$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft File: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft (raw, json) Hash identifier: F/edzZj+c6LFuROaQR9TvfPJJtemTlrM2/LrKEESjHM= Subject key identifier: BD:E7:E8:CA:6A:9A:53:93:31:CF:98:F8:31:DF:9F:C9:D6:3E:C9:D8 Authority key identifier: 64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE Certificate issuer: /CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe Certificate serial: 73E396911D1C21F170970830174A140E0F85A5EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft Manifest number: 031B Signing time: Fri 24 Oct 2025 14:49:05 +0000 Manifest this update: Fri 24 Oct 2025 14:44:05 +0000 Manifest next update: Sat 25 Oct 2025 18:38:05 +0000 Files and hashes: 1: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl (hash: rXqqumTsSFnKSvtNFF4rrPVomVQ2xkbFDRqjzlfI8ak=) 2: 34352e3135302e342e302f32342d3234203d3e203432383331.roa (hash: 702sTF4T+4tyFOCkBSwyFht2LvCuhPDht8ofZOjL5aw=) 3: 34352e3135302e372e302f32342d3234203d3e203430363736.roa (hash: byqPGvSaG6esVs7ttHZAm5MeDtXny30fRGCsgkrnWc0=) 4: 34352e3135302e362e302f32342d3234203d3e203538303631.roa (hash: 739QQ1kzpbqPlY0J1CHiMuvjqJmn7ot6gs3zEY3jdHw=) 5: 34352e3135302e352e302f32342d3234203d3e20323039383534.roa (hash: og23dgtoYqERERjtAqH2h8sLSaLgr4DxdJzsOAsyNMg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Oct 2025 18:38:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:e3:96:91:1d:1c:21:f1:70:97:08:30:17:4a:14:0e:0f:85:a5:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe Validity Not Before: Oct 24 14:44:05 2025 GMT Not After : Oct 25 18:38:05 2025 GMT Subject: CN=BDE7E8CA6A9A539331CF98F831DF9FC9D63EC9D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b9:e7:a0:72:ae:62:b9:85:a9:87:4b:68:76: c1:77:5d:c6:04:7c:84:11:76:17:e8:50:05:2d:63: db:fa:29:b7:9e:9d:be:e1:65:c4:bb:7e:99:52:bf: 6f:a4:38:21:5f:c1:4b:5f:1f:d6:7a:d4:a4:9e:37: 33:e3:ce:1b:be:22:12:b0:7f:10:44:74:b1:01:c2: 63:19:6f:0c:ec:78:36:80:16:64:ac:e9:b8:30:8d: e0:88:4d:c5:dc:1e:bf:d1:90:5d:93:03:a0:37:62: 4c:af:d5:f4:ca:5b:4a:d4:fa:aa:59:17:a5:d2:bd: 17:50:12:ac:21:25:6d:4d:7d:b5:df:95:3a:53:8c: 38:4f:84:7c:07:b8:fb:08:da:7a:53:24:2c:af:0d: 8d:84:3f:a8:e6:93:c8:75:70:83:f2:1e:54:3b:41: 7a:2e:29:44:da:80:d2:e1:bb:ee:4b:33:06:48:75: 43:61:b3:7f:d1:58:e0:c7:b7:8c:a4:76:30:6b:83: 5d:74:19:9f:a8:09:7a:1a:fd:cb:b6:82:e7:e6:42: 75:8c:e2:6e:04:31:75:80:12:63:19:47:0f:cd:84: 9c:33:21:12:dd:91:94:a1:27:be:33:38:d6:a2:5f: 13:2b:26:5e:83:cc:53:1a:07:a8:61:ad:6b:55:0b: 22:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:E7:E8:CA:6A:9A:53:93:31:CF:98:F8:31:DF:9F:C9:D6:3E:C9:D8 X509v3 Authority Key Identifier: keyid:64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:af:3f:76:18:9e:d8:75:ef:3d:e5:f9:90:33:88:2b:0d:5d: 54:89:fc:b3:6e:15:5a:5c:f6:05:02:ba:4f:70:8b:a9:e7:e8: 6f:be:61:c0:4b:65:75:1f:cd:e2:2d:ba:11:38:09:17:8b:d8: 31:5d:99:73:71:f6:18:dd:88:3d:b5:73:2e:3e:5d:c1:4e:35: e2:4b:f2:ec:a3:e6:8e:d8:e5:d8:91:0f:f1:09:08:61:6a:2f: 9d:32:ec:f1:f4:da:b4:f9:5b:13:fd:44:87:cf:b3:3a:25:f2: 37:7c:ee:fa:a8:30:e8:7b:52:a4:9f:ef:24:fd:2a:2c:93:eb: d0:5b:d7:45:5c:65:c0:22:66:81:4f:f2:9f:2f:c4:01:b6:cb: 8f:16:86:4f:52:2c:2c:3b:2d:4f:05:b1:16:61:ed:3a:10:c6: 2d:0c:61:81:36:49:1a:17:38:52:d2:ee:ee:4a:46:45:2e:c9: 71:d3:8c:a1:60:6f:23:1b:29:e5:a9:20:34:ed:0e:52:54:8e: 3b:41:7b:4b:94:df:d6:91:ae:fc:a1:ab:62:0a:fa:5f:9d:d5: bd:b0:62:e8:0c:20:94:83:92:a6:25:22:de:e0:ab:60:47:8f: 50:a5:39:88:11:e3:72:df:e1:de:1b:99:9f:8d:41:98:38:be: 5f:90:00:07 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUc+OWkR0cIfFwlwgwF0oUDg+Fpe8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRhZjE1NDE5YmQ1ZmU2YzhmOTdlMjI0YTg2YTQ5MTdh MmU2ZmVmZTAeFw0yNTEwMjQxNDQ0MDVaFw0yNTEwMjUxODM4MDVaMDMxMTAvBgNV BAMTKEJERTdFOENBNkE5QTUzOTMzMUNGOThGODMxREY5RkM5RDYzRUM5RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYueegcq5iuYWph0todsF3XcYE fIQRdhfoUAUtY9v6Kbeenb7hZcS7fplSv2+kOCFfwUtfH9Z61KSeNzPjzhu+IhKw fxBEdLEBwmMZbwzseDaAFmSs6bgwjeCITcXcHr/RkF2TA6A3Ykyv1fTKW0rU+qpZ F6XSvRdQEqwhJW1NfbXflTpTjDhPhHwHuPsI2npTJCyvDY2EP6jmk8h1cIPyHlQ7 QXouKUTagNLhu+5LMwZIdUNhs3/RWODHt4ykdjBrg110GZ+oCXoa/cu2gufmQnWM 4m4EMXWAEmMZRw/NhJwzIRLdkZShJ74zONaiXxMrJl6DzFMaB6hhrWtVCyIlAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUvefoymqaU5Mxz5j4Md+fydY+ydgwHwYDVR0j BBgwFoAUZK8VQZvV/myPl+IkqGpJF6Lm/v4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmM5YWE5NWYtN2IzOC00MjZhLTk5NjYtNTQ0MTkzOWZl MDMxLzAvNjRBRjE1NDE5QkQ1RkU2QzhGOTdFMjI0QTg2QTQ5MTdBMkU2RkVGRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1pLOFZRWnZWX215UGwtSWtxR3BKRjZM bV92NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mYzlhYTk1Zi03 YjM4LTQyNmEtOTk2Ni01NDQxOTM5ZmUwMzEvMC82NEFGMTU0MTlCRDVGRTZDOEY5 N0UyMjRBODZBNDkxN0EyRTZGRUZFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXq8/dhie2HXvPeX5kDOI Kw1dVIn8s24VWlz2BQK6T3CLqefob75hwEtldR/N4i26ETgJF4vYMV2Zc3H2GN2I PbVzLj5dwU414kvy7KPmjtjl2JEP8QkIYWovnTLs8fTatPlbE/1Eh8+zOiXyN3zu +qgw6HtSpJ/vJP0qLJPr0FvXRVxlwCJmgU/yny/EAbbLjxaGT1IsLDstTwWxFmHt OhDGLQxhgTZJGhc4UtLu7kpGRS7JcdOMoWBvIxsp5akgNO0OUlSOO0F7S5Tf1pGu /KGrYgr6X53VvbBi6AwglIOSpiUi3uCrYEePUKU5iBHjct/h3huZn41BmDi+X5AA Bw== -----END CERTIFICATE-----Generated at Sat Oct 25 11:33:20 2025 by rpki-client