$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft File: EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft (raw, json) Hash identifier: 5n9L2bQVHmbRDXjBjd2fNopEjcxq7yOIodB7MM4wfFU= Subject key identifier: 36:E2:8A:B6:AA:FD:18:F9:D8:C4:47:74:A1:38:32:A9:3A:FD:D3:D8 Authority key identifier: EE:B9:FB:9A:32:9D:DB:5B:94:FC:5E:24:24:E5:72:EC:B9:EE:DE:52 Certificate issuer: /CN=EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52 Certificate serial: 526ED28B52A767CDFEB431EE5AD801716087CE75 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft Manifest number: 0534 Signing time: Sat 24 Oct 2026 23:48:27 +0000 Manifest this update: Sat 24 Oct 2026 23:43:27 +0000 Manifest next update: Mon 26 Oct 2026 00:40:27 +0000 Files and hashes: 1: EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.crl (hash: TFaZ8L4W4gQPYeg0mTIwYT47HA1hpcgwwsDM8ovvprM=) 2: 326130663a383563313a3332353a3a2f34382d3438203d3e203434383137.roa (hash: 5lFV6n1egrRD+zZC7S5Y6cdaZ7S+Fa6NFVUn/ZEuZbs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.crl rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Oct 2026 00:40:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:6e:d2:8b:52:a7:67:cd:fe:b4:31:ee:5a:d8:01:71:60:87:ce:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52 Validity Not Before: Oct 24 23:43:27 2026 GMT Not After : Oct 26 00:40:27 2026 GMT Subject: CN=36E28AB6AAFD18F9D8C44774A13832A93AFDD3D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:72:db:f7:82:0a:98:e9:25:8d:ff:76:a6:e7: d8:61:7e:8a:8b:ad:11:5d:ed:22:4a:fb:c8:0d:ee: e5:a4:71:03:e2:4d:7f:e7:1f:e4:ae:05:61:4c:51: 3a:3c:a1:c6:81:59:90:ae:57:fe:a8:e0:b8:ae:6c: 4b:8c:d1:8b:4c:02:83:5a:39:eb:44:6f:09:98:75: 81:fe:3a:8b:e8:1d:60:80:5d:47:63:75:ff:d5:f7: bc:1a:af:24:d6:31:50:52:48:13:2b:43:2c:a7:0b: 1f:26:a4:ef:5e:c6:be:04:41:cc:97:1d:20:aa:ea: bc:32:d2:d8:2c:4b:a5:c1:cd:d1:28:c4:5b:19:d1: e5:ab:97:0c:c5:8d:f7:a3:bc:31:3b:a5:7c:f9:2b: f7:8e:21:ee:bd:cc:3e:e1:ce:30:3a:d7:f6:46:87: ec:28:47:0d:54:af:c7:4e:61:51:29:c3:df:07:cb: 58:17:0b:00:a7:76:aa:b7:03:92:4d:a2:6f:cd:3c: 5c:e8:81:56:86:a0:1c:55:19:70:9c:d8:ef:3f:bb: 50:7c:57:ee:a5:80:86:7a:f2:4b:4d:fe:30:50:40: 5e:28:09:fd:a6:e7:b7:ac:03:0a:10:e0:c8:f3:5b: 81:f8:03:a1:dc:36:1a:b9:7a:da:3f:21:01:b0:ec: 00:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:E2:8A:B6:AA:FD:18:F9:D8:C4:47:74:A1:38:32:A9:3A:FD:D3:D8 X509v3 Authority Key Identifier: keyid:EE:B9:FB:9A:32:9D:DB:5B:94:FC:5E:24:24:E5:72:EC:B9:EE:DE:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:1b:c7:b7:7c:b5:3c:9a:c8:a2:eb:9f:30:8a:79:e9:66:6d: 34:82:21:cc:07:14:e1:c6:f0:b6:a9:a3:f9:6a:cf:1b:26:97: 0d:46:79:c4:6a:e0:4a:6a:a3:ae:3d:7a:f0:51:61:d0:b3:e8: da:be:c2:21:84:0a:5a:df:cd:27:45:d8:79:78:75:ad:ea:45: 8c:f5:13:af:db:12:08:97:85:cb:0f:6a:6c:d4:28:a5:53:49: 7c:30:2d:f1:05:79:45:62:38:36:31:ce:c9:09:cb:e3:33:2a: 90:d6:c1:2c:ea:0b:14:c0:26:e3:a0:ad:ab:15:3b:01:32:56: 20:7d:60:1c:3e:80:a8:da:ea:45:ab:1a:de:a6:cd:bb:d2:29: de:4c:82:a1:ee:cd:0b:7d:96:c7:da:29:58:24:99:bd:a5:20: a1:19:a3:8e:d2:54:12:16:01:40:bd:79:d6:cb:63:6e:31:87: 9b:d8:28:27:0e:92:a6:d1:c9:be:39:09:85:75:11:8d:03:08: d0:80:e8:e3:35:7c:0f:cc:a9:8f:3c:8e:e8:92:2a:8c:70:f1: 6d:a9:23:2a:84:37:e1:a1:0d:41:53:05:ee:ee:45:f5:8b:a4: 72:20:c5:0a:50:d3:ae:11:46:06:39:af:62:d1:8f:34:7a:95: 72:26:30:c9 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUUm7Si1KnZ83+tDHuWtgBcWCHznUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVCOUZCOUEzMjlEREI1Qjk0RkM1RTI0MjRFNTcyRUNC OUVFREU1MjAeFw0yNjEwMjQyMzQzMjdaFw0yNjEwMjYwMDQwMjdaMDMxMTAvBgNV BAMTKDM2RTI4QUI2QUFGRDE4RjlEOEM0NDc3NEExMzgzMkE5M0FGREQzRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5ctv3ggqY6SWN/3am59hhfoqL rRFd7SJK+8gN7uWkcQPiTX/nH+SuBWFMUTo8ocaBWZCuV/6o4LiubEuM0YtMAoNa OetEbwmYdYH+OovoHWCAXUdjdf/V97waryTWMVBSSBMrQyynCx8mpO9exr4EQcyX HSCq6rwy0tgsS6XBzdEoxFsZ0eWrlwzFjfejvDE7pXz5K/eOIe69zD7hzjA61/ZG h+woRw1Ur8dOYVEpw98Hy1gXCwCndqq3A5JNom/NPFzogVaGoBxVGXCc2O8/u1B8 V+6lgIZ68ktN/jBQQF4oCf2m57esAwoQ4MjzW4H4A6HcNhq5eto/IQGw7ADtAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUNuKKtqr9GPnYxEd0oTgyqTr909gwHwYDVR0j BBgwFoAU7rn7mjKd21uU/F4kJOVy7Lnu3lIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4 NzU1LzEvRUVCOUZCOUEzMjlEREI1Qjk0RkM1RTI0MjRFNTcyRUNCOUVFREU1Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC9FRUI5RkI5QTMyOUREQjVCOTRGQzVFMjQy NEU1NzJFQ0I5RUVERTUyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzMxMWU0N2M0LTAyZjAtNDY1Ny05MDIyLWQyYjgzY2ZmODc1NS8xL0VFQjlGQjlB MzI5RERCNUI5NEZDNUUyNDI0RTU3MkVDQjlFRURFNTIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC5G8e3 fLU8msii658winnpZm00giHMBxThxvC2qaP5as8bJpcNRnnEauBKaqOuPXrwUWHQ s+javsIhhApa380nRdh5eHWt6kWM9ROv2xIIl4XLD2ps1CilU0l8MC3xBXlFYjg2 Mc7JCcvjMyqQ1sEs6gsUwCbjoK2rFTsBMlYgfWAcPoCo2upFqxreps270ineTIKh 7s0LfZbH2ilYJJm9pSChGaOO0lQSFgFAvXnWy2NuMYeb2CgnDpKm0cm+OQmFdRGN AwjQgOjjNXwPzKmPPI7okiqMcPFtqSMqhDfhoQ1BUwXu7kX1i6RyIMUKUNOuEUYG Oa9i0Y80epVyJjDJ -----END CERTIFICATE-----Generated at Sun Oct 25 14:31:46 2026 by rpki-client