$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft File: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft (raw, json) Hash identifier: ZvSIcPTIOiFXCL/ri2czk5jqDl6XMAB7D1BPljRdr38= Subject key identifier: 4F:84:EE:9E:1D:69:36:C8:80:C4:57:03:91:FE:47:24:4E:F4:91:95 Authority key identifier: 64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE Certificate issuer: /CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe Certificate serial: 12DD41C038600142C7FE11A248CFBCBF44974A6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft Manifest number: 027D Signing time: Sat 28 Jun 2025 09:24:09 +0000 Manifest this update: Sat 28 Jun 2025 09:19:09 +0000 Manifest next update: Sun 29 Jun 2025 12:48:09 +0000 Files and hashes: 1: 34352e3135302e352e302f32342d3234203d3e20323039383534.roa (hash: og23dgtoYqERERjtAqH2h8sLSaLgr4DxdJzsOAsyNMg=) 2: 34352e3135302e342e302f32342d3234203d3e203432383331.roa (hash: 702sTF4T+4tyFOCkBSwyFht2LvCuhPDht8ofZOjL5aw=) 3: 34352e3135302e362e302f32342d3234203d3e203538303631.roa (hash: 739QQ1kzpbqPlY0J1CHiMuvjqJmn7ot6gs3zEY3jdHw=) 4: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl (hash: ftJJjt1nf8sFluhcujT6he6YKGgH+FSDgtbAtoI+vi8=) 5: 34352e3135302e372e302f32342d3234203d3e203430363736.roa (hash: 7wQrqMox9QAmR2vQp8q5VdavN4YrXCFJ3Bes/IozaAU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:dd:41:c0:38:60:01:42:c7:fe:11:a2:48:cf:bc:bf:44:97:4a:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe Validity Not Before: Jun 28 09:19:09 2025 GMT Not After : Jun 29 12:48:09 2025 GMT Subject: CN=4F84EE9E1D6936C880C4570391FE47244EF49195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:4b:a7:e7:2f:c2:32:8b:39:b3:95:af:ff:67: 19:8c:d0:28:ff:ad:c8:4a:8a:c1:8d:6b:6c:29:cd: 2e:cd:c1:9e:a8:d3:ea:0b:14:ca:45:2b:58:3c:53: 5e:86:6e:23:31:87:51:d8:ce:45:53:7d:ce:2e:c8: 65:bd:4f:8b:95:5b:9f:31:b2:8e:ba:0d:fc:64:f0: 6e:05:04:fb:da:a3:a8:b0:15:ce:9b:7c:94:71:1a: 11:ac:b4:33:51:c2:0f:65:30:46:0c:08:84:3f:7c: 2b:80:22:98:fa:6d:47:77:3f:c3:f6:06:93:7b:61: a7:44:b3:19:a4:c4:ac:71:de:1a:98:fc:2c:b0:43: d3:58:4e:25:37:83:47:83:14:63:6b:e5:65:02:13: bc:1a:ba:a9:3d:16:69:c4:fe:5c:51:b4:f6:77:ff: b0:05:8f:d7:69:12:39:df:8f:60:88:88:29:a7:77: 8e:74:48:70:ef:ba:9c:85:2a:0d:4c:00:04:e8:ba: 26:18:a6:92:81:ee:aa:26:48:d0:69:46:ee:51:34: 0d:12:4c:17:1e:2f:0e:63:5b:19:f1:69:49:de:d3: 3b:90:db:a6:90:60:3f:8a:59:99:ba:3c:93:4a:46: 3b:9e:89:a7:e7:9e:f9:5c:73:40:f3:62:01:ff:f8: 56:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:84:EE:9E:1D:69:36:C8:80:C4:57:03:91:FE:47:24:4E:F4:91:95 X509v3 Authority Key Identifier: keyid:64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:e9:71:16:e2:83:f3:be:83:ea:62:6b:00:59:ce:22:00:e4: 3d:29:2d:f6:6c:32:c9:fc:2c:36:42:21:8a:c1:dd:77:59:2f: 33:3e:32:1e:96:a0:93:f3:61:e8:a7:ca:33:e2:57:78:3f:8d: d4:c8:ae:26:6c:35:b6:10:f7:9a:04:82:b3:92:ef:54:f3:46: a0:af:86:59:c1:e9:a4:1d:2d:e4:4a:84:22:58:a5:9e:72:f0: a5:b1:88:34:64:41:a8:78:74:5a:02:8c:0d:73:8f:32:27:a8: cc:06:82:b9:fe:63:49:3a:d5:9a:38:5e:30:25:b6:13:18:e6: 61:18:e2:8b:c1:86:f3:ba:ef:68:bf:16:5f:ed:2c:33:14:8e: fa:b5:01:54:d0:40:a1:62:5f:ca:58:13:56:d6:c7:62:46:94: e6:0b:2a:c1:7d:0f:f0:77:b5:78:9e:e6:8e:0c:02:f5:c5:ed: cf:d3:63:aa:b7:73:31:16:66:1a:b7:fb:ff:a5:41:9c:3a:3e: 2a:6f:65:de:03:35:37:fe:e7:a7:a9:60:bd:e0:46:98:9f:b2: 7b:39:7f:9a:5f:bd:04:f5:ce:6b:2b:cd:fa:9e:1d:15:6b:7d: f4:ce:28:4d:a2:dd:5f:37:b4:d9:4a:28:f7:81:07:f8:70:8e: b5:dd:f7:25 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUEt1BwDhgAULH/hGiSM+8v0SXSmswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRhZjE1NDE5YmQ1ZmU2YzhmOTdlMjI0YTg2YTQ5MTdh MmU2ZmVmZTAeFw0yNTA2MjgwOTE5MDlaFw0yNTA2MjkxMjQ4MDlaMDMxMTAvBgNV BAMTKDRGODRFRTlFMUQ2OTM2Qzg4MEM0NTcwMzkxRkU0NzI0NEVGNDkxOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSS6fnL8Iyizmzla//ZxmM0Cj/ rchKisGNa2wpzS7NwZ6o0+oLFMpFK1g8U16GbiMxh1HYzkVTfc4uyGW9T4uVW58x so66Dfxk8G4FBPvao6iwFc6bfJRxGhGstDNRwg9lMEYMCIQ/fCuAIpj6bUd3P8P2 BpN7YadEsxmkxKxx3hqY/CywQ9NYTiU3g0eDFGNr5WUCE7wauqk9FmnE/lxRtPZ3 /7AFj9dpEjnfj2CIiCmnd450SHDvupyFKg1MAATouiYYppKB7qomSNBpRu5RNA0S TBceLw5jWxnxaUne0zuQ26aQYD+KWZm6PJNKRjueiafnnvlcc0DzYgH/+Fb9AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUT4Tunh1pNsiAxFcDkf5HJE70kZUwHwYDVR0j BBgwFoAUZK8VQZvV/myPl+IkqGpJF6Lm/v4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmM5YWE5NWYtN2IzOC00MjZhLTk5NjYtNTQ0MTkzOWZl MDMxLzAvNjRBRjE1NDE5QkQ1RkU2QzhGOTdFMjI0QTg2QTQ5MTdBMkU2RkVGRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1pLOFZRWnZWX215UGwtSWtxR3BKRjZM bV92NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mYzlhYTk1Zi03 YjM4LTQyNmEtOTk2Ni01NDQxOTM5ZmUwMzEvMC82NEFGMTU0MTlCRDVGRTZDOEY5 N0UyMjRBODZBNDkxN0EyRTZGRUZFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABulxFuKD876D6mJrAFnO IgDkPSkt9mwyyfwsNkIhisHdd1kvMz4yHpagk/Nh6KfKM+JXeD+N1MiuJmw1thD3 mgSCs5LvVPNGoK+GWcHppB0t5EqEIlilnnLwpbGINGRBqHh0WgKMDXOPMieozAaC uf5jSTrVmjheMCW2ExjmYRjii8GG87rvaL8WX+0sMxSO+rUBVNBAoWJfylgTVtbH YkaU5gsqwX0P8He1eJ7mjgwC9cXtz9NjqrdzMRZmGrf7/6VBnDo+Km9l3gM1N/7n p6lgveBGmJ+yezl/ml+9BPXOayvN+p4dFWt99M4oTaLdXze02Uoo94EH+HCOtd33 JQ== -----END CERTIFICATE-----Generated at Sat Jun 28 19:35:42 2025 by rpki-client