$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft File: 637FD1BA3FED44454D6D7030247709D28DB3491A.mft (raw, json) Hash identifier: tatZjQYQr4Bl18xhj/qkc1f3evrKxaJ2EjAbMJ6kDJQ= Subject key identifier: 3A:87:0E:32:10:27:A2:E1:1D:CC:84:69:AC:B4:56:44:99:F7:91:CF Authority key identifier: 63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A Certificate issuer: /CN=637fd1ba3fed44454d6d7030247709d28db3491a Certificate serial: 22C908579BF9196F7F2E77DC3E35269657328D5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft Manifest number: 049C Signing time: Sat 28 Mar 2026 05:50:38 +0000 Manifest this update: Sat 28 Mar 2026 05:45:38 +0000 Manifest next update: Sun 29 Mar 2026 07:59:38 +0000 Files and hashes: 1: 3133392e32382e32352e302f32342d3234203d3e20323131343135.roa (hash: kj5wXeF4AQFWN9fpmE1MKtBmtMRLs1TA1rGuGr1+5eA=) 2: 637FD1BA3FED44454D6D7030247709D28DB3491A.crl (hash: GR9qC3IBwq0WUwFbA6/cytAdvnEr5jeCGMXQrQw861Q=) 3: 3133392e32382e32352e302f32342d3234203d3e20323030303137.roa (hash: KTt7IBC5OKuP6muE0/6zCxuIwEkqcnypdMUhBFAyx18=) 4: 3133392e32382e32362e302f32342d3234203d3e20313337343039.roa (hash: 4dsufrRZZT3ng/M0mUxRioQsmJP0ZwUerMNQTCdj11A=) 5: 3133392e32382e32342e302f32342d3234203d3e20323131343430.roa (hash: eR+xyo+zY+fM9l50cFs0swlGeIX2NljYGKvE5SQX83U=) 6: 3133392e32382e32372e302f32342d3234203d3e20323036313530.roa (hash: spk6NtqPTGXoBo4XJMsULHBo1PCje3tyvN9b3jHB/pA=) 7: 3133392e32382e32342e302f32342d3234203d3e20323132363039.roa (hash: Zbml066pXi3G2h7cDhaY/zBOXtPP1DXZek0hCHsXFhc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Mar 2026 00:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:c9:08:57:9b:f9:19:6f:7f:2e:77:dc:3e:35:26:96:57:32:8d:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=637fd1ba3fed44454d6d7030247709d28db3491a Validity Not Before: Mar 28 05:45:38 2026 GMT Not After : Mar 29 07:59:38 2026 GMT Subject: CN=3A870E321027A2E11DCC8469ACB4564499F791CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d2:fa:61:2a:ec:c2:d9:21:12:83:21:af:52: 8c:67:d0:73:23:13:e8:dd:54:78:ae:0f:73:45:73: e1:d4:ee:e6:09:23:18:37:1c:54:36:80:1a:11:68: 0c:b8:0b:d4:55:f3:8c:6d:98:2e:0b:e8:5e:49:17: d2:52:e1:80:b8:33:5a:2b:32:d1:64:73:7b:e7:33: 7e:e0:94:fd:6f:86:ce:2e:02:7a:de:0d:25:b0:1b: 91:6a:f5:77:3c:08:d4:38:02:86:fe:98:38:a3:e3: 08:3d:f7:57:8f:57:d9:b5:e5:ed:5f:9b:b2:fc:83: c9:61:f2:67:04:5c:40:e9:61:b0:75:22:b4:7c:bb: 9a:f7:c2:44:bd:32:33:5f:18:3d:49:c2:28:5f:ad: d3:d4:bd:27:f9:2d:ce:24:5d:2a:d1:e6:0f:c0:b6: b0:46:af:eb:9e:9f:d9:4f:4f:3c:0d:9c:8a:9f:77: a3:6b:dc:5b:ab:32:20:1f:cf:6d:eb:8f:43:98:c6: bb:42:d5:5d:11:60:57:70:22:e6:54:f9:ce:f5:06: ae:4a:54:69:68:bd:b6:2c:f3:8d:1f:11:18:78:0b: 80:fd:fd:15:ae:a6:58:62:50:0e:d9:54:a0:71:83: dc:9c:e9:71:12:fb:b3:d2:a2:04:d8:f9:ca:0f:a2: f7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:87:0E:32:10:27:A2:E1:1D:CC:84:69:AC:B4:56:44:99:F7:91:CF X509v3 Authority Key Identifier: keyid:63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:41:52:f9:40:28:87:dc:45:32:62:c0:2b:1e:22:f8:39:6f: c8:ff:29:77:f5:ed:86:ce:93:22:18:fe:fb:a2:53:a0:4d:71: 00:9c:2e:ee:86:07:24:b3:78:e2:8a:26:29:a3:16:fd:cf:78: eb:ce:36:cb:b1:06:92:23:8c:87:29:73:02:62:37:32:7f:7e: 49:32:fb:b6:c7:4a:b8:3d:9b:cb:93:c5:fc:e4:cf:d5:7a:2a: 7a:10:4e:55:5e:ef:93:c6:98:e5:7a:dd:31:8a:f8:4b:40:9f: 5f:6c:2d:5d:be:9d:96:28:54:e3:dd:e3:7e:88:bd:15:ec:32: 6d:8f:2d:4f:53:ac:db:12:5c:fd:ca:99:ce:34:59:d0:81:dc: df:c5:9d:08:83:37:c5:f2:a5:64:f6:e8:ad:3f:fc:f0:24:1e: 19:37:c0:ac:01:d0:cc:13:91:23:3b:66:a0:65:cf:f8:80:3d: 09:98:de:2b:38:e2:6d:7e:b5:1f:82:8e:34:bf:3c:bd:dc:1e: 22:08:82:57:6a:2b:ca:ae:87:f3:67:3a:e9:f8:9f:16:75:e0: 11:a8:9b:2c:1e:68:93:c9:0e:84:31:06:7c:9f:3b:65:b3:3e: 6e:98:22:00:18:62:e5:5b:12:69:43:fb:af:16:b3:89:62:9e: 6f:0d:c9:d9 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUIskIV5v5GW9/LnfcPjUmllcyjVowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM3ZmQxYmEzZmVkNDQ0NTRkNmQ3MDMwMjQ3NzA5ZDI4 ZGIzNDkxYTAeFw0yNjAzMjgwNTQ1MzhaFw0yNjAzMjkwNzU5MzhaMDMxMTAvBgNV BAMTKDNBODcwRTMyMTAyN0EyRTExRENDODQ2OUFDQjQ1NjQ0OTlGNzkxQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO0vphKuzC2SESgyGvUoxn0HMj E+jdVHiuD3NFc+HU7uYJIxg3HFQ2gBoRaAy4C9RV84xtmC4L6F5JF9JS4YC4M1or MtFkc3vnM37glP1vhs4uAnreDSWwG5Fq9Xc8CNQ4Aob+mDij4wg991ePV9m15e1f m7L8g8lh8mcEXEDpYbB1IrR8u5r3wkS9MjNfGD1JwihfrdPUvSf5Lc4kXSrR5g/A trBGr+uen9lPTzwNnIqfd6Nr3FurMiAfz23rj0OYxrtC1V0RYFdwIuZU+c71Bq5K VGlovbYs840fERh4C4D9/RWuplhiUA7ZVKBxg9yc6XES+7PSogTY+coPovepAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUOocOMhAnouEdzIRprLRWRJn3kc8wHwYDVR0j BBgwFoAUY3/Ruj/tREVNbXAwJHcJ0o2zSRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTk0ZGY3MTQtZDM3ZC00OTQyLThlOTQtOTFkZDg1M2Vm N2UzLzAvNjM3RkQxQkEzRkVENDQ0NTRENkQ3MDMwMjQ3NzA5RDI4REIzNDkxQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1kzX1J1al90UkVWTmJYQXdKSGNKMG8y elNSby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hOTRkZjcxNC1k MzdkLTQ5NDItOGU5NC05MWRkODUzZWY3ZTMvMC82MzdGRDFCQTNGRUQ0NDQ1NEQ2 RDcwMzAyNDc3MDlEMjhEQjM0OTFBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ0FS+UAoh9xFMmLAKx4i +DlvyP8pd/Xths6TIhj++6JToE1xAJwu7oYHJLN44oomKaMW/c946842y7EGkiOM hylzAmI3Mn9+STL7tsdKuD2by5PF/OTP1XoqehBOVV7vk8aY5XrdMYr4S0CfX2wt Xb6dlihU493jfoi9FewybY8tT1Os2xJc/cqZzjRZ0IHc38WdCIM3xfKlZPborT/8 8CQeGTfArAHQzBORIztmoGXP+IA9CZjeKzjibX61H4KONL88vdweIgiCV2oryq6H 82c66fifFnXgEaibLB5ok8kOhDEGfJ87ZbM+bpgiABhi5VsSaUP7rxaziWKebw3J 2Q== -----END CERTIFICATE-----Generated at Sat Mar 28 10:33:19 2026 by rpki-client