$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft File: EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft (raw, json) Hash identifier: dbjkaGKXakWH0z/PMBXqUmYlC833winu7W2L7TmCAtU= Subject key identifier: 1D:D8:69:68:7C:D5:58:B6:72:90:7D:61:5D:D0:9D:76:82:DB:1E:13 Authority key identifier: EE:B9:FB:9A:32:9D:DB:5B:94:FC:5E:24:24:E5:72:EC:B9:EE:DE:52 Certificate issuer: /CN=EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52 Certificate serial: 3BD8F0D6A21D90D61E2BBB935AD8A2806A13C8C3 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft Manifest number: 0437 Signing time: Sun 19 Apr 2026 21:00:13 +0000 Manifest this update: Sun 19 Apr 2026 20:55:13 +0000 Manifest next update: Mon 20 Apr 2026 23:26:13 +0000 Files and hashes: 1: 326130663a383563313a3332353a3a2f34382d3438203d3e203434383137.roa (hash: uSP1b04ypI6YkdcUATcnsfImxsFMEg5GOI5iUoGVizg=) 2: EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.crl (hash: eSDSN3NsOy4i5KCXW6TZVZ3tneXJsgABea8W+V0/nrI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.crl rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 22:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:d8:f0:d6:a2:1d:90:d6:1e:2b:bb:93:5a:d8:a2:80:6a:13:c8:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52 Validity Not Before: Apr 19 20:55:13 2026 GMT Not After : Apr 20 23:26:13 2026 GMT Subject: CN=1DD869687CD558B672907D615DD09D7682DB1E13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e1:5c:ae:6f:7c:9b:2a:33:f4:85:82:e6:7e: c0:8c:51:2b:f5:2d:d7:bb:93:da:fe:7d:e9:e5:05: 16:3a:39:08:f8:2d:7c:5a:ba:a0:8b:7b:81:2b:e1: bd:72:b8:4a:a5:c6:ec:51:57:64:08:a5:58:53:e1: c9:a2:69:5b:8b:f1:37:a3:a9:5c:23:7c:1f:47:f9: f4:33:a6:6a:60:b3:34:73:9c:a1:86:3f:30:44:a4: 61:c7:7f:d5:55:40:76:d1:c6:da:a8:11:17:ec:5e: e1:f6:4b:42:91:9e:46:94:33:33:27:5d:61:cb:f4: 24:86:25:02:82:bd:bd:57:64:1d:59:d0:92:6e:8b: e7:d9:4f:91:c7:4d:7e:6e:a5:ae:91:f3:00:13:b3: c4:2a:03:5d:c3:1f:3a:bb:0f:2c:01:9b:21:f9:1a: 4b:d6:9c:8a:5e:33:37:24:d3:f5:0b:52:65:36:36: b2:82:08:da:69:fe:2d:a2:09:52:7d:fe:c5:a4:e3: 10:02:d1:1e:7c:10:75:2e:be:38:46:a9:75:7c:ca: aa:38:12:07:48:53:8b:36:d2:d5:43:70:01:97:48: 51:b5:55:88:58:5c:8c:58:f9:82:51:2c:88:85:16: cc:6d:88:09:ba:a8:ce:09:0c:2d:e4:23:15:91:5c: f1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:D8:69:68:7C:D5:58:B6:72:90:7D:61:5D:D0:9D:76:82:DB:1E:13 X509v3 Authority Key Identifier: keyid:EE:B9:FB:9A:32:9D:DB:5B:94:FC:5E:24:24:E5:72:EC:B9:EE:DE:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:11:b4:57:b5:06:4e:08:d4:fe:c3:8f:12:32:b6:93:e9:9a: 8a:28:5c:df:80:11:55:f0:eb:80:8c:44:4c:da:78:ab:1f:cf: 1f:6f:4b:65:d4:0f:58:45:45:c2:53:90:94:eb:41:da:16:d4: fb:0d:57:46:76:66:f6:9a:3a:38:53:c9:6f:9c:b0:54:c3:9e: 11:03:2b:f8:d3:a7:7e:7d:15:81:df:e8:9a:f9:fe:6a:f4:f5: bc:9e:d9:fe:7e:4f:31:4b:01:9c:25:ba:20:85:9c:8e:e3:db: 55:97:dc:ad:bc:96:6a:38:f1:26:1d:bb:84:6f:92:77:b7:db: 03:4e:ee:92:a9:ad:72:25:d6:da:98:0a:2e:9b:97:a2:91:1e: 75:b0:a1:62:e0:78:00:e2:9b:d3:ec:56:e8:a6:dc:0c:5b:28: c3:2f:9a:01:81:d8:bb:cf:88:92:2a:b4:b9:0d:6f:23:16:49: b3:9c:7c:a9:b7:57:10:5b:91:0a:35:a6:4d:ef:f5:28:bd:32: ff:2d:1f:c0:ac:11:ab:86:e2:db:90:5e:67:79:ef:11:f8:70: a6:96:2e:39:14:e8:67:95:45:ce:fc:5e:b8:82:1c:57:8b:c3: 7e:d4:c6:76:9a:0a:a1:02:b0:b2:20:7d:96:94:34:75:a0:00: bf:25:a6:fe -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUO9jw1qIdkNYeK7uTWtiigGoTyMMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVCOUZCOUEzMjlEREI1Qjk0RkM1RTI0MjRFNTcyRUNC OUVFREU1MjAeFw0yNjA0MTkyMDU1MTNaFw0yNjA0MjAyMzI2MTNaMDMxMTAvBgNV BAMTKDFERDg2OTY4N0NENTU4QjY3MjkwN0Q2MTVERDA5RDc2ODJEQjFFMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD4Vyub3ybKjP0hYLmfsCMUSv1 Lde7k9r+fenlBRY6OQj4LXxauqCLe4Er4b1yuEqlxuxRV2QIpVhT4cmiaVuL8Tej qVwjfB9H+fQzpmpgszRznKGGPzBEpGHHf9VVQHbRxtqoERfsXuH2S0KRnkaUMzMn XWHL9CSGJQKCvb1XZB1Z0JJui+fZT5HHTX5upa6R8wATs8QqA13DHzq7DywBmyH5 GkvWnIpeMzck0/ULUmU2NrKCCNpp/i2iCVJ9/sWk4xAC0R58EHUuvjhGqXV8yqo4 EgdIU4s20tVDcAGXSFG1VYhYXIxY+YJRLIiFFsxtiAm6qM4JDC3kIxWRXPHFAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUHdhpaHzVWLZykH1hXdCddoLbHhMwHwYDVR0j BBgwFoAU7rn7mjKd21uU/F4kJOVy7Lnu3lIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4 NzU1LzEvRUVCOUZCOUEzMjlEREI1Qjk0RkM1RTI0MjRFNTcyRUNCOUVFREU1Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC9FRUI5RkI5QTMyOUREQjVCOTRGQzVFMjQy NEU1NzJFQ0I5RUVERTUyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzMxMWU0N2M0LTAyZjAtNDY1Ny05MDIyLWQyYjgzY2ZmODc1NS8xL0VFQjlGQjlB MzI5RERCNUI5NEZDNUUyNDI0RTU3MkVDQjlFRURFNTIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBVEbRX tQZOCNT+w48SMraT6ZqKKFzfgBFV8OuAjERM2nirH88fb0tl1A9YRUXCU5CU60Ha FtT7DVdGdmb2mjo4U8lvnLBUw54RAyv406d+fRWB3+ia+f5q9PW8ntn+fk8xSwGc JboghZyO49tVl9ytvJZqOPEmHbuEb5J3t9sDTu6Sqa1yJdbamAoum5eikR51sKFi 4HgA4pvT7FboptwMWyjDL5oBgdi7z4iSKrS5DW8jFkmznHypt1cQW5EKNaZN7/Uo vTL/LR/ArBGrhuLbkF5nee8R+HCmli45FOhnlUXO/F64ghxXi8N+1MZ2mgqhArCy IH2WlDR1oAC/Jab+ -----END CERTIFICATE-----Generated at Mon Apr 20 08:41:24 2026 by rpki-client