585usfaWmQP4RYSXhjRwVRtyj+ZUhhKkx7WUc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.crl rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/ECC2D1AF90663968C0983906E34503A5F531FBA9.cer rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Jul 2026 11:23:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:b8:ee:cf:ea:e8:1e:57:d7:a5:a0:e0:9d:01:48:1e:2b:25:6a:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ECC2D1AF90663968C0983906E34503A5F531FBA9 Validity Not Before: Jul 26 09:01:17 2026 GMT Not After : Jul 27 11:23:17 2026 GMT Subject: CN=5EE1027A9A80835A16B535854B69C1429CD7BD1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8e:57:7c:10:de:83:38:09:37:13:8c:91:0c: 8d:af:79:d5:37:8f:18:2a:23:bc:43:d6:06:00:62: dd:16:4c:e5:65:89:b1:93:56:13:27:d5:a2:97:11: be:54:5c:78:a1:19:4e:f3:c8:76:79:f4:8b:49:20: 06:5a:be:f1:7b:91:6d:2a:78:b1:b5:2b:a1:1a:3a: 8c:97:fa:ef:3b:2b:19:1c:e7:05:e1:7f:20:28:9b: be:b4:38:f7:6d:da:9b:14:4b:df:b4:85:09:04:cc: 9e:3f:72:26:3f:38:ef:59:3d:56:16:7a:b2:65:95: a1:19:d9:d0:1f:a4:15:6e:30:e2:7c:c3:56:c6:ea: c6:f4:16:50:6f:c3:2a:4b:78:ad:a9:e7:39:0c:14: 04:e2:9e:18:ba:aa:90:d0:c7:fa:1b:88:84:ac:98: f7:5c:e7:9e:40:50:4b:9b:4c:12:6d:26:d3:23:be: 98:06:79:85:19:05:67:19:6d:68:64:fa:12:4c:e9: 3d:de:d4:59:64:96:e5:cc:53:01:17:01:58:53:2c: d3:e2:ea:cf:04:41:cf:40:9f:a1:1a:99:cb:dd:01: 03:9b:f3:48:2c:35:08:6f:67:b5:eb:47:a8:1e:f3: 99:fa:ff:93:8c:c4:f9:11:2e:92:39:3e:09:6e:7e: 90:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:E1:02:7A:9A:80:83:5A:16:B5:35:85:4B:69:C1:42:9C:D7:BD:1D X509v3 Authority Key Identifier: keyid:EC:C2:D1:AF:90:66:39:68:C0:98:39:06:E3:45:03:A5:F5:31:FB:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/ECC2D1AF90663968C0983906E34503A5F531FBA9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:4b:34:55:26:09:58:21:cb:6f:d3:19:6a:5f:27:e4:da:86: 34:88:13:06:0a:c7:76:8a:4b:92:b7:34:6a:46:89:89:71:78: ec:27:b7:09:d3:df:a7:1e:0a:6a:20:cd:9f:2d:c4:e0:6f:d5: a2:42:4d:4c:d9:e5:d3:14:27:16:54:44:73:2f:a5:28:0f:0b: 57:ec:a0:d5:ed:05:ac:55:ba:ce:0d:35:2d:41:34:5a:2a:e9: ae:b0:6e:1c:53:22:e3:ff:39:09:83:57:f3:ac:af:34:9c:b2: 16:c2:e7:e3:db:43:a0:89:21:0a:fa:ff:45:a7:29:93:28:37: 03:bc:c5:e6:32:7b:ed:22:c5:19:ab:82:81:b6:3d:cf:1d:9c: de:e7:97:75:2c:39:f8:f1:87:b1:8a:de:02:66:cc:ed:1e:69: 4a:1a:8c:a7:15:30:73:5a:a2:0e:32:f4:cd:36:cc:4a:c2:71: 83:17:72:bc:a5:f4:58:c4:bf:b3:2d:6e:7c:50:72:99:00:8b: 0b:1a:82:02:a3:fd:ce:50:f9:ae:e1:92:e3:7a:07:d0:1a:4a: 9e:6e:b6:50:a9:de:88:c3:f4:8f:5f:5e:15:d0:70:20:41:44: de:a8:b9:a9:5e:e8:93:5b:11:83:97:3e:ee:66:9d:59:62:8e: d5:e8:0d:b4 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUPrjuz+roHlfXpaDgnQFIHislam4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUNDMkQxQUY5MDY2Mzk2OEMwOTgzOTA2RTM0NTAzQTVG NTMxRkJBOTAeFw0yNjA3MjYwOTAxMTdaFw0yNjA3MjcxMTIzMTdaMDMxMTAvBgNV BAMTKDVFRTEwMjdBOUE4MDgzNUExNkI1MzU4NTRCNjlDMTQyOUNEN0JEMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnjld8EN6DOAk3E4yRDI2vedU3 jxgqI7xD1gYAYt0WTOVlibGTVhMn1aKXEb5UXHihGU7zyHZ59ItJIAZavvF7kW0q eLG1K6EaOoyX+u87Kxkc5wXhfyAom760OPdt2psUS9+0hQkEzJ4/ciY/OO9ZPVYW erJllaEZ2dAfpBVuMOJ8w1bG6sb0FlBvwypLeK2p5zkMFATinhi6qpDQx/obiISs mPdc555AUEubTBJtJtMjvpgGeYUZBWcZbWhk+hJM6T3e1FlkluXMUwEXAVhTLNPi 6s8EQc9An6EamcvdAQOb80gsNQhvZ7XrR6ge85n6/5OMxPkRLpI5PglufpARAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUXuECepqAg1oWtTWFS2nBQpzXvR0wHwYDVR0j BBgwFoAU7MLRr5BmOWjAmDkG40UDpfUx+6kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTUxN2I1ZDAtMzMxNy00YjQ5LThlYzUtYmU5MGJjNzAw NjJmLzMvRUNDMkQxQUY5MDY2Mzk2OEMwOTgzOTA2RTM0NTAzQTVGNTMxRkJBOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODFmOTc4Mi04OThlLTRi ODMtOTVlNi00ZmY0YWI3NWM5ZGMvMi9FQ0MyRDFBRjkwNjYzOTY4QzA5ODM5MDZF MzQ1MDNBNUY1MzFGQkE5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE1MTdiNWQwLTMzMTctNGI0OS04ZWM1LWJlOTBiYzcwMDYyZi8zL0VDQzJEMUFG OTA2NjM5NjhDMDk4MzkwNkUzNDUwM0E1RjUzMUZCQTkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBWSzRV JglYIctv0xlqXyfk2oY0iBMGCsd2ikuStzRqRomJcXjsJ7cJ09+nHgpqIM2fLcTg b9WiQk1M2eXTFCcWVERzL6UoDwtX7KDV7QWsVbrODTUtQTRaKumusG4cUyLj/zkJ g1fzrK80nLIWwufj20OgiSEK+v9FpymTKDcDvMXmMnvtIsUZq4KBtj3PHZze55d1 LDn48Yexit4CZsztHmlKGoynFTBzWqIOMvTNNsxKwnGDF3K8pfRYxL+zLW58UHKZ AIsLGoICo/3OUPmu4ZLjegfQGkqebrZQqd6Iw/SPX14V0HAgQUTeqLmpXuiTWxGD lz7uZp1ZYo7V6A20 -----END CERTIFICATE-----Generated at Mon Jul 27 03:13:56 2026 by rpki-client