$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft File: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft (raw, json) Hash identifier: r/Pf+/tCir60lFXv1deSN95GbkgeNAT1yQnUwiTki10= Subject key identifier: F9:49:BD:E8:2B:79:68:FA:3E:6A:2B:1E:AA:48:BB:91:F2:DE:65:72 Authority key identifier: 64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE Certificate issuer: /CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe Certificate serial: 42AA3BBACB40AFCD90747B8BE5994C9DB25A9085 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft Manifest number: 026A Signing time: Sat 14 Jun 2025 04:37:51 +0000 Manifest this update: Sat 14 Jun 2025 04:32:51 +0000 Manifest next update: Sun 15 Jun 2025 05:55:51 +0000 Files and hashes: 1: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl (hash: 72NzSfeLQavewKTq/hlD+y4mKcpVN8gn4e1lAUN8nig=) 2: 34352e3135302e372e302f32342d3234203d3e203430363736.roa (hash: 7wQrqMox9QAmR2vQp8q5VdavN4YrXCFJ3Bes/IozaAU=) 3: 34352e3135302e352e302f32342d3234203d3e20323039383534.roa (hash: og23dgtoYqERERjtAqH2h8sLSaLgr4DxdJzsOAsyNMg=) 4: 34352e3135302e362e302f32342d3234203d3e203538303631.roa (hash: 739QQ1kzpbqPlY0J1CHiMuvjqJmn7ot6gs3zEY3jdHw=) 5: 34352e3135302e342e302f32342d3234203d3e203432383331.roa (hash: 702sTF4T+4tyFOCkBSwyFht2LvCuhPDht8ofZOjL5aw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 05:55:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:aa:3b:ba:cb:40:af:cd:90:74:7b:8b:e5:99:4c:9d:b2:5a:90:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe Validity Not Before: Jun 14 04:32:51 2025 GMT Not After : Jun 15 05:55:51 2025 GMT Subject: CN=F949BDE82B7968FA3E6A2B1EAA48BB91F2DE6572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:81:84:7e:b3:a6:b3:7c:65:57:b9:c6:06:ba: d9:9f:0a:c9:60:c5:9f:35:a5:f8:a4:aa:93:ba:50: a3:d6:d7:8d:32:c8:aa:2b:12:be:83:57:9f:a8:d0: 0a:8c:eb:9a:5e:f8:84:fa:e8:36:f5:32:00:6e:5f: e3:6c:ee:5e:0f:09:40:b9:50:66:e8:ec:16:20:d4: c6:c3:40:38:cc:fe:19:57:6f:b9:69:e4:f0:f2:64: 26:d7:f6:82:ed:64:09:c9:76:db:8a:44:61:1c:19: 36:86:f4:c9:e5:d0:ba:82:76:95:12:b6:95:39:03: 65:7e:67:64:45:10:d0:c6:de:a5:a4:cf:a6:23:47: 69:05:7a:1c:a1:23:56:9f:a8:1a:37:76:44:9d:82: ed:54:c6:e4:aa:1d:2b:8c:df:25:40:35:3b:0e:76: cd:68:4d:4e:05:d4:27:9e:02:0c:57:b2:01:07:8d: d5:b6:f1:45:0c:bd:10:e7:7b:fe:dc:56:1a:f7:78: be:93:e9:7d:f8:aa:dd:10:96:fd:e9:c7:7b:9d:b7: bb:ee:ea:f0:26:21:00:7a:4b:63:ed:5f:5a:a7:88: ec:2b:5a:03:19:73:f8:0a:3e:6e:29:2a:ce:c2:ca: 9d:3e:bb:1d:a7:13:60:22:7e:19:b7:fb:05:03:3e: ab:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:49:BD:E8:2B:79:68:FA:3E:6A:2B:1E:AA:48:BB:91:F2:DE:65:72 X509v3 Authority Key Identifier: keyid:64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:05:eb:61:46:6c:7e:22:6a:65:a0:6a:7a:94:e3:7e:3c:47: 33:0a:ee:1a:55:89:57:8b:c4:c9:8a:8c:1a:2b:ec:12:1c:fa: 76:aa:1f:76:3f:01:ce:59:98:92:85:a5:9b:8d:eb:f9:fa:a7: 49:76:c7:ce:db:a9:c6:7a:04:b8:91:f3:66:3e:9e:d8:2c:fd: 66:35:e0:4c:3b:2e:e9:86:20:bb:ca:d4:01:5c:81:9b:16:f5: cb:9b:75:21:d9:99:9d:23:cd:32:45:3f:7f:d2:c2:2d:17:ae: 45:12:54:f0:4a:6b:08:c7:c5:4e:bd:e8:07:f2:b0:64:e2:7d: 12:2b:75:95:30:8d:0a:55:70:79:ef:af:f1:74:fc:0b:b9:c1: 52:6e:4f:ca:f8:42:ee:49:80:78:6b:23:51:58:e7:20:f0:67: d6:a1:71:91:ec:0c:dc:13:ef:f3:cf:6f:90:2b:1b:aa:ee:f7: c4:44:94:ec:12:03:59:4a:39:71:5a:a8:d8:d3:8a:f1:b9:c8: a5:d3:fa:1e:53:d4:3c:1a:0c:4c:2c:c3:23:26:7a:9b:e5:59: bb:3f:32:13:db:5b:d5:2d:c6:f1:27:5a:69:3f:d3:cf:76:d3: 8b:35:94:ba:22:eb:56:09:11:df:76:39:aa:57:f2:bb:d4:89: b3:18:27:5f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUQqo7ustAr82QdHuL5ZlMnbJakIUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRhZjE1NDE5YmQ1ZmU2YzhmOTdlMjI0YTg2YTQ5MTdh MmU2ZmVmZTAeFw0yNTA2MTQwNDMyNTFaFw0yNTA2MTUwNTU1NTFaMDMxMTAvBgNV BAMTKEY5NDlCREU4MkI3OTY4RkEzRTZBMkIxRUFBNDhCQjkxRjJERTY1NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWgYR+s6azfGVXucYGutmfCslg xZ81pfikqpO6UKPW140yyKorEr6DV5+o0AqM65pe+IT66Db1MgBuX+Ns7l4PCUC5 UGbo7BYg1MbDQDjM/hlXb7lp5PDyZCbX9oLtZAnJdtuKRGEcGTaG9Mnl0LqCdpUS tpU5A2V+Z2RFENDG3qWkz6YjR2kFehyhI1afqBo3dkSdgu1UxuSqHSuM3yVANTsO ds1oTU4F1CeeAgxXsgEHjdW28UUMvRDne/7cVhr3eL6T6X34qt0Qlv3px3udt7vu 6vAmIQB6S2PtX1qniOwrWgMZc/gKPm4pKs7Cyp0+ux2nE2Aifhm3+wUDPqvLAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU+Um96Ct5aPo+aiseqki7kfLeZXIwHwYDVR0j BBgwFoAUZK8VQZvV/myPl+IkqGpJF6Lm/v4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmM5YWE5NWYtN2IzOC00MjZhLTk5NjYtNTQ0MTkzOWZl MDMxLzAvNjRBRjE1NDE5QkQ1RkU2QzhGOTdFMjI0QTg2QTQ5MTdBMkU2RkVGRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1pLOFZRWnZWX215UGwtSWtxR3BKRjZM bV92NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mYzlhYTk1Zi03 YjM4LTQyNmEtOTk2Ni01NDQxOTM5ZmUwMzEvMC82NEFGMTU0MTlCRDVGRTZDOEY5 N0UyMjRBODZBNDkxN0EyRTZGRUZFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAigXrYUZsfiJqZaBqepTj fjxHMwruGlWJV4vEyYqMGivsEhz6dqofdj8BzlmYkoWlm43r+fqnSXbHztupxnoE uJHzZj6e2Cz9ZjXgTDsu6YYgu8rUAVyBmxb1y5t1IdmZnSPNMkU/f9LCLReuRRJU 8EprCMfFTr3oB/KwZOJ9Eit1lTCNClVwee+v8XT8C7nBUm5PyvhC7kmAeGsjUVjn IPBn1qFxkewM3BPv889vkCsbqu73xESU7BIDWUo5cVqo2NOK8bnIpdP6HlPUPBoM TCzDIyZ6m+VZuz8yE9tb1S3G8SdaaT/Tz3bTizWUuiLrVgkR33Y5qlfyu9SJsxgn Xw== -----END CERTIFICATE-----Generated at Sat Jun 14 22:06:24 2025 by rpki-client