$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft File: 637FD1BA3FED44454D6D7030247709D28DB3491A.mft (raw, json) Hash identifier: ET66+sbvO5aIq8NhfmopE2Qiwf9i/0+Ulnr458u6PtM= Subject key identifier: 63:68:FD:39:A8:CA:42:D4:8C:77:54:5B:43:35:1B:D2:C5:CB:8D:D0 Authority key identifier: 63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A Certificate issuer: /CN=637fd1ba3fed44454d6d7030247709d28db3491a Certificate serial: 1517840BD031343F72A9FA86A925E652E766D858 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft Manifest number: 0331 Signing time: Sat 28 Jun 2025 20:04:11 +0000 Manifest this update: Sat 28 Jun 2025 19:59:11 +0000 Manifest next update: Sun 29 Jun 2025 23:31:11 +0000 Files and hashes: 1: 3133392e32382e32342e302f32342d3234203d3e20323131343430.roa (hash: sQzRaIn68UKgeOhWa3EKecj44XiFcDfTSSWOvDZfL50=) 2: 3133392e32382e32352e302f32342d3234203d3e20323131343135.roa (hash: t2eZOXbWa1wSXQ/lRcYYBLRQZdrsUg6kK3TUWhBYOoo=) 3: 3133392e32382e32342e302f32342d3234203d3e20323132363039.roa (hash: Zbml066pXi3G2h7cDhaY/zBOXtPP1DXZek0hCHsXFhc=) 4: 3133392e32382e32362e302f32342d3234203d3e20313337343039.roa (hash: jGCu+6PUFJehV7SD97XGwxO4qcYEtjZiP9+tOlftrfA=) 5: 3133392e32382e32352e302f32342d3234203d3e20323030303137.roa (hash: KTt7IBC5OKuP6muE0/6zCxuIwEkqcnypdMUhBFAyx18=) 6: 3133392e32382e32372e302f32342d3234203d3e20323036313530.roa (hash: PhaaQ0B2G4/BYaJYdmj2wNhh4+UZzlq/QFz8ZTfUDhY=) 7: 637FD1BA3FED44454D6D7030247709D28DB3491A.crl (hash: h8JgV86Q2m4vwyo3gkJwR+pm7jehubjFOIjCqvkDLrY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:17:84:0b:d0:31:34:3f:72:a9:fa:86:a9:25:e6:52:e7:66:d8:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=637fd1ba3fed44454d6d7030247709d28db3491a Validity Not Before: Jun 28 19:59:11 2025 GMT Not After : Jun 29 23:31:11 2025 GMT Subject: CN=6368FD39A8CA42D48C77545B43351BD2C5CB8DD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c2:66:19:ee:9d:c9:9e:3c:da:48:89:c3:e4: f1:bc:71:20:0e:a8:83:f1:b8:38:c8:7d:43:e5:bb: 46:62:83:26:6b:8a:f7:9f:dc:1e:1b:6e:f8:4f:d7: 63:0b:81:59:26:eb:98:7e:5c:4f:7b:22:f8:6b:6e: d7:5e:70:82:70:07:11:d3:b3:ee:85:3e:14:ef:b9: b4:33:b4:d8:26:e4:93:1e:fc:b7:de:bf:5f:4a:20: 35:2a:9f:68:86:45:2f:e5:7f:02:50:8a:a9:4f:e1: 8f:0d:73:f2:d3:60:fa:92:20:7d:4f:24:71:17:9f: ef:ce:05:f2:a2:95:11:20:05:c2:4e:4c:72:be:e1: 6f:40:05:99:52:77:21:12:f7:93:47:ef:f4:94:74: 53:38:b3:c0:9e:fb:22:80:66:e1:65:30:44:09:f8: d8:b9:99:de:bf:6f:60:86:0f:84:36:bb:1c:6f:11: de:89:b9:4b:13:22:80:1f:65:bf:88:1a:2a:a5:cd: 6d:9b:12:1a:37:7c:19:d2:bd:11:c3:ce:0f:53:d0: d7:eb:af:6d:ed:3a:f1:d9:24:0e:f2:16:bd:ae:59: 1a:ae:94:3a:3c:3f:7f:da:6c:fb:fd:38:e4:a5:f5: 54:9c:10:7d:f2:09:d1:23:54:03:52:fb:04:b0:73: 2f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:68:FD:39:A8:CA:42:D4:8C:77:54:5B:43:35:1B:D2:C5:CB:8D:D0 X509v3 Authority Key Identifier: keyid:63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:e5:a0:19:57:f9:72:5d:74:cd:7b:24:e1:c8:9e:da:a9:0a: d7:2b:76:b3:78:98:41:56:32:74:dd:6f:d0:a9:44:c5:7a:80: 62:ce:e3:f6:41:38:23:02:13:1d:43:fb:d2:ed:13:4c:dd:63: 92:d3:61:ff:b1:48:c4:86:83:fa:38:da:a9:ce:98:4c:c1:6a: 2a:8a:1d:d7:ce:e9:a6:d4:d4:a7:8e:41:18:58:4b:ff:a7:21: cd:88:ff:e6:d8:1b:7a:9f:03:5b:42:95:40:89:b0:8a:ad:82: 0d:35:e0:be:88:c3:9a:18:eb:a4:3d:6b:21:65:83:e5:da:7f: e7:d8:79:77:25:2f:62:66:b2:07:40:13:cc:91:b5:ab:e1:32: db:32:5a:4e:30:99:0a:b8:98:0d:7e:3f:7d:1f:3d:be:73:d2: 1d:fd:11:9b:a6:2d:ab:a7:24:1a:b5:58:04:76:07:79:93:68: 17:18:06:31:1f:0b:41:9b:1c:39:aa:98:7e:8d:a0:87:bd:79: 67:66:90:23:f7:05:e7:fd:85:f7:dd:90:0e:2e:27:bb:f9:32: ec:a7:49:cc:ea:c3:5c:27:a9:69:4a:14:c7:06:20:f1:96:68: bf:04:44:93:3b:b4:8e:38:35:eb:b3:80:da:c2:37:8b:ec:b3: f4:88:61:13 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUFReEC9AxND9yqfqGqSXmUudm2FgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM3ZmQxYmEzZmVkNDQ0NTRkNmQ3MDMwMjQ3NzA5ZDI4 ZGIzNDkxYTAeFw0yNTA2MjgxOTU5MTFaFw0yNTA2MjkyMzMxMTFaMDMxMTAvBgNV BAMTKDYzNjhGRDM5QThDQTQyRDQ4Qzc3NTQ1QjQzMzUxQkQyQzVDQjhERDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvwmYZ7p3JnjzaSInD5PG8cSAO qIPxuDjIfUPlu0ZigyZrivef3B4bbvhP12MLgVkm65h+XE97IvhrbtdecIJwBxHT s+6FPhTvubQztNgm5JMe/Lfev19KIDUqn2iGRS/lfwJQiqlP4Y8Nc/LTYPqSIH1P JHEXn+/OBfKilREgBcJOTHK+4W9ABZlSdyES95NH7/SUdFM4s8Ce+yKAZuFlMEQJ +Ni5md6/b2CGD4Q2uxxvEd6JuUsTIoAfZb+IGiqlzW2bEho3fBnSvRHDzg9T0Nfr r23tOvHZJA7yFr2uWRqulDo8P3/abPv9OOSl9VScEH3yCdEjVANS+wSwcy+DAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUY2j9OajKQtSMd1RbQzUb0sXLjdAwHwYDVR0j BBgwFoAUY3/Ruj/tREVNbXAwJHcJ0o2zSRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTk0ZGY3MTQtZDM3ZC00OTQyLThlOTQtOTFkZDg1M2Vm N2UzLzAvNjM3RkQxQkEzRkVENDQ0NTRENkQ3MDMwMjQ3NzA5RDI4REIzNDkxQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1kzX1J1al90UkVWTmJYQXdKSGNKMG8y elNSby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hOTRkZjcxNC1k MzdkLTQ5NDItOGU5NC05MWRkODUzZWY3ZTMvMC82MzdGRDFCQTNGRUQ0NDQ1NEQ2 RDcwMzAyNDc3MDlEMjhEQjM0OTFBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS+WgGVf5cl10zXsk4cie 2qkK1yt2s3iYQVYydN1v0KlExXqAYs7j9kE4IwITHUP70u0TTN1jktNh/7FIxIaD +jjaqc6YTMFqKood187pptTUp45BGFhL/6chzYj/5tgbep8DW0KVQImwiq2CDTXg vojDmhjrpD1rIWWD5dp/59h5dyUvYmayB0ATzJG1q+Ey2zJaTjCZCriYDX4/fR89 vnPSHf0Rm6Ytq6ckGrVYBHYHeZNoFxgGMR8LQZscOaqYfo2gh715Z2aQI/cF5/2F 992QDi4nu/ky7KdJzOrDXCepaUoUxwYg8ZZovwREkzu0jjg167OA2sI3i+yz9Ihh Ew== -----END CERTIFICATE-----Generated at Sun Jun 29 00:56:38 2025 by rpki-client