$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft File: 64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft (raw, json) Hash identifier: ESazsbjQzIQ2TdT9IroR6fzdcwh10wne9JMtTTLkR5U= Subject key identifier: BF:F7:F8:D5:B0:97:45:74:99:FD:51:46:11:F4:82:78:39:47:99:45 Authority key identifier: 64:D6:29:AA:3C:F3:8F:9F:77:0A:DB:BB:20:C6:DE:BD:0B:8C:DE:05 Certificate issuer: /CN=64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05 Certificate serial: 7BB7EDAAE5701A513C5841775B32003BCDFA1C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft Manifest number: 0142 Signing time: Tue 12 May 2026 22:06:40 +0000 Manifest this update: Tue 12 May 2026 22:01:40 +0000 Manifest next update: Thu 14 May 2026 00:59:40 +0000 Files and hashes: 1: 64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.crl (hash: vHoiFl+4dF9E3WRy4Felj1McQWikHuil4O1XtVjAk4M=) 2: 326131343a373538313a333039303a3a2f34382d3438203d3e20323034323131.roa (hash: nGLAdkRiCVIQwTrXrRH2GZTJEYm4l5K5Qg4h/njNDzU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:b7:ed:aa:e5:70:1a:51:3c:58:41:77:5b:32:00:3b:cd:fa:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05 Validity Not Before: May 12 22:01:40 2026 GMT Not After : May 14 00:59:40 2026 GMT Subject: CN=BFF7F8D5B097457499FD514611F4827839479945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c1:9d:cc:fa:72:ee:d2:b5:20:51:9d:a5:6b: d3:12:99:9a:78:de:49:cb:a4:f2:6f:92:b5:5f:5c: 93:e6:b0:7d:9e:9c:4b:18:95:57:5e:f4:82:07:cc: db:60:ec:2b:63:7f:12:65:34:e8:1c:5d:14:88:02: 72:b6:f0:1e:f4:67:43:63:26:a2:87:14:4b:6a:b5: 46:c6:db:4a:94:3c:24:b5:5e:5d:e9:85:b8:ed:12: 2d:6c:79:f7:8e:64:c9:b9:68:90:32:06:b0:e6:8c: bd:69:00:58:68:9a:52:80:56:3b:30:1a:0a:40:b8: e3:73:75:e7:20:91:4f:bf:be:ce:97:a0:4b:22:54: db:74:17:ab:ac:84:79:01:9a:f4:67:06:51:0c:64: 49:03:7a:37:66:ab:f9:08:09:f6:0f:28:3d:a7:cf: 00:3d:02:4d:e6:29:06:d7:8f:25:8c:54:93:de:20: 48:15:88:88:d4:4f:cc:7b:39:47:f5:92:c5:e1:f0: 71:7f:6f:2d:02:95:af:dc:06:e8:26:76:3d:a2:62: f2:e9:3f:9e:38:88:be:82:da:cd:02:f7:25:88:e9: 35:3a:2d:4a:21:48:fd:61:fe:86:ab:f9:3d:2e:fb: 14:ab:a2:4c:97:7e:e6:d9:89:f3:eb:16:8b:59:af: 47:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:F7:F8:D5:B0:97:45:74:99:FD:51:46:11:F4:82:78:39:47:99:45 X509v3 Authority Key Identifier: keyid:64:D6:29:AA:3C:F3:8F:9F:77:0A:DB:BB:20:C6:DE:BD:0B:8C:DE:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:13:57:b5:7f:4c:67:4d:cd:ef:e2:4c:80:a2:3b:b3:aa:c5: 92:cf:8f:39:9b:20:24:79:bc:1b:62:b3:9b:b2:c0:ef:48:0a: c9:cd:45:39:87:27:c5:39:a8:85:ac:f1:db:0f:33:b1:06:13: c0:4e:0b:27:53:c9:7b:3e:33:25:1f:1f:32:b0:97:5f:98:b0: 72:b8:ff:de:9b:dc:02:59:e0:49:65:12:83:01:cf:19:3a:66: 81:22:5e:27:5d:44:f3:b3:a2:bd:c7:83:bf:c6:c0:3b:23:49: 41:4f:ea:e1:e9:40:79:fa:65:0a:57:81:6d:4d:6d:9b:d8:7e: 5b:ee:d0:60:ff:37:9c:8b:6b:25:b9:ad:60:23:96:3c:29:93: 26:fb:18:b8:3d:31:cc:67:f3:eb:76:23:2a:cc:f5:2b:35:9d: 3e:f4:76:11:17:0c:15:f5:06:ff:8b:fa:77:10:8f:31:c7:09: bd:31:51:e0:03:69:3e:e1:b5:d5:4e:94:29:6a:4b:57:43:72: 88:30:e6:bf:b9:d2:f4:e4:46:5b:57:95:3a:fe:e3:22:e4:20: ca:8f:88:ea:1b:5c:c0:b9:e3:c5:19:fd:f7:4e:88:4f:63:8e: 43:d2:10:97:17:03:58:6f:8a:a6:23:d0:57:19:fc:52:96:23: 69:c4:12:69 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgITe7ftquVwGlE8WEF3WzIAO836HDANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg2NEQ2MjlBQTNDRjM4RjlGNzcwQURCQkIyMEM2REVCRDBC OENERTA1MB4XDTI2MDUxMjIyMDE0MFoXDTI2MDUxNDAwNTk0MFowMzExMC8GA1UE AxMoQkZGN0Y4RDVCMDk3NDU3NDk5RkQ1MTQ2MTFGNDgyNzgzOTQ3OTk0NTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK/Bncz6cu7StSBRnaVr0xKZmnje Scuk8m+StV9ck+awfZ6cSxiVV170ggfM22DsK2N/EmU06BxdFIgCcrbwHvRnQ2Mm oocUS2q1RsbbSpQ8JLVeXemFuO0SLWx5945kyblokDIGsOaMvWkAWGiaUoBWOzAa CkC443N15yCRT7++zpegSyJU23QXq6yEeQGa9GcGUQxkSQN6N2ar+QgJ9g8oPafP AD0CTeYpBtePJYxUk94gSBWIiNRPzHs5R/WSxeHwcX9vLQKVr9wG6CZ2PaJi8uk/ njiIvoLazQL3JYjpNTotSiFI/WH+hqv5PS77FKuiTJd+5tmJ8+sWi1mvRz0CAwEA AaOCAoIwggJ+MB0GA1UdDgQWBBS/9/jVsJdFdJn9UUYR9IJ4OUeZRTAfBgNVHSME GDAWgBRk1imqPPOPn3cK27sgxt69C4zeBTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5u ZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4YTgtOTc5My0zM2VlYzA2N2Nl MzkvMi82NEQ2MjlBQTNDRjM4RjlGNzcwQURCQkIyMEM2REVCRDBCOENERTA1LmNy bDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5j LnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Q5YmQzODg4LTkzMDItNGI2 Zi1hMDE3LTJiNGJiYTVlNTdiYi8xLzY0RDYyOUFBM0NGMzhGOUY3NzBBREJCQjIw QzZERUJEMEI4Q0RFMDUuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv ZjUzMmI5ZWItMmZhZS00OGE4LTk3OTMtMzNlZWMwNjdjZTM5LzIvNjRENjI5QUEz Q0YzOEY5Rjc3MEFEQkJCMjBDNkRFQkQwQjhDREUwNS5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABATV7V/ TGdNze/iTICiO7OqxZLPjzmbICR5vBtis5uywO9ICsnNRTmHJ8U5qIWs8dsPM7EG E8BOCydTyXs+MyUfHzKwl1+YsHK4/96b3AJZ4EllEoMBzxk6ZoEiXiddRPOzor3H g7/GwDsjSUFP6uHpQHn6ZQpXgW1NbZvYflvu0GD/N5yLayW5rWAjljwpkyb7GLg9 Mcxn8+t2IyrM9Ss1nT70dhEXDBX1Bv+L+ncQjzHHCb0xUeADaT7htdVOlClqS1dD cogw5r+50vTkRltXlTr+4yLkIMqPiOobXMC548UZ/fdOiE9jjkPSEJcXA1hviqYj 0FcZ/FKWI2nEEmk= -----END CERTIFICATE-----Generated at Wed May 13 07:18:53 2026 by rpki-client