$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft File: EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft (raw, json) Hash identifier: vjAAdDUhvZPQtLs1Z7mn9zR2PbA/JIRxoMQpJ9DC9Wg= Subject key identifier: D7:F0:CF:EB:42:13:4D:9A:34:00:1F:89:94:EC:AB:88:0C:CD:20:F9 Authority key identifier: EE:B9:FB:9A:32:9D:DB:5B:94:FC:5E:24:24:E5:72:EC:B9:EE:DE:52 Certificate issuer: /CN=EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52 Certificate serial: 48E5DC2D19C49C11414EB22D26C11970A04A2D43 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft Manifest number: 02EB Signing time: Sat 09 Aug 2025 09:18:52 +0000 Manifest this update: Sat 09 Aug 2025 09:13:52 +0000 Manifest next update: Sun 10 Aug 2025 10:11:52 +0000 Files and hashes: 1: EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.crl (hash: /MdytxkE8gK8QNDfjIHyoqii6JcXB7H0sp/3TaaGXJI=) 2: 326130663a383563313a3332353a3a2f34382d3438203d3e203434383137.roa (hash: pLh45pB1svAQHP5Xv38naFs3vwEc4Ksu1QAkru4X3nA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.crl rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 10 Aug 2025 10:11:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:e5:dc:2d:19:c4:9c:11:41:4e:b2:2d:26:c1:19:70:a0:4a:2d:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52 Validity Not Before: Aug 9 09:13:52 2025 GMT Not After : Aug 10 10:11:52 2025 GMT Subject: CN=D7F0CFEB42134D9A34001F8994ECAB880CCD20F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c8:16:64:c0:d0:ba:28:54:8b:95:77:df:9a: 5a:6a:0b:47:27:5c:80:28:83:cd:07:05:2b:b5:65: af:62:d4:bc:30:d0:75:ab:ff:64:bc:da:10:64:45: 2f:0b:f7:8a:48:e4:82:c7:39:68:72:62:6b:85:5b: 7f:99:5a:8c:39:f7:05:76:f6:55:2b:fd:01:df:ad: 1f:49:0a:64:1c:33:f3:0f:6a:8d:d7:03:ae:22:c8: 7e:4e:75:5b:12:43:2f:62:5c:52:55:02:ed:ee:b3: 7d:d8:0c:2f:4e:ba:49:ea:c3:c9:59:65:06:0e:cc: bc:a1:79:93:e5:7c:97:14:22:59:8b:6d:7f:ea:6e: 26:40:eb:48:1f:a7:e7:45:f8:ee:07:16:79:15:a4: 53:91:e8:95:82:66:be:5c:03:9e:25:54:67:72:c7: 63:9c:68:14:4c:63:09:83:f8:f6:3d:37:b1:9c:af: 12:a9:be:80:6a:0e:ca:80:12:d2:ac:99:d4:20:ec: 70:0b:d2:0b:0b:14:f5:89:61:26:45:b1:04:d5:fe: fb:8a:8d:ec:ab:04:d8:35:10:3a:6b:58:86:44:a7: 99:39:55:dc:7f:33:5d:4b:ef:b0:ae:60:dc:c4:19: a8:d6:af:4d:3c:52:b2:13:48:58:32:32:8b:08:dc: dd:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:F0:CF:EB:42:13:4D:9A:34:00:1F:89:94:EC:AB:88:0C:CD:20:F9 X509v3 Authority Key Identifier: keyid:EE:B9:FB:9A:32:9D:DB:5B:94:FC:5E:24:24:E5:72:EC:B9:EE:DE:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e4:ce:02:df:6e:ac:81:21:a4:c1:46:47:02:a0:6c:3e:ad:d7: 7d:d2:3a:a3:59:dc:33:2f:5a:88:3d:87:f9:b1:12:e6:37:1e: 1f:d3:c3:4b:41:20:e5:40:7e:5f:8f:29:72:c7:01:6d:e9:f6: f9:10:28:cb:77:10:af:7b:3b:de:78:9e:3d:33:47:0a:13:a5: 91:1c:92:33:b4:6e:5f:a3:68:f6:f3:bb:08:62:e8:54:38:3a: a0:5c:0d:2a:49:b6:e8:37:5f:23:79:05:ea:07:b0:b6:0e:37: 9f:b3:e2:f9:55:92:be:bd:3e:a8:be:9d:23:10:2c:04:43:a8: 82:39:3d:3f:33:d1:4c:43:5c:a4:5f:e9:a0:03:d0:90:b4:56: 2a:c5:af:c9:93:9c:b6:ef:52:32:7f:17:fa:59:63:57:6e:5e: 06:83:f7:1e:59:cd:cf:78:10:74:55:44:c8:20:76:e1:9d:93: 92:3d:7e:46:2f:db:85:15:84:dc:c6:84:c7:eb:87:98:7e:13: e6:f7:50:86:30:a9:06:0c:37:4b:23:0e:70:c1:eb:d8:03:62: d1:f6:aa:75:24:e1:f4:3a:eb:1c:c0:2a:fa:de:55:e1:0d:a0: 0b:64:5a:a6:17:4e:0b:74:49:13:80:cb:d3:07:0a:f9:c9:15: 22:f3:e0:7b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUSOXcLRnEnBFBTrItJsEZcKBKLUMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVCOUZCOUEzMjlEREI1Qjk0RkM1RTI0MjRFNTcyRUNC OUVFREU1MjAeFw0yNTA4MDkwOTEzNTJaFw0yNTA4MTAxMDExNTJaMDMxMTAvBgNV BAMTKEQ3RjBDRkVCNDIxMzREOUEzNDAwMUY4OTk0RUNBQjg4MENDRDIwRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcyBZkwNC6KFSLlXffmlpqC0cn XIAog80HBSu1Za9i1Lww0HWr/2S82hBkRS8L94pI5ILHOWhyYmuFW3+ZWow59wV2 9lUr/QHfrR9JCmQcM/MPao3XA64iyH5OdVsSQy9iXFJVAu3us33YDC9Ouknqw8lZ ZQYOzLyheZPlfJcUIlmLbX/qbiZA60gfp+dF+O4HFnkVpFOR6JWCZr5cA54lVGdy x2OcaBRMYwmD+PY9N7GcrxKpvoBqDsqAEtKsmdQg7HAL0gsLFPWJYSZFsQTV/vuK jeyrBNg1EDprWIZEp5k5Vdx/M11L77CuYNzEGajWr008UrITSFgyMosI3N0JAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU1/DP60ITTZo0AB+JlOyriAzNIPkwHwYDVR0j BBgwFoAU7rn7mjKd21uU/F4kJOVy7Lnu3lIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4 NzU1LzEvRUVCOUZCOUEzMjlEREI1Qjk0RkM1RTI0MjRFNTcyRUNCOUVFREU1Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC9FRUI5RkI5QTMyOUREQjVCOTRGQzVFMjQy NEU1NzJFQ0I5RUVERTUyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzMxMWU0N2M0LTAyZjAtNDY1Ny05MDIyLWQyYjgzY2ZmODc1NS8xL0VFQjlGQjlB MzI5RERCNUI5NEZDNUUyNDI0RTU3MkVDQjlFRURFNTIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDkzgLf bqyBIaTBRkcCoGw+rdd90jqjWdwzL1qIPYf5sRLmNx4f08NLQSDlQH5fjylyxwFt 6fb5ECjLdxCvezveeJ49M0cKE6WRHJIztG5fo2j287sIYuhUODqgXA0qSbboN18j eQXqB7C2Djefs+L5VZK+vT6ovp0jECwEQ6iCOT0/M9FMQ1ykX+mgA9CQtFYqxa/J k5y271Iyfxf6WWNXbl4Gg/ceWc3PeBB0VUTIIHbhnZOSPX5GL9uFFYTcxoTH64eY fhPm91CGMKkGDDdLIw5wwevYA2LR9qp1JOH0OuscwCr63lXhDaALZFqmF04LdEkT gMvTBwr5yRUi8+B7 -----END CERTIFICATE-----Generated at Sun Aug 10 05:01:28 2025 by rpki-client