$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft File: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft (raw, json) Hash identifier: Pnnu/gY7Va0vnX/WToqQGOuvdFov6F+aFNPZNL/l/eA= Subject key identifier: 50:B9:B0:56:DA:90:24:3D:6B:4B:D6:1E:1C:B1:A4:0B:BE:66:30:C2 Authority key identifier: 64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE Certificate issuer: /CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe Certificate serial: 56679CBD96DFD20594E1778A12DE1283103674FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft Manifest number: 042A Signing time: Sat 16 May 2026 11:37:17 +0000 Manifest this update: Sat 16 May 2026 11:32:17 +0000 Manifest next update: Sun 17 May 2026 15:36:17 +0000 Files and hashes: 1: 34352e3135302e352e302f32342d3234203d3e20323039383534.roa (hash: Crd2ncf4lQNUDj/2Yu6qDEEKdYEoj89TZ7JLTUVoXfY=) 2: 34352e3135302e372e302f32342d3234203d3e203430363736.roa (hash: byqPGvSaG6esVs7ttHZAm5MeDtXny30fRGCsgkrnWc0=) 3: 34352e3135302e362e302f32342d3234203d3e203538303631.roa (hash: yaUDjxZGhyEVxNfdUbfnMRoUwlBxM/900/kJEwn4Oxc=) 4: 34352e3135302e342e302f32342d3234203d3e203432383331.roa (hash: JDtWvcwkcFwfS8VCb1zy7YF8Zp2kwnagm9OMk367GN0=) 5: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl (hash: l/WBRFitpya2LHG4n+Mh4NA7J4fwoD+FQKvO75iv0Uo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 17 May 2026 15:36:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:67:9c:bd:96:df:d2:05:94:e1:77:8a:12:de:12:83:10:36:74:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe Validity Not Before: May 16 11:32:17 2026 GMT Not After : May 17 15:36:17 2026 GMT Subject: CN=50B9B056DA90243D6B4BD61E1CB1A40BBE6630C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:18:a1:57:c3:c0:de:53:e3:36:fe:6d:a1:1c: be:30:6a:49:7e:78:9c:17:00:71:7d:b8:8d:28:f1: 5b:44:56:60:2c:30:13:ad:ef:01:0c:b5:ff:3f:8c: 4c:b7:73:1a:6b:05:75:11:5e:d8:3c:da:db:a8:88: f2:70:0c:29:37:9c:3e:f5:97:3d:27:51:9e:06:18: d2:29:d8:3b:7c:a2:eb:cd:8d:52:f7:a6:ba:5f:6a: 1e:f0:2c:1c:8a:8e:f6:92:df:79:e6:29:92:82:f9: 8c:a2:40:cd:85:5a:1b:db:61:b0:a2:76:cd:73:73: 3b:14:e5:1f:01:08:47:1f:d2:47:4f:ad:d1:19:68: fe:18:72:9f:eb:1c:9e:f1:83:db:c1:f5:e5:69:da: b9:d0:dc:6b:70:33:21:00:90:8c:17:84:d9:4b:8f: 60:dd:45:46:fd:8f:fa:59:d6:81:1d:2f:0d:e1:48: 7e:ff:cd:c4:53:20:a7:f9:fc:b2:5d:e2:34:a6:35: 08:b1:0c:91:fd:52:9b:e1:84:4c:fb:76:06:ff:ab: 3a:0a:74:fc:32:7e:0e:6c:5c:fc:37:c2:21:d1:03: 4e:ed:3d:c8:e3:2f:f0:21:49:5f:44:90:6a:f6:04: 37:db:f7:28:1a:d2:ee:95:a9:4e:54:43:df:9a:58: 83:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:B9:B0:56:DA:90:24:3D:6B:4B:D6:1E:1C:B1:A4:0B:BE:66:30:C2 X509v3 Authority Key Identifier: keyid:64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:48:92:1d:ea:ce:af:f9:6c:da:c9:fa:17:04:bb:0a:d0:7d: 0e:92:42:a3:d4:41:23:1f:3a:1f:1e:3a:9f:d7:02:92:5f:81: 42:d7:61:5e:e3:84:3b:42:50:bc:a3:b1:29:01:58:ea:6c:09: 77:07:0e:74:1a:83:95:8b:c6:44:41:b0:42:e1:d5:cc:4f:55: 44:65:c0:dd:b2:4d:cc:fe:a6:83:96:ac:32:d6:bc:38:6c:d7: 0b:f0:b9:cb:3c:56:0b:70:d2:76:44:c7:5c:89:df:b9:b6:0b: bf:5d:7e:d0:9c:f9:59:ab:20:af:f2:72:9b:e7:45:82:0e:ec: af:1a:94:84:8b:52:8c:2e:98:5a:29:11:bb:04:d9:8c:0c:49: dc:25:94:09:a0:42:24:fd:19:3a:e6:4c:36:52:59:17:e5:df: 29:d4:32:c5:a2:33:5a:fb:0d:af:1a:ab:97:08:7e:4e:d3:17: 0b:20:49:d9:6e:31:c0:ad:9e:d5:e2:ac:5f:37:d3:51:cb:ed: f2:4b:a2:5a:b9:91:71:87:27:fb:70:9b:dc:f8:c0:c1:41:c2: 6f:35:7b:fd:78:90:fa:26:bf:f1:82:c6:c0:5b:b7:7b:56:c4: 6f:76:81:a5:94:44:34:19:88:fb:82:9c:84:ce:e7:4a:6e:54: 5e:04:c6:8e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUVmecvZbf0gWU4XeKEt4SgxA2dP4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRhZjE1NDE5YmQ1ZmU2YzhmOTdlMjI0YTg2YTQ5MTdh MmU2ZmVmZTAeFw0yNjA1MTYxMTMyMTdaFw0yNjA1MTcxNTM2MTdaMDMxMTAvBgNV BAMTKDUwQjlCMDU2REE5MDI0M0Q2QjRCRDYxRTFDQjFBNDBCQkU2NjMwQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuGKFXw8DeU+M2/m2hHL4wakl+ eJwXAHF9uI0o8VtEVmAsMBOt7wEMtf8/jEy3cxprBXURXtg82tuoiPJwDCk3nD71 lz0nUZ4GGNIp2Dt8ouvNjVL3prpfah7wLByKjvaS33nmKZKC+YyiQM2FWhvbYbCi ds1zczsU5R8BCEcf0kdPrdEZaP4Ycp/rHJ7xg9vB9eVp2rnQ3GtwMyEAkIwXhNlL j2DdRUb9j/pZ1oEdLw3hSH7/zcRTIKf5/LJd4jSmNQixDJH9UpvhhEz7dgb/qzoK dPwyfg5sXPw3wiHRA07tPcjjL/AhSV9EkGr2BDfb9yga0u6VqU5UQ9+aWIOLAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUULmwVtqQJD1rS9YeHLGkC75mMMIwHwYDVR0j BBgwFoAUZK8VQZvV/myPl+IkqGpJF6Lm/v4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmM5YWE5NWYtN2IzOC00MjZhLTk5NjYtNTQ0MTkzOWZl MDMxLzAvNjRBRjE1NDE5QkQ1RkU2QzhGOTdFMjI0QTg2QTQ5MTdBMkU2RkVGRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1pLOFZRWnZWX215UGwtSWtxR3BKRjZM bV92NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mYzlhYTk1Zi03 YjM4LTQyNmEtOTk2Ni01NDQxOTM5ZmUwMzEvMC82NEFGMTU0MTlCRDVGRTZDOEY5 N0UyMjRBODZBNDkxN0EyRTZGRUZFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhEiSHerOr/ls2sn6FwS7 CtB9DpJCo9RBIx86Hx46n9cCkl+BQtdhXuOEO0JQvKOxKQFY6mwJdwcOdBqDlYvG REGwQuHVzE9VRGXA3bJNzP6mg5asMta8OGzXC/C5yzxWC3DSdkTHXInfubYLv11+ 0Jz5Wasgr/Jym+dFgg7srxqUhItSjC6YWikRuwTZjAxJ3CWUCaBCJP0ZOuZMNlJZ F+XfKdQyxaIzWvsNrxqrlwh+TtMXCyBJ2W4xwK2e1eKsXzfTUcvt8kuiWrmRcYcn +3Cb3PjAwUHCbzV7/XiQ+ia/8YLGwFu3e1bEb3aBpZRENBmI+4KchM7nSm5UXgTG jg== -----END CERTIFICATE-----Generated at Sun May 17 08:48:07 2026 by rpki-client