$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft File: 64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft (raw, json) Hash identifier: oY+ub8cLOmLMEbEU9VR2U2nLpTjlxBpKFzs2fXKFQp8= Subject key identifier: 16:40:8D:6A:06:CF:19:88:C6:A2:7F:A0:E7:41:A4:0F:33:81:4A:C9 Authority key identifier: 64:D6:29:AA:3C:F3:8F:9F:77:0A:DB:BB:20:C6:DE:BD:0B:8C:DE:05 Certificate issuer: /CN=64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05 Certificate serial: 57E6055577F7A57BDC3A73E1A0D5FDF9CAB7E9B4 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft Manifest number: D9 Signing time: Thu 12 Mar 2026 16:32:57 +0000 Manifest this update: Thu 12 Mar 2026 16:27:57 +0000 Manifest next update: Fri 13 Mar 2026 19:36:57 +0000 Files and hashes: 1: 64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.crl (hash: 3HQHj2d4gZcyqSi9KB8q/+m7KU+V6a1XO859T6aS5yQ=) 2: 326131343a373538313a333039303a3a2f34382d3438203d3e20323034323131.roa (hash: nGLAdkRiCVIQwTrXrRH2GZTJEYm4l5K5Qg4h/njNDzU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Mar 2026 04:28:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:e6:05:55:77:f7:a5:7b:dc:3a:73:e1:a0:d5:fd:f9:ca:b7:e9:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05 Validity Not Before: Mar 12 16:27:57 2026 GMT Not After : Mar 13 19:36:57 2026 GMT Subject: CN=16408D6A06CF1988C6A27FA0E741A40F33814AC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5f:7e:2a:41:3e:7c:00:5d:8c:2c:dd:2a:d5: b1:d4:eb:60:56:06:16:31:6f:ae:8e:3b:d6:a3:d4: 1e:1f:04:28:15:07:9b:1b:d4:a9:a3:8f:eb:21:7a: 49:bf:49:25:71:83:4d:d3:1a:28:22:26:4c:70:95: c2:47:1c:61:fa:29:97:10:dc:4e:f7:a6:8e:cc:5f: 15:b1:34:c6:81:c2:7c:e0:bb:5e:dc:9e:c8:90:34: df:39:91:08:88:bb:ec:2b:b3:ee:50:85:32:43:0b: 91:83:c2:60:6d:9b:68:9d:bf:88:d0:39:fd:0a:ba: 10:8e:79:6d:2b:67:4a:e2:ec:c1:e7:83:b9:54:0b: 26:f7:c9:1c:f1:f9:40:3b:17:99:fd:d5:83:7e:8c: cb:84:9e:b0:c3:69:35:0b:44:06:e2:f9:05:d5:43: 7b:fa:d0:5a:8a:6a:4e:70:eb:a7:d2:a8:f9:f9:f4: a2:ad:14:ef:b7:55:cc:ee:28:24:44:db:42:6e:a9: 17:36:b1:aa:57:d4:5a:9e:cc:36:88:57:19:8e:29: fe:f4:2c:9e:33:aa:5a:aa:b8:14:6f:31:ec:de:0c: 60:b3:3b:0c:2c:00:d7:c3:ac:7b:c5:53:b4:45:30: 56:1c:d4:d7:67:e7:f9:b2:5b:ee:14:99:73:0c:3b: ea:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:40:8D:6A:06:CF:19:88:C6:A2:7F:A0:E7:41:A4:0F:33:81:4A:C9 X509v3 Authority Key Identifier: keyid:64:D6:29:AA:3C:F3:8F:9F:77:0A:DB:BB:20:C6:DE:BD:0B:8C:DE:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:06:4b:bc:87:db:02:44:e9:14:6c:7b:8d:43:28:0f:82:45: e9:ad:46:99:77:fb:45:48:a4:f6:cb:30:1b:15:a9:26:71:88: 06:07:7b:ee:97:ab:e7:8e:9e:be:e0:3a:73:2f:1c:84:a3:93: 45:de:3f:ce:15:74:93:f2:6e:38:20:a7:c7:26:cf:cd:7e:25: 89:bc:bc:a0:7c:f6:e2:46:77:fa:3a:11:26:af:69:f6:e4:dc: 14:b2:2a:50:09:d0:54:7f:ae:df:90:a5:e2:35:a9:ce:c4:a8: f3:65:b1:c0:fd:93:47:de:48:2f:d1:10:02:04:44:d3:5e:ef: 95:ee:2b:4d:9c:44:c3:e6:75:a5:4c:91:a0:58:b3:88:84:47: e3:0c:33:05:2a:97:74:3d:48:6c:1b:79:f5:f8:e6:b9:f4:90: 10:13:51:c7:41:a8:c5:d9:c5:42:de:b9:70:c2:71:b5:4b:07: e5:be:75:f4:9f:09:a4:69:ec:67:36:0f:85:44:8c:97:90:49: ff:9f:75:cf:b8:fb:90:05:af:26:3b:c5:0d:6e:08:8c:18:ca: cf:ec:19:6f:46:08:a5:81:b2:72:26:ad:5a:8c:8f:4f:1c:0a: d6:91:04:1e:ff:e5:7d:90:19:84:ec:2c:e8:b1:ba:2a:8e:f9: 2a:50:91:2a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUV+YFVXf3pXvcOnPhoNX9+cq36bQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRENjI5QUEzQ0YzOEY5Rjc3MEFEQkJCMjBDNkRFQkQw QjhDREUwNTAeFw0yNjAzMTIxNjI3NTdaFw0yNjAzMTMxOTM2NTdaMDMxMTAvBgNV BAMTKDE2NDA4RDZBMDZDRjE5ODhDNkEyN0ZBMEU3NDFBNDBGMzM4MTRBQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfX34qQT58AF2MLN0q1bHU62BW BhYxb66OO9aj1B4fBCgVB5sb1Kmjj+shekm/SSVxg03TGigiJkxwlcJHHGH6KZcQ 3E73po7MXxWxNMaBwnzgu17cnsiQNN85kQiIu+wrs+5QhTJDC5GDwmBtm2idv4jQ Of0KuhCOeW0rZ0ri7MHng7lUCyb3yRzx+UA7F5n91YN+jMuEnrDDaTULRAbi+QXV Q3v60FqKak5w66fSqPn59KKtFO+3VczuKCRE20JuqRc2sapX1FqezDaIVxmOKf70 LJ4zqlqquBRvMezeDGCzOwwsANfDrHvFU7RFMFYc1Ndn5/myW+4UmXMMO+pLAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUFkCNagbPGYjGon+g50GkDzOBSskwHwYDVR0j BBgwFoAUZNYpqjzzj593Ctu7IMbevQuM3gUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjUzMmI5ZWItMmZhZS00OGE4LTk3OTMtMzNlZWMwNjdj ZTM5LzIvNjRENjI5QUEzQ0YzOEY5Rjc3MEFEQkJCMjBDNkRFQkQwQjhDREUwNS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kOWJkMzg4OC05MzAyLTRi NmYtYTAxNy0yYjRiYmE1ZTU3YmIvMS82NEQ2MjlBQTNDRjM4RjlGNzcwQURCQkIy MEM2REVCRDBCOENERTA1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Y1MzJiOWViLTJmYWUtNDhhOC05NzkzLTMzZWVjMDY3Y2UzOS8yLzY0RDYyOUFB M0NGMzhGOUY3NzBBREJCQjIwQzZERUJEMEI4Q0RFMDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDNBku8 h9sCROkUbHuNQygPgkXprUaZd/tFSKT2yzAbFakmcYgGB3vul6vnjp6+4DpzLxyE o5NF3j/OFXST8m44IKfHJs/NfiWJvLygfPbiRnf6OhEmr2n25NwUsipQCdBUf67f kKXiNanOxKjzZbHA/ZNH3kgv0RACBETTXu+V7itNnETD5nWlTJGgWLOIhEfjDDMF Kpd0PUhsG3n1+Oa59JAQE1HHQajF2cVC3rlwwnG1SwflvnX0nwmkaexnNg+FRIyX kEn/n3XPuPuQBa8mO8UNbgiMGMrP7BlvRgilgbJyJq1ajI9PHArWkQQe/+V9kBmE 7CzosboqjvkqUJEq -----END CERTIFICATE-----Generated at Thu Mar 12 21:40:47 2026 by rpki-client