$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft File: 637FD1BA3FED44454D6D7030247709D28DB3491A.mft (raw, json) Hash identifier: 0sgM/RaZegHDXZA0VTOQ394i352p2IE+BQnp2IesJZg= Subject key identifier: 5A:BD:BD:99:0A:C5:BD:8C:B1:C2:63:EE:CA:04:B8:11:08:A4:51:C4 Authority key identifier: 63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A Certificate issuer: /CN=637fd1ba3fed44454d6d7030247709d28db3491a Certificate serial: 2919426392B43C3E2B498FD85BC95384E2DA185D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft Manifest number: 0311 Signing time: Wed 04 Jun 2025 14:27:22 +0000 Manifest this update: Wed 04 Jun 2025 14:22:22 +0000 Manifest next update: Thu 05 Jun 2025 18:20:22 +0000 Files and hashes: 1: 3133392e32382e32362e302f32342d3234203d3e20313337343039.roa (hash: jGCu+6PUFJehV7SD97XGwxO4qcYEtjZiP9+tOlftrfA=) 2: 3133392e32382e32352e302f32342d3234203d3e20323131343135.roa (hash: t2eZOXbWa1wSXQ/lRcYYBLRQZdrsUg6kK3TUWhBYOoo=) 3: 3133392e32382e32372e302f32342d3234203d3e20323036313530.roa (hash: PhaaQ0B2G4/BYaJYdmj2wNhh4+UZzlq/QFz8ZTfUDhY=) 4: 3133392e32382e32352e302f32342d3234203d3e20323030303137.roa (hash: KTt7IBC5OKuP6muE0/6zCxuIwEkqcnypdMUhBFAyx18=) 5: 3133392e32382e32342e302f32342d3234203d3e20323131343430.roa (hash: sQzRaIn68UKgeOhWa3EKecj44XiFcDfTSSWOvDZfL50=) 6: 637FD1BA3FED44454D6D7030247709D28DB3491A.crl (hash: zNu4sOFduOw8UBFnaKaePrxK41TSZgiaU7VA3i2J/FI=) 7: 3133392e32382e32342e302f32342d3234203d3e20323132363039.roa (hash: Zbml066pXi3G2h7cDhaY/zBOXtPP1DXZek0hCHsXFhc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Jun 2025 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:19:42:63:92:b4:3c:3e:2b:49:8f:d8:5b:c9:53:84:e2:da:18:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=637fd1ba3fed44454d6d7030247709d28db3491a Validity Not Before: Jun 4 14:22:22 2025 GMT Not After : Jun 5 18:20:22 2025 GMT Subject: CN=5ABDBD990AC5BD8CB1C263EECA04B81108A451C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:49:b6:41:28:d4:7e:68:ce:d2:12:46:66:04: 85:0d:48:cc:29:f1:16:7b:e7:77:6e:09:fe:81:40: f5:ab:0d:eb:18:66:a6:f0:3e:a5:13:f0:3b:14:1f: 31:6d:1f:27:9a:a7:c6:cf:dc:7b:ed:56:a6:8d:2d: dc:4c:89:16:b3:ca:05:c7:cc:12:ad:84:2c:2f:56: 67:a2:ea:cc:f5:ee:dc:44:3c:5b:06:3b:03:ef:e2: 58:74:46:53:a2:a7:7b:ca:c9:c7:99:ba:3b:a9:cb: 65:75:ff:49:fb:30:90:f7:41:d3:e1:a7:e6:f8:b7: 88:f0:8c:c6:f9:fd:a6:b1:50:04:c1:b9:80:7f:f1: 60:13:f7:55:d1:d9:54:9e:28:8f:e3:d0:4c:b6:5c: e5:b8:ac:18:a2:95:0b:df:28:88:aa:40:8d:01:ce: 85:d2:3d:d0:0d:96:f5:c4:d2:85:7d:e5:49:bf:88: c0:80:0c:f5:44:8d:ba:ec:c9:44:83:bf:9c:f3:da: 0d:55:d5:62:93:a5:3d:26:03:5c:c6:95:b4:92:41: 11:62:a3:3f:f6:88:cf:4c:73:a2:15:c3:86:a7:60: 4d:c0:13:63:44:cd:13:d4:ec:5c:45:59:a6:f3:64: 26:ce:c4:bb:0d:52:2d:1d:9d:a5:e4:de:b7:4c:cf: 6e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:BD:BD:99:0A:C5:BD:8C:B1:C2:63:EE:CA:04:B8:11:08:A4:51:C4 X509v3 Authority Key Identifier: keyid:63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:b0:ae:0d:9c:48:3b:58:62:c2:15:9e:ae:9e:65:85:9b:f4: 2c:e2:db:c5:01:07:d4:c5:c8:34:20:6e:e9:51:2c:da:05:78: b9:a1:26:c9:f0:98:c6:7e:ba:79:47:72:9e:9d:12:fc:11:f2: 36:fc:cd:c8:c9:d4:27:26:19:98:17:7f:6e:e3:cd:77:08:24: 91:be:01:4b:ed:36:e8:9d:81:df:4f:b9:a8:73:f1:f5:23:46: 96:2f:ae:9d:b0:2f:e2:51:75:19:cc:66:c2:32:7d:82:8c:0d: 14:9c:86:d3:57:0b:6b:d2:84:1f:e7:d1:59:b9:10:3e:b1:84: ad:e3:3c:f1:45:be:86:32:b9:c1:71:f7:82:75:f3:49:4b:9a: 33:0b:6c:c9:23:16:af:bf:25:e9:12:12:3a:86:2c:b1:13:6b: 66:c5:6e:92:c5:25:6e:95:f1:e6:75:fc:c4:7c:65:5c:1f:0a: 09:81:61:9e:5c:e3:78:18:f9:46:7d:16:b9:b6:f1:18:3c:e8: f2:93:73:eb:88:72:a1:ed:ce:38:f4:27:d3:4f:3d:08:94:ae: 9b:a3:61:ea:6e:79:7e:fd:64:44:f1:7c:70:74:8a:43:ef:6b: 7e:6b:ed:7a:e6:a0:5b:48:bf:97:99:ec:03:9f:9d:42:15:4a: 79:1e:cd:8b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUKRlCY5K0PD4rSY/YW8lThOLaGF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM3ZmQxYmEzZmVkNDQ0NTRkNmQ3MDMwMjQ3NzA5ZDI4 ZGIzNDkxYTAeFw0yNTA2MDQxNDIyMjJaFw0yNTA2MDUxODIwMjJaMDMxMTAvBgNV BAMTKDVBQkRCRDk5MEFDNUJEOENCMUMyNjNFRUNBMDRCODExMDhBNDUxQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+SbZBKNR+aM7SEkZmBIUNSMwp 8RZ753duCf6BQPWrDesYZqbwPqUT8DsUHzFtHyeap8bP3HvtVqaNLdxMiRazygXH zBKthCwvVmei6sz17txEPFsGOwPv4lh0RlOip3vKyceZujupy2V1/0n7MJD3QdPh p+b4t4jwjMb5/aaxUATBuYB/8WAT91XR2VSeKI/j0Ey2XOW4rBiilQvfKIiqQI0B zoXSPdANlvXE0oV95Um/iMCADPVEjbrsyUSDv5zz2g1V1WKTpT0mA1zGlbSSQRFi oz/2iM9Mc6IVw4anYE3AE2NEzRPU7FxFWabzZCbOxLsNUi0dnaXk3rdMz24HAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUWr29mQrFvYyxwmPuygS4EQikUcQwHwYDVR0j BBgwFoAUY3/Ruj/tREVNbXAwJHcJ0o2zSRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTk0ZGY3MTQtZDM3ZC00OTQyLThlOTQtOTFkZDg1M2Vm N2UzLzAvNjM3RkQxQkEzRkVENDQ0NTRENkQ3MDMwMjQ3NzA5RDI4REIzNDkxQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1kzX1J1al90UkVWTmJYQXdKSGNKMG8y elNSby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hOTRkZjcxNC1k MzdkLTQ5NDItOGU5NC05MWRkODUzZWY3ZTMvMC82MzdGRDFCQTNGRUQ0NDQ1NEQ2 RDcwMzAyNDc3MDlEMjhEQjM0OTFBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmLCuDZxIO1hiwhWerp5l hZv0LOLbxQEH1MXINCBu6VEs2gV4uaEmyfCYxn66eUdynp0S/BHyNvzNyMnUJyYZ mBd/buPNdwgkkb4BS+026J2B30+5qHPx9SNGli+unbAv4lF1GcxmwjJ9gowNFJyG 01cLa9KEH+fRWbkQPrGEreM88UW+hjK5wXH3gnXzSUuaMwtsySMWr78l6RISOoYs sRNrZsVuksUlbpXx5nX8xHxlXB8KCYFhnlzjeBj5Rn0WubbxGDzo8pNz64hyoe3O OPQn0089CJSum6Nh6m55fv1kRPF8cHSKQ+9rfmvteuagW0i/l5nsA5+dQhVKeR7N iw== -----END CERTIFICATE-----Generated at Thu Jun 5 00:09:06 2025 by rpki-client