$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft File: 637FD1BA3FED44454D6D7030247709D28DB3491A.mft (raw, json) Hash identifier: LUrCaA/soLupLuMylRVT/4fjmAyXAp791S6m8JoT+lI= Subject key identifier: 1C:1D:89:25:17:8D:8E:6F:19:91:2D:13:D0:78:B6:11:C4:C1:B8:15 Authority key identifier: 63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A Certificate issuer: /CN=637fd1ba3fed44454d6d7030247709d28db3491a Certificate serial: 5D95799AC32020F7A4D08DF527F1415557565E7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft Manifest number: 05B0 Signing time: Tue 20 Oct 2026 17:16:42 +0000 Manifest this update: Tue 20 Oct 2026 17:11:42 +0000 Manifest next update: Wed 21 Oct 2026 20:43:42 +0000 Files and hashes: 1: 637FD1BA3FED44454D6D7030247709D28DB3491A.crl (hash: V1YJ2qwL7b8x+MWWhKIXZylqELKUH+7B517wKonvnIk=) 2: 3133392e32382e32342e302f32342d3234203d3e20323132363039.roa (hash: Fol0sGIzThvrZaKMHBeLXFldT8huOSBy9x77N8VFj2U=) 3: 3133392e32382e32372e302f32342d3234203d3e20323036313530.roa (hash: 3lBPKR1fPL+QKLXWXt2VtfNCiDnO4wDHoyHQ9q2nEqQ=) 4: 3133392e32382e32352e302f32342d3234203d3e20323030303137.roa (hash: WMZ7MG9ZqwsJalfql9TxbC+4SKvPKZ02fi2O1Vc8m7o=) 5: 3133392e32382e32362e302f32342d3234203d3e20313337343039.roa (hash: 8XVU/W55yY41HqRJQDzM1AeLQA0aWSEdX6TaV20ykxk=) 6: 3133392e32382e32342e302f32342d3234203d3e20323131343430.roa (hash: Ze9+zIwOSs8Hab73LnmLOHqax9HZbQ+ExNkPvYOX3OU=) 7: 3133392e32382e32352e302f32342d3234203d3e20323131343135.roa (hash: 7kMffwl/Ww8QHzZihIgTjgdiu2o56NccWGqsrPQPDA8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Oct 2026 17:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:95:79:9a:c3:20:20:f7:a4:d0:8d:f5:27:f1:41:55:57:56:5e:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=637fd1ba3fed44454d6d7030247709d28db3491a Validity Not Before: Oct 20 17:11:42 2026 GMT Not After : Oct 21 20:43:42 2026 GMT Subject: CN=1C1D8925178D8E6F19912D13D078B611C4C1B815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:46:bd:d5:fa:27:77:af:da:00:5e:d7:e9:aa: 45:13:fd:cf:9c:b7:7e:d0:7b:9c:da:37:ff:9b:4e: 2b:8a:ab:d2:a1:99:52:b8:e3:db:83:32:a7:70:21: 52:17:4f:b5:6f:fe:83:e6:24:b2:3d:59:59:53:d7: bf:9a:8c:58:d6:18:9c:fa:55:e7:60:4b:48:de:90: 30:bf:f1:55:ea:bd:0d:d6:d9:5e:8b:16:78:97:71: dd:80:ac:9f:80:f2:43:c1:88:92:70:7b:1f:9a:30: bd:0a:c1:9f:bb:14:bc:5a:ba:ee:62:96:df:3e:58: 1a:64:35:13:aa:83:36:22:d2:62:c4:4b:bd:73:8f: 27:c3:57:26:fe:8d:d4:e2:ef:79:14:95:6d:82:a7: f2:25:96:ab:ec:7e:3d:04:c4:b7:88:78:aa:71:c8: 02:9a:7b:3b:13:14:77:c9:1e:d1:e3:45:72:5f:5a: 28:3e:b5:3c:fa:06:d5:b6:4a:11:09:ad:66:c9:c2: c0:34:14:61:b0:52:7b:7a:43:17:8d:5a:f3:7b:c6: 94:64:26:a0:98:7d:0f:7e:a0:2a:0f:cb:49:60:6a: 22:2b:c4:83:7e:07:6b:01:61:2c:b9:bc:14:15:74: ab:35:af:db:9c:1c:63:9d:0e:a7:d4:2a:ea:a4:c3: 8f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:1D:89:25:17:8D:8E:6F:19:91:2D:13:D0:78:B6:11:C4:C1:B8:15 X509v3 Authority Key Identifier: keyid:63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:ec:d3:34:5f:e3:d4:b6:a6:10:2c:89:ce:7b:46:1e:f1:7f: 26:f1:dc:8c:bd:d5:d2:67:4e:7b:2f:f1:35:ec:70:2e:f7:60: 4c:73:99:0f:63:75:03:56:d2:ba:9b:f9:3e:e9:a1:87:19:e3: 03:21:ee:d6:66:c1:53:4d:f1:2b:52:8f:75:96:36:21:98:d9: d5:a2:fb:4c:9d:df:5e:53:f0:01:03:c7:10:78:30:d2:a4:25: 5c:03:26:70:97:b8:86:93:5e:38:a6:44:92:19:0c:1f:b0:ad: 84:b0:a0:11:28:de:6f:e1:17:9e:18:42:86:d0:b0:2a:e3:d6: e4:58:33:21:98:ea:31:cf:8f:0b:2a:0d:d2:ca:e6:db:4b:e3: 23:a6:84:12:29:f3:f2:8c:c1:f4:97:c9:80:79:6b:27:fb:b2: 67:fd:e6:41:56:f0:39:d4:70:fc:6d:84:ad:79:85:91:d5:ad: 72:aa:63:11:04:52:16:ef:9e:c7:f6:bb:31:9e:b1:3f:b4:c6: c7:71:8e:8e:dd:dc:ff:e3:4a:71:f0:a7:59:5f:e9:c4:71:5a: ed:37:a4:1a:68:96:b2:89:5b:61:23:c5:ce:6e:e5:19:ca:07: 41:45:6b:c5:0f:94:50:2e:85:69:67:6e:7c:c0:b4:39:e4:bc: 43:04:26:96 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUXZV5msMgIPek0I31J/FBVVdWXn0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM3ZmQxYmEzZmVkNDQ0NTRkNmQ3MDMwMjQ3NzA5ZDI4 ZGIzNDkxYTAeFw0yNjEwMjAxNzExNDJaFw0yNjEwMjEyMDQzNDJaMDMxMTAvBgNV BAMTKDFDMUQ4OTI1MTc4RDhFNkYxOTkxMkQxM0QwNzhCNjExQzRDMUI4MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzRr3V+id3r9oAXtfpqkUT/c+c t37Qe5zaN/+bTiuKq9KhmVK449uDMqdwIVIXT7Vv/oPmJLI9WVlT17+ajFjWGJz6 VedgS0jekDC/8VXqvQ3W2V6LFniXcd2ArJ+A8kPBiJJwex+aML0KwZ+7FLxauu5i lt8+WBpkNROqgzYi0mLES71zjyfDVyb+jdTi73kUlW2Cp/Illqvsfj0ExLeIeKpx yAKaezsTFHfJHtHjRXJfWig+tTz6BtW2ShEJrWbJwsA0FGGwUnt6QxeNWvN7xpRk JqCYfQ9+oCoPy0lgaiIrxIN+B2sBYSy5vBQVdKs1r9ucHGOdDqfUKuqkw49rAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUHB2JJReNjm8ZkS0T0Hi2EcTBuBUwHwYDVR0j BBgwFoAUY3/Ruj/tREVNbXAwJHcJ0o2zSRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTk0ZGY3MTQtZDM3ZC00OTQyLThlOTQtOTFkZDg1M2Vm N2UzLzAvNjM3RkQxQkEzRkVENDQ0NTRENkQ3MDMwMjQ3NzA5RDI4REIzNDkxQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1kzX1J1al90UkVWTmJYQXdKSGNKMG8y elNSby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hOTRkZjcxNC1k MzdkLTQ5NDItOGU5NC05MWRkODUzZWY3ZTMvMC82MzdGRDFCQTNGRUQ0NDQ1NEQ2 RDcwMzAyNDc3MDlEMjhEQjM0OTFBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOOzTNF/j1LamECyJzntG HvF/JvHcjL3V0mdOey/xNexwLvdgTHOZD2N1A1bSupv5PumhhxnjAyHu1mbBU03x K1KPdZY2IZjZ1aL7TJ3fXlPwAQPHEHgw0qQlXAMmcJe4hpNeOKZEkhkMH7CthLCg ESjeb+EXnhhChtCwKuPW5FgzIZjqMc+PCyoN0srm20vjI6aEEinz8ozB9JfJgHlr J/uyZ/3mQVbwOdRw/G2ErXmFkdWtcqpjEQRSFu+ex/a7MZ6xP7TGx3GOjt3c/+NK cfCnWV/pxHFa7TekGmiWsolbYSPFzm7lGcoHQUVrxQ+UUC6FaWdufMC0OeS8QwQm lg== -----END CERTIFICATE-----Generated at Tue Oct 20 20:47:39 2026 by rpki-client