$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft File: 637FD1BA3FED44454D6D7030247709D28DB3491A.mft (raw, json) Hash identifier: LiAJjIM4HJhDq6v9UNF3RxHg3kkZpz0QrHXND+eUmyc= Subject key identifier: 94:78:1A:8C:F2:BD:17:7C:56:C8:79:5C:27:7D:15:28:37:AE:84:BF Authority key identifier: 63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A Certificate issuer: /CN=637fd1ba3fed44454d6d7030247709d28db3491a Certificate serial: 77025C41D75FAD6E4F995DCE3F38610CECCA0B8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft Manifest number: 03CA Signing time: Tue 21 Oct 2025 08:47:22 +0000 Manifest this update: Tue 21 Oct 2025 08:42:22 +0000 Manifest next update: Wed 22 Oct 2025 11:01:22 +0000 Files and hashes: 1: 637FD1BA3FED44454D6D7030247709D28DB3491A.crl (hash: lmQNsCJqCrCo8Z8BJjmOK6pIdGEgkq/M5B+tL5iEq+g=) 2: 3133392e32382e32372e302f32342d3234203d3e20323036313530.roa (hash: spk6NtqPTGXoBo4XJMsULHBo1PCje3tyvN9b3jHB/pA=) 3: 3133392e32382e32352e302f32342d3234203d3e20323030303137.roa (hash: KTt7IBC5OKuP6muE0/6zCxuIwEkqcnypdMUhBFAyx18=) 4: 3133392e32382e32352e302f32342d3234203d3e20323131343135.roa (hash: kj5wXeF4AQFWN9fpmE1MKtBmtMRLs1TA1rGuGr1+5eA=) 5: 3133392e32382e32342e302f32342d3234203d3e20323132363039.roa (hash: Zbml066pXi3G2h7cDhaY/zBOXtPP1DXZek0hCHsXFhc=) 6: 3133392e32382e32362e302f32342d3234203d3e20313337343039.roa (hash: 4dsufrRZZT3ng/M0mUxRioQsmJP0ZwUerMNQTCdj11A=) 7: 3133392e32382e32342e302f32342d3234203d3e20323131343430.roa (hash: eR+xyo+zY+fM9l50cFs0swlGeIX2NljYGKvE5SQX83U=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Oct 2025 11:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:02:5c:41:d7:5f:ad:6e:4f:99:5d:ce:3f:38:61:0c:ec:ca:0b:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=637fd1ba3fed44454d6d7030247709d28db3491a Validity Not Before: Oct 21 08:42:22 2025 GMT Not After : Oct 22 11:01:22 2025 GMT Subject: CN=94781A8CF2BD177C56C8795C277D152837AE84BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b4:73:cf:41:b3:b9:d1:9e:20:9f:34:cf:65: f7:92:86:63:db:47:1e:e7:a8:6d:32:43:36:c3:df: 52:e3:96:e8:81:df:ef:df:8a:a2:3e:52:6f:c0:0c: 44:9e:da:d2:0b:d7:ca:88:bd:03:95:80:e5:32:30: 3c:00:25:ee:ae:b4:46:c3:a9:37:68:b0:6f:79:a4: 99:cb:86:af:82:7d:d2:c5:d4:fb:50:0b:19:7d:f1: bd:4e:29:36:9a:31:aa:b2:03:6b:22:45:67:c7:e9: ee:95:6c:f1:ad:de:c9:01:b5:e4:c9:21:d9:ac:ad: b3:7a:88:7e:be:e8:5a:25:a6:92:5f:3a:9a:ab:73: 2c:f4:3c:31:0c:5a:2c:c9:4d:5e:a8:19:bb:73:51: c4:ed:a7:aa:91:52:1c:ce:49:a9:80:7d:09:38:1f: 4e:8d:a8:e7:16:9e:36:ac:e8:d9:5e:3e:99:7e:43: ea:b1:47:83:72:95:cd:b0:f1:9d:c8:09:c8:4a:36: 6c:11:de:a2:f6:70:ea:f4:90:e5:33:0a:3a:98:67: fd:65:87:1a:fc:b8:01:aa:d6:c2:4d:8b:ea:aa:ec: f2:d2:76:12:c8:fe:ee:98:47:9b:a0:63:d5:b0:38: 92:b5:02:47:7f:24:91:5b:14:70:47:f6:2d:7d:03: 04:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:78:1A:8C:F2:BD:17:7C:56:C8:79:5C:27:7D:15:28:37:AE:84:BF X509v3 Authority Key Identifier: keyid:63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:94:fb:f4:af:64:20:7b:db:94:0b:e2:98:4c:5a:f7:d9:fc: 88:7e:8f:2c:b4:41:65:6b:a0:1d:b3:3b:04:52:52:ba:fd:aa: b0:40:31:24:49:bb:35:68:c7:1f:0b:14:f9:cd:56:62:6d:86: df:9b:70:d0:e0:e4:38:52:62:5d:c7:15:c5:a8:d6:ef:41:3e: 1b:0a:9d:09:dd:79:b0:39:7c:6f:ea:8d:ec:1f:c8:84:6a:06: 12:6a:ea:c6:42:a7:5d:93:bd:7a:2e:d3:8c:64:45:02:c9:40: 5f:73:93:91:84:63:0f:51:6f:78:54:f7:15:1d:74:81:d7:95: 0a:bd:b3:f5:38:13:0f:76:d9:73:7d:49:c6:81:6f:1b:11:be: 3b:13:7b:15:c9:3e:c1:e0:c6:cb:06:ea:81:d5:b1:c1:10:67: 4f:d2:a4:c8:6a:76:86:0d:d1:88:19:42:97:77:69:b0:c0:f5: 2c:08:ae:ca:ef:74:54:2b:15:f3:2f:ae:1e:f5:4c:2f:b7:8f: e8:7d:95:6c:91:46:83:20:9e:4e:9c:84:66:af:ef:fc:2e:6d: 3e:a3:ec:81:c1:94:c7:61:d1:62:ff:fb:9e:d9:d9:2d:64:e7: ee:cc:13:f1:0c:22:6b:c4:a8:ec:81:3e:eb:32:fe:a2:92:eb: c3:87:84:b4 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUdwJcQddfrW5PmV3OPzhhDOzKC4swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM3ZmQxYmEzZmVkNDQ0NTRkNmQ3MDMwMjQ3NzA5ZDI4 ZGIzNDkxYTAeFw0yNTEwMjEwODQyMjJaFw0yNTEwMjIxMTAxMjJaMDMxMTAvBgNV BAMTKDk0NzgxQThDRjJCRDE3N0M1NkM4Nzk1QzI3N0QxNTI4MzdBRTg0QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKtHPPQbO50Z4gnzTPZfeShmPb Rx7nqG0yQzbD31LjluiB3+/fiqI+Um/ADESe2tIL18qIvQOVgOUyMDwAJe6utEbD qTdosG95pJnLhq+CfdLF1PtQCxl98b1OKTaaMaqyA2siRWfH6e6VbPGt3skBteTJ IdmsrbN6iH6+6FolppJfOpqrcyz0PDEMWizJTV6oGbtzUcTtp6qRUhzOSamAfQk4 H06NqOcWnjas6NlePpl+Q+qxR4Nylc2w8Z3ICchKNmwR3qL2cOr0kOUzCjqYZ/1l hxr8uAGq1sJNi+qq7PLSdhLI/u6YR5ugY9WwOJK1Akd/JJFbFHBH9i19AwTPAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUlHgajPK9F3xWyHlcJ30VKDeuhL8wHwYDVR0j BBgwFoAUY3/Ruj/tREVNbXAwJHcJ0o2zSRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTk0ZGY3MTQtZDM3ZC00OTQyLThlOTQtOTFkZDg1M2Vm N2UzLzAvNjM3RkQxQkEzRkVENDQ0NTRENkQ3MDMwMjQ3NzA5RDI4REIzNDkxQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1kzX1J1al90UkVWTmJYQXdKSGNKMG8y elNSby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hOTRkZjcxNC1k MzdkLTQ5NDItOGU5NC05MWRkODUzZWY3ZTMvMC82MzdGRDFCQTNGRUQ0NDQ1NEQ2 RDcwMzAyNDc3MDlEMjhEQjM0OTFBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEZT79K9kIHvblAvimExa 99n8iH6PLLRBZWugHbM7BFJSuv2qsEAxJEm7NWjHHwsU+c1WYm2G35tw0ODkOFJi XccVxajW70E+GwqdCd15sDl8b+qN7B/IhGoGEmrqxkKnXZO9ei7TjGRFAslAX3OT kYRjD1FveFT3FR10gdeVCr2z9TgTD3bZc31JxoFvGxG+OxN7Fck+weDGywbqgdWx wRBnT9KkyGp2hg3RiBlCl3dpsMD1LAiuyu90VCsV8y+uHvVML7eP6H2VbJFGgyCe TpyEZq/v/C5tPqPsgcGUx2HRYv/7ntnZLWTn7swT8Qwia8So7IE+6zL+opLrw4eE tA== -----END CERTIFICATE-----Generated at Tue Oct 21 20:09:40 2025 by rpki-client