$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft File: 637FD1BA3FED44454D6D7030247709D28DB3491A.mft (raw, json) Hash identifier: cgDVhyS7VJNk7d2zlavEfn9E8gdnC/N75a8ZoPUGMYI= Subject key identifier: 0D:FF:8E:4A:4D:E9:5C:57:45:F1:AF:13:D4:FF:6D:97:5E:20:3B:80 Authority key identifier: 63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A Certificate issuer: /CN=637fd1ba3fed44454d6d7030247709d28db3491a Certificate serial: 4331C4816BBCFA7AE4B2A0B9AD3FABA2CD79ACAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft Manifest number: 037A Signing time: Fri 22 Aug 2025 22:07:33 +0000 Manifest this update: Fri 22 Aug 2025 22:02:33 +0000 Manifest next update: Sat 23 Aug 2025 22:40:33 +0000 Files and hashes: 1: 637FD1BA3FED44454D6D7030247709D28DB3491A.crl (hash: ljx7dL9vn/3cyqgS9u/B6fXYuWDGRQaHS6sGK7gKSkI=) 2: 3133392e32382e32362e302f32342d3234203d3e20313337343039.roa (hash: jGCu+6PUFJehV7SD97XGwxO4qcYEtjZiP9+tOlftrfA=) 3: 3133392e32382e32372e302f32342d3234203d3e20323036313530.roa (hash: PhaaQ0B2G4/BYaJYdmj2wNhh4+UZzlq/QFz8ZTfUDhY=) 4: 3133392e32382e32342e302f32342d3234203d3e20323132363039.roa (hash: Zbml066pXi3G2h7cDhaY/zBOXtPP1DXZek0hCHsXFhc=) 5: 3133392e32382e32342e302f32342d3234203d3e20323131343430.roa (hash: sQzRaIn68UKgeOhWa3EKecj44XiFcDfTSSWOvDZfL50=) 6: 3133392e32382e32352e302f32342d3234203d3e20323131343135.roa (hash: t2eZOXbWa1wSXQ/lRcYYBLRQZdrsUg6kK3TUWhBYOoo=) 7: 3133392e32382e32352e302f32342d3234203d3e20323030303137.roa (hash: KTt7IBC5OKuP6muE0/6zCxuIwEkqcnypdMUhBFAyx18=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Aug 2025 22:40:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:31:c4:81:6b:bc:fa:7a:e4:b2:a0:b9:ad:3f:ab:a2:cd:79:ac:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=637fd1ba3fed44454d6d7030247709d28db3491a Validity Not Before: Aug 22 22:02:33 2025 GMT Not After : Aug 23 22:40:33 2025 GMT Subject: CN=0DFF8E4A4DE95C5745F1AF13D4FF6D975E203B80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e0:83:f3:bc:17:31:7a:eb:3d:1b:48:d2:97: cb:6a:96:9d:91:20:d1:a8:fe:29:87:7e:7f:0e:a2: 11:21:54:28:9c:6f:04:cf:13:d2:1e:dd:23:e1:ea: e7:95:4b:02:dc:9a:c3:c2:ee:c8:4d:6f:ff:49:50: 2d:6f:73:b5:26:a1:f4:6a:c0:8f:51:bb:28:5c:0f: e0:7b:ad:3e:eb:02:8d:11:e2:db:f8:d7:9c:20:1c: 79:47:c9:96:71:94:2a:52:81:fe:11:73:fc:9c:ac: b9:ab:4a:dd:d5:67:b0:dc:b0:b3:19:42:a7:0e:da: 3f:0e:ac:5f:ac:f0:eb:31:23:c2:6d:25:be:3b:99: 2f:53:ec:ee:1c:0f:42:7b:a7:43:65:67:bc:70:06: 41:0c:90:2b:29:a8:cd:21:53:a2:dc:04:44:c1:b1: 13:4f:ac:1f:02:b8:65:f5:78:98:69:2f:31:d5:13: 7f:66:57:76:7d:57:69:f3:53:29:18:ca:e9:03:4e: 62:c6:de:7b:f6:7f:6e:cc:08:f5:25:2e:92:3d:f2: e3:ac:8b:24:a3:0b:7e:94:69:ca:d9:3d:7a:f1:ad: 61:5b:16:e0:96:ab:8e:a8:e8:35:08:b2:79:2d:f6: ce:e4:36:f7:7d:b7:6d:4b:64:70:a7:08:c3:fe:ca: b5:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:FF:8E:4A:4D:E9:5C:57:45:F1:AF:13:D4:FF:6D:97:5E:20:3B:80 X509v3 Authority Key Identifier: keyid:63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:e7:c6:62:0b:d1:ef:5b:2d:b1:d8:35:4f:1b:49:89:e0:e3: 83:1b:1d:97:53:9b:cc:67:9e:6c:9d:9d:34:a8:b1:7e:98:1c: b2:dc:98:c4:47:bd:41:b4:8c:24:bf:10:d2:10:82:9b:cb:f3: c5:01:dc:17:48:5d:4a:81:e9:2d:83:7d:52:53:9b:f8:3d:a4: 18:79:2f:88:77:89:2f:bf:9d:95:02:e5:5d:5b:3d:b6:5a:7a: 5f:4f:4b:f7:8f:57:f2:6e:07:8c:fc:16:5a:5c:ef:a1:e9:44: 49:d6:01:2d:4a:05:d3:ac:84:02:ca:50:b8:02:f7:c7:d9:7c: 3a:0c:c0:e6:ff:cc:14:d7:97:c3:f9:08:ae:15:80:0b:8f:7e: d6:a7:57:e5:dd:e1:15:b7:4f:59:04:0d:af:a8:12:f4:0f:3d: d7:ce:bf:b6:86:31:4d:c7:e9:6f:75:ee:83:cb:a7:a0:2d:dc: 76:8d:3d:58:d1:5f:6e:86:df:97:98:77:f8:3e:56:83:16:ac: 31:8b:5b:e1:a9:cc:c1:73:f8:8f:e2:68:b3:ca:b8:3f:e6:1f: 3d:25:1b:f2:3f:b8:e1:e2:34:ce:8b:ca:9e:29:b3:a6:4b:ab: 48:72:bf:f4:dc:2b:ac:50:94:9b:49:16:1a:5d:c4:ce:09:12: c8:d6:6d:5c -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUQzHEgWu8+nrksqC5rT+ros15rK4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM3ZmQxYmEzZmVkNDQ0NTRkNmQ3MDMwMjQ3NzA5ZDI4 ZGIzNDkxYTAeFw0yNTA4MjIyMjAyMzNaFw0yNTA4MjMyMjQwMzNaMDMxMTAvBgNV BAMTKDBERkY4RTRBNERFOTVDNTc0NUYxQUYxM0Q0RkY2RDk3NUUyMDNCODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT4IPzvBcxeus9G0jSl8tqlp2R INGo/imHfn8OohEhVCicbwTPE9Ie3SPh6ueVSwLcmsPC7shNb/9JUC1vc7UmofRq wI9RuyhcD+B7rT7rAo0R4tv415wgHHlHyZZxlCpSgf4Rc/ycrLmrSt3VZ7DcsLMZ QqcO2j8OrF+s8OsxI8JtJb47mS9T7O4cD0J7p0NlZ7xwBkEMkCspqM0hU6LcBETB sRNPrB8CuGX1eJhpLzHVE39mV3Z9V2nzUykYyukDTmLG3nv2f27MCPUlLpI98uOs iySjC36UacrZPXrxrWFbFuCWq46o6DUIsnkt9s7kNvd9t21LZHCnCMP+yrVBAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUDf+OSk3pXFdF8a8T1P9tl14gO4AwHwYDVR0j BBgwFoAUY3/Ruj/tREVNbXAwJHcJ0o2zSRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTk0ZGY3MTQtZDM3ZC00OTQyLThlOTQtOTFkZDg1M2Vm N2UzLzAvNjM3RkQxQkEzRkVENDQ0NTRENkQ3MDMwMjQ3NzA5RDI4REIzNDkxQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1kzX1J1al90UkVWTmJYQXdKSGNKMG8y elNSby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hOTRkZjcxNC1k MzdkLTQ5NDItOGU5NC05MWRkODUzZWY3ZTMvMC82MzdGRDFCQTNGRUQ0NDQ1NEQ2 RDcwMzAyNDc3MDlEMjhEQjM0OTFBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcOfGYgvR71stsdg1TxtJ ieDjgxsdl1ObzGeebJ2dNKixfpgcstyYxEe9QbSMJL8Q0hCCm8vzxQHcF0hdSoHp LYN9UlOb+D2kGHkviHeJL7+dlQLlXVs9tlp6X09L949X8m4HjPwWWlzvoelESdYB LUoF06yEAspQuAL3x9l8OgzA5v/MFNeXw/kIrhWAC49+1qdX5d3hFbdPWQQNr6gS 9A89186/toYxTcfpb3Xug8unoC3cdo09WNFfbobfl5h3+D5WgxasMYtb4anMwXP4 j+Jos8q4P+YfPSUb8j+44eI0zovKnimzpkurSHK/9NwrrFCUm0kWGl3EzgkSyNZt XA== -----END CERTIFICATE-----Generated at Sat Aug 23 10:49:43 2025 by rpki-client