$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft File: 45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft (raw, json) Hash identifier: uErtRS48NhmeCfIomXgedxJ3ihckEkYJX3snjhr4zSI= Subject key identifier: 9C:22:B6:58:64:9D:96:8A:1F:23:3D:56:87:66:94:60:8A:77:C4:F5 Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b Certificate serial: 33DA15BB24FAA5DCA60A5F499E93C66D9CA128FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft Manifest number: 02DB Signing time: Mon 03 Aug 2026 22:28:56 +0000 Manifest this update: Mon 03 Aug 2026 22:23:56 +0000 Manifest next update: Wed 05 Aug 2026 00:52:56 +0000 Files and hashes: 1: 3138382e3231342e3233322e302f32332d3234203d3e2035303635.roa (hash: x3PmGOoet0cDs7+uuyuNJtaOTgdNjDt0p0iGeQg4oNo=) 2: 3139342e32362e322e302f32342d3234203d3e2036303739.roa (hash: eXWT+PlyOnJLCf8fJSBgFCoZbaqBMmvm3nL9Np0p08s=) 3: 3139342e32362e322e302f32342d3234203d3e20343032323336.roa (hash: Svrr+wgr/nQThaTFfhRBjAYu9J8WfdukPNEs2F7UKRs=) 4: 3139332e3234362e3136342e302f32342d3234203d3e20323134343332.roa (hash: dY1TZgYtt2XOIsVBxW8tOuYVl+qsqJFS06ZKgYUYzuc=) 5: 3139342e32362e32312e302f32342d3234203d3e20343032323336.roa (hash: pUa1ndniCOYV9ES6BNwWdFcD47r2QhLmtLoNdmF7rhw=) 6: 37372e38312e37372e302f32342d3234203d3e203438323636.roa (hash: 5I0vOu7kvIMlEY7Sq8XZtvSWHaZxS4B46RvJVyxx8WI=) 7: 45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl (hash: rGXb/Dby4QWLDysglT0Ji8fo/JDRPxxFNc7lGN5pXcY=) 8: 37372e38312e37382e302f32342d3234203d3e203438353932.roa (hash: 5R59EysS9tL6UTIvemaJCrtszj6x6/cuKApXJ2KN9Lk=) 9: 37372e38312e37362e302f32342d3234203d3e203438353932.roa (hash: xdM7OBZ/9TbpR6di66FXGgK7azfT3ftRTjEe6Yt/SjQ=) 10: 3138352e33392e3138322e302f32342d3234203d3e203438353932.roa (hash: 2GU98PVW8A06wPHFP07dWrMXh03+0FNfaArisd+625g=) 11: 37372e38312e38332e302f32342d3234203d3e203438353932.roa (hash: Tv5q+rfM3afhLe0aBDFGLWT8PXWC4GLzMQF3H6VLFL8=) 12: 3139342e32362e32312e302f32342d3234203d3e2036303739.roa (hash: PXc6iwOgxftDj1gzf8ORi/W4+N4fkSzIW7L2p1ULJyk=) 13: 3138352e33392e3138332e302f32342d3234203d3e203438353932.roa (hash: 5y1BpEcUWIqqauwo2u2KJKPFMCa0JPAhvtiDqGTVDHw=) 14: 3138352e33392e3138312e302f32342d3234203d3e203438353932.roa (hash: wPa88HthyMje0FC4DyK9XcGEOLxJkylfsOcQDqr+i80=) 15: 3139342e32362e332e302f32342d3234203d3e20313937313733.roa (hash: 0gqojYMaS/0N7tH1AJI7/fdNCjGLNKJ+c++ER97t5Vc=) 16: 3138352e33392e3138302e302f32342d3234203d3e203438353932.roa (hash: ZWyLSTcE9mAQsDVjLP4sbforwwRF0gy7YQkGUCm2B9s=) 17: 3132382e36352e3136302e302f32322d3232203d3e203438353932.roa (hash: A3pVDR25ByDI5MeiQGGyctYtEVKjmHED5jwJjMlcbk4=) 18: 3132382e36352e3136342e302f32322d3232203d3e2033333230.roa (hash: MdPKw7OONGYXcOZWO/o2hEi1vtA1V+k+wu8N5c3I5aE=) 19: 3231322e34372e33362e302f32342d3234203d3e2039333138.roa (hash: ZVXQWb7gEfqAkq16Ky0ZSqFCIZ2vC/M8/7YAMrFhXy0=) 20: 37372e38312e37392e302f32342d3234203d3e2036303739.roa (hash: CJIevw70hXk1ZbxNXn1s8ukayMRMzgKM7Ytd97RL5pI=) 21: 37372e38312e38322e302f32342d3234203d3e203438353932.roa (hash: d5TxhwAkeXwrF6uRbXxfjKGJfxHDWIa7sLTALcjfvN4=) 22: 37372e38312e37392e302f32342d3234203d3e20343032323336.roa (hash: M2dmsDaCkf9RNR7OAA/qGmqHIFBJr7jscLVBUWk8SoM=) 23: 3139342e32362e32302e302f32342d3234203d3e20323132323338.roa (hash: 39u3b1aPs44ID+slKDmXnVmqBOUo9+ShXVBFlRqmNOw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 04 Aug 2026 23:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:da:15:bb:24:fa:a5:dc:a6:0a:5f:49:9e:93:c6:6d:9c:a1:28:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b Validity Not Before: Aug 3 22:23:56 2026 GMT Not After : Aug 5 00:52:56 2026 GMT Subject: CN=9C22B658649D968A1F233D56876694608A77C4F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9b:89:a1:28:8f:8f:21:23:ff:41:8f:e4:22: 5c:4f:08:8e:06:ce:37:0d:3e:3c:02:bd:e2:80:32: fb:df:f4:cd:8a:b2:e7:0f:5b:82:50:e0:a6:86:0c: 0f:af:04:c8:5b:5a:cc:21:99:88:4a:c1:51:95:eb: 4c:50:e5:57:68:74:10:e1:20:44:55:52:ea:15:9d: a7:2b:2d:de:09:b0:bd:39:45:d4:28:67:79:25:cc: cf:c3:46:ed:ae:3f:3c:9c:2f:7b:09:70:05:34:eb: 34:a3:7c:7b:9a:bc:e4:c9:ff:03:40:50:7d:f4:cb: 7b:d4:bf:6f:db:85:08:7f:4b:06:4e:60:88:31:f3: 5e:bd:0a:3b:3b:00:bb:45:b9:41:f2:36:a5:43:eb: c3:50:8d:35:f6:4e:32:40:46:ca:67:ec:46:1a:55: 42:96:c6:6f:d9:7d:56:5e:4b:03:24:d0:aa:8e:af: 87:f2:9e:6e:1e:2e:e1:0f:e7:b6:a4:55:f3:89:4a: f6:c0:5d:8f:49:b6:b5:c5:e2:4d:4f:18:c5:11:61: d8:0b:6e:f4:a5:a5:8c:40:10:06:44:03:f9:29:f2: 7d:0e:e6:1d:08:b5:44:12:4a:21:9c:69:c1:b7:40: d9:4c:18:7e:a4:d2:6b:db:95:30:18:1f:a1:84:cc: b6:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:22:B6:58:64:9D:96:8A:1F:23:3D:56:87:66:94:60:8A:77:C4:F5 X509v3 Authority Key Identifier: keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:7f:93:67:74:b9:e7:a6:b7:3c:cd:82:b4:10:5d:91:c9:7f: bb:7a:ac:f6:85:13:d6:58:6e:cb:4a:0d:3e:14:10:fb:af:4f: 14:bb:22:8f:b4:7e:53:e2:4a:05:0d:bd:7b:46:d3:55:a2:e9: e4:46:d8:78:22:bc:21:2c:bf:4e:6f:24:ec:6a:fb:6f:8a:c7: 15:67:76:6a:ad:13:a8:69:ac:8a:57:3c:06:80:9f:23:35:98: 43:28:e8:b8:83:21:93:86:dc:de:aa:68:d6:30:b8:ec:72:79: 42:23:06:4a:34:02:6c:33:6d:03:6e:2f:3b:82:b3:2d:7b:d4: a5:b0:84:c4:f7:da:58:d0:9e:f1:f5:cb:d6:ef:01:5d:54:ea: 0f:eb:4e:87:84:7c:aa:93:c3:f0:82:86:aa:b5:13:f6:99:c8: 86:ea:5d:83:87:38:0d:4b:76:63:3a:92:d9:eb:fc:e6:1e:d4: ad:e9:e7:93:6b:1a:08:48:1c:29:75:db:5e:94:12:7c:e5:74: b2:75:c1:d9:4b:41:f1:f7:99:f5:88:2b:65:ec:85:fc:e1:81: d9:23:f8:ba:c5:87:f2:48:c7:a1:be:b1:6f:43:52:c7:43:88: f6:af:45:1e:dd:7d:dd:8e:3b:4d:98:1a:07:87:57:6a:46:4b: e9:b1:b7:a0 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUM9oVuyT6pdymCl9JnpPGbZyhKP4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVlODY0OGU0NDVkY2NkMGQ4ZWU2OTlmNTE0MGJiODE0 ZTQzYWUxYjAeFw0yNjA4MDMyMjIzNTZaFw0yNjA4MDUwMDUyNTZaMDMxMTAvBgNV BAMTKDlDMjJCNjU4NjQ5RDk2OEExRjIzM0Q1Njg3NjY5NDYwOEE3N0M0RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpm4mhKI+PISP/QY/kIlxPCI4G zjcNPjwCveKAMvvf9M2KsucPW4JQ4KaGDA+vBMhbWswhmYhKwVGV60xQ5VdodBDh IERVUuoVnacrLd4JsL05RdQoZ3klzM/DRu2uPzycL3sJcAU06zSjfHuavOTJ/wNA UH30y3vUv2/bhQh/SwZOYIgx8169Cjs7ALtFuUHyNqVD68NQjTX2TjJARspn7EYa VUKWxm/ZfVZeSwMk0KqOr4fynm4eLuEP57akVfOJSvbAXY9JtrXF4k1PGMURYdgL bvSlpYxAEAZEA/kp8n0O5h0ItUQSSiGcacG3QNlMGH6k0mvblTAYH6GEzLYhAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUnCK2WGSdloofIz1Wh2aUYIp3xPUwHwYDVR0j BBgwFoAURehkjkRdzNDY7mmfUUC7gU5DrhswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTMzYjJmZDctMzFjMS00NTFjLTgyODgtYzFhYTBhYTEy NzUwLzAvNDVFODY0OEU0NDVEQ0NEMEQ4RUU2OTlGNTE0MEJCODE0RTQzQUUxQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JlaGtqa1Jkek5EWTdtbWZVVUM3Z1U1 RHJocy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85MzNiMmZkNy0z MWMxLTQ1MWMtODI4OC1jMWFhMGFhMTI3NTAvMC80NUU4NjQ4RTQ0NURDQ0QwRDhF RTY5OUY1MTQwQkI4MTRFNDNBRTFCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcH+TZ3S556a3PM2CtBBd kcl/u3qs9oUT1lhuy0oNPhQQ+69PFLsij7R+U+JKBQ29e0bTVaLp5EbYeCK8ISy/ Tm8k7Gr7b4rHFWd2aq0TqGmsilc8BoCfIzWYQyjouIMhk4bc3qpo1jC47HJ5QiMG SjQCbDNtA24vO4KzLXvUpbCExPfaWNCe8fXL1u8BXVTqD+tOh4R8qpPD8IKGqrUT 9pnIhupdg4c4DUt2YzqS2ev85h7Urennk2saCEgcKXXbXpQSfOV0snXB2UtB8feZ 9YgrZeyF/OGB2SP4usWH8kjHob6xb0NSx0OI9q9FHt193Y47TZgaB4dXakZL6bG3 oA== -----END CERTIFICATE-----Generated at Tue Aug 4 08:58:52 2026 by rpki-client