$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft File: ECC2D1AF90663968C0983906E34503A5F531FBA9.mft (raw, json) Hash identifier: eMdhddnNxDjQkVkWpMqJwDDr1TFo7Gs9RkUr/7sUgms= Subject key identifier: 4F:BD:15:0F:42:C2:60:E5:A8:7A:89:C5:59:80:B7:34:DF:54:BD:34 Authority key identifier: EC:C2:D1:AF:90:66:39:68:C0:98:39:06:E3:45:03:A5:F5:31:FB:A9 Certificate issuer: /CN=ECC2D1AF90663968C0983906E34503A5F531FBA9 Certificate serial: 4903F22D357B1D72704F29F2168B4054627DCF7B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/ECC2D1AF90663968C0983906E34503A5F531FBA9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft Manifest number: A6 Signing time: Tue 12 May 2026 16:54:11 +0000 Manifest this update: Tue 12 May 2026 16:49:11 +0000 Manifest next update: Wed 13 May 2026 17:02:11 +0000 Files and hashes: 1: ECC2D1AF90663968C0983906E34503A5F531FBA9.crl (hash: AvHu0rWmZ2TwAhTSZslWPURevRAQ+PWKC2B6BnvnO/A=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.crl rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/ECC2D1AF90663968C0983906E34503A5F531FBA9.cer rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 16:32:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:03:f2:2d:35:7b:1d:72:70:4f:29:f2:16:8b:40:54:62:7d:cf:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ECC2D1AF90663968C0983906E34503A5F531FBA9 Validity Not Before: May 12 16:49:11 2026 GMT Not After : May 13 17:02:11 2026 GMT Subject: CN=4FBD150F42C260E5A87A89C55980B734DF54BD34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fa:d1:51:62:6c:38:0b:90:dc:1c:71:d8:6a: fe:9d:da:ca:f0:3b:cd:26:cc:81:c9:60:3b:49:0d: 2a:9f:9f:bf:ea:b4:38:de:53:6d:41:bc:41:a1:3d: 54:19:3a:f6:48:59:2b:22:da:95:d6:e1:47:58:d2: f6:53:ba:52:6f:ed:d4:51:50:7d:8f:87:37:d7:0b: f0:5d:eb:36:ff:0b:50:7f:a2:5e:77:e0:9a:c8:24: c6:5d:63:cc:56:04:38:10:fe:2b:2f:de:c8:ba:87: cf:36:a2:34:8b:2a:2d:5d:a3:f1:a6:ea:cf:88:71: 1c:ac:c1:9f:38:f1:36:56:99:73:d8:01:d8:6d:4b: 4d:f7:3c:d0:92:04:40:1b:52:49:42:c0:1f:63:46: 81:24:40:1a:37:64:b4:42:a5:61:e0:29:ce:5e:2f: fa:98:fc:37:70:dc:21:df:a1:85:c8:d8:22:ca:22: 3b:87:7b:09:ea:97:d9:c9:e4:3b:08:88:62:80:17: 01:4a:4e:3d:8f:c4:c6:f8:2c:12:e1:cb:ba:80:49: 59:0e:12:95:8b:a5:80:00:4d:69:d4:3c:bb:e8:fe: ba:66:a7:90:69:e7:1a:9b:5f:88:a7:2a:2b:82:a6: f7:b5:0c:fa:9a:f7:ad:c7:05:03:f1:2d:74:47:2a: cd:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:BD:15:0F:42:C2:60:E5:A8:7A:89:C5:59:80:B7:34:DF:54:BD:34 X509v3 Authority Key Identifier: keyid:EC:C2:D1:AF:90:66:39:68:C0:98:39:06:E3:45:03:A5:F5:31:FB:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/ECC2D1AF90663968C0983906E34503A5F531FBA9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:aa:bb:0d:87:d6:31:99:4e:fe:3e:ec:a1:8e:d0:d7:8c:61: 73:0b:78:2a:ca:a9:bf:95:1f:42:c2:f5:b4:ee:99:46:ec:19: 6c:d5:b1:3e:9d:02:f6:01:13:ab:e5:6a:4b:12:8b:49:57:4d: 8a:ce:ac:ed:33:05:cc:b9:8f:26:96:d4:4a:5b:10:66:78:71: 19:0f:cf:57:cb:1d:ea:fa:a8:b9:fa:08:c0:de:4e:7f:8b:5a: 2a:b5:74:50:34:2f:f6:0b:24:e1:52:87:ae:e5:29:da:9e:ef: 2b:cf:ca:12:15:ca:b3:49:99:64:4f:de:46:4c:5e:de:5b:22: 6e:4e:84:61:9e:10:37:f6:2b:b1:e5:f9:60:45:4f:5a:78:48: 23:4e:44:38:d6:cb:2c:c2:48:ea:cf:d1:40:8f:52:3a:52:a0: 36:4e:39:22:b2:0d:fd:9d:c4:86:71:9a:11:00:9c:8a:b5:ce: 6a:bb:32:d9:f2:f8:a9:c4:90:d6:5e:2d:1a:e8:17:72:fd:31: 4a:e6:cb:bf:33:f8:1b:4f:04:0b:48:b7:39:27:c3:aa:03:ef: ca:3e:c1:40:dc:af:4d:43:f2:e4:45:60:de:51:51:6a:17:0f: 3d:a0:b7:25:01:35:b5:21:17:27:41:d8:76:fd:0b:2f:3e:37: cf:fd:9a:07 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUSQPyLTV7HXJwTynyFotAVGJ9z3swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUNDMkQxQUY5MDY2Mzk2OEMwOTgzOTA2RTM0NTAzQTVG NTMxRkJBOTAeFw0yNjA1MTIxNjQ5MTFaFw0yNjA1MTMxNzAyMTFaMDMxMTAvBgNV BAMTKDRGQkQxNTBGNDJDMjYwRTVBODdBODlDNTU5ODBCNzM0REY1NEJEMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu+tFRYmw4C5DcHHHYav6d2srw O80mzIHJYDtJDSqfn7/qtDjeU21BvEGhPVQZOvZIWSsi2pXW4UdY0vZTulJv7dRR UH2PhzfXC/Bd6zb/C1B/ol534JrIJMZdY8xWBDgQ/isv3si6h882ojSLKi1do/Gm 6s+IcRyswZ848TZWmXPYAdhtS033PNCSBEAbUklCwB9jRoEkQBo3ZLRCpWHgKc5e L/qY/Ddw3CHfoYXI2CLKIjuHewnql9nJ5DsIiGKAFwFKTj2PxMb4LBLhy7qASVkO EpWLpYAATWnUPLvo/rpmp5Bp5xqbX4inKiuCpve1DPqa963HBQPxLXRHKs0ZAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUT70VD0LCYOWoeonFWYC3NN9UvTQwHwYDVR0j BBgwFoAU7MLRr5BmOWjAmDkG40UDpfUx+6kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTUxN2I1ZDAtMzMxNy00YjQ5LThlYzUtYmU5MGJjNzAw NjJmLzMvRUNDMkQxQUY5MDY2Mzk2OEMwOTgzOTA2RTM0NTAzQTVGNTMxRkJBOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODFmOTc4Mi04OThlLTRi ODMtOTVlNi00ZmY0YWI3NWM5ZGMvMi9FQ0MyRDFBRjkwNjYzOTY4QzA5ODM5MDZF MzQ1MDNBNUY1MzFGQkE5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE1MTdiNWQwLTMzMTctNGI0OS04ZWM1LWJlOTBiYzcwMDYyZi8zL0VDQzJEMUFG OTA2NjM5NjhDMDk4MzkwNkUzNDUwM0E1RjUzMUZCQTkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAeqrsN h9YxmU7+PuyhjtDXjGFzC3gqyqm/lR9CwvW07plG7Bls1bE+nQL2AROr5WpLEotJ V02KzqztMwXMuY8mltRKWxBmeHEZD89Xyx3q+qi5+gjA3k5/i1oqtXRQNC/2CyTh Uoeu5Snanu8rz8oSFcqzSZlkT95GTF7eWyJuToRhnhA39iux5flgRU9aeEgjTkQ4 1ssswkjqz9FAj1I6UqA2Tjkisg39ncSGcZoRAJyKtc5quzLZ8vipxJDWXi0a6Bdy /TFK5su/M/gbTwQLSLc5J8OqA+/KPsFA3K9NQ/LkRWDeUVFqFw89oLclATW1IRcn Qdh2/QsvPjfP/ZoH -----END CERTIFICATE-----Generated at Wed May 13 07:19:33 2026 by rpki-client