$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft File: EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft (raw, json) Hash identifier: bkk+qmdze0ryPh+jRdPS4G25TuJyjmBRFeita1TxRqM= Subject key identifier: 3C:81:AF:7F:13:B5:FC:45:0D:11:21:EB:05:BF:42:1B:AF:14:47:21 Authority key identifier: EE:B9:FB:9A:32:9D:DB:5B:94:FC:5E:24:24:E5:72:EC:B9:EE:DE:52 Certificate issuer: /CN=EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52 Certificate serial: 355BD0CB2491DCB0F2842AFC48F2EC10642CF9F7 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft Manifest number: 0344 Signing time: Tue 04 Nov 2025 22:28:43 +0000 Manifest this update: Tue 04 Nov 2025 22:23:43 +0000 Manifest next update: Thu 06 Nov 2025 01:13:43 +0000 Files and hashes: 1: EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.crl (hash: IzdaKDdVzbKzAFHzVVMQEJxSI83oYYzEBjUvHFFynNo=) 2: 326130663a383563313a3332353a3a2f34382d3438203d3e203434383137.roa (hash: uSP1b04ypI6YkdcUATcnsfImxsFMEg5GOI5iUoGVizg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.crl rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 22:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:5b:d0:cb:24:91:dc:b0:f2:84:2a:fc:48:f2:ec:10:64:2c:f9:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52 Validity Not Before: Nov 4 22:23:43 2025 GMT Not After : Nov 6 01:13:43 2025 GMT Subject: CN=3C81AF7F13B5FC450D1121EB05BF421BAF144721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:de:10:ea:09:72:d0:32:a1:27:77:27:b4:67: b1:98:e3:2d:51:d1:68:e1:fe:f3:ab:b9:86:cd:65: a9:a4:83:da:03:bf:46:ed:02:39:d2:4b:8c:4a:c0: be:4e:f5:c5:d7:0f:b4:4b:b3:b8:c5:c2:ae:d8:7d: 21:fc:7f:20:84:fc:62:5b:e6:31:3f:29:04:31:ea: a8:67:08:d5:5f:41:a7:f8:0c:1b:1e:63:ef:c4:8c: e9:9c:85:76:53:c5:7c:98:28:73:e8:22:6e:79:36: 19:5f:72:55:77:71:ff:40:b0:21:f4:6e:74:a2:e1: 4a:2a:88:53:47:9a:4d:18:2a:07:0b:d4:72:05:65: c3:d9:6b:57:22:a0:6b:2e:a2:e0:a4:c6:16:48:c5: f5:3a:73:3d:1b:8d:59:9a:90:f4:fb:d9:fd:c2:e3: a2:02:fe:dc:97:aa:43:ad:53:ec:35:f5:a5:2a:c6: a6:22:fb:89:2e:90:54:0a:88:47:20:0f:c0:e1:e8: be:e5:9d:d9:9d:cf:ea:48:08:1f:a6:50:98:c1:a8: 76:88:19:d3:3e:51:d9:0b:77:f4:90:3a:42:6b:a5: 6c:37:f1:58:81:b2:60:2e:1e:ea:1d:ae:96:17:87: 80:f0:a2:43:ee:d4:31:3c:91:d9:4f:38:54:79:1b: 68:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:81:AF:7F:13:B5:FC:45:0D:11:21:EB:05:BF:42:1B:AF:14:47:21 X509v3 Authority Key Identifier: keyid:EE:B9:FB:9A:32:9D:DB:5B:94:FC:5E:24:24:E5:72:EC:B9:EE:DE:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:df:d3:ab:9d:8b:0c:05:cb:90:c5:1f:53:e7:ea:c0:64:25: d4:ca:63:68:50:90:56:90:ca:36:d2:1a:70:9e:82:68:ca:85: 84:c7:38:3a:36:c8:18:d1:83:97:71:79:c0:19:05:8e:3f:d9: 5f:0f:ad:96:b5:3c:b7:68:80:6e:16:96:02:25:cb:ba:1e:31: 62:ac:de:d7:27:40:3b:aa:95:9d:f9:b2:6a:a5:4b:e7:71:7a: 09:2c:df:b9:91:9d:c8:7f:d0:b4:4d:cb:22:e4:14:39:5a:3a: e5:d6:ae:a8:61:41:b2:a6:65:50:bb:5a:ae:df:2f:13:3a:7d: a3:0b:82:28:45:cd:38:0c:64:ad:20:f9:df:f9:e7:55:18:1b: 47:5e:08:d0:08:cd:60:b4:7f:58:42:65:82:92:31:9c:de:ab: 5e:45:7d:d3:d9:86:d6:48:7e:17:98:dd:b7:af:74:c6:25:6c: 53:96:c0:4e:78:83:cd:c4:9c:23:17:f0:15:d8:5c:04:1f:e7: 23:62:99:22:1c:57:b7:0a:cc:71:c6:62:f1:8c:a4:20:2b:87: 80:33:e6:8e:2e:a8:20:8f:f9:60:9a:96:de:bb:ae:05:c7:c3: b3:33:37:72:02:a3:2f:d1:6a:65:63:22:b0:10:52:db:cc:6c: d5:d4:6c:d4 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUNVvQyySR3LDyhCr8SPLsEGQs+fcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVCOUZCOUEzMjlEREI1Qjk0RkM1RTI0MjRFNTcyRUNC OUVFREU1MjAeFw0yNTExMDQyMjIzNDNaFw0yNTExMDYwMTEzNDNaMDMxMTAvBgNV BAMTKDNDODFBRjdGMTNCNUZDNDUwRDExMjFFQjA1QkY0MjFCQUYxNDQ3MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG3hDqCXLQMqEndye0Z7GY4y1R 0Wjh/vOruYbNZamkg9oDv0btAjnSS4xKwL5O9cXXD7RLs7jFwq7YfSH8fyCE/GJb 5jE/KQQx6qhnCNVfQaf4DBseY+/EjOmchXZTxXyYKHPoIm55NhlfclV3cf9AsCH0 bnSi4UoqiFNHmk0YKgcL1HIFZcPZa1cioGsuouCkxhZIxfU6cz0bjVmakPT72f3C 46IC/tyXqkOtU+w19aUqxqYi+4kukFQKiEcgD8Dh6L7lndmdz+pICB+mUJjBqHaI GdM+UdkLd/SQOkJrpWw38ViBsmAuHuodrpYXh4DwokPu1DE8kdlPOFR5G2iVAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUPIGvfxO1/EUNESHrBb9CG68URyEwHwYDVR0j BBgwFoAU7rn7mjKd21uU/F4kJOVy7Lnu3lIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4 NzU1LzEvRUVCOUZCOUEzMjlEREI1Qjk0RkM1RTI0MjRFNTcyRUNCOUVFREU1Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC9FRUI5RkI5QTMyOUREQjVCOTRGQzVFMjQy NEU1NzJFQ0I5RUVERTUyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzMxMWU0N2M0LTAyZjAtNDY1Ny05MDIyLWQyYjgzY2ZmODc1NS8xL0VFQjlGQjlB MzI5RERCNUI5NEZDNUUyNDI0RTU3MkVDQjlFRURFNTIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB139Or nYsMBcuQxR9T5+rAZCXUymNoUJBWkMo20hpwnoJoyoWExzg6NsgY0YOXcXnAGQWO P9lfD62WtTy3aIBuFpYCJcu6HjFirN7XJ0A7qpWd+bJqpUvncXoJLN+5kZ3If9C0 Tcsi5BQ5Wjrl1q6oYUGypmVQu1qu3y8TOn2jC4IoRc04DGStIPnf+edVGBtHXgjQ CM1gtH9YQmWCkjGc3qteRX3T2YbWSH4XmN23r3TGJWxTlsBOeIPNxJwjF/AV2FwE H+cjYpkiHFe3CsxxxmLxjKQgK4eAM+aOLqggj/lgmpbeu64Fx8OzMzdyAqMv0Wpl YyKwEFLbzGzV1GzU -----END CERTIFICATE-----Generated at Wed Nov 5 06:05:18 2025 by rpki-client