$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft File: 64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft (raw, json) Hash identifier: iQzNcjtdNJzUcpvBoO8KKOYURCHeg7zTLDGPkZMmliU= Subject key identifier: E4:74:2B:15:C2:56:7A:D3:69:8D:FF:6A:F9:B9:72:11:E3:C1:00:EE Authority key identifier: 64:D6:29:AA:3C:F3:8F:9F:77:0A:DB:BB:20:C6:DE:BD:0B:8C:DE:05 Certificate issuer: /CN=64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05 Certificate serial: 5E18FB2C5B8A045D4B29AF1BB227E96FCB604588 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft Manifest number: 01F0 Signing time: Mon 27 Jul 2026 02:27:22 +0000 Manifest this update: Mon 27 Jul 2026 02:22:22 +0000 Manifest next update: Tue 28 Jul 2026 05:26:22 +0000 Files and hashes: 1: 64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.crl (hash: PvbWX4ICgrKouPPybbpaKHq62G2wmR/hf58rvlQ25jo=) 2: 326131343a373538313a333039303a3a2f34382d3438203d3e20323034323131.roa (hash: nGLAdkRiCVIQwTrXrRH2GZTJEYm4l5K5Qg4h/njNDzU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Jul 2026 21:57:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:18:fb:2c:5b:8a:04:5d:4b:29:af:1b:b2:27:e9:6f:cb:60:45:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05 Validity Not Before: Jul 27 02:22:22 2026 GMT Not After : Jul 28 05:26:22 2026 GMT Subject: CN=E4742B15C2567AD3698DFF6AF9B97211E3C100EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3b:84:51:bb:a2:5a:65:ed:dd:56:0a:4b:ab: a7:d5:e1:88:f4:2c:d8:72:be:2b:74:66:68:76:fd: 91:d8:78:51:38:65:62:c9:24:72:44:5d:7f:42:34: 77:ce:e4:6e:18:d8:6d:64:5c:4a:de:e7:5f:4c:8a: cc:0c:55:20:80:d9:ad:c8:19:51:d6:57:30:c8:1f: 70:41:80:8d:e6:61:ab:d1:2f:da:a4:e3:7e:0a:7d: 1b:16:58:ab:ed:9b:b5:92:9a:df:f7:0a:6d:b2:b5: fb:ce:d1:56:85:e0:4e:71:3b:02:26:a9:2d:c9:cc: fc:ef:9c:6d:bc:c9:c9:c2:0d:17:40:55:da:a6:24: 53:63:6e:42:2d:53:c2:3d:7d:1c:03:e8:7a:16:e1: 5e:6f:69:b7:4a:04:1d:52:d8:b7:2e:d8:14:9d:db: dd:1f:86:aa:54:f6:54:75:f7:5e:a3:ed:4c:88:f1: 1b:8c:d6:54:d3:5e:e2:8a:c1:2d:a2:23:6b:81:be: 11:a4:c4:98:14:1e:94:b3:5a:31:ca:5c:01:f7:1a: a3:99:ff:83:a4:aa:81:95:f6:72:01:36:c0:21:d9: 61:1e:0f:93:e9:87:d5:a3:ca:80:6b:36:00:d0:70: f6:80:de:5b:0b:f5:7b:f9:40:b8:83:44:e0:dd:8f: de:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:74:2B:15:C2:56:7A:D3:69:8D:FF:6A:F9:B9:72:11:E3:C1:00:EE X509v3 Authority Key Identifier: keyid:64:D6:29:AA:3C:F3:8F:9F:77:0A:DB:BB:20:C6:DE:BD:0B:8C:DE:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:84:91:6a:0d:d9:03:23:ae:23:df:01:6b:1b:25:be:6b:1b: 91:08:43:74:a6:ba:6e:2f:f0:e2:db:bf:59:bb:ca:2a:2e:42: 9c:d2:d6:0a:74:28:d6:b9:03:42:0d:39:11:91:1e:9d:b6:2b: 7f:50:f0:04:ee:60:8d:26:36:8c:5c:35:e8:65:87:00:19:dd: 32:3a:8d:1f:2e:6a:6d:37:84:19:3b:e4:2a:8c:8d:53:fc:47: ca:f2:55:68:94:08:73:06:40:83:5d:7e:e3:47:d8:1c:d5:d9: ff:1f:2c:2f:4a:da:a1:0b:e7:4f:50:db:e8:51:55:68:a9:3b: 3e:ea:c3:d2:40:a0:45:15:16:7f:07:67:06:b3:55:d3:93:25: 02:f5:93:5f:5b:aa:84:59:6e:b8:a3:07:cd:bb:87:6c:d3:ee: 0e:b6:f6:03:e0:38:b7:d0:94:92:eb:0b:55:b7:6e:49:e9:68: 53:79:f5:5c:08:e9:87:fa:59:2a:f0:fa:68:45:fb:d7:73:4e: ea:2c:37:99:01:69:3b:9f:4a:51:c7:88:f6:38:67:cb:fb:e7: 04:39:c6:f1:1b:af:8f:20:94:f1:ed:a2:cf:09:50:46:8a:d5: 5b:e4:78:1f:fc:51:82:76:f0:2d:78:8c:f4:55:c4:51:cf:0f: d0:d8:60:73 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUXhj7LFuKBF1LKa8bsifpb8tgRYgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRENjI5QUEzQ0YzOEY5Rjc3MEFEQkJCMjBDNkRFQkQw QjhDREUwNTAeFw0yNjA3MjcwMjIyMjJaFw0yNjA3MjgwNTI2MjJaMDMxMTAvBgNV BAMTKEU0NzQyQjE1QzI1NjdBRDM2OThERkY2QUY5Qjk3MjExRTNDMTAwRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrO4RRu6JaZe3dVgpLq6fV4Yj0 LNhyvit0Zmh2/ZHYeFE4ZWLJJHJEXX9CNHfO5G4Y2G1kXEre519MiswMVSCA2a3I GVHWVzDIH3BBgI3mYavRL9qk434KfRsWWKvtm7WSmt/3Cm2ytfvO0VaF4E5xOwIm qS3JzPzvnG28ycnCDRdAVdqmJFNjbkItU8I9fRwD6HoW4V5vabdKBB1S2Lcu2BSd 290fhqpU9lR1916j7UyI8RuM1lTTXuKKwS2iI2uBvhGkxJgUHpSzWjHKXAH3GqOZ /4OkqoGV9nIBNsAh2WEeD5Pph9WjyoBrNgDQcPaA3lsL9Xv5QLiDRODdj95TAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU5HQrFcJWetNpjf9q+blyEePBAO4wHwYDVR0j BBgwFoAUZNYpqjzzj593Ctu7IMbevQuM3gUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjUzMmI5ZWItMmZhZS00OGE4LTk3OTMtMzNlZWMwNjdj ZTM5LzIvNjRENjI5QUEzQ0YzOEY5Rjc3MEFEQkJCMjBDNkRFQkQwQjhDREUwNS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kOWJkMzg4OC05MzAyLTRi NmYtYTAxNy0yYjRiYmE1ZTU3YmIvMS82NEQ2MjlBQTNDRjM4RjlGNzcwQURCQkIy MEM2REVCRDBCOENERTA1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Y1MzJiOWViLTJmYWUtNDhhOC05NzkzLTMzZWVjMDY3Y2UzOS8yLzY0RDYyOUFB M0NGMzhGOUY3NzBBREJCQjIwQzZERUJEMEI4Q0RFMDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBahJFq DdkDI64j3wFrGyW+axuRCEN0prpuL/Di279Zu8oqLkKc0tYKdCjWuQNCDTkRkR6d tit/UPAE7mCNJjaMXDXoZYcAGd0yOo0fLmptN4QZO+QqjI1T/EfK8lVolAhzBkCD XX7jR9gc1dn/HywvStqhC+dPUNvoUVVoqTs+6sPSQKBFFRZ/B2cGs1XTkyUC9ZNf W6qEWW64owfNu4ds0+4OtvYD4Di30JSS6wtVt25J6WhTefVcCOmH+lkq8PpoRfvX c07qLDeZAWk7n0pRx4j2OGfL++cEOcbxG6+PIJTx7aLPCVBGitVb5Hgf/FGCdvAt eIz0VcRRzw/Q2GBz -----END CERTIFICATE-----Generated at Mon Jul 27 05:56:22 2026 by rpki-client