$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft File: 45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft (raw, json) Hash identifier: 179NN93+HCKsCbE693quBi2X0jcnq+KM3zQIoQ+ZyWo= Subject key identifier: A3:AA:64:5B:DD:04:94:18:9C:BB:01:FF:03:E6:50:48:08:99:69:DB Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b Certificate serial: 0629FF4B6E924FC50FCF798AEB7EDA7391D81C98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft Manifest number: F1 Signing time: Fri 22 Aug 2025 21:47:33 +0000 Manifest this update: Fri 22 Aug 2025 21:42:33 +0000 Manifest next update: Sat 23 Aug 2025 22:50:33 +0000 Files and hashes: 1: 37372e38312e38332e302f32342d3234203d3e203438353932.roa (hash: FUbnkxuvcKLpw8C4HQaABzR8zDln4ay05cwGyEgtqLs=) 2: 3139342e32362e322e302f32342d3234203d3e20343031383338.roa (hash: hww+5Hf4jmFo7Au813kPo2lBtFDkf7ALOlVDrCFDow8=) 3: 3138352e33392e3138332e302f32342d3234203d3e203438353932.roa (hash: 1itaUJD6MM9qJoykl2AD3Me7plWTAUPMb45hv4KS1Is=) 4: 3139342e32362e32312e302f32342d3234203d3e2037303138.roa (hash: 7yEbo3DradWn9p6FL6O0sR90rL76BXVbRvfqqu/D+3E=) 5: 3138352e33392e3138322e302f32342d3234203d3e203438353932.roa (hash: ZRiHbt3iKKs0O/K+Xj70IALSK3+jGBgHEkJ3Uk6rxC8=) 6: 3139342e32362e322e302f32342d3234203d3e2037303138.roa (hash: KZ2g79XWhSpy1OjdBEbA7bKBiIPr4KF5cEbdhi1cO+c=) 7: 3139342e32362e32302e302f32342d3234203d3e20323132323338.roa (hash: YP/VU7Ddy/RINA1ejeDsmhFrZUIqFHueTf4iQvV7+Jw=) 8: 37372e38312e37382e302f32342d3234203d3e203438353932.roa (hash: sxtXA2eVprRgAPdjB6IZUpHTWxye7ZI2nEVGAB55zbo=) 9: 3138352e33392e3138312e302f32342d3234203d3e203438353932.roa (hash: Vuif+1Rwal2KWngsbR1gG7PlppvF8JCFTHMdlSgwTho=) 10: 3132382e36352e3136302e302f32322d3232203d3e203438353932.roa (hash: e2sDKCcJlT/U2mWShGzkoM6fLVC3axyQA7582KFjXl0=) 11: 37372e38312e38302e302f32332d3233203d3e203230383630.roa (hash: ENs1tyjr+QsCNkYiVs8CGb16BSmudiUVAdhDAu4V/ek=) 12: 37372e38312e37392e302f32342d3234203d3e2037303138.roa (hash: Mtmk/kZphhA5s4uopguvEbJvjOjUXgfeStc99+50/4U=) 13: 3138382e3231342e3233322e302f32332d3233203d3e2035303635.roa (hash: BFuLnnyWuJctlm6cMRTXIHiK+UW5qbLi6zguqt9+aRs=) 14: 37372e38312e37362e302f32342d3234203d3e203438353932.roa (hash: AeGgNi4bw9l3zN1DkQ6g095MQ+7U7OthIn51Fzss3Oc=) 15: 3139342e32362e332e302f32342d3234203d3e203236373337.roa (hash: vAloYgRmheNvh8P1qphoutsfkKJ8NLcb3vYOmiEsQYI=) 16: 39312e3230392e3137392e302f32342d3234203d3e20343031313633.roa (hash: XN8GAPXC19Eh6eKL4A3IEBDE4WdIBcjjGqwJyeYDhuE=) 17: 3132382e36352e3136382e302f32312d3234203d3e2036303739.roa (hash: i6JhDTo2qgsHKnhvdAD8kBBVl6YUcjppNLTK7aRFku0=) 18: 3139342e32362e32312e302f32342d3234203d3e20343031383338.roa (hash: W6OrrdK1OeSj0zhiikePRhbHjS9VOD7qyg5G4TQyO4k=) 19: 37372e38312e37392e302f32342d3234203d3e20343031383338.roa (hash: jqhfslJN0nyOj/30XxhLZVefzpoYoh0e1/irmr4G57s=) 20: 37372e38312e38322e302f32342d3234203d3e203438353932.roa (hash: g9+qPCIMbMsxLbmabycfUHp6SrIAw5buxV/5VJi8ArY=) 21: 3132382e36352e3136342e302f32322d3232203d3e2033333230.roa (hash: jUzg8MFBi50HDoiq8ZBSiLc/BkEY3Sqp4qzgmYg5v/k=) 22: 3138352e33392e3138302e302f32342d3234203d3e203438353932.roa (hash: eRfFsAmiOd7fmXSkLY1iDQqDLPihvnF73pAdlTyZEec=) 23: 39312e3230392e3137392e302f32342d3234203d3e2039323332.roa (hash: DUgBG+DDM8ST08Z0XIhaDsSEtBOUn3VXDgiNBjQq7a4=) 24: 45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl (hash: zb8+ETNyrXaFTzycOiY9Rbw5ZmeOy1nVVavbkoDRCJ0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Aug 2025 22:50:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:29:ff:4b:6e:92:4f:c5:0f:cf:79:8a:eb:7e:da:73:91:d8:1c:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b Validity Not Before: Aug 22 21:42:33 2025 GMT Not After : Aug 23 22:50:33 2025 GMT Subject: CN=A3AA645BDD0494189CBB01FF03E65048089969DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:1e:9e:55:ae:a4:c7:cb:3d:a4:59:7f:d1:6f: 94:56:eb:be:1e:8a:3f:53:d3:fc:7c:4d:ff:4b:1d: 4d:b7:ec:0e:c6:af:14:75:17:2c:de:fc:b0:f9:39: ca:67:f2:e2:b5:e6:d2:8f:16:68:21:fd:98:10:23: 27:ca:22:2e:81:7f:d6:5f:84:c5:3a:57:6b:df:9c: c3:db:f4:f6:b4:f5:a6:17:b2:1d:77:da:0a:fc:65: 25:08:f8:89:67:4d:c5:b8:64:fe:b3:c7:8e:b1:0a: bf:a9:8d:45:47:a2:0e:3b:b6:be:f0:f3:e8:4d:02: 6d:00:c0:1b:17:87:36:b6:0a:ce:0a:bd:82:d9:ab: 62:ad:ba:57:b4:d9:23:dc:ea:1a:ae:98:39:2c:55: ee:39:7c:f1:e4:44:24:71:42:70:5e:77:e6:96:40: a3:0c:57:fb:83:a8:e3:ea:ac:73:28:4d:9d:36:77: a0:4b:3d:79:cc:c1:26:2a:63:33:a9:41:c5:88:07: 53:78:16:e5:c8:58:4a:7d:64:af:71:71:3d:6f:00: 24:52:e6:b1:87:35:c2:5b:1a:e0:28:b3:eb:bf:d9: da:00:e4:86:41:57:c8:90:d1:82:cf:b2:99:ac:7d: 38:87:84:85:58:53:5d:f2:71:11:21:a8:db:e7:41: df:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:AA:64:5B:DD:04:94:18:9C:BB:01:FF:03:E6:50:48:08:99:69:DB X509v3 Authority Key Identifier: keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:c9:61:3f:f1:0e:b6:c5:98:66:3a:ac:5e:57:bd:9e:f0:d5: f2:73:17:f3:a1:00:db:e7:5b:72:5d:db:aa:57:b6:7c:b1:2c: 68:14:17:d2:4e:4d:c2:93:75:6e:a2:c8:8c:a8:5d:72:6b:d2: 4f:7b:49:f5:8f:cf:d8:33:c9:d5:bd:16:e4:7d:e0:17:4a:e6: a5:d4:e9:d5:32:6d:04:9b:e9:e1:bf:0c:3b:7d:54:ea:ff:97: 22:e0:3e:5c:25:7c:90:80:6b:42:a1:05:2f:04:db:e3:e9:cf: e1:31:a1:86:7c:e7:04:68:cf:f8:74:d8:5e:0a:1d:46:c2:c9: bc:ae:a3:ea:18:c0:c5:59:d0:ad:d2:da:ce:40:6b:40:15:b2: b9:89:79:48:6d:f5:02:b3:84:ae:1d:ba:fd:e8:ea:d9:dc:89: bb:7d:ec:ad:be:0c:75:da:ae:8a:5d:04:9e:6c:a2:da:b6:30: ac:2c:f0:9f:ba:76:c8:e9:1e:65:c4:4c:f6:b4:21:31:13:df: 20:cc:7f:ea:6a:05:cf:85:8c:6a:9d:e8:0c:b4:6a:6d:6e:1b: 24:dc:34:0c:66:a9:2a:37:80:7b:c3:1d:8f:8c:e1:8e:5c:5b: 3f:44:6e:0c:e4:d8:28:e5:60:4b:13:c2:c7:01:02:4c:17:0a: cf:8a:8f:18 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUBin/S26ST8UPz3mK637ac5HYHJgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVlODY0OGU0NDVkY2NkMGQ4ZWU2OTlmNTE0MGJiODE0 ZTQzYWUxYjAeFw0yNTA4MjIyMTQyMzNaFw0yNTA4MjMyMjUwMzNaMDMxMTAvBgNV BAMTKEEzQUE2NDVCREQwNDk0MTg5Q0JCMDFGRjAzRTY1MDQ4MDg5OTY5REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3Hp5VrqTHyz2kWX/Rb5RW674e ij9T0/x8Tf9LHU237A7GrxR1Fyze/LD5Ocpn8uK15tKPFmgh/ZgQIyfKIi6Bf9Zf hMU6V2vfnMPb9Pa09aYXsh132gr8ZSUI+IlnTcW4ZP6zx46xCr+pjUVHog47tr7w 8+hNAm0AwBsXhza2Cs4KvYLZq2Ktule02SPc6hqumDksVe45fPHkRCRxQnBed+aW QKMMV/uDqOPqrHMoTZ02d6BLPXnMwSYqYzOpQcWIB1N4FuXIWEp9ZK9xcT1vACRS 5rGHNcJbGuAos+u/2doA5IZBV8iQ0YLPspmsfTiHhIVYU13ycREhqNvnQd8LAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUo6pkW90ElBicuwH/A+ZQSAiZadswHwYDVR0j BBgwFoAURehkjkRdzNDY7mmfUUC7gU5DrhswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTMzYjJmZDctMzFjMS00NTFjLTgyODgtYzFhYTBhYTEy NzUwLzAvNDVFODY0OEU0NDVEQ0NEMEQ4RUU2OTlGNTE0MEJCODE0RTQzQUUxQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JlaGtqa1Jkek5EWTdtbWZVVUM3Z1U1 RHJocy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85MzNiMmZkNy0z MWMxLTQ1MWMtODI4OC1jMWFhMGFhMTI3NTAvMC80NUU4NjQ4RTQ0NURDQ0QwRDhF RTY5OUY1MTQwQkI4MTRFNDNBRTFCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqclhP/EOtsWYZjqsXle9 nvDV8nMX86EA2+dbcl3bqle2fLEsaBQX0k5NwpN1bqLIjKhdcmvST3tJ9Y/P2DPJ 1b0W5H3gF0rmpdTp1TJtBJvp4b8MO31U6v+XIuA+XCV8kIBrQqEFLwTb4+nP4TGh hnznBGjP+HTYXgodRsLJvK6j6hjAxVnQrdLazkBrQBWyuYl5SG31ArOErh26/ejq 2dyJu33srb4Mddquil0Enmyi2rYwrCzwn7p2yOkeZcRM9rQhMRPfIMx/6moFz4WM ap3oDLRqbW4bJNw0DGapKjeAe8Mdj4zhjlxbP0RuDOTYKOVgSxPCxwECTBcKz4qP GA== -----END CERTIFICATE-----Generated at Sat Aug 23 10:28:10 2025 by rpki-client