$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft File: EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft (raw, json) Hash identifier: TP6NWZXR31iPRNBRCjjvN/DQDy1S1d6+hDriDJPuQvE= Subject key identifier: 8B:C5:AD:00:E6:35:2C:0C:6F:5A:45:ED:E0:FD:44:75:82:08:16:39 Authority key identifier: EE:B9:FB:9A:32:9D:DB:5B:94:FC:5E:24:24:E5:72:EC:B9:EE:DE:52 Certificate issuer: /CN=EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52 Certificate serial: 5FD27F7BD776719D991142D5EDD46D3B5CCA43CB Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft Manifest number: 04B3 Signing time: Tue 21 Jul 2026 09:17:17 +0000 Manifest this update: Tue 21 Jul 2026 09:12:17 +0000 Manifest next update: Wed 22 Jul 2026 11:01:17 +0000 Files and hashes: 1: EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.crl (hash: P+csmxZx6gYSinvgj/Qg8PTnSAQMwILKYGkIFvjM8FQ=) 2: 326130663a383563313a3332353a3a2f34382d3438203d3e203434383137.roa (hash: uSP1b04ypI6YkdcUATcnsfImxsFMEg5GOI5iUoGVizg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.crl rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 11:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:d2:7f:7b:d7:76:71:9d:99:11:42:d5:ed:d4:6d:3b:5c:ca:43:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52 Validity Not Before: Jul 21 09:12:17 2026 GMT Not After : Jul 22 11:01:17 2026 GMT Subject: CN=8BC5AD00E6352C0C6F5A45EDE0FD447582081639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:72:3c:f8:4a:b3:16:1b:b5:50:ef:d9:79:a1: a7:6c:0f:53:23:4c:42:df:85:7d:3f:7e:c0:20:cc: 68:1d:7d:0e:38:6b:be:5e:2e:51:ed:16:33:48:73: 0f:6a:5d:0d:db:73:bc:02:77:a5:01:a1:af:0b:49: cc:21:6e:47:d9:2e:ec:bc:f7:4e:94:97:3f:3a:88: 90:ff:3e:c8:e5:5f:83:c7:de:1f:3f:65:6f:77:90: 1a:5f:5f:e9:4c:49:2d:54:25:f8:26:d0:f7:49:df: 8f:5b:e1:04:41:e8:c5:8c:60:0e:4e:80:f8:91:d2: 11:c0:09:b5:b4:ae:8d:b8:b6:74:3f:0c:09:79:31: 50:dd:12:5f:5e:0d:3b:0d:37:5b:e7:21:35:b8:e4: a1:dd:1c:cb:28:3a:b9:3c:e1:a0:97:5b:e3:be:00: 63:18:d3:e3:cc:85:64:17:31:41:3b:ce:e1:ca:f1: 27:94:a6:96:b4:83:42:10:ea:af:2c:30:48:03:a1: f5:b3:1d:29:88:74:c5:73:7c:7b:15:1f:c0:3d:20: 1d:62:d3:19:e8:c7:f5:41:c7:7e:90:0a:23:42:55: 0f:d1:18:f8:a8:b7:ae:08:6a:67:c1:0a:f4:b4:9c: 85:ba:f4:13:1e:16:cd:be:8c:a5:18:f9:de:83:37: e6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C5:AD:00:E6:35:2C:0C:6F:5A:45:ED:E0:FD:44:75:82:08:16:39 X509v3 Authority Key Identifier: keyid:EE:B9:FB:9A:32:9D:DB:5B:94:FC:5E:24:24:E5:72:EC:B9:EE:DE:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:7b:1f:4b:8e:98:97:aa:c8:be:fe:46:2a:ef:c8:b2:95:2c: d8:84:fb:12:0f:0b:70:16:5d:9f:06:7c:e7:b3:be:64:bf:54: 30:0b:b4:c0:e9:f2:05:e5:9d:02:95:f7:e3:a6:bf:9c:c7:95: cb:8b:6d:af:9d:e1:dd:a3:16:03:a5:72:23:67:e8:d0:c3:ae: 21:8d:bb:3e:a0:b9:0c:77:30:20:c6:e3:c2:07:55:f5:81:a9: 26:d7:be:94:09:73:48:46:1f:55:64:f9:58:9e:6b:11:50:ab: 00:ee:4d:bb:00:ae:c5:7a:43:80:c9:b3:9c:ed:85:b5:91:a1: ff:5d:d2:47:2c:48:6b:64:70:31:1d:89:7e:51:26:41:a3:e1: 82:0a:fb:73:00:a9:f1:a3:2a:82:37:4a:1c:04:81:98:a7:42: 4e:ed:d6:b9:01:1f:82:f9:da:4c:b3:06:30:49:ba:37:7d:6d: 1c:c9:e8:e1:d9:6e:cd:3e:b5:5c:48:55:c0:e5:52:ce:d6:b2: d6:90:c5:6b:5c:d4:d9:6f:ba:f2:32:2b:ee:d2:35:4b:83:b7: 40:52:df:80:17:9a:69:22:d6:66:11:13:15:cc:88:31:3f:25: 33:ea:c2:a6:ca:4f:9c:14:11:97:2b:b4:7a:69:ef:7a:bf:93: e9:69:1a:d8 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUX9J/e9d2cZ2ZEULV7dRtO1zKQ8swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVCOUZCOUEzMjlEREI1Qjk0RkM1RTI0MjRFNTcyRUNC OUVFREU1MjAeFw0yNjA3MjEwOTEyMTdaFw0yNjA3MjIxMTAxMTdaMDMxMTAvBgNV BAMTKDhCQzVBRDAwRTYzNTJDMEM2RjVBNDVFREUwRkQ0NDc1ODIwODE2MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNcjz4SrMWG7VQ79l5oadsD1Mj TELfhX0/fsAgzGgdfQ44a75eLlHtFjNIcw9qXQ3bc7wCd6UBoa8LScwhbkfZLuy8 906Ulz86iJD/PsjlX4PH3h8/ZW93kBpfX+lMSS1UJfgm0PdJ349b4QRB6MWMYA5O gPiR0hHACbW0ro24tnQ/DAl5MVDdEl9eDTsNN1vnITW45KHdHMsoOrk84aCXW+O+ AGMY0+PMhWQXMUE7zuHK8SeUppa0g0IQ6q8sMEgDofWzHSmIdMVzfHsVH8A9IB1i 0xnox/VBx36QCiNCVQ/RGPiot64IamfBCvS0nIW69BMeFs2+jKUY+d6DN+b5AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUi8WtAOY1LAxvWkXt4P1EdYIIFjkwHwYDVR0j BBgwFoAU7rn7mjKd21uU/F4kJOVy7Lnu3lIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4 NzU1LzEvRUVCOUZCOUEzMjlEREI1Qjk0RkM1RTI0MjRFNTcyRUNCOUVFREU1Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC9FRUI5RkI5QTMyOUREQjVCOTRGQzVFMjQy NEU1NzJFQ0I5RUVERTUyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzMxMWU0N2M0LTAyZjAtNDY1Ny05MDIyLWQyYjgzY2ZmODc1NS8xL0VFQjlGQjlB MzI5RERCNUI5NEZDNUUyNDI0RTU3MkVDQjlFRURFNTIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQADex9L jpiXqsi+/kYq78iylSzYhPsSDwtwFl2fBnzns75kv1QwC7TA6fIF5Z0Clffjpr+c x5XLi22vneHdoxYDpXIjZ+jQw64hjbs+oLkMdzAgxuPCB1X1gakm176UCXNIRh9V ZPlYnmsRUKsA7k27AK7FekOAybOc7YW1kaH/XdJHLEhrZHAxHYl+USZBo+GCCvtz AKnxoyqCN0ocBIGYp0JO7da5AR+C+dpMswYwSbo3fW0cyejh2W7NPrVcSFXA5VLO 1rLWkMVrXNTZb7ryMivu0jVLg7dAUt+AF5ppItZmERMVzIgxPyUz6sKmyk+cFBGX K7R6ae96v5PpaRrY -----END CERTIFICATE-----Generated at Tue Jul 21 17:49:33 2026 by rpki-client