$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft File: 45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft (raw, json) Hash identifier: EgRbuW87nhv9A/GN5RtGq1NIW2acyypqbTZii4o/C54= Subject key identifier: 2C:3E:9F:06:09:A8:AA:A9:D5:09:BF:55:80:6B:22:4D:7B:1A:7D:43 Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b Certificate serial: 5B22D1F99BD67F4E7F653845D5CD7EA5F7350712 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft Manifest number: 60 Signing time: Sat 10 May 2025 22:15:33 +0000 Manifest this update: Sat 10 May 2025 22:10:33 +0000 Manifest next update: Sun 11 May 2025 22:24:33 +0000 Files and hashes: 1: 3139342e32362e32312e302f32342d3234203d3e2037303138.roa (hash: 7yEbo3DradWn9p6FL6O0sR90rL76BXVbRvfqqu/D+3E=) 2: 37372e38312e37392e302f32342d3234203d3e2037303138.roa (hash: Mtmk/kZphhA5s4uopguvEbJvjOjUXgfeStc99+50/4U=) 3: 39312e3230392e3137392e302f32342d3234203d3e2039323332.roa (hash: DUgBG+DDM8ST08Z0XIhaDsSEtBOUn3VXDgiNBjQq7a4=) 4: 3138382e3231342e3233322e302f32332d3233203d3e2035303635.roa (hash: BFuLnnyWuJctlm6cMRTXIHiK+UW5qbLi6zguqt9+aRs=) 5: 37372e38312e37382e302f32342d3234203d3e203438353932.roa (hash: sxtXA2eVprRgAPdjB6IZUpHTWxye7ZI2nEVGAB55zbo=) 6: 37372e38312e38332e302f32342d3234203d3e203438353932.roa (hash: FUbnkxuvcKLpw8C4HQaABzR8zDln4ay05cwGyEgtqLs=) 7: 3138352e33392e3138302e302f32342d3234203d3e203438353932.roa (hash: eRfFsAmiOd7fmXSkLY1iDQqDLPihvnF73pAdlTyZEec=) 8: 45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl (hash: Aj26jyfPy+d1BluaG/b3MH3g/vPgHsTdUGCWvGykjiQ=) 9: 37372e38312e37362e302f32342d3234203d3e203438353932.roa (hash: AeGgNi4bw9l3zN1DkQ6g095MQ+7U7OthIn51Fzss3Oc=) 10: 37372e38312e37372e302f32342d3234203d3e20313337353137.roa (hash: mnQJW4GBjGEsRXTh3Y2cxT8Pj8O29OUkMaI68Qj1ywg=) 11: 3132382e36352e3136342e302f32322d3232203d3e2033333230.roa (hash: jUzg8MFBi50HDoiq8ZBSiLc/BkEY3Sqp4qzgmYg5v/k=) 12: 3138352e33392e3138312e302f32342d3234203d3e203438353932.roa (hash: Vuif+1Rwal2KWngsbR1gG7PlppvF8JCFTHMdlSgwTho=) 13: 3132382e36352e3136382e302f32312d3234203d3e2036303739.roa (hash: i6JhDTo2qgsHKnhvdAD8kBBVl6YUcjppNLTK7aRFku0=) 14: 3139342e32362e322e302f32342d3234203d3e2037303138.roa (hash: KZ2g79XWhSpy1OjdBEbA7bKBiIPr4KF5cEbdhi1cO+c=) 15: 3138352e33392e3138332e302f32342d3234203d3e203438353932.roa (hash: 1itaUJD6MM9qJoykl2AD3Me7plWTAUPMb45hv4KS1Is=) 16: 3132382e36352e3136302e302f32322d3232203d3e203438353932.roa (hash: e2sDKCcJlT/U2mWShGzkoM6fLVC3axyQA7582KFjXl0=) 17: 3139342e32362e332e302f32342d3234203d3e203236373337.roa (hash: vAloYgRmheNvh8P1qphoutsfkKJ8NLcb3vYOmiEsQYI=) 18: 37372e38312e38322e302f32342d3234203d3e203438353932.roa (hash: g9+qPCIMbMsxLbmabycfUHp6SrIAw5buxV/5VJi8ArY=) 19: 37372e38312e38302e302f32332d3233203d3e20383334.roa (hash: 8VRwgNXvFUdu3kfmO50807gw1BniQhmC877LSnpGZWg=) 20: 3138352e33392e3138322e302f32342d3234203d3e203438353932.roa (hash: ZRiHbt3iKKs0O/K+Xj70IALSK3+jGBgHEkJ3Uk6rxC8=) 21: 3139342e32362e32302e302f32342d3234203d3e20323130373332.roa (hash: tT1wyhQtNYuEkQ+eyJ48jXUB9g2vmRFlZCizzCPBgqg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 22:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:22:d1:f9:9b:d6:7f:4e:7f:65:38:45:d5:cd:7e:a5:f7:35:07:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b Validity Not Before: May 10 22:10:33 2025 GMT Not After : May 11 22:24:33 2025 GMT Subject: CN=2C3E9F0609A8AAA9D509BF55806B224D7B1A7D43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a5:ac:a0:43:d0:89:ac:3a:c4:27:b3:87:d4: 56:bc:3d:4d:78:13:56:79:37:5d:bd:e7:f9:e1:c1: 28:fa:fe:bf:98:c0:c3:3f:c3:33:d9:6e:19:cd:54: 42:dc:a5:38:4b:8c:26:ab:b4:e8:32:e2:6a:91:6e: 50:1f:b6:b8:6f:b9:a6:08:10:23:44:5e:99:6e:94: ef:ee:8c:92:9b:18:82:d6:41:d3:3d:a1:96:14:76: 99:25:f7:b5:96:08:bc:4d:46:79:06:ca:4f:b8:ea: c2:a5:0d:4c:2c:35:22:37:d0:b3:3e:5e:a8:8d:f7: c2:96:59:48:e8:9f:d0:b7:f4:65:0c:00:db:30:9a: 32:5e:ab:7b:d3:c1:a9:81:49:c1:ba:bb:27:9c:c8: 4d:c3:4f:c9:2f:21:52:a8:15:94:b9:bc:c2:9a:68: 12:82:59:2f:a7:e3:95:d5:6f:8e:94:6c:4d:df:39: 8b:ac:59:86:f8:b0:b5:43:d3:e9:84:d9:2e:0f:92: 83:b7:54:c7:73:95:c6:24:57:bf:f4:af:c3:ec:7a: f4:c4:1c:00:ec:80:96:71:a8:72:2b:65:05:3e:7b: 07:5c:7c:2c:f9:51:26:eb:30:b2:a6:5a:ed:6d:ed: 5f:bd:be:65:2c:23:a6:66:20:0c:03:f3:26:8b:ad: 5f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:3E:9F:06:09:A8:AA:A9:D5:09:BF:55:80:6B:22:4D:7B:1A:7D:43 X509v3 Authority Key Identifier: keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:f6:2f:f5:55:00:a6:0f:86:7f:e5:af:f5:6f:90:6d:e2:db: 90:26:76:e6:d0:f9:5a:79:dc:08:c6:01:79:43:f0:10:1c:5e: 3f:61:54:d1:4b:aa:27:94:bf:f8:33:b8:e4:03:bc:c0:f2:b7: 7f:10:6e:af:4d:ca:18:27:46:25:7d:aa:33:e4:32:b5:f6:4d: 28:fc:69:f6:01:31:49:ca:38:62:42:59:3e:36:10:9d:c8:5d: 5d:96:01:c8:82:53:cd:22:0b:60:8a:6a:13:6b:9c:65:99:20: 1a:de:4b:ad:e4:b6:49:33:3b:0d:fe:9d:32:20:0d:a0:1c:e0: b9:ac:b0:cd:17:71:2f:d6:fa:c9:fe:af:e4:41:dd:41:e3:02: 6b:cd:cb:d5:68:c8:98:ec:65:41:39:0a:65:e7:00:d1:d3:a3: 26:53:63:66:95:83:b0:6f:7d:76:4d:46:d9:a8:9a:a2:15:26: 59:a2:72:69:73:39:8a:1c:1c:6d:2e:71:de:35:3f:e6:08:7c: 33:d2:e8:30:87:28:cb:d9:cc:4d:2a:97:1c:88:eb:d4:87:af: 70:c7:0f:43:0c:eb:ab:4d:d5:0e:8c:0b:0f:08:81:26:7f:ad: 7a:4a:68:af:34:89:ee:0a:08:80:bb:e2:42:c9:84:f2:9d:56: 89:df:c3:49 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUWyLR+ZvWf05/ZThF1c1+pfc1BxIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVlODY0OGU0NDVkY2NkMGQ4ZWU2OTlmNTE0MGJiODE0 ZTQzYWUxYjAeFw0yNTA1MTAyMjEwMzNaFw0yNTA1MTEyMjI0MzNaMDMxMTAvBgNV BAMTKDJDM0U5RjA2MDlBOEFBQTlENTA5QkY1NTgwNkIyMjREN0IxQTdENDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCppaygQ9CJrDrEJ7OH1Fa8PU14 E1Z5N1295/nhwSj6/r+YwMM/wzPZbhnNVELcpThLjCartOgy4mqRblAftrhvuaYI ECNEXplulO/ujJKbGILWQdM9oZYUdpkl97WWCLxNRnkGyk+46sKlDUwsNSI30LM+ XqiN98KWWUjon9C39GUMANswmjJeq3vTwamBScG6uyecyE3DT8kvIVKoFZS5vMKa aBKCWS+n45XVb46UbE3fOYusWYb4sLVD0+mE2S4PkoO3VMdzlcYkV7/0r8PsevTE HADsgJZxqHIrZQU+ewdcfCz5USbrMLKmWu1t7V+9vmUsI6ZmIAwD8yaLrV/ZAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQULD6fBgmoqqnVCb9VgGsiTXsafUMwHwYDVR0j BBgwFoAURehkjkRdzNDY7mmfUUC7gU5DrhswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTMzYjJmZDctMzFjMS00NTFjLTgyODgtYzFhYTBhYTEy NzUwLzAvNDVFODY0OEU0NDVEQ0NEMEQ4RUU2OTlGNTE0MEJCODE0RTQzQUUxQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JlaGtqa1Jkek5EWTdtbWZVVUM3Z1U1 RHJocy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85MzNiMmZkNy0z MWMxLTQ1MWMtODI4OC1jMWFhMGFhMTI3NTAvMC80NUU4NjQ4RTQ0NURDQ0QwRDhF RTY5OUY1MTQwQkI4MTRFNDNBRTFCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUfYv9VUApg+Gf+Wv9W+Q beLbkCZ25tD5WnncCMYBeUPwEBxeP2FU0UuqJ5S/+DO45AO8wPK3fxBur03KGCdG JX2qM+QytfZNKPxp9gExSco4YkJZPjYQnchdXZYByIJTzSILYIpqE2ucZZkgGt5L reS2STM7Df6dMiANoBzguaywzRdxL9b6yf6v5EHdQeMCa83L1WjImOxlQTkKZecA 0dOjJlNjZpWDsG99dk1G2aiaohUmWaJyaXM5ihwcbS5x3jU/5gh8M9LoMIcoy9nM TSqXHIjr1IevcMcPQwzrq03VDowLDwiBJn+tekporzSJ7goIgLviQsmE8p1Wid/D SQ== -----END CERTIFICATE-----Generated at Sun May 11 01:53:16 2025 by rpki-client