$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft File: 637FD1BA3FED44454D6D7030247709D28DB3491A.mft (raw, json) Hash identifier: w6N1GOYex9gJAGzc7yu6/pwdgf91ceafkkIN1kd7eKg= Subject key identifier: 7F:F7:EF:27:29:DF:38:45:64:E8:35:3A:AF:40:20:6C:54:FD:25:65 Authority key identifier: 63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A Certificate issuer: /CN=637fd1ba3fed44454d6d7030247709d28db3491a Certificate serial: 0E48D18ACF13E6D4AEEF849DECA3692669B5B799 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft Manifest number: 038D Signing time: Fri 05 Sep 2025 22:58:54 +0000 Manifest this update: Fri 05 Sep 2025 22:53:54 +0000 Manifest next update: Sun 07 Sep 2025 02:05:54 +0000 Files and hashes: 1: 3133392e32382e32372e302f32342d3234203d3e20323036313530.roa (hash: spk6NtqPTGXoBo4XJMsULHBo1PCje3tyvN9b3jHB/pA=) 2: 3133392e32382e32342e302f32342d3234203d3e20323132363039.roa (hash: Zbml066pXi3G2h7cDhaY/zBOXtPP1DXZek0hCHsXFhc=) 3: 3133392e32382e32362e302f32342d3234203d3e20313337343039.roa (hash: 4dsufrRZZT3ng/M0mUxRioQsmJP0ZwUerMNQTCdj11A=) 4: 3133392e32382e32342e302f32342d3234203d3e20323131343430.roa (hash: eR+xyo+zY+fM9l50cFs0swlGeIX2NljYGKvE5SQX83U=) 5: 3133392e32382e32352e302f32342d3234203d3e20323030303137.roa (hash: KTt7IBC5OKuP6muE0/6zCxuIwEkqcnypdMUhBFAyx18=) 6: 3133392e32382e32352e302f32342d3234203d3e20323131343135.roa (hash: kj5wXeF4AQFWN9fpmE1MKtBmtMRLs1TA1rGuGr1+5eA=) 7: 637FD1BA3FED44454D6D7030247709D28DB3491A.crl (hash: ccyRT6eF+3tGcl3p3Ifw/j3/bTHwbqrQlHAzHg/JgQ4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Sep 2025 02:05:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:48:d1:8a:cf:13:e6:d4:ae:ef:84:9d:ec:a3:69:26:69:b5:b7:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=637fd1ba3fed44454d6d7030247709d28db3491a Validity Not Before: Sep 5 22:53:54 2025 GMT Not After : Sep 7 02:05:54 2025 GMT Subject: CN=7FF7EF2729DF384564E8353AAF40206C54FD2565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:92:70:84:b8:20:66:38:93:97:1c:b4:20:12: 7f:0a:6c:3b:36:36:00:6c:ba:6e:8e:99:53:d4:c3: 78:b3:a2:9e:b9:33:79:2a:a2:2f:0a:85:6b:33:43: ad:1e:86:f4:1b:d6:5a:44:f3:2a:6e:e1:02:0b:3d: fd:af:f3:3f:6f:54:f3:15:25:1a:19:3f:66:af:9e: 74:51:1f:15:0d:7b:da:41:c1:ab:16:83:81:68:36: f1:26:0f:1b:83:39:71:6f:ee:63:e6:fe:ad:83:1a: 6e:a1:ad:5d:e2:52:30:04:17:3e:af:1c:b4:ea:dc: 5a:a9:9d:1a:e6:0f:3b:c3:d6:46:2e:4a:93:1f:6a: fd:3c:d9:3d:06:32:0a:d4:e1:6f:1d:f4:2b:a9:6b: 10:eb:44:ef:c7:25:a3:31:46:e8:be:ab:4c:23:40: 1f:6c:2d:33:1b:69:cc:39:df:29:63:44:a1:ff:82: 2c:5d:52:87:0e:1a:c7:6c:61:ad:94:a2:de:8b:4b: c6:36:14:08:92:64:52:79:ac:c6:d4:a0:c9:c0:df: 6f:b5:b3:97:e1:88:a9:35:ee:c4:a6:3e:a4:37:68: 86:d7:da:3d:06:09:1a:1c:65:ea:ea:f6:30:60:c3: 10:cc:b8:ad:be:c3:78:1c:01:68:1a:32:63:ab:fe: 4e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:F7:EF:27:29:DF:38:45:64:E8:35:3A:AF:40:20:6C:54:FD:25:65 X509v3 Authority Key Identifier: keyid:63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:f0:e1:43:e8:59:0a:5b:84:d5:83:b6:5c:2d:c3:f9:56:2b: dc:ec:4b:89:0f:43:4b:95:08:17:5a:e5:4f:5e:f4:1f:c8:f2: 2e:86:d9:31:da:12:1e:64:78:b6:35:0a:55:94:d1:2a:d4:93: 35:5c:ab:6d:25:62:62:9d:d6:7c:51:db:a6:1f:0a:fa:89:b1: 81:fe:fa:1f:b5:a6:d5:a6:e9:7b:eb:31:33:0e:4f:20:aa:31: 2f:9c:ff:82:25:ca:0f:b6:2b:df:9a:ae:59:90:77:02:76:ac: 9e:17:f4:be:c3:be:19:e9:96:a5:29:6d:58:4b:36:2f:5c:13: 99:33:fb:f3:e0:38:48:7c:c5:90:9e:d8:21:83:41:34:44:fc: 09:f0:90:70:af:0a:2a:ca:0a:1a:6e:6f:1e:ff:bc:15:27:f0: 9c:7a:5e:c8:ec:c2:8c:29:4c:52:a7:7f:ae:40:25:26:fc:fd: 19:d6:e7:a2:d5:57:f2:ff:6a:c6:92:b8:21:e8:52:20:db:5f: 98:19:a7:a6:76:fd:5b:6b:5f:65:ca:4f:23:f4:37:4e:b3:74: 5c:fe:b5:ca:eb:91:db:cd:7f:84:c3:b2:7c:b4:c7:1d:37:b5: 3b:6f:49:88:6e:ad:87:3e:7e:2b:79:3f:b3:ea:38:41:d8:d0: 16:98:02:e3 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUDkjRis8T5tSu74Sd7KNpJmm1t5kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM3ZmQxYmEzZmVkNDQ0NTRkNmQ3MDMwMjQ3NzA5ZDI4 ZGIzNDkxYTAeFw0yNTA5MDUyMjUzNTRaFw0yNTA5MDcwMjA1NTRaMDMxMTAvBgNV BAMTKDdGRjdFRjI3MjlERjM4NDU2NEU4MzUzQUFGNDAyMDZDNTRGRDI1NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqknCEuCBmOJOXHLQgEn8KbDs2 NgBsum6OmVPUw3izop65M3kqoi8KhWszQ60ehvQb1lpE8ypu4QILPf2v8z9vVPMV JRoZP2avnnRRHxUNe9pBwasWg4FoNvEmDxuDOXFv7mPm/q2DGm6hrV3iUjAEFz6v HLTq3FqpnRrmDzvD1kYuSpMfav082T0GMgrU4W8d9CupaxDrRO/HJaMxRui+q0wj QB9sLTMbacw53yljRKH/gixdUocOGsdsYa2Uot6LS8Y2FAiSZFJ5rMbUoMnA32+1 s5fhiKk17sSmPqQ3aIbX2j0GCRocZerq9jBgwxDMuK2+w3gcAWgaMmOr/k5jAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUf/fvJynfOEVk6DU6r0AgbFT9JWUwHwYDVR0j BBgwFoAUY3/Ruj/tREVNbXAwJHcJ0o2zSRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTk0ZGY3MTQtZDM3ZC00OTQyLThlOTQtOTFkZDg1M2Vm N2UzLzAvNjM3RkQxQkEzRkVENDQ0NTRENkQ3MDMwMjQ3NzA5RDI4REIzNDkxQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1kzX1J1al90UkVWTmJYQXdKSGNKMG8y elNSby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hOTRkZjcxNC1k MzdkLTQ5NDItOGU5NC05MWRkODUzZWY3ZTMvMC82MzdGRDFCQTNGRUQ0NDQ1NEQ2 RDcwMzAyNDc3MDlEMjhEQjM0OTFBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmfDhQ+hZCluE1YO2XC3D +VYr3OxLiQ9DS5UIF1rlT170H8jyLobZMdoSHmR4tjUKVZTRKtSTNVyrbSViYp3W fFHbph8K+omxgf76H7Wm1abpe+sxMw5PIKoxL5z/giXKD7Yr35quWZB3Anasnhf0 vsO+GemWpSltWEs2L1wTmTP78+A4SHzFkJ7YIYNBNET8CfCQcK8KKsoKGm5vHv+8 FSfwnHpeyOzCjClMUqd/rkAlJvz9GdbnotVX8v9qxpK4IehSINtfmBmnpnb9W2tf ZcpPI/Q3TrN0XP61yuuR281/hMOyfLTHHTe1O29JiG6thz5+K3k/s+o4QdjQFpgC 4w== -----END CERTIFICATE-----Generated at Sat Sep 6 12:00:16 2025 by rpki-client