$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft File: EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft (raw, json) Hash identifier: 86D7EwiEP4Z5Flfp1D8czPV8YGaJKYLPl4HcSpa9ZJk= Subject key identifier: FE:C6:4B:E7:A2:4D:00:CC:A7:5E:C8:5E:7A:37:DD:CC:B1:CF:FF:31 Authority key identifier: EE:B9:FB:9A:32:9D:DB:5B:94:FC:5E:24:24:E5:72:EC:B9:EE:DE:52 Certificate issuer: /CN=EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52 Certificate serial: 04AF01F8533B0133E6CFC22DF590BFB7CD3B4FD9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft Manifest number: 030F Signing time: Sun 07 Sep 2025 14:03:44 +0000 Manifest this update: Sun 07 Sep 2025 13:58:44 +0000 Manifest next update: Mon 08 Sep 2025 14:28:44 +0000 Files and hashes: 1: EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.crl (hash: g375ncjgrhomcaQHIG5D1r0lsXC9IDkGitfW+HLITNU=) 2: 326130663a383563313a3332353a3a2f34382d3438203d3e203434383137.roa (hash: pLh45pB1svAQHP5Xv38naFs3vwEc4Ksu1QAkru4X3nA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.crl rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 14:28:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:af:01:f8:53:3b:01:33:e6:cf:c2:2d:f5:90:bf:b7:cd:3b:4f:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52 Validity Not Before: Sep 7 13:58:44 2025 GMT Not After : Sep 8 14:28:44 2025 GMT Subject: CN=FEC64BE7A24D00CCA75EC85E7A37DDCCB1CFFF31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:15:52:3b:5a:4e:60:79:57:85:ef:bb:60:bc: 9e:ff:bb:c3:50:ac:16:0b:8d:45:33:66:21:a0:45: 9f:6e:1a:a7:34:e6:55:6c:f2:6f:3f:a1:b1:61:42: 05:5d:c6:19:36:46:38:59:b0:25:48:f7:8b:a8:f7: 11:c7:20:fd:5f:43:b9:54:d1:8e:83:75:74:23:07: e9:bd:31:43:69:4a:e3:81:ba:d1:9b:de:5b:52:0e: ed:40:86:18:dc:24:2b:50:5a:96:87:64:d9:46:a2: a5:8d:d6:74:ab:3c:de:a6:8c:2f:48:33:f7:1d:a7: c2:86:9f:23:37:33:b8:99:96:64:0b:96:0b:94:ee: 8c:3c:7e:75:3a:bb:09:ae:c0:fc:01:7e:0b:70:4e: a5:5b:2f:f1:17:84:0c:66:41:59:b1:4a:ae:82:7a: e7:04:b9:d1:fb:bf:78:0e:0b:94:15:3e:79:fc:25: fe:f2:fb:00:30:0e:f5:cc:6e:9b:68:aa:f9:3f:4d: 7f:42:cf:d7:66:16:49:50:31:65:a0:60:d6:eb:c2: 47:8f:81:19:4c:cd:28:e5:7d:cf:1b:77:de:ce:07: be:a3:ec:4c:66:cd:b9:95:72:71:2d:54:b4:d3:16: 79:74:4b:dc:7f:53:69:a3:1d:c1:60:3c:1f:38:54: 41:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:C6:4B:E7:A2:4D:00:CC:A7:5E:C8:5E:7A:37:DD:CC:B1:CF:FF:31 X509v3 Authority Key Identifier: keyid:EE:B9:FB:9A:32:9D:DB:5B:94:FC:5E:24:24:E5:72:EC:B9:EE:DE:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:9c:da:09:64:19:b6:43:b1:fc:35:d5:d9:04:1d:6f:64:79: 5e:f5:83:da:a5:a7:ae:b6:5c:d3:3a:07:42:8d:c2:1d:c4:ff: 85:34:11:7a:82:35:f0:d7:7a:4b:28:46:50:23:81:0f:15:1f: bb:98:97:7a:1b:44:97:3b:57:34:f2:5c:83:c8:4c:b7:59:33: 1d:1b:c4:0f:28:e9:fa:bf:9f:89:bd:b9:5d:84:d9:d0:50:7f: cc:c5:04:16:14:01:3a:d6:6b:06:e7:b3:24:38:8e:f5:5c:5a: 17:67:ca:d9:15:0c:fd:cf:4c:3d:f4:4e:e0:95:76:f4:d3:1e: 23:ec:79:78:38:92:73:6c:77:59:f9:30:44:96:a1:8d:8c:78: 29:39:75:82:ac:a2:ee:ec:ea:5d:a1:d3:13:8c:c9:51:77:c9: 5d:14:c8:c7:6c:69:c1:b2:39:d8:48:a4:f0:47:d7:33:fd:db: 8c:95:9b:ec:b1:f1:d0:a1:23:64:0d:3b:f2:ef:6c:7e:78:6d: 60:16:c5:2f:c0:45:5f:b0:a4:ee:7e:ee:a1:bb:09:e2:2b:c7: 89:88:88:5e:50:e6:61:a7:68:9c:e5:8f:39:79:cd:a8:35:63: 8e:0c:8d:e3:66:fc:11:fb:5b:a2:11:fb:02:a9:40:80:0c:d7: 48:c0:07:23 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUBK8B+FM7ATPmz8It9ZC/t807T9kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVCOUZCOUEzMjlEREI1Qjk0RkM1RTI0MjRFNTcyRUNC OUVFREU1MjAeFw0yNTA5MDcxMzU4NDRaFw0yNTA5MDgxNDI4NDRaMDMxMTAvBgNV BAMTKEZFQzY0QkU3QTI0RDAwQ0NBNzVFQzg1RTdBMzdERENDQjFDRkZGMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDFVI7Wk5geVeF77tgvJ7/u8NQ rBYLjUUzZiGgRZ9uGqc05lVs8m8/obFhQgVdxhk2RjhZsCVI94uo9xHHIP1fQ7lU 0Y6DdXQjB+m9MUNpSuOButGb3ltSDu1AhhjcJCtQWpaHZNlGoqWN1nSrPN6mjC9I M/cdp8KGnyM3M7iZlmQLlguU7ow8fnU6uwmuwPwBfgtwTqVbL/EXhAxmQVmxSq6C eucEudH7v3gOC5QVPnn8Jf7y+wAwDvXMbptoqvk/TX9Cz9dmFklQMWWgYNbrwkeP gRlMzSjlfc8bd97OB76j7ExmzbmVcnEtVLTTFnl0S9x/U2mjHcFgPB84VEERAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU/sZL56JNAMynXsheejfdzLHP/zEwHwYDVR0j BBgwFoAU7rn7mjKd21uU/F4kJOVy7Lnu3lIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4 NzU1LzEvRUVCOUZCOUEzMjlEREI1Qjk0RkM1RTI0MjRFNTcyRUNCOUVFREU1Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC9FRUI5RkI5QTMyOUREQjVCOTRGQzVFMjQy NEU1NzJFQ0I5RUVERTUyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzMxMWU0N2M0LTAyZjAtNDY1Ny05MDIyLWQyYjgzY2ZmODc1NS8xL0VFQjlGQjlB MzI5RERCNUI5NEZDNUUyNDI0RTU3MkVDQjlFRURFNTIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAwnNoJ ZBm2Q7H8NdXZBB1vZHle9YPapaeutlzTOgdCjcIdxP+FNBF6gjXw13pLKEZQI4EP FR+7mJd6G0SXO1c08lyDyEy3WTMdG8QPKOn6v5+JvbldhNnQUH/MxQQWFAE61msG 57MkOI71XFoXZ8rZFQz9z0w99E7glXb00x4j7Hl4OJJzbHdZ+TBElqGNjHgpOXWC rKLu7OpdodMTjMlRd8ldFMjHbGnBsjnYSKTwR9cz/duMlZvssfHQoSNkDTvy72x+ eG1gFsUvwEVfsKTufu6huwniK8eJiIheUOZhp2ic5Y85ec2oNWOODI3jZvwR+1ui EfsCqUCADNdIwAcj -----END CERTIFICATE-----Generated at Sun Sep 7 23:10:44 2025 by rpki-client