$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft File: 637FD1BA3FED44454D6D7030247709D28DB3491A.mft (raw, json) Hash identifier: z3n2CTDUJuVy7QNq6+ywxWY8n2UQ+Sm18XpSbktXVFQ= Subject key identifier: 4E:36:A0:04:79:DD:AE:8A:6D:F7:51:FB:DC:A9:8D:E2:DB:98:F5:83 Authority key identifier: 63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A Certificate issuer: /CN=637fd1ba3fed44454d6d7030247709d28db3491a Certificate serial: 02DCA789AAD775D7938E1ED043483F926B3963A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft Manifest number: 0502 Signing time: Fri 12 Jun 2026 13:40:31 +0000 Manifest this update: Fri 12 Jun 2026 13:35:31 +0000 Manifest next update: Sat 13 Jun 2026 17:38:31 +0000 Files and hashes: 1: 3133392e32382e32352e302f32342d3234203d3e20323030303137.roa (hash: WMZ7MG9ZqwsJalfql9TxbC+4SKvPKZ02fi2O1Vc8m7o=) 2: 637FD1BA3FED44454D6D7030247709D28DB3491A.crl (hash: m0QSpfD8EPomShXQQz28Vy8m8DewI/QLrOUGiBbgr4I=) 3: 3133392e32382e32342e302f32342d3234203d3e20323131343430.roa (hash: eR+xyo+zY+fM9l50cFs0swlGeIX2NljYGKvE5SQX83U=) 4: 3133392e32382e32342e302f32342d3234203d3e20323132363039.roa (hash: Fol0sGIzThvrZaKMHBeLXFldT8huOSBy9x77N8VFj2U=) 5: 3133392e32382e32372e302f32342d3234203d3e20323036313530.roa (hash: spk6NtqPTGXoBo4XJMsULHBo1PCje3tyvN9b3jHB/pA=) 6: 3133392e32382e32352e302f32342d3234203d3e20323131343135.roa (hash: kj5wXeF4AQFWN9fpmE1MKtBmtMRLs1TA1rGuGr1+5eA=) 7: 3133392e32382e32362e302f32342d3234203d3e20313337343039.roa (hash: 4dsufrRZZT3ng/M0mUxRioQsmJP0ZwUerMNQTCdj11A=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 17:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:dc:a7:89:aa:d7:75:d7:93:8e:1e:d0:43:48:3f:92:6b:39:63:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=637fd1ba3fed44454d6d7030247709d28db3491a Validity Not Before: Jun 12 13:35:31 2026 GMT Not After : Jun 13 17:38:31 2026 GMT Subject: CN=4E36A00479DDAE8A6DF751FBDCA98DE2DB98F583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7f:55:39:e8:78:12:d7:be:72:ff:db:e5:7b: 7c:58:29:1a:6c:ab:95:22:2c:93:1d:7a:40:ce:58: 01:7c:50:e9:33:c7:96:f6:64:fc:88:2b:a6:4a:9d: f0:96:95:22:8e:03:36:19:22:9d:06:39:83:09:4d: 69:33:8a:5d:e1:46:3e:a3:7b:25:e1:5f:66:01:9d: 28:7b:51:af:65:8f:fb:74:64:ee:f5:5b:65:5a:7c: a4:50:1d:5e:91:82:11:1e:35:20:c8:84:8e:73:64: 5d:de:af:71:a8:4a:ed:0a:fd:df:f2:2a:72:36:ca: ff:96:49:14:16:7f:ec:29:e5:41:40:69:86:b2:a4: be:9c:7d:cc:69:55:a1:6f:f0:98:f2:de:ab:3f:d3: ed:90:ab:7a:4d:d4:c3:81:88:00:e9:90:9d:56:90: be:62:11:24:e9:a7:eb:64:78:9c:56:46:b5:86:89: 6f:4a:92:ae:d4:d5:75:e8:af:58:cf:70:5b:2c:74: 63:f9:fb:02:6f:ff:40:a1:96:05:dc:79:d4:f1:f9: a7:83:6b:a2:56:02:3b:71:11:fd:f3:01:34:17:cc: e9:51:80:ef:47:0f:79:65:db:7b:26:7c:65:9b:30: 21:31:a5:d1:8e:a9:28:70:40:71:f3:3c:94:20:fa: 83:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:36:A0:04:79:DD:AE:8A:6D:F7:51:FB:DC:A9:8D:E2:DB:98:F5:83 X509v3 Authority Key Identifier: keyid:63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:51:ad:fc:42:f6:ac:db:54:31:58:d6:96:f5:3d:0e:e4:f7: af:c5:fe:42:a6:9d:a1:30:c7:40:7c:91:d6:31:f0:82:7c:d2: b7:7e:94:1b:03:d3:e2:2e:ea:d3:c4:97:4b:71:a9:a1:6a:94: 6d:05:ed:f7:a2:89:53:4f:d3:0d:14:3e:9c:f6:e7:8e:0d:cf: 56:9a:36:f3:39:99:fa:f7:9f:fe:c2:bc:67:6e:7c:d8:b7:75: 87:de:0f:eb:23:80:51:47:e1:26:3b:7e:a2:3a:94:e4:4b:ce: 3f:52:6c:2d:5c:f7:f7:39:4b:ef:7e:eb:4e:b7:83:bb:ce:b7: 8f:0f:7a:c1:8b:35:4e:4d:72:0e:3e:d7:e5:e9:79:b2:0f:18: dd:e7:f9:2c:b8:5a:8a:3f:58:80:94:29:30:22:bf:2c:6e:9e: 1e:46:5f:79:67:a5:ae:a4:06:68:c1:07:24:86:48:d0:f5:48: 5f:16:de:03:51:7f:2c:b0:2a:e7:53:0d:74:b2:5b:8a:45:fe: 16:a7:e1:8b:3a:90:f9:e7:62:7a:26:b1:82:cc:8b:90:66:35: 3c:2b:bf:34:20:a0:cd:d9:f8:3a:76:d7:30:5c:cb:3c:05:13: 02:28:5b:52:2e:dc:7a:56:1f:7c:f4:cb:6f:7c:6b:ae:01:97: 63:7d:41:b2 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUAtyniarXddeTjh7QQ0g/kms5Y6kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM3ZmQxYmEzZmVkNDQ0NTRkNmQ3MDMwMjQ3NzA5ZDI4 ZGIzNDkxYTAeFw0yNjA2MTIxMzM1MzFaFw0yNjA2MTMxNzM4MzFaMDMxMTAvBgNV BAMTKDRFMzZBMDA0NzlEREFFOEE2REY3NTFGQkRDQTk4REUyREI5OEY1ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyf1U56HgS175y/9vle3xYKRps q5UiLJMdekDOWAF8UOkzx5b2ZPyIK6ZKnfCWlSKOAzYZIp0GOYMJTWkzil3hRj6j eyXhX2YBnSh7Ua9lj/t0ZO71W2VafKRQHV6RghEeNSDIhI5zZF3er3GoSu0K/d/y KnI2yv+WSRQWf+wp5UFAaYaypL6cfcxpVaFv8Jjy3qs/0+2Qq3pN1MOBiADpkJ1W kL5iESTpp+tkeJxWRrWGiW9Kkq7U1XXor1jPcFssdGP5+wJv/0ChlgXcedTx+aeD a6JWAjtxEf3zATQXzOlRgO9HD3ll23smfGWbMCExpdGOqShwQHHzPJQg+oOxAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUTjagBHndropt91H73KmN4tuY9YMwHwYDVR0j BBgwFoAUY3/Ruj/tREVNbXAwJHcJ0o2zSRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTk0ZGY3MTQtZDM3ZC00OTQyLThlOTQtOTFkZDg1M2Vm N2UzLzAvNjM3RkQxQkEzRkVENDQ0NTRENkQ3MDMwMjQ3NzA5RDI4REIzNDkxQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1kzX1J1al90UkVWTmJYQXdKSGNKMG8y elNSby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hOTRkZjcxNC1k MzdkLTQ5NDItOGU5NC05MWRkODUzZWY3ZTMvMC82MzdGRDFCQTNGRUQ0NDQ1NEQ2 RDcwMzAyNDc3MDlEMjhEQjM0OTFBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlFGt/EL2rNtUMVjWlvU9 DuT3r8X+QqadoTDHQHyR1jHwgnzSt36UGwPT4i7q08SXS3GpoWqUbQXt96KJU0/T DRQ+nPbnjg3PVpo28zmZ+vef/sK8Z2582Ld1h94P6yOAUUfhJjt+ojqU5EvOP1Js LVz39zlL737rTreDu863jw96wYs1Tk1yDj7X5el5sg8Y3ef5LLhaij9YgJQpMCK/ LG6eHkZfeWelrqQGaMEHJIZI0PVIXxbeA1F/LLAq51MNdLJbikX+FqfhizqQ+edi eiaxgsyLkGY1PCu/NCCgzdn4OnbXMFzLPAUTAihbUi7celYffPTLb3xrrgGXY31B sg== -----END CERTIFICATE-----Generated at Sat Jun 13 11:15:17 2026 by rpki-client