$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft File: EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft (raw, json) Hash identifier: jQxZ4XtlXDEuZgai9QoB3+29KcBMvfyNTSBa7v+X3ec= Subject key identifier: 69:81:4E:07:AD:AA:9E:36:C8:19:74:25:7C:1D:1E:E3:F1:70:03:96 Authority key identifier: EE:B9:FB:9A:32:9D:DB:5B:94:FC:5E:24:24:E5:72:EC:B9:EE:DE:52 Certificate issuer: /CN=EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52 Certificate serial: 3242F0DC18E8B3C48515D0935E96B23B4C653430 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft Manifest number: 03F3 Signing time: Sun 01 Mar 2026 09:10:06 +0000 Manifest this update: Sun 01 Mar 2026 09:05:06 +0000 Manifest next update: Mon 02 Mar 2026 11:34:06 +0000 Files and hashes: 1: 326130663a383563313a3332353a3a2f34382d3438203d3e203434383137.roa (hash: uSP1b04ypI6YkdcUATcnsfImxsFMEg5GOI5iUoGVizg=) 2: EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.crl (hash: 95qsoGMHahoRaFYpkS66FOmEIH1u6B38IhyolzXVT8A=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.crl rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 11:34:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:42:f0:dc:18:e8:b3:c4:85:15:d0:93:5e:96:b2:3b:4c:65:34:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52 Validity Not Before: Mar 1 09:05:06 2026 GMT Not After : Mar 2 11:34:06 2026 GMT Subject: CN=69814E07ADAA9E36C81974257C1D1EE3F1700396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:2f:19:bf:38:c5:8b:24:c8:73:36:7e:ed:60: ae:b5:ac:87:2a:54:4e:f0:65:a1:54:9e:ed:f8:a1: 7a:fc:c5:15:bd:c7:ff:ab:0e:49:67:8a:c2:9c:07: a6:1c:91:74:5d:2a:bc:d0:05:e1:98:c8:71:d0:b3: 44:5b:fa:2f:22:8c:8c:3e:e0:0d:9c:1f:59:eb:04: e0:ad:4d:b0:bc:65:7a:6a:29:c5:25:51:84:f0:71: 5f:95:5a:b1:1a:17:81:69:8a:ff:bf:b4:24:f3:1b: f4:8a:22:b8:2a:bb:21:86:3a:cb:35:ae:9e:f2:12: 27:fa:89:9d:92:40:3f:81:dc:d2:d1:a0:b1:2e:26: 68:97:56:35:a7:ba:30:79:c1:3e:e3:83:17:87:29: 26:29:0f:e0:62:98:c7:ff:b0:19:1b:73:3f:59:0b: 23:71:9b:1c:68:ac:65:16:61:92:70:ac:54:40:fb: 9c:fc:c3:48:18:bf:0f:22:a3:02:1f:6c:5c:03:c7: 21:0e:25:a3:57:af:47:f5:ec:71:12:73:ee:43:88: 18:62:e4:dd:97:2e:a4:36:13:ba:b5:46:bb:25:1f: 47:62:0f:64:4b:3c:e3:9c:02:92:bc:35:60:a9:93: cc:6e:ab:07:b7:d9:1f:35:ed:61:19:7e:18:f8:86: db:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:81:4E:07:AD:AA:9E:36:C8:19:74:25:7C:1D:1E:E3:F1:70:03:96 X509v3 Authority Key Identifier: keyid:EE:B9:FB:9A:32:9D:DB:5B:94:FC:5E:24:24:E5:72:EC:B9:EE:DE:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e0:8c:1c:59:aa:d2:cd:94:22:04:a2:3c:71:3d:90:f3:8b:59: 2b:1a:89:2b:34:f0:0c:80:f8:d6:7a:4f:d6:21:b5:60:fc:53: ec:82:4c:5a:e0:17:ef:1f:0a:a6:a4:02:1c:02:78:d8:9f:c1: 03:53:9c:09:27:14:56:db:54:1e:ba:c0:40:7b:ad:ba:44:29: c1:d8:2f:dc:99:91:2e:7b:93:91:c9:35:07:fd:8e:9a:90:d7: e6:fe:5f:f9:3f:11:c0:8b:3f:25:f8:f2:f9:72:5e:6f:60:ca: 50:ad:31:4f:89:4c:7a:c0:c8:bf:9c:9e:2d:a1:a6:54:39:91: af:43:23:e9:b0:23:1d:e1:f0:34:8e:ab:37:22:ad:37:63:08: 9a:0d:bb:45:d6:3a:f1:ce:06:ab:2a:a8:7c:ec:f2:94:f4:89: 32:2e:36:a3:d6:8a:6e:c8:c2:45:f2:56:71:fe:37:60:2f:90: 89:96:44:2b:9d:9c:60:1c:e7:dd:b6:57:84:c6:69:40:2e:49: 7e:d0:e9:c6:41:77:84:cb:7d:14:3f:b4:28:64:76:9b:67:ba: 9f:1a:21:cc:0b:8d:5a:dc:20:16:b0:41:03:5a:77:ff:87:d9: 2a:e6:58:55:94:5b:8f:48:2b:ff:d2:c6:a3:f5:93:71:a4:f7: 05:bc:ed:eb -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUMkLw3Bjos8SFFdCTXpayO0xlNDAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVCOUZCOUEzMjlEREI1Qjk0RkM1RTI0MjRFNTcyRUNC OUVFREU1MjAeFw0yNjAzMDEwOTA1MDZaFw0yNjAzMDIxMTM0MDZaMDMxMTAvBgNV BAMTKDY5ODE0RTA3QURBQTlFMzZDODE5NzQyNTdDMUQxRUUzRjE3MDAzOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqLxm/OMWLJMhzNn7tYK61rIcq VE7wZaFUnu34oXr8xRW9x/+rDklnisKcB6YckXRdKrzQBeGYyHHQs0Rb+i8ijIw+ 4A2cH1nrBOCtTbC8ZXpqKcUlUYTwcV+VWrEaF4Fpiv+/tCTzG/SKIrgquyGGOss1 rp7yEif6iZ2SQD+B3NLRoLEuJmiXVjWnujB5wT7jgxeHKSYpD+BimMf/sBkbcz9Z CyNxmxxorGUWYZJwrFRA+5z8w0gYvw8iowIfbFwDxyEOJaNXr0f17HESc+5DiBhi 5N2XLqQ2E7q1RrslH0diD2RLPOOcApK8NWCpk8xuqwe32R817WEZfhj4htu3AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUaYFOB62qnjbIGXQlfB0e4/FwA5YwHwYDVR0j BBgwFoAU7rn7mjKd21uU/F4kJOVy7Lnu3lIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4 NzU1LzEvRUVCOUZCOUEzMjlEREI1Qjk0RkM1RTI0MjRFNTcyRUNCOUVFREU1Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC9FRUI5RkI5QTMyOUREQjVCOTRGQzVFMjQy NEU1NzJFQ0I5RUVERTUyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzMxMWU0N2M0LTAyZjAtNDY1Ny05MDIyLWQyYjgzY2ZmODc1NS8xL0VFQjlGQjlB MzI5RERCNUI5NEZDNUUyNDI0RTU3MkVDQjlFRURFNTIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDgjBxZ qtLNlCIEojxxPZDzi1krGokrNPAMgPjWek/WIbVg/FPsgkxa4BfvHwqmpAIcAnjY n8EDU5wJJxRW21QeusBAe626RCnB2C/cmZEue5ORyTUH/Y6akNfm/l/5PxHAiz8l +PL5cl5vYMpQrTFPiUx6wMi/nJ4toaZUOZGvQyPpsCMd4fA0jqs3Iq03YwiaDbtF 1jrxzgarKqh87PKU9IkyLjaj1opuyMJF8lZx/jdgL5CJlkQrnZxgHOfdtleExmlA Lkl+0OnGQXeEy30UP7QoZHabZ7qfGiHMC41a3CAWsEEDWnf/h9kq5lhVlFuPSCv/ 0saj9ZNxpPcFvO3r -----END CERTIFICATE-----Generated at Sun Mar 1 20:57:36 2026 by rpki-client