$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft File: EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft (raw, json) Hash identifier: JNJ92cv0Wddfgne78r8mVlbmxkEYOL8TDb8IxZnzQBI= Subject key identifier: 32:A1:6F:24:48:06:ED:2C:0F:B0:65:C6:99:D4:38:3E:5A:F0:C8:27 Authority key identifier: EE:B9:FB:9A:32:9D:DB:5B:94:FC:5E:24:24:E5:72:EC:B9:EE:DE:52 Certificate issuer: /CN=EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52 Certificate serial: 19F87FB0847978E40D38D149268F849A958B7E9D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft Manifest number: 02D2 Signing time: Mon 21 Jul 2025 01:55:40 +0000 Manifest this update: Mon 21 Jul 2025 01:50:40 +0000 Manifest next update: Tue 22 Jul 2025 05:48:40 +0000 Files and hashes: 1: EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.crl (hash: dBYACkjB4b3B+7yafuX9FSeN3C8mJPJLPomAE/1tOO0=) 2: 326130663a383563313a3332353a3a2f34382d3438203d3e203434383137.roa (hash: pLh45pB1svAQHP5Xv38naFs3vwEc4Ksu1QAkru4X3nA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.crl rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Jul 2025 05:48:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:f8:7f:b0:84:79:78:e4:0d:38:d1:49:26:8f:84:9a:95:8b:7e:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52 Validity Not Before: Jul 21 01:50:40 2025 GMT Not After : Jul 22 05:48:40 2025 GMT Subject: CN=32A16F244806ED2C0FB065C699D4383E5AF0C827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f1:ea:c8:7e:60:ef:91:ee:08:29:c7:f0:18: 20:79:fe:25:71:c5:d2:2e:5e:cf:5f:71:ec:18:77: c1:54:d8:39:59:ab:0f:00:72:55:44:e0:81:bc:8c: 30:01:a5:0f:52:98:ef:91:08:0a:ae:3b:d1:86:7d: fc:40:fb:f4:73:4d:91:a6:eb:eb:fc:3f:b9:52:53: 92:59:32:89:64:eb:70:0a:89:6a:b9:14:0c:15:71: c0:2e:c0:91:fe:f4:29:68:b0:f8:d6:ff:cf:4e:96: e2:bb:b2:05:06:8b:59:75:1e:fb:ce:b5:02:ee:9d: cb:d8:c3:d2:3f:6c:e2:04:22:09:49:16:17:76:7f: 00:2c:af:6a:7a:e6:82:19:ee:aa:9a:ba:24:2e:44: 5a:ab:0a:5f:da:c8:d4:5a:1d:0b:e6:aa:cf:8a:96: 1a:ae:c0:da:8f:54:4f:f3:be:95:48:7d:4a:6b:36: a3:81:4f:1e:a4:0e:1b:ae:e6:c2:1f:08:bf:91:4e: 97:da:06:22:e8:ab:34:e6:a5:bf:d8:3c:2e:76:81: 12:04:4f:c4:83:b0:ef:3a:21:2d:2b:bf:a1:12:d1: 33:05:2f:5e:ef:e1:28:1d:79:ed:51:e7:c1:1e:88: 0c:07:28:7a:78:86:43:ac:9b:4f:02:fb:3c:d6:9e: 71:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A1:6F:24:48:06:ED:2C:0F:B0:65:C6:99:D4:38:3E:5A:F0:C8:27 X509v3 Authority Key Identifier: keyid:EE:B9:FB:9A:32:9D:DB:5B:94:FC:5E:24:24:E5:72:EC:B9:EE:DE:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:be:10:bf:34:96:46:8e:63:81:32:86:1b:03:2d:2e:72:03: cb:9a:ca:84:73:96:8e:ef:04:ad:75:bf:7e:46:2d:41:f4:f0: c9:cb:a4:ce:ab:ac:35:c1:f8:32:db:46:12:8a:75:7b:ef:9f: f2:c1:7c:71:ba:36:2c:d6:b3:f2:b0:84:3b:7b:74:c8:c3:4a: fe:52:3d:fe:ce:9c:14:bf:a1:63:86:81:8d:85:96:5f:86:b3: 3e:51:43:1c:2a:1c:76:6a:bf:ad:ff:72:69:56:6a:44:8d:d6: 6f:61:1a:bc:5f:92:1d:8e:59:db:27:b9:e8:9d:63:37:4f:f3: d4:a0:f7:f2:a4:a5:11:7e:de:28:f5:5a:e9:5f:9c:d9:b6:fb: 94:9a:ee:ec:cb:79:f1:35:f3:2f:0f:86:ba:67:4d:c7:d8:a8: ba:d4:5c:81:65:1b:4d:ec:fe:95:61:03:d6:cc:8b:af:f4:53: b4:e6:3d:56:87:d1:2b:42:4c:f6:bb:15:45:60:d6:f8:26:29: d6:d6:e2:37:ef:e3:6d:e0:b4:b3:74:2f:22:02:78:54:44:cf: 12:0c:c1:e2:c7:dc:66:3e:ca:64:a7:ae:57:53:85:f0:18:31: fd:25:8d:af:0b:cd:c9:bf:27:a8:1f:fa:30:49:b0:53:d4:29: 3e:ac:6b:5b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUGfh/sIR5eOQNONFJJo+EmpWLfp0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVCOUZCOUEzMjlEREI1Qjk0RkM1RTI0MjRFNTcyRUNC OUVFREU1MjAeFw0yNTA3MjEwMTUwNDBaFw0yNTA3MjIwNTQ4NDBaMDMxMTAvBgNV BAMTKDMyQTE2RjI0NDgwNkVEMkMwRkIwNjVDNjk5RDQzODNFNUFGMEM4MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN8erIfmDvke4IKcfwGCB5/iVx xdIuXs9fcewYd8FU2DlZqw8AclVE4IG8jDABpQ9SmO+RCAquO9GGffxA+/RzTZGm 6+v8P7lSU5JZMolk63AKiWq5FAwVccAuwJH+9ClosPjW/89OluK7sgUGi1l1HvvO tQLuncvYw9I/bOIEIglJFhd2fwAsr2p65oIZ7qqauiQuRFqrCl/ayNRaHQvmqs+K lhquwNqPVE/zvpVIfUprNqOBTx6kDhuu5sIfCL+RTpfaBiLoqzTmpb/YPC52gRIE T8SDsO86IS0rv6ES0TMFL17v4Sgdee1R58EeiAwHKHp4hkOsm08C+zzWnnGLAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUMqFvJEgG7SwPsGXGmdQ4PlrwyCcwHwYDVR0j BBgwFoAU7rn7mjKd21uU/F4kJOVy7Lnu3lIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4 NzU1LzEvRUVCOUZCOUEzMjlEREI1Qjk0RkM1RTI0MjRFNTcyRUNCOUVFREU1Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC9FRUI5RkI5QTMyOUREQjVCOTRGQzVFMjQy NEU1NzJFQ0I5RUVERTUyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzMxMWU0N2M0LTAyZjAtNDY1Ny05MDIyLWQyYjgzY2ZmODc1NS8xL0VFQjlGQjlB MzI5RERCNUI5NEZDNUUyNDI0RTU3MkVDQjlFRURFNTIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCMvhC/ NJZGjmOBMoYbAy0ucgPLmsqEc5aO7wStdb9+Ri1B9PDJy6TOq6w1wfgy20YSinV7 75/ywXxxujYs1rPysIQ7e3TIw0r+Uj3+zpwUv6FjhoGNhZZfhrM+UUMcKhx2ar+t /3JpVmpEjdZvYRq8X5IdjlnbJ7nonWM3T/PUoPfypKURft4o9VrpX5zZtvuUmu7s y3nxNfMvD4a6Z03H2Ki61FyBZRtN7P6VYQPWzIuv9FO05j1Wh9ErQkz2uxVFYNb4 JinW1uI37+Nt4LSzdC8iAnhURM8SDMHix9xmPspkp65XU4XwGDH9JY2vC83Jvyeo H/owSbBT1Ck+rGtb -----END CERTIFICATE-----Generated at Mon Jul 21 12:22:45 2025 by rpki-client