$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft File: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft (raw, json) Hash identifier: cn5BfDfTjB4MtDb1rxFbFkuuvTcrYZc8ZrE0/u4+ULk= Subject key identifier: B1:EF:F2:AC:F8:1F:C1:5C:79:90:3D:FB:25:87:4E:B8:6F:25:39:7C Authority key identifier: 64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE Certificate issuer: /CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe Certificate serial: 167D7346EDF546DB84171437180E66BD9F2BCABC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft Manifest number: 0314 Signing time: Sun 19 Oct 2025 08:46:37 +0000 Manifest this update: Sun 19 Oct 2025 08:41:37 +0000 Manifest next update: Mon 20 Oct 2025 10:08:37 +0000 Files and hashes: 1: 34352e3135302e362e302f32342d3234203d3e203538303631.roa (hash: 739QQ1kzpbqPlY0J1CHiMuvjqJmn7ot6gs3zEY3jdHw=) 2: 34352e3135302e342e302f32342d3234203d3e203432383331.roa (hash: 702sTF4T+4tyFOCkBSwyFht2LvCuhPDht8ofZOjL5aw=) 3: 34352e3135302e372e302f32342d3234203d3e203430363736.roa (hash: byqPGvSaG6esVs7ttHZAm5MeDtXny30fRGCsgkrnWc0=) 4: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl (hash: pselaew/5MDtY6ldCnGV/PnwDpbZmu+sYWTMvkahdgQ=) 5: 34352e3135302e352e302f32342d3234203d3e20323039383534.roa (hash: og23dgtoYqERERjtAqH2h8sLSaLgr4DxdJzsOAsyNMg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 10:08:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:7d:73:46:ed:f5:46:db:84:17:14:37:18:0e:66:bd:9f:2b:ca:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe Validity Not Before: Oct 19 08:41:37 2025 GMT Not After : Oct 20 10:08:37 2025 GMT Subject: CN=B1EFF2ACF81FC15C79903DFB25874EB86F25397C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:46:eb:35:17:ac:f0:55:ff:c6:0c:94:e9:49: 8a:54:53:01:a7:c7:45:c8:3c:cf:c2:16:69:28:7e: 5c:2c:8f:93:79:31:f3:c2:0d:0b:68:6d:1e:24:6a: 54:b7:7e:8a:2b:35:85:72:04:8e:ff:91:20:7a:9c: e6:c4:a4:79:d6:e4:98:0d:fb:09:8e:e0:0b:c8:d7: 18:b3:be:76:2b:75:4d:59:0e:03:7b:48:49:d8:f2: 71:c0:ae:cd:7f:f1:d8:b3:40:44:c1:20:40:a3:1d: bd:75:47:23:f6:08:0e:ec:b2:4f:11:8f:67:fa:bd: 9a:d1:b7:27:a1:fd:11:4e:f5:f8:f6:0e:1a:5b:2e: 15:18:48:5e:f7:e8:cd:47:69:72:37:65:22:b3:21: 88:63:4f:c7:4c:e2:ff:f3:95:5f:03:73:fd:7a:71: 1f:ef:09:1c:f2:31:cd:59:8c:2f:cc:7a:2d:e4:a9: 2f:a6:59:f2:3d:2e:a8:e5:d8:e4:c8:cb:17:46:76: e7:6d:2b:27:e3:c8:8f:6c:8c:ad:e8:b0:23:e4:f5: c5:60:54:61:73:75:43:c4:79:03:40:bb:0d:32:df: 85:fc:4a:a3:a7:cc:7b:c9:50:1e:2b:4f:dc:b4:6d: e1:d9:11:89:cc:7f:8d:22:76:00:cf:14:0c:91:b9: fe:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:EF:F2:AC:F8:1F:C1:5C:79:90:3D:FB:25:87:4E:B8:6F:25:39:7C X509v3 Authority Key Identifier: keyid:64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:b6:3e:a7:57:63:1f:ce:f4:b5:94:f5:58:68:d0:c2:de:93: 93:a1:5f:f6:6f:f1:4e:bb:71:a7:b9:0a:1e:9f:be:36:c4:24: 47:f7:6b:09:6e:c3:2f:8f:6d:ab:a3:63:48:1b:b9:e0:4f:63: 75:9d:83:1e:58:1c:da:fc:ca:84:39:3d:3e:0a:ae:27:f3:be: 43:d9:03:43:b6:32:44:f8:4f:1b:3a:09:f2:58:9d:3b:e6:2b: 95:dd:d2:0f:cb:66:2e:d7:60:e7:cb:c0:56:e0:f1:43:81:f2: 2a:d8:c8:6e:43:e0:3e:23:fc:9e:50:5e:7b:04:c6:b0:8c:a2: 3a:e1:70:18:2a:04:99:1a:f4:9a:ec:3d:93:57:f0:67:da:fc: 20:53:6e:ab:b7:30:d4:11:24:47:4f:c1:9a:eb:79:6f:ba:ac: 12:8e:9b:de:0a:39:09:68:b1:58:79:1d:2d:55:b7:bc:1a:93: 9f:53:01:99:5a:28:61:10:13:55:5c:45:e4:91:f4:76:bd:27: 3c:d3:a1:74:d1:fd:cc:70:93:0a:c2:31:a8:5a:f1:6f:1e:a2: 85:1d:4e:c6:c3:8e:e4:77:4e:9f:6f:3f:42:f2:e4:fc:19:b4: d1:1a:04:86:fa:d2:6d:c8:e2:c2:9e:c2:5d:f2:a1:75:ac:29: db:11:1c:bd -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUFn1zRu31RtuEFxQ3GA5mvZ8ryrwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRhZjE1NDE5YmQ1ZmU2YzhmOTdlMjI0YTg2YTQ5MTdh MmU2ZmVmZTAeFw0yNTEwMTkwODQxMzdaFw0yNTEwMjAxMDA4MzdaMDMxMTAvBgNV BAMTKEIxRUZGMkFDRjgxRkMxNUM3OTkwM0RGQjI1ODc0RUI4NkYyNTM5N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClRus1F6zwVf/GDJTpSYpUUwGn x0XIPM/CFmkoflwsj5N5MfPCDQtobR4kalS3foorNYVyBI7/kSB6nObEpHnW5JgN +wmO4AvI1xizvnYrdU1ZDgN7SEnY8nHArs1/8dizQETBIECjHb11RyP2CA7ssk8R j2f6vZrRtyeh/RFO9fj2DhpbLhUYSF736M1HaXI3ZSKzIYhjT8dM4v/zlV8Dc/16 cR/vCRzyMc1ZjC/Mei3kqS+mWfI9Lqjl2OTIyxdGdudtKyfjyI9sjK3osCPk9cVg VGFzdUPEeQNAuw0y34X8SqOnzHvJUB4rT9y0beHZEYnMf40idgDPFAyRuf4dAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUse/yrPgfwVx5kD37JYdOuG8lOXwwHwYDVR0j BBgwFoAUZK8VQZvV/myPl+IkqGpJF6Lm/v4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmM5YWE5NWYtN2IzOC00MjZhLTk5NjYtNTQ0MTkzOWZl MDMxLzAvNjRBRjE1NDE5QkQ1RkU2QzhGOTdFMjI0QTg2QTQ5MTdBMkU2RkVGRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1pLOFZRWnZWX215UGwtSWtxR3BKRjZM bV92NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mYzlhYTk1Zi03 YjM4LTQyNmEtOTk2Ni01NDQxOTM5ZmUwMzEvMC82NEFGMTU0MTlCRDVGRTZDOEY5 N0UyMjRBODZBNDkxN0EyRTZGRUZFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhrY+p1djH870tZT1WGjQ wt6Tk6Ff9m/xTrtxp7kKHp++NsQkR/drCW7DL49tq6NjSBu54E9jdZ2DHlgc2vzK hDk9PgquJ/O+Q9kDQ7YyRPhPGzoJ8lidO+Yrld3SD8tmLtdg58vAVuDxQ4HyKtjI bkPgPiP8nlBeewTGsIyiOuFwGCoEmRr0muw9k1fwZ9r8IFNuq7cw1BEkR0/Bmut5 b7qsEo6b3go5CWixWHkdLVW3vBqTn1MBmVooYRATVVxF5JH0dr0nPNOhdNH9zHCT CsIxqFrxbx6ihR1OxsOO5HdOn28/QvLk/Bm00RoEhvrSbcjiwp7CXfKhdawp2xEc vQ== -----END CERTIFICATE-----Generated at Sun Oct 19 20:07:08 2025 by rpki-client