$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft File: 64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft (raw, json) Hash identifier: CQKmH6lmr/kXeq1PUD9G2MZf/6l84lfOLNo/OJSGUZ8= Subject key identifier: 12:B4:37:D0:AA:0B:B3:2B:6D:19:0F:DD:2E:E6:16:8A:87:B5:7F:40 Authority key identifier: 64:D6:29:AA:3C:F3:8F:9F:77:0A:DB:BB:20:C6:DE:BD:0B:8C:DE:05 Certificate issuer: /CN=64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05 Certificate serial: 754984A12A71C6624EFA2FF33F8E1EF494AC184E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft Manifest number: 0186 Signing time: Sat 13 Jun 2026 01:02:37 +0000 Manifest this update: Sat 13 Jun 2026 00:57:37 +0000 Manifest next update: Sun 14 Jun 2026 01:06:37 +0000 Files and hashes: 1: 326131343a373538313a333039303a3a2f34382d3438203d3e20323034323131.roa (hash: nGLAdkRiCVIQwTrXrRH2GZTJEYm4l5K5Qg4h/njNDzU=) 2: 64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.crl (hash: n9NFZWnLtq7rEbYwUhkZ/BCBbcNQLKf2H3AcR758hV0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:49:84:a1:2a:71:c6:62:4e:fa:2f:f3:3f:8e:1e:f4:94:ac:18:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05 Validity Not Before: Jun 13 00:57:37 2026 GMT Not After : Jun 14 01:06:37 2026 GMT Subject: CN=12B437D0AA0BB32B6D190FDD2EE6168A87B57F40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:e5:97:db:7d:c4:83:1b:bc:b2:55:54:5a:39: 22:48:f6:4d:c0:b6:f8:8a:a4:de:36:81:81:43:7f: 39:fe:a3:c0:02:5d:89:52:d6:ee:6b:ba:f5:5d:30: db:02:a8:52:6e:81:69:fb:e5:70:3b:57:27:28:0a: 27:54:fd:83:f7:8d:0c:28:9a:90:a1:ee:fc:17:8c: 3c:d0:e2:f2:cf:81:09:80:10:fe:16:34:1d:d6:4b: 55:9f:67:73:80:71:c3:e7:01:5a:10:12:f2:e2:95: 92:8b:c6:34:5d:c5:16:f9:ca:a2:73:df:25:34:aa: bb:b9:dc:b1:c6:80:bc:12:9b:e1:58:f1:e4:ef:4b: 92:8e:cd:58:8d:2a:c7:f1:a4:1a:30:63:f2:f1:4a: 55:39:a6:1a:d0:1f:02:63:9c:bc:53:b4:64:aa:43: c7:53:1f:db:bd:78:48:a0:04:c5:b8:93:b4:f0:f8: 33:39:ca:3d:5a:10:5a:c7:1c:19:d9:a9:c9:aa:b8: 3d:a0:88:82:d5:ad:0b:23:79:50:bd:a9:5c:b6:fd: 90:ee:85:7d:46:d3:87:16:ab:ec:ff:dd:92:1f:2d: 7e:0c:7c:96:32:5a:85:2c:c7:8e:83:05:ec:26:0b: fe:bd:86:ef:a8:d6:70:f5:23:d9:77:e9:58:20:81: b0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:B4:37:D0:AA:0B:B3:2B:6D:19:0F:DD:2E:E6:16:8A:87:B5:7F:40 X509v3 Authority Key Identifier: keyid:64:D6:29:AA:3C:F3:8F:9F:77:0A:DB:BB:20:C6:DE:BD:0B:8C:DE:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:c8:b5:50:f2:da:49:4e:71:92:56:86:d7:7c:f9:98:45:31: fd:1c:5c:a1:5e:d7:7c:14:22:cf:36:b0:91:38:0e:97:b5:a0: 84:92:56:7f:b6:bb:04:50:cb:ba:ed:40:f1:78:1b:b4:40:ec: ea:d5:44:a5:b1:9e:84:04:6f:cc:77:61:21:3a:84:be:96:66: 75:8f:3c:76:66:ff:d6:7f:e5:40:ce:1d:c2:aa:82:b6:d8:89: 69:6e:77:4f:fa:56:3f:8b:2a:af:de:63:8a:54:36:28:77:f9: 5b:2a:ea:a4:18:cf:60:80:aa:a3:13:d6:93:e6:e3:b9:43:21: 66:1f:20:b2:dc:95:47:f8:60:ee:03:fe:b0:5c:20:45:40:d0: 5c:c5:df:83:91:8b:4f:8c:9c:47:2d:42:39:ae:a9:cc:3f:2b: 84:14:ce:43:dc:69:55:9e:e9:f9:d0:8b:52:43:7f:8f:18:81: 56:87:54:3c:f6:67:f0:23:40:6a:e4:47:50:a8:a8:dc:f2:6c: 6d:a7:af:e6:a1:89:20:85:a1:1b:bc:d0:e7:70:ce:46:6c:56: 23:4b:dd:a4:db:75:15:4f:88:28:8d:97:70:9b:24:d5:18:05: ce:66:eb:73:37:ac:e6:19:76:41:86:69:e9:5f:2d:33:9f:2f: 0f:a0:97:73 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUdUmEoSpxxmJO+i/zP44e9JSsGE4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRENjI5QUEzQ0YzOEY5Rjc3MEFEQkJCMjBDNkRFQkQw QjhDREUwNTAeFw0yNjA2MTMwMDU3MzdaFw0yNjA2MTQwMTA2MzdaMDMxMTAvBgNV BAMTKDEyQjQzN0QwQUEwQkIzMkI2RDE5MEZERDJFRTYxNjhBODdCNTdGNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr5ZfbfcSDG7yyVVRaOSJI9k3A tviKpN42gYFDfzn+o8ACXYlS1u5ruvVdMNsCqFJugWn75XA7VycoCidU/YP3jQwo mpCh7vwXjDzQ4vLPgQmAEP4WNB3WS1WfZ3OAccPnAVoQEvLilZKLxjRdxRb5yqJz 3yU0qru53LHGgLwSm+FY8eTvS5KOzViNKsfxpBowY/LxSlU5phrQHwJjnLxTtGSq Q8dTH9u9eEigBMW4k7Tw+DM5yj1aEFrHHBnZqcmquD2giILVrQsjeVC9qVy2/ZDu hX1G04cWq+z/3ZIfLX4MfJYyWoUsx46DBewmC/69hu+o1nD1I9l36VgggbAvAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUErQ30KoLsyttGQ/dLuYWioe1f0AwHwYDVR0j BBgwFoAUZNYpqjzzj593Ctu7IMbevQuM3gUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjUzMmI5ZWItMmZhZS00OGE4LTk3OTMtMzNlZWMwNjdj ZTM5LzIvNjRENjI5QUEzQ0YzOEY5Rjc3MEFEQkJCMjBDNkRFQkQwQjhDREUwNS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kOWJkMzg4OC05MzAyLTRi NmYtYTAxNy0yYjRiYmE1ZTU3YmIvMS82NEQ2MjlBQTNDRjM4RjlGNzcwQURCQkIy MEM2REVCRDBCOENERTA1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Y1MzJiOWViLTJmYWUtNDhhOC05NzkzLTMzZWVjMDY3Y2UzOS8yLzY0RDYyOUFB M0NGMzhGOUY3NzBBREJCQjIwQzZERUJEMEI4Q0RFMDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBHyLVQ 8tpJTnGSVobXfPmYRTH9HFyhXtd8FCLPNrCROA6XtaCEklZ/trsEUMu67UDxeBu0 QOzq1USlsZ6EBG/Md2EhOoS+lmZ1jzx2Zv/Wf+VAzh3CqoK22IlpbndP+lY/iyqv 3mOKVDYod/lbKuqkGM9ggKqjE9aT5uO5QyFmHyCy3JVH+GDuA/6wXCBFQNBcxd+D kYtPjJxHLUI5rqnMPyuEFM5D3GlVnun50ItSQ3+PGIFWh1Q89mfwI0Bq5EdQqKjc 8mxtp6/moYkghaEbvNDncM5GbFYjS92k23UVT4gojZdwmyTVGAXOZutzN6zmGXZB hmnpXy0zny8PoJdz -----END CERTIFICATE-----Generated at Sat Jun 13 10:07:32 2026 by rpki-client