$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft File: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft (raw, json) Hash identifier: OJinSEx27HOm8Xg5C4fTdy/z+KATiOk6Gmh7DkMseoM= Subject key identifier: A8:20:0A:4E:4A:82:47:27:6C:E8:BD:70:15:EF:71:E7:52:6E:DF:3E Authority key identifier: 64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE Certificate issuer: /CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe Certificate serial: 4FD8BBB82976EFC27FD992EB54366EB1F4C4DAB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft Manifest number: 04D8 Signing time: Tue 22 Sep 2026 14:55:47 +0000 Manifest this update: Tue 22 Sep 2026 14:50:47 +0000 Manifest next update: Wed 23 Sep 2026 15:22:47 +0000 Files and hashes: 1: 34352e3135302e372e302f32342d3234203d3e203430363736.roa (hash: T+zbNugzb1bsH98kHS+RI8JGsyekk0ffpARbCOfuE7Y=) 2: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl (hash: GGC+UlkOBIzveHWGbfMidYd8ExPL3aVEoG5Kw+t5WV0=) 3: 34352e3135302e352e302f32342d3234203d3e20323039383534.roa (hash: Crd2ncf4lQNUDj/2Yu6qDEEKdYEoj89TZ7JLTUVoXfY=) 4: 34352e3135302e342e302f32342d3234203d3e203432383331.roa (hash: JDtWvcwkcFwfS8VCb1zy7YF8Zp2kwnagm9OMk367GN0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 14:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:d8:bb:b8:29:76:ef:c2:7f:d9:92:eb:54:36:6e:b1:f4:c4:da:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe Validity Not Before: Sep 22 14:50:47 2026 GMT Not After : Sep 23 15:22:47 2026 GMT Subject: CN=A8200A4E4A8247276CE8BD7015EF71E7526EDF3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6f:d9:c4:cc:68:95:32:35:88:ed:68:65:85: 09:e0:c2:c7:06:5b:97:06:9a:3d:8b:66:95:48:94: 6b:99:ff:d1:d8:6d:96:59:a9:ec:29:86:c6:b8:14: 0b:86:8b:a7:95:8e:13:73:be:ad:77:ed:91:1e:23: 17:76:ee:b3:d1:12:b9:c9:47:ec:a6:c1:92:87:86: da:da:95:de:33:7b:78:7d:21:e5:64:d8:86:6d:f1: 7f:ea:34:87:18:4f:a0:cb:4d:c8:da:7a:50:db:8a: 92:18:6c:50:21:9a:e6:bf:b8:31:af:f5:f3:c6:2f: ee:e9:ae:ea:bb:23:2a:ac:2e:6d:02:d1:a5:30:f6: d7:0a:84:a9:81:71:d8:7e:d1:9c:ba:64:03:5d:4c: d6:c6:fc:c6:d8:0a:fe:97:c3:03:2c:5c:e6:c2:c2: ac:f2:7b:3c:e5:bd:55:c4:ca:40:44:33:74:bc:1e: d7:9d:9b:75:b7:99:1d:21:23:8d:96:e7:72:2d:a3: eb:01:2d:21:dc:46:b9:18:7f:16:44:5d:1a:bc:e0: 07:71:94:67:ae:fc:b9:d8:2e:da:00:2c:de:d6:b8: 48:05:f1:6d:25:eb:c5:c8:c4:3e:e3:b6:85:d9:df: 28:73:93:f3:07:d9:2f:b7:d5:38:fb:6c:33:95:f5: 12:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:20:0A:4E:4A:82:47:27:6C:E8:BD:70:15:EF:71:E7:52:6E:DF:3E X509v3 Authority Key Identifier: keyid:64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:92:9b:6d:c3:46:18:99:d2:b0:c6:6a:c1:7c:53:07:64:0d: 19:cb:89:4b:38:ba:e1:e4:57:d5:e0:8a:83:b7:c2:8b:9a:6b: 02:f6:da:45:dc:f5:bf:95:5d:9a:f5:82:a0:d0:f3:65:f6:73: 5d:84:9c:74:f3:39:6f:23:44:33:00:7e:f3:2d:a3:4f:bc:6e: f8:1a:83:42:04:57:6f:31:74:95:73:f7:35:d5:b3:58:d1:2d: 20:3a:41:ca:ec:5f:c5:06:19:6a:22:ca:14:42:b4:ef:e7:fe: e2:4b:ee:b2:a5:6e:49:48:cd:38:3c:09:f7:7f:1f:f4:09:b2: 1d:97:48:ad:a2:aa:01:f8:8b:01:6b:10:f3:68:50:51:b4:5e: d2:d7:20:a8:4c:b3:b5:3a:5b:a1:bd:52:9e:d0:c2:74:6d:eb: 33:91:9a:8e:10:78:a1:64:7a:9c:b8:de:ac:39:c5:61:75:b9: 9f:48:14:22:01:f7:23:d2:34:1a:f2:63:f4:0c:b4:ce:82:61: 3d:07:18:b3:1e:f3:ee:74:4c:a6:37:43:0a:de:ad:6d:ae:1b: 29:d5:07:8a:1e:66:81:0b:df:26:cf:bb:dc:99:a2:53:c4:7f: 0e:10:28:5b:6d:d7:2d:c3:48:e8:39:eb:77:9d:23:12:b6:c9: 8c:7f:77:6e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUT9i7uCl278J/2ZLrVDZusfTE2rcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRhZjE1NDE5YmQ1ZmU2YzhmOTdlMjI0YTg2YTQ5MTdh MmU2ZmVmZTAeFw0yNjA5MjIxNDUwNDdaFw0yNjA5MjMxNTIyNDdaMDMxMTAvBgNV BAMTKEE4MjAwQTRFNEE4MjQ3Mjc2Q0U4QkQ3MDE1RUY3MUU3NTI2RURGM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrb9nEzGiVMjWI7WhlhQngwscG W5cGmj2LZpVIlGuZ/9HYbZZZqewphsa4FAuGi6eVjhNzvq137ZEeIxd27rPRErnJ R+ymwZKHhtrald4ze3h9IeVk2IZt8X/qNIcYT6DLTcjaelDbipIYbFAhmua/uDGv 9fPGL+7pruq7IyqsLm0C0aUw9tcKhKmBcdh+0Zy6ZANdTNbG/MbYCv6XwwMsXObC wqzyezzlvVXEykBEM3S8Htedm3W3mR0hI42W53Ito+sBLSHcRrkYfxZEXRq84Adx lGeu/LnYLtoALN7WuEgF8W0l68XIxD7jtoXZ3yhzk/MH2S+31Tj7bDOV9RKVAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUqCAKTkqCRyds6L1wFe9x51Ju3z4wHwYDVR0j BBgwFoAUZK8VQZvV/myPl+IkqGpJF6Lm/v4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmM5YWE5NWYtN2IzOC00MjZhLTk5NjYtNTQ0MTkzOWZl MDMxLzAvNjRBRjE1NDE5QkQ1RkU2QzhGOTdFMjI0QTg2QTQ5MTdBMkU2RkVGRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1pLOFZRWnZWX215UGwtSWtxR3BKRjZM bV92NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mYzlhYTk1Zi03 YjM4LTQyNmEtOTk2Ni01NDQxOTM5ZmUwMzEvMC82NEFGMTU0MTlCRDVGRTZDOEY5 N0UyMjRBODZBNDkxN0EyRTZGRUZFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW5KbbcNGGJnSsMZqwXxT B2QNGcuJSzi64eRX1eCKg7fCi5prAvbaRdz1v5VdmvWCoNDzZfZzXYScdPM5byNE MwB+8y2jT7xu+BqDQgRXbzF0lXP3NdWzWNEtIDpByuxfxQYZaiLKFEK07+f+4kvu sqVuSUjNODwJ938f9AmyHZdIraKqAfiLAWsQ82hQUbRe0tcgqEyztTpbob1SntDC dG3rM5GajhB4oWR6nLjerDnFYXW5n0gUIgH3I9I0GvJj9Ay0zoJhPQcYsx7z7nRM pjdDCt6tba4bKdUHih5mgQvfJs+73JmiU8R/DhAoW23XLcNI6Dnrd50jErbJjH93 bg== -----END CERTIFICATE-----Generated at Tue Sep 22 20:32:49 2026 by rpki-client