$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft File: ECC2D1AF90663968C0983906E34503A5F531FBA9.mft (raw, json) Hash identifier: 4nv/6yGErH3fW8vpwlyufXNbypolIQutG4xXSa5j2UQ= Subject key identifier: F3:CE:38:A3:7E:56:BE:13:53:A3:8C:8D:01:9E:03:86:E9:DB:AA:A6 Authority key identifier: EC:C2:D1:AF:90:66:39:68:C0:98:39:06:E3:45:03:A5:F5:31:FB:A9 Certificate issuer: /CN=ECC2D1AF90663968C0983906E34503A5F531FBA9 Certificate serial: 0C4E2F2486C737BD32324C21EDA15037F22636F0 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/ECC2D1AF90663968C0983906E34503A5F531FBA9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft Manifest number: 0169 Signing time: Sun 04 Oct 2026 14:17:30 +0000 Manifest this update: Sun 04 Oct 2026 14:12:30 +0000 Manifest next update: Mon 05 Oct 2026 15:29:30 +0000 Files and hashes: 1: ECC2D1AF90663968C0983906E34503A5F531FBA9.crl (hash: VZPxTupYngT6yyvQT0/SW9jCUiioBV9PqWPnehEChDU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.crl rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/ECC2D1AF90663968C0983906E34503A5F531FBA9.cer rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Oct 2026 14:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:4e:2f:24:86:c7:37:bd:32:32:4c:21:ed:a1:50:37:f2:26:36:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ECC2D1AF90663968C0983906E34503A5F531FBA9 Validity Not Before: Oct 4 14:12:30 2026 GMT Not After : Oct 5 15:29:30 2026 GMT Subject: CN=F3CE38A37E56BE1353A38C8D019E0386E9DBAAA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:92:92:66:39:2e:4d:ff:3f:01:67:85:38:3b: 9d:34:a3:57:33:ce:5f:e0:64:5a:28:cc:94:84:0f: c4:d5:4a:d0:24:33:06:61:19:2f:3f:fb:5a:c9:72: d2:83:0f:fc:52:b3:9d:5d:a2:fb:87:db:aa:69:03: cb:96:51:50:23:22:00:7f:15:b4:8b:7f:18:d5:12: 08:a8:22:93:b6:f0:b3:b9:26:d0:6d:83:c2:25:d0: 85:20:b3:fb:28:98:3d:01:95:93:75:91:fd:bb:73: 38:c6:83:fc:d2:b8:84:a5:f3:5f:7b:93:58:c3:8a: 5c:9d:c8:ea:4d:91:d1:95:98:ac:ac:d5:9c:1f:f3: 96:44:5d:6c:b6:80:36:da:9f:af:57:4f:2a:4b:1e: f9:ad:7b:97:4a:07:9c:bc:4e:a0:87:95:89:e3:2c: c6:2b:2d:bb:cb:19:9a:d1:74:18:7f:63:56:a0:67: a8:ff:2e:5e:33:15:ac:92:be:55:d8:2c:ec:05:fe: dd:2c:0a:47:c0:75:e2:c6:de:3a:61:f7:d1:77:21: 66:fd:da:13:76:da:f4:ec:fa:c2:2f:20:b6:b5:ef: 5e:ce:87:5b:d3:db:18:aa:9f:32:37:04:2f:11:e5: 52:3e:fc:c3:48:cd:27:13:f6:af:4d:3a:91:c3:5f: a2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:CE:38:A3:7E:56:BE:13:53:A3:8C:8D:01:9E:03:86:E9:DB:AA:A6 X509v3 Authority Key Identifier: keyid:EC:C2:D1:AF:90:66:39:68:C0:98:39:06:E3:45:03:A5:F5:31:FB:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/ECC2D1AF90663968C0983906E34503A5F531FBA9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:bc:4d:df:94:d6:71:c6:93:a9:0b:b1:d7:d2:45:bd:f7:19: 73:80:e4:d8:f6:6c:8a:5c:96:8e:f8:09:f8:de:be:31:95:70: b7:92:85:31:95:d9:f8:7a:6d:dc:ec:04:63:ac:12:98:65:a5: db:45:95:41:76:34:68:82:03:b2:b3:1b:64:f4:68:55:d7:e9: d4:f7:ab:1a:76:35:90:85:19:10:0c:e9:0f:bf:47:22:08:57: b4:e3:ff:c5:f2:34:ec:0a:4f:ce:3f:e5:77:9e:99:0e:bd:56: 20:20:4d:c4:b2:e8:c3:2a:fc:7c:65:cb:27:c7:c4:25:b7:8c: b1:81:ac:3d:9d:47:62:94:ab:ff:59:9e:2d:88:b5:0a:29:5c: cf:96:b0:c2:67:b6:78:bc:29:51:37:e9:f4:b9:38:d4:fe:b7: cd:e8:87:bb:31:81:52:2c:57:93:87:20:d3:23:99:da:93:14: b8:a0:a9:af:4f:03:82:99:b5:ed:44:d0:6f:7f:09:2a:b6:28: 4c:2b:c8:04:38:6d:29:a1:75:2b:a2:8d:de:3f:7e:aa:a5:76: 55:14:30:78:af:31:d3:c5:36:03:3a:38:e7:15:58:50:83:e1: 9c:d0:f8:7c:2f:ba:8f:d4:a7:5d:80:a6:c1:71:c3:7a:f0:a9: 1e:64:24:01 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUDE4vJIbHN70yMkwh7aFQN/ImNvAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUNDMkQxQUY5MDY2Mzk2OEMwOTgzOTA2RTM0NTAzQTVG NTMxRkJBOTAeFw0yNjEwMDQxNDEyMzBaFw0yNjEwMDUxNTI5MzBaMDMxMTAvBgNV BAMTKEYzQ0UzOEEzN0U1NkJFMTM1M0EzOEM4RDAxOUUwMzg2RTlEQkFBQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0kpJmOS5N/z8BZ4U4O500o1cz zl/gZFoozJSED8TVStAkMwZhGS8/+1rJctKDD/xSs51dovuH26ppA8uWUVAjIgB/ FbSLfxjVEgioIpO28LO5JtBtg8Il0IUgs/somD0BlZN1kf27czjGg/zSuISl8197 k1jDilydyOpNkdGVmKys1Zwf85ZEXWy2gDban69XTypLHvmte5dKB5y8TqCHlYnj LMYrLbvLGZrRdBh/Y1agZ6j/Ll4zFaySvlXYLOwF/t0sCkfAdeLG3jph99F3IWb9 2hN22vTs+sIvILa1717Oh1vT2xiqnzI3BC8R5VI+/MNIzScT9q9NOpHDX6KPAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU8844o35WvhNTo4yNAZ4DhunbqqYwHwYDVR0j BBgwFoAU7MLRr5BmOWjAmDkG40UDpfUx+6kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTUxN2I1ZDAtMzMxNy00YjQ5LThlYzUtYmU5MGJjNzAw NjJmLzMvRUNDMkQxQUY5MDY2Mzk2OEMwOTgzOTA2RTM0NTAzQTVGNTMxRkJBOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODFmOTc4Mi04OThlLTRi ODMtOTVlNi00ZmY0YWI3NWM5ZGMvMi9FQ0MyRDFBRjkwNjYzOTY4QzA5ODM5MDZF MzQ1MDNBNUY1MzFGQkE5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE1MTdiNWQwLTMzMTctNGI0OS04ZWM1LWJlOTBiYzcwMDYyZi8zL0VDQzJEMUFG OTA2NjM5NjhDMDk4MzkwNkUzNDUwM0E1RjUzMUZCQTkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA5vE3f lNZxxpOpC7HX0kW99xlzgOTY9myKXJaO+An43r4xlXC3koUxldn4em3c7ARjrBKY ZaXbRZVBdjRoggOysxtk9GhV1+nU96sadjWQhRkQDOkPv0ciCFe04//F8jTsCk/O P+V3npkOvVYgIE3EsujDKvx8Zcsnx8Qlt4yxgaw9nUdilKv/WZ4tiLUKKVzPlrDC Z7Z4vClRN+n0uTjU/rfN6Ie7MYFSLFeThyDTI5nakxS4oKmvTwOCmbXtRNBvfwkq tihMK8gEOG0poXUroo3eP36qpXZVFDB4rzHTxTYDOjjnFVhQg+Gc0Ph8L7qP1Kdd gKbBccN68KkeZCQB -----END CERTIFICATE-----Generated at Mon Oct 5 01:30:58 2026 by rpki-client