$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft File: 64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft (raw, json) Hash identifier: j0EcxyzBBV43hFKmpa5VCGiewqwLLtL0sg9jq+V/HIo= Subject key identifier: E2:F3:0A:B1:21:18:25:B9:A8:11:8E:BE:74:37:B8:AB:EB:0C:AF:C9 Authority key identifier: 64:D6:29:AA:3C:F3:8F:9F:77:0A:DB:BB:20:C6:DE:BD:0B:8C:DE:05 Certificate issuer: /CN=64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05 Certificate serial: 0D1916CE8072A9FD8AEDBDAD4A07BC773821062A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft Manifest number: 0114 Signing time: Fri 17 Apr 2026 09:13:53 +0000 Manifest this update: Fri 17 Apr 2026 09:08:53 +0000 Manifest next update: Sat 18 Apr 2026 11:50:53 +0000 Files and hashes: 1: 326131343a373538313a333039303a3a2f34382d3438203d3e20323034323131.roa (hash: nGLAdkRiCVIQwTrXrRH2GZTJEYm4l5K5Qg4h/njNDzU=) 2: 64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.crl (hash: NthZ2MDVS94T0uqVMD5x9fGvXzdlqQL61GrzD6SZ7z8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:19:16:ce:80:72:a9:fd:8a:ed:bd:ad:4a:07:bc:77:38:21:06:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05 Validity Not Before: Apr 17 09:08:53 2026 GMT Not After : Apr 18 11:50:53 2026 GMT Subject: CN=E2F30AB1211825B9A8118EBE7437B8ABEB0CAFC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:05:a8:98:e8:d8:0c:10:58:bf:47:7d:75:4c: e1:f0:2d:52:ec:06:da:60:e5:3d:c0:88:86:ec:7a: 59:73:f1:bb:11:d3:c3:6a:14:20:b2:bd:4f:cf:e7: e2:88:6c:40:c6:88:93:73:65:f1:eb:d0:a6:31:6b: 43:8b:b5:41:20:e5:dc:de:2c:56:67:b7:81:ad:93: 73:88:c8:7b:f6:b2:20:8c:2b:f8:68:10:0b:b8:e1: 7e:3a:80:8c:15:88:05:16:23:1f:06:df:a7:e9:77: 86:76:d2:e0:8d:08:1f:4e:e3:69:26:5e:d5:49:1c: 63:25:9b:a3:c9:3b:a2:e6:58:0b:a2:a8:6b:94:19: 5e:d5:12:04:f8:25:4e:42:55:d5:72:26:fb:b3:2d: 1b:d7:3d:42:98:5c:cd:7a:d3:96:9a:f7:36:e1:9a: f2:a8:93:7b:aa:44:fa:bd:c2:87:77:76:ec:dd:b6: 42:19:64:41:b3:e1:ca:93:62:70:51:dc:13:6c:0d: 20:39:39:91:23:59:2b:85:00:7e:bb:0c:fe:32:90: bf:65:8c:71:79:62:aa:53:6c:8d:72:c7:2e:a8:9c: eb:0a:a5:07:66:48:23:af:f7:95:4b:a0:c0:20:09: 20:b5:81:44:72:d5:53:72:6f:a7:62:b7:25:98:04: 10:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:F3:0A:B1:21:18:25:B9:A8:11:8E:BE:74:37:B8:AB:EB:0C:AF:C9 X509v3 Authority Key Identifier: keyid:64:D6:29:AA:3C:F3:8F:9F:77:0A:DB:BB:20:C6:DE:BD:0B:8C:DE:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:16:94:ed:4b:96:40:e4:fb:d8:da:84:7c:a1:b1:a2:ba:30: 22:71:3d:fe:23:8a:f2:d4:94:70:32:52:42:be:03:fa:b3:ba: 78:31:76:6f:72:f3:6e:f3:33:a5:15:a0:79:1d:30:10:c5:60: a0:88:ed:dc:b7:05:c4:5c:0c:63:3a:f4:3e:dc:ca:9b:78:a1: 83:64:74:86:ec:e7:7d:fb:2d:7c:df:98:91:16:1f:87:41:f5: 0f:60:6f:25:20:92:e8:9d:96:ae:f8:3d:27:b8:3a:d5:03:44: 8f:f6:67:85:4c:94:a1:51:5a:ba:42:f5:3a:d6:51:6e:35:df: 0e:ea:84:51:64:06:00:ab:76:ee:0c:eb:ac:93:9c:c4:1f:84: e9:fe:f7:5a:e5:ab:7e:b2:b2:7f:ab:d0:13:c8:17:f3:71:f4: 70:3c:4a:bd:01:81:e3:ac:28:0f:85:b9:b4:14:27:02:7e:56: 05:60:19:c1:fc:0f:a7:70:0d:cf:15:ea:ee:2f:4e:5b:2c:e3: a2:53:31:76:fc:7e:94:e5:ef:fa:fb:bd:24:69:ad:f4:6a:03: 66:ad:f8:1a:27:a4:09:85:70:b3:5e:b8:ab:2b:77:9b:c1:5e: 58:fc:bd:51:5b:33:e3:71:99:7f:fe:56:f9:bc:80:c2:d4:e8: bb:79:cb:5d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUDRkWzoByqf2K7b2tSge8dzghBiowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRENjI5QUEzQ0YzOEY5Rjc3MEFEQkJCMjBDNkRFQkQw QjhDREUwNTAeFw0yNjA0MTcwOTA4NTNaFw0yNjA0MTgxMTUwNTNaMDMxMTAvBgNV BAMTKEUyRjMwQUIxMjExODI1QjlBODExOEVCRTc0MzdCOEFCRUIwQ0FGQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEBaiY6NgMEFi/R311TOHwLVLs Btpg5T3AiIbsellz8bsR08NqFCCyvU/P5+KIbEDGiJNzZfHr0KYxa0OLtUEg5dze LFZnt4Gtk3OIyHv2siCMK/hoEAu44X46gIwViAUWIx8G36fpd4Z20uCNCB9O42km XtVJHGMlm6PJO6LmWAuiqGuUGV7VEgT4JU5CVdVyJvuzLRvXPUKYXM1605aa9zbh mvKok3uqRPq9wod3duzdtkIZZEGz4cqTYnBR3BNsDSA5OZEjWSuFAH67DP4ykL9l jHF5YqpTbI1yxy6onOsKpQdmSCOv95VLoMAgCSC1gURy1VNyb6dityWYBBB1AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU4vMKsSEYJbmoEY6+dDe4q+sMr8kwHwYDVR0j BBgwFoAUZNYpqjzzj593Ctu7IMbevQuM3gUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjUzMmI5ZWItMmZhZS00OGE4LTk3OTMtMzNlZWMwNjdj ZTM5LzIvNjRENjI5QUEzQ0YzOEY5Rjc3MEFEQkJCMjBDNkRFQkQwQjhDREUwNS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kOWJkMzg4OC05MzAyLTRi NmYtYTAxNy0yYjRiYmE1ZTU3YmIvMS82NEQ2MjlBQTNDRjM4RjlGNzcwQURCQkIy MEM2REVCRDBCOENERTA1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Y1MzJiOWViLTJmYWUtNDhhOC05NzkzLTMzZWVjMDY3Y2UzOS8yLzY0RDYyOUFB M0NGMzhGOUY3NzBBREJCQjIwQzZERUJEMEI4Q0RFMDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCWFpTt S5ZA5PvY2oR8obGiujAicT3+I4ry1JRwMlJCvgP6s7p4MXZvcvNu8zOlFaB5HTAQ xWCgiO3ctwXEXAxjOvQ+3MqbeKGDZHSG7Od9+y1835iRFh+HQfUPYG8lIJLonZau +D0nuDrVA0SP9meFTJShUVq6QvU61lFuNd8O6oRRZAYAq3buDOusk5zEH4Tp/vda 5at+srJ/q9ATyBfzcfRwPEq9AYHjrCgPhbm0FCcCflYFYBnB/A+ncA3PFeruL05b LOOiUzF2/H6U5e/6+70kaa30agNmrfgaJ6QJhXCzXrirK3ebwV5Y/L1RWzPjcZl/ /lb5vIDC1Oi7ectd -----END CERTIFICATE-----Generated at Fri Apr 17 16:17:29 2026 by rpki-client