$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft File: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft (raw, json) Hash identifier: 8qrTN48soQ3ZTLXL7T76FjhTUCEaPqLXT0FAo2RaEQw= Subject key identifier: 1F:B7:8C:13:94:A7:10:D0:D3:31:BF:B6:DC:5E:2A:5C:DE:4A:F3:A5 Authority key identifier: 64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE Certificate issuer: /CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe Certificate serial: 5C179DADA713746ADD67AEAB1D23755D6F1034D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft Manifest number: 03E6 Signing time: Thu 26 Mar 2026 05:42:41 +0000 Manifest this update: Thu 26 Mar 2026 05:37:41 +0000 Manifest next update: Fri 27 Mar 2026 08:16:41 +0000 Files and hashes: 1: 34352e3135302e352e302f32342d3234203d3e20323039383534.roa (hash: Crd2ncf4lQNUDj/2Yu6qDEEKdYEoj89TZ7JLTUVoXfY=) 2: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl (hash: zprL4zEZyjnIlWzbl4kDA1iGBPFcEg5vPWsVgncxWoA=) 3: 34352e3135302e342e302f32342d3234203d3e203432383331.roa (hash: JDtWvcwkcFwfS8VCb1zy7YF8Zp2kwnagm9OMk367GN0=) 4: 34352e3135302e372e302f32342d3234203d3e203430363736.roa (hash: byqPGvSaG6esVs7ttHZAm5MeDtXny30fRGCsgkrnWc0=) 5: 34352e3135302e362e302f32342d3234203d3e203538303631.roa (hash: yaUDjxZGhyEVxNfdUbfnMRoUwlBxM/900/kJEwn4Oxc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:17:9d:ad:a7:13:74:6a:dd:67:ae:ab:1d:23:75:5d:6f:10:34:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe Validity Not Before: Mar 26 05:37:41 2026 GMT Not After : Mar 27 08:16:41 2026 GMT Subject: CN=1FB78C1394A710D0D331BFB6DC5E2A5CDE4AF3A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ca:35:33:a2:75:b6:e3:68:42:a4:70:4c:05: 85:92:be:d0:e6:35:6b:85:1e:e5:dd:e2:80:3e:1c: 70:73:f8:b3:b5:93:08:e3:cd:73:11:33:67:f0:6a: db:69:89:d5:36:7f:33:ba:04:8e:2d:62:11:53:0d: 88:1a:bf:ef:c5:02:39:55:a1:cc:84:3e:a3:6f:15: ba:ba:e7:0f:c3:cf:85:4b:4b:c9:25:7a:3a:1e:d7: b4:28:23:6e:aa:ac:3d:ef:3c:c5:9e:79:8e:48:99: 99:79:a9:59:8e:28:3a:7e:dd:1d:fb:d4:c7:08:d2: 03:3e:2d:3e:af:e9:35:8c:89:3e:4a:64:a3:95:6e: 9a:e4:65:76:73:6c:e2:cc:d3:8e:2c:e3:6c:85:6b: f1:c3:e9:bc:6c:d0:00:ba:9a:9b:50:47:f8:e0:ee: d0:08:5f:ee:77:78:fe:53:2f:f4:1a:a2:68:d0:fc: c1:1c:7b:91:3e:7b:83:ae:a7:ab:d3:f0:82:5b:18: f8:ef:f1:cd:cf:3b:1a:5b:1a:c3:f6:e9:6d:98:05: 1e:4e:54:52:f9:58:d1:f9:3f:e3:7d:e9:b1:a7:92: 0d:78:92:d5:bb:68:19:f3:0f:05:a6:f7:07:df:bf: 7a:a8:79:9c:ea:eb:de:f3:db:62:7a:da:37:e0:09: 92:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:B7:8C:13:94:A7:10:D0:D3:31:BF:B6:DC:5E:2A:5C:DE:4A:F3:A5 X509v3 Authority Key Identifier: keyid:64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:09:3d:49:04:f4:58:4e:17:84:63:30:08:f0:85:81:03:5c: 69:65:ef:cd:e3:d4:18:ea:c7:43:ba:cc:7b:99:e9:bb:0b:93: 77:5d:69:9c:ce:22:bf:f7:2b:2f:88:df:76:6a:e0:d8:c6:fe: b7:5f:82:15:d7:f6:f8:a5:90:3e:4a:ef:4a:9f:1b:23:ac:d9: c9:20:8c:7b:97:f8:e9:87:4c:cb:56:62:45:3a:89:8f:79:3a: 1b:d4:e1:10:40:b8:35:86:01:c3:8d:fe:07:13:f0:13:56:f5: 93:2e:ec:7b:83:78:8f:3a:a6:bb:34:e3:4a:e9:fe:7b:4a:38: 2a:60:66:6e:16:60:5b:08:5e:63:0e:4e:75:46:76:1b:b4:43: 87:7d:26:4f:09:8d:2b:ff:ba:9d:22:db:99:6f:f3:9a:79:13: 6e:aa:ed:ba:8a:49:91:be:cc:2c:31:91:b3:75:4e:11:e7:76: b5:93:f0:e7:d3:b6:bf:06:e3:03:ab:17:53:51:6e:7a:4f:7b: 73:0d:e3:68:73:cc:0e:df:97:9d:24:18:d4:7a:fd:2f:a7:cf: ff:f4:ea:ff:87:7f:a4:a3:13:7e:97:62:16:8c:86:d2:27:71: c8:ed:25:1a:5b:cb:72:bc:51:6e:4e:e5:2b:64:67:61:47:e9: ae:a0:e1:7f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUXBedracTdGrdZ66rHSN1XW8QNNcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRhZjE1NDE5YmQ1ZmU2YzhmOTdlMjI0YTg2YTQ5MTdh MmU2ZmVmZTAeFw0yNjAzMjYwNTM3NDFaFw0yNjAzMjcwODE2NDFaMDMxMTAvBgNV BAMTKDFGQjc4QzEzOTRBNzEwRDBEMzMxQkZCNkRDNUUyQTVDREU0QUYzQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJyjUzonW242hCpHBMBYWSvtDm NWuFHuXd4oA+HHBz+LO1kwjjzXMRM2fwattpidU2fzO6BI4tYhFTDYgav+/FAjlV ocyEPqNvFbq65w/Dz4VLS8klejoe17QoI26qrD3vPMWeeY5ImZl5qVmOKDp+3R37 1McI0gM+LT6v6TWMiT5KZKOVbprkZXZzbOLM044s42yFa/HD6bxs0AC6mptQR/jg 7tAIX+53eP5TL/QaomjQ/MEce5E+e4Oup6vT8IJbGPjv8c3POxpbGsP26W2YBR5O VFL5WNH5P+N96bGnkg14ktW7aBnzDwWm9wffv3qoeZzq697z22J62jfgCZIrAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUH7eME5SnENDTMb+23F4qXN5K86UwHwYDVR0j BBgwFoAUZK8VQZvV/myPl+IkqGpJF6Lm/v4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmM5YWE5NWYtN2IzOC00MjZhLTk5NjYtNTQ0MTkzOWZl MDMxLzAvNjRBRjE1NDE5QkQ1RkU2QzhGOTdFMjI0QTg2QTQ5MTdBMkU2RkVGRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1pLOFZRWnZWX215UGwtSWtxR3BKRjZM bV92NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mYzlhYTk1Zi03 YjM4LTQyNmEtOTk2Ni01NDQxOTM5ZmUwMzEvMC82NEFGMTU0MTlCRDVGRTZDOEY5 N0UyMjRBODZBNDkxN0EyRTZGRUZFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiwk9SQT0WE4XhGMwCPCF gQNcaWXvzePUGOrHQ7rMe5npuwuTd11pnM4iv/crL4jfdmrg2Mb+t1+CFdf2+KWQ PkrvSp8bI6zZySCMe5f46YdMy1ZiRTqJj3k6G9ThEEC4NYYBw43+BxPwE1b1ky7s e4N4jzqmuzTjSun+e0o4KmBmbhZgWwheYw5OdUZ2G7RDh30mTwmNK/+6nSLbmW/z mnkTbqrtuopJkb7MLDGRs3VOEed2tZPw59O2vwbjA6sXU1Fuek97cw3jaHPMDt+X nSQY1Hr9L6fP//Tq/4d/pKMTfpdiFoyG0idxyO0lGlvLcrxRbk7lK2RnYUfprqDh fw== -----END CERTIFICATE-----Generated at Thu Mar 26 10:40:29 2026 by rpki-client