$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft File: 64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft (raw, json) Hash identifier: f79tUPw/O3/Ss1E9XTfBDP7J/6LYwV7LkZzzGY2GbdI= Subject key identifier: 97:99:1D:B1:EC:50:67:DE:3C:2E:BC:1B:62:11:0F:4B:74:51:B4:81 Authority key identifier: 64:D6:29:AA:3C:F3:8F:9F:77:0A:DB:BB:20:C6:DE:BD:0B:8C:DE:05 Certificate issuer: /CN=64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05 Certificate serial: 0D6883B4832619016F34A7C4808BDA6EB1DE494F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft Manifest number: 04 Signing time: Tue 04 Nov 2025 18:11:38 +0000 Manifest this update: Tue 04 Nov 2025 18:06:38 +0000 Manifest next update: Wed 05 Nov 2025 20:52:38 +0000 Files and hashes: 1: 64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.crl (hash: 9f+8toauIO9ltw5NX50zQVSi+l/p7kB9TIXN7wHoOBw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 14:17:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:68:83:b4:83:26:19:01:6f:34:a7:c4:80:8b:da:6e:b1:de:49:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05 Validity Not Before: Nov 4 18:06:38 2025 GMT Not After : Nov 5 20:52:38 2025 GMT Subject: CN=97991DB1EC5067DE3C2EBC1B62110F4B7451B481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ca:c7:69:26:65:a5:ea:ad:2b:92:a0:7d:05: ab:13:34:e8:ea:d3:bc:58:68:0b:b4:7f:cc:fd:75: 83:46:03:2f:36:af:e4:7a:76:9e:ba:f8:cb:57:fb: b9:89:91:56:bb:35:87:7a:00:d4:3c:0c:c3:98:7b: 42:4f:aa:df:23:d9:93:ba:08:66:62:96:6f:e5:6c: 7c:fa:dd:f7:be:b1:cd:f0:1f:4f:f5:9a:86:5d:7f: 1e:36:77:ae:a7:6d:00:5b:3a:3b:72:16:75:d9:80: df:b4:34:81:8f:8d:65:42:e2:9b:a0:f4:d3:fc:bb: 4e:a5:c7:3a:88:63:c4:7e:59:b3:32:2f:7e:27:d4: c9:29:37:33:3b:6e:0f:92:8e:ad:71:0f:4f:34:c1: 0f:c7:ab:ca:2b:01:27:88:72:2f:fd:5b:11:ce:31: 06:7c:61:e3:cd:12:5f:81:6b:04:85:7f:ad:b6:2e: e9:da:31:3e:66:8c:f7:7b:16:98:2d:e7:d7:b8:21: eb:1c:f1:e4:42:2c:e3:c9:7b:b7:be:fe:94:29:1e: dd:95:47:43:d6:f8:ce:61:22:23:7d:e7:9b:f3:34: 91:c2:6b:73:de:af:e8:f6:5d:05:1c:87:69:dd:85: 9d:6a:6b:da:49:46:80:6f:27:50:4e:c7:b3:8b:5d: f6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:99:1D:B1:EC:50:67:DE:3C:2E:BC:1B:62:11:0F:4B:74:51:B4:81 X509v3 Authority Key Identifier: keyid:64:D6:29:AA:3C:F3:8F:9F:77:0A:DB:BB:20:C6:DE:BD:0B:8C:DE:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:49:80:d7:f7:62:6f:24:27:35:e2:92:d3:67:19:86:36:c6: b4:ec:21:5b:e2:00:a7:4a:96:3f:4f:46:66:f2:40:11:75:d0: 29:9d:4c:1a:f2:2e:fa:c9:32:0b:87:ac:6b:62:b4:30:5d:af: 0d:f7:f0:5d:0e:bc:23:3a:d4:65:35:0f:1c:e1:45:19:93:d7: 15:04:48:ce:2d:76:76:7a:ed:27:44:15:d8:26:a5:44:0b:ca: 53:86:fa:65:e9:a6:24:c4:5b:a6:87:ef:07:22:54:03:76:23: 23:05:4f:c5:77:da:4f:f8:34:7b:36:e9:b8:97:22:c6:e6:81: f8:e2:25:b4:7a:35:e7:0c:38:b6:b9:f4:65:3b:60:fd:70:80: e0:20:c2:41:d9:3f:ee:c7:24:f4:4f:82:5d:e4:99:95:29:d8: 57:0a:74:cd:e5:da:b9:2b:14:65:4b:b9:c6:56:42:6d:e4:28: e1:8a:ff:2f:ee:5f:f1:4f:09:ba:63:fa:c9:57:fd:da:97:a9: 0f:98:75:10:c6:1b:03:63:63:dd:68:e6:4c:2a:a0:dd:2b:6d: 32:63:a0:db:71:9d:7f:e6:e5:2e:0e:f3:d4:b5:7a:7e:e3:cf: 96:11:01:41:3a:8a:14:38:a7:43:e7:cf:c4:d7:52:3a:51:9d: ab:23:79:60 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUDWiDtIMmGQFvNKfEgIvabrHeSU8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRENjI5QUEzQ0YzOEY5Rjc3MEFEQkJCMjBDNkRFQkQw QjhDREUwNTAeFw0yNTExMDQxODA2MzhaFw0yNTExMDUyMDUyMzhaMDMxMTAvBgNV BAMTKDk3OTkxREIxRUM1MDY3REUzQzJFQkMxQjYyMTEwRjRCNzQ1MUI0ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWysdpJmWl6q0rkqB9BasTNOjq 07xYaAu0f8z9dYNGAy82r+R6dp66+MtX+7mJkVa7NYd6ANQ8DMOYe0JPqt8j2ZO6 CGZilm/lbHz63fe+sc3wH0/1moZdfx42d66nbQBbOjtyFnXZgN+0NIGPjWVC4pug 9NP8u06lxzqIY8R+WbMyL34n1MkpNzM7bg+Sjq1xD080wQ/Hq8orASeIci/9WxHO MQZ8YePNEl+BawSFf622LunaMT5mjPd7Fpgt59e4Iesc8eRCLOPJe7e+/pQpHt2V R0PW+M5hIiN955vzNJHCa3Per+j2XQUch2ndhZ1qa9pJRoBvJ1BOx7OLXfa5AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUl5kdsexQZ948LrwbYhEPS3RRtIEwHwYDVR0j BBgwFoAUZNYpqjzzj593Ctu7IMbevQuM3gUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjUzMmI5ZWItMmZhZS00OGE4LTk3OTMtMzNlZWMwNjdj ZTM5LzIvNjRENjI5QUEzQ0YzOEY5Rjc3MEFEQkJCMjBDNkRFQkQwQjhDREUwNS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kOWJkMzg4OC05MzAyLTRi NmYtYTAxNy0yYjRiYmE1ZTU3YmIvMS82NEQ2MjlBQTNDRjM4RjlGNzcwQURCQkIy MEM2REVCRDBCOENERTA1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Y1MzJiOWViLTJmYWUtNDhhOC05NzkzLTMzZWVjMDY3Y2UzOS8yLzY0RDYyOUFB M0NGMzhGOUY3NzBBREJCQjIwQzZERUJEMEI4Q0RFMDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDUSYDX 92JvJCc14pLTZxmGNsa07CFb4gCnSpY/T0Zm8kARddApnUwa8i76yTILh6xrYrQw Xa8N9/BdDrwjOtRlNQ8c4UUZk9cVBEjOLXZ2eu0nRBXYJqVEC8pThvpl6aYkxFum h+8HIlQDdiMjBU/Fd9pP+DR7Num4lyLG5oH44iW0ejXnDDi2ufRlO2D9cIDgIMJB 2T/uxyT0T4Jd5JmVKdhXCnTN5dq5KxRlS7nGVkJt5Cjhiv8v7l/xTwm6Y/rJV/3a l6kPmHUQxhsDY2PdaOZMKqDdK20yY6DbcZ1/5uUuDvPUtXp+48+WEQFBOooUOKdD 58/E11I6UZ2rI3lg -----END CERTIFICATE-----Generated at Wed Nov 5 00:35:06 2025 by rpki-client