$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft File: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft (raw, json) Hash identifier: GG3STsu+jnf03Kdormtiy6TEHhycfkLtWkrNQgFZtYw= Subject key identifier: CF:0A:E2:B2:31:D6:B6:44:85:93:E0:26:2D:1B:00:F1:51:ED:C3:21 Authority key identifier: 64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE Certificate issuer: /CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe Certificate serial: 5115AC3347FC1AB39F7F37FEC5D637ADD5DFA0B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft Manifest number: 04B3 Signing time: Wed 26 Aug 2026 12:28:14 +0000 Manifest this update: Wed 26 Aug 2026 12:23:14 +0000 Manifest next update: Thu 27 Aug 2026 13:16:14 +0000 Files and hashes: 1: 34352e3135302e372e302f32342d3234203d3e203430363736.roa (hash: T+zbNugzb1bsH98kHS+RI8JGsyekk0ffpARbCOfuE7Y=) 2: 34352e3135302e352e302f32342d3234203d3e20323039383534.roa (hash: Crd2ncf4lQNUDj/2Yu6qDEEKdYEoj89TZ7JLTUVoXfY=) 3: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl (hash: VzADJXKrRaUQvu+iJ1yueaPavR3BQ85aOizVsPPHYdk=) 4: 34352e3135302e342e302f32342d3234203d3e203432383331.roa (hash: JDtWvcwkcFwfS8VCb1zy7YF8Zp2kwnagm9OMk367GN0=) 5: 34352e3135302e362e302f32342d3234203d3e20313532363938.roa (hash: 0f0g57ANaSNWFblr3Xq7rc9QFWRViCaK3NBWvI9WBjA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 27 Aug 2026 13:16:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:15:ac:33:47:fc:1a:b3:9f:7f:37:fe:c5:d6:37:ad:d5:df:a0:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe Validity Not Before: Aug 26 12:23:14 2026 GMT Not After : Aug 27 13:16:14 2026 GMT Subject: CN=CF0AE2B231D6B6448593E0262D1B00F151EDC321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6f:70:5d:05:9c:16:89:65:d0:e7:9a:6e:06: e8:59:60:f9:76:f3:46:7f:fb:ea:87:a9:ca:fc:17: 03:b1:4a:da:8d:85:09:7e:e8:ba:1a:5f:ea:39:d1: e5:28:9a:33:6e:ba:3f:53:97:3f:c7:8c:1b:8a:a3: d1:59:51:14:ed:a7:89:b1:77:72:02:c0:69:ef:6e: 02:af:e3:8f:d5:76:01:8f:8c:30:f2:b9:6c:3e:8b: e3:b0:1d:1d:90:5b:c9:a2:86:c5:09:0a:99:24:9a: 00:5b:5c:c7:06:0c:de:da:a9:38:c4:4b:c6:bd:1d: 7b:a2:2a:e6:ea:fb:3f:71:02:12:66:ce:4e:62:f1: 69:22:4e:4c:7d:35:9c:b4:2f:ae:bb:66:87:5f:fd: 8e:e5:bc:c1:54:3b:f8:ee:41:4d:9e:f4:55:ae:e8: c1:1c:d5:11:c5:17:93:09:97:18:dc:74:03:f5:b0: c7:c6:bd:b9:84:f7:25:0a:50:9e:cd:9b:3d:61:53: de:f5:24:1c:14:f5:17:f4:38:30:fc:ad:73:5a:80: c4:9c:95:cd:c0:2d:46:df:b3:c1:f4:e8:5b:99:12: 6f:db:85:0b:20:c4:1c:dd:85:9e:96:b5:45:92:b0: 16:60:7c:57:cc:82:3e:d9:07:85:c7:86:ff:f3:45: 4f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:0A:E2:B2:31:D6:B6:44:85:93:E0:26:2D:1B:00:F1:51:ED:C3:21 X509v3 Authority Key Identifier: keyid:64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:8d:2c:95:3c:ce:16:ec:c2:9f:f6:b5:0a:f6:b1:8f:e7:6b: ad:e0:f2:cd:0e:74:b3:13:cc:11:59:63:f7:e2:ae:2e:19:cc: ab:89:bf:4a:6b:bc:9a:d3:b2:f7:be:0a:f7:a7:ae:ca:0f:29: 59:fe:3f:41:65:13:09:46:55:a3:de:bf:d9:c8:a8:1a:af:53: 52:ef:a2:4e:0e:da:17:e8:71:f3:30:14:fb:f8:a6:ac:59:2d: d5:42:92:74:d3:c6:a8:5c:7e:7f:c9:d6:9c:6b:c1:b9:cc:4b: 23:0e:73:6d:4a:5f:f5:f1:bd:26:f7:cb:03:2e:c1:a6:0e:4b: bc:75:4d:e7:5c:99:29:55:26:06:ac:6e:d2:00:72:4d:e5:44: ae:16:73:c6:f7:06:b9:4e:00:f0:ef:82:9b:72:33:54:af:f1: 30:90:7f:14:85:75:38:78:49:87:a8:64:1b:32:e1:05:df:24: 81:a7:1a:53:5d:22:32:9b:55:44:19:82:ab:ab:3a:00:0c:3a: 2d:57:9c:ff:a1:dc:66:8a:eb:eb:de:01:60:cb:0a:02:63:b3: c6:05:3d:73:f1:6c:3e:30:ab:e5:45:78:54:50:00:00:25:53: ea:42:b9:76:d1:0c:e8:36:a5:05:8a:92:d1:93:b7:4a:1f:39: d0:3a:50:1a -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUURWsM0f8GrOffzf+xdY3rdXfoLUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRhZjE1NDE5YmQ1ZmU2YzhmOTdlMjI0YTg2YTQ5MTdh MmU2ZmVmZTAeFw0yNjA4MjYxMjIzMTRaFw0yNjA4MjcxMzE2MTRaMDMxMTAvBgNV BAMTKENGMEFFMkIyMzFENkI2NDQ4NTkzRTAyNjJEMUIwMEYxNTFFREMzMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzb3BdBZwWiWXQ55puBuhZYPl2 80Z/++qHqcr8FwOxStqNhQl+6LoaX+o50eUomjNuuj9Tlz/HjBuKo9FZURTtp4mx d3ICwGnvbgKv44/VdgGPjDDyuWw+i+OwHR2QW8mihsUJCpkkmgBbXMcGDN7aqTjE S8a9HXuiKubq+z9xAhJmzk5i8WkiTkx9NZy0L667Zodf/Y7lvMFUO/juQU2e9FWu 6MEc1RHFF5MJlxjcdAP1sMfGvbmE9yUKUJ7Nmz1hU971JBwU9Rf0ODD8rXNagMSc lc3ALUbfs8H06FuZEm/bhQsgxBzdhZ6WtUWSsBZgfFfMgj7ZB4XHhv/zRU8/AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUzwrisjHWtkSFk+AmLRsA8VHtwyEwHwYDVR0j BBgwFoAUZK8VQZvV/myPl+IkqGpJF6Lm/v4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmM5YWE5NWYtN2IzOC00MjZhLTk5NjYtNTQ0MTkzOWZl MDMxLzAvNjRBRjE1NDE5QkQ1RkU2QzhGOTdFMjI0QTg2QTQ5MTdBMkU2RkVGRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1pLOFZRWnZWX215UGwtSWtxR3BKRjZM bV92NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mYzlhYTk1Zi03 YjM4LTQyNmEtOTk2Ni01NDQxOTM5ZmUwMzEvMC82NEFGMTU0MTlCRDVGRTZDOEY5 N0UyMjRBODZBNDkxN0EyRTZGRUZFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADI0slTzOFuzCn/a1Cvax j+drreDyzQ50sxPMEVlj9+KuLhnMq4m/Smu8mtOy974K96euyg8pWf4/QWUTCUZV o96/2cioGq9TUu+iTg7aF+hx8zAU+/imrFkt1UKSdNPGqFx+f8nWnGvBucxLIw5z bUpf9fG9JvfLAy7Bpg5LvHVN51yZKVUmBqxu0gByTeVErhZzxvcGuU4A8O+Cm3Iz VK/xMJB/FIV1OHhJh6hkGzLhBd8kgacaU10iMptVRBmCq6s6AAw6LVec/6HcZorr 694BYMsKAmOzxgU9c/FsPjCr5UV4VFAAACVT6kK5dtEM6DalBYqS0ZO3Sh850DpQ Gg== -----END CERTIFICATE-----Generated at Thu Aug 27 05:36:04 2026 by rpki-client