$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft File: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft (raw, json) Hash identifier: 6NUuKyZaxH9lwD4dB8Oz27mfsw2IINs1NGiIVtqMAJk= Subject key identifier: 9B:2F:C1:54:9B:A1:3D:E4:F8:F0:F7:3E:66:43:FC:0F:04:EC:CB:37 Authority key identifier: 64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE Certificate issuer: /CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe Certificate serial: 3EB74136F5FBC54B664F63343A1F8547A3585DD8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft Manifest number: 0486 Signing time: Fri 24 Jul 2026 02:00:15 +0000 Manifest this update: Fri 24 Jul 2026 01:55:15 +0000 Manifest next update: Sat 25 Jul 2026 02:54:15 +0000 Files and hashes: 1: 34352e3135302e372e302f32342d3234203d3e203430363736.roa (hash: T+zbNugzb1bsH98kHS+RI8JGsyekk0ffpARbCOfuE7Y=) 2: 34352e3135302e342e302f32342d3234203d3e203432383331.roa (hash: JDtWvcwkcFwfS8VCb1zy7YF8Zp2kwnagm9OMk367GN0=) 3: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl (hash: xHERnNtmXhtqihHIq9CtOWMKC5gjXuJgBXD5aStmKNY=) 4: 34352e3135302e352e302f32342d3234203d3e20323039383534.roa (hash: Crd2ncf4lQNUDj/2Yu6qDEEKdYEoj89TZ7JLTUVoXfY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:b7:41:36:f5:fb:c5:4b:66:4f:63:34:3a:1f:85:47:a3:58:5d:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe Validity Not Before: Jul 24 01:55:15 2026 GMT Not After : Jul 25 02:54:15 2026 GMT Subject: CN=9B2FC1549BA13DE4F8F0F73E6643FC0F04ECCB37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a8:3e:d2:2b:67:51:d5:2c:15:d4:1b:45:08: bb:db:80:4c:e0:03:70:61:ab:b0:ba:78:e6:11:82: 07:45:0f:a9:29:db:6b:45:d8:f3:39:00:87:0e:59: 17:92:4e:e6:67:c9:27:68:31:7d:f2:2f:ac:6e:57: aa:f0:47:73:09:6e:c3:3e:69:85:73:79:ce:7a:ce: fe:41:1a:88:a4:2f:00:6f:f5:14:0f:ac:99:56:69: dd:7b:2c:46:b4:f8:cc:09:a5:a8:b1:81:e7:9b:6c: 8d:45:21:ab:3f:9c:65:03:8b:b2:de:8f:bd:84:31: 52:6a:90:c2:91:bd:69:13:e7:5e:a7:c9:de:d7:bb: d4:8d:57:f6:96:41:41:90:63:48:07:c0:07:df:d6: cc:d2:b1:3c:97:f7:f4:26:90:93:1b:79:a0:85:3d: 24:2e:30:e3:ad:65:55:ef:00:39:02:a9:37:c8:9b: 9e:b0:d4:79:54:15:38:2a:8d:79:c7:ea:30:ef:51: 0b:54:cf:e0:42:18:36:1c:86:9a:df:49:f4:fc:cf: 45:66:79:2f:51:18:5b:bd:b5:4b:1e:0c:38:e9:89: 26:15:28:f8:8e:2c:87:ce:37:89:24:94:c5:44:7a: 4c:e1:e9:17:6a:13:4d:6c:4b:00:49:49:a3:65:51: 15:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:2F:C1:54:9B:A1:3D:E4:F8:F0:F7:3E:66:43:FC:0F:04:EC:CB:37 X509v3 Authority Key Identifier: keyid:64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:04:57:81:18:2a:ed:8b:93:bc:e0:e0:45:a8:36:3d:d2:8b: c8:33:5a:25:32:12:58:79:d1:42:b1:4a:2f:25:18:32:01:a6: 4e:f5:d3:f9:1f:80:92:64:ea:7e:ac:2e:ae:d8:2e:9d:de:6b: c7:ef:d7:2e:21:75:57:5d:64:74:e2:9d:0f:53:6d:6e:e8:eb: 74:82:8a:57:3a:80:71:33:f6:a2:e4:26:da:cc:77:4b:8b:25: 5d:18:5c:9e:5a:df:ee:76:e7:87:6f:42:04:56:af:50:32:be: 90:fd:f9:47:ce:62:52:4b:86:e6:3d:62:0f:b7:dc:43:28:1e: 4e:db:5e:f0:c7:85:1b:fb:b4:87:d5:f5:6e:c6:e5:e0:8b:5b: 53:a0:ed:44:c5:fd:5c:87:69:ef:96:8e:4f:67:28:d6:5f:53: 2e:b7:03:12:e2:9b:cd:50:bc:c2:e5:22:70:1a:e7:06:d1:1e: 54:d7:56:b1:6b:70:5a:ae:08:40:5c:65:63:16:13:39:40:25: a0:be:ad:7b:a4:43:f7:8b:be:29:3a:38:dd:66:70:bd:45:97: 63:bb:1b:4c:32:ed:a3:90:86:b3:7b:bd:5e:70:56:65:91:1e: 96:d1:6b:24:03:b9:a9:3a:77:7a:8e:e8:8e:05:ec:60:fe:c4: c4:b6:4d:43 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUPrdBNvX7xUtmT2M0Oh+FR6NYXdgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRhZjE1NDE5YmQ1ZmU2YzhmOTdlMjI0YTg2YTQ5MTdh MmU2ZmVmZTAeFw0yNjA3MjQwMTU1MTVaFw0yNjA3MjUwMjU0MTVaMDMxMTAvBgNV BAMTKDlCMkZDMTU0OUJBMTNERTRGOEYwRjczRTY2NDNGQzBGMDRFQ0NCMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiqD7SK2dR1SwV1BtFCLvbgEzg A3Bhq7C6eOYRggdFD6kp22tF2PM5AIcOWReSTuZnySdoMX3yL6xuV6rwR3MJbsM+ aYVzec56zv5BGoikLwBv9RQPrJlWad17LEa0+MwJpaixgeebbI1FIas/nGUDi7Le j72EMVJqkMKRvWkT516nyd7Xu9SNV/aWQUGQY0gHwAff1szSsTyX9/QmkJMbeaCF PSQuMOOtZVXvADkCqTfIm56w1HlUFTgqjXnH6jDvUQtUz+BCGDYchprfSfT8z0Vm eS9RGFu9tUseDDjpiSYVKPiOLIfON4kklMVEekzh6RdqE01sSwBJSaNlURXrAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUmy/BVJuhPeT48Pc+ZkP8DwTsyzcwHwYDVR0j BBgwFoAUZK8VQZvV/myPl+IkqGpJF6Lm/v4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmM5YWE5NWYtN2IzOC00MjZhLTk5NjYtNTQ0MTkzOWZl MDMxLzAvNjRBRjE1NDE5QkQ1RkU2QzhGOTdFMjI0QTg2QTQ5MTdBMkU2RkVGRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1pLOFZRWnZWX215UGwtSWtxR3BKRjZM bV92NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mYzlhYTk1Zi03 YjM4LTQyNmEtOTk2Ni01NDQxOTM5ZmUwMzEvMC82NEFGMTU0MTlCRDVGRTZDOEY5 N0UyMjRBODZBNDkxN0EyRTZGRUZFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiQRXgRgq7YuTvODgRag2 PdKLyDNaJTISWHnRQrFKLyUYMgGmTvXT+R+AkmTqfqwurtgund5rx+/XLiF1V11k dOKdD1NtbujrdIKKVzqAcTP2ouQm2sx3S4slXRhcnlrf7nbnh29CBFavUDK+kP35 R85iUkuG5j1iD7fcQygeTtte8MeFG/u0h9X1bsbl4ItbU6DtRMX9XIdp75aOT2co 1l9TLrcDEuKbzVC8wuUicBrnBtEeVNdWsWtwWq4IQFxlYxYTOUAloL6te6RD94u+ KTo43WZwvUWXY7sbTDLto5CGs3u9XnBWZZEeltFrJAO5qTp3eo7ojgXsYP7ExLZN Qw== -----END CERTIFICATE-----Generated at Fri Jul 24 07:12:54 2026 by rpki-client