$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft File: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft (raw, json) Hash identifier: 4zG8sDphEVpLcGVS79sa64s/kYtQRlD7peZlIs/B/HI= Subject key identifier: 2D:45:A0:62:AA:FA:AA:73:AB:AD:63:0B:43:AB:A9:46:52:85:7A:6E Authority key identifier: 64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE Certificate issuer: /CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe Certificate serial: 4A19C27E79EA06265EA363DFFFC157A7BB9EC341 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft Manifest number: 0425 Signing time: Tue 12 May 2026 15:34:50 +0000 Manifest this update: Tue 12 May 2026 15:29:50 +0000 Manifest next update: Wed 13 May 2026 15:45:50 +0000 Files and hashes: 1: 34352e3135302e342e302f32342d3234203d3e203432383331.roa (hash: JDtWvcwkcFwfS8VCb1zy7YF8Zp2kwnagm9OMk367GN0=) 2: 34352e3135302e352e302f32342d3234203d3e20323039383534.roa (hash: Crd2ncf4lQNUDj/2Yu6qDEEKdYEoj89TZ7JLTUVoXfY=) 3: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl (hash: DtOvdEoWu3uLU5iJgeos8/VB/ph4Z9dknSOhPghn6Zg=) 4: 34352e3135302e362e302f32342d3234203d3e203538303631.roa (hash: yaUDjxZGhyEVxNfdUbfnMRoUwlBxM/900/kJEwn4Oxc=) 5: 34352e3135302e372e302f32342d3234203d3e203430363736.roa (hash: byqPGvSaG6esVs7ttHZAm5MeDtXny30fRGCsgkrnWc0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 15:45:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:19:c2:7e:79:ea:06:26:5e:a3:63:df:ff:c1:57:a7:bb:9e:c3:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe Validity Not Before: May 12 15:29:50 2026 GMT Not After : May 13 15:45:50 2026 GMT Subject: CN=2D45A062AAFAAA73ABAD630B43ABA94652857A6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:55:c9:d1:82:70:5a:c5:a7:64:02:b0:be:79: 5b:d8:44:2a:16:89:19:74:16:86:c4:fe:4b:ef:41: cf:43:06:9f:6d:87:24:c5:10:25:f8:b3:18:01:db: 13:61:c0:a4:dc:25:a6:3b:c0:0b:34:af:5b:c5:a7: c9:f8:09:9e:f8:77:18:fd:01:93:b4:b2:f1:f8:1d: c4:a3:80:ab:73:cf:ea:83:2b:6b:c2:1c:5c:ee:ba: 12:8a:99:bb:c3:b8:43:1e:d7:83:9b:04:42:16:7b: 56:ac:32:d0:ce:73:c4:26:ea:56:d9:37:94:34:9c: ad:8b:c7:44:42:95:b3:3a:5a:58:f9:63:f0:95:77: a9:2e:2c:fb:62:cc:0a:d0:1d:35:6a:03:b4:eb:25: 54:f8:b4:d7:58:a5:49:a3:91:2d:ff:f3:f1:d6:0f: f2:f4:b3:cb:ea:04:43:82:36:1c:3b:60:3d:dc:b5: 6b:b4:78:04:23:2e:5b:dd:c4:bf:16:5d:89:76:60: 3a:d6:e2:57:99:3d:58:d7:33:5c:a6:ad:8c:ff:8a: b7:a7:ed:34:74:83:13:83:23:ec:25:18:31:fa:f0: df:50:92:fd:ed:e1:f9:56:be:bf:83:6c:0c:82:af: c3:66:e8:16:5d:a6:ff:92:46:9f:27:a6:43:e7:de: 1e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:45:A0:62:AA:FA:AA:73:AB:AD:63:0B:43:AB:A9:46:52:85:7A:6E X509v3 Authority Key Identifier: keyid:64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:b2:cc:c6:b2:66:47:b6:c3:18:b3:b3:24:37:37:aa:b4:83: e5:16:5f:0f:6a:a9:65:20:47:71:95:b9:a5:a7:ae:04:f4:32: 32:8a:78:22:01:d5:20:37:ba:84:e9:b8:34:3a:5e:be:cb:17: b6:b1:ad:4b:68:fb:9b:36:0e:41:fe:b1:9c:c1:98:72:20:02: 22:cd:70:59:1a:cf:04:81:4a:d1:fd:16:09:7a:c9:3e:32:63: e0:44:e1:8a:06:6c:cf:f7:aa:51:66:bf:07:be:94:4c:b9:d0: e6:11:3d:ae:71:ea:b6:6c:3a:dc:bb:f5:dc:f1:f3:f2:c3:ce: c4:c9:98:d2:f6:4d:30:e4:70:71:20:2f:1d:32:4d:75:6f:4a: 23:8c:57:65:98:d9:5b:ad:13:4e:9f:20:64:35:ed:27:27:e3: 7b:d4:dd:00:af:78:55:33:83:23:b8:e7:a0:0f:1a:b9:b4:80: 99:c9:85:39:1d:90:59:e6:fe:f8:7d:72:f4:80:a0:09:dd:7d: 6c:14:b7:cc:38:e1:69:43:d0:17:9b:7a:af:2d:65:a9:72:bc: 86:9e:ff:6d:50:88:55:5c:b4:be:62:8b:ae:8f:1b:97:36:ec: 32:30:a8:89:e8:21:bd:d6:7d:b7:e6:bc:bf:2b:ea:24:e9:84: cc:5c:ef:5e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUShnCfnnqBiZeo2Pf/8FXp7uew0EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRhZjE1NDE5YmQ1ZmU2YzhmOTdlMjI0YTg2YTQ5MTdh MmU2ZmVmZTAeFw0yNjA1MTIxNTI5NTBaFw0yNjA1MTMxNTQ1NTBaMDMxMTAvBgNV BAMTKDJENDVBMDYyQUFGQUFBNzNBQkFENjMwQjQzQUJBOTQ2NTI4NTdBNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvVcnRgnBaxadkArC+eVvYRCoW iRl0FobE/kvvQc9DBp9thyTFECX4sxgB2xNhwKTcJaY7wAs0r1vFp8n4CZ74dxj9 AZO0svH4HcSjgKtzz+qDK2vCHFzuuhKKmbvDuEMe14ObBEIWe1asMtDOc8Qm6lbZ N5Q0nK2Lx0RClbM6Wlj5Y/CVd6kuLPtizArQHTVqA7TrJVT4tNdYpUmjkS3/8/HW D/L0s8vqBEOCNhw7YD3ctWu0eAQjLlvdxL8WXYl2YDrW4leZPVjXM1ymrYz/iren 7TR0gxODI+wlGDH68N9Qkv3t4flWvr+DbAyCr8Nm6BZdpv+SRp8npkPn3h7rAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQULUWgYqr6qnOrrWMLQ6upRlKFem4wHwYDVR0j BBgwFoAUZK8VQZvV/myPl+IkqGpJF6Lm/v4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmM5YWE5NWYtN2IzOC00MjZhLTk5NjYtNTQ0MTkzOWZl MDMxLzAvNjRBRjE1NDE5QkQ1RkU2QzhGOTdFMjI0QTg2QTQ5MTdBMkU2RkVGRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1pLOFZRWnZWX215UGwtSWtxR3BKRjZM bV92NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mYzlhYTk1Zi03 YjM4LTQyNmEtOTk2Ni01NDQxOTM5ZmUwMzEvMC82NEFGMTU0MTlCRDVGRTZDOEY5 N0UyMjRBODZBNDkxN0EyRTZGRUZFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhbLMxrJmR7bDGLOzJDc3 qrSD5RZfD2qpZSBHcZW5paeuBPQyMop4IgHVIDe6hOm4NDpevssXtrGtS2j7mzYO Qf6xnMGYciACIs1wWRrPBIFK0f0WCXrJPjJj4EThigZsz/eqUWa/B76UTLnQ5hE9 rnHqtmw63Lv13PHz8sPOxMmY0vZNMORwcSAvHTJNdW9KI4xXZZjZW60TTp8gZDXt Jyfje9TdAK94VTODI7jnoA8aubSAmcmFOR2QWeb++H1y9ICgCd19bBS3zDjhaUPQ F5t6ry1lqXK8hp7/bVCIVVy0vmKLro8blzbsMjCoieghvdZ9t+a8vyvqJOmEzFzv Xg== -----END CERTIFICATE-----Generated at Wed May 13 07:04:45 2026 by rpki-client