$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft File: 637FD1BA3FED44454D6D7030247709D28DB3491A.mft (raw, json) Hash identifier: gKJXeJYGNN23eRLW4PIXtt0VlhGaublR0HrNRwwy+tg= Subject key identifier: 7D:A0:D3:F3:59:A4:43:88:CF:55:A9:2C:63:85:BB:E6:47:4A:14:A3 Authority key identifier: 63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A Certificate issuer: /CN=637fd1ba3fed44454d6d7030247709d28db3491a Certificate serial: 2B00F20298B232A7906BAE0EF9AAAC3A282334DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft Manifest number: 034E Signing time: Sun 20 Jul 2025 08:41:49 +0000 Manifest this update: Sun 20 Jul 2025 08:36:49 +0000 Manifest next update: Mon 21 Jul 2025 09:52:49 +0000 Files and hashes: 1: 3133392e32382e32372e302f32342d3234203d3e20323036313530.roa (hash: PhaaQ0B2G4/BYaJYdmj2wNhh4+UZzlq/QFz8ZTfUDhY=) 2: 637FD1BA3FED44454D6D7030247709D28DB3491A.crl (hash: RMoBZkohyvmmiwvSx9ocN62oeXZcguLQ1/AfdaJlJQU=) 3: 3133392e32382e32352e302f32342d3234203d3e20323131343135.roa (hash: t2eZOXbWa1wSXQ/lRcYYBLRQZdrsUg6kK3TUWhBYOoo=) 4: 3133392e32382e32352e302f32342d3234203d3e20323030303137.roa (hash: KTt7IBC5OKuP6muE0/6zCxuIwEkqcnypdMUhBFAyx18=) 5: 3133392e32382e32362e302f32342d3234203d3e20313337343039.roa (hash: jGCu+6PUFJehV7SD97XGwxO4qcYEtjZiP9+tOlftrfA=) 6: 3133392e32382e32342e302f32342d3234203d3e20323132363039.roa (hash: Zbml066pXi3G2h7cDhaY/zBOXtPP1DXZek0hCHsXFhc=) 7: 3133392e32382e32342e302f32342d3234203d3e20323131343430.roa (hash: sQzRaIn68UKgeOhWa3EKecj44XiFcDfTSSWOvDZfL50=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 09:52:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:00:f2:02:98:b2:32:a7:90:6b:ae:0e:f9:aa:ac:3a:28:23:34:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=637fd1ba3fed44454d6d7030247709d28db3491a Validity Not Before: Jul 20 08:36:49 2025 GMT Not After : Jul 21 09:52:49 2025 GMT Subject: CN=7DA0D3F359A44388CF55A92C6385BBE6474A14A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0c:d6:e1:0d:2b:c0:f7:28:3d:2f:60:77:4f: 36:3a:42:65:57:7a:3f:a5:d9:f4:cd:c8:03:ae:43: ee:52:6f:41:38:92:eb:65:e3:25:e1:35:49:af:ae: 40:73:dc:31:0e:ad:9d:ce:19:8a:b7:e7:bd:11:5d: 71:a5:96:cc:ca:04:14:2d:6d:fe:b1:c1:68:9b:b7: a7:ed:9f:c5:0f:d9:11:34:64:ad:10:58:35:12:41: ff:31:26:36:46:ba:d7:b1:a4:35:59:61:bf:f9:fa: fb:79:d3:c8:aa:c4:16:6f:a5:30:d7:80:fe:da:88: a2:c1:c7:e5:0f:e1:3a:b7:c4:96:a6:6d:a7:b7:79: 15:4e:68:1e:c0:e0:6b:04:02:64:38:37:b9:7e:d4: b7:8b:fa:d0:3c:c9:41:ab:8d:f6:bc:c1:41:ab:aa: 98:ec:c0:49:9c:27:ea:0d:d5:7b:79:c4:96:58:e5: 88:de:7d:cf:61:1c:eb:04:56:c8:1a:f5:46:96:ee: a9:ef:8a:35:1c:19:0b:59:46:54:4d:c5:90:72:ae: 90:db:6e:2d:00:df:6b:27:99:d8:b2:d1:46:02:d5: 00:07:8c:8f:1a:18:a5:4b:ad:f5:7b:2b:87:5e:ea: a4:85:5a:9a:c8:36:44:8a:be:8f:d3:b5:44:18:e9: 4d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A0:D3:F3:59:A4:43:88:CF:55:A9:2C:63:85:BB:E6:47:4A:14:A3 X509v3 Authority Key Identifier: keyid:63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:d5:41:cc:39:cf:39:4d:1f:89:49:35:19:1d:e7:27:d8:0a: 35:df:9e:01:32:a3:79:de:6f:ef:2c:a7:48:e2:74:ca:04:08: 27:43:1d:a0:ef:8f:23:dd:78:09:68:ce:09:f1:0d:b2:bf:23: 89:4f:f5:73:c9:37:29:fa:03:7d:09:52:f2:de:d4:94:a2:d1: 1b:dd:a0:d8:89:d2:af:5b:3d:8d:d4:ff:a8:c5:1e:c5:67:3c: 56:24:0c:f6:0d:ce:4f:25:3a:a3:64:77:f7:ee:38:76:4a:11: df:48:1b:3b:c1:69:e9:2b:5c:f7:38:b5:e0:d7:38:ad:7a:4c: 71:25:80:ff:b6:3f:db:33:c2:28:ba:3d:db:7a:c1:8e:3f:99: 51:30:80:48:85:fb:58:ed:8c:75:93:9a:f6:b9:a8:83:a8:81: 7f:b0:d2:84:3b:6b:8c:db:58:d4:5c:c7:5f:48:10:cf:d0:37: 5e:18:ef:82:38:01:50:4a:6a:49:69:66:1d:c9:e5:d5:ef:53: 46:9b:17:bd:97:30:b3:39:e5:e0:2d:a8:54:f2:73:83:5b:52: f6:00:7c:44:a5:18:42:91:9b:48:95:59:e4:cc:b6:a1:36:b4: e7:77:1a:e4:fd:a6:6c:20:65:ce:38:aa:3e:09:e7:5e:5f:4a: 25:d5:a1:d2 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUKwDyApiyMqeQa64O+aqsOigjNNowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM3ZmQxYmEzZmVkNDQ0NTRkNmQ3MDMwMjQ3NzA5ZDI4 ZGIzNDkxYTAeFw0yNTA3MjAwODM2NDlaFw0yNTA3MjEwOTUyNDlaMDMxMTAvBgNV BAMTKDdEQTBEM0YzNTlBNDQzODhDRjU1QTkyQzYzODVCQkU2NDc0QTE0QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCDNbhDSvA9yg9L2B3TzY6QmVX ej+l2fTNyAOuQ+5Sb0E4kutl4yXhNUmvrkBz3DEOrZ3OGYq3570RXXGllszKBBQt bf6xwWibt6ftn8UP2RE0ZK0QWDUSQf8xJjZGutexpDVZYb/5+vt508iqxBZvpTDX gP7aiKLBx+UP4Tq3xJambae3eRVOaB7A4GsEAmQ4N7l+1LeL+tA8yUGrjfa8wUGr qpjswEmcJ+oN1Xt5xJZY5Yjefc9hHOsEVsga9UaW7qnvijUcGQtZRlRNxZByrpDb bi0A32snmdiy0UYC1QAHjI8aGKVLrfV7K4de6qSFWprINkSKvo/TtUQY6U1bAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUfaDT81mkQ4jPVaksY4W75kdKFKMwHwYDVR0j BBgwFoAUY3/Ruj/tREVNbXAwJHcJ0o2zSRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTk0ZGY3MTQtZDM3ZC00OTQyLThlOTQtOTFkZDg1M2Vm N2UzLzAvNjM3RkQxQkEzRkVENDQ0NTRENkQ3MDMwMjQ3NzA5RDI4REIzNDkxQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1kzX1J1al90UkVWTmJYQXdKSGNKMG8y elNSby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hOTRkZjcxNC1k MzdkLTQ5NDItOGU5NC05MWRkODUzZWY3ZTMvMC82MzdGRDFCQTNGRUQ0NDQ1NEQ2 RDcwMzAyNDc3MDlEMjhEQjM0OTFBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM9VBzDnPOU0fiUk1GR3n J9gKNd+eATKjed5v7yynSOJ0ygQIJ0MdoO+PI914CWjOCfENsr8jiU/1c8k3KfoD fQlS8t7UlKLRG92g2InSr1s9jdT/qMUexWc8ViQM9g3OTyU6o2R39+44dkoR30gb O8Fp6Stc9zi14Nc4rXpMcSWA/7Y/2zPCKLo923rBjj+ZUTCASIX7WO2MdZOa9rmo g6iBf7DShDtrjNtY1FzHX0gQz9A3XhjvgjgBUEpqSWlmHcnl1e9TRpsXvZcwsznl 4C2oVPJzg1tS9gB8RKUYQpGbSJVZ5My2oTa053ca5P2mbCBlzjiqPgnnXl9KJdWh 0g== -----END CERTIFICATE-----Generated at Sun Jul 20 16:21:32 2025 by rpki-client