$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft File: 637FD1BA3FED44454D6D7030247709D28DB3491A.mft (raw, json) Hash identifier: XOwUkk7WKvQ43icgnOfjhL6UE6vE6OUyjQF7HgQ4sZo= Subject key identifier: 73:F3:64:3D:A9:52:76:38:7D:97:E0:97:4B:B3:88:14:FF:B7:C3:DE Authority key identifier: 63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A Certificate issuer: /CN=637fd1ba3fed44454d6d7030247709d28db3491a Certificate serial: 382DA3A93F747815DC4AB4206D2548D5EC1CE963 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft Manifest number: 049D Signing time: Sun 29 Mar 2026 00:00:38 +0000 Manifest this update: Sat 28 Mar 2026 23:55:38 +0000 Manifest next update: Mon 30 Mar 2026 02:00:38 +0000 Files and hashes: 1: 3133392e32382e32352e302f32342d3234203d3e20323131343135.roa (hash: kj5wXeF4AQFWN9fpmE1MKtBmtMRLs1TA1rGuGr1+5eA=) 2: 3133392e32382e32352e302f32342d3234203d3e20323030303137.roa (hash: KTt7IBC5OKuP6muE0/6zCxuIwEkqcnypdMUhBFAyx18=) 3: 3133392e32382e32372e302f32342d3234203d3e20323036313530.roa (hash: spk6NtqPTGXoBo4XJMsULHBo1PCje3tyvN9b3jHB/pA=) 4: 3133392e32382e32342e302f32342d3234203d3e20323131343430.roa (hash: eR+xyo+zY+fM9l50cFs0swlGeIX2NljYGKvE5SQX83U=) 5: 3133392e32382e32342e302f32342d3234203d3e20323132363039.roa (hash: Zbml066pXi3G2h7cDhaY/zBOXtPP1DXZek0hCHsXFhc=) 6: 637FD1BA3FED44454D6D7030247709D28DB3491A.crl (hash: A69RFxGoQW5VbnTdKV6h4kkRM+bIWNchdEpT8cA/ddA=) 7: 3133392e32382e32362e302f32342d3234203d3e20313337343039.roa (hash: 4dsufrRZZT3ng/M0mUxRioQsmJP0ZwUerMNQTCdj11A=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 02:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:2d:a3:a9:3f:74:78:15:dc:4a:b4:20:6d:25:48:d5:ec:1c:e9:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=637fd1ba3fed44454d6d7030247709d28db3491a Validity Not Before: Mar 28 23:55:38 2026 GMT Not After : Mar 30 02:00:38 2026 GMT Subject: CN=73F3643DA95276387D97E0974BB38814FFB7C3DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0d:d8:b1:46:45:9a:f5:02:57:8e:9e:cc:52: dd:5a:2d:3e:21:66:15:6f:a4:8b:5e:c7:1a:c0:c1: 60:22:1f:a4:6b:33:51:2f:6c:b3:15:9a:db:8f:14: 67:58:00:b4:07:02:d7:4c:d0:1f:e5:53:a1:39:c3: 05:4d:2d:30:a5:a0:b9:f3:ac:30:b7:6d:d2:e6:65: aa:55:fa:1c:3f:61:ff:a4:dc:74:31:09:66:ef:9f: 09:2f:65:31:69:5a:a3:06:a3:53:a4:9c:9d:76:c5: 55:6b:8f:63:2f:e8:56:a3:46:8d:fb:8e:d2:9d:5c: 24:bb:9d:eb:eb:0e:1d:76:e4:f4:8e:4c:0e:a6:ef: e3:d5:4b:e1:fd:82:7d:37:ee:ff:66:97:83:44:80: 95:fc:a6:ec:ef:ed:4d:95:f1:b7:77:9d:9d:08:7a: 73:0a:c0:97:71:15:c5:b9:97:69:94:b6:b9:03:22: f0:7c:46:64:80:99:97:23:dc:8e:5f:c6:9a:55:4a: 0f:b6:d2:51:9d:cd:86:0f:53:50:3f:67:75:c9:ed: 09:90:fa:78:7d:15:f7:d6:99:70:10:50:b4:4e:06: 54:14:d8:88:67:7c:52:e0:df:7d:54:47:40:f3:0b: f3:9e:af:a7:89:cd:6b:69:cf:e5:39:51:b5:c1:5f: b8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:F3:64:3D:A9:52:76:38:7D:97:E0:97:4B:B3:88:14:FF:B7:C3:DE X509v3 Authority Key Identifier: keyid:63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:86:04:03:8c:09:76:7c:b6:cc:3a:d0:18:7f:34:d1:68:9a: 1b:68:8f:64:1c:4a:29:d9:49:dc:6c:aa:4f:85:cf:7c:07:29: c2:0b:7f:c1:e1:dd:56:69:64:6f:28:50:33:62:f8:f7:19:b8: 88:05:db:9b:20:7f:d1:0a:9b:c0:2d:e5:a5:c4:66:ec:69:e3: 3f:29:e4:d2:37:4f:63:d4:ac:ad:a0:7f:af:04:54:93:58:4c: 60:a7:57:48:81:30:e5:c7:60:c0:b2:be:cf:66:0d:28:aa:26: 45:5b:b9:6d:49:6e:4a:38:ee:95:5a:d5:6e:b5:26:52:14:40: d9:ae:34:10:eb:08:73:4e:65:a2:55:fb:80:61:be:b6:c7:6f: f4:ac:a3:9c:aa:7c:1e:0f:a9:5b:cb:3a:a6:2e:c7:03:e6:1c: dc:a5:51:05:ef:23:2b:b7:ab:b8:ff:6a:17:9e:89:23:48:97: 46:ea:ab:e9:60:12:92:97:97:27:a8:81:77:18:0b:8c:cf:52: ee:de:92:2f:3e:f0:89:99:74:d0:8f:aa:65:7f:61:b1:b6:cb: c5:cf:6e:ba:ab:9d:55:6c:e2:0f:16:6f:da:72:ba:e6:70:ab: fb:99:83:df:8a:8c:fa:81:a0:76:53:59:04:1f:d7:c8:67:5d: 24:86:94:fe -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUOC2jqT90eBXcSrQgbSVI1ewc6WMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM3ZmQxYmEzZmVkNDQ0NTRkNmQ3MDMwMjQ3NzA5ZDI4 ZGIzNDkxYTAeFw0yNjAzMjgyMzU1MzhaFw0yNjAzMzAwMjAwMzhaMDMxMTAvBgNV BAMTKDczRjM2NDNEQTk1Mjc2Mzg3RDk3RTA5NzRCQjM4ODE0RkZCN0MzREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSDdixRkWa9QJXjp7MUt1aLT4h ZhVvpItexxrAwWAiH6RrM1EvbLMVmtuPFGdYALQHAtdM0B/lU6E5wwVNLTCloLnz rDC3bdLmZapV+hw/Yf+k3HQxCWbvnwkvZTFpWqMGo1OknJ12xVVrj2Mv6FajRo37 jtKdXCS7nevrDh125PSOTA6m7+PVS+H9gn037v9ml4NEgJX8puzv7U2V8bd3nZ0I enMKwJdxFcW5l2mUtrkDIvB8RmSAmZcj3I5fxppVSg+20lGdzYYPU1A/Z3XJ7QmQ +nh9FffWmXAQULROBlQU2IhnfFLg331UR0DzC/Oer6eJzWtpz+U5UbXBX7jjAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUc/NkPalSdjh9l+CXS7OIFP+3w94wHwYDVR0j BBgwFoAUY3/Ruj/tREVNbXAwJHcJ0o2zSRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTk0ZGY3MTQtZDM3ZC00OTQyLThlOTQtOTFkZDg1M2Vm N2UzLzAvNjM3RkQxQkEzRkVENDQ0NTRENkQ3MDMwMjQ3NzA5RDI4REIzNDkxQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1kzX1J1al90UkVWTmJYQXdKSGNKMG8y elNSby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hOTRkZjcxNC1k MzdkLTQ5NDItOGU5NC05MWRkODUzZWY3ZTMvMC82MzdGRDFCQTNGRUQ0NDQ1NEQ2 RDcwMzAyNDc3MDlEMjhEQjM0OTFBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn4YEA4wJdny2zDrQGH80 0WiaG2iPZBxKKdlJ3GyqT4XPfAcpwgt/weHdVmlkbyhQM2L49xm4iAXbmyB/0Qqb wC3lpcRm7GnjPynk0jdPY9SsraB/rwRUk1hMYKdXSIEw5cdgwLK+z2YNKKomRVu5 bUluSjjulVrVbrUmUhRA2a40EOsIc05lolX7gGG+tsdv9KyjnKp8Hg+pW8s6pi7H A+Yc3KVRBe8jK7eruP9qF56JI0iXRuqr6WASkpeXJ6iBdxgLjM9S7t6SLz7wiZl0 0I+qZX9hsbbLxc9uuqudVWziDxZv2nK65nCr+5mD34qM+oGgdlNZBB/XyGddJIaU /g== -----END CERTIFICATE-----Generated at Sun Mar 29 12:30:47 2026 by rpki-client