$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft File: 45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft (raw, json) Hash identifier: wdbYzgdd5QhGF1yKpFDMZyjN4H7fhP78NtR3+gyrfyQ= Subject key identifier: A7:D3:16:06:00:F8:DC:4D:AB:4B:63:BD:97:A6:EB:61:91:EC:57:F2 Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b Certificate serial: 6E502C0FCC216E48F152106A1C2B9DB597364319 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft Manifest number: 0106 Signing time: Sun 07 Sep 2025 00:06:35 +0000 Manifest this update: Sun 07 Sep 2025 00:01:35 +0000 Manifest next update: Mon 08 Sep 2025 01:52:35 +0000 Files and hashes: 1: 3139342e32362e332e302f32342d3234203d3e203236373337.roa (hash: vAloYgRmheNvh8P1qphoutsfkKJ8NLcb3vYOmiEsQYI=) 2: 37372e38312e37362e302f32342d3234203d3e203438353932.roa (hash: AeGgNi4bw9l3zN1DkQ6g095MQ+7U7OthIn51Fzss3Oc=) 3: 45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl (hash: R5uw5kdFQZTtoyhPnkzO/zm7GvRz62fUb+KG6nMuhEI=) 4: 3138352e33392e3138322e302f32342d3234203d3e203438353932.roa (hash: ZRiHbt3iKKs0O/K+Xj70IALSK3+jGBgHEkJ3Uk6rxC8=) 5: 37372e38312e38322e302f32342d3234203d3e203438353932.roa (hash: g9+qPCIMbMsxLbmabycfUHp6SrIAw5buxV/5VJi8ArY=) 6: 3138352e33392e3138302e302f32342d3234203d3e203438353932.roa (hash: eRfFsAmiOd7fmXSkLY1iDQqDLPihvnF73pAdlTyZEec=) 7: 3139342e32362e32312e302f32342d3234203d3e20343031383338.roa (hash: W6OrrdK1OeSj0zhiikePRhbHjS9VOD7qyg5G4TQyO4k=) 8: 3138352e33392e3138332e302f32342d3234203d3e203438353932.roa (hash: 1itaUJD6MM9qJoykl2AD3Me7plWTAUPMb45hv4KS1Is=) 9: 37372e38312e37382e302f32342d3234203d3e203438353932.roa (hash: sxtXA2eVprRgAPdjB6IZUpHTWxye7ZI2nEVGAB55zbo=) 10: 37372e38312e37392e302f32342d3234203d3e20343031383338.roa (hash: jqhfslJN0nyOj/30XxhLZVefzpoYoh0e1/irmr4G57s=) 11: 3132382e36352e3136302e302f32322d3232203d3e203438353932.roa (hash: e2sDKCcJlT/U2mWShGzkoM6fLVC3axyQA7582KFjXl0=) 12: 3139342e32362e32302e302f32342d3234203d3e20323132323338.roa (hash: YP/VU7Ddy/RINA1ejeDsmhFrZUIqFHueTf4iQvV7+Jw=) 13: 3138352e33392e3138312e302f32342d3234203d3e203438353932.roa (hash: Vuif+1Rwal2KWngsbR1gG7PlppvF8JCFTHMdlSgwTho=) 14: 3132382e36352e3136382e302f32312d3234203d3e2036303739.roa (hash: i6JhDTo2qgsHKnhvdAD8kBBVl6YUcjppNLTK7aRFku0=) 15: 37372e38312e37392e302f32342d3234203d3e2037303138.roa (hash: Mtmk/kZphhA5s4uopguvEbJvjOjUXgfeStc99+50/4U=) 16: 3132382e36352e3136342e302f32322d3232203d3e2033333230.roa (hash: jUzg8MFBi50HDoiq8ZBSiLc/BkEY3Sqp4qzgmYg5v/k=) 17: 37372e38312e38332e302f32342d3234203d3e203438353932.roa (hash: FUbnkxuvcKLpw8C4HQaABzR8zDln4ay05cwGyEgtqLs=) 18: 3139342e32362e322e302f32342d3234203d3e2037303138.roa (hash: KZ2g79XWhSpy1OjdBEbA7bKBiIPr4KF5cEbdhi1cO+c=) 19: 37372e38312e38302e302f32332d3233203d3e203230383630.roa (hash: ENs1tyjr+QsCNkYiVs8CGb16BSmudiUVAdhDAu4V/ek=) 20: 3139342e32362e322e302f32342d3234203d3e20343031383338.roa (hash: hww+5Hf4jmFo7Au813kPo2lBtFDkf7ALOlVDrCFDow8=) 21: 3139342e32362e32312e302f32342d3234203d3e2037303138.roa (hash: 7yEbo3DradWn9p6FL6O0sR90rL76BXVbRvfqqu/D+3E=) 22: 3138382e3231342e3233322e302f32332d3233203d3e2035303635.roa (hash: BFuLnnyWuJctlm6cMRTXIHiK+UW5qbLi6zguqt9+aRs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 01:52:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:50:2c:0f:cc:21:6e:48:f1:52:10:6a:1c:2b:9d:b5:97:36:43:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b Validity Not Before: Sep 7 00:01:35 2025 GMT Not After : Sep 8 01:52:35 2025 GMT Subject: CN=A7D3160600F8DC4DAB4B63BD97A6EB6191EC57F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:62:7d:e8:50:1c:4c:b2:8b:5c:b8:fb:19:7e: da:1c:32:07:3f:ac:2a:d1:bc:ef:7c:63:00:49:46: fd:0e:3f:e8:71:ff:57:bd:bf:68:4f:5f:5f:bb:c2: fd:29:c8:ac:6e:16:fd:c3:79:20:aa:2b:f1:dc:3e: 17:99:43:1a:4d:26:11:8b:81:ef:a1:5c:8d:03:54: 6b:bd:3b:0e:e8:c2:40:0f:0f:72:59:a7:5a:be:96: 03:48:f4:88:03:fe:a0:03:5d:58:70:56:4a:e1:6a: f1:79:a0:02:b5:78:dd:01:ae:70:40:13:5a:9e:e9: f9:a2:e1:0e:88:bd:03:37:56:62:66:cc:e2:4b:e6: 5a:73:a6:72:d6:9f:5e:9c:66:1e:e1:0f:10:de:fe: 48:1d:50:4e:61:65:15:90:0a:54:a4:92:59:bc:43: c7:9c:70:d4:ba:ba:64:a7:b6:2d:27:20:75:64:7a: 6a:40:9f:42:c5:44:ab:5c:49:ad:e1:9a:3e:94:49: 0a:b8:19:29:0e:f2:92:ee:1d:c9:c5:25:e9:57:e3: fe:0b:5d:91:6b:16:65:7e:e8:80:10:45:4b:94:f3: c9:d8:71:3f:02:e4:a8:7e:fd:1a:1a:0a:1a:99:1c: 34:8a:bc:68:9c:15:53:e6:21:d8:86:92:7c:2b:00: e5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:D3:16:06:00:F8:DC:4D:AB:4B:63:BD:97:A6:EB:61:91:EC:57:F2 X509v3 Authority Key Identifier: keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:8b:26:4e:e0:a8:44:26:c2:49:12:b6:f4:b5:ad:e8:29:6e: 91:d3:5d:2d:cf:29:7f:74:16:9a:bd:f2:fc:9c:4e:e8:f0:c6: 36:10:28:97:c7:29:54:0c:36:6e:60:d8:06:49:ec:cc:f5:ed: 55:20:33:63:06:56:ef:b5:f3:81:97:df:0e:35:5b:76:c0:57: 19:db:3e:58:c4:6a:d1:4f:0b:d2:ef:3d:ac:64:4f:b8:a2:e8: 66:51:ca:3d:4b:42:44:e9:08:9e:90:c7:f0:3f:1c:09:ee:db: 94:6c:a3:11:c6:ed:8d:b6:1d:6e:00:c3:cc:36:2c:23:9b:07: 1d:c2:f4:3c:ea:7d:cd:b8:44:80:b7:92:d5:51:e0:09:0b:b9: e5:73:de:73:11:73:bf:8b:8b:a7:73:4c:36:b2:20:b7:41:2a: d0:89:2b:a3:ad:90:ac:7f:36:12:21:66:88:e3:41:89:ad:d8: f1:dd:e5:e9:a2:ba:52:50:cf:a5:fa:6c:be:cf:7c:6a:23:6d: e8:14:17:90:9a:46:35:95:f5:cb:c6:18:1b:32:6a:83:38:d4: 60:af:5b:2f:b0:23:78:85:cc:5e:8c:3a:ed:b9:d0:a6:1d:b3: 79:ae:6e:98:d7:2e:95:14:f5:e8:8e:9d:bc:78:c8:11:76:b9: c3:d9:e4:13 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUblAsD8whbkjxUhBqHCudtZc2QxkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVlODY0OGU0NDVkY2NkMGQ4ZWU2OTlmNTE0MGJiODE0 ZTQzYWUxYjAeFw0yNTA5MDcwMDAxMzVaFw0yNTA5MDgwMTUyMzVaMDMxMTAvBgNV BAMTKEE3RDMxNjA2MDBGOERDNERBQjRCNjNCRDk3QTZFQjYxOTFFQzU3RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Yn3oUBxMsotcuPsZftocMgc/ rCrRvO98YwBJRv0OP+hx/1e9v2hPX1+7wv0pyKxuFv3DeSCqK/HcPheZQxpNJhGL ge+hXI0DVGu9Ow7owkAPD3JZp1q+lgNI9IgD/qADXVhwVkrhavF5oAK1eN0BrnBA E1qe6fmi4Q6IvQM3VmJmzOJL5lpzpnLWn16cZh7hDxDe/kgdUE5hZRWQClSkklm8 Q8eccNS6umSnti0nIHVkempAn0LFRKtcSa3hmj6USQq4GSkO8pLuHcnFJelX4/4L XZFrFmV+6IAQRUuU88nYcT8C5Kh+/RoaChqZHDSKvGicFVPmIdiGknwrAOUtAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUp9MWBgD43E2rS2O9l6brYZHsV/IwHwYDVR0j BBgwFoAURehkjkRdzNDY7mmfUUC7gU5DrhswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTMzYjJmZDctMzFjMS00NTFjLTgyODgtYzFhYTBhYTEy NzUwLzAvNDVFODY0OEU0NDVEQ0NEMEQ4RUU2OTlGNTE0MEJCODE0RTQzQUUxQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JlaGtqa1Jkek5EWTdtbWZVVUM3Z1U1 RHJocy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85MzNiMmZkNy0z MWMxLTQ1MWMtODI4OC1jMWFhMGFhMTI3NTAvMC80NUU4NjQ4RTQ0NURDQ0QwRDhF RTY5OUY1MTQwQkI4MTRFNDNBRTFCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqIsmTuCoRCbCSRK29LWt 6ClukdNdLc8pf3QWmr3y/JxO6PDGNhAol8cpVAw2bmDYBknszPXtVSAzYwZW77Xz gZffDjVbdsBXGds+WMRq0U8L0u89rGRPuKLoZlHKPUtCROkInpDH8D8cCe7blGyj EcbtjbYdbgDDzDYsI5sHHcL0POp9zbhEgLeS1VHgCQu55XPecxFzv4uLp3NMNrIg t0Eq0Ikro62QrH82EiFmiONBia3Y8d3l6aK6UlDPpfpsvs98aiNt6BQXkJpGNZX1 y8YYGzJqgzjUYK9bL7AjeIXMXow67bnQph2zea5umNculRT16I6dvHjIEXa5w9nk Ew== -----END CERTIFICATE-----Generated at Sun Sep 7 13:49:20 2025 by rpki-client