$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft File: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft (raw, json) Hash identifier: T/eDWrDYRDWMpSqeoR8PsiWmeSiLxo7YT2oW8BOF0Fs= Subject key identifier: 01:EE:19:D0:33:55:66:58:C0:89:DC:68:7C:12:A7:5C:44:92:DB:E0 Authority key identifier: 64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE Certificate issuer: /CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe Certificate serial: 3974CFE545B04B3F98C278838AB49F16CE032D64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft Manifest number: 0403 Signing time: Fri 17 Apr 2026 01:54:42 +0000 Manifest this update: Fri 17 Apr 2026 01:49:42 +0000 Manifest next update: Sat 18 Apr 2026 02:35:42 +0000 Files and hashes: 1: 34352e3135302e352e302f32342d3234203d3e20323039383534.roa (hash: Crd2ncf4lQNUDj/2Yu6qDEEKdYEoj89TZ7JLTUVoXfY=) 2: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl (hash: ctsIIXUGDkmlbOLejwxoTAWGq9L0XIKnFZPNHqy0pUw=) 3: 34352e3135302e372e302f32342d3234203d3e203430363736.roa (hash: byqPGvSaG6esVs7ttHZAm5MeDtXny30fRGCsgkrnWc0=) 4: 34352e3135302e342e302f32342d3234203d3e203432383331.roa (hash: JDtWvcwkcFwfS8VCb1zy7YF8Zp2kwnagm9OMk367GN0=) 5: 34352e3135302e362e302f32342d3234203d3e203538303631.roa (hash: yaUDjxZGhyEVxNfdUbfnMRoUwlBxM/900/kJEwn4Oxc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 02:35:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:74:cf:e5:45:b0:4b:3f:98:c2:78:83:8a:b4:9f:16:ce:03:2d:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe Validity Not Before: Apr 17 01:49:42 2026 GMT Not After : Apr 18 02:35:42 2026 GMT Subject: CN=01EE19D033556658C089DC687C12A75C4492DBE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:85:93:ea:7c:cb:78:16:37:54:cf:dd:f8:f8: fa:82:76:97:a3:44:91:c8:c9:76:8d:13:f2:1e:89: 6b:04:6c:6c:93:b9:7f:37:ac:d0:fd:91:3e:5c:9e: 92:75:9b:e8:7b:17:46:1f:e7:e8:d5:6c:7c:2a:bc: d6:1c:95:cb:bc:70:97:7f:55:cc:2e:9e:93:7b:31: 70:d0:42:92:c4:52:54:89:31:84:b2:78:0b:4b:d9: 29:0d:38:d0:9e:25:87:e1:37:dc:3a:48:75:9f:b2: ab:66:7f:ca:2f:40:52:7c:f5:6b:b5:ab:ad:cb:73: 44:1c:f1:78:3f:45:45:87:6a:07:f3:b0:a7:72:e6: c2:bd:41:cc:69:8d:b3:e2:7c:29:79:bd:e3:8d:1a: 72:54:9c:82:43:c0:5c:82:8e:32:ab:11:1d:ac:b1: ba:aa:bd:67:43:b8:c5:0c:03:b5:db:c1:df:07:a9: dd:6a:6e:38:be:4e:3b:d9:c0:ad:cf:d6:94:e0:70: 2e:0b:74:9f:84:01:28:ae:1b:f5:4b:17:09:60:03: 3d:7a:df:70:ed:21:67:84:2f:56:13:e4:15:1d:59: 48:f4:ee:1c:fd:13:a2:9b:18:21:d4:56:22:2a:29: 62:54:f3:b0:76:17:c8:f2:32:61:06:16:57:4d:33: ce:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:EE:19:D0:33:55:66:58:C0:89:DC:68:7C:12:A7:5C:44:92:DB:E0 X509v3 Authority Key Identifier: keyid:64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:1d:f0:3d:51:e1:52:8a:35:14:1c:17:1a:84:05:f0:f8:16: 4d:21:a1:d3:f6:b7:f2:e2:d8:ee:7e:6d:bb:5a:2e:3b:e7:04: 28:ca:3b:88:9e:bb:dc:e3:22:a8:79:3c:f4:07:ab:d5:ce:a5: 60:bb:f5:c6:98:c1:1f:60:9b:e1:a8:9b:94:17:fc:d7:a2:38: 35:a6:3c:17:60:8e:d3:91:e7:c6:9b:e4:81:fc:c9:06:ba:3b: a9:3b:2b:2d:c3:73:d6:b8:16:5a:56:32:e0:0c:6d:15:74:13: f8:96:76:82:f5:ea:d8:ee:8b:5d:18:a0:07:cc:d4:22:fc:b1: 18:98:2c:4e:eb:5d:d3:df:0a:ab:f8:f4:09:c7:36:55:f5:43: b4:5e:14:4d:82:f1:b0:66:69:27:26:dd:82:fa:7b:f9:0e:46: 5f:d1:38:d3:24:fe:d8:d2:ed:03:d4:2d:4f:a1:31:2d:7f:28: b6:fe:3a:f0:ea:76:03:fb:6b:ba:78:be:5b:34:28:b3:36:5f: 4b:29:60:f5:7c:a5:f9:bf:40:7f:a6:59:8c:4d:9b:01:ce:07: 4c:f1:22:ab:7d:4d:7f:8a:29:98:71:66:d4:f6:2e:c5:92:84: 3d:e6:93:d1:12:2d:f5:e7:f7:d2:fd:7e:43:5b:42:58:e8:d9: ef:47:ee:bf -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUOXTP5UWwSz+YwniDirSfFs4DLWQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRhZjE1NDE5YmQ1ZmU2YzhmOTdlMjI0YTg2YTQ5MTdh MmU2ZmVmZTAeFw0yNjA0MTcwMTQ5NDJaFw0yNjA0MTgwMjM1NDJaMDMxMTAvBgNV BAMTKDAxRUUxOUQwMzM1NTY2NThDMDg5REM2ODdDMTJBNzVDNDQ5MkRCRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnhZPqfMt4FjdUz934+PqCdpej RJHIyXaNE/IeiWsEbGyTuX83rND9kT5cnpJ1m+h7F0Yf5+jVbHwqvNYclcu8cJd/ VcwunpN7MXDQQpLEUlSJMYSyeAtL2SkNONCeJYfhN9w6SHWfsqtmf8ovQFJ89Wu1 q63Lc0Qc8Xg/RUWHagfzsKdy5sK9QcxpjbPifCl5veONGnJUnIJDwFyCjjKrER2s sbqqvWdDuMUMA7Xbwd8Hqd1qbji+TjvZwK3P1pTgcC4LdJ+EASiuG/VLFwlgAz16 33DtIWeEL1YT5BUdWUj07hz9E6KbGCHUViIqKWJU87B2F8jyMmEGFldNM86VAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUAe4Z0DNVZljAidxofBKnXESS2+AwHwYDVR0j BBgwFoAUZK8VQZvV/myPl+IkqGpJF6Lm/v4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmM5YWE5NWYtN2IzOC00MjZhLTk5NjYtNTQ0MTkzOWZl MDMxLzAvNjRBRjE1NDE5QkQ1RkU2QzhGOTdFMjI0QTg2QTQ5MTdBMkU2RkVGRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1pLOFZRWnZWX215UGwtSWtxR3BKRjZM bV92NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mYzlhYTk1Zi03 YjM4LTQyNmEtOTk2Ni01NDQxOTM5ZmUwMzEvMC82NEFGMTU0MTlCRDVGRTZDOEY5 N0UyMjRBODZBNDkxN0EyRTZGRUZFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANh3wPVHhUoo1FBwXGoQF 8PgWTSGh0/a38uLY7n5tu1ouO+cEKMo7iJ673OMiqHk89Aer1c6lYLv1xpjBH2Cb 4aiblBf816I4NaY8F2CO05HnxpvkgfzJBro7qTsrLcNz1rgWWlYy4AxtFXQT+JZ2 gvXq2O6LXRigB8zUIvyxGJgsTutd098Kq/j0Ccc2VfVDtF4UTYLxsGZpJybdgvp7 +Q5GX9E40yT+2NLtA9QtT6ExLX8otv468Op2A/truni+WzQoszZfSylg9Xyl+b9A f6ZZjE2bAc4HTPEiq31Nf4opmHFm1PYuxZKEPeaT0RIt9ef30v1+Q1tCWOjZ70fu vw== -----END CERTIFICATE-----Generated at Fri Apr 17 10:47:38 2026 by rpki-client