$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft File: 45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft (raw, json) Hash identifier: BroOdtP7qzLb1K0YbMznTzHtt1gsN5lB4y+mI91gogk= Subject key identifier: A5:E0:AD:E8:F2:B0:BF:A2:FF:F8:2E:5A:9D:DE:16:4E:47:2C:BF:5A Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b Certificate serial: 1593EE1551243D3D6BE86945DBFBA4D48A477E7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft Manifest number: C3 Signing time: Tue 22 Jul 2025 03:26:54 +0000 Manifest this update: Tue 22 Jul 2025 03:21:54 +0000 Manifest next update: Wed 23 Jul 2025 04:10:54 +0000 Files and hashes: 1: 3132382e36352e3136342e302f32322d3232203d3e2033333230.roa (hash: jUzg8MFBi50HDoiq8ZBSiLc/BkEY3Sqp4qzgmYg5v/k=) 2: 3139342e32362e32312e302f32342d3234203d3e2037303138.roa (hash: 7yEbo3DradWn9p6FL6O0sR90rL76BXVbRvfqqu/D+3E=) 3: 3132382e36352e3136382e302f32312d3234203d3e2036303739.roa (hash: i6JhDTo2qgsHKnhvdAD8kBBVl6YUcjppNLTK7aRFku0=) 4: 39312e3230392e3137392e302f32342d3234203d3e2039323332.roa (hash: DUgBG+DDM8ST08Z0XIhaDsSEtBOUn3VXDgiNBjQq7a4=) 5: 3139342e32362e322e302f32342d3234203d3e2037303138.roa (hash: KZ2g79XWhSpy1OjdBEbA7bKBiIPr4KF5cEbdhi1cO+c=) 6: 37372e38312e38302e302f32332d3233203d3e203230383630.roa (hash: ENs1tyjr+QsCNkYiVs8CGb16BSmudiUVAdhDAu4V/ek=) 7: 3132382e36352e3136302e302f32322d3232203d3e203438353932.roa (hash: e2sDKCcJlT/U2mWShGzkoM6fLVC3axyQA7582KFjXl0=) 8: 3138352e33392e3138322e302f32342d3234203d3e203438353932.roa (hash: ZRiHbt3iKKs0O/K+Xj70IALSK3+jGBgHEkJ3Uk6rxC8=) 9: 45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl (hash: O9xqUQnxUCvmvaRDLH4y1P/jZIMYzhSV9vvHYjJTXwU=) 10: 37372e38312e37392e302f32342d3234203d3e2037303138.roa (hash: Mtmk/kZphhA5s4uopguvEbJvjOjUXgfeStc99+50/4U=) 11: 37372e38312e37362e302f32342d3234203d3e203438353932.roa (hash: AeGgNi4bw9l3zN1DkQ6g095MQ+7U7OthIn51Fzss3Oc=) 12: 3138382e3231342e3233322e302f32332d3233203d3e2035303635.roa (hash: BFuLnnyWuJctlm6cMRTXIHiK+UW5qbLi6zguqt9+aRs=) 13: 3138352e33392e3138312e302f32342d3234203d3e203438353932.roa (hash: Vuif+1Rwal2KWngsbR1gG7PlppvF8JCFTHMdlSgwTho=) 14: 3139342e32362e32302e302f32342d3234203d3e20323132323338.roa (hash: YP/VU7Ddy/RINA1ejeDsmhFrZUIqFHueTf4iQvV7+Jw=) 15: 3138352e33392e3138332e302f32342d3234203d3e203438353932.roa (hash: 1itaUJD6MM9qJoykl2AD3Me7plWTAUPMb45hv4KS1Is=) 16: 37372e38312e37372e302f32342d3234203d3e20313337353137.roa (hash: mnQJW4GBjGEsRXTh3Y2cxT8Pj8O29OUkMaI68Qj1ywg=) 17: 3138352e33392e3138302e302f32342d3234203d3e203438353932.roa (hash: eRfFsAmiOd7fmXSkLY1iDQqDLPihvnF73pAdlTyZEec=) 18: 37372e38312e37382e302f32342d3234203d3e203438353932.roa (hash: sxtXA2eVprRgAPdjB6IZUpHTWxye7ZI2nEVGAB55zbo=) 19: 37372e38312e38332e302f32342d3234203d3e203438353932.roa (hash: FUbnkxuvcKLpw8C4HQaABzR8zDln4ay05cwGyEgtqLs=) 20: 3139342e32362e332e302f32342d3234203d3e203236373337.roa (hash: vAloYgRmheNvh8P1qphoutsfkKJ8NLcb3vYOmiEsQYI=) 21: 37372e38312e38322e302f32342d3234203d3e203438353932.roa (hash: g9+qPCIMbMsxLbmabycfUHp6SrIAw5buxV/5VJi8ArY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 04:10:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:93:ee:15:51:24:3d:3d:6b:e8:69:45:db:fb:a4:d4:8a:47:7e:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b Validity Not Before: Jul 22 03:21:54 2025 GMT Not After : Jul 23 04:10:54 2025 GMT Subject: CN=A5E0ADE8F2B0BFA2FFF82E5A9DDE164E472CBF5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0f:40:39:33:c7:40:81:51:b6:34:35:69:e7: 32:b0:a6:00:8d:87:fa:53:e3:1a:48:62:a7:7f:e8: c2:ff:d2:0a:ee:23:4c:0e:81:90:a5:00:82:01:6d: 09:c8:e9:3d:82:1a:ba:79:2e:80:dd:6e:fc:9d:26: 91:9a:c3:ea:27:7d:04:cf:c4:ff:22:c2:d3:92:fc: e2:66:83:a1:bd:48:32:21:ec:56:fc:8e:22:b7:c4: d5:a4:be:ae:e3:68:49:c0:09:d9:84:fe:f4:0f:18: 55:4e:42:da:21:ec:de:2e:3a:79:81:6a:8c:3f:95: 45:7c:5e:84:f5:48:8f:59:72:ca:c9:31:fb:c1:3b: 16:a1:80:ab:71:45:4e:3a:99:a4:e0:ba:57:ef:6b: f4:ff:23:32:50:13:c6:4f:07:e7:1f:d2:4c:e9:80: 44:7c:c8:17:8b:4a:67:4c:43:a4:a1:80:09:0b:47: 44:2c:a1:a6:de:16:76:ec:47:33:04:76:96:4c:bf: 31:ac:cb:65:8a:e3:e8:dd:a4:ae:23:96:c4:42:c1: 61:89:33:58:70:fa:2b:12:ef:a5:f4:d7:a2:2f:31: c5:0a:82:7a:6d:a9:0e:d2:60:90:fb:d4:93:69:65: 9c:56:d2:12:b9:c1:4c:24:77:4d:25:df:29:9b:03: fb:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:E0:AD:E8:F2:B0:BF:A2:FF:F8:2E:5A:9D:DE:16:4E:47:2C:BF:5A X509v3 Authority Key Identifier: keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:8e:db:c0:1c:83:91:d2:12:b1:f6:28:c5:c8:84:6f:c0:21: df:8b:8c:f5:89:17:1a:5d:c5:cc:d0:5b:2c:03:b8:42:7e:63: fa:75:51:e7:39:26:89:2c:31:88:21:b8:06:cc:48:ed:67:31: 2a:23:44:cf:33:eb:6b:c3:51:de:25:44:3d:0d:a5:8b:34:96: 8d:a0:28:e0:0d:30:39:01:58:8a:5a:5f:ec:98:f0:a2:73:fc: 2f:14:80:7e:28:25:82:8b:4f:33:92:5f:c3:9b:c5:6b:89:cd: bc:0e:9e:ff:c1:42:47:20:96:51:02:64:17:ce:91:f3:87:11: 58:20:8e:fa:ae:0c:c2:2d:a5:57:c1:ee:c5:7b:df:1f:43:20: ca:6c:f6:49:e5:10:20:57:ff:87:ce:eb:e1:f8:7a:9a:0f:cc: f2:5d:3f:3e:d6:78:4f:03:22:e0:0d:0a:89:bd:d1:09:01:78: 8c:d7:b6:25:53:69:75:8f:66:f0:c2:e4:5a:ee:c0:fc:05:c6: 4d:89:77:28:78:a4:65:3b:90:5d:ff:e7:94:b0:f6:4b:dd:a4: 71:4a:7a:50:e3:39:3f:98:58:d2:1e:ef:7b:41:08:74:d5:76: 1f:53:e2:39:cc:a5:c7:e0:7c:08:4d:70:4b:8b:f1:74:2a:75: 66:7f:0e:30 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUFZPuFVEkPT1r6GlF2/uk1IpHfn4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVlODY0OGU0NDVkY2NkMGQ4ZWU2OTlmNTE0MGJiODE0 ZTQzYWUxYjAeFw0yNTA3MjIwMzIxNTRaFw0yNTA3MjMwNDEwNTRaMDMxMTAvBgNV BAMTKEE1RTBBREU4RjJCMEJGQTJGRkY4MkU1QTlEREUxNjRFNDcyQ0JGNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyD0A5M8dAgVG2NDVp5zKwpgCN h/pT4xpIYqd/6ML/0gruI0wOgZClAIIBbQnI6T2CGrp5LoDdbvydJpGaw+onfQTP xP8iwtOS/OJmg6G9SDIh7Fb8jiK3xNWkvq7jaEnACdmE/vQPGFVOQtoh7N4uOnmB aow/lUV8XoT1SI9ZcsrJMfvBOxahgKtxRU46maTgulfva/T/IzJQE8ZPB+cf0kzp gER8yBeLSmdMQ6ShgAkLR0QsoabeFnbsRzMEdpZMvzGsy2WK4+jdpK4jlsRCwWGJ M1hw+isS76X016IvMcUKgnptqQ7SYJD71JNpZZxW0hK5wUwkd00l3ymbA/s5AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUpeCt6PKwv6L/+C5and4WTkcsv1owHwYDVR0j BBgwFoAURehkjkRdzNDY7mmfUUC7gU5DrhswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTMzYjJmZDctMzFjMS00NTFjLTgyODgtYzFhYTBhYTEy NzUwLzAvNDVFODY0OEU0NDVEQ0NEMEQ4RUU2OTlGNTE0MEJCODE0RTQzQUUxQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JlaGtqa1Jkek5EWTdtbWZVVUM3Z1U1 RHJocy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85MzNiMmZkNy0z MWMxLTQ1MWMtODI4OC1jMWFhMGFhMTI3NTAvMC80NUU4NjQ4RTQ0NURDQ0QwRDhF RTY5OUY1MTQwQkI4MTRFNDNBRTFCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABo7bwByDkdISsfYoxciE b8Ah34uM9YkXGl3FzNBbLAO4Qn5j+nVR5zkmiSwxiCG4BsxI7WcxKiNEzzPra8NR 3iVEPQ2lizSWjaAo4A0wOQFYilpf7JjwonP8LxSAfiglgotPM5Jfw5vFa4nNvA6e /8FCRyCWUQJkF86R84cRWCCO+q4Mwi2lV8HuxXvfH0Mgymz2SeUQIFf/h87r4fh6 mg/M8l0/PtZ4TwMi4A0Kib3RCQF4jNe2JVNpdY9m8MLkWu7A/AXGTYl3KHikZTuQ Xf/nlLD2S92kcUp6UOM5P5hY0h7ve0EIdNV2H1PiOcylx+B8CE1wS4vxdCp1Zn8O MA== -----END CERTIFICATE-----Generated at Tue Jul 22 11:53:39 2025 by rpki-client