$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft File: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft (raw, json) Hash identifier: qXa6thFwFmMGi5Bl0swbx5tLIGCCd32Nl0CAU9UEHfA= Subject key identifier: 10:3D:5A:FC:8A:BD:A5:0F:98:CD:8C:88:02:14:33:CC:BF:A1:3A:37 Authority key identifier: 64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE Certificate issuer: /CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe Certificate serial: 4AEEA8D6FE2F6676FFC29C357F3884ED5B07B2E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft Manifest number: 02AE Signing time: Sun 03 Aug 2025 19:27:16 +0000 Manifest this update: Sun 03 Aug 2025 19:22:16 +0000 Manifest next update: Mon 04 Aug 2025 21:31:16 +0000 Files and hashes: 1: 34352e3135302e372e302f32342d3234203d3e203430363736.roa (hash: byqPGvSaG6esVs7ttHZAm5MeDtXny30fRGCsgkrnWc0=) 2: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl (hash: KVZpaURvW2xb9nrrMmeUynxO5juejoPm3kceZ1QMk+Y=) 3: 34352e3135302e352e302f32342d3234203d3e20323039383534.roa (hash: og23dgtoYqERERjtAqH2h8sLSaLgr4DxdJzsOAsyNMg=) 4: 34352e3135302e342e302f32342d3234203d3e203432383331.roa (hash: 702sTF4T+4tyFOCkBSwyFht2LvCuhPDht8ofZOjL5aw=) 5: 34352e3135302e362e302f32342d3234203d3e203538303631.roa (hash: 739QQ1kzpbqPlY0J1CHiMuvjqJmn7ot6gs3zEY3jdHw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 04 Aug 2025 21:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:ee:a8:d6:fe:2f:66:76:ff:c2:9c:35:7f:38:84:ed:5b:07:b2:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe Validity Not Before: Aug 3 19:22:16 2025 GMT Not After : Aug 4 21:31:16 2025 GMT Subject: CN=103D5AFC8ABDA50F98CD8C88021433CCBFA13A37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:de:7d:2c:86:e6:c5:f3:9a:f7:6b:ee:d8:12: 9a:dc:05:a7:0e:2b:07:5d:56:ee:67:6c:0e:a4:23: d6:10:43:f7:2f:4e:0d:01:d2:de:58:e3:82:8a:4c: 46:eb:54:b1:ab:a7:e7:db:65:00:81:d6:7e:f4:51: 80:5d:07:65:df:13:11:50:eb:e7:83:02:48:90:d1: bf:71:8f:03:bf:e8:c8:d4:35:ab:e6:b5:07:34:b6: 3f:af:a4:3b:64:b7:23:b4:34:5c:b8:f9:5d:af:12: 8c:37:f0:0e:6f:34:26:b5:bd:e7:53:2d:e3:2a:86: 80:ec:17:03:81:fa:6d:3c:cc:58:1a:de:c8:be:7b: e7:c2:4e:d5:57:5e:ba:45:ae:d9:f6:f9:a2:6a:57: f7:22:f8:42:dd:40:b7:22:62:39:1a:26:30:d1:da: 3e:41:30:27:c7:f4:2b:1f:b3:38:bc:2a:25:a2:92: 86:fe:fd:97:de:42:d2:4c:b8:a8:66:cc:eb:26:fc: 10:fb:bf:15:5f:1b:eb:c8:78:c9:61:fb:8c:0e:96: dc:aa:e9:12:23:d7:b4:32:16:76:12:55:2e:1b:43: 83:13:3d:41:04:49:7c:75:02:43:f7:b2:83:f5:b0: e0:18:e0:6f:6b:14:b2:70:e0:5e:ba:03:8e:e4:df: 41:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:3D:5A:FC:8A:BD:A5:0F:98:CD:8C:88:02:14:33:CC:BF:A1:3A:37 X509v3 Authority Key Identifier: keyid:64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:8d:16:c1:45:a5:80:ee:7e:16:a0:87:a7:e0:89:b3:a8:5f: ad:5e:82:1b:d1:3f:93:25:8b:a6:92:37:c5:f5:b9:1c:b6:be: d2:ee:e3:8c:58:4f:3b:12:01:39:5d:25:7e:06:03:92:fd:c4: 25:38:71:ec:86:86:63:31:ef:f6:27:73:e9:6c:4f:b7:5a:30: fa:88:43:51:10:ad:f6:3a:19:e4:98:72:9b:91:9d:8e:5d:f8: 37:93:8c:27:84:24:9f:02:68:52:37:21:d8:03:96:61:a0:f5: d5:88:03:be:87:09:28:e2:72:f4:5c:55:bc:d3:9a:d8:31:7f: c4:2f:a3:9a:b9:25:73:99:91:33:ff:08:28:da:f8:81:6b:19: 21:e1:30:75:53:b8:5e:4b:1c:c8:78:d7:c2:c1:3c:70:d4:4d: f8:59:5d:3b:d7:98:fe:ae:53:b8:59:d4:e6:5a:ec:dd:17:36: aa:7f:50:51:6e:b5:26:8a:74:d3:eb:91:77:c5:7b:43:0a:3e: 3c:52:8e:af:25:d7:74:d2:26:e4:52:cb:47:f4:88:4d:98:4d: 4b:00:08:ee:61:be:cc:24:38:a5:0f:ce:70:13:c3:30:1b:41: 28:07:24:b7:47:7c:5e:f0:90:7f:03:07:db:61:75:55:6c:90: c8:6f:68:08 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUSu6o1v4vZnb/wpw1fziE7VsHsuQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRhZjE1NDE5YmQ1ZmU2YzhmOTdlMjI0YTg2YTQ5MTdh MmU2ZmVmZTAeFw0yNTA4MDMxOTIyMTZaFw0yNTA4MDQyMTMxMTZaMDMxMTAvBgNV BAMTKDEwM0Q1QUZDOEFCREE1MEY5OENEOEM4ODAyMTQzM0NDQkZBMTNBMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY3n0shubF85r3a+7YEprcBacO KwddVu5nbA6kI9YQQ/cvTg0B0t5Y44KKTEbrVLGrp+fbZQCB1n70UYBdB2XfExFQ 6+eDAkiQ0b9xjwO/6MjUNavmtQc0tj+vpDtktyO0NFy4+V2vEow38A5vNCa1vedT LeMqhoDsFwOB+m08zFga3si+e+fCTtVXXrpFrtn2+aJqV/ci+ELdQLciYjkaJjDR 2j5BMCfH9Csfszi8KiWikob+/ZfeQtJMuKhmzOsm/BD7vxVfG+vIeMlh+4wOltyq 6RIj17QyFnYSVS4bQ4MTPUEESXx1AkP3soP1sOAY4G9rFLJw4F66A47k30HpAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUED1a/Iq9pQ+YzYyIAhQzzL+hOjcwHwYDVR0j BBgwFoAUZK8VQZvV/myPl+IkqGpJF6Lm/v4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmM5YWE5NWYtN2IzOC00MjZhLTk5NjYtNTQ0MTkzOWZl MDMxLzAvNjRBRjE1NDE5QkQ1RkU2QzhGOTdFMjI0QTg2QTQ5MTdBMkU2RkVGRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1pLOFZRWnZWX215UGwtSWtxR3BKRjZM bV92NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mYzlhYTk1Zi03 YjM4LTQyNmEtOTk2Ni01NDQxOTM5ZmUwMzEvMC82NEFGMTU0MTlCRDVGRTZDOEY5 N0UyMjRBODZBNDkxN0EyRTZGRUZFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJI0WwUWlgO5+FqCHp+CJ s6hfrV6CG9E/kyWLppI3xfW5HLa+0u7jjFhPOxIBOV0lfgYDkv3EJThx7IaGYzHv 9idz6WxPt1ow+ohDURCt9joZ5Jhym5Gdjl34N5OMJ4QknwJoUjch2AOWYaD11YgD vocJKOJy9FxVvNOa2DF/xC+jmrklc5mRM/8IKNr4gWsZIeEwdVO4XkscyHjXwsE8 cNRN+FldO9eY/q5TuFnU5lrs3Rc2qn9QUW61Jop00+uRd8V7Qwo+PFKOryXXdNIm 5FLLR/SITZhNSwAI7mG+zCQ4pQ/OcBPDMBtBKAckt0d8XvCQfwMH22F1VWyQyG9o CA== -----END CERTIFICATE-----Generated at Mon Aug 4 11:13:10 2025 by rpki-client