$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft File: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft (raw, json) Hash identifier: ch4bXD+NNUa9oeplb81GLufxxz9QJGmzEvM6GZ/3cdU= Subject key identifier: D6:65:08:C7:91:5C:0C:96:90:DA:DF:0C:86:7F:AF:30:91:24:22:26 Authority key identifier: 64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE Certificate issuer: /CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe Certificate serial: 1D019510592D1464DC8D8FA1252F3B61158C27B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft Manifest number: 04FC Signing time: Mon 19 Oct 2026 07:41:34 +0000 Manifest this update: Mon 19 Oct 2026 07:36:34 +0000 Manifest next update: Tue 20 Oct 2026 08:40:34 +0000 Files and hashes: 1: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl (hash: nG8ni5bOkfb57kD7ezp4ON6ALFbjWgsYa/S5OTwZewI=) 2: 34352e3135302e352e302f32342d3234203d3e20323039383534.roa (hash: Crd2ncf4lQNUDj/2Yu6qDEEKdYEoj89TZ7JLTUVoXfY=) 3: 34352e3135302e372e302f32342d3234203d3e203430363736.roa (hash: T+zbNugzb1bsH98kHS+RI8JGsyekk0ffpARbCOfuE7Y=) 4: 34352e3135302e342e302f32342d3234203d3e203432383331.roa (hash: JDtWvcwkcFwfS8VCb1zy7YF8Zp2kwnagm9OMk367GN0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Oct 2026 08:40:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:01:95:10:59:2d:14:64:dc:8d:8f:a1:25:2f:3b:61:15:8c:27:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe Validity Not Before: Oct 19 07:36:34 2026 GMT Not After : Oct 20 08:40:34 2026 GMT Subject: CN=D66508C7915C0C9690DADF0C867FAF3091242226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:da:d3:ac:18:89:15:81:2a:5f:45:40:cf:e8: 39:50:0f:04:05:2c:16:91:5e:5c:81:51:86:4e:72: 21:c3:59:c7:89:cc:00:3f:7b:1d:28:fc:a7:ef:38: 96:1f:27:30:a7:92:bd:70:61:8f:02:fe:f9:03:d8: c0:51:f9:8e:2a:0d:7e:3e:1a:64:73:3a:ab:fe:76: 58:d0:fa:21:fe:35:02:ae:f6:0e:d9:ab:f7:17:71: 54:60:82:cd:d2:37:76:9f:8b:23:2d:ff:87:b8:2e: 51:69:41:d6:f3:a9:e0:66:b2:63:2b:f5:59:f5:a4: 65:c6:e4:1a:f9:44:3c:0b:d5:ce:93:11:5f:7c:ca: 03:a5:7b:3f:04:4a:0f:ee:b5:4c:39:2f:f9:a9:9f: 91:9d:48:c9:c4:86:1e:b4:f4:96:51:26:da:4e:ce: 58:aa:bb:ba:50:99:81:24:7e:a1:08:0a:26:da:ec: e8:62:92:c6:97:1b:24:c8:fe:a3:d1:19:80:76:5b: 8b:46:e7:16:bf:76:5f:52:4a:7f:7f:08:2a:d7:af: cc:af:95:8a:da:96:3f:b2:a9:3f:6c:df:38:06:05: 8a:38:31:58:bb:7c:d1:81:c8:4d:82:72:91:d2:0a: cd:0b:0c:be:50:77:20:e5:9c:65:28:f1:b3:86:4c: 82:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:65:08:C7:91:5C:0C:96:90:DA:DF:0C:86:7F:AF:30:91:24:22:26 X509v3 Authority Key Identifier: keyid:64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:e2:7d:70:ed:f2:de:04:cc:51:ff:a6:2d:22:59:cc:7c:7b: e8:96:92:30:36:21:32:43:7a:33:53:44:f8:ef:ec:6c:ba:aa: b6:25:1c:29:f2:43:2d:8d:a9:b7:7f:11:35:86:ba:c2:72:30: 5d:93:67:35:51:a2:7c:6d:1e:13:f0:84:6d:3a:63:1c:eb:a7: fc:e9:2f:d8:c4:f7:3f:82:60:f9:36:53:95:4b:a8:c7:33:03: e8:e9:12:4d:7c:a8:f1:3a:71:9c:4b:1f:77:30:85:15:b9:d3: 28:af:72:85:11:8d:9a:6f:57:f3:c5:58:a5:57:e2:ad:85:d3: 50:17:22:33:66:18:a8:6a:91:ed:c2:7c:00:68:71:06:31:a6: 07:84:b5:c2:c5:69:2b:cc:35:42:25:9c:fa:f1:50:39:74:f8: 19:6d:53:c3:46:6b:24:97:33:40:b7:0a:1b:e3:98:ed:73:d1: 5b:30:ce:20:e5:9c:e0:77:ff:33:50:aa:d6:66:c7:e4:f3:c8: 27:1b:d7:1e:07:62:8b:b8:c4:ad:d6:0c:5f:51:26:7e:4e:7f: a6:a6:a0:65:bc:c2:10:ba:6d:7d:9b:be:df:85:7f:dc:53:2b: 46:3d:96:95:b3:3e:16:3b:ca:4e:e7:e4:aa:d7:54:a1:52:61: cb:cf:44:41 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUHQGVEFktFGTcjY+hJS87YRWMJ7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRhZjE1NDE5YmQ1ZmU2YzhmOTdlMjI0YTg2YTQ5MTdh MmU2ZmVmZTAeFw0yNjEwMTkwNzM2MzRaFw0yNjEwMjAwODQwMzRaMDMxMTAvBgNV BAMTKEQ2NjUwOEM3OTE1QzBDOTY5MERBREYwQzg2N0ZBRjMwOTEyNDIyMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi2tOsGIkVgSpfRUDP6DlQDwQF LBaRXlyBUYZOciHDWceJzAA/ex0o/KfvOJYfJzCnkr1wYY8C/vkD2MBR+Y4qDX4+ GmRzOqv+dljQ+iH+NQKu9g7Zq/cXcVRggs3SN3afiyMt/4e4LlFpQdbzqeBmsmMr 9Vn1pGXG5Br5RDwL1c6TEV98ygOlez8ESg/utUw5L/mpn5GdSMnEhh609JZRJtpO zliqu7pQmYEkfqEICiba7OhiksaXGyTI/qPRGYB2W4tG5xa/dl9SSn9/CCrXr8yv lYralj+yqT9s3zgGBYo4MVi7fNGByE2CcpHSCs0LDL5QdyDlnGUo8bOGTILHAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU1mUIx5FcDJaQ2t8Mhn+vMJEkIiYwHwYDVR0j BBgwFoAUZK8VQZvV/myPl+IkqGpJF6Lm/v4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmM5YWE5NWYtN2IzOC00MjZhLTk5NjYtNTQ0MTkzOWZl MDMxLzAvNjRBRjE1NDE5QkQ1RkU2QzhGOTdFMjI0QTg2QTQ5MTdBMkU2RkVGRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1pLOFZRWnZWX215UGwtSWtxR3BKRjZM bV92NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mYzlhYTk1Zi03 YjM4LTQyNmEtOTk2Ni01NDQxOTM5ZmUwMzEvMC82NEFGMTU0MTlCRDVGRTZDOEY5 N0UyMjRBODZBNDkxN0EyRTZGRUZFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcOJ9cO3y3gTMUf+mLSJZ zHx76JaSMDYhMkN6M1NE+O/sbLqqtiUcKfJDLY2pt38RNYa6wnIwXZNnNVGifG0e E/CEbTpjHOun/Okv2MT3P4Jg+TZTlUuoxzMD6OkSTXyo8TpxnEsfdzCFFbnTKK9y hRGNmm9X88VYpVfirYXTUBciM2YYqGqR7cJ8AGhxBjGmB4S1wsVpK8w1QiWc+vFQ OXT4GW1Tw0ZrJJczQLcKG+OY7XPRWzDOIOWc4Hf/M1Cq1mbH5PPIJxvXHgdii7jE rdYMX1Emfk5/pqagZbzCELptfZu+34V/3FMrRj2WlbM+FjvKTufkqtdUoVJhy89E QQ== -----END CERTIFICATE-----Generated at Tue Oct 20 02:52:53 2026 by rpki-client