$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft File: 45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft (raw, json) Hash identifier: O7oeL4l8vzCKcxQZb4qAF20yGJY5ygPfHLZjSf3UCa4= Subject key identifier: 29:61:E8:DD:7B:79:B4:3E:AE:B4:60:0C:5C:5D:6F:CC:80:83:B6:33 Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b Certificate serial: 69719F4F54F2B1BEBF44E53239FC55DEA91A3F96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft Manifest number: 0366 Signing time: Wed 04 Nov 2026 00:01:22 +0000 Manifest this update: Tue 03 Nov 2026 23:56:22 +0000 Manifest next update: Thu 05 Nov 2026 00:44:22 +0000 Files and hashes: 1: 37372e38312e38302e302f32332d3234203d3e2032393134.roa (hash: Uk2rPFeOxHUpPmDQA270+UBZgX6MkiuroznsTL3MTAQ=) 2: 3132382e36352e3137322e302f32322d3234203d3e203330303432.roa (hash: DSlvyhOE27ifyw6VjV6XrUzDbR/BoOjnZsqvdmTDr1Q=) 3: 3132382e36352e3136342e302f32322d3232203d3e2033333230.roa (hash: MdPKw7OONGYXcOZWO/o2hEi1vtA1V+k+wu8N5c3I5aE=) 4: 3139342e32362e32302e302f32342d3234203d3e20323132323338.roa (hash: 39u3b1aPs44ID+slKDmXnVmqBOUo9+ShXVBFlRqmNOw=) 5: 3139332e3234362e3136342e302f32342d3234203d3e20323134343332.roa (hash: dY1TZgYtt2XOIsVBxW8tOuYVl+qsqJFS06ZKgYUYzuc=) 6: 3138352e33392e3138322e302f32342d3234203d3e203438353932.roa (hash: 2GU98PVW8A06wPHFP07dWrMXh03+0FNfaArisd+625g=) 7: 3139332e3234362e3136352e302f32342d3234203d3e20343031323935.roa (hash: L44J+BEkrVdft9AVRNXbl2gKqXXH8VsPAtFPRC3L9uU=) 8: 3132382e36352e3136382e302f32322d3234203d3e203330303432.roa (hash: 7BzSmJ15P3QTS60gWSlFZO7HXz+m8LuLu0WYkYzrW3Q=) 9: 3132382e36352e3136322e302f32342d3234203d3e20313336383039.roa (hash: soLGmX03Exb7hU+XoROGbNC+uLsxhvtPCvpT5TuzWvg=) 10: 3132382e36352e3136322e302f32342d3234203d3e20343032333130.roa (hash: b9TZaVasBg7oOWZ8FDQH0/ungr/hONOiMrcd7u4G6Dk=) 11: 3139342e32362e322e302f32342d3234203d3e20313532363036.roa (hash: eqZBf/Kthrhj6d5hUFfVX4Q8O8f60CabneFHuJYT6QU=) 12: 3139342e32362e332e302f32342d3234203d3e203437313732.roa (hash: WecgztBCMOrv7RFn52YrsqTbPYVeZl+PuqJXDN3/21E=) 13: 37372e38312e38332e302f32342d3234203d3e203438353932.roa (hash: Tv5q+rfM3afhLe0aBDFGLWT8PXWC4GLzMQF3H6VLFL8=) 14: 37372e38312e37382e302f32342d3234203d3e203438353932.roa (hash: 5R59EysS9tL6UTIvemaJCrtszj6x6/cuKApXJ2KN9Lk=) 15: 39312e3230392e3137392e302f32342d3234203d3e2036303739.roa (hash: uNAQ4j+11GZvakb42sQCtDYoj40PG7WcMOyOEXVSeKA=) 16: 37372e38312e37392e302f32342d3234203d3e20313334343934.roa (hash: qU6CPFXDKVCng7eqUFr6a/7LI7VlvXbOmSMmzMmB18I=) 17: 3138352e33392e3138302e302f32342d3234203d3e203438353932.roa (hash: ZWyLSTcE9mAQsDVjLP4sbforwwRF0gy7YQkGUCm2B9s=) 18: 45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl (hash: XB/Mfl1z7D9pxELRXrsH527eRUoEDs6NgwTgqqsZGbI=) 19: 37372e38312e37362e302f32342d3234203d3e203438353932.roa (hash: xdM7OBZ/9TbpR6di66FXGgK7azfT3ftRTjEe6Yt/SjQ=) 20: 3132382e36352e3136302e302f32342d3234203d3e20323033313536.roa (hash: JUjaDwkT0/1fE2CRxDQCJMCmVqnnZ3+XKwAOWGj+wr0=) 21: 3132382e36352e3136332e302f32342d3234203d3e20323033313536.roa (hash: je556DLLJkr4a6qPLiCYL8vf7xRTor1lYBCu4rtrxvI=) 22: 3138382e3231342e3233322e302f32332d3234203d3e2035303635.roa (hash: x3PmGOoet0cDs7+uuyuNJtaOTgdNjDt0p0iGeQg4oNo=) 23: 37372e38312e37372e302f32342d3234203d3e203438323636.roa (hash: 5I0vOu7kvIMlEY7Sq8XZtvSWHaZxS4B46RvJVyxx8WI=) 24: 3132382e36352e3136312e302f32342d3234203d3e2036343735.roa (hash: w9M2BBTop13WU8kUevL0gA67VApSWNrUSzG6rTYYLtE=) 25: 37372e38312e38322e302f32342d3234203d3e203438353932.roa (hash: d5TxhwAkeXwrF6uRbXxfjKGJfxHDWIa7sLTALcjfvN4=) 26: 3138352e33392e3138332e302f32342d3234203d3e203438353932.roa (hash: 5y1BpEcUWIqqauwo2u2KJKPFMCa0JPAhvtiDqGTVDHw=) 27: 37372e38312e38302e302f32332d3234203d3e20313439353133.roa (hash: r4rgRdmHxL6zUIjUUToF3HErC6iHTpIj4UU/NY+IAwk=) 28: 3139342e32362e32312e302f32342d3234203d3e20313337343130.roa (hash: cz5NaO8PZfahIzPXiGIcN928v67AM0ohruVa3m9xndI=) 29: 37372e38312e38302e302f32332d3234203d3e2039333034.roa (hash: MIApXDH6YOzAFXzKHqvpSjvtem/bVMwfp5Xe6AuGxDk=) 30: 3138352e33392e3138312e302f32342d3234203d3e203438353932.roa (hash: wPa88HthyMje0FC4DyK9XcGEOLxJkylfsOcQDqr+i80=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Nov 2026 00:44:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:71:9f:4f:54:f2:b1:be:bf:44:e5:32:39:fc:55:de:a9:1a:3f:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b Validity Not Before: Nov 3 23:56:22 2026 GMT Not After : Nov 5 00:44:22 2026 GMT Subject: CN=2961E8DD7B79B43EAEB4600C5C5D6FCC8083B633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:39:34:c5:76:8a:a2:2d:70:a2:9f:80:6a:36: cf:4e:a6:d5:c4:62:70:65:2b:47:a6:ee:b6:5d:d0: a6:66:b2:91:47:b9:93:27:bd:80:5e:ca:1f:cf:60: c8:42:55:eb:5f:df:02:88:d9:ac:5b:f9:c6:92:bc: 25:6a:b0:e6:1e:12:c7:61:d1:14:6e:e1:ce:d7:2f: 47:09:02:ec:e0:6a:11:6c:ea:57:8b:8f:ee:67:af: fd:51:cb:27:37:1f:6f:67:4a:fa:8a:4e:2f:9d:f7: b6:7d:ed:49:f4:3f:52:eb:22:55:9b:ca:91:ab:b5: a0:aa:c0:42:8c:8a:e9:cc:89:62:47:41:52:d5:c1: 26:1b:ef:df:bf:e8:17:7b:86:89:01:3f:db:15:8f: 57:f8:b0:7e:f0:f9:a1:21:59:c8:a4:cf:76:2d:ac: eb:c6:a9:8c:06:2b:a2:f0:a2:84:fb:eb:98:7b:9e: a7:da:d5:8b:44:6e:f7:12:68:d1:d1:c8:ec:72:87: 8f:ea:f5:75:00:c8:28:f0:1f:02:65:05:7a:cc:21: 11:dd:e4:74:1e:6e:08:81:51:89:66:4b:0e:d3:18: 12:37:d1:79:55:a9:ab:32:96:17:c6:b9:66:95:63: 41:4a:3d:be:b4:84:e7:26:55:3e:35:6f:62:ce:c5: 88:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:61:E8:DD:7B:79:B4:3E:AE:B4:60:0C:5C:5D:6F:CC:80:83:B6:33 X509v3 Authority Key Identifier: keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:d7:2b:59:17:ad:bf:91:2a:2d:68:88:64:90:04:41:61:2d: 9a:92:a8:62:e1:72:69:76:65:44:8e:65:0b:77:1d:4e:11:88: e8:68:5b:e3:5b:62:84:cf:9b:41:0a:99:10:24:7e:3e:f1:2d: 91:16:37:f9:75:9e:8c:bc:62:a2:c3:0b:48:4b:f6:bb:d2:3c: ea:5b:df:a3:31:b2:06:b0:b8:53:3e:9b:33:78:4d:9d:86:ae: 71:0f:8f:cc:b3:cb:48:27:a8:82:f6:b0:90:63:d8:02:ea:e4: e9:c7:fa:42:a4:a5:8f:5d:61:4d:f0:25:c1:27:57:06:e9:84: ff:f3:93:cf:5e:c1:bf:34:69:41:e1:69:e9:0f:27:cc:bd:3b: fd:6c:52:ca:7a:0d:ac:d1:98:a8:54:fa:c1:d2:e9:84:34:58: fe:6d:33:ac:b0:67:17:a1:c1:c8:08:c3:22:c4:d9:95:78:70: 02:18:c1:82:4d:48:16:80:10:80:ca:9f:13:a9:c3:78:f9:40: 1c:08:b2:eb:c6:22:b8:17:d8:a3:a4:f1:d4:bd:98:a7:25:f8: 45:54:f8:ad:66:4f:b2:fb:0d:1d:af:d5:c1:ee:20:30:24:8d: f6:b4:f1:ea:f2:8e:94:94:3c:8a:3c:36:b2:30:30:c8:11:a9: 92:52:20:50 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUaXGfT1Tysb6/ROUyOfxV3qkaP5YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVlODY0OGU0NDVkY2NkMGQ4ZWU2OTlmNTE0MGJiODE0 ZTQzYWUxYjAeFw0yNjExMDMyMzU2MjJaFw0yNjExMDUwMDQ0MjJaMDMxMTAvBgNV BAMTKDI5NjFFOEREN0I3OUI0M0VBRUI0NjAwQzVDNUQ2RkNDODA4M0I2MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8OTTFdoqiLXCin4BqNs9OptXE YnBlK0em7rZd0KZmspFHuZMnvYBeyh/PYMhCVetf3wKI2axb+caSvCVqsOYeEsdh 0RRu4c7XL0cJAuzgahFs6leLj+5nr/1Ryyc3H29nSvqKTi+d97Z97Un0P1LrIlWb ypGrtaCqwEKMiunMiWJHQVLVwSYb79+/6Bd7hokBP9sVj1f4sH7w+aEhWcikz3Yt rOvGqYwGK6LwooT765h7nqfa1YtEbvcSaNHRyOxyh4/q9XUAyCjwHwJlBXrMIRHd 5HQebgiBUYlmSw7TGBI30XlVqasylhfGuWaVY0FKPb60hOcmVT41b2LOxYiFAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUKWHo3Xt5tD6utGAMXF1vzICDtjMwHwYDVR0j BBgwFoAURehkjkRdzNDY7mmfUUC7gU5DrhswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTMzYjJmZDctMzFjMS00NTFjLTgyODgtYzFhYTBhYTEy NzUwLzAvNDVFODY0OEU0NDVEQ0NEMEQ4RUU2OTlGNTE0MEJCODE0RTQzQUUxQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JlaGtqa1Jkek5EWTdtbWZVVUM3Z1U1 RHJocy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85MzNiMmZkNy0z MWMxLTQ1MWMtODI4OC1jMWFhMGFhMTI3NTAvMC80NUU4NjQ4RTQ0NURDQ0QwRDhF RTY5OUY1MTQwQkI4MTRFNDNBRTFCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMtcrWRetv5EqLWiIZJAE QWEtmpKoYuFyaXZlRI5lC3cdThGI6Ghb41tihM+bQQqZECR+PvEtkRY3+XWejLxi osMLSEv2u9I86lvfozGyBrC4Uz6bM3hNnYaucQ+PzLPLSCeogvawkGPYAurk6cf6 QqSlj11hTfAlwSdXBumE//OTz17BvzRpQeFp6Q8nzL07/WxSynoNrNGYqFT6wdLp hDRY/m0zrLBnF6HByAjDIsTZlXhwAhjBgk1IFoAQgMqfE6nDePlAHAiy68YiuBfY o6Tx1L2YpyX4RVT4rWZPsvsNHa/Vwe4gMCSN9rTx6vKOlJQ8ijw2sjAwyBGpklIg UA== -----END CERTIFICATE-----Generated at Wed Nov 4 14:30:35 2026 by rpki-client