$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft File: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft (raw, json) Hash identifier: BWTxOXKHHEVGETmb+X2AgxYkBiInZxYzWL+TmO3lU8c= Subject key identifier: 7D:12:A5:8D:3E:9E:9A:3C:5F:6D:FF:E8:08:67:91:C0:25:C8:BD:3C Authority key identifier: 64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE Certificate issuer: /CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe Certificate serial: 5B94194D3769FB09461FB12D78D3A56D89145D23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft Manifest number: 0485 Signing time: Thu 23 Jul 2026 09:17:53 +0000 Manifest this update: Thu 23 Jul 2026 09:12:53 +0000 Manifest next update: Fri 24 Jul 2026 09:56:53 +0000 Files and hashes: 1: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl (hash: gT5PwLX0BOHlbnGM/MjefPSJmmyt2UDhMOSNslALi0s=) 2: 34352e3135302e372e302f32342d3234203d3e203430363736.roa (hash: T+zbNugzb1bsH98kHS+RI8JGsyekk0ffpARbCOfuE7Y=) 3: 34352e3135302e342e302f32342d3234203d3e203432383331.roa (hash: JDtWvcwkcFwfS8VCb1zy7YF8Zp2kwnagm9OMk367GN0=) 4: 34352e3135302e352e302f32342d3234203d3e20323039383534.roa (hash: Crd2ncf4lQNUDj/2Yu6qDEEKdYEoj89TZ7JLTUVoXfY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 09:56:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:94:19:4d:37:69:fb:09:46:1f:b1:2d:78:d3:a5:6d:89:14:5d:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe Validity Not Before: Jul 23 09:12:53 2026 GMT Not After : Jul 24 09:56:53 2026 GMT Subject: CN=7D12A58D3E9E9A3C5F6DFFE8086791C025C8BD3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:bc:89:b8:a2:fd:33:b8:75:fc:24:8f:bb:3c: 1e:8a:9b:f3:28:5c:21:f7:7d:be:1a:d9:f4:b3:2f: c1:77:c5:93:57:05:d0:29:fa:f7:a5:c3:b4:98:a5: 6a:b9:9e:34:de:21:5b:e5:d4:24:58:e5:e6:1b:0a: 36:54:5b:81:6d:e4:9b:2e:81:12:d1:9c:7a:38:d0: 90:38:f2:2a:b5:99:4e:0c:a2:e8:59:aa:10:ac:76: 77:07:ef:9b:44:ca:92:1e:7f:6c:12:75:42:76:a9: 9e:83:63:51:f7:82:f7:1f:e5:ac:17:6c:47:12:0b: aa:fe:a6:78:bb:4e:12:6e:57:14:98:ca:78:b2:88: 4b:ab:3b:c6:77:b8:4e:cb:b7:51:e5:cf:0e:7c:e5: 9a:6e:5b:a8:fc:f7:50:a1:37:5b:bf:6a:6c:26:dd: 98:4d:ea:ac:24:cb:10:12:fd:ee:6b:40:df:7f:85: 9f:00:dd:ef:92:a1:c5:c6:6a:da:44:cb:d1:8f:5b: 94:2d:66:36:21:32:6e:04:c9:1b:37:c7:de:41:d2: 08:fd:25:61:3f:84:1a:1a:a2:86:73:36:91:d0:35: 0c:d2:6c:6c:ce:39:51:b3:a9:81:19:d6:b2:c3:27: 97:c0:2b:78:73:bb:50:ff:d9:07:36:eb:c2:65:97: 98:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:12:A5:8D:3E:9E:9A:3C:5F:6D:FF:E8:08:67:91:C0:25:C8:BD:3C X509v3 Authority Key Identifier: keyid:64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:84:e0:84:89:ec:92:e5:da:89:d4:e5:c2:ca:15:60:78:7a: 15:d7:4a:b5:ba:0b:21:bf:61:02:2e:24:f0:f9:1f:60:9c:e1: f5:d0:fc:da:6b:b3:d9:7b:fa:75:a1:52:a6:73:b5:d7:54:9e: 1e:18:be:86:97:bb:e6:6b:39:f4:8c:98:49:cb:f9:5a:97:70: 00:34:c3:b9:39:cc:97:3e:ee:8a:44:1c:54:04:25:e5:ac:78: a6:df:19:ec:14:b8:04:cd:25:a5:a4:f3:ec:a1:a7:5e:83:dc: 50:3f:83:1b:51:a9:9a:8f:b8:cb:34:67:d7:ce:d5:96:fb:a3: 3d:3f:ca:68:b4:77:c0:45:bf:85:a4:42:13:8a:ab:52:9b:52: c3:f0:a6:e3:f7:d0:e0:65:3b:21:36:cf:03:d2:8b:5d:29:4b: 55:ca:5c:c1:bc:76:c9:b9:64:d3:9a:55:4a:86:93:d8:d7:43: cb:46:b8:eb:97:31:a1:9e:0f:6c:34:d1:8a:a2:a6:07:92:65: e2:26:93:a2:09:b7:8c:38:90:a9:3e:8e:17:46:85:7b:ee:81: 37:bf:23:20:d9:bf:f8:f9:42:60:29:89:03:11:0a:95:48:e5: 0f:86:15:ee:dd:59:14:b0:cd:61:9a:4c:e3:3d:12:04:16:dc: f1:da:3e:df -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUW5QZTTdp+wlGH7EteNOlbYkUXSMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRhZjE1NDE5YmQ1ZmU2YzhmOTdlMjI0YTg2YTQ5MTdh MmU2ZmVmZTAeFw0yNjA3MjMwOTEyNTNaFw0yNjA3MjQwOTU2NTNaMDMxMTAvBgNV BAMTKDdEMTJBNThEM0U5RTlBM0M1RjZERkZFODA4Njc5MUMwMjVDOEJEM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkvIm4ov0zuHX8JI+7PB6Km/Mo XCH3fb4a2fSzL8F3xZNXBdAp+velw7SYpWq5njTeIVvl1CRY5eYbCjZUW4Ft5Jsu gRLRnHo40JA48iq1mU4MouhZqhCsdncH75tEypIef2wSdUJ2qZ6DY1H3gvcf5awX bEcSC6r+pni7ThJuVxSYyniyiEurO8Z3uE7Lt1Hlzw585ZpuW6j891ChN1u/amwm 3ZhN6qwkyxAS/e5rQN9/hZ8A3e+SocXGatpEy9GPW5QtZjYhMm4EyRs3x95B0gj9 JWE/hBoaooZzNpHQNQzSbGzOOVGzqYEZ1rLDJ5fAK3hzu1D/2Qc268Jll5jXAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUfRKljT6emjxfbf/oCGeRwCXIvTwwHwYDVR0j BBgwFoAUZK8VQZvV/myPl+IkqGpJF6Lm/v4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmM5YWE5NWYtN2IzOC00MjZhLTk5NjYtNTQ0MTkzOWZl MDMxLzAvNjRBRjE1NDE5QkQ1RkU2QzhGOTdFMjI0QTg2QTQ5MTdBMkU2RkVGRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1pLOFZRWnZWX215UGwtSWtxR3BKRjZM bV92NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mYzlhYTk1Zi03 YjM4LTQyNmEtOTk2Ni01NDQxOTM5ZmUwMzEvMC82NEFGMTU0MTlCRDVGRTZDOEY5 N0UyMjRBODZBNDkxN0EyRTZGRUZFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAboTghInskuXaidTlwsoV YHh6FddKtboLIb9hAi4k8PkfYJzh9dD82muz2Xv6daFSpnO111SeHhi+hpe75ms5 9IyYScv5WpdwADTDuTnMlz7uikQcVAQl5ax4pt8Z7BS4BM0lpaTz7KGnXoPcUD+D G1Gpmo+4yzRn187VlvujPT/KaLR3wEW/haRCE4qrUptSw/Cm4/fQ4GU7ITbPA9KL XSlLVcpcwbx2yblk05pVSoaT2NdDy0a465cxoZ4PbDTRiqKmB5Jl4iaTogm3jDiQ qT6OF0aFe+6BN78jINm/+PlCYCmJAxEKlUjlD4YV7t1ZFLDNYZpM4z0SBBbc8do+ 3w== -----END CERTIFICATE-----Generated at Fri Jul 24 03:17:23 2026 by rpki-client