$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft File: 64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft (raw, json) Hash identifier: ubZqbAd5KZCCzUtK7cpL5jxJTTo0oJWDKu3P2P8AUJs= Subject key identifier: 0C:F3:7A:65:36:0A:CE:64:EB:98:0D:8D:4C:A5:12:75:0F:3C:F2:99 Authority key identifier: 64:D6:29:AA:3C:F3:8F:9F:77:0A:DB:BB:20:C6:DE:BD:0B:8C:DE:05 Certificate issuer: /CN=64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05 Certificate serial: 7C4F11E1BA308878E428BCDAAE0BC5DF4F5CF491 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft Manifest number: 0126 Signing time: Mon 27 Apr 2026 08:59:51 +0000 Manifest this update: Mon 27 Apr 2026 08:54:51 +0000 Manifest next update: Tue 28 Apr 2026 12:04:51 +0000 Files and hashes: 1: 326131343a373538313a333039303a3a2f34382d3438203d3e20323034323131.roa (hash: nGLAdkRiCVIQwTrXrRH2GZTJEYm4l5K5Qg4h/njNDzU=) 2: 64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.crl (hash: arFcw9nAZ+QhvNpjqOxCucFxj9P0e8INxfH80m3pY18=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 08:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:4f:11:e1:ba:30:88:78:e4:28:bc:da:ae:0b:c5:df:4f:5c:f4:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05 Validity Not Before: Apr 27 08:54:51 2026 GMT Not After : Apr 28 12:04:51 2026 GMT Subject: CN=0CF37A65360ACE64EB980D8D4CA512750F3CF299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a3:a0:7c:06:b6:24:e6:a1:2e:5a:5e:50:c6: 08:4b:94:f5:7b:8d:8b:fb:38:1b:f7:8d:0b:70:d7: 32:ac:6e:14:b6:3c:8e:9b:a0:0b:e2:a5:37:86:32: db:4c:db:98:55:ca:e3:2d:91:1b:8e:97:ab:67:3f: 6d:5e:b7:1d:66:ca:3b:7a:ca:cd:ec:9a:34:a2:b4: e8:ae:b6:96:cb:69:ff:2a:27:68:45:04:1c:71:38: fa:f6:2a:91:8c:21:1a:d0:ed:78:36:51:5e:eb:7d: 57:e1:ec:18:2c:7e:16:7c:77:83:c4:dc:71:96:e4: c3:bc:f8:6c:5a:a9:30:b0:3a:ec:23:e1:d8:ff:3a: e0:dc:6b:a3:6d:65:0c:aa:97:64:83:1a:59:68:1d: 8e:4b:9d:18:13:dd:74:ab:1c:88:08:7f:1d:c9:83: 18:f5:ea:cd:3b:a1:48:dd:a3:78:8d:1b:8c:7d:11: 3c:cc:0a:b8:9c:b7:1f:a6:ef:90:31:6a:af:fc:97: bf:9e:97:13:45:cd:be:e9:8f:8c:e7:51:7e:79:50: 98:f6:58:8d:c0:c6:e7:20:5a:1f:92:e3:d3:a3:c3: dd:08:ed:1c:e8:0e:ad:d1:ce:fa:79:13:ec:db:7d: ea:a1:2c:64:50:82:71:41:8d:ba:c2:c2:09:f6:62: 79:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:F3:7A:65:36:0A:CE:64:EB:98:0D:8D:4C:A5:12:75:0F:3C:F2:99 X509v3 Authority Key Identifier: keyid:64:D6:29:AA:3C:F3:8F:9F:77:0A:DB:BB:20:C6:DE:BD:0B:8C:DE:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:bf:a9:66:60:2c:02:58:63:15:cf:ff:c2:af:70:e4:38:6e: d9:ff:13:2a:27:b9:b2:45:ac:a5:0d:b6:5f:1e:75:aa:88:04: 1c:e3:f8:13:f2:d7:f1:1b:49:16:e5:8f:25:e7:7d:a5:a2:45: 14:a9:61:27:24:b6:13:f3:20:f0:a0:84:25:8d:bb:6b:d1:07: 0a:6c:73:dd:0a:3a:80:2a:78:ee:48:ec:dc:01:69:2b:51:51: 3a:df:ab:5f:0d:67:43:05:b1:90:71:0a:8a:8c:f1:70:ac:91: 13:68:ab:ca:89:59:a3:e9:29:ef:8a:f7:bf:6e:a9:4d:19:b6: ef:64:c9:93:0d:b9:eb:ae:bc:0e:6f:d9:7f:ab:d1:df:82:96: 21:f3:43:6a:68:3a:b7:5b:7b:9c:31:69:2e:33:11:89:89:fc: 6c:5b:a4:8e:2b:0d:00:95:12:d2:4e:1f:31:15:5b:e6:23:9e: 73:b2:59:25:4c:49:fd:f7:53:4a:fa:64:fb:53:f3:05:df:15: 89:0d:24:dc:6f:58:9a:fb:d9:25:0a:e6:0c:22:0c:cd:41:bc: 65:8a:93:0e:09:73:71:49:cf:ac:7a:de:30:1e:e2:9c:4f:2d: 47:e2:7c:55:6b:6a:7b:9b:2e:80:bb:b0:2a:16:90:6c:6b:c7: 19:8a:6c:f8 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUfE8R4bowiHjkKLzargvF309c9JEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRENjI5QUEzQ0YzOEY5Rjc3MEFEQkJCMjBDNkRFQkQw QjhDREUwNTAeFw0yNjA0MjcwODU0NTFaFw0yNjA0MjgxMjA0NTFaMDMxMTAvBgNV BAMTKDBDRjM3QTY1MzYwQUNFNjRFQjk4MEQ4RDRDQTUxMjc1MEYzQ0YyOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/o6B8BrYk5qEuWl5QxghLlPV7 jYv7OBv3jQtw1zKsbhS2PI6boAvipTeGMttM25hVyuMtkRuOl6tnP21etx1myjt6 ys3smjSitOiutpbLaf8qJ2hFBBxxOPr2KpGMIRrQ7Xg2UV7rfVfh7BgsfhZ8d4PE 3HGW5MO8+GxaqTCwOuwj4dj/OuDca6NtZQyql2SDGlloHY5LnRgT3XSrHIgIfx3J gxj16s07oUjdo3iNG4x9ETzMCrictx+m75Axaq/8l7+elxNFzb7pj4znUX55UJj2 WI3AxucgWh+S49Ojw90I7RzoDq3Rzvp5E+zbfeqhLGRQgnFBjbrCwgn2YnkjAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUDPN6ZTYKzmTrmA2NTKUSdQ888pkwHwYDVR0j BBgwFoAUZNYpqjzzj593Ctu7IMbevQuM3gUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjUzMmI5ZWItMmZhZS00OGE4LTk3OTMtMzNlZWMwNjdj ZTM5LzIvNjRENjI5QUEzQ0YzOEY5Rjc3MEFEQkJCMjBDNkRFQkQwQjhDREUwNS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kOWJkMzg4OC05MzAyLTRi NmYtYTAxNy0yYjRiYmE1ZTU3YmIvMS82NEQ2MjlBQTNDRjM4RjlGNzcwQURCQkIy MEM2REVCRDBCOENERTA1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Y1MzJiOWViLTJmYWUtNDhhOC05NzkzLTMzZWVjMDY3Y2UzOS8yLzY0RDYyOUFB M0NGMzhGOUY3NzBBREJCQjIwQzZERUJEMEI4Q0RFMDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDav6lm YCwCWGMVz//Cr3DkOG7Z/xMqJ7myRaylDbZfHnWqiAQc4/gT8tfxG0kW5Y8l532l okUUqWEnJLYT8yDwoIQljbtr0QcKbHPdCjqAKnjuSOzcAWkrUVE636tfDWdDBbGQ cQqKjPFwrJETaKvKiVmj6Snvive/bqlNGbbvZMmTDbnrrrwOb9l/q9HfgpYh80Nq aDq3W3ucMWkuMxGJifxsW6SOKw0AlRLSTh8xFVvmI55zslklTEn991NK+mT7U/MF 3xWJDSTcb1ia+9klCuYMIgzNQbxlipMOCXNxSc+set4wHuKcTy1H4nxVa2p7my6A u7AqFpBsa8cZimz4 -----END CERTIFICATE-----Generated at Mon Apr 27 16:14:03 2026 by rpki-client