$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft File: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft (raw, json) Hash identifier: e3msL5QL+q6sJMTZSEMWjk2Mu0FCbu2h9Gsx47Ouvsk= Subject key identifier: DC:1D:33:5A:8F:66:AC:B5:E8:BC:63:84:CE:15:DC:57:29:82:F4:4C Authority key identifier: 64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE Certificate issuer: /CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe Certificate serial: 2A3D4C9BA0217428B788CADF714B00A15798296A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft Manifest number: 029F Signing time: Wed 23 Jul 2025 08:52:04 +0000 Manifest this update: Wed 23 Jul 2025 08:47:04 +0000 Manifest next update: Thu 24 Jul 2025 12:29:04 +0000 Files and hashes: 1: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl (hash: D9iSNRp0QM2X/Rrg3WJsZ2Yg7Xpy74h1u3jj8DwgItQ=) 2: 34352e3135302e362e302f32342d3234203d3e203538303631.roa (hash: 739QQ1kzpbqPlY0J1CHiMuvjqJmn7ot6gs3zEY3jdHw=) 3: 34352e3135302e372e302f32342d3234203d3e203430363736.roa (hash: byqPGvSaG6esVs7ttHZAm5MeDtXny30fRGCsgkrnWc0=) 4: 34352e3135302e342e302f32342d3234203d3e203432383331.roa (hash: 702sTF4T+4tyFOCkBSwyFht2LvCuhPDht8ofZOjL5aw=) 5: 34352e3135302e352e302f32342d3234203d3e20323039383534.roa (hash: og23dgtoYqERERjtAqH2h8sLSaLgr4DxdJzsOAsyNMg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Jul 2025 12:29:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:3d:4c:9b:a0:21:74:28:b7:88:ca:df:71:4b:00:a1:57:98:29:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe Validity Not Before: Jul 23 08:47:04 2025 GMT Not After : Jul 24 12:29:04 2025 GMT Subject: CN=DC1D335A8F66ACB5E8BC6384CE15DC572982F44C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5a:28:29:c8:6f:bd:b4:75:43:31:ec:93:c7: b8:e4:3a:76:65:81:68:0a:b0:86:35:80:83:3d:0c: 68:34:84:5f:ac:f2:3f:53:92:30:8d:04:88:dd:2a: eb:5c:f3:19:b8:1b:56:4a:1f:79:76:bb:85:e0:ab: 58:10:ed:27:3e:94:46:ed:99:7c:da:e0:af:ad:0e: 02:07:92:c7:30:17:0c:cf:83:44:9b:fe:1d:2f:21: 8c:e7:25:7a:35:9b:23:48:af:c6:9b:3b:3d:54:6c: 41:8b:8f:4e:a2:03:a4:5f:b8:c9:0b:fa:fb:14:56: 5a:ad:d6:18:14:7e:e9:d3:83:81:39:44:09:77:a1: b3:2f:fc:3d:2d:72:c3:0a:a4:00:02:5b:61:1a:05: d5:86:dc:85:73:94:9d:26:c9:ae:10:02:01:21:98: a0:b1:ca:37:7c:be:4c:c7:e6:cb:e1:9c:b3:49:71: 32:c5:9d:51:0b:c3:6e:42:9d:93:3d:f9:35:f0:39: ab:9e:47:77:bd:e7:61:1b:0e:42:fa:06:21:4e:cd: ad:95:15:32:2d:5e:ab:c5:63:52:b4:62:d4:18:ad: 89:b4:fe:97:29:b6:b1:f8:83:e9:4d:c5:f4:74:fa: 06:96:cb:32:51:6a:70:2d:83:f8:57:c9:d8:9b:49: 1e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:1D:33:5A:8F:66:AC:B5:E8:BC:63:84:CE:15:DC:57:29:82:F4:4C X509v3 Authority Key Identifier: keyid:64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:fb:75:79:15:43:f6:74:bc:91:d8:45:af:61:d5:7a:ec:14: 83:f8:c6:49:17:6c:c6:ef:6b:f2:e3:77:95:b4:cf:eb:0a:ea: 6b:c3:12:57:ae:67:c7:b3:f5:6e:7d:05:fb:0f:bd:25:8f:9e: 13:37:8f:45:73:1a:56:a9:9c:4f:3a:4c:fa:91:d8:45:34:3b: 48:46:f4:9b:e0:12:17:cb:fa:5b:ae:f2:12:b3:ec:c5:74:3e: 2e:d0:a1:75:ab:aa:0f:7b:6f:66:a0:cd:da:ab:50:40:cb:bc: 96:b6:d5:ea:23:9d:df:56:a2:d2:75:d8:e1:77:1d:41:98:21: e6:8f:fe:47:b8:63:3e:46:ea:d0:4b:4f:91:67:9a:7b:ef:0a: 75:a3:bc:42:8d:cb:cb:61:46:2d:5d:e6:48:21:fa:c0:91:2b: 8f:9d:8f:55:9f:b9:25:86:9b:80:bb:15:36:af:31:5a:7b:a7: cb:d5:12:a2:81:23:57:41:fc:55:83:28:1b:fb:19:ce:23:5a: ab:9b:8c:48:21:86:b2:f4:c2:20:84:f1:0a:be:f9:af:be:b5: 90:a8:8d:2b:ea:47:af:3d:02:f7:62:12:c9:98:c5:9e:a9:35: 6b:d7:fc:e1:56:d2:5a:e7:27:04:ee:08:1e:47:80:03:bc:52: 63:2f:b0:e9 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUKj1Mm6AhdCi3iMrfcUsAoVeYKWowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRhZjE1NDE5YmQ1ZmU2YzhmOTdlMjI0YTg2YTQ5MTdh MmU2ZmVmZTAeFw0yNTA3MjMwODQ3MDRaFw0yNTA3MjQxMjI5MDRaMDMxMTAvBgNV BAMTKERDMUQzMzVBOEY2NkFDQjVFOEJDNjM4NENFMTVEQzU3Mjk4MkY0NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClWigpyG+9tHVDMeyTx7jkOnZl gWgKsIY1gIM9DGg0hF+s8j9TkjCNBIjdKutc8xm4G1ZKH3l2u4Xgq1gQ7Sc+lEbt mXza4K+tDgIHkscwFwzPg0Sb/h0vIYznJXo1myNIr8abOz1UbEGLj06iA6RfuMkL +vsUVlqt1hgUfunTg4E5RAl3obMv/D0tcsMKpAACW2EaBdWG3IVzlJ0mya4QAgEh mKCxyjd8vkzH5svhnLNJcTLFnVELw25CnZM9+TXwOaueR3e952EbDkL6BiFOza2V FTItXqvFY1K0YtQYrYm0/pcptrH4g+lNxfR0+gaWyzJRanAtg/hXydibSR71AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU3B0zWo9mrLXovGOEzhXcVymC9EwwHwYDVR0j BBgwFoAUZK8VQZvV/myPl+IkqGpJF6Lm/v4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmM5YWE5NWYtN2IzOC00MjZhLTk5NjYtNTQ0MTkzOWZl MDMxLzAvNjRBRjE1NDE5QkQ1RkU2QzhGOTdFMjI0QTg2QTQ5MTdBMkU2RkVGRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1pLOFZRWnZWX215UGwtSWtxR3BKRjZM bV92NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mYzlhYTk1Zi03 YjM4LTQyNmEtOTk2Ni01NDQxOTM5ZmUwMzEvMC82NEFGMTU0MTlCRDVGRTZDOEY5 N0UyMjRBODZBNDkxN0EyRTZGRUZFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXPt1eRVD9nS8kdhFr2HV euwUg/jGSRdsxu9r8uN3lbTP6wrqa8MSV65nx7P1bn0F+w+9JY+eEzePRXMaVqmc TzpM+pHYRTQ7SEb0m+ASF8v6W67yErPsxXQ+LtChdauqD3tvZqDN2qtQQMu8lrbV 6iOd31ai0nXY4XcdQZgh5o/+R7hjPkbq0EtPkWeae+8KdaO8Qo3Ly2FGLV3mSCH6 wJErj52PVZ+5JYabgLsVNq8xWnuny9USooEjV0H8VYMoG/sZziNaq5uMSCGGsvTC IITxCr75r761kKiNK+pHrz0C92ISyZjFnqk1a9f84VbSWucnBO4IHkeAA7xSYy+w 6Q== -----END CERTIFICATE-----Generated at Wed Jul 23 23:48:55 2025 by rpki-client