$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft File: 64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft (raw, json) Hash identifier: MA8u1aX4tYY+wp/89GZohWM+RczB0EVTOmpKwPD3eAs= Subject key identifier: A2:77:0F:0E:2D:38:BC:B2:EF:4C:7C:57:04:FE:45:70:3B:3D:28:56 Authority key identifier: 64:D6:29:AA:3C:F3:8F:9F:77:0A:DB:BB:20:C6:DE:BD:0B:8C:DE:05 Certificate issuer: /CN=64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05 Certificate serial: 486A98CC014AF1DCF6EDD275E8CB3F06709A4B99 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft Manifest number: 01E9 Signing time: Thu 23 Jul 2026 12:48:31 +0000 Manifest this update: Thu 23 Jul 2026 12:43:31 +0000 Manifest next update: Fri 24 Jul 2026 13:03:31 +0000 Files and hashes: 1: 326131343a373538313a333039303a3a2f34382d3438203d3e20323034323131.roa (hash: nGLAdkRiCVIQwTrXrRH2GZTJEYm4l5K5Qg4h/njNDzU=) 2: 64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.crl (hash: Nt2NAxy2acXv9cyzFKfsI+jVUzdVvW9wpFHJAgiMVqI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 13:03:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:6a:98:cc:01:4a:f1:dc:f6:ed:d2:75:e8:cb:3f:06:70:9a:4b:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05 Validity Not Before: Jul 23 12:43:31 2026 GMT Not After : Jul 24 13:03:31 2026 GMT Subject: CN=A2770F0E2D38BCB2EF4C7C5704FE45703B3D2856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:76:59:f1:6c:14:9f:41:26:66:45:28:92:40: 63:ad:81:ed:62:fa:e3:2b:6d:c2:be:a0:23:35:e5: 9e:96:d1:87:19:7a:49:5e:30:84:8a:ae:27:54:be: f9:92:e9:c4:15:a0:b6:b8:40:5e:75:f1:2d:c2:00: 18:5d:84:7f:4f:e0:77:f6:b6:be:9d:f7:f4:12:38: cb:9e:ff:9c:fb:96:9c:03:12:c0:65:1e:c8:83:0e: bd:b0:ff:72:a3:e5:a8:b7:7f:0e:29:4b:c9:63:f5: 43:af:d8:3c:f8:3e:ea:8e:e0:95:65:a6:49:a1:8d: fe:c7:a0:0a:1e:27:13:68:af:2f:f3:dd:92:21:da: a4:23:38:00:32:77:42:8f:8c:56:5f:ef:e9:6b:26: b6:3c:c4:90:49:36:bf:c5:18:e0:ab:48:4b:92:b9: 4b:d0:27:00:6b:a7:66:5a:33:47:2e:89:19:9b:1b: d6:a3:99:38:fe:5d:8b:cb:cf:92:3f:59:31:30:49: ac:71:ce:ae:78:54:5c:db:9d:dd:11:7a:c5:ee:74: 4e:f8:e1:74:55:ca:03:5f:b3:05:a2:cf:f3:39:02: 37:e1:39:ca:1b:cb:85:9c:09:2f:e8:c1:79:49:e8: fc:d5:33:c1:27:e7:d9:84:19:fa:e4:cd:ed:95:09: 19:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:77:0F:0E:2D:38:BC:B2:EF:4C:7C:57:04:FE:45:70:3B:3D:28:56 X509v3 Authority Key Identifier: keyid:64:D6:29:AA:3C:F3:8F:9F:77:0A:DB:BB:20:C6:DE:BD:0B:8C:DE:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:13:de:cb:be:1c:82:e5:d8:ff:e7:cc:a1:7b:90:57:76:a0: d0:27:d3:15:3c:b4:b5:71:2e:94:6b:dc:c9:ee:8b:6b:cc:07: af:79:df:bb:a7:d5:bd:e7:23:5e:94:0d:76:f7:58:1f:73:60: 62:bf:38:2c:5f:84:1a:7c:b4:d2:39:63:cb:67:22:33:47:10: a2:9a:7a:22:79:9b:c6:82:7b:1a:5c:da:eb:db:c7:62:de:1f: 50:33:ba:99:d9:21:27:be:5f:99:71:84:ae:50:86:89:15:31: 5b:9e:9e:df:ee:3b:eb:c5:da:a0:bd:4a:47:c7:5b:b4:45:8f: e5:93:85:0b:db:a8:45:6d:f0:f4:18:d6:b1:0b:5c:e8:36:fc: 79:4f:03:cb:3c:7c:43:57:15:2d:78:0d:63:29:40:60:7f:75: 9b:fe:10:7d:c3:98:ce:60:d0:a4:bd:ec:ae:20:f7:c2:ba:e3: 64:08:29:a0:8b:45:a0:96:7f:7d:18:ef:ec:a7:ef:4e:36:71: fb:3f:7b:d9:47:04:b1:51:79:46:33:38:19:3b:c2:49:d8:b1: a7:d0:ad:a5:78:1a:d8:04:5d:c1:2a:66:d2:cf:af:47:f2:59: 99:58:be:f4:60:f4:30:38:46:27:68:ed:a8:3c:c7:d2:28:99: 3f:68:a8:ea -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUSGqYzAFK8dz27dJ16Ms/BnCaS5kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRENjI5QUEzQ0YzOEY5Rjc3MEFEQkJCMjBDNkRFQkQw QjhDREUwNTAeFw0yNjA3MjMxMjQzMzFaFw0yNjA3MjQxMzAzMzFaMDMxMTAvBgNV BAMTKEEyNzcwRjBFMkQzOEJDQjJFRjRDN0M1NzA0RkU0NTcwM0IzRDI4NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcdlnxbBSfQSZmRSiSQGOtge1i +uMrbcK+oCM15Z6W0YcZekleMISKridUvvmS6cQVoLa4QF518S3CABhdhH9P4Hf2 tr6d9/QSOMue/5z7lpwDEsBlHsiDDr2w/3Kj5ai3fw4pS8lj9UOv2Dz4PuqO4JVl pkmhjf7HoAoeJxNory/z3ZIh2qQjOAAyd0KPjFZf7+lrJrY8xJBJNr/FGOCrSEuS uUvQJwBrp2ZaM0cuiRmbG9ajmTj+XYvLz5I/WTEwSaxxzq54VFzbnd0ResXudE74 4XRVygNfswWiz/M5AjfhOcoby4WcCS/owXlJ6PzVM8En59mEGfrkze2VCRlbAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUoncPDi04vLLvTHxXBP5FcDs9KFYwHwYDVR0j BBgwFoAUZNYpqjzzj593Ctu7IMbevQuM3gUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjUzMmI5ZWItMmZhZS00OGE4LTk3OTMtMzNlZWMwNjdj ZTM5LzIvNjRENjI5QUEzQ0YzOEY5Rjc3MEFEQkJCMjBDNkRFQkQwQjhDREUwNS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kOWJkMzg4OC05MzAyLTRi NmYtYTAxNy0yYjRiYmE1ZTU3YmIvMS82NEQ2MjlBQTNDRjM4RjlGNzcwQURCQkIy MEM2REVCRDBCOENERTA1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Y1MzJiOWViLTJmYWUtNDhhOC05NzkzLTMzZWVjMDY3Y2UzOS8yLzY0RDYyOUFB M0NGMzhGOUY3NzBBREJCQjIwQzZERUJEMEI4Q0RFMDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC/E97L vhyC5dj/58yhe5BXdqDQJ9MVPLS1cS6Ua9zJ7otrzAeved+7p9W95yNelA1291gf c2BivzgsX4QafLTSOWPLZyIzRxCimnoieZvGgnsaXNrr28di3h9QM7qZ2SEnvl+Z cYSuUIaJFTFbnp7f7jvrxdqgvUpHx1u0RY/lk4UL26hFbfD0GNaxC1zoNvx5TwPL PHxDVxUteA1jKUBgf3Wb/hB9w5jOYNCkveyuIPfCuuNkCCmgi0Wgln99GO/sp+9O NnH7P3vZRwSxUXlGMzgZO8JJ2LGn0K2leBrYBF3BKmbSz69H8lmZWL70YPQwOEYn aO2oPMfSKJk/aKjq -----END CERTIFICATE-----Generated at Fri Jul 24 03:02:25 2026 by rpki-client