$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft File: 637FD1BA3FED44454D6D7030247709D28DB3491A.mft (raw, json) Hash identifier: OowKSz9R5GThTkKErv6DzyMYVByRXnP8CHvn0CX96Rw= Subject key identifier: 49:DD:98:94:AD:D8:5B:43:0C:23:60:E8:46:C6:F3:C5:97:D9:2E:56 Authority key identifier: 63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A Certificate issuer: /CN=637fd1ba3fed44454d6d7030247709d28db3491a Certificate serial: 01342042F215AC0BCDAD364DC3A518839D2D5556 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft Manifest number: 058D Signing time: Wed 23 Sep 2026 22:40:53 +0000 Manifest this update: Wed 23 Sep 2026 22:35:53 +0000 Manifest next update: Thu 24 Sep 2026 22:45:53 +0000 Files and hashes: 1: 3133392e32382e32342e302f32342d3234203d3e20323132363039.roa (hash: Fol0sGIzThvrZaKMHBeLXFldT8huOSBy9x77N8VFj2U=) 2: 3133392e32382e32352e302f32342d3234203d3e20323131343135.roa (hash: 7kMffwl/Ww8QHzZihIgTjgdiu2o56NccWGqsrPQPDA8=) 3: 3133392e32382e32352e302f32342d3234203d3e20323030303137.roa (hash: WMZ7MG9ZqwsJalfql9TxbC+4SKvPKZ02fi2O1Vc8m7o=) 4: 3133392e32382e32372e302f32342d3234203d3e20323036313530.roa (hash: 3lBPKR1fPL+QKLXWXt2VtfNCiDnO4wDHoyHQ9q2nEqQ=) 5: 3133392e32382e32362e302f32342d3234203d3e20313337343039.roa (hash: 8XVU/W55yY41HqRJQDzM1AeLQA0aWSEdX6TaV20ykxk=) 6: 3133392e32382e32342e302f32342d3234203d3e20323131343430.roa (hash: Ze9+zIwOSs8Hab73LnmLOHqax9HZbQ+ExNkPvYOX3OU=) 7: 637FD1BA3FED44454D6D7030247709D28DB3491A.crl (hash: 2zgKRvJveAJAIRhMJhmDO3lMxwaELGmSMA7ox+IyuVQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 22:45:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:34:20:42:f2:15:ac:0b:cd:ad:36:4d:c3:a5:18:83:9d:2d:55:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=637fd1ba3fed44454d6d7030247709d28db3491a Validity Not Before: Sep 23 22:35:53 2026 GMT Not After : Sep 24 22:45:53 2026 GMT Subject: CN=49DD9894ADD85B430C2360E846C6F3C597D92E56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9e:20:8d:df:2d:a3:8b:2a:10:34:96:3b:39: 31:81:3b:c6:61:be:16:a2:8c:05:a0:e9:28:4a:f8: bb:c8:a7:9e:68:38:e3:19:08:a7:a8:1d:52:e1:ef: c6:70:33:88:a4:f0:53:c7:b4:20:0d:c4:fb:4c:5b: 7e:66:bc:69:c4:c7:db:03:3c:ae:31:7c:22:44:9f: 8c:eb:89:94:6a:b7:b2:d7:87:66:ba:4b:08:1b:8c: 99:c7:4c:ae:d6:0b:0e:ff:39:01:80:b0:c2:05:51: 51:84:78:7f:6a:b7:8b:09:5a:4b:03:3d:29:79:0e: 2f:1a:7c:1d:75:c2:a1:36:ce:f7:f9:0e:4b:ae:1a: 5b:36:4f:d0:45:f2:49:e2:7c:bb:99:72:31:48:3a: 41:53:0e:7a:f3:d7:a2:1b:d5:cb:52:40:fb:42:44: b9:37:ad:9d:ec:80:23:79:cf:5b:c4:2b:17:9f:07: 3b:c8:f4:67:03:90:cb:74:cf:01:45:85:b9:65:0d: 2b:13:45:0f:ae:d4:09:6c:df:b4:8e:47:66:cd:27: b5:34:cf:20:e9:4b:5e:d7:26:ff:b9:3d:8b:55:37: 26:af:f7:65:b3:09:05:ef:c7:fb:69:9a:a2:c6:46: 69:25:9a:55:0d:7a:0d:ff:e3:00:53:09:48:51:b9: 1a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:DD:98:94:AD:D8:5B:43:0C:23:60:E8:46:C6:F3:C5:97:D9:2E:56 X509v3 Authority Key Identifier: keyid:63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:99:60:13:9a:08:79:1d:a2:28:71:f0:2b:ca:ee:f9:1e:16: 75:4c:ff:f3:87:4b:b0:7d:c3:d4:c9:fa:1e:71:cf:f9:22:41: e2:c7:70:e4:2c:5f:a9:4f:47:ca:09:8b:43:ac:44:0b:60:fd: 2d:25:fe:fa:d6:58:95:c0:0f:47:9b:2f:85:90:f0:75:3e:14: 0c:e8:42:55:10:ec:e8:14:ad:f1:b2:25:8c:b6:73:34:32:b1: 08:43:f7:62:aa:6b:aa:fd:e6:d9:b6:73:3a:9a:63:f1:66:3b: 31:52:92:ae:04:82:82:ad:15:d6:5d:54:50:f8:5e:d8:58:86: 00:08:55:61:39:bb:ca:28:68:d8:18:da:b7:36:7a:59:a0:aa: 91:c1:95:73:2a:a0:33:cc:42:eb:cb:db:d7:43:4f:ec:47:1f: cf:a4:ff:3e:58:3d:09:7b:38:cb:2c:06:39:0b:f5:2a:68:ed: 4d:5c:06:d6:f6:f2:dc:1a:7e:0f:24:fa:a2:43:e0:5b:43:93: 6f:4c:f6:75:75:22:15:c2:e2:23:97:98:36:01:95:3e:39:e3: 6c:32:6f:35:0d:36:63:e2:c0:dc:ef:18:c3:e3:a4:df:a0:fc: 31:19:99:be:66:dd:d0:d0:17:bf:52:ed:6b:37:44:5f:6b:fa: 2e:ff:20:7a -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUATQgQvIVrAvNrTZNw6UYg50tVVYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM3ZmQxYmEzZmVkNDQ0NTRkNmQ3MDMwMjQ3NzA5ZDI4 ZGIzNDkxYTAeFw0yNjA5MjMyMjM1NTNaFw0yNjA5MjQyMjQ1NTNaMDMxMTAvBgNV BAMTKDQ5REQ5ODk0QUREODVCNDMwQzIzNjBFODQ2QzZGM0M1OTdEOTJFNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzniCN3y2jiyoQNJY7OTGBO8Zh vhaijAWg6ShK+LvIp55oOOMZCKeoHVLh78ZwM4ik8FPHtCANxPtMW35mvGnEx9sD PK4xfCJEn4zriZRqt7LXh2a6SwgbjJnHTK7WCw7/OQGAsMIFUVGEeH9qt4sJWksD PSl5Di8afB11wqE2zvf5DkuuGls2T9BF8knifLuZcjFIOkFTDnrz16Ib1ctSQPtC RLk3rZ3sgCN5z1vEKxefBzvI9GcDkMt0zwFFhbllDSsTRQ+u1Als37SOR2bNJ7U0 zyDpS17XJv+5PYtVNyav92WzCQXvx/tpmqLGRmklmlUNeg3/4wBTCUhRuRoFAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUSd2YlK3YW0MMI2DoRsbzxZfZLlYwHwYDVR0j BBgwFoAUY3/Ruj/tREVNbXAwJHcJ0o2zSRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTk0ZGY3MTQtZDM3ZC00OTQyLThlOTQtOTFkZDg1M2Vm N2UzLzAvNjM3RkQxQkEzRkVENDQ0NTRENkQ3MDMwMjQ3NzA5RDI4REIzNDkxQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1kzX1J1al90UkVWTmJYQXdKSGNKMG8y elNSby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hOTRkZjcxNC1k MzdkLTQ5NDItOGU5NC05MWRkODUzZWY3ZTMvMC82MzdGRDFCQTNGRUQ0NDQ1NEQ2 RDcwMzAyNDc3MDlEMjhEQjM0OTFBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEplgE5oIeR2iKHHwK8ru +R4WdUz/84dLsH3D1Mn6HnHP+SJB4sdw5CxfqU9HygmLQ6xEC2D9LSX++tZYlcAP R5svhZDwdT4UDOhCVRDs6BSt8bIljLZzNDKxCEP3Yqprqv3m2bZzOppj8WY7MVKS rgSCgq0V1l1UUPhe2FiGAAhVYTm7yiho2BjatzZ6WaCqkcGVcyqgM8xC68vb10NP 7Ecfz6T/Plg9CXs4yywGOQv1KmjtTVwG1vby3Bp+DyT6okPgW0OTb0z2dXUiFcLi I5eYNgGVPjnjbDJvNQ02Y+LA3O8Yw+Ok36D8MRmZvmbd0NAXv1LtazdEX2v6Lv8g eg== -----END CERTIFICATE-----Generated at Thu Sep 24 06:09:47 2026 by rpki-client