$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft File: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft (raw, json) Hash identifier: EeAJR1JoCHhso4Bb0q6S/7pEEEKyjgiwzaRHNYPVu5g= Subject key identifier: 52:6C:D4:0C:E9:94:C1:E7:E3:6F:6D:B3:C6:06:0B:38:E7:B2:E3:F7 Authority key identifier: 64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE Certificate issuer: /CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe Certificate serial: 41C7D7A621D70070F3F872ABCF9AAB3FBA2634FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft Manifest number: 0329 Signing time: Tue 04 Nov 2025 12:02:06 +0000 Manifest this update: Tue 04 Nov 2025 11:57:06 +0000 Manifest next update: Wed 05 Nov 2025 13:54:06 +0000 Files and hashes: 1: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl (hash: GJE2WYPWRmUn4GubrJ8ndkVJttgtvdgR0LVpd8UqmyI=) 2: 34352e3135302e342e302f32342d3234203d3e203432383331.roa (hash: 702sTF4T+4tyFOCkBSwyFht2LvCuhPDht8ofZOjL5aw=) 3: 34352e3135302e372e302f32342d3234203d3e203430363736.roa (hash: byqPGvSaG6esVs7ttHZAm5MeDtXny30fRGCsgkrnWc0=) 4: 34352e3135302e352e302f32342d3234203d3e20323039383534.roa (hash: og23dgtoYqERERjtAqH2h8sLSaLgr4DxdJzsOAsyNMg=) 5: 34352e3135302e362e302f32342d3234203d3e203538303631.roa (hash: 739QQ1kzpbqPlY0J1CHiMuvjqJmn7ot6gs3zEY3jdHw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 13:54:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:c7:d7:a6:21:d7:00:70:f3:f8:72:ab:cf:9a:ab:3f:ba:26:34:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe Validity Not Before: Nov 4 11:57:06 2025 GMT Not After : Nov 5 13:54:06 2025 GMT Subject: CN=526CD40CE994C1E7E36F6DB3C6060B38E7B2E3F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8a:ee:57:37:e1:00:1f:81:15:6b:ce:3f:b1: 96:c6:25:e1:d4:13:58:36:2b:aa:4f:a0:31:7e:6c: e9:59:c7:31:c0:4b:e9:a7:5b:a4:52:94:58:84:22: 2e:20:c9:b1:4c:88:59:5e:f3:c2:fd:5c:54:fa:a6: 09:ac:72:f4:fe:40:3f:df:42:06:9c:a2:12:db:65: f6:cf:03:9c:0b:1c:57:dd:41:64:66:e5:5f:e4:a6: 9f:d7:a2:6e:df:92:15:9a:14:ec:d7:31:d7:63:cb: 48:52:f7:9d:96:46:a8:10:4e:46:04:25:68:70:77: 2b:7d:76:62:8c:de:64:20:bc:ee:23:25:6f:a0:ea: a1:96:d8:c2:a1:f8:e7:35:2f:b0:5e:ed:3e:ba:80: 19:56:93:c1:ed:f8:ac:c2:9e:6c:6d:87:bd:81:0a: 00:dd:dc:16:25:76:87:7c:99:a0:8b:92:5c:5e:48: 23:bd:10:a3:7d:dc:1c:05:74:ee:ed:9f:ce:15:2b: 3b:b7:6a:f6:44:b4:d6:9f:00:05:25:27:c4:86:b0: ab:80:06:97:d0:66:e0:7b:0c:c2:13:1c:bb:17:62: fb:c8:63:5c:42:50:cf:2c:2d:d7:3a:0c:cb:8b:61: f5:3f:19:5a:00:4f:59:69:3e:8e:e4:50:39:15:8c: be:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:6C:D4:0C:E9:94:C1:E7:E3:6F:6D:B3:C6:06:0B:38:E7:B2:E3:F7 X509v3 Authority Key Identifier: keyid:64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:b3:de:06:c3:85:65:6e:0a:fe:73:6f:ba:0d:18:03:20:76: 36:2d:22:48:c9:11:80:8e:11:03:4b:b3:56:da:b7:e5:2f:46: aa:1c:2d:b3:09:86:8b:82:da:fd:e7:82:1d:3f:a1:02:52:c2: 29:aa:d6:41:bd:8e:16:9d:ab:f0:72:b3:31:d2:cd:76:38:e1: 28:5e:e1:39:95:12:bb:82:20:8e:90:71:57:f1:04:8b:2b:36: e0:20:ae:d8:db:12:65:a3:a6:63:fa:01:09:5f:4b:31:a8:d0: 75:16:30:f2:f6:14:27:65:7d:da:c8:f6:d1:e1:5b:a4:b1:80: 21:b2:18:40:e0:65:2a:11:54:b7:11:d4:6a:a8:28:a2:eb:e2: 2d:65:45:d6:ff:19:45:87:e3:81:03:65:77:62:20:d1:b8:d8: 6f:81:cd:bf:56:6b:0a:e8:87:03:6f:e1:37:2c:f3:6b:65:3b: c1:31:bc:df:63:65:1e:dc:f1:35:c9:f1:8c:69:ad:d7:c6:e3: 9f:17:67:23:62:05:c1:6e:99:55:b9:0f:6c:dd:a8:f2:d3:7e: b4:f1:09:be:c6:d1:52:17:93:24:f2:db:7e:a8:aa:a9:50:54: e9:27:df:e0:c6:c7:02:4f:d1:91:9c:44:12:cc:6b:5b:fa:63: ea:41:d8:f8 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUQcfXpiHXAHDz+HKrz5qrP7omNP0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRhZjE1NDE5YmQ1ZmU2YzhmOTdlMjI0YTg2YTQ5MTdh MmU2ZmVmZTAeFw0yNTExMDQxMTU3MDZaFw0yNTExMDUxMzU0MDZaMDMxMTAvBgNV BAMTKDUyNkNENDBDRTk5NEMxRTdFMzZGNkRCM0M2MDYwQjM4RTdCMkUzRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5iu5XN+EAH4EVa84/sZbGJeHU E1g2K6pPoDF+bOlZxzHAS+mnW6RSlFiEIi4gybFMiFle88L9XFT6pgmscvT+QD/f QgacohLbZfbPA5wLHFfdQWRm5V/kpp/Xom7fkhWaFOzXMddjy0hS952WRqgQTkYE JWhwdyt9dmKM3mQgvO4jJW+g6qGW2MKh+Oc1L7Be7T66gBlWk8Ht+KzCnmxth72B CgDd3BYldod8maCLklxeSCO9EKN93BwFdO7tn84VKzu3avZEtNafAAUlJ8SGsKuA BpfQZuB7DMITHLsXYvvIY1xCUM8sLdc6DMuLYfU/GVoAT1lpPo7kUDkVjL5nAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUUmzUDOmUwefjb22zxgYLOOey4/cwHwYDVR0j BBgwFoAUZK8VQZvV/myPl+IkqGpJF6Lm/v4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmM5YWE5NWYtN2IzOC00MjZhLTk5NjYtNTQ0MTkzOWZl MDMxLzAvNjRBRjE1NDE5QkQ1RkU2QzhGOTdFMjI0QTg2QTQ5MTdBMkU2RkVGRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1pLOFZRWnZWX215UGwtSWtxR3BKRjZM bV92NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mYzlhYTk1Zi03 YjM4LTQyNmEtOTk2Ni01NDQxOTM5ZmUwMzEvMC82NEFGMTU0MTlCRDVGRTZDOEY5 N0UyMjRBODZBNDkxN0EyRTZGRUZFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR7PeBsOFZW4K/nNvug0Y AyB2Ni0iSMkRgI4RA0uzVtq35S9GqhwtswmGi4La/eeCHT+hAlLCKarWQb2OFp2r 8HKzMdLNdjjhKF7hOZUSu4IgjpBxV/EEiys24CCu2NsSZaOmY/oBCV9LMajQdRYw 8vYUJ2V92sj20eFbpLGAIbIYQOBlKhFUtxHUaqgoouviLWVF1v8ZRYfjgQNld2Ig 0bjYb4HNv1ZrCuiHA2/hNyzza2U7wTG832NlHtzxNcnxjGmt18bjnxdnI2IFwW6Z VbkPbN2o8tN+tPEJvsbRUheTJPLbfqiqqVBU6Sff4MbHAk/RkZxEEsxrW/pj6kHY +A== -----END CERTIFICATE-----Generated at Wed Nov 5 02:54:16 2025 by rpki-client