$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft File: EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft (raw, json) Hash identifier: pZarwRPDdFMP/B84/YTEJ21xDLcaJAFXJGslOM0IWnM= Subject key identifier: BC:2E:21:91:9F:A5:42:A4:67:29:6E:65:F4:94:32:2B:52:F5:1C:E5 Authority key identifier: EE:B9:FB:9A:32:9D:DB:5B:94:FC:5E:24:24:E5:72:EC:B9:EE:DE:52 Certificate issuer: /CN=EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52 Certificate serial: 47C1C46BCFB3354DBAA83414DFFA775F84B513FD Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft Manifest number: 0339 Signing time: Mon 27 Oct 2025 20:40:32 +0000 Manifest this update: Mon 27 Oct 2025 20:35:32 +0000 Manifest next update: Tue 28 Oct 2025 21:43:32 +0000 Files and hashes: 1: 326130663a383563313a3332353a3a2f34382d3438203d3e203434383137.roa (hash: uSP1b04ypI6YkdcUATcnsfImxsFMEg5GOI5iUoGVizg=) 2: EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.crl (hash: SVxYNaQ7tsNOt4ThuB+0lm3W0H+ezlyCIFMpLecyzfk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.crl rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Oct 2025 21:43:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:c1:c4:6b:cf:b3:35:4d:ba:a8:34:14:df:fa:77:5f:84:b5:13:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52 Validity Not Before: Oct 27 20:35:32 2025 GMT Not After : Oct 28 21:43:32 2025 GMT Subject: CN=BC2E21919FA542A467296E65F494322B52F51CE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:96:27:51:ef:71:c8:cb:7a:87:86:c6:ad:b5: 1f:32:d7:9b:dd:9b:53:c9:49:7a:48:d4:9e:b0:a6: 4b:7a:33:e0:2a:3b:ca:bb:22:03:c9:a5:4c:a4:8f: ca:3d:f2:18:c0:fc:7d:77:0c:6e:69:49:c8:c4:2b: 6a:92:0d:f7:47:67:34:6e:93:b5:83:4b:19:82:64: f6:84:f3:20:e0:90:99:69:3a:3a:78:25:3b:19:cc: 51:79:99:25:71:59:e4:14:67:6c:0d:d1:7d:8a:10: 43:58:16:98:40:ba:b3:29:6e:eb:23:0f:f3:95:46: a3:29:cc:14:8d:75:f9:ce:e1:0f:48:13:3f:2b:c1: 69:d3:22:73:23:2e:d9:9c:bc:a1:00:c6:e0:22:ea: db:2b:f4:b1:54:25:16:7e:ee:4a:7f:8a:86:a9:9e: 06:64:e2:c5:8b:9d:e6:5f:06:fd:b7:3f:9f:b2:b3: 20:b9:89:1c:c8:14:0d:6a:a1:ba:fc:19:e0:a7:e6: 46:3f:c6:22:69:3a:18:ee:f3:91:0c:81:84:86:3e: 0c:fc:fd:9d:9e:76:cc:74:2c:c4:b1:f3:29:9c:c0: 07:68:35:8b:01:e8:44:58:ab:75:03:c2:dc:6b:b6: 60:b7:ef:3c:d0:ff:8a:af:c8:37:16:c7:91:4a:2f: 5f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:2E:21:91:9F:A5:42:A4:67:29:6E:65:F4:94:32:2B:52:F5:1C:E5 X509v3 Authority Key Identifier: keyid:EE:B9:FB:9A:32:9D:DB:5B:94:FC:5E:24:24:E5:72:EC:B9:EE:DE:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:e1:25:03:fa:a0:cb:f5:84:4c:fa:97:54:38:b3:c5:29:a2: a9:bd:ce:89:ec:42:38:14:33:90:da:c8:f7:8b:94:23:1b:42: 62:c0:b7:91:e4:07:57:50:85:24:53:69:8b:db:89:82:fb:76: fa:88:8c:f3:f1:5f:24:00:d7:62:0f:3b:f1:09:12:07:4b:0c: ed:4e:34:5a:1f:e8:53:63:31:46:eb:ba:38:5e:c8:d2:0d:92: 47:b1:f4:f5:f1:b8:64:ce:c0:92:7f:81:35:44:26:9d:11:d7: f9:eb:da:77:f2:db:b5:dc:08:d5:70:55:5b:ab:8d:7c:3a:c6: 42:ac:d4:85:f8:1c:2f:bd:38:c6:f5:03:37:fa:4d:f0:15:82: 99:4f:de:a9:c2:d3:ab:7b:fb:50:0a:78:82:f7:6b:96:1b:02: d2:9c:b6:a6:ca:b3:43:67:78:b9:82:a7:58:63:62:3c:3e:80: 6b:36:94:d1:75:f5:c4:e1:cc:f9:08:e0:1c:1c:e2:85:90:d9: dd:86:b4:0f:cd:2b:e9:13:a1:d4:98:e3:b2:5a:4f:0f:c5:de: b7:8a:66:38:84:f6:30:65:3e:d3:07:96:a1:fe:ce:79:95:89: 3a:31:fd:59:c2:b0:79:e3:7f:d7:83:a4:0d:f2:05:0f:8b:bb: f8:12:70:ca -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUR8HEa8+zNU26qDQU3/p3X4S1E/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVCOUZCOUEzMjlEREI1Qjk0RkM1RTI0MjRFNTcyRUNC OUVFREU1MjAeFw0yNTEwMjcyMDM1MzJaFw0yNTEwMjgyMTQzMzJaMDMxMTAvBgNV BAMTKEJDMkUyMTkxOUZBNTQyQTQ2NzI5NkU2NUY0OTQzMjJCNTJGNTFDRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDblidR73HIy3qHhsattR8y15vd m1PJSXpI1J6wpkt6M+AqO8q7IgPJpUykj8o98hjA/H13DG5pScjEK2qSDfdHZzRu k7WDSxmCZPaE8yDgkJlpOjp4JTsZzFF5mSVxWeQUZ2wN0X2KEENYFphAurMpbusj D/OVRqMpzBSNdfnO4Q9IEz8rwWnTInMjLtmcvKEAxuAi6tsr9LFUJRZ+7kp/ioap ngZk4sWLneZfBv23P5+ysyC5iRzIFA1qobr8GeCn5kY/xiJpOhju85EMgYSGPgz8 /Z2edsx0LMSx8ymcwAdoNYsB6ERYq3UDwtxrtmC37zzQ/4qvyDcWx5FKL1/jAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUvC4hkZ+lQqRnKW5l9JQyK1L1HOUwHwYDVR0j BBgwFoAU7rn7mjKd21uU/F4kJOVy7Lnu3lIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4 NzU1LzEvRUVCOUZCOUEzMjlEREI1Qjk0RkM1RTI0MjRFNTcyRUNCOUVFREU1Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC9FRUI5RkI5QTMyOUREQjVCOTRGQzVFMjQy NEU1NzJFQ0I5RUVERTUyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzMxMWU0N2M0LTAyZjAtNDY1Ny05MDIyLWQyYjgzY2ZmODc1NS8xL0VFQjlGQjlB MzI5RERCNUI5NEZDNUUyNDI0RTU3MkVDQjlFRURFNTIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDX4SUD +qDL9YRM+pdUOLPFKaKpvc6J7EI4FDOQ2sj3i5QjG0JiwLeR5AdXUIUkU2mL24mC +3b6iIzz8V8kANdiDzvxCRIHSwztTjRaH+hTYzFG67o4XsjSDZJHsfT18bhkzsCS f4E1RCadEdf569p38tu13AjVcFVbq418OsZCrNSF+BwvvTjG9QM3+k3wFYKZT96p wtOre/tQCniC92uWGwLSnLamyrNDZ3i5gqdYY2I8PoBrNpTRdfXE4cz5COAcHOKF kNndhrQPzSvpE6HUmOOyWk8Pxd63imY4hPYwZT7TB5ah/s55lYk6Mf1ZwrB543/X g6QN8gUPi7v4EnDK -----END CERTIFICATE-----Generated at Tue Oct 28 14:24:21 2025 by rpki-client