$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft File: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft (raw, json) Hash identifier: 4N4wIWAHYADcHsx0R+nEMwNzJ7D6joWistnkCD9Af20= Subject key identifier: CA:9A:C0:C1:A8:07:F0:98:62:FC:B5:59:8D:85:B4:47:B8:84:BC:1B Authority key identifier: 64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE Certificate issuer: /CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe Certificate serial: 11C4D082B65E2D037295AA7843BF604D0D87EA9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft Manifest number: 04E1 Signing time: Tue 29 Sep 2026 05:48:10 +0000 Manifest this update: Tue 29 Sep 2026 05:43:10 +0000 Manifest next update: Wed 30 Sep 2026 05:51:10 +0000 Files and hashes: 1: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl (hash: IuG6NMKf3GN2Kd7xoZAGFo2OsOBLWTsGI89Gg2cXFk8=) 2: 34352e3135302e342e302f32342d3234203d3e203432383331.roa (hash: JDtWvcwkcFwfS8VCb1zy7YF8Zp2kwnagm9OMk367GN0=) 3: 34352e3135302e372e302f32342d3234203d3e203430363736.roa (hash: T+zbNugzb1bsH98kHS+RI8JGsyekk0ffpARbCOfuE7Y=) 4: 34352e3135302e352e302f32342d3234203d3e20323039383534.roa (hash: Crd2ncf4lQNUDj/2Yu6qDEEKdYEoj89TZ7JLTUVoXfY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Sep 2026 05:51:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:c4:d0:82:b6:5e:2d:03:72:95:aa:78:43:bf:60:4d:0d:87:ea:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe Validity Not Before: Sep 29 05:43:10 2026 GMT Not After : Sep 30 05:51:10 2026 GMT Subject: CN=CA9AC0C1A807F09862FCB5598D85B447B884BC1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e2:d4:ce:21:91:d4:fe:5a:f8:39:9d:57:be: a6:49:59:c1:4d:9a:e1:b7:7f:7e:04:5a:f9:0e:f7: 34:27:d4:f3:fc:85:65:89:2e:0e:20:ec:a1:44:71: c7:e2:ba:df:b4:0f:43:55:dd:30:8a:8e:50:62:46: 26:0a:d1:4b:36:2e:08:a0:80:0e:86:34:cc:d9:dd: ab:8c:df:a0:c9:65:4b:2b:77:36:22:a4:df:aa:af: 4a:d5:3c:ec:9c:53:c7:fa:57:3a:ee:91:95:ec:a0: dc:5f:d7:6c:7f:b8:59:75:c4:26:50:75:d2:62:32: b0:66:28:ed:1e:42:a4:43:5e:36:d8:67:a2:d2:45: f9:72:c7:cb:66:1b:98:97:2e:18:e5:67:a1:72:96: 9b:da:e8:05:c4:a6:2f:af:90:ae:42:8e:ef:3b:f2: bf:5a:b6:1b:b3:ef:52:3b:cb:b0:65:88:4e:b6:83: 98:48:7c:5f:5b:86:60:7b:13:47:b4:e4:09:a9:89: be:ae:0b:01:89:df:3e:20:e0:25:61:80:09:91:92: 6d:93:1f:d7:a8:7b:43:1a:4b:f7:30:5f:eb:ff:d8: f2:53:e7:ac:36:84:b7:b0:a6:7b:1b:86:eb:6c:14: 22:91:a7:81:aa:ba:4e:e0:af:e8:3a:82:f8:fa:b8: eb:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:9A:C0:C1:A8:07:F0:98:62:FC:B5:59:8D:85:B4:47:B8:84:BC:1B X509v3 Authority Key Identifier: keyid:64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:dc:17:36:a3:01:93:c4:64:43:7b:58:4e:ed:48:70:74:64: 7b:77:ce:58:74:6f:19:f2:2c:a5:a6:5b:98:60:3c:fb:5f:46: 0f:07:37:fe:6d:60:89:29:92:46:64:5c:b8:c0:83:ee:79:32: 06:9d:a7:0b:d9:e4:92:11:cb:15:ca:ec:ae:76:27:28:dd:71: e2:5f:3a:46:55:7d:83:ad:5f:4f:ef:d4:ba:f8:3a:14:d5:c8: 03:a4:8f:0c:2d:12:8f:ae:ef:e4:b3:88:1b:2d:3f:fc:4c:fc: 51:a0:de:53:a3:57:99:25:7f:1b:10:38:86:bf:f4:53:fd:19: c6:df:f2:22:df:66:7d:d5:46:91:af:3b:7d:c9:e5:26:0a:ae: 3b:d6:6b:b0:82:4c:20:dd:8d:b1:70:34:3d:3d:09:6d:50:7f: 34:f5:be:11:2f:e7:50:34:7b:d6:1f:de:e6:7e:88:5e:e4:08: 71:6a:c8:8b:3a:dd:12:08:f7:c2:9f:81:9b:ff:d1:75:6b:95: 1e:30:c6:4b:35:a7:c7:25:9e:f6:28:9f:6b:7d:3c:bc:6a:46: 29:ee:4a:4c:b4:3c:60:5d:55:e8:36:b5:c9:e1:c6:c0:56:46: a7:ba:f3:a2:52:20:d8:67:a3:27:4e:2c:94:5f:f1:6b:9a:9f: f0:54:fb:4e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUEcTQgrZeLQNylap4Q79gTQ2H6p4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRhZjE1NDE5YmQ1ZmU2YzhmOTdlMjI0YTg2YTQ5MTdh MmU2ZmVmZTAeFw0yNjA5MjkwNTQzMTBaFw0yNjA5MzAwNTUxMTBaMDMxMTAvBgNV BAMTKENBOUFDMEMxQTgwN0YwOTg2MkZDQjU1OThEODVCNDQ3Qjg4NEJDMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC74tTOIZHU/lr4OZ1XvqZJWcFN muG3f34EWvkO9zQn1PP8hWWJLg4g7KFEccfiut+0D0NV3TCKjlBiRiYK0Us2Lgig gA6GNMzZ3auM36DJZUsrdzYipN+qr0rVPOycU8f6VzrukZXsoNxf12x/uFl1xCZQ ddJiMrBmKO0eQqRDXjbYZ6LSRflyx8tmG5iXLhjlZ6Fylpva6AXEpi+vkK5Cju87 8r9athuz71I7y7BliE62g5hIfF9bhmB7E0e05Ampib6uCwGJ3z4g4CVhgAmRkm2T H9eoe0MaS/cwX+v/2PJT56w2hLewpnsbhutsFCKRp4Gquk7gr+g6gvj6uOvdAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUyprAwagH8Jhi/LVZjYW0R7iEvBswHwYDVR0j BBgwFoAUZK8VQZvV/myPl+IkqGpJF6Lm/v4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmM5YWE5NWYtN2IzOC00MjZhLTk5NjYtNTQ0MTkzOWZl MDMxLzAvNjRBRjE1NDE5QkQ1RkU2QzhGOTdFMjI0QTg2QTQ5MTdBMkU2RkVGRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1pLOFZRWnZWX215UGwtSWtxR3BKRjZM bV92NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mYzlhYTk1Zi03 YjM4LTQyNmEtOTk2Ni01NDQxOTM5ZmUwMzEvMC82NEFGMTU0MTlCRDVGRTZDOEY5 N0UyMjRBODZBNDkxN0EyRTZGRUZFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgdwXNqMBk8RkQ3tYTu1I cHRke3fOWHRvGfIspaZbmGA8+19GDwc3/m1giSmSRmRcuMCD7nkyBp2nC9nkkhHL FcrsrnYnKN1x4l86RlV9g61fT+/Uuvg6FNXIA6SPDC0Sj67v5LOIGy0//Ez8UaDe U6NXmSV/GxA4hr/0U/0Zxt/yIt9mfdVGka87fcnlJgquO9ZrsIJMIN2NsXA0PT0J bVB/NPW+ES/nUDR71h/e5n6IXuQIcWrIizrdEgj3wp+Bm//RdWuVHjDGSzWnxyWe 9iifa308vGpGKe5KTLQ8YF1V6Da1yeHGwFZGp7rzolIg2GejJ04slF/xa5qf8FT7 Tg== -----END CERTIFICATE-----Generated at Tue Sep 29 11:28:36 2026 by rpki-client