$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft File: EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft (raw, json) Hash identifier: hBv+5ECISAzr3t3uUk8RvWFZSlaU/iIZePbqeLbPcK4= Subject key identifier: 4A:07:4B:C0:F5:23:75:C2:FB:73:C9:C4:07:E9:43:E6:2B:73:49:F0 Authority key identifier: EE:B9:FB:9A:32:9D:DB:5B:94:FC:5E:24:24:E5:72:EC:B9:EE:DE:52 Certificate issuer: /CN=EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52 Certificate serial: 21867213042063891C926A143CE17CCA8E80F8D3 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft Manifest number: 0434 Signing time: Fri 17 Apr 2026 17:01:31 +0000 Manifest this update: Fri 17 Apr 2026 16:56:31 +0000 Manifest next update: Sat 18 Apr 2026 19:21:31 +0000 Files and hashes: 1: 326130663a383563313a3332353a3a2f34382d3438203d3e203434383137.roa (hash: uSP1b04ypI6YkdcUATcnsfImxsFMEg5GOI5iUoGVizg=) 2: EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.crl (hash: Ut6IuHvaPBcqT61NBQ7xbgz4ajIK7oIDQsvDv6TP4P0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.crl rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:86:72:13:04:20:63:89:1c:92:6a:14:3c:e1:7c:ca:8e:80:f8:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52 Validity Not Before: Apr 17 16:56:31 2026 GMT Not After : Apr 18 19:21:31 2026 GMT Subject: CN=4A074BC0F52375C2FB73C9C407E943E62B7349F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9c:58:0b:ee:bc:1f:80:1f:3f:b0:84:33:2c: 91:e7:e6:30:b1:ed:0c:25:31:73:bf:54:04:a3:e0: 4b:10:18:dd:fe:f0:17:84:c9:7c:a7:e3:9d:53:b7: f6:11:7b:d3:cc:73:c9:30:6e:90:1d:25:22:2d:66: 9d:56:2a:2f:a4:7f:94:07:c5:fd:74:9b:44:e4:97: 48:2e:51:bc:25:be:33:0b:d1:e8:26:8c:49:90:e7: 62:4e:3d:1c:2c:b6:97:fa:d8:42:e0:80:46:5c:41: d2:dd:3e:cb:c7:a9:3a:e9:80:5b:25:df:a8:a0:96: 94:e6:8b:9e:3b:8d:f9:84:13:05:42:7d:fe:9a:99: 9f:1f:bf:69:20:b9:02:f0:a0:36:ed:8b:14:30:c5: ee:d0:9b:41:5a:7f:58:0b:3f:c5:1d:22:d7:85:a2: f1:8a:df:6a:38:ee:10:ef:39:51:24:30:62:ca:90: a1:7f:17:aa:58:b2:2e:85:a5:fb:47:0a:d8:4d:07: f9:b0:f4:24:c8:62:48:eb:2b:c8:a0:53:27:16:93: 73:3f:66:b4:a7:81:44:43:a6:5a:72:5f:42:60:0d: 1d:c3:fc:ae:2b:87:a7:e9:44:16:e6:f9:c6:32:ad: 7b:6d:cd:a8:06:b7:08:19:24:58:35:65:e9:f6:d9: c4:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:07:4B:C0:F5:23:75:C2:FB:73:C9:C4:07:E9:43:E6:2B:73:49:F0 X509v3 Authority Key Identifier: keyid:EE:B9:FB:9A:32:9D:DB:5B:94:FC:5E:24:24:E5:72:EC:B9:EE:DE:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:5d:8b:8d:17:11:4a:30:48:ce:c6:d8:61:50:aa:08:db:14: dc:58:74:fe:1a:8f:e1:48:3b:53:13:5f:39:7a:ff:e8:1f:f2: 14:3c:83:11:fd:bc:e7:fa:e1:90:2c:37:8d:9c:0d:10:ae:2c: ff:ce:1b:95:f6:81:0c:1f:ad:1c:d9:2e:a8:7b:b5:0a:ea:b8: 8b:fd:5b:d2:1a:ba:42:09:68:7e:a1:e8:26:51:a1:e4:ae:d2: db:76:e1:0f:11:1d:35:12:52:4c:83:26:58:3d:83:bc:d3:13: 5e:a2:0f:37:70:9c:6b:a8:d9:aa:89:b6:24:2e:92:b7:7c:6d: ac:61:56:81:e6:b8:a9:ec:c8:2d:4e:a4:e4:d6:8c:ca:2a:67: f0:b0:55:30:ce:b4:b9:a6:02:d5:40:c5:25:f2:b7:e3:03:84: 26:47:06:91:56:d4:19:08:9b:46:e3:03:85:23:08:c3:40:13: 10:73:a4:9a:49:c1:15:0f:d7:b0:d6:e0:2c:bf:16:c5:6e:2f: 7c:7c:a0:87:e1:a9:06:79:88:c3:33:4b:92:75:42:26:22:8b: f2:42:de:09:1d:42:da:50:ce:72:56:97:ee:7e:ea:89:46:56: 7b:3c:21:97:50:bd:d1:4a:e7:87:71:31:ba:63:ec:b4:58:fb: fe:6a:f2:cb -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUIYZyEwQgY4kckmoUPOF8yo6A+NMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVCOUZCOUEzMjlEREI1Qjk0RkM1RTI0MjRFNTcyRUNC OUVFREU1MjAeFw0yNjA0MTcxNjU2MzFaFw0yNjA0MTgxOTIxMzFaMDMxMTAvBgNV BAMTKDRBMDc0QkMwRjUyMzc1QzJGQjczQzlDNDA3RTk0M0U2MkI3MzQ5RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFnFgL7rwfgB8/sIQzLJHn5jCx 7QwlMXO/VASj4EsQGN3+8BeEyXyn451Tt/YRe9PMc8kwbpAdJSItZp1WKi+kf5QH xf10m0Tkl0guUbwlvjML0egmjEmQ52JOPRwstpf62ELggEZcQdLdPsvHqTrpgFsl 36iglpTmi547jfmEEwVCff6amZ8fv2kguQLwoDbtixQwxe7Qm0Faf1gLP8UdIteF ovGK32o47hDvOVEkMGLKkKF/F6pYsi6FpftHCthNB/mw9CTIYkjrK8igUycWk3M/ ZrSngURDplpyX0JgDR3D/K4rh6fpRBbm+cYyrXttzagGtwgZJFg1Zen22cQDAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUSgdLwPUjdcL7c8nEB+lD5itzSfAwHwYDVR0j BBgwFoAU7rn7mjKd21uU/F4kJOVy7Lnu3lIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4 NzU1LzEvRUVCOUZCOUEzMjlEREI1Qjk0RkM1RTI0MjRFNTcyRUNCOUVFREU1Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC9FRUI5RkI5QTMyOUREQjVCOTRGQzVFMjQy NEU1NzJFQ0I5RUVERTUyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzMxMWU0N2M0LTAyZjAtNDY1Ny05MDIyLWQyYjgzY2ZmODc1NS8xL0VFQjlGQjlB MzI5RERCNUI5NEZDNUUyNDI0RTU3MkVDQjlFRURFNTIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCyXYuN FxFKMEjOxthhUKoI2xTcWHT+Go/hSDtTE185ev/oH/IUPIMR/bzn+uGQLDeNnA0Q riz/zhuV9oEMH60c2S6oe7UK6riL/VvSGrpCCWh+oegmUaHkrtLbduEPER01ElJM gyZYPYO80xNeog83cJxrqNmqibYkLpK3fG2sYVaB5rip7MgtTqTk1ozKKmfwsFUw zrS5pgLVQMUl8rfjA4QmRwaRVtQZCJtG4wOFIwjDQBMQc6SaScEVD9ew1uAsvxbF bi98fKCH4akGeYjDM0uSdUImIovyQt4JHULaUM5yVpfufuqJRlZ7PCGXUL3RSueH cTG6Y+y0WPv+avLL -----END CERTIFICATE-----Generated at Fri Apr 17 19:43:48 2026 by rpki-client