$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft File: 64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft (raw, json) Hash identifier: 0NTr3uFUcDhAa3EpwLT+1ydrvUheNmC1kbxTGnwBnCQ= Subject key identifier: 51:FF:BF:DE:39:E5:AB:A1:B2:94:DC:A3:4B:C6:5E:79:99:36:BF:A8 Authority key identifier: 64:D6:29:AA:3C:F3:8F:9F:77:0A:DB:BB:20:C6:DE:BD:0B:8C:DE:05 Certificate issuer: /CN=64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05 Certificate serial: 54B748C9157D001F11A3A81E6AC14CD8C2614765 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft Manifest number: 0183 Signing time: Thu 11 Jun 2026 03:32:51 +0000 Manifest this update: Thu 11 Jun 2026 03:27:51 +0000 Manifest next update: Fri 12 Jun 2026 07:16:51 +0000 Files and hashes: 1: 326131343a373538313a333039303a3a2f34382d3438203d3e20323034323131.roa (hash: nGLAdkRiCVIQwTrXrRH2GZTJEYm4l5K5Qg4h/njNDzU=) 2: 64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.crl (hash: mdAAe9wdmw3zm8ENz/P+EJi0gP/wX2Ln5qla6PPkgjk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 07:16:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:b7:48:c9:15:7d:00:1f:11:a3:a8:1e:6a:c1:4c:d8:c2:61:47:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05 Validity Not Before: Jun 11 03:27:51 2026 GMT Not After : Jun 12 07:16:51 2026 GMT Subject: CN=51FFBFDE39E5ABA1B294DCA34BC65E799936BFA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a6:d1:63:d6:db:fb:0f:24:76:2e:9c:73:54: 85:d6:4b:b8:c0:d5:8e:48:0d:0c:f0:e3:fa:5c:5e: c4:aa:89:48:d5:91:b5:27:28:25:81:e7:12:44:6d: 54:f8:2f:ea:3c:9a:a7:88:a4:13:cd:8f:d8:7a:da: 3c:16:a1:49:00:d6:c7:67:82:f9:e9:bc:1c:29:2b: 94:14:0d:58:f6:ab:cd:dc:54:e1:9d:f0:3c:1b:f8: f6:ab:95:f8:95:96:1c:a0:60:d2:f3:b9:e8:6a:d8: 41:3c:68:41:9a:80:da:e1:de:1d:25:22:1b:19:02: 82:f1:26:7d:15:22:66:2b:69:94:de:a6:a8:8c:48: a5:07:a0:d0:a5:c4:24:de:42:d2:f6:dc:87:a4:17: 5d:15:ae:1f:99:22:b5:e7:ed:2c:b3:dd:24:68:0a: ba:26:4b:1a:b4:df:0a:fc:f0:4b:a0:c3:c0:bf:a9: f2:02:a2:86:7d:c8:25:2e:ec:1a:c9:47:4a:3f:6b: dd:2a:c8:a7:39:e2:51:a6:7f:1d:fa:4f:80:19:40: ea:cb:1a:10:ee:11:a7:6e:08:89:a8:8b:42:64:36: cc:4f:f1:1d:ed:9b:27:7c:84:5f:71:fd:79:fb:97: aa:c3:92:2d:a5:99:94:5f:c5:c7:a9:bc:f8:96:23: 05:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:FF:BF:DE:39:E5:AB:A1:B2:94:DC:A3:4B:C6:5E:79:99:36:BF:A8 X509v3 Authority Key Identifier: keyid:64:D6:29:AA:3C:F3:8F:9F:77:0A:DB:BB:20:C6:DE:BD:0B:8C:DE:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:dd:8d:89:2d:68:65:b5:a8:75:10:95:a6:65:0c:e8:fc:2b: 7e:79:cd:59:18:71:bb:9b:ec:db:11:0a:76:56:1a:00:09:28: 06:16:41:2e:1e:6e:5b:22:0d:09:c5:5e:e2:d5:64:99:10:27: 5f:41:45:ee:0e:0f:52:c1:88:f1:65:54:bc:89:53:13:db:a2: 81:47:25:2e:c9:45:5c:06:5d:a6:37:bd:64:68:14:ca:a1:00: a2:d4:40:8e:a3:35:c5:ce:00:dc:53:ed:e2:ee:0c:cc:42:08: 3d:d0:3c:ce:c4:79:9e:a6:41:13:58:90:6f:cf:ed:43:12:08: 3a:ca:7b:02:a9:ca:f6:f5:ce:c3:d9:c3:81:aa:57:cf:18:39: 62:ee:08:3c:8e:da:2e:9c:12:00:83:0c:42:a1:c1:fc:40:8a: 2f:c2:ba:93:0d:ec:6f:c3:aa:a0:60:b5:16:cb:e3:d1:16:c8: cf:5c:4e:de:cd:19:0c:4a:aa:a6:04:ef:68:85:40:f0:f2:51: 46:a6:72:90:f2:9d:a5:71:23:64:c4:97:bf:b1:cf:39:0b:3f: 56:6e:50:4d:de:bc:83:78:f6:fb:d4:e3:58:fc:15:64:33:c6: 68:c7:0f:73:c7:32:ae:8b:1a:e0:57:1e:75:3f:ee:3d:9c:0f: b7:e8:37:cd -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUVLdIyRV9AB8Ro6geasFM2MJhR2UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRENjI5QUEzQ0YzOEY5Rjc3MEFEQkJCMjBDNkRFQkQw QjhDREUwNTAeFw0yNjA2MTEwMzI3NTFaFw0yNjA2MTIwNzE2NTFaMDMxMTAvBgNV BAMTKDUxRkZCRkRFMzlFNUFCQTFCMjk0RENBMzRCQzY1RTc5OTkzNkJGQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiptFj1tv7DyR2LpxzVIXWS7jA 1Y5IDQzw4/pcXsSqiUjVkbUnKCWB5xJEbVT4L+o8mqeIpBPNj9h62jwWoUkA1sdn gvnpvBwpK5QUDVj2q83cVOGd8Dwb+ParlfiVlhygYNLzuehq2EE8aEGagNrh3h0l IhsZAoLxJn0VImYraZTepqiMSKUHoNClxCTeQtL23IekF10Vrh+ZIrXn7Syz3SRo CromSxq03wr88Eugw8C/qfICooZ9yCUu7BrJR0o/a90qyKc54lGmfx36T4AZQOrL GhDuEaduCImoi0JkNsxP8R3tmyd8hF9x/Xn7l6rDki2lmZRfxcepvPiWIwUTAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUUf+/3jnlq6GylNyjS8ZeeZk2v6gwHwYDVR0j BBgwFoAUZNYpqjzzj593Ctu7IMbevQuM3gUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjUzMmI5ZWItMmZhZS00OGE4LTk3OTMtMzNlZWMwNjdj ZTM5LzIvNjRENjI5QUEzQ0YzOEY5Rjc3MEFEQkJCMjBDNkRFQkQwQjhDREUwNS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kOWJkMzg4OC05MzAyLTRi NmYtYTAxNy0yYjRiYmE1ZTU3YmIvMS82NEQ2MjlBQTNDRjM4RjlGNzcwQURCQkIy MEM2REVCRDBCOENERTA1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Y1MzJiOWViLTJmYWUtNDhhOC05NzkzLTMzZWVjMDY3Y2UzOS8yLzY0RDYyOUFB M0NGMzhGOUY3NzBBREJCQjIwQzZERUJEMEI4Q0RFMDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCX3Y2J LWhltah1EJWmZQzo/Ct+ec1ZGHG7m+zbEQp2VhoACSgGFkEuHm5bIg0JxV7i1WSZ ECdfQUXuDg9SwYjxZVS8iVMT26KBRyUuyUVcBl2mN71kaBTKoQCi1ECOozXFzgDc U+3i7gzMQgg90DzOxHmepkETWJBvz+1DEgg6ynsCqcr29c7D2cOBqlfPGDli7gg8 jtounBIAgwxCocH8QIovwrqTDexvw6qgYLUWy+PRFsjPXE7ezRkMSqqmBO9ohUDw 8lFGpnKQ8p2lcSNkxJe/sc85Cz9WblBN3ryDePb71ONY/BVkM8Zoxw9zxzKuixrg Vx51P+49nA+36DfN -----END CERTIFICATE-----Generated at Thu Jun 11 23:15:42 2026 by rpki-client