$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft File: EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft (raw, json) Hash identifier: TZWT+EVr4e9zv4IFfsVwJDxXdtfYfBPwuDPU8edtJLY= Subject key identifier: 18:33:CF:19:7C:6C:63:95:17:20:9A:1A:27:FE:DD:A8:B5:BD:16:3D Authority key identifier: EE:B9:FB:9A:32:9D:DB:5B:94:FC:5E:24:24:E5:72:EC:B9:EE:DE:52 Certificate issuer: /CN=EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52 Certificate serial: 5D902F8C1A5BF73ABE721B9541055D179E668B61 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft Manifest number: 04F0 Signing time: Fri 04 Sep 2026 14:17:17 +0000 Manifest this update: Fri 04 Sep 2026 14:12:17 +0000 Manifest next update: Sat 05 Sep 2026 15:12:17 +0000 Files and hashes: 1: 326130663a383563313a3332353a3a2f34382d3438203d3e203434383137.roa (hash: 5lFV6n1egrRD+zZC7S5Y6cdaZ7S+Fa6NFVUn/ZEuZbs=) 2: EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.crl (hash: oh6gVREVEEOMDQyG/B5KD+iSb3v2UpHQggGfAeBvQf0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.crl rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 15:12:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:90:2f:8c:1a:5b:f7:3a:be:72:1b:95:41:05:5d:17:9e:66:8b:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52 Validity Not Before: Sep 4 14:12:17 2026 GMT Not After : Sep 5 15:12:17 2026 GMT Subject: CN=1833CF197C6C639517209A1A27FEDDA8B5BD163D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0b:e0:77:7f:98:ef:35:fd:3e:08:96:63:3c: 48:94:74:f7:f8:1e:74:f7:6d:cd:e0:8d:ea:be:75: 29:3e:1e:be:d1:d7:c2:6a:71:97:25:c4:dc:6d:1a: d7:8d:f6:c9:b0:f4:ad:fa:f4:f3:6b:54:19:ef:6c: 22:65:da:aa:43:9a:1e:aa:75:be:65:ea:0f:b0:ec: 07:04:9f:00:41:54:97:00:8b:f3:65:38:5d:82:8c: 46:b5:5e:5d:ed:89:fc:49:e4:a3:65:37:cc:ac:49: 18:13:42:21:31:b0:9b:21:fa:f9:d6:2c:20:c3:99: 77:8e:3f:ce:67:04:4a:41:bc:e4:bc:84:8c:d4:a6: e7:06:79:d5:bd:a9:29:c7:19:48:ee:e6:1e:7c:36: 19:0c:24:e4:ce:de:63:fb:5a:16:ff:1a:d0:08:77: 67:57:60:e4:6d:1e:6f:d3:5e:5c:93:d0:30:6b:48: 3b:b3:20:bd:e1:43:20:1f:14:91:4d:9e:75:77:66: 97:14:02:18:b0:f9:68:f0:32:fa:f0:88:cf:49:1d: 9e:f1:9e:a6:60:07:9f:81:55:62:6d:ac:03:82:9e: 92:c3:2f:c9:6f:aa:d3:03:d5:9a:66:56:38:8a:1e: 66:25:12:2d:fb:f3:2c:48:1e:8b:7d:1c:81:f0:d6: 5e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:33:CF:19:7C:6C:63:95:17:20:9A:1A:27:FE:DD:A8:B5:BD:16:3D X509v3 Authority Key Identifier: keyid:EE:B9:FB:9A:32:9D:DB:5B:94:FC:5E:24:24:E5:72:EC:B9:EE:DE:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:d7:e2:b8:39:9c:7d:78:07:f5:f3:da:c3:df:f6:15:c0:cf: 73:80:60:77:f0:2c:d3:f0:9b:92:ef:a0:28:8d:01:2e:c2:c9: 65:ec:d6:24:d0:03:62:91:ba:8a:ce:36:ba:a7:2f:ef:5d:7b: 0d:78:81:7b:ec:11:9e:3b:ca:5f:a5:25:d4:22:fc:9f:af:db: e5:bb:c0:bc:93:71:62:cb:69:aa:f1:75:32:f9:e0:f6:99:03: e4:f5:82:38:55:b6:b0:82:3d:94:5a:82:ee:88:fe:40:c0:68: d5:cf:41:93:85:f8:55:17:57:83:e6:19:81:ee:69:4c:69:8f: d8:08:f6:3c:d3:00:77:0b:f2:b9:4c:74:77:bd:94:88:30:d3: 8f:30:4c:d5:f8:44:ee:2a:c7:d2:75:40:1c:cb:11:8c:c7:60: 82:cf:8a:7c:0a:4f:71:d0:79:51:f1:72:88:f5:ab:88:52:4a: 5d:53:35:82:95:fa:f3:00:63:08:1e:84:01:96:5c:9e:e3:08: f5:ea:28:d5:ee:94:f7:06:ed:e2:4e:0c:56:ef:45:1b:12:d2: 2c:5f:e9:ec:e0:11:f4:e1:68:a6:84:1e:88:72:76:80:73:12: d0:62:57:64:35:b5:36:45:84:de:96:d0:93:8c:4b:23:b5:43: 2d:48:1f:7f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUXZAvjBpb9zq+chuVQQVdF55mi2EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVCOUZCOUEzMjlEREI1Qjk0RkM1RTI0MjRFNTcyRUNC OUVFREU1MjAeFw0yNjA5MDQxNDEyMTdaFw0yNjA5MDUxNTEyMTdaMDMxMTAvBgNV BAMTKDE4MzNDRjE5N0M2QzYzOTUxNzIwOUExQTI3RkVEREE4QjVCRDE2M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJC+B3f5jvNf0+CJZjPEiUdPf4 HnT3bc3gjeq+dSk+Hr7R18JqcZclxNxtGteN9smw9K369PNrVBnvbCJl2qpDmh6q db5l6g+w7AcEnwBBVJcAi/NlOF2CjEa1Xl3tifxJ5KNlN8ysSRgTQiExsJsh+vnW LCDDmXeOP85nBEpBvOS8hIzUpucGedW9qSnHGUju5h58NhkMJOTO3mP7Whb/GtAI d2dXYORtHm/TXlyT0DBrSDuzIL3hQyAfFJFNnnV3ZpcUAhiw+WjwMvrwiM9JHZ7x nqZgB5+BVWJtrAOCnpLDL8lvqtMD1ZpmVjiKHmYlEi378yxIHot9HIHw1l67AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUGDPPGXxsY5UXIJoaJ/7dqLW9Fj0wHwYDVR0j BBgwFoAU7rn7mjKd21uU/F4kJOVy7Lnu3lIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4 NzU1LzEvRUVCOUZCOUEzMjlEREI1Qjk0RkM1RTI0MjRFNTcyRUNCOUVFREU1Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC9FRUI5RkI5QTMyOUREQjVCOTRGQzVFMjQy NEU1NzJFQ0I5RUVERTUyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzMxMWU0N2M0LTAyZjAtNDY1Ny05MDIyLWQyYjgzY2ZmODc1NS8xL0VFQjlGQjlB MzI5RERCNUI5NEZDNUUyNDI0RTU3MkVDQjlFRURFNTIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAo1+K4 OZx9eAf189rD3/YVwM9zgGB38CzT8JuS76AojQEuwsll7NYk0ANikbqKzja6py/v XXsNeIF77BGeO8pfpSXUIvyfr9vlu8C8k3Fiy2mq8XUy+eD2mQPk9YI4Vbawgj2U WoLuiP5AwGjVz0GThfhVF1eD5hmB7mlMaY/YCPY80wB3C/K5THR3vZSIMNOPMEzV +ETuKsfSdUAcyxGMx2CCz4p8Ck9x0HlR8XKI9auIUkpdUzWClfrzAGMIHoQBllye 4wj16ijV7pT3Bu3iTgxW70UbEtIsX+ns4BH04WimhB6IcnaAcxLQYldkNbU2RYTe ltCTjEsjtUMtSB9/ -----END CERTIFICATE-----Generated at Fri Sep 4 22:23:08 2026 by rpki-client