$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft File: 637FD1BA3FED44454D6D7030247709D28DB3491A.mft (raw, json) Hash identifier: 0XA/lemdeDSY+NLUcw4UCnMiyrIfCW1O8q1ISzapOa8= Subject key identifier: 72:F8:41:A5:1A:24:BB:9C:F2:87:32:0D:F9:F8:A1:32:8D:20:51:4F Authority key identifier: 63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A Certificate issuer: /CN=637fd1ba3fed44454d6d7030247709d28db3491a Certificate serial: 592D04C11369A19D582ADFC8D5D2476570FB6C49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft Manifest number: 02EA Signing time: Tue 06 May 2025 08:44:35 +0000 Manifest this update: Tue 06 May 2025 08:39:35 +0000 Manifest next update: Wed 07 May 2025 11:49:35 +0000 Files and hashes: 1: 3133392e32382e32342e302f32342d3234203d3e20323132363039.roa (hash: Zbml066pXi3G2h7cDhaY/zBOXtPP1DXZek0hCHsXFhc=) 2: 3133392e32382e32362e302f32342d3234203d3e20313337343039.roa (hash: jGCu+6PUFJehV7SD97XGwxO4qcYEtjZiP9+tOlftrfA=) 3: 3133392e32382e32352e302f32342d3234203d3e20323131343135.roa (hash: t2eZOXbWa1wSXQ/lRcYYBLRQZdrsUg6kK3TUWhBYOoo=) 4: 3133392e32382e32342e302f32342d3234203d3e20323131343430.roa (hash: sQzRaIn68UKgeOhWa3EKecj44XiFcDfTSSWOvDZfL50=) 5: 3133392e32382e32372e302f32342d3234203d3e20323036313530.roa (hash: PhaaQ0B2G4/BYaJYdmj2wNhh4+UZzlq/QFz8ZTfUDhY=) 6: 637FD1BA3FED44454D6D7030247709D28DB3491A.crl (hash: WBM2z5foQW/Ye8tNbYyMQl8Te3Yj4Q6C6tDhfUIRo7U=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 May 2025 11:49:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:2d:04:c1:13:69:a1:9d:58:2a:df:c8:d5:d2:47:65:70:fb:6c:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=637fd1ba3fed44454d6d7030247709d28db3491a Validity Not Before: May 6 08:39:35 2025 GMT Not After : May 7 11:49:35 2025 GMT Subject: CN=72F841A51A24BB9CF287320DF9F8A1328D20514F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9a:94:51:26:50:41:41:5f:60:1e:46:1c:c4: 2e:7c:d4:e5:3f:7b:dd:91:07:fc:bd:3c:7b:50:6a: 71:61:6f:06:62:93:62:b4:20:16:23:f7:1c:cb:aa: a4:c5:fa:8c:eb:b4:b5:2c:4c:47:83:fb:82:bc:bb: c8:35:98:36:da:84:1e:e2:64:c6:a0:bb:75:fc:b1: a5:4c:1d:d3:42:26:22:98:52:4d:70:6b:5d:c3:9c: 51:4b:bc:4e:18:f5:43:12:99:be:52:3d:0a:2b:59: f4:c8:fa:14:f8:a4:c6:2a:f4:d0:f4:9a:21:0e:40: e8:e6:c0:5c:c2:22:7e:c0:7c:15:c4:a0:2d:92:2b: 5a:0f:bb:65:4a:5a:37:85:ee:46:a9:1c:23:c6:7d: 1b:87:84:60:63:ff:e1:cc:50:7b:82:ae:09:08:40: 7b:9d:a0:fd:2f:e1:1b:04:ae:bc:4d:1b:98:4c:2e: e7:d6:d2:23:23:50:a9:3a:f8:9c:bb:23:45:b0:84: f3:93:f5:de:3a:63:8a:ba:da:1c:27:e8:e2:cd:9f: ea:b8:8e:31:da:32:17:88:5f:82:53:95:d0:69:70: 4d:75:ab:74:e1:8a:51:66:d6:22:c4:b4:35:24:73: ca:e6:3a:76:89:48:6f:75:a5:f5:15:f1:98:80:6f: a6:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:F8:41:A5:1A:24:BB:9C:F2:87:32:0D:F9:F8:A1:32:8D:20:51:4F X509v3 Authority Key Identifier: keyid:63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:8b:52:6a:c1:7c:57:9f:19:b8:c6:85:72:96:4c:a9:4c:a9: 7c:d2:40:a1:37:66:16:47:41:62:2d:50:6d:b4:23:ef:9f:5d: 9b:69:ee:2c:7c:3c:d2:d8:ac:f2:a8:ba:64:4c:61:f8:ac:0d: b6:64:78:12:3b:57:9b:26:7b:51:4b:0d:1a:9b:c0:20:1f:e7: c0:31:2f:35:e5:f4:be:0f:b6:36:c9:1d:a3:f9:a9:2f:72:4f: a6:cd:15:ad:ef:17:3a:da:29:a5:6b:f1:b7:cf:f3:74:9e:11: 41:be:92:6c:31:50:bc:bb:33:5a:eb:f1:b8:e0:be:50:4a:1a: 23:da:d9:dd:05:4a:c9:69:c9:05:0c:db:e8:36:8c:0e:0f:14: 90:3c:11:15:87:5f:26:26:76:bb:c5:52:9e:cb:d5:10:63:0a: a1:43:43:83:95:70:63:1f:c5:60:ac:bc:25:5e:91:08:9e:c6: 0a:63:d5:78:be:4f:16:f1:b2:8c:bb:1c:72:3e:b9:e8:97:4e: c0:59:a8:d6:1f:a9:ae:66:9a:40:97:0d:80:93:a8:43:a7:d0: a0:60:03:8d:2c:fd:ff:56:e9:36:de:8e:fa:b6:9d:d3:90:d5: 83:15:55:72:4e:ee:9c:4b:73:21:5a:ca:00:42:46:29:cb:c9: cb:14:0a:42 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUWS0EwRNpoZ1YKt/I1dJHZXD7bEkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM3ZmQxYmEzZmVkNDQ0NTRkNmQ3MDMwMjQ3NzA5ZDI4 ZGIzNDkxYTAeFw0yNTA1MDYwODM5MzVaFw0yNTA1MDcxMTQ5MzVaMDMxMTAvBgNV BAMTKDcyRjg0MUE1MUEyNEJCOUNGMjg3MzIwREY5RjhBMTMyOEQyMDUxNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzmpRRJlBBQV9gHkYcxC581OU/ e92RB/y9PHtQanFhbwZik2K0IBYj9xzLqqTF+ozrtLUsTEeD+4K8u8g1mDbahB7i ZMagu3X8saVMHdNCJiKYUk1wa13DnFFLvE4Y9UMSmb5SPQorWfTI+hT4pMYq9ND0 miEOQOjmwFzCIn7AfBXEoC2SK1oPu2VKWjeF7kapHCPGfRuHhGBj/+HMUHuCrgkI QHudoP0v4RsErrxNG5hMLufW0iMjUKk6+Jy7I0WwhPOT9d46Y4q62hwn6OLNn+q4 jjHaMheIX4JTldBpcE11q3ThilFm1iLEtDUkc8rmOnaJSG91pfUV8ZiAb6a1AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUcvhBpRoku5zyhzIN+fihMo0gUU8wHwYDVR0j BBgwFoAUY3/Ruj/tREVNbXAwJHcJ0o2zSRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTk0ZGY3MTQtZDM3ZC00OTQyLThlOTQtOTFkZDg1M2Vm N2UzLzAvNjM3RkQxQkEzRkVENDQ0NTRENkQ3MDMwMjQ3NzA5RDI4REIzNDkxQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1kzX1J1al90UkVWTmJYQXdKSGNKMG8y elNSby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hOTRkZjcxNC1k MzdkLTQ5NDItOGU5NC05MWRkODUzZWY3ZTMvMC82MzdGRDFCQTNGRUQ0NDQ1NEQ2 RDcwMzAyNDc3MDlEMjhEQjM0OTFBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHYtSasF8V58ZuMaFcpZM qUypfNJAoTdmFkdBYi1QbbQj759dm2nuLHw80tis8qi6ZExh+KwNtmR4EjtXmyZ7 UUsNGpvAIB/nwDEvNeX0vg+2Nskdo/mpL3JPps0Vre8XOtoppWvxt8/zdJ4RQb6S bDFQvLszWuvxuOC+UEoaI9rZ3QVKyWnJBQzb6DaMDg8UkDwRFYdfJiZ2u8VSnsvV EGMKoUNDg5VwYx/FYKy8JV6RCJ7GCmPVeL5PFvGyjLsccj656JdOwFmo1h+prmaa QJcNgJOoQ6fQoGADjSz9/1bpNt6O+rad05DVgxVVck7unEtzIVrKAEJGKcvJyxQK Qg== -----END CERTIFICATE-----Generated at Tue May 6 15:10:43 2025 by rpki-client