$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft File: 637FD1BA3FED44454D6D7030247709D28DB3491A.mft (raw, json) Hash identifier: MgSYSCDO7CfQf4bWYwtN8w9eYbIn9tlMrKf3sb3sOr0= Subject key identifier: A1:F4:BF:6B:33:E4:02:1C:AF:6B:8E:D7:57:01:83:A5:14:D8:0C:24 Authority key identifier: 63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A Certificate issuer: /CN=637fd1ba3fed44454d6d7030247709d28db3491a Certificate serial: 3D886DD818084973E0EC6953D81B761344CDF404 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft Manifest number: 04DE Signing time: Sat 16 May 2026 07:32:11 +0000 Manifest this update: Sat 16 May 2026 07:27:11 +0000 Manifest next update: Sun 17 May 2026 10:30:11 +0000 Files and hashes: 1: 3133392e32382e32372e302f32342d3234203d3e20323036313530.roa (hash: spk6NtqPTGXoBo4XJMsULHBo1PCje3tyvN9b3jHB/pA=) 2: 3133392e32382e32352e302f32342d3234203d3e20323131343135.roa (hash: kj5wXeF4AQFWN9fpmE1MKtBmtMRLs1TA1rGuGr1+5eA=) 3: 637FD1BA3FED44454D6D7030247709D28DB3491A.crl (hash: 8Pw6ejsXIuMbgsZSXsDGYaCqqBT83Ypphma+tdutfs8=) 4: 3133392e32382e32342e302f32342d3234203d3e20323131343430.roa (hash: eR+xyo+zY+fM9l50cFs0swlGeIX2NljYGKvE5SQX83U=) 5: 3133392e32382e32352e302f32342d3234203d3e20323030303137.roa (hash: WMZ7MG9ZqwsJalfql9TxbC+4SKvPKZ02fi2O1Vc8m7o=) 6: 3133392e32382e32342e302f32342d3234203d3e20323132363039.roa (hash: Fol0sGIzThvrZaKMHBeLXFldT8huOSBy9x77N8VFj2U=) 7: 3133392e32382e32362e302f32342d3234203d3e20313337343039.roa (hash: 4dsufrRZZT3ng/M0mUxRioQsmJP0ZwUerMNQTCdj11A=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 17 May 2026 10:30:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:88:6d:d8:18:08:49:73:e0:ec:69:53:d8:1b:76:13:44:cd:f4:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=637fd1ba3fed44454d6d7030247709d28db3491a Validity Not Before: May 16 07:27:11 2026 GMT Not After : May 17 10:30:11 2026 GMT Subject: CN=A1F4BF6B33E4021CAF6B8ED7570183A514D80C24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:9a:af:05:9a:50:5c:c4:9b:c7:11:ad:f6:d3: ad:d4:cd:ce:6d:41:01:10:a1:83:b8:04:5f:56:e5: 10:cf:39:dc:ac:77:cb:2f:ab:b5:f3:c3:d6:62:c9: 0e:83:b0:9a:8a:a1:7b:87:c0:f1:40:35:ba:34:1b: 50:b4:7c:20:d4:7e:c2:9a:9b:61:ba:7a:19:97:48: 3c:30:b8:d7:42:c2:03:a5:84:7d:f7:05:ea:f3:1b: 70:4f:af:2f:e2:06:ba:ba:fd:76:2d:a6:10:b7:f0: 97:4a:c6:79:7e:86:b7:23:00:fb:05:1d:54:16:4c: 99:3f:97:f9:b6:9c:f0:13:31:06:40:a2:81:80:ce: 6d:10:75:cc:92:6e:fc:4d:17:de:44:3f:25:6d:8f: 05:2e:3c:89:e8:38:11:c6:cc:ef:e9:5c:d3:2b:0d: 84:e2:fa:91:52:e8:39:6f:7c:6b:d0:44:9d:57:8a: fe:74:30:11:93:2d:f5:cc:35:75:1b:78:57:3a:b8: ef:71:48:5f:4a:fc:cc:6b:ae:67:81:34:15:f8:5d: 3a:69:b3:e1:a1:20:3e:1f:12:58:b4:a8:23:f8:34: 8d:f7:30:72:53:43:27:6c:49:0c:85:88:6f:06:3c: d3:ce:af:3c:f0:32:2e:69:41:52:95:79:ca:a2:3c: 88:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:F4:BF:6B:33:E4:02:1C:AF:6B:8E:D7:57:01:83:A5:14:D8:0C:24 X509v3 Authority Key Identifier: keyid:63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:5b:f0:c1:29:c1:83:5d:a2:83:1b:33:1c:b4:2d:d0:0f:8e: 70:86:0b:49:8e:9f:35:dd:b7:24:cb:27:06:56:0d:99:e9:92: 04:ca:0d:69:8d:55:82:1a:bb:b9:af:09:f2:36:8b:ab:46:14: af:84:6d:ba:c9:33:1d:7b:bb:fe:2b:73:ac:98:4d:34:51:bd: 40:39:48:12:49:1f:8c:d7:f7:ce:7d:95:b1:5d:01:26:79:fa: 46:0f:a6:42:5a:1a:41:15:7a:7c:16:65:aa:bb:a1:17:06:7d: 1a:01:d6:03:11:4d:20:51:29:b6:34:33:5c:1b:9c:d3:35:b4: 61:fd:61:7f:7e:95:4c:14:5c:f3:82:43:86:30:e6:41:8f:fc: 9c:dd:d0:b1:79:d3:05:0e:5a:e3:4a:11:79:35:5d:04:51:36: 24:df:70:4c:d4:f9:8b:83:a0:63:ee:43:6c:9a:54:2f:e8:ad: 44:a2:d3:4f:83:99:b9:9f:33:14:71:85:79:30:95:ab:0b:28: d6:de:0f:e7:76:a0:23:55:72:0a:f9:1f:0b:a2:b5:0d:46:fe: 61:32:ef:a9:13:91:d3:b4:21:87:5a:a4:0e:fc:20:11:2d:bc: a0:38:67:e3:43:ed:a4:64:98:ab:48:cb:a2:9b:bd:0e:c9:c4: a1:7f:5e:2c -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUPYht2BgISXPg7GlT2Bt2E0TN9AQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM3ZmQxYmEzZmVkNDQ0NTRkNmQ3MDMwMjQ3NzA5ZDI4 ZGIzNDkxYTAeFw0yNjA1MTYwNzI3MTFaFw0yNjA1MTcxMDMwMTFaMDMxMTAvBgNV BAMTKEExRjRCRjZCMzNFNDAyMUNBRjZCOEVENzU3MDE4M0E1MTREODBDMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcmq8FmlBcxJvHEa32063Uzc5t QQEQoYO4BF9W5RDPOdysd8svq7Xzw9ZiyQ6DsJqKoXuHwPFANbo0G1C0fCDUfsKa m2G6ehmXSDwwuNdCwgOlhH33BerzG3BPry/iBrq6/XYtphC38JdKxnl+hrcjAPsF HVQWTJk/l/m2nPATMQZAooGAzm0QdcySbvxNF95EPyVtjwUuPInoOBHGzO/pXNMr DYTi+pFS6DlvfGvQRJ1Xiv50MBGTLfXMNXUbeFc6uO9xSF9K/MxrrmeBNBX4XTpp s+GhID4fEli0qCP4NI33MHJTQydsSQyFiG8GPNPOrzzwMi5pQVKVecqiPIitAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUofS/azPkAhyva47XVwGDpRTYDCQwHwYDVR0j BBgwFoAUY3/Ruj/tREVNbXAwJHcJ0o2zSRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTk0ZGY3MTQtZDM3ZC00OTQyLThlOTQtOTFkZDg1M2Vm N2UzLzAvNjM3RkQxQkEzRkVENDQ0NTRENkQ3MDMwMjQ3NzA5RDI4REIzNDkxQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1kzX1J1al90UkVWTmJYQXdKSGNKMG8y elNSby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hOTRkZjcxNC1k MzdkLTQ5NDItOGU5NC05MWRkODUzZWY3ZTMvMC82MzdGRDFCQTNGRUQ0NDQ1NEQ2 RDcwMzAyNDc3MDlEMjhEQjM0OTFBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG1vwwSnBg12igxszHLQt 0A+OcIYLSY6fNd23JMsnBlYNmemSBMoNaY1Vghq7ua8J8jaLq0YUr4RtuskzHXu7 /itzrJhNNFG9QDlIEkkfjNf3zn2VsV0BJnn6Rg+mQloaQRV6fBZlqruhFwZ9GgHW AxFNIFEptjQzXBuc0zW0Yf1hf36VTBRc84JDhjDmQY/8nN3QsXnTBQ5a40oReTVd BFE2JN9wTNT5i4OgY+5DbJpUL+itRKLTT4OZuZ8zFHGFeTCVqwso1t4P53agI1Vy CvkfC6K1DUb+YTLvqROR07Qhh1qkDvwgES28oDhn40PtpGSYq0jLopu9DsnEoX9e LA== -----END CERTIFICATE-----Generated at Sat May 16 21:12:54 2026 by rpki-client