$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft File: 637FD1BA3FED44454D6D7030247709D28DB3491A.mft (raw, json) Hash identifier: s1SfNRI+SFDGAkUwnNv0GsNiW/lQRgsm02c57z+1M0E= Subject key identifier: 84:ED:44:5B:EA:43:DE:C1:7E:A1:AB:EA:3B:E3:0F:E9:C3:FD:5B:45 Authority key identifier: 63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A Certificate issuer: /CN=637fd1ba3fed44454d6d7030247709d28db3491a Certificate serial: 0DB6F648641C987990747CF2AD65446AC9091CCB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft Manifest number: 05D1 Signing time: Sat 14 Nov 2026 18:00:01 +0000 Manifest this update: Sat 14 Nov 2026 17:55:01 +0000 Manifest next update: Sun 15 Nov 2026 20:32:01 +0000 Files and hashes: 1: 3133392e32382e32352e302f32342d3234203d3e20323030303137.roa (hash: WMZ7MG9ZqwsJalfql9TxbC+4SKvPKZ02fi2O1Vc8m7o=) 2: 3133392e32382e32362e302f32342d3234203d3e20313337343039.roa (hash: 8XVU/W55yY41HqRJQDzM1AeLQA0aWSEdX6TaV20ykxk=) 3: 3133392e32382e32342e302f32342d3234203d3e20323132363039.roa (hash: Fol0sGIzThvrZaKMHBeLXFldT8huOSBy9x77N8VFj2U=) 4: 637FD1BA3FED44454D6D7030247709D28DB3491A.crl (hash: XoOcMgEVoZUbcMBV4P2mzYeMQH71c4uoxkNJDcV9w2I=) 5: 3133392e32382e32342e302f32342d3234203d3e20323131343430.roa (hash: Ze9+zIwOSs8Hab73LnmLOHqax9HZbQ+ExNkPvYOX3OU=) 6: 3133392e32382e32352e302f32342d3234203d3e20323131343135.roa (hash: 7kMffwl/Ww8QHzZihIgTjgdiu2o56NccWGqsrPQPDA8=) 7: 3133392e32382e32372e302f32342d3234203d3e20323036313530.roa (hash: 3lBPKR1fPL+QKLXWXt2VtfNCiDnO4wDHoyHQ9q2nEqQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 20:32:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:b6:f6:48:64:1c:98:79:90:74:7c:f2:ad:65:44:6a:c9:09:1c:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=637fd1ba3fed44454d6d7030247709d28db3491a Validity Not Before: Nov 14 17:55:01 2026 GMT Not After : Nov 15 20:32:01 2026 GMT Subject: CN=84ED445BEA43DEC17EA1ABEA3BE30FE9C3FD5B45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:02:ca:f6:7e:c9:06:69:2b:1a:1b:b3:e8:cb: ce:26:b1:ef:61:ed:0c:e6:9d:06:bb:dc:a1:04:d8: 90:ff:ce:62:cc:c7:e8:c5:99:81:5f:b9:50:9e:0a: 1e:db:b8:7b:b3:4e:6c:09:b8:de:e2:e1:03:83:19: 20:d4:96:98:c3:9f:1c:c6:ab:4a:65:13:59:8b:16: 15:81:a3:4f:d3:37:30:f0:78:0f:19:ea:e6:a4:70: c0:a1:5d:aa:f4:a7:9c:9b:e2:88:0e:d0:17:36:35: 56:f9:59:88:89:6c:10:a4:11:a2:0e:28:cd:1f:fa: ab:52:4f:aa:72:2d:5f:26:5a:96:55:e5:af:3b:74: f7:24:f7:c9:4b:84:ac:59:8c:59:37:24:7b:65:94: 53:83:71:96:8f:e0:2a:e1:b6:8e:76:c2:9f:31:bc: 73:35:68:65:2a:44:6a:23:56:ea:69:e2:09:20:6c: 09:b1:6e:d3:dd:08:92:89:9e:fc:72:96:99:ee:d5: 37:11:d8:90:45:b4:63:7c:f8:f9:2e:39:34:dd:fe: 7e:65:61:3b:9b:7d:18:4a:b3:e6:8f:e4:7a:d7:f5: 9e:b6:55:54:af:d8:14:02:48:91:a9:cd:83:f4:63: 30:3d:87:80:00:89:9f:48:4a:8f:c2:db:2b:00:d1: 7d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:ED:44:5B:EA:43:DE:C1:7E:A1:AB:EA:3B:E3:0F:E9:C3:FD:5B:45 X509v3 Authority Key Identifier: keyid:63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:06:94:df:98:03:c6:73:23:ba:96:8c:5f:68:3d:56:8b:ed: 58:9b:af:10:83:e7:f1:96:8b:d6:40:6b:15:bd:fa:5c:69:43: bf:e8:cb:be:6c:7f:ca:34:99:8b:dc:80:1a:c5:97:c6:27:3f: 0c:c0:1c:87:d0:89:91:f0:51:19:47:33:0e:21:ae:35:f7:52: d3:15:2d:62:37:18:61:73:a0:ca:34:9e:e5:30:68:f1:ce:2a: 61:67:60:bd:37:5f:7b:89:d2:2d:49:72:44:e1:0f:97:9a:c5: 28:c1:77:32:22:59:0b:26:f8:5d:5f:dd:1e:34:99:f5:d5:ad: 91:ee:90:3a:b8:f8:96:5b:e8:3d:fb:f2:d7:58:c9:71:b8:bf: ae:c2:6b:b4:7a:c4:f4:28:ff:0c:68:81:7b:75:4c:ba:e9:6d: c8:db:ce:85:52:e2:d1:3f:fb:06:a4:6d:a3:ed:d4:b1:ae:95: 35:b1:d9:1e:70:f1:85:58:c9:41:b9:a2:91:f9:dd:9d:15:a1: 25:fd:6d:53:76:23:d5:ba:67:9b:eb:e4:05:b9:14:a1:83:43: b1:f0:62:af:86:ea:da:d9:00:47:ac:0f:b6:64:d7:3f:a9:2e: 64:f6:44:6e:cd:a1:7f:04:45:84:c4:67:dc:ce:7b:5c:ad:47: 3a:0c:b5:2c -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUDbb2SGQcmHmQdHzyrWVEaskJHMswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM3ZmQxYmEzZmVkNDQ0NTRkNmQ3MDMwMjQ3NzA5ZDI4 ZGIzNDkxYTAeFw0yNjExMTQxNzU1MDFaFw0yNjExMTUyMDMyMDFaMDMxMTAvBgNV BAMTKDg0RUQ0NDVCRUE0M0RFQzE3RUExQUJFQTNCRTMwRkU5QzNGRDVCNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkAsr2fskGaSsaG7Poy84mse9h 7QzmnQa73KEE2JD/zmLMx+jFmYFfuVCeCh7buHuzTmwJuN7i4QODGSDUlpjDnxzG q0plE1mLFhWBo0/TNzDweA8Z6uakcMChXar0p5yb4ogO0Bc2NVb5WYiJbBCkEaIO KM0f+qtST6pyLV8mWpZV5a87dPck98lLhKxZjFk3JHtllFODcZaP4Crhto52wp8x vHM1aGUqRGojVupp4gkgbAmxbtPdCJKJnvxylpnu1TcR2JBFtGN8+PkuOTTd/n5l YTubfRhKs+aP5HrX9Z62VVSv2BQCSJGpzYP0YzA9h4AAiZ9ISo/C2ysA0X07AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUhO1EW+pD3sF+oavqO+MP6cP9W0UwHwYDVR0j BBgwFoAUY3/Ruj/tREVNbXAwJHcJ0o2zSRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTk0ZGY3MTQtZDM3ZC00OTQyLThlOTQtOTFkZDg1M2Vm N2UzLzAvNjM3RkQxQkEzRkVENDQ0NTRENkQ3MDMwMjQ3NzA5RDI4REIzNDkxQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1kzX1J1al90UkVWTmJYQXdKSGNKMG8y elNSby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hOTRkZjcxNC1k MzdkLTQ5NDItOGU5NC05MWRkODUzZWY3ZTMvMC82MzdGRDFCQTNGRUQ0NDQ1NEQ2 RDcwMzAyNDc3MDlEMjhEQjM0OTFBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACQaU35gDxnMjupaMX2g9 VovtWJuvEIPn8ZaL1kBrFb36XGlDv+jLvmx/yjSZi9yAGsWXxic/DMAch9CJkfBR GUczDiGuNfdS0xUtYjcYYXOgyjSe5TBo8c4qYWdgvTdfe4nSLUlyROEPl5rFKMF3 MiJZCyb4XV/dHjSZ9dWtke6QOrj4llvoPfvy11jJcbi/rsJrtHrE9Cj/DGiBe3VM uultyNvOhVLi0T/7BqRto+3Usa6VNbHZHnDxhVjJQbmikfndnRWhJf1tU3Yj1bpn m+vkBbkUoYNDsfBir4bq2tkAR6wPtmTXP6kuZPZEbs2hfwRFhMRn3M57XK1HOgy1 LA== -----END CERTIFICATE-----Generated at Sun Nov 15 14:02:26 2026 by rpki-client