$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft File: ECC2D1AF90663968C0983906E34503A5F531FBA9.mft (raw, json) Hash identifier: EDwvGHG/Hb5xnWRV0goR5KpVembz88aWXz5J5KrFfb4= Subject key identifier: 85:22:41:39:58:FD:FF:A0:8E:46:13:F8:56:B9:A6:56:EA:4C:C7:49 Authority key identifier: EC:C2:D1:AF:90:66:39:68:C0:98:39:06:E3:45:03:A5:F5:31:FB:A9 Certificate issuer: /CN=ECC2D1AF90663968C0983906E34503A5F531FBA9 Certificate serial: 2370D529719478677A2CC19F0542571B1B22F309 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/ECC2D1AF90663968C0983906E34503A5F531FBA9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft Manifest number: 69 Signing time: Fri 27 Mar 2026 19:52:56 +0000 Manifest this update: Fri 27 Mar 2026 19:47:56 +0000 Manifest next update: Sat 28 Mar 2026 21:15:56 +0000 Files and hashes: 1: ECC2D1AF90663968C0983906E34503A5F531FBA9.crl (hash: b6UV8uLHzbozpPmCy0XeNyOOfBnoVvjsxTIjwor8WKg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.crl rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/ECC2D1AF90663968C0983906E34503A5F531FBA9.cer rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 28 Mar 2026 21:15:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:70:d5:29:71:94:78:67:7a:2c:c1:9f:05:42:57:1b:1b:22:f3:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ECC2D1AF90663968C0983906E34503A5F531FBA9 Validity Not Before: Mar 27 19:47:56 2026 GMT Not After : Mar 28 21:15:56 2026 GMT Subject: CN=8522413958FDFFA08E4613F856B9A656EA4CC749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:52:79:4a:9e:64:b4:01:ee:4f:35:19:ca:dc: 39:76:2e:7c:55:80:19:8c:e4:73:11:a0:c3:fd:ac: ff:f5:aa:50:99:e5:d4:00:bf:fc:e9:6a:7f:d1:ae: 58:51:54:ee:cf:ba:e5:d2:e3:ca:0d:28:79:12:19: e9:a0:b3:38:87:aa:5c:c4:31:11:09:22:97:b2:60: df:ec:d3:c1:d4:f2:c3:95:14:ed:29:1e:95:b9:18: b5:a1:68:9d:b3:d7:1d:bb:18:8c:47:84:3c:07:01: 6b:4f:f8:b9:7c:32:0b:39:fb:d4:59:5b:7b:e2:c7: 3c:ff:88:6e:9b:e9:7c:a8:a4:63:b8:27:60:ae:cb: 1f:3a:c4:68:57:93:f5:7f:1c:3a:9d:43:86:59:b3: e6:35:46:e9:38:ca:32:66:12:e5:b6:28:fb:0b:a5: 4f:e7:f8:c0:6e:1c:08:3a:1e:c5:de:65:d2:a1:47: c5:f9:80:ca:41:40:21:fd:be:ca:c9:ef:d6:70:6b: 9b:12:ec:eb:03:ab:2a:55:48:8d:d0:d8:67:81:bb: 62:b9:a0:c3:e0:0a:0b:ca:d5:a1:20:49:3d:8d:f2: 02:b3:a9:a9:52:6c:67:10:3d:16:31:67:28:5b:b8: 02:8a:04:25:16:d7:08:c0:e5:83:e8:7d:b0:7b:cd: 8f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:22:41:39:58:FD:FF:A0:8E:46:13:F8:56:B9:A6:56:EA:4C:C7:49 X509v3 Authority Key Identifier: keyid:EC:C2:D1:AF:90:66:39:68:C0:98:39:06:E3:45:03:A5:F5:31:FB:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/ECC2D1AF90663968C0983906E34503A5F531FBA9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:aa:62:71:47:de:ab:ac:0d:4f:77:e6:70:30:27:cc:41:fd: e2:15:0d:de:79:40:cc:06:99:ca:2e:9b:8a:dd:6c:f1:cc:14: 57:4a:69:00:58:a0:96:5b:dc:d9:a5:af:7a:83:41:83:18:58: f3:e7:3c:2b:1d:20:14:41:7d:91:2c:3e:73:9e:d7:00:7c:2a: 9f:1a:96:0d:c3:f3:c1:a0:15:26:a4:2d:b1:78:25:2e:f1:50: 02:1c:a2:dd:fa:87:ad:fd:ee:8c:52:6f:12:49:ef:6e:6f:95: 5e:52:75:d5:68:97:8e:88:dd:3b:81:6f:cc:93:ce:5c:c9:6a: 93:f8:47:dc:f5:db:e4:9e:75:80:a6:ef:79:43:ff:95:14:72: ae:fe:6d:fe:e5:53:fa:8a:a5:4b:c5:f6:23:47:16:b4:9c:03: dc:dc:45:c0:06:5f:b3:3f:7e:f6:79:84:d1:8e:c0:91:39:4f: a7:7f:82:65:26:7a:4d:d5:99:b6:c1:28:20:be:64:67:90:70: 82:4e:0a:b0:c6:36:76:ff:5e:8c:31:76:81:7e:b2:c7:3e:fc: 02:b2:49:86:d2:29:76:81:0b:ce:b0:1d:b4:57:db:9f:74:e3: 3f:97:04:b4:13:c6:e0:2a:a4:bb:bd:ce:28:1d:de:80:9a:2c: 66:3f:24:2b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUI3DVKXGUeGd6LMGfBUJXGxsi8wkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUNDMkQxQUY5MDY2Mzk2OEMwOTgzOTA2RTM0NTAzQTVG NTMxRkJBOTAeFw0yNjAzMjcxOTQ3NTZaFw0yNjAzMjgyMTE1NTZaMDMxMTAvBgNV BAMTKDg1MjI0MTM5NThGREZGQTA4RTQ2MTNGODU2QjlBNjU2RUE0Q0M3NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrUnlKnmS0Ae5PNRnK3Dl2LnxV gBmM5HMRoMP9rP/1qlCZ5dQAv/zpan/RrlhRVO7PuuXS48oNKHkSGemgsziHqlzE MREJIpeyYN/s08HU8sOVFO0pHpW5GLWhaJ2z1x27GIxHhDwHAWtP+Ll8Mgs5+9RZ W3vixzz/iG6b6XyopGO4J2Cuyx86xGhXk/V/HDqdQ4ZZs+Y1Ruk4yjJmEuW2KPsL pU/n+MBuHAg6HsXeZdKhR8X5gMpBQCH9vsrJ79Zwa5sS7OsDqypVSI3Q2GeBu2K5 oMPgCgvK1aEgST2N8gKzqalSbGcQPRYxZyhbuAKKBCUW1wjA5YPofbB7zY+jAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUhSJBOVj9/6CORhP4VrmmVupMx0kwHwYDVR0j BBgwFoAU7MLRr5BmOWjAmDkG40UDpfUx+6kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTUxN2I1ZDAtMzMxNy00YjQ5LThlYzUtYmU5MGJjNzAw NjJmLzMvRUNDMkQxQUY5MDY2Mzk2OEMwOTgzOTA2RTM0NTAzQTVGNTMxRkJBOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODFmOTc4Mi04OThlLTRi ODMtOTVlNi00ZmY0YWI3NWM5ZGMvMi9FQ0MyRDFBRjkwNjYzOTY4QzA5ODM5MDZF MzQ1MDNBNUY1MzFGQkE5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE1MTdiNWQwLTMzMTctNGI0OS04ZWM1LWJlOTBiYzcwMDYyZi8zL0VDQzJEMUFG OTA2NjM5NjhDMDk4MzkwNkUzNDUwM0E1RjUzMUZCQTkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBhqmJx R96rrA1Pd+ZwMCfMQf3iFQ3eeUDMBpnKLpuK3WzxzBRXSmkAWKCWW9zZpa96g0GD GFjz5zwrHSAUQX2RLD5zntcAfCqfGpYNw/PBoBUmpC2xeCUu8VACHKLd+oet/e6M Um8SSe9ub5VeUnXVaJeOiN07gW/Mk85cyWqT+Efc9dvknnWApu95Q/+VFHKu/m3+ 5VP6iqVLxfYjRxa0nAPc3EXABl+zP372eYTRjsCROU+nf4JlJnpN1Zm2wSggvmRn kHCCTgqwxjZ2/16MMXaBfrLHPvwCskmG0il2gQvOsB20V9ufdOM/lwS0E8bgKqS7 vc4oHd6AmixmPyQr -----END CERTIFICATE-----Generated at Sat Mar 28 12:02:07 2026 by rpki-client