$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft File: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft (raw, json) Hash identifier: cz3S/VqwYFcDNcYpp9SeOGRF71oaN7iH53dAevwy9QI= Subject key identifier: E4:D9:59:FC:52:3A:D2:E4:CA:AC:73:09:3E:5B:9D:4A:F1:18:DE:4C Authority key identifier: 64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE Certificate issuer: /CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe Certificate serial: 6EE57A33F28ED2200C9671E77CDB600E2B07075C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft Manifest number: 02C8 Signing time: Fri 22 Aug 2025 21:27:33 +0000 Manifest this update: Fri 22 Aug 2025 21:22:33 +0000 Manifest next update: Sat 23 Aug 2025 23:44:33 +0000 Files and hashes: 1: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl (hash: qTSdQYl8pH+rn5cQiWJCsKtxbTACoA+tP76egv00/h8=) 2: 34352e3135302e372e302f32342d3234203d3e203430363736.roa (hash: byqPGvSaG6esVs7ttHZAm5MeDtXny30fRGCsgkrnWc0=) 3: 34352e3135302e352e302f32342d3234203d3e20323039383534.roa (hash: og23dgtoYqERERjtAqH2h8sLSaLgr4DxdJzsOAsyNMg=) 4: 34352e3135302e342e302f32342d3234203d3e203432383331.roa (hash: 702sTF4T+4tyFOCkBSwyFht2LvCuhPDht8ofZOjL5aw=) 5: 34352e3135302e362e302f32342d3234203d3e203538303631.roa (hash: 739QQ1kzpbqPlY0J1CHiMuvjqJmn7ot6gs3zEY3jdHw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Aug 2025 23:44:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:e5:7a:33:f2:8e:d2:20:0c:96:71:e7:7c:db:60:0e:2b:07:07:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe Validity Not Before: Aug 22 21:22:33 2025 GMT Not After : Aug 23 23:44:33 2025 GMT Subject: CN=E4D959FC523AD2E4CAAC73093E5B9D4AF118DE4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a3:30:34:bf:aa:c6:f8:27:ee:6f:30:0c:68: b8:22:ff:d8:1d:26:9c:70:d5:ea:ab:77:c7:b6:00: 23:c8:41:92:73:8f:b1:7f:d0:e9:65:2f:89:d6:9d: 19:93:65:6b:c5:52:7d:d3:3e:11:13:42:6f:2b:39: 92:5f:91:8e:82:70:28:1b:21:65:fd:76:4a:b1:f9: 49:6f:e4:2e:d2:cb:69:fc:f8:51:62:b3:5b:2d:3f: 5c:d6:42:67:02:36:c3:04:b2:de:64:56:54:4a:4a: e6:fd:dd:b5:6a:9e:2b:11:e8:0c:f2:07:6b:ef:fb: 37:e7:01:75:cc:32:33:5d:62:05:c7:2e:49:a4:18: 57:05:c0:8a:71:e4:7e:82:08:4c:38:35:c5:c2:53: cd:83:4a:bf:58:bb:65:1c:37:c0:b1:28:ba:f7:07: 9e:e9:e8:fa:81:2c:09:dd:b3:7c:6d:17:04:4b:34: 4d:96:c5:8d:a4:ea:01:af:9c:59:ea:82:99:e9:5e: ea:bf:32:1b:2c:6e:3b:6d:c4:d1:ef:75:27:6d:3d: 5e:20:cd:c2:b1:fd:ac:d3:db:fb:76:fd:84:d6:ed: 8c:6e:00:d1:49:96:5a:2e:f4:4d:76:57:9c:aa:0e: 38:0c:71:87:43:97:ce:58:05:b8:ea:05:d6:dd:ba: 6a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:D9:59:FC:52:3A:D2:E4:CA:AC:73:09:3E:5B:9D:4A:F1:18:DE:4C X509v3 Authority Key Identifier: keyid:64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:2f:e5:bb:a5:a1:e4:5c:d1:e0:43:b4:bb:99:e4:07:87:80: 41:3d:20:42:8d:f8:e9:51:67:83:d7:fd:39:06:ce:7b:92:e1: a5:54:ff:5e:0d:76:91:a8:39:6a:d0:bb:ae:20:ae:c5:f4:b9: 55:e5:b2:48:4f:14:d3:63:fb:99:97:08:aa:5a:3b:0e:b2:50: 51:e9:11:5d:7c:e8:3b:b0:9e:0c:3b:d3:a6:b9:9e:08:f3:98: 51:70:26:fa:0c:a9:05:48:5c:c2:3a:47:2b:0c:87:f2:03:5f: 3b:1e:a3:b4:39:49:1a:99:1c:97:11:fd:18:b7:59:cd:b5:17: 66:17:bb:c8:56:21:82:b0:c6:42:93:2d:fd:0e:1f:38:91:dc: 24:fc:79:56:5f:2e:16:67:19:20:43:9c:08:7a:85:09:cf:18: e8:86:53:f0:f0:59:31:93:1a:53:b3:9f:e1:20:5a:45:35:4f: 26:8d:1f:40:e9:63:e8:9a:3d:44:d2:56:8e:96:e9:ba:ac:2b: 9f:32:6a:35:66:1c:ef:5a:2b:07:96:c2:fa:a7:f0:84:2e:40: 5e:2d:79:6e:e4:1c:47:2a:3c:5a:85:95:e9:de:1c:3e:cc:22: bd:e3:28:3f:df:ed:45:ab:e3:da:bb:29:4a:fe:5c:e6:6e:64: 40:f3:71:6a -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUbuV6M/KO0iAMlnHnfNtgDisHB1wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRhZjE1NDE5YmQ1ZmU2YzhmOTdlMjI0YTg2YTQ5MTdh MmU2ZmVmZTAeFw0yNTA4MjIyMTIyMzNaFw0yNTA4MjMyMzQ0MzNaMDMxMTAvBgNV BAMTKEU0RDk1OUZDNTIzQUQyRTRDQUFDNzMwOTNFNUI5RDRBRjExOERFNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIozA0v6rG+CfubzAMaLgi/9gd Jpxw1eqrd8e2ACPIQZJzj7F/0OllL4nWnRmTZWvFUn3TPhETQm8rOZJfkY6CcCgb IWX9dkqx+Ulv5C7Sy2n8+FFis1stP1zWQmcCNsMEst5kVlRKSub93bVqnisR6Azy B2vv+zfnAXXMMjNdYgXHLkmkGFcFwIpx5H6CCEw4NcXCU82DSr9Yu2UcN8CxKLr3 B57p6PqBLAnds3xtFwRLNE2WxY2k6gGvnFnqgpnpXuq/MhssbjttxNHvdSdtPV4g zcKx/azT2/t2/YTW7YxuANFJllou9E12V5yqDjgMcYdDl85YBbjqBdbdumrdAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU5NlZ/FI60uTKrHMJPludSvEY3kwwHwYDVR0j BBgwFoAUZK8VQZvV/myPl+IkqGpJF6Lm/v4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmM5YWE5NWYtN2IzOC00MjZhLTk5NjYtNTQ0MTkzOWZl MDMxLzAvNjRBRjE1NDE5QkQ1RkU2QzhGOTdFMjI0QTg2QTQ5MTdBMkU2RkVGRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1pLOFZRWnZWX215UGwtSWtxR3BKRjZM bV92NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mYzlhYTk1Zi03 YjM4LTQyNmEtOTk2Ni01NDQxOTM5ZmUwMzEvMC82NEFGMTU0MTlCRDVGRTZDOEY5 N0UyMjRBODZBNDkxN0EyRTZGRUZFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQC/lu6Wh5FzR4EO0u5nk B4eAQT0gQo346VFng9f9OQbOe5LhpVT/Xg12kag5atC7riCuxfS5VeWySE8U02P7 mZcIqlo7DrJQUekRXXzoO7CeDDvTprmeCPOYUXAm+gypBUhcwjpHKwyH8gNfOx6j tDlJGpkclxH9GLdZzbUXZhe7yFYhgrDGQpMt/Q4fOJHcJPx5Vl8uFmcZIEOcCHqF Cc8Y6IZT8PBZMZMaU7Of4SBaRTVPJo0fQOlj6Jo9RNJWjpbpuqwrnzJqNWYc71or B5bC+qfwhC5AXi15buQcRyo8WoWV6d4cPswiveMoP9/tRavj2rspSv5c5m5kQPNx ag== -----END CERTIFICATE-----Generated at Sat Aug 23 10:52:32 2025 by rpki-client