$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft File: ECC2D1AF90663968C0983906E34503A5F531FBA9.mft (raw, json) Hash identifier: 4XhzKe6qSof0Aq2BxcJiLARyB09Jic+jL7rQv7H5ILY= Subject key identifier: F7:87:74:BB:93:7B:92:54:84:5B:78:BF:6A:BA:A4:05:3F:40:7D:2E Authority key identifier: EC:C2:D1:AF:90:66:39:68:C0:98:39:06:E3:45:03:A5:F5:31:FB:A9 Certificate issuer: /CN=ECC2D1AF90663968C0983906E34503A5F531FBA9 Certificate serial: 22A389D91A8D4D352EA09014734671A7F6B628DC Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/ECC2D1AF90663968C0983906E34503A5F531FBA9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft Manifest number: 0106 Signing time: Thu 23 Jul 2026 10:09:30 +0000 Manifest this update: Thu 23 Jul 2026 10:04:30 +0000 Manifest next update: Fri 24 Jul 2026 11:42:30 +0000 Files and hashes: 1: ECC2D1AF90663968C0983906E34503A5F531FBA9.crl (hash: dhp54v3xB9lLzFDf8f08RONoVek9wYQTr011epGQ1Es=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.crl rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/ECC2D1AF90663968C0983906E34503A5F531FBA9.cer rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 09:16:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:a3:89:d9:1a:8d:4d:35:2e:a0:90:14:73:46:71:a7:f6:b6:28:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ECC2D1AF90663968C0983906E34503A5F531FBA9 Validity Not Before: Jul 23 10:04:30 2026 GMT Not After : Jul 24 11:42:30 2026 GMT Subject: CN=F78774BB937B9254845B78BF6ABAA4053F407D2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e6:82:42:c4:02:e9:ea:60:f4:b9:62:ac:9f: 24:5e:ca:44:4b:55:e6:23:04:1f:88:55:bc:98:d5: 27:6e:38:4e:dc:b8:9c:34:9d:20:7a:1f:79:fc:52: 6e:a1:f3:23:d6:e9:ac:2d:3c:94:8b:ed:c7:89:b3: 17:10:54:52:1a:bd:5b:b8:18:87:29:b0:fc:f0:1d: 2a:66:c0:5c:63:73:8d:e6:9d:35:e5:a6:f9:cf:05: 4b:03:da:2b:10:6a:1a:2b:e1:8d:87:d3:8b:53:d7: 02:ba:63:14:c2:e8:af:64:d7:5c:cf:59:68:2a:83: 98:48:98:68:d7:a4:c4:1a:7d:24:e7:9f:93:ca:de: a1:8d:68:0a:13:e0:1d:3c:61:f3:41:d5:fc:21:09: 80:dd:47:2f:40:b9:1e:db:78:98:7f:75:c2:53:4b: ce:c8:e5:28:e2:e1:5c:be:9b:7d:8b:92:11:80:fc: 87:fe:61:f4:9b:95:2f:33:9e:10:5e:1a:eb:bc:19: 45:ef:4f:73:0a:da:c8:b4:fa:72:a1:93:77:de:a0: ed:a6:41:83:bf:58:4d:17:83:05:64:b4:ba:f0:af: 4e:4e:a5:05:65:4c:a7:70:29:cb:a1:94:ae:5f:f2: 51:08:04:50:3c:26:31:3a:45:0b:d4:9d:77:c4:54: 41:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:87:74:BB:93:7B:92:54:84:5B:78:BF:6A:BA:A4:05:3F:40:7D:2E X509v3 Authority Key Identifier: keyid:EC:C2:D1:AF:90:66:39:68:C0:98:39:06:E3:45:03:A5:F5:31:FB:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/ECC2D1AF90663968C0983906E34503A5F531FBA9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:3a:e6:26:81:1e:e5:18:79:79:e1:57:b7:51:d6:18:79:1a: c7:fb:77:56:8b:f6:cd:94:5e:59:b8:ad:8a:30:33:36:09:23: 85:e5:f9:f0:3a:b9:68:16:09:c7:59:e2:18:2d:9f:58:55:39: 69:96:d7:91:b8:5b:c0:08:3f:29:53:5b:c9:37:2d:69:37:90: 28:3b:7b:34:3d:ac:37:bc:4f:d5:77:30:1a:3d:76:65:98:a6: de:c2:74:62:b2:a2:80:3f:42:93:af:cb:2f:f9:dc:e6:ee:c9: cc:97:47:86:48:0c:47:93:6d:96:c1:04:66:b0:12:3c:65:31: 33:42:c6:ba:10:61:db:2d:94:ba:bb:dc:60:2a:58:ea:39:66: f6:92:a6:f1:d6:0f:8d:50:db:e0:ea:a6:93:bc:10:94:75:ee: 36:82:28:5b:9a:ad:ff:92:1e:12:d4:10:50:dd:23:16:83:ab: 8d:9f:66:98:f7:6f:01:71:7c:14:63:a6:dc:e5:53:e0:e3:23: 65:c5:cf:34:a6:58:11:f8:e9:6e:03:78:29:69:ca:a0:4c:a4: b5:03:05:69:6d:e3:18:2c:2f:e8:69:56:a9:89:59:83:8d:94: 34:43:18:cd:8b:a6:58:72:2a:33:ef:c6:26:44:c8:b0:e4:f4: 85:bd:83:19 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUIqOJ2RqNTTUuoJAUc0Zxp/a2KNwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUNDMkQxQUY5MDY2Mzk2OEMwOTgzOTA2RTM0NTAzQTVG NTMxRkJBOTAeFw0yNjA3MjMxMDA0MzBaFw0yNjA3MjQxMTQyMzBaMDMxMTAvBgNV BAMTKEY3ODc3NEJCOTM3QjkyNTQ4NDVCNzhCRjZBQkFBNDA1M0Y0MDdEMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo5oJCxALp6mD0uWKsnyReykRL VeYjBB+IVbyY1SduOE7cuJw0nSB6H3n8Um6h8yPW6awtPJSL7ceJsxcQVFIavVu4 GIcpsPzwHSpmwFxjc43mnTXlpvnPBUsD2isQahor4Y2H04tT1wK6YxTC6K9k11zP WWgqg5hImGjXpMQafSTnn5PK3qGNaAoT4B08YfNB1fwhCYDdRy9AuR7beJh/dcJT S87I5Sji4Vy+m32LkhGA/If+YfSblS8znhBeGuu8GUXvT3MK2si0+nKhk3feoO2m QYO/WE0XgwVktLrwr05OpQVlTKdwKcuhlK5f8lEIBFA8JjE6RQvUnXfEVEE5AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU94d0u5N7klSEW3i/arqkBT9AfS4wHwYDVR0j BBgwFoAU7MLRr5BmOWjAmDkG40UDpfUx+6kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTUxN2I1ZDAtMzMxNy00YjQ5LThlYzUtYmU5MGJjNzAw NjJmLzMvRUNDMkQxQUY5MDY2Mzk2OEMwOTgzOTA2RTM0NTAzQTVGNTMxRkJBOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODFmOTc4Mi04OThlLTRi ODMtOTVlNi00ZmY0YWI3NWM5ZGMvMi9FQ0MyRDFBRjkwNjYzOTY4QzA5ODM5MDZF MzQ1MDNBNUY1MzFGQkE5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE1MTdiNWQwLTMzMTctNGI0OS04ZWM1LWJlOTBiYzcwMDYyZi8zL0VDQzJEMUFG OTA2NjM5NjhDMDk4MzkwNkUzNDUwM0E1RjUzMUZCQTkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBtOuYm gR7lGHl54Ve3UdYYeRrH+3dWi/bNlF5ZuK2KMDM2CSOF5fnwOrloFgnHWeIYLZ9Y VTlplteRuFvACD8pU1vJNy1pN5AoO3s0Paw3vE/VdzAaPXZlmKbewnRisqKAP0KT r8sv+dzm7snMl0eGSAxHk22WwQRmsBI8ZTEzQsa6EGHbLZS6u9xgKljqOWb2kqbx 1g+NUNvg6qaTvBCUde42gihbmq3/kh4S1BBQ3SMWg6uNn2aY928BcXwUY6bc5VPg 4yNlxc80plgR+OluA3gpacqgTKS1AwVpbeMYLC/oaVapiVmDjZQ0QxjNi6ZYcioz 78YmRMiw5PSFvYMZ -----END CERTIFICATE-----Generated at Fri Jul 24 02:42:35 2026 by rpki-client