$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft File: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft (raw, json) Hash identifier: tEY/YdbuE/vsv2yekFum0zBf9gNUzVDnkdXtXUnSGKU= Subject key identifier: 37:1C:06:6A:32:71:F3:28:6E:1B:AC:87:4A:07:7D:19:92:D0:81:18 Authority key identifier: 64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE Certificate issuer: /CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe Certificate serial: 4E9DD0951E2A0F4C27D7285516A08139C9C5A0E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft Manifest number: 03C6 Signing time: Sun 01 Mar 2026 21:32:23 +0000 Manifest this update: Sun 01 Mar 2026 21:27:23 +0000 Manifest next update: Mon 02 Mar 2026 23:50:23 +0000 Files and hashes: 1: 34352e3135302e352e302f32342d3234203d3e20323039383534.roa (hash: Crd2ncf4lQNUDj/2Yu6qDEEKdYEoj89TZ7JLTUVoXfY=) 2: 34352e3135302e342e302f32342d3234203d3e203432383331.roa (hash: JDtWvcwkcFwfS8VCb1zy7YF8Zp2kwnagm9OMk367GN0=) 3: 34352e3135302e372e302f32342d3234203d3e203430363736.roa (hash: byqPGvSaG6esVs7ttHZAm5MeDtXny30fRGCsgkrnWc0=) 4: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl (hash: U+ayT407K/KyC77mGTL0+GhBCK32X0UMRlpE8ena+FI=) 5: 34352e3135302e362e302f32342d3234203d3e203538303631.roa (hash: yaUDjxZGhyEVxNfdUbfnMRoUwlBxM/900/kJEwn4Oxc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 18:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:9d:d0:95:1e:2a:0f:4c:27:d7:28:55:16:a0:81:39:c9:c5:a0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe Validity Not Before: Mar 1 21:27:23 2026 GMT Not After : Mar 2 23:50:23 2026 GMT Subject: CN=371C066A3271F3286E1BAC874A077D1992D08118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ce:65:38:09:70:cd:ff:f8:d5:ce:5b:4e:6b: e7:7e:4b:65:a3:da:93:79:85:e5:b6:f9:86:d1:5c: e4:57:8d:49:9a:f5:70:96:56:fa:04:ed:0c:bf:8b: e4:d2:3a:8a:73:a7:13:b0:ae:fd:2c:be:23:9a:3c: 92:ae:bb:da:bc:04:26:22:2a:55:03:00:f5:3c:cb: 7c:9e:1b:4a:e3:4d:2d:86:39:ed:e0:c7:2f:eb:73: 4b:4d:04:79:cf:08:9f:1c:fb:26:43:6d:d9:02:05: 7c:0c:67:3f:19:12:a1:aa:98:a2:4f:dc:5d:98:b7: 99:a2:ca:4f:f9:8f:29:cd:d2:e3:00:27:c7:69:06: 92:a8:f7:50:a9:2e:ca:b8:2a:2c:48:5d:8e:84:50: e7:d0:32:2b:7b:1f:91:a9:0a:ab:a5:ee:4f:08:04: 2e:da:ea:9e:f7:c9:ea:66:dc:d4:3e:eb:36:17:d3: 2d:93:d8:f1:44:71:24:b0:96:8d:7f:61:5a:7b:d6: 86:81:a9:48:00:c6:c1:f7:61:c8:65:25:59:be:f3: c5:ac:e2:77:3b:1a:f4:3a:43:c4:cb:72:7d:43:5b: 3e:16:be:93:81:c6:f4:34:be:fe:a6:55:a2:94:fa: 6b:a0:12:d0:68:a8:1c:22:53:a6:8e:2d:aa:02:7f: e4:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:1C:06:6A:32:71:F3:28:6E:1B:AC:87:4A:07:7D:19:92:D0:81:18 X509v3 Authority Key Identifier: keyid:64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:db:8f:39:fd:75:56:a6:2f:de:fe:43:86:10:4b:37:80:c6: a1:31:d9:28:3c:67:ec:c3:4e:42:25:af:1d:96:5f:45:b2:83: e5:42:98:8e:dc:6f:a4:a6:24:5a:f7:6c:55:15:d8:17:b5:7f: f5:c7:12:6c:b4:95:e0:0a:0b:88:5e:bb:0b:87:0c:27:f8:42: 9f:3d:15:9e:6f:73:9e:17:0a:d6:bf:67:d5:6c:a4:b8:86:80: f3:0e:ba:75:57:cd:9f:6a:0d:e4:3d:fe:86:9e:50:a4:39:8e: b0:13:54:9a:a9:61:bf:b4:ea:12:76:f6:b1:c0:33:6b:52:74: 94:75:72:ab:bc:0f:b3:e7:b4:2b:39:1f:a1:e8:e3:f4:f4:84: 16:e0:be:7d:32:f8:65:9d:0a:d3:74:2f:86:4f:04:7b:7b:fd: c6:0a:fc:bc:21:be:40:8e:09:c0:2d:da:bc:b3:8e:67:e3:fe: 54:e1:3a:cd:bc:a7:9b:42:dc:ab:76:00:0c:42:94:a9:5e:02: 7f:db:ee:11:10:f4:48:39:f5:d4:2e:05:2a:72:cd:45:20:c2: d7:37:84:73:8c:e2:9e:94:53:7e:44:3e:c4:79:9a:39:58:9e: af:6d:82:aa:2c:b3:5d:3f:60:f7:82:73:7b:07:10:95:b0:7e: db:d4:0b:9f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUTp3QlR4qD0wn1yhVFqCBOcnFoOAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRhZjE1NDE5YmQ1ZmU2YzhmOTdlMjI0YTg2YTQ5MTdh MmU2ZmVmZTAeFw0yNjAzMDEyMTI3MjNaFw0yNjAzMDIyMzUwMjNaMDMxMTAvBgNV BAMTKDM3MUMwNjZBMzI3MUYzMjg2RTFCQUM4NzRBMDc3RDE5OTJEMDgxMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCzmU4CXDN//jVzltOa+d+S2Wj 2pN5heW2+YbRXORXjUma9XCWVvoE7Qy/i+TSOopzpxOwrv0sviOaPJKuu9q8BCYi KlUDAPU8y3yeG0rjTS2GOe3gxy/rc0tNBHnPCJ8c+yZDbdkCBXwMZz8ZEqGqmKJP 3F2Yt5miyk/5jynN0uMAJ8dpBpKo91CpLsq4KixIXY6EUOfQMit7H5GpCqul7k8I BC7a6p73yepm3NQ+6zYX0y2T2PFEcSSwlo1/YVp71oaBqUgAxsH3YchlJVm+88Ws 4nc7GvQ6Q8TLcn1DWz4WvpOBxvQ0vv6mVaKU+mugEtBoqBwiU6aOLaoCf+QBAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUNxwGajJx8yhuG6yHSgd9GZLQgRgwHwYDVR0j BBgwFoAUZK8VQZvV/myPl+IkqGpJF6Lm/v4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmM5YWE5NWYtN2IzOC00MjZhLTk5NjYtNTQ0MTkzOWZl MDMxLzAvNjRBRjE1NDE5QkQ1RkU2QzhGOTdFMjI0QTg2QTQ5MTdBMkU2RkVGRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1pLOFZRWnZWX215UGwtSWtxR3BKRjZM bV92NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mYzlhYTk1Zi03 YjM4LTQyNmEtOTk2Ni01NDQxOTM5ZmUwMzEvMC82NEFGMTU0MTlCRDVGRTZDOEY5 N0UyMjRBODZBNDkxN0EyRTZGRUZFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAItuPOf11VqYv3v5DhhBL N4DGoTHZKDxn7MNOQiWvHZZfRbKD5UKYjtxvpKYkWvdsVRXYF7V/9ccSbLSV4AoL iF67C4cMJ/hCnz0Vnm9znhcK1r9n1WykuIaA8w66dVfNn2oN5D3+hp5QpDmOsBNU mqlhv7TqEnb2scAza1J0lHVyq7wPs+e0Kzkfoejj9PSEFuC+fTL4ZZ0K03Qvhk8E e3v9xgr8vCG+QI4JwC3avLOOZ+P+VOE6zbynm0Lcq3YADEKUqV4Cf9vuERD0SDn1 1C4FKnLNRSDC1zeEc4zinpRTfkQ+xHmaOVier22CqiyzXT9g94JzewcQlbB+29QL nw== -----END CERTIFICATE-----Generated at Mon Mar 2 02:37:13 2026 by rpki-client