$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft File: 45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft (raw, json) Hash identifier: RwYX8zLtd7QUM8aLregYBkwBkcMmteW8pAIk6AaQ00Q= Subject key identifier: 84:94:5F:D1:BE:AC:DA:53:D8:5B:D6:81:6E:33:54:14:D4:BC:B2:2B Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b Certificate serial: 2C629882B15730196C4EEEA4F62F36E19A8D95A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft Manifest number: 2B Signing time: Fri 04 Apr 2025 09:25:38 +0000 Manifest this update: Fri 04 Apr 2025 09:20:38 +0000 Manifest next update: Sat 05 Apr 2025 10:04:38 +0000 Files and hashes: 1: 37372e38312e38302e302f32332d3233203d3e20383334.roa (hash: 8VRwgNXvFUdu3kfmO50807gw1BniQhmC877LSnpGZWg=) 2: 37372e38312e38332e302f32342d3234203d3e203438353932.roa (hash: FUbnkxuvcKLpw8C4HQaABzR8zDln4ay05cwGyEgtqLs=) 3: 3138352e33392e3138312e302f32342d3234203d3e203438353932.roa (hash: Vuif+1Rwal2KWngsbR1gG7PlppvF8JCFTHMdlSgwTho=) 4: 3139342e32362e332e302f32342d3234203d3e203236373337.roa (hash: vAloYgRmheNvh8P1qphoutsfkKJ8NLcb3vYOmiEsQYI=) 5: 3138352e33392e3138302e302f32342d3234203d3e203438353932.roa (hash: eRfFsAmiOd7fmXSkLY1iDQqDLPihvnF73pAdlTyZEec=) 6: 37372e38312e38322e302f32342d3234203d3e203438353932.roa (hash: g9+qPCIMbMsxLbmabycfUHp6SrIAw5buxV/5VJi8ArY=) 7: 3132382e36352e3136342e302f32322d3232203d3e2033333230.roa (hash: jUzg8MFBi50HDoiq8ZBSiLc/BkEY3Sqp4qzgmYg5v/k=) 8: 3138352e33392e3138322e302f32342d3234203d3e203438353932.roa (hash: ZRiHbt3iKKs0O/K+Xj70IALSK3+jGBgHEkJ3Uk6rxC8=) 9: 37372e38312e37392e302f32342d3234203d3e2037303138.roa (hash: Mtmk/kZphhA5s4uopguvEbJvjOjUXgfeStc99+50/4U=) 10: 37372e38312e37372e302f32342d3234203d3e20313337353137.roa (hash: mnQJW4GBjGEsRXTh3Y2cxT8Pj8O29OUkMaI68Qj1ywg=) 11: 39312e3230392e3137392e302f32342d3234203d3e2039323332.roa (hash: DUgBG+DDM8ST08Z0XIhaDsSEtBOUn3VXDgiNBjQq7a4=) 12: 3138382e3231342e3233322e302f32332d3233203d3e2035303635.roa (hash: BFuLnnyWuJctlm6cMRTXIHiK+UW5qbLi6zguqt9+aRs=) 13: 45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl (hash: oapBt/ZEIMo3R42JWVunZTycmuyLGl999Zx1LpRtifs=) 14: 3132382e36352e3136302e302f32322d3232203d3e203438353932.roa (hash: e2sDKCcJlT/U2mWShGzkoM6fLVC3axyQA7582KFjXl0=) 15: 3138352e33392e3138332e302f32342d3234203d3e203438353932.roa (hash: 1itaUJD6MM9qJoykl2AD3Me7plWTAUPMb45hv4KS1Is=) 16: 3139342e32362e32312e302f32342d3234203d3e2037303138.roa (hash: 7yEbo3DradWn9p6FL6O0sR90rL76BXVbRvfqqu/D+3E=) 17: 37372e38312e37382e302f32342d3234203d3e203438353932.roa (hash: sxtXA2eVprRgAPdjB6IZUpHTWxye7ZI2nEVGAB55zbo=) 18: 3139342e32362e322e302f32342d3234203d3e2037303138.roa (hash: KZ2g79XWhSpy1OjdBEbA7bKBiIPr4KF5cEbdhi1cO+c=) 19: 37372e38312e37362e302f32342d3234203d3e203438353932.roa (hash: AeGgNi4bw9l3zN1DkQ6g095MQ+7U7OthIn51Fzss3Oc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 10:04:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:62:98:82:b1:57:30:19:6c:4e:ee:a4:f6:2f:36:e1:9a:8d:95:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b Validity Not Before: Apr 4 09:20:38 2025 GMT Not After : Apr 5 10:04:38 2025 GMT Subject: CN=84945FD1BEACDA53D85BD6816E335414D4BCB22B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b9:30:71:a2:2d:32:41:0c:ff:45:11:c1:07: c2:70:06:ca:a5:17:d9:31:ea:c8:a4:79:e1:1d:bd: 82:ae:70:a6:da:27:f7:c1:ec:99:b7:53:93:fd:83: b7:6f:4e:a8:96:81:e7:28:99:be:56:c4:96:78:8b: 81:8e:94:67:13:f7:b2:3c:0d:c0:23:4b:7c:dc:54: 0e:78:27:fe:29:ff:a9:34:ea:93:2f:77:2b:f2:c3: df:e9:d2:0c:31:03:c4:6d:58:fd:5b:79:07:34:e9: 95:21:fb:95:62:05:6f:6a:cc:50:40:eb:e1:8c:2d: b9:a4:af:de:bc:4a:ea:4d:65:2c:9c:a1:8e:ba:f6: 9e:3a:99:14:61:ca:0f:f8:9e:79:36:f9:7c:28:f5: af:08:9f:55:db:95:b7:d8:7d:15:3d:e0:0e:da:f7: ac:5f:7d:1f:d5:4d:34:5b:0d:73:46:99:d2:72:75: 54:bd:96:4d:44:af:15:98:c5:0c:6d:e2:2f:35:57: 37:64:1c:1d:4d:b9:bf:2c:da:9f:6d:a1:7b:f0:dc: 76:b2:8f:59:19:c5:e8:1c:e6:cd:2f:25:ab:c0:78: 9a:93:72:f9:b9:14:e5:37:df:45:4d:2d:c8:4a:64: 2f:9c:0c:6e:a0:b0:0d:c9:c6:ba:2c:8f:73:7c:7c: 82:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:94:5F:D1:BE:AC:DA:53:D8:5B:D6:81:6E:33:54:14:D4:BC:B2:2B X509v3 Authority Key Identifier: keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:82:35:d0:6f:71:81:d1:58:d2:63:96:88:cc:6a:33:fc:84: 1e:e2:75:8d:f4:0a:d2:dd:90:61:6e:73:62:7a:ec:08:a3:98: 2f:1c:0e:a4:42:42:77:77:6b:b9:2a:c6:56:b6:5b:9c:28:5b: 4d:04:51:8a:ed:7b:0d:ff:ed:23:10:37:2b:12:bd:cb:df:c7: 57:23:3a:d2:46:df:88:a6:17:69:37:74:e5:ed:e0:fd:74:98: ff:f6:1b:c5:7d:cc:2d:a9:88:91:ed:16:59:4e:32:d1:1f:2f: d2:de:10:31:6a:fe:f8:82:15:18:12:21:be:45:fb:fe:67:4d: d0:44:86:43:75:5c:b5:a4:b9:91:f1:82:47:d7:79:ba:66:1e: ae:8a:0d:57:c6:91:2f:ca:17:14:8b:97:e6:12:04:03:0a:96: 0e:31:51:10:1f:18:8b:36:43:6f:4e:9c:84:f9:d8:8d:3b:3c: 99:0a:c2:0d:26:c0:ca:fc:19:7d:49:e3:48:51:b4:49:6c:be: e3:7c:39:3b:5d:4e:4d:f7:8f:8b:9b:32:90:56:b3:61:da:21: 8d:98:1e:14:dd:3e:13:49:a7:3d:44:9f:15:17:de:99:61:42: 0b:3d:d7:5a:ca:dc:2d:1e:7e:4c:b8:56:f8:75:f1:62:6e:45: 29:cb:25:95 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIULGKYgrFXMBlsTu6k9i824ZqNlakwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVlODY0OGU0NDVkY2NkMGQ4ZWU2OTlmNTE0MGJiODE0 ZTQzYWUxYjAeFw0yNTA0MDQwOTIwMzhaFw0yNTA0MDUxMDA0MzhaMDMxMTAvBgNV BAMTKDg0OTQ1RkQxQkVBQ0RBNTNEODVCRDY4MTZFMzM1NDE0RDRCQ0IyMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5uTBxoi0yQQz/RRHBB8JwBsql F9kx6sikeeEdvYKucKbaJ/fB7Jm3U5P9g7dvTqiWgecomb5WxJZ4i4GOlGcT97I8 DcAjS3zcVA54J/4p/6k06pMvdyvyw9/p0gwxA8RtWP1beQc06ZUh+5ViBW9qzFBA 6+GMLbmkr968SupNZSycoY669p46mRRhyg/4nnk2+Xwo9a8In1XblbfYfRU94A7a 96xffR/VTTRbDXNGmdJydVS9lk1ErxWYxQxt4i81VzdkHB1Nub8s2p9toXvw3Hay j1kZxegc5s0vJavAeJqTcvm5FOU330VNLchKZC+cDG6gsA3Jxrosj3N8fIKDAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUhJRf0b6s2lPYW9aBbjNUFNS8siswHwYDVR0j BBgwFoAURehkjkRdzNDY7mmfUUC7gU5DrhswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTMzYjJmZDctMzFjMS00NTFjLTgyODgtYzFhYTBhYTEy NzUwLzAvNDVFODY0OEU0NDVEQ0NEMEQ4RUU2OTlGNTE0MEJCODE0RTQzQUUxQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JlaGtqa1Jkek5EWTdtbWZVVUM3Z1U1 RHJocy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85MzNiMmZkNy0z MWMxLTQ1MWMtODI4OC1jMWFhMGFhMTI3NTAvMC80NUU4NjQ4RTQ0NURDQ0QwRDhF RTY5OUY1MTQwQkI4MTRFNDNBRTFCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS4I10G9xgdFY0mOWiMxq M/yEHuJ1jfQK0t2QYW5zYnrsCKOYLxwOpEJCd3druSrGVrZbnChbTQRRiu17Df/t IxA3KxK9y9/HVyM60kbfiKYXaTd05e3g/XSY//YbxX3MLamIke0WWU4y0R8v0t4Q MWr++IIVGBIhvkX7/mdN0ESGQ3VctaS5kfGCR9d5umYerooNV8aRL8oXFIuX5hIE AwqWDjFREB8YizZDb06chPnYjTs8mQrCDSbAyvwZfUnjSFG0SWy+43w5O11OTfeP i5sykFazYdohjZgeFN0+E0mnPUSfFRfemWFCCz3XWsrcLR5+TLhW+HXxYm5FKcsl lQ== -----END CERTIFICATE-----Generated at Sat Apr 5 03:51:54 2025 by rpki-client