$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft File: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft (raw, json) Hash identifier: vfhlpcm7dbytRTxEO2QXejyYTm4Jt5fPoU+nqK1ibAE= Subject key identifier: D0:D1:70:50:43:DC:6C:31:8C:33:FE:5C:20:9E:EF:79:F3:38:07:89 Authority key identifier: 64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE Certificate issuer: /CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe Certificate serial: 376895E0E9C8B30368A2EB3BAF8D7C0691B53872 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft Manifest number: 02DF Signing time: Tue 09 Sep 2025 06:44:10 +0000 Manifest this update: Tue 09 Sep 2025 06:39:10 +0000 Manifest next update: Wed 10 Sep 2025 09:26:10 +0000 Files and hashes: 1: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl (hash: Nk+DNTOzpke3PhgqKtCYCJiogYoEACo4ylZmx8kgSKo=) 2: 34352e3135302e342e302f32342d3234203d3e203432383331.roa (hash: 702sTF4T+4tyFOCkBSwyFht2LvCuhPDht8ofZOjL5aw=) 3: 34352e3135302e372e302f32342d3234203d3e203430363736.roa (hash: byqPGvSaG6esVs7ttHZAm5MeDtXny30fRGCsgkrnWc0=) 4: 34352e3135302e362e302f32342d3234203d3e203538303631.roa (hash: 739QQ1kzpbqPlY0J1CHiMuvjqJmn7ot6gs3zEY3jdHw=) 5: 34352e3135302e352e302f32342d3234203d3e20323039383534.roa (hash: og23dgtoYqERERjtAqH2h8sLSaLgr4DxdJzsOAsyNMg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 08:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:68:95:e0:e9:c8:b3:03:68:a2:eb:3b:af:8d:7c:06:91:b5:38:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe Validity Not Before: Sep 9 06:39:10 2025 GMT Not After : Sep 10 09:26:10 2025 GMT Subject: CN=D0D1705043DC6C318C33FE5C209EEF79F3380789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8e:fe:db:38:3c:3f:61:d3:0b:11:59:e3:86: ac:02:31:5e:0f:a0:ea:35:fa:74:d6:48:5f:c8:2a: 92:d8:dc:40:7d:1b:68:0a:29:67:6b:27:af:12:b9: 07:1d:86:16:e4:37:e8:d2:75:50:fe:00:f8:5a:70: 79:b8:ac:2b:a2:68:4b:c2:d4:87:e0:1c:f2:fe:f1: 27:39:88:aa:76:a1:4b:d6:a1:20:9f:37:5f:c8:66: e1:06:fb:2f:35:eb:60:78:8e:4f:57:fa:f4:3b:b6: 40:02:d3:e2:07:e8:5c:18:1c:d2:66:1f:ef:0a:53: 28:c9:8f:90:a7:f5:79:6c:42:3c:27:4e:d5:43:63: cf:fa:fd:ea:ef:e4:c3:f6:50:84:2e:6f:00:1f:ca: df:54:4b:35:62:1d:46:06:14:85:e6:43:54:3a:04: 92:f5:51:02:23:7e:33:8f:a3:4d:92:58:76:b1:46: 86:a1:ca:bb:fe:4f:a2:4f:94:ca:38:b7:8e:30:40: ce:17:0f:03:a2:10:32:90:cb:24:62:82:ea:57:08: 0e:de:84:06:cf:0f:6d:36:2f:3f:de:7f:fa:93:9e: d1:cb:d7:d2:a8:11:10:64:a7:b5:f9:4d:52:fc:a8: 38:51:d4:38:c7:f7:42:66:4b:89:f6:89:4a:64:a3: c3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:D1:70:50:43:DC:6C:31:8C:33:FE:5C:20:9E:EF:79:F3:38:07:89 X509v3 Authority Key Identifier: keyid:64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:7f:a5:9b:e3:74:e6:a0:12:e9:14:42:ac:c1:1b:85:b7:85: 17:05:00:dc:60:cd:31:b9:a4:8e:88:bf:d2:f4:de:c1:36:b8: 7d:74:34:10:5f:c2:19:1e:48:24:88:66:97:b6:e6:ad:d5:2b: b5:9f:ce:12:1b:55:0f:52:8b:00:99:01:f6:f9:a4:21:57:fe: e0:a3:31:2a:c7:80:fc:63:aa:a9:24:85:48:a0:b0:61:c6:b3: 5b:dd:cd:34:66:69:36:22:eb:7f:6a:31:e7:ef:a3:05:65:44: e3:c0:0a:07:b5:8f:5d:fc:0c:39:ac:0f:a1:ab:a0:c6:9c:71: 6e:8b:52:74:64:4f:26:3e:7e:cc:1d:6c:b1:47:23:9d:5c:fb: 5d:6c:53:a4:50:32:5f:3e:e4:dc:36:12:22:30:a2:69:2c:52: 0f:49:a9:cb:25:2e:38:82:7e:ee:50:cf:71:63:9d:86:91:59: b3:5c:52:3a:92:e8:8d:79:1e:35:0f:e6:21:bb:72:92:bc:b3: 90:75:34:cd:8b:10:ae:0a:de:fa:89:eb:2e:fc:6b:f8:fb:24: a3:6d:b7:f5:c8:a4:81:ca:2e:93:9a:98:90:6c:6c:0f:48:b7: bd:a5:38:a6:e8:51:d7:23:f4:40:b1:7c:59:04:03:e6:f8:f0: 4f:61:e1:e5 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUN2iV4OnIswNoous7r418BpG1OHIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRhZjE1NDE5YmQ1ZmU2YzhmOTdlMjI0YTg2YTQ5MTdh MmU2ZmVmZTAeFw0yNTA5MDkwNjM5MTBaFw0yNTA5MTAwOTI2MTBaMDMxMTAvBgNV BAMTKEQwRDE3MDUwNDNEQzZDMzE4QzMzRkU1QzIwOUVFRjc5RjMzODA3ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmjv7bODw/YdMLEVnjhqwCMV4P oOo1+nTWSF/IKpLY3EB9G2gKKWdrJ68SuQcdhhbkN+jSdVD+APhacHm4rCuiaEvC 1IfgHPL+8Sc5iKp2oUvWoSCfN1/IZuEG+y8162B4jk9X+vQ7tkAC0+IH6FwYHNJm H+8KUyjJj5Cn9XlsQjwnTtVDY8/6/erv5MP2UIQubwAfyt9USzViHUYGFIXmQ1Q6 BJL1UQIjfjOPo02SWHaxRoahyrv+T6JPlMo4t44wQM4XDwOiEDKQyyRigupXCA7e hAbPD202Lz/ef/qTntHL19KoERBkp7X5TVL8qDhR1DjH90JmS4n2iUpko8OVAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU0NFwUEPcbDGMM/5cIJ7vefM4B4kwHwYDVR0j BBgwFoAUZK8VQZvV/myPl+IkqGpJF6Lm/v4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmM5YWE5NWYtN2IzOC00MjZhLTk5NjYtNTQ0MTkzOWZl MDMxLzAvNjRBRjE1NDE5QkQ1RkU2QzhGOTdFMjI0QTg2QTQ5MTdBMkU2RkVGRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1pLOFZRWnZWX215UGwtSWtxR3BKRjZM bV92NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mYzlhYTk1Zi03 YjM4LTQyNmEtOTk2Ni01NDQxOTM5ZmUwMzEvMC82NEFGMTU0MTlCRDVGRTZDOEY5 N0UyMjRBODZBNDkxN0EyRTZGRUZFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM3+lm+N05qAS6RRCrMEb hbeFFwUA3GDNMbmkjoi/0vTewTa4fXQ0EF/CGR5IJIhml7bmrdUrtZ/OEhtVD1KL AJkB9vmkIVf+4KMxKseA/GOqqSSFSKCwYcazW93NNGZpNiLrf2ox5++jBWVE48AK B7WPXfwMOawPoaugxpxxbotSdGRPJj5+zB1ssUcjnVz7XWxTpFAyXz7k3DYSIjCi aSxSD0mpyyUuOIJ+7lDPcWOdhpFZs1xSOpLojXkeNQ/mIbtykryzkHU0zYsQrgre +onrLvxr+Psko2239cikgcouk5qYkGxsD0i3vaU4puhR1yP0QLF8WQQD5vjwT2Hh 5Q== -----END CERTIFICATE-----Generated at Tue Sep 9 17:48:32 2025 by rpki-client