$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft File: EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft (raw, json) Hash identifier: MQbn51uBYCfVPzzcScJeHHFenPQrHBD2PpbDsR9ZZmI= Subject key identifier: 38:31:46:A5:80:97:91:3D:46:E2:AA:6E:86:CC:7A:67:4C:30:ED:D1 Authority key identifier: EE:B9:FB:9A:32:9D:DB:5B:94:FC:5E:24:24:E5:72:EC:B9:EE:DE:52 Certificate issuer: /CN=EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52 Certificate serial: 6F33F77988CC5698C15760C2997BFEDF943DECE3 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft Manifest number: 0413 Signing time: Wed 25 Mar 2026 15:20:07 +0000 Manifest this update: Wed 25 Mar 2026 15:15:07 +0000 Manifest next update: Thu 26 Mar 2026 15:22:07 +0000 Files and hashes: 1: 326130663a383563313a3332353a3a2f34382d3438203d3e203434383137.roa (hash: uSP1b04ypI6YkdcUATcnsfImxsFMEg5GOI5iUoGVizg=) 2: EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.crl (hash: y96O4wYP19HT/G6p/QYYOGQbMOJvt1XkA6UPoHvPpR0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.crl rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:33:f7:79:88:cc:56:98:c1:57:60:c2:99:7b:fe:df:94:3d:ec:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52 Validity Not Before: Mar 25 15:15:07 2026 GMT Not After : Mar 26 15:22:07 2026 GMT Subject: CN=383146A58097913D46E2AA6E86CC7A674C30EDD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:90:c4:1f:d0:be:59:4a:22:20:8a:d7:37:bc: 81:96:19:47:2b:c1:11:2c:fe:8b:e2:94:7c:65:ba: f1:c5:e9:1f:58:67:66:34:1d:f7:88:ea:c6:fc:d1: 07:cb:3a:1c:b2:30:14:aa:44:4f:07:43:f0:0f:d3: 71:45:6e:93:0e:b8:d6:03:2e:39:21:54:a5:88:bf: 2c:a5:bc:cd:f7:fc:af:a4:5f:75:9f:a2:21:67:24: a5:c0:1b:a5:5f:55:7f:9b:02:d1:82:5b:20:87:bf: 5d:2e:87:ac:25:9d:94:a8:66:b6:ee:5d:be:64:b9: e8:0f:bd:aa:ca:db:d2:d8:22:aa:f4:9e:38:b8:e3: 7b:fb:84:44:d2:7e:2d:34:0e:bb:34:0b:3f:5a:17: 82:c4:49:a3:cf:5d:e8:bc:a6:12:ed:d8:aa:23:d3: 3f:90:f9:86:72:b9:af:14:88:9c:e8:98:69:c8:ea: e4:86:b9:04:8c:64:ab:41:81:a7:05:30:8d:7b:6c: 47:6f:ff:11:f7:36:9c:df:ca:c3:2b:96:3b:d4:5b: 9d:bd:7c:47:eb:3c:d4:63:48:f9:ab:5e:3f:f9:6a: 73:71:20:fb:fb:fa:cb:e9:bc:f1:08:3d:16:97:14: ba:e0:cf:63:e4:d4:3f:89:69:c2:b5:86:49:7a:c5: 60:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:31:46:A5:80:97:91:3D:46:E2:AA:6E:86:CC:7A:67:4C:30:ED:D1 X509v3 Authority Key Identifier: keyid:EE:B9:FB:9A:32:9D:DB:5B:94:FC:5E:24:24:E5:72:EC:B9:EE:DE:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:a5:6f:94:e4:0c:05:00:eb:45:20:b7:fa:a3:8b:4e:8e:17: f6:65:08:34:f3:90:86:fe:31:4b:46:a2:43:50:b2:30:cd:30: 37:45:5a:1b:ce:83:a6:1b:98:18:f8:fd:e7:4b:8f:84:c6:13: b7:65:cb:d5:c8:9c:af:3c:b0:9d:79:60:2d:4b:e5:25:5f:a8: b3:dd:73:e9:1b:fd:a5:2c:7e:b7:19:0d:f7:e8:25:1e:00:7d: 08:a3:e7:35:24:05:d1:8c:84:5e:f7:5a:95:14:fe:11:7a:27: ed:ec:00:c4:32:59:d3:88:da:56:01:5c:35:e1:fd:87:3a:3a: 5f:51:a0:ca:b4:a7:55:57:89:af:5a:fe:1b:22:7a:e0:3e:6d: d0:e0:15:69:87:19:85:18:05:8d:7d:6e:f2:ab:20:03:34:8f: 49:25:94:2b:e5:7b:7d:ed:be:0d:53:b1:b1:6c:30:15:df:10: 80:3c:10:da:d5:7d:8e:db:b1:48:0b:ff:0d:56:af:59:b7:2d: 2b:c0:cc:5e:af:70:da:63:31:9a:4d:05:ef:48:88:d7:66:62: d2:65:c0:7c:0b:16:9a:da:63:e7:65:94:5b:1b:bc:71:52:0b: 8c:18:6e:75:33:90:02:c4:25:30:74:e7:fa:a6:97:47:8d:66: d2:c5:8b:b3 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUbzP3eYjMVpjBV2DCmXv+35Q97OMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVCOUZCOUEzMjlEREI1Qjk0RkM1RTI0MjRFNTcyRUNC OUVFREU1MjAeFw0yNjAzMjUxNTE1MDdaFw0yNjAzMjYxNTIyMDdaMDMxMTAvBgNV BAMTKDM4MzE0NkE1ODA5NzkxM0Q0NkUyQUE2RTg2Q0M3QTY3NEMzMEVERDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvkMQf0L5ZSiIgitc3vIGWGUcr wREs/ovilHxluvHF6R9YZ2Y0HfeI6sb80QfLOhyyMBSqRE8HQ/AP03FFbpMOuNYD LjkhVKWIvyylvM33/K+kX3WfoiFnJKXAG6VfVX+bAtGCWyCHv10uh6wlnZSoZrbu Xb5kuegPvarK29LYIqr0nji443v7hETSfi00Drs0Cz9aF4LESaPPXei8phLt2Koj 0z+Q+YZyua8UiJzomGnI6uSGuQSMZKtBgacFMI17bEdv/xH3NpzfysMrljvUW529 fEfrPNRjSPmrXj/5anNxIPv7+svpvPEIPRaXFLrgz2Pk1D+JacK1hkl6xWCbAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUODFGpYCXkT1G4qpuhsx6Z0ww7dEwHwYDVR0j BBgwFoAU7rn7mjKd21uU/F4kJOVy7Lnu3lIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4 NzU1LzEvRUVCOUZCOUEzMjlEREI1Qjk0RkM1RTI0MjRFNTcyRUNCOUVFREU1Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC9FRUI5RkI5QTMyOUREQjVCOTRGQzVFMjQy NEU1NzJFQ0I5RUVERTUyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzMxMWU0N2M0LTAyZjAtNDY1Ny05MDIyLWQyYjgzY2ZmODc1NS8xL0VFQjlGQjlB MzI5RERCNUI5NEZDNUUyNDI0RTU3MkVDQjlFRURFNTIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCxpW+U 5AwFAOtFILf6o4tOjhf2ZQg085CG/jFLRqJDULIwzTA3RVobzoOmG5gY+P3nS4+E xhO3ZcvVyJyvPLCdeWAtS+UlX6iz3XPpG/2lLH63GQ336CUeAH0Io+c1JAXRjIRe 91qVFP4Reift7ADEMlnTiNpWAVw14f2HOjpfUaDKtKdVV4mvWv4bInrgPm3Q4BVp hxmFGAWNfW7yqyADNI9JJZQr5Xt97b4NU7GxbDAV3xCAPBDa1X2O27FIC/8NVq9Z ty0rwMxer3DaYzGaTQXvSIjXZmLSZcB8Cxaa2mPnZZRbG7xxUguMGG51M5ACxCUw dOf6ppdHjWbSxYuz -----END CERTIFICATE-----Generated at Thu Mar 26 02:27:29 2026 by rpki-client