$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft File: ECC2D1AF90663968C0983906E34503A5F531FBA9.mft (raw, json) Hash identifier: PGyV3lvQ3WBtb1e9txxzRTBu3kynggSt4wVxr9X7Pe8= Subject key identifier: 83:E3:D8:71:FE:6A:16:5F:5B:00:1F:E8:11:F2:68:47:84:9B:4E:4A Authority key identifier: EC:C2:D1:AF:90:66:39:68:C0:98:39:06:E3:45:03:A5:F5:31:FB:A9 Certificate issuer: /CN=ECC2D1AF90663968C0983906E34503A5F531FBA9 Certificate serial: 3E0F5DA214CC56E04EFBDB430D649C117AA8E78C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/ECC2D1AF90663968C0983906E34503A5F531FBA9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft Manifest number: 0148 Signing time: Thu 10 Sep 2026 05:28:05 +0000 Manifest this update: Thu 10 Sep 2026 05:23:05 +0000 Manifest next update: Fri 11 Sep 2026 08:12:05 +0000 Files and hashes: 1: ECC2D1AF90663968C0983906E34503A5F531FBA9.crl (hash: yLSP9Gv13kaICQcvfLoiFW0EhTQFJYjlIvYPQHlzUK4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.crl rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/ECC2D1AF90663968C0983906E34503A5F531FBA9.cer rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 07:55:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:0f:5d:a2:14:cc:56:e0:4e:fb:db:43:0d:64:9c:11:7a:a8:e7:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ECC2D1AF90663968C0983906E34503A5F531FBA9 Validity Not Before: Sep 10 05:23:05 2026 GMT Not After : Sep 11 08:12:05 2026 GMT Subject: CN=83E3D871FE6A165F5B001FE811F26847849B4E4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:1a:bf:18:5f:81:dd:5f:23:88:1d:56:99:7a: 66:01:b3:84:dd:06:f8:2d:a2:24:4a:b8:71:9a:ea: 9a:14:58:23:90:ad:e1:8f:98:20:82:da:66:1c:56: 93:05:48:8e:0b:b2:7d:83:2a:7d:e5:4a:f3:93:3d: e6:63:88:05:ac:29:3a:f1:84:b4:f3:81:20:4e:44: 92:7d:3e:35:9f:6b:30:ff:40:72:fc:6b:4c:52:a1: 82:ad:77:9b:81:8d:77:1a:68:6a:38:5d:84:8d:10: 66:5a:05:8a:50:62:6e:57:47:8e:0d:fc:7f:e2:08: 82:b7:81:79:93:ac:3d:f3:4f:2a:a2:60:86:36:04: 6d:a7:98:7c:0c:ca:c0:4b:e5:4b:54:83:08:02:73: 84:25:4b:05:f6:4b:d6:26:f8:ae:48:27:20:5d:3d: 33:40:56:5c:2b:83:2f:4f:0f:32:43:b8:20:94:55: 16:89:0e:dd:e2:3b:00:ca:15:e5:36:9f:a6:4f:7c: 6a:bc:a8:9d:90:b9:0f:55:4e:99:15:b9:e7:e2:6b: 9a:1b:9e:ae:64:d8:9a:e2:2b:1c:f8:3f:1e:5d:6a: bd:00:58:e1:cb:cb:19:e8:c6:cb:8f:7b:31:d7:63: 3b:98:62:d4:e4:9b:b9:66:46:f8:13:b4:7d:57:33: ea:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:E3:D8:71:FE:6A:16:5F:5B:00:1F:E8:11:F2:68:47:84:9B:4E:4A X509v3 Authority Key Identifier: keyid:EC:C2:D1:AF:90:66:39:68:C0:98:39:06:E3:45:03:A5:F5:31:FB:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/ECC2D1AF90663968C0983906E34503A5F531FBA9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:62:b8:32:d8:eb:58:7b:4c:cc:96:fc:48:61:e7:79:5d:08: 2e:e3:e6:57:71:b7:dc:e6:d9:40:b9:b0:08:01:2e:24:99:b9: 1e:32:7b:74:e9:55:a5:3b:56:a4:5a:6e:41:11:36:6f:43:c5: 68:71:90:8e:b4:68:70:70:6f:9e:ae:56:68:bb:ab:3c:6e:9c: 82:c4:3b:4f:04:54:9c:2b:ee:26:08:bc:3a:d2:d2:9e:a5:36: c5:5f:91:64:37:04:e2:c8:98:96:a6:67:46:82:50:92:78:ac: 9a:43:24:54:0c:15:ed:18:1c:c3:8f:e2:f9:89:f9:c2:8a:01: b1:84:57:de:c6:0e:34:2a:6e:66:6c:8d:af:a7:ff:1e:e1:65: 4d:f1:74:a6:2d:da:f1:16:22:6c:40:aa:8f:58:58:0a:16:33: d5:4c:b6:a4:b8:4b:02:c2:fa:9b:e3:a0:a4:aa:09:2e:ac:e7: 8f:a3:24:9e:7c:a3:60:dd:eb:b1:7f:51:01:8a:ec:ed:04:d9: db:b2:c2:0d:5e:f2:56:3c:4f:1d:32:de:68:85:2d:49:20:76: 73:33:e4:26:29:20:72:a4:4a:53:35:ad:bd:6e:c7:d4:02:23: ca:3e:d9:4b:b5:10:34:c4:72:2d:ae:1d:f3:8f:5d:1a:fb:28: d3:eb:86:65 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUPg9dohTMVuBO+9tDDWScEXqo54wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUNDMkQxQUY5MDY2Mzk2OEMwOTgzOTA2RTM0NTAzQTVG NTMxRkJBOTAeFw0yNjA5MTAwNTIzMDVaFw0yNjA5MTEwODEyMDVaMDMxMTAvBgNV BAMTKDgzRTNEODcxRkU2QTE2NUY1QjAwMUZFODExRjI2ODQ3ODQ5QjRFNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLGr8YX4HdXyOIHVaZemYBs4Td BvgtoiRKuHGa6poUWCOQreGPmCCC2mYcVpMFSI4Lsn2DKn3lSvOTPeZjiAWsKTrx hLTzgSBORJJ9PjWfazD/QHL8a0xSoYKtd5uBjXcaaGo4XYSNEGZaBYpQYm5XR44N /H/iCIK3gXmTrD3zTyqiYIY2BG2nmHwMysBL5UtUgwgCc4QlSwX2S9Ym+K5IJyBd PTNAVlwrgy9PDzJDuCCUVRaJDt3iOwDKFeU2n6ZPfGq8qJ2QuQ9VTpkVuefia5ob nq5k2JriKxz4Px5dar0AWOHLyxnoxsuPezHXYzuYYtTkm7lmRvgTtH1XM+oZAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUg+PYcf5qFl9bAB/oEfJoR4SbTkowHwYDVR0j BBgwFoAU7MLRr5BmOWjAmDkG40UDpfUx+6kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTUxN2I1ZDAtMzMxNy00YjQ5LThlYzUtYmU5MGJjNzAw NjJmLzMvRUNDMkQxQUY5MDY2Mzk2OEMwOTgzOTA2RTM0NTAzQTVGNTMxRkJBOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODFmOTc4Mi04OThlLTRi ODMtOTVlNi00ZmY0YWI3NWM5ZGMvMi9FQ0MyRDFBRjkwNjYzOTY4QzA5ODM5MDZF MzQ1MDNBNUY1MzFGQkE5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE1MTdiNWQwLTMzMTctNGI0OS04ZWM1LWJlOTBiYzcwMDYyZi8zL0VDQzJEMUFG OTA2NjM5NjhDMDk4MzkwNkUzNDUwM0E1RjUzMUZCQTkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBLYrgy 2OtYe0zMlvxIYed5XQgu4+ZXcbfc5tlAubAIAS4kmbkeMnt06VWlO1akWm5BETZv Q8VocZCOtGhwcG+erlZou6s8bpyCxDtPBFScK+4mCLw60tKepTbFX5FkNwTiyJiW pmdGglCSeKyaQyRUDBXtGBzDj+L5ifnCigGxhFfexg40Km5mbI2vp/8e4WVN8XSm LdrxFiJsQKqPWFgKFjPVTLakuEsCwvqb46CkqgkurOePoySefKNg3euxf1EBiuzt BNnbssINXvJWPE8dMt5ohS1JIHZzM+QmKSBypEpTNa29bsfUAiPKPtlLtRA0xHIt rh3zj10a+yjT64Zl -----END CERTIFICATE-----Generated at Thu Sep 10 11:21:25 2026 by rpki-client