$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft File: 637FD1BA3FED44454D6D7030247709D28DB3491A.mft (raw, json) Hash identifier: 0GTgJBem/qNZPvBEPcaqMaSxbQWzJuNbcRPKkDiagn4= Subject key identifier: 5A:FA:BC:34:B0:E9:95:28:93:69:E5:A0:2C:36:3A:FB:7C:8D:B2:26 Authority key identifier: 63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A Certificate issuer: /CN=637fd1ba3fed44454d6d7030247709d28db3491a Certificate serial: 21D14EFC6B3C6478FA1D7B98B3024A8715AF04C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft Manifest number: 0539 Signing time: Fri 24 Jul 2026 02:20:18 +0000 Manifest this update: Fri 24 Jul 2026 02:15:18 +0000 Manifest next update: Sat 25 Jul 2026 03:46:18 +0000 Files and hashes: 1: 3133392e32382e32342e302f32342d3234203d3e20323131343430.roa (hash: eR+xyo+zY+fM9l50cFs0swlGeIX2NljYGKvE5SQX83U=) 2: 3133392e32382e32352e302f32342d3234203d3e20323131343135.roa (hash: kj5wXeF4AQFWN9fpmE1MKtBmtMRLs1TA1rGuGr1+5eA=) 3: 3133392e32382e32352e302f32342d3234203d3e20323030303137.roa (hash: WMZ7MG9ZqwsJalfql9TxbC+4SKvPKZ02fi2O1Vc8m7o=) 4: 3133392e32382e32342e302f32342d3234203d3e20323132363039.roa (hash: Fol0sGIzThvrZaKMHBeLXFldT8huOSBy9x77N8VFj2U=) 5: 637FD1BA3FED44454D6D7030247709D28DB3491A.crl (hash: QOsxvUsVa0Za8J9MlTJ50TMXFJaKKFsT8XiFcicB1Sc=) 6: 3133392e32382e32362e302f32342d3234203d3e20313337343039.roa (hash: 4dsufrRZZT3ng/M0mUxRioQsmJP0ZwUerMNQTCdj11A=) 7: 3133392e32382e32372e302f32342d3234203d3e20323036313530.roa (hash: spk6NtqPTGXoBo4XJMsULHBo1PCje3tyvN9b3jHB/pA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:d1:4e:fc:6b:3c:64:78:fa:1d:7b:98:b3:02:4a:87:15:af:04:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=637fd1ba3fed44454d6d7030247709d28db3491a Validity Not Before: Jul 24 02:15:18 2026 GMT Not After : Jul 25 03:46:18 2026 GMT Subject: CN=5AFABC34B0E995289369E5A02C363AFB7C8DB226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:9f:9c:71:73:86:6a:79:66:49:53:4a:7c:3a: c1:e3:0b:05:c8:03:d6:27:be:26:a4:d5:d8:64:8f: 70:e3:f5:c3:4f:96:6e:8b:99:24:79:cc:a8:c2:46: df:41:9d:ae:c9:1e:17:68:80:16:5d:95:5b:59:d0: 88:b3:c5:ab:f2:28:a3:8d:32:38:7b:8b:0e:17:41: fd:bd:98:78:ab:43:d1:72:48:2a:86:25:cf:a3:75: 3f:bc:ac:a8:65:5e:8c:91:8a:a8:e2:44:73:2a:5a: f5:8f:d7:55:77:60:25:e2:b8:97:13:b9:0f:cb:f8: f8:db:82:e0:06:96:0f:20:71:ae:d4:b0:af:0b:7c: 4b:8e:77:f3:1e:dd:60:d0:e0:9a:f0:ac:bf:4f:ad: 3a:44:2b:65:5f:5f:51:51:4d:ec:fd:78:9f:3b:bc: 20:92:60:0b:c7:35:54:21:48:c5:06:d7:46:96:38: bb:af:cc:c9:94:1e:46:0c:65:d3:94:38:61:25:97: 97:a5:b4:1f:03:4a:25:a3:cb:b5:84:1b:f1:8b:19: 21:7d:0c:1e:7f:04:d6:2a:0d:d3:bf:25:13:f6:01: 02:0c:17:7f:11:cb:ff:5e:ca:9c:8a:5f:27:7e:8c: c7:72:bf:ff:b2:be:8c:f0:b5:37:2f:0c:a9:d3:76: a2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:FA:BC:34:B0:E9:95:28:93:69:E5:A0:2C:36:3A:FB:7C:8D:B2:26 X509v3 Authority Key Identifier: keyid:63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:fa:e5:b5:8e:38:7c:42:7e:7e:da:b6:26:cb:f6:f5:5c:84: ca:53:3f:00:50:da:86:d0:b9:15:1a:9a:b0:ba:c2:73:18:81: f0:b2:00:71:7b:d0:7b:a0:e1:5a:5a:b9:08:93:f8:f8:c1:30: 4d:7a:6c:b9:0f:3d:6a:ee:34:a8:b5:70:10:ec:ea:64:52:25: 3c:39:af:57:7e:ed:58:6f:36:5c:6d:9f:4a:c7:6e:af:af:f6: 97:a9:78:18:a9:1c:32:b9:2e:81:88:72:dc:ea:5f:79:58:e1: 6f:ff:40:1b:95:ed:ae:03:c0:c9:47:5a:55:c6:b0:9d:40:98: 50:d5:28:f3:3e:80:3d:b4:b7:79:24:c4:1d:0c:77:93:c1:cb: 2d:fa:19:38:d2:aa:55:a6:6a:5a:62:69:5e:e8:4f:30:71:97: aa:d9:92:35:ba:d7:bc:5d:cf:1c:6a:cc:0a:10:9f:01:f0:e1: 36:da:77:2e:ba:cc:fe:c9:6a:1e:67:b1:72:e5:96:23:fc:dd: cb:5a:7e:0a:d8:68:d7:c7:dc:25:04:01:76:9e:de:63:63:8c: ae:fc:dd:a2:06:5e:f6:0d:8a:f2:30:ad:d5:05:99:44:35:0d: 7e:ec:98:89:5d:e6:2f:38:3a:a4:94:0b:18:ec:c3:7d:bf:82: f0:2a:68:d4 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUIdFO/Gs8ZHj6HXuYswJKhxWvBMcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM3ZmQxYmEzZmVkNDQ0NTRkNmQ3MDMwMjQ3NzA5ZDI4 ZGIzNDkxYTAeFw0yNjA3MjQwMjE1MThaFw0yNjA3MjUwMzQ2MThaMDMxMTAvBgNV BAMTKDVBRkFCQzM0QjBFOTk1Mjg5MzY5RTVBMDJDMzYzQUZCN0M4REIyMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxn5xxc4ZqeWZJU0p8OsHjCwXI A9Ynviak1dhkj3Dj9cNPlm6LmSR5zKjCRt9Bna7JHhdogBZdlVtZ0IizxavyKKON Mjh7iw4XQf29mHirQ9FySCqGJc+jdT+8rKhlXoyRiqjiRHMqWvWP11V3YCXiuJcT uQ/L+PjbguAGlg8gca7UsK8LfEuOd/Me3WDQ4JrwrL9PrTpEK2VfX1FRTez9eJ87 vCCSYAvHNVQhSMUG10aWOLuvzMmUHkYMZdOUOGEll5eltB8DSiWjy7WEG/GLGSF9 DB5/BNYqDdO/JRP2AQIMF38Ry/9eypyKXyd+jMdyv/+yvozwtTcvDKnTdqIZAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUWvq8NLDplSiTaeWgLDY6+3yNsiYwHwYDVR0j BBgwFoAUY3/Ruj/tREVNbXAwJHcJ0o2zSRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTk0ZGY3MTQtZDM3ZC00OTQyLThlOTQtOTFkZDg1M2Vm N2UzLzAvNjM3RkQxQkEzRkVENDQ0NTRENkQ3MDMwMjQ3NzA5RDI4REIzNDkxQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1kzX1J1al90UkVWTmJYQXdKSGNKMG8y elNSby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hOTRkZjcxNC1k MzdkLTQ5NDItOGU5NC05MWRkODUzZWY3ZTMvMC82MzdGRDFCQTNGRUQ0NDQ1NEQ2 RDcwMzAyNDc3MDlEMjhEQjM0OTFBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqPrltY44fEJ+ftq2Jsv2 9VyEylM/AFDahtC5FRqasLrCcxiB8LIAcXvQe6DhWlq5CJP4+MEwTXpsuQ89au40 qLVwEOzqZFIlPDmvV37tWG82XG2fSsdur6/2l6l4GKkcMrkugYhy3OpfeVjhb/9A G5XtrgPAyUdaVcawnUCYUNUo8z6APbS3eSTEHQx3k8HLLfoZONKqVaZqWmJpXuhP MHGXqtmSNbrXvF3PHGrMChCfAfDhNtp3LrrM/slqHmexcuWWI/zdy1p+Ctho18fc JQQBdp7eY2OMrvzdogZe9g2K8jCt1QWZRDUNfuyYiV3mLzg6pJQLGOzDfb+C8Cpo 1A== -----END CERTIFICATE-----Generated at Fri Jul 24 05:34:06 2026 by rpki-client