$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft File: 64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft (raw, json) Hash identifier: 2L7A/0kRTTEpGGAjTE8jM85A579ghqAzFBOmrZyALYE= Subject key identifier: 89:DD:24:FC:2D:F6:BD:C3:B3:85:A0:6B:D4:65:0F:06:72:92:EC:95 Authority key identifier: 64:D6:29:AA:3C:F3:8F:9F:77:0A:DB:BB:20:C6:DE:BD:0B:8C:DE:05 Certificate issuer: /CN=64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05 Certificate serial: 48335156C1F92955367F3C2692238825FDCFF679 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft Manifest number: C8 Signing time: Mon 02 Mar 2026 02:19:15 +0000 Manifest this update: Mon 02 Mar 2026 02:14:15 +0000 Manifest next update: Tue 03 Mar 2026 05:16:15 +0000 Files and hashes: 1: 64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.crl (hash: NkQoP61ZGoxVF4Sz6PGFVxJIirLDubXfHnquXSEIh0M=) 2: 326131343a373538313a333039303a3a2f34382d3438203d3e20323034323131.roa (hash: nGLAdkRiCVIQwTrXrRH2GZTJEYm4l5K5Qg4h/njNDzU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 00:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:33:51:56:c1:f9:29:55:36:7f:3c:26:92:23:88:25:fd:cf:f6:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05 Validity Not Before: Mar 2 02:14:15 2026 GMT Not After : Mar 3 05:16:15 2026 GMT Subject: CN=89DD24FC2DF6BDC3B385A06BD4650F067292EC95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:51:e9:aa:ee:f7:ad:a4:b8:bc:cf:6f:c7:55: f6:25:c5:bb:ce:1c:8f:4e:cb:e4:61:c4:a7:a2:4b: 6f:79:48:10:63:10:50:e9:b3:6d:ce:6b:c1:85:2b: 97:0b:cd:4b:3a:82:c9:f9:ed:81:28:c0:1f:d5:b5: 7a:02:f4:97:48:15:86:2e:ce:cb:d5:7f:99:a5:6b: 05:2f:db:39:76:40:74:38:15:ed:46:15:2f:ea:94: 65:a7:5d:3f:a6:65:66:47:ed:fb:31:3e:e5:f1:d3: c4:a4:f5:3d:9f:bd:4e:89:48:b4:97:79:61:c5:ae: 09:7b:b7:02:e1:cd:e6:3c:44:36:94:e7:a5:fe:72: 91:82:7b:95:1c:5e:41:f1:a8:02:3d:33:3e:c7:e8: 19:e1:50:cf:72:c8:82:f7:f5:ed:07:e6:a5:a9:ea: 67:00:e4:83:2c:d2:29:c4:2e:2a:f6:1f:ee:3f:2b: 4b:d7:2e:5d:23:9f:66:40:ce:ab:b6:36:91:10:d2: 41:dd:2d:bb:fe:a8:42:63:ea:4f:79:47:3b:8f:ed: 58:9e:ef:1b:83:05:64:c6:e6:19:cd:ac:b8:ea:08: 82:e8:77:02:ba:e5:b7:39:f7:98:ff:c4:00:28:87: b9:32:81:3b:33:5a:fb:fd:9e:c6:3a:d3:2a:2a:80: 89:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:DD:24:FC:2D:F6:BD:C3:B3:85:A0:6B:D4:65:0F:06:72:92:EC:95 X509v3 Authority Key Identifier: keyid:64:D6:29:AA:3C:F3:8F:9F:77:0A:DB:BB:20:C6:DE:BD:0B:8C:DE:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:4a:1d:7e:1b:e2:e1:3c:b0:ab:6e:6b:7c:a9:4e:d6:19:d2: b8:b6:9e:b7:1d:12:e5:38:62:14:fc:39:d7:21:c7:19:d2:a5: 9d:89:d3:ab:0d:26:57:48:96:f2:56:ea:dd:77:8f:fd:02:f3: d1:f5:9e:35:7c:42:e0:be:b9:02:39:03:82:a6:3f:a2:7a:c2: 5b:fb:ab:f2:07:01:05:f0:c6:8f:8e:ce:ae:7a:95:ae:2f:61: 87:a8:b5:bb:f1:6f:ce:95:4d:76:ca:3d:80:b7:4c:c1:52:32: fa:53:28:8c:f6:e3:77:59:5b:53:d9:38:e4:03:ed:57:a5:c1: 44:af:a7:ca:77:91:b4:c4:36:10:87:75:2f:f8:dd:2d:91:8b: 76:0c:ac:d8:b5:a4:12:c7:a2:e8:bf:ed:22:52:9a:77:7d:cc: e5:bf:f6:bd:7d:c5:fe:9a:ce:4d:f6:70:46:86:dc:0b:25:cc: 16:80:9d:41:9d:51:27:56:c9:69:13:3d:ff:6b:a6:97:5f:4d: 4b:ec:dd:f0:c1:a3:c4:6d:0c:70:08:1e:ef:18:95:9f:e8:33: 1d:29:ce:0e:62:31:73:de:a9:a6:f2:ad:0a:2d:c4:ce:59:dd: 7f:58:61:d0:12:76:bc:e3:02:bd:84:95:be:0a:a6:e1:96:2d: 16:5b:e7:63 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUSDNRVsH5KVU2fzwmkiOIJf3P9nkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRENjI5QUEzQ0YzOEY5Rjc3MEFEQkJCMjBDNkRFQkQw QjhDREUwNTAeFw0yNjAzMDIwMjE0MTVaFw0yNjAzMDMwNTE2MTVaMDMxMTAvBgNV BAMTKDg5REQyNEZDMkRGNkJEQzNCMzg1QTA2QkQ0NjUwRjA2NzI5MkVDOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzUemq7vetpLi8z2/HVfYlxbvO HI9Oy+RhxKeiS295SBBjEFDps23Oa8GFK5cLzUs6gsn57YEowB/VtXoC9JdIFYYu zsvVf5mlawUv2zl2QHQ4Fe1GFS/qlGWnXT+mZWZH7fsxPuXx08Sk9T2fvU6JSLSX eWHFrgl7twLhzeY8RDaU56X+cpGCe5UcXkHxqAI9Mz7H6BnhUM9yyIL39e0H5qWp 6mcA5IMs0inELir2H+4/K0vXLl0jn2ZAzqu2NpEQ0kHdLbv+qEJj6k95RzuP7Vie 7xuDBWTG5hnNrLjqCILodwK65bc595j/xAAoh7kygTszWvv9nsY60yoqgIkxAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUid0k/C32vcOzhaBr1GUPBnKS7JUwHwYDVR0j BBgwFoAUZNYpqjzzj593Ctu7IMbevQuM3gUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjUzMmI5ZWItMmZhZS00OGE4LTk3OTMtMzNlZWMwNjdj ZTM5LzIvNjRENjI5QUEzQ0YzOEY5Rjc3MEFEQkJCMjBDNkRFQkQwQjhDREUwNS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kOWJkMzg4OC05MzAyLTRi NmYtYTAxNy0yYjRiYmE1ZTU3YmIvMS82NEQ2MjlBQTNDRjM4RjlGNzcwQURCQkIy MEM2REVCRDBCOENERTA1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Y1MzJiOWViLTJmYWUtNDhhOC05NzkzLTMzZWVjMDY3Y2UzOS8yLzY0RDYyOUFB M0NGMzhGOUY3NzBBREJCQjIwQzZERUJEMEI4Q0RFMDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBNSh1+ G+LhPLCrbmt8qU7WGdK4tp63HRLlOGIU/DnXIccZ0qWdidOrDSZXSJbyVurdd4/9 AvPR9Z41fELgvrkCOQOCpj+iesJb+6vyBwEF8MaPjs6uepWuL2GHqLW78W/OlU12 yj2At0zBUjL6UyiM9uN3WVtT2TjkA+1XpcFEr6fKd5G0xDYQh3Uv+N0tkYt2DKzY taQSx6Lov+0iUpp3fczlv/a9fcX+ms5N9nBGhtwLJcwWgJ1BnVEnVslpEz3/a6aX X01L7N3wwaPEbQxwCB7vGJWf6DMdKc4OYjFz3qmm8q0KLcTOWd1/WGHQEna84wK9 hJW+Cqbhli0WW+dj -----END CERTIFICATE-----Generated at Mon Mar 2 06:18:07 2026 by rpki-client