$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft File: ECC2D1AF90663968C0983906E34503A5F531FBA9.mft (raw, json) Hash identifier: QlygO1B5V+rYIRuHe0u8BbXacI6v2+eQlhd8Torq42s= Subject key identifier: 33:7E:45:ED:DE:EE:D7:2B:48:B4:F5:64:82:E3:57:A7:4C:42:55:09 Authority key identifier: EC:C2:D1:AF:90:66:39:68:C0:98:39:06:E3:45:03:A5:F5:31:FB:A9 Certificate issuer: /CN=ECC2D1AF90663968C0983906E34503A5F531FBA9 Certificate serial: 54FF2C0763AF82680A63D3B6DEB145947D36BBEF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/ECC2D1AF90663968C0983906E34503A5F531FBA9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft Manifest number: 018A Signing time: Tue 27 Oct 2026 16:27:52 +0000 Manifest this update: Tue 27 Oct 2026 16:22:52 +0000 Manifest next update: Wed 28 Oct 2026 19:45:52 +0000 Files and hashes: 1: ECC2D1AF90663968C0983906E34503A5F531FBA9.crl (hash: SK+oajJPxJvQGvFFtxowiP2i+Vnu15v/pYqkGs1v1e8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.crl rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/ECC2D1AF90663968C0983906E34503A5F531FBA9.cer rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 12:16:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:ff:2c:07:63:af:82:68:0a:63:d3:b6:de:b1:45:94:7d:36:bb:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ECC2D1AF90663968C0983906E34503A5F531FBA9 Validity Not Before: Oct 27 16:22:52 2026 GMT Not After : Oct 28 19:45:52 2026 GMT Subject: CN=337E45EDDEEED72B48B4F56482E357A74C425509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b1:a3:ef:03:3a:b9:bf:b1:4b:d4:e0:d4:b6: d5:49:bb:a9:4e:ee:3e:55:d7:d3:ac:96:1b:a0:7e: 60:24:ff:30:5b:10:8f:91:70:72:42:ef:ed:d3:3b: a8:b1:ad:14:3f:81:e6:b0:9a:ef:d8:ed:b0:d9:a5: cb:76:04:d7:8f:a5:87:f8:aa:b2:cb:f7:16:29:a0: 4f:9b:95:84:8b:99:62:9a:ac:47:81:0d:d5:d7:18: 49:f3:81:5b:b5:87:41:b4:77:71:08:ed:1b:0f:9a: 83:18:cf:ff:be:f2:82:37:d6:3e:b1:da:d7:76:70: 8d:1f:ee:45:ba:b8:bb:73:1d:f1:93:02:6a:a8:db: 03:14:a8:d7:80:70:72:8f:8e:2f:e0:34:f8:56:06: 21:17:13:89:8a:29:a4:08:13:bd:ca:65:a5:6b:4d: f3:80:8d:28:3d:e9:1f:a9:fb:66:b8:dd:2a:06:e6: fc:ea:30:ac:d7:7e:51:c1:67:1c:43:93:10:36:2b: 17:ea:e1:d7:47:d7:ad:87:ef:3b:fe:eb:aa:a6:e6: cf:44:c0:b6:d5:86:42:d2:00:da:c0:12:b0:90:28: 9c:ff:66:ae:fd:96:ef:82:89:ff:13:00:fd:2c:6f: 66:88:a4:3d:f7:be:76:fc:d1:0f:8f:cd:de:9e:3f: f9:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:7E:45:ED:DE:EE:D7:2B:48:B4:F5:64:82:E3:57:A7:4C:42:55:09 X509v3 Authority Key Identifier: keyid:EC:C2:D1:AF:90:66:39:68:C0:98:39:06:E3:45:03:A5:F5:31:FB:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/ECC2D1AF90663968C0983906E34503A5F531FBA9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:f8:28:c2:bc:e8:55:b7:3c:8e:34:c5:c5:e0:33:45:d3:2e: b0:e5:22:35:9a:6a:2c:e7:67:37:cf:d3:40:c6:5c:c9:95:50: e4:ae:17:c7:2c:36:b0:a8:3f:23:ca:99:ec:32:f4:74:af:99: 5a:4d:6f:64:e2:85:46:28:cd:2e:e2:22:5c:4a:23:84:7b:fc: 50:af:48:ec:90:2c:8c:eb:b5:55:50:15:9a:4c:70:de:6d:ac: e9:8f:4c:14:f6:ea:e5:0e:38:b7:47:02:b1:82:88:14:a4:b3: 7a:cd:0f:2c:75:18:87:dd:84:de:24:d7:82:04:42:15:5d:44: 7c:d6:9a:41:05:81:02:71:34:f0:f9:cf:e9:da:19:25:76:9f: ba:53:e0:e2:10:dd:8d:5b:ce:38:3f:f8:85:6c:8a:31:68:66: bd:46:d0:36:97:a7:55:2d:41:35:f1:c5:98:fa:5d:73:a7:2c: 0a:01:23:18:31:7d:7e:06:fc:e3:84:29:f2:e2:4b:e7:da:71: e6:b2:a8:a6:21:1b:aa:cf:cf:88:e1:96:f5:d2:62:14:20:51: 27:29:a4:31:76:bd:c1:dd:25:0c:f0:8d:2f:c3:ef:50:b4:94: b9:57:6a:3b:a4:03:24:26:cc:0c:f5:e9:a8:55:d4:6b:20:c2: 21:d6:d8:37 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUVP8sB2OvgmgKY9O23rFFlH02u+8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUNDMkQxQUY5MDY2Mzk2OEMwOTgzOTA2RTM0NTAzQTVG NTMxRkJBOTAeFw0yNjEwMjcxNjIyNTJaFw0yNjEwMjgxOTQ1NTJaMDMxMTAvBgNV BAMTKDMzN0U0NUVEREVFRUQ3MkI0OEI0RjU2NDgyRTM1N0E3NEM0MjU1MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUsaPvAzq5v7FL1ODUttVJu6lO 7j5V19OslhugfmAk/zBbEI+RcHJC7+3TO6ixrRQ/geawmu/Y7bDZpct2BNePpYf4 qrLL9xYpoE+blYSLmWKarEeBDdXXGEnzgVu1h0G0d3EI7RsPmoMYz/++8oI31j6x 2td2cI0f7kW6uLtzHfGTAmqo2wMUqNeAcHKPji/gNPhWBiEXE4mKKaQIE73KZaVr TfOAjSg96R+p+2a43SoG5vzqMKzXflHBZxxDkxA2Kxfq4ddH162H7zv+66qm5s9E wLbVhkLSANrAErCQKJz/Zq79lu+Cif8TAP0sb2aIpD33vnb80Q+Pzd6eP/mTAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUM35F7d7u1ytItPVkguNXp0xCVQkwHwYDVR0j BBgwFoAU7MLRr5BmOWjAmDkG40UDpfUx+6kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTUxN2I1ZDAtMzMxNy00YjQ5LThlYzUtYmU5MGJjNzAw NjJmLzMvRUNDMkQxQUY5MDY2Mzk2OEMwOTgzOTA2RTM0NTAzQTVGNTMxRkJBOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODFmOTc4Mi04OThlLTRi ODMtOTVlNi00ZmY0YWI3NWM5ZGMvMi9FQ0MyRDFBRjkwNjYzOTY4QzA5ODM5MDZF MzQ1MDNBNUY1MzFGQkE5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE1MTdiNWQwLTMzMTctNGI0OS04ZWM1LWJlOTBiYzcwMDYyZi8zL0VDQzJEMUFG OTA2NjM5NjhDMDk4MzkwNkUzNDUwM0E1RjUzMUZCQTkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBW+CjC vOhVtzyONMXF4DNF0y6w5SI1mmos52c3z9NAxlzJlVDkrhfHLDawqD8jypnsMvR0 r5laTW9k4oVGKM0u4iJcSiOEe/xQr0jskCyM67VVUBWaTHDebazpj0wU9urlDji3 RwKxgogUpLN6zQ8sdRiH3YTeJNeCBEIVXUR81ppBBYECcTTw+c/p2hkldp+6U+Di EN2NW844P/iFbIoxaGa9RtA2l6dVLUE18cWY+l1zpywKASMYMX1+BvzjhCny4kvn 2nHmsqimIRuqz8+I4Zb10mIUIFEnKaQxdr3B3SUM8I0vw+9QtJS5V2o7pAMkJswM 9emoVdRrIMIh1tg3 -----END CERTIFICATE-----Generated at Tue Oct 27 23:00:45 2026 by rpki-client