$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft File: 637FD1BA3FED44454D6D7030247709D28DB3491A.mft (raw, json) Hash identifier: Y/VdeD7Wx1i0fDeMMQOeWekM0LGty8L9m3h2GWdEy9A= Subject key identifier: 7F:68:BE:01:13:E1:CD:2E:3A:B5:5A:6E:E2:37:F0:FC:2F:11:77:4D Authority key identifier: 63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A Certificate issuer: /CN=637fd1ba3fed44454d6d7030247709d28db3491a Certificate serial: 43D340E4A9F516B0A3010BB0352602092A5C1DD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft Manifest number: 058A Signing time: Mon 21 Sep 2026 17:20:46 +0000 Manifest this update: Mon 21 Sep 2026 17:15:46 +0000 Manifest next update: Tue 22 Sep 2026 18:01:46 +0000 Files and hashes: 1: 637FD1BA3FED44454D6D7030247709D28DB3491A.crl (hash: BSPRw8PJfPLi3vF44O4Sfs9IvUrZug72TzzchlC9+MY=) 2: 3133392e32382e32342e302f32342d3234203d3e20323131343430.roa (hash: Ze9+zIwOSs8Hab73LnmLOHqax9HZbQ+ExNkPvYOX3OU=) 3: 3133392e32382e32342e302f32342d3234203d3e20323132363039.roa (hash: Fol0sGIzThvrZaKMHBeLXFldT8huOSBy9x77N8VFj2U=) 4: 3133392e32382e32362e302f32342d3234203d3e20313337343039.roa (hash: 8XVU/W55yY41HqRJQDzM1AeLQA0aWSEdX6TaV20ykxk=) 5: 3133392e32382e32352e302f32342d3234203d3e20323131343135.roa (hash: 7kMffwl/Ww8QHzZihIgTjgdiu2o56NccWGqsrPQPDA8=) 6: 3133392e32382e32372e302f32342d3234203d3e20323036313530.roa (hash: 3lBPKR1fPL+QKLXWXt2VtfNCiDnO4wDHoyHQ9q2nEqQ=) 7: 3133392e32382e32352e302f32342d3234203d3e20323030303137.roa (hash: WMZ7MG9ZqwsJalfql9TxbC+4SKvPKZ02fi2O1Vc8m7o=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 14:16:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:d3:40:e4:a9:f5:16:b0:a3:01:0b:b0:35:26:02:09:2a:5c:1d:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=637fd1ba3fed44454d6d7030247709d28db3491a Validity Not Before: Sep 21 17:15:46 2026 GMT Not After : Sep 22 18:01:46 2026 GMT Subject: CN=7F68BE0113E1CD2E3AB55A6EE237F0FC2F11774D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:38:8d:7f:a8:1f:fe:9e:9e:81:f4:d6:85:c0: 2c:05:cc:0f:41:c0:22:1e:6b:d3:e5:f1:7e:04:e7: e8:76:67:a6:76:34:90:43:4d:21:d8:e2:17:18:22: 70:a0:3d:14:eb:12:e6:f8:b5:8e:57:a0:5a:f5:4d: 7c:74:68:97:ab:33:1a:f1:52:52:cd:0d:33:e7:a4: d9:13:d4:8c:e3:09:99:dd:0f:82:2b:0f:5a:b6:e4: a3:dc:29:91:85:5e:a4:c4:2d:1e:6a:e1:2c:da:a4: 58:9a:af:e3:97:d2:22:68:8e:63:73:64:ac:69:49: f8:2f:21:27:05:40:2e:eb:2c:b1:97:68:97:a3:a1: 8b:56:bf:36:dd:81:ce:01:2e:09:a5:ba:d7:be:a8: 63:be:ec:48:0b:96:9c:5e:c5:d8:02:e2:77:46:ae: f9:f8:d4:95:a4:0c:25:d1:40:84:43:1d:ba:58:e1: 60:a8:cb:26:75:f6:2d:ec:e7:76:77:b2:f6:31:59: b8:5c:07:98:03:b9:72:94:af:6a:78:b1:36:aa:46: d0:0e:b5:9d:6c:10:d3:fd:70:17:c4:7d:cb:eb:1b: cb:85:cb:71:f6:e8:0f:33:5d:3e:1b:8e:53:5d:c4: d8:a0:26:ec:76:8a:ef:3c:24:50:0c:55:e2:39:9c: 13:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:68:BE:01:13:E1:CD:2E:3A:B5:5A:6E:E2:37:F0:FC:2F:11:77:4D X509v3 Authority Key Identifier: keyid:63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:07:3e:ae:d5:78:95:9e:b9:dc:22:a0:b0:79:ab:1b:74:45: ff:2d:61:9d:65:0f:93:8b:2c:a1:ac:58:bf:bd:aa:c6:53:0c: 75:ea:68:c6:43:98:f4:c9:01:9e:40:55:2a:29:1a:2a:2d:6d: 64:dd:90:4a:5b:6f:77:0e:85:4d:9b:09:15:a6:f8:29:39:aa: 47:37:8b:89:0e:9c:1b:ac:5b:c1:01:69:4b:44:ad:f7:5a:49: f7:e9:b7:05:bd:79:bb:e7:76:13:fd:fd:13:5e:02:bf:9a:4a: c0:01:0d:15:16:8a:5d:7c:3a:84:b0:a5:67:15:40:93:22:24: ce:1c:94:c9:a3:73:14:6d:23:22:01:f7:1b:15:ea:9a:cd:b6: fe:92:5f:4d:de:65:10:d5:1b:e7:cf:e1:de:64:5b:9a:20:62: 33:25:76:07:53:f2:4f:a8:d4:2b:55:d6:b2:60:48:b4:e0:f6: c8:f3:e1:3e:a7:e5:c9:fc:15:09:d4:15:7b:c3:49:0a:8a:99: e2:76:33:8e:9f:4c:07:f1:65:f0:0e:64:59:41:7f:0c:76:89: d6:c8:38:58:1b:c3:20:48:9e:84:0e:4b:bf:b6:8e:f0:39:cd: f0:01:8d:bd:29:74:bf:35:42:09:30:9d:24:d9:22:8c:eb:65: 00:aa:93:3f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUQ9NA5Kn1FrCjAQuwNSYCCSpcHdcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM3ZmQxYmEzZmVkNDQ0NTRkNmQ3MDMwMjQ3NzA5ZDI4 ZGIzNDkxYTAeFw0yNjA5MjExNzE1NDZaFw0yNjA5MjIxODAxNDZaMDMxMTAvBgNV BAMTKDdGNjhCRTAxMTNFMUNEMkUzQUI1NUE2RUUyMzdGMEZDMkYxMTc3NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5OI1/qB/+np6B9NaFwCwFzA9B wCIea9Pl8X4E5+h2Z6Z2NJBDTSHY4hcYInCgPRTrEub4tY5XoFr1TXx0aJerMxrx UlLNDTPnpNkT1IzjCZndD4IrD1q25KPcKZGFXqTELR5q4SzapFiar+OX0iJojmNz ZKxpSfgvIScFQC7rLLGXaJejoYtWvzbdgc4BLgmlute+qGO+7EgLlpxexdgC4ndG rvn41JWkDCXRQIRDHbpY4WCoyyZ19i3s53Z3svYxWbhcB5gDuXKUr2p4sTaqRtAO tZ1sENP9cBfEfcvrG8uFy3H26A8zXT4bjlNdxNigJux2iu88JFAMVeI5nBNrAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUf2i+ARPhzS46tVpu4jfw/C8Rd00wHwYDVR0j BBgwFoAUY3/Ruj/tREVNbXAwJHcJ0o2zSRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTk0ZGY3MTQtZDM3ZC00OTQyLThlOTQtOTFkZDg1M2Vm N2UzLzAvNjM3RkQxQkEzRkVENDQ0NTRENkQ3MDMwMjQ3NzA5RDI4REIzNDkxQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1kzX1J1al90UkVWTmJYQXdKSGNKMG8y elNSby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hOTRkZjcxNC1k MzdkLTQ5NDItOGU5NC05MWRkODUzZWY3ZTMvMC82MzdGRDFCQTNGRUQ0NDQ1NEQ2 RDcwMzAyNDc3MDlEMjhEQjM0OTFBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXQc+rtV4lZ653CKgsHmr G3RF/y1hnWUPk4ssoaxYv72qxlMMdepoxkOY9MkBnkBVKikaKi1tZN2QSltvdw6F TZsJFab4KTmqRzeLiQ6cG6xbwQFpS0St91pJ9+m3Bb15u+d2E/39E14Cv5pKwAEN FRaKXXw6hLClZxVAkyIkzhyUyaNzFG0jIgH3GxXqms22/pJfTd5lENUb58/h3mRb miBiMyV2B1PyT6jUK1XWsmBItOD2yPPhPqflyfwVCdQVe8NJCoqZ4nYzjp9MB/Fl 8A5kWUF/DHaJ1sg4WBvDIEiehA5Lv7aO8DnN8AGNvSl0vzVCCTCdJNkijOtlAKqT Pw== -----END CERTIFICATE-----Generated at Tue Sep 22 01:22:39 2026 by rpki-client