$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft File: 64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft (raw, json) Hash identifier: tRakXrAzGy9ERGLMc5z+JgNMGGgy+kDwbeDNqcssKrk= Subject key identifier: 5D:9F:C1:86:3D:6F:3D:54:A3:21:2A:3D:9C:59:47:3B:05:11:67:27 Authority key identifier: 64:D6:29:AA:3C:F3:8F:9F:77:0A:DB:BB:20:C6:DE:BD:0B:8C:DE:05 Certificate issuer: /CN=64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05 Certificate serial: 7FCF8DE7419F9622FA4A42D22588585E670CAAE4 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft Manifest number: 01F2 Signing time: Tue 28 Jul 2026 04:43:37 +0000 Manifest this update: Tue 28 Jul 2026 04:38:37 +0000 Manifest next update: Wed 29 Jul 2026 06:42:37 +0000 Files and hashes: 1: 326131343a373538313a333039303a3a2f34382d3438203d3e20323034323131.roa (hash: nGLAdkRiCVIQwTrXrRH2GZTJEYm4l5K5Qg4h/njNDzU=) 2: 64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.crl (hash: 8ImsIhui9ED5idkVJy874bQ/8oSgTCDmYlYBrarBi5k=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 06:42:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:cf:8d:e7:41:9f:96:22:fa:4a:42:d2:25:88:58:5e:67:0c:aa:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05 Validity Not Before: Jul 28 04:38:37 2026 GMT Not After : Jul 29 06:42:37 2026 GMT Subject: CN=5D9FC1863D6F3D54A3212A3D9C59473B05116727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:cc:d2:8e:cd:c2:6d:73:6b:83:49:19:a1:a1: 4b:ea:d2:5c:43:62:62:b8:05:79:df:71:bc:fc:86: b0:56:a1:24:40:42:b6:fa:0a:7e:8f:68:09:c6:ed: 10:e2:cf:a7:69:49:6c:65:d8:b8:a2:50:8c:c8:6d: ea:77:fe:50:e0:f6:41:17:98:18:f5:5a:da:f9:88: 9c:75:37:60:37:ed:d4:42:fd:c2:fa:ce:a6:95:28: 3f:73:91:62:57:03:e3:4a:7f:ac:12:32:04:ad:ae: 0f:17:be:91:34:14:21:64:5c:2b:9e:5b:ca:76:03: 54:4a:ae:0c:5e:b9:02:14:dc:a1:d7:98:33:66:a0: f6:2b:57:56:ba:55:bf:93:39:6f:ee:c6:de:c3:2b: 7b:97:b6:c0:1f:38:7a:04:c0:ae:e4:86:b8:56:c6: fd:95:f5:47:21:10:6c:3b:cf:73:59:3e:9c:7c:92: 5f:46:8a:88:67:c9:3d:12:b9:1d:0e:8a:5b:cb:57: ee:2c:75:19:0c:65:03:3e:2b:cd:4e:ca:d4:6e:a9: 76:1a:26:11:74:51:29:20:58:12:7f:e0:a6:1b:fa: 41:52:7d:64:cf:b2:1a:25:f6:6d:a1:f6:c9:63:d8: 72:0e:c3:48:dc:a9:b0:67:93:8e:bd:83:81:29:bd: ec:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:9F:C1:86:3D:6F:3D:54:A3:21:2A:3D:9C:59:47:3B:05:11:67:27 X509v3 Authority Key Identifier: keyid:64:D6:29:AA:3C:F3:8F:9F:77:0A:DB:BB:20:C6:DE:BD:0B:8C:DE:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:99:5b:ab:5d:17:75:b1:a3:9b:fe:bf:c3:99:43:a1:cc:62: 9f:ab:e6:34:fd:ef:77:5c:f1:8b:db:89:81:15:8f:66:b5:cf: 03:79:dc:3b:e8:a1:23:83:32:88:50:02:e9:fc:04:c0:47:75: 6b:23:01:45:38:23:e6:08:e2:4b:9c:30:2e:3b:ac:83:9a:f2: 0b:f8:41:27:0a:1b:fd:d6:a3:de:4d:16:99:86:42:60:01:2d: 7d:7b:84:55:ac:c1:77:3a:e7:b8:bf:78:7e:7b:73:73:5f:0f: 29:14:af:26:ac:28:f8:42:b8:1c:44:67:ae:d3:ce:92:bb:15: 8b:de:d7:00:c7:69:c8:42:df:29:0a:8b:63:9d:0a:fc:35:9c: e3:76:01:66:b8:a9:b3:1e:a4:40:c9:21:93:54:cb:98:7d:c6: d9:d8:87:5b:27:f5:10:fc:c1:b9:5d:ba:36:c2:e3:d5:f4:6d: 35:b5:f3:9c:b7:4f:47:3c:d7:93:51:13:95:45:19:6e:c6:9a: 3c:90:b7:6f:0f:a1:b9:d1:c4:77:e9:f3:8c:fc:0d:97:3e:ce: 13:31:73:96:7c:71:dd:4b:88:b3:05:85:88:a5:1c:07:06:c0: fc:2c:f6:6a:ca:66:a6:aa:90:b8:51:50:b7:d0:4f:b3:74:8e: e0:9e:a5:c0 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUf8+N50GfliL6SkLSJYhYXmcMquQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRENjI5QUEzQ0YzOEY5Rjc3MEFEQkJCMjBDNkRFQkQw QjhDREUwNTAeFw0yNjA3MjgwNDM4MzdaFw0yNjA3MjkwNjQyMzdaMDMxMTAvBgNV BAMTKDVEOUZDMTg2M0Q2RjNENTRBMzIxMkEzRDlDNTk0NzNCMDUxMTY3MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFzNKOzcJtc2uDSRmhoUvq0lxD YmK4BXnfcbz8hrBWoSRAQrb6Cn6PaAnG7RDiz6dpSWxl2LiiUIzIbep3/lDg9kEX mBj1Wtr5iJx1N2A37dRC/cL6zqaVKD9zkWJXA+NKf6wSMgStrg8XvpE0FCFkXCue W8p2A1RKrgxeuQIU3KHXmDNmoPYrV1a6Vb+TOW/uxt7DK3uXtsAfOHoEwK7khrhW xv2V9UchEGw7z3NZPpx8kl9GiohnyT0SuR0OilvLV+4sdRkMZQM+K81OytRuqXYa JhF0USkgWBJ/4KYb+kFSfWTPshol9m2h9slj2HIOw0jcqbBnk469g4EpvewBAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUXZ/Bhj1vPVSjISo9nFlHOwURZycwHwYDVR0j BBgwFoAUZNYpqjzzj593Ctu7IMbevQuM3gUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjUzMmI5ZWItMmZhZS00OGE4LTk3OTMtMzNlZWMwNjdj ZTM5LzIvNjRENjI5QUEzQ0YzOEY5Rjc3MEFEQkJCMjBDNkRFQkQwQjhDREUwNS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kOWJkMzg4OC05MzAyLTRi NmYtYTAxNy0yYjRiYmE1ZTU3YmIvMS82NEQ2MjlBQTNDRjM4RjlGNzcwQURCQkIy MEM2REVCRDBCOENERTA1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Y1MzJiOWViLTJmYWUtNDhhOC05NzkzLTMzZWVjMDY3Y2UzOS8yLzY0RDYyOUFB M0NGMzhGOUY3NzBBREJCQjIwQzZERUJEMEI4Q0RFMDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBvmVur XRd1saOb/r/DmUOhzGKfq+Y0/e93XPGL24mBFY9mtc8Dedw76KEjgzKIUALp/ATA R3VrIwFFOCPmCOJLnDAuO6yDmvIL+EEnChv91qPeTRaZhkJgAS19e4RVrMF3Oue4 v3h+e3NzXw8pFK8mrCj4QrgcRGeu086SuxWL3tcAx2nIQt8pCotjnQr8NZzjdgFm uKmzHqRAySGTVMuYfcbZ2IdbJ/UQ/MG5Xbo2wuPV9G01tfOct09HPNeTUROVRRlu xpo8kLdvD6G50cR36fOM/A2XPs4TMXOWfHHdS4izBYWIpRwHBsD8LPZqymamqpC4 UVC30E+zdI7gnqXA -----END CERTIFICATE-----Generated at Tue Jul 28 22:01:45 2026 by rpki-client