$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft File: 45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft (raw, json) Hash identifier: t+s30UsLV5WQKS7xxHFF2QOp92sZCJ7B1jQ9bG/gC1M= Subject key identifier: E7:4A:E5:B0:EA:DF:C8:0A:6C:03:C0:C0:53:9B:8E:A9:3B:F3:55:4C Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b Certificate serial: 1836AE5FAEB7704E186EEBB654CDBFEBF22631A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft Manifest number: A5 Signing time: Mon 30 Jun 2025 17:39:19 +0000 Manifest this update: Mon 30 Jun 2025 17:34:19 +0000 Manifest next update: Tue 01 Jul 2025 19:18:19 +0000 Files and hashes: 1: 3132382e36352e3136302e302f32322d3232203d3e203438353932.roa (hash: e2sDKCcJlT/U2mWShGzkoM6fLVC3axyQA7582KFjXl0=) 2: 3138352e33392e3138332e302f32342d3234203d3e203438353932.roa (hash: 1itaUJD6MM9qJoykl2AD3Me7plWTAUPMb45hv4KS1Is=) 3: 3138352e33392e3138302e302f32342d3234203d3e203438353932.roa (hash: eRfFsAmiOd7fmXSkLY1iDQqDLPihvnF73pAdlTyZEec=) 4: 3138352e33392e3138312e302f32342d3234203d3e203438353932.roa (hash: Vuif+1Rwal2KWngsbR1gG7PlppvF8JCFTHMdlSgwTho=) 5: 37372e38312e38332e302f32342d3234203d3e203438353932.roa (hash: FUbnkxuvcKLpw8C4HQaABzR8zDln4ay05cwGyEgtqLs=) 6: 37372e38312e37372e302f32342d3234203d3e20313337353137.roa (hash: mnQJW4GBjGEsRXTh3Y2cxT8Pj8O29OUkMaI68Qj1ywg=) 7: 3139342e32362e322e302f32342d3234203d3e2037303138.roa (hash: KZ2g79XWhSpy1OjdBEbA7bKBiIPr4KF5cEbdhi1cO+c=) 8: 37372e38312e37362e302f32342d3234203d3e203438353932.roa (hash: AeGgNi4bw9l3zN1DkQ6g095MQ+7U7OthIn51Fzss3Oc=) 9: 3139342e32362e332e302f32342d3234203d3e203236373337.roa (hash: vAloYgRmheNvh8P1qphoutsfkKJ8NLcb3vYOmiEsQYI=) 10: 3132382e36352e3136382e302f32312d3234203d3e2036303739.roa (hash: i6JhDTo2qgsHKnhvdAD8kBBVl6YUcjppNLTK7aRFku0=) 11: 3138352e33392e3138322e302f32342d3234203d3e203438353932.roa (hash: ZRiHbt3iKKs0O/K+Xj70IALSK3+jGBgHEkJ3Uk6rxC8=) 12: 3132382e36352e3136342e302f32322d3232203d3e2033333230.roa (hash: jUzg8MFBi50HDoiq8ZBSiLc/BkEY3Sqp4qzgmYg5v/k=) 13: 37372e38312e38302e302f32332d3233203d3e203230343733.roa (hash: PUzP/p5Okr3bvZ4WF8kcm0JJSJ70QPVxP+cQ0aO0FQg=) 14: 3138382e3231342e3233322e302f32332d3233203d3e2035303635.roa (hash: BFuLnnyWuJctlm6cMRTXIHiK+UW5qbLi6zguqt9+aRs=) 15: 37372e38312e37382e302f32342d3234203d3e203438353932.roa (hash: sxtXA2eVprRgAPdjB6IZUpHTWxye7ZI2nEVGAB55zbo=) 16: 3139342e32362e32312e302f32342d3234203d3e2037303138.roa (hash: 7yEbo3DradWn9p6FL6O0sR90rL76BXVbRvfqqu/D+3E=) 17: 45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl (hash: izaJ5BVP8pLUXW4niPVqTR5R5s7+MglmXwgZRdxhU48=) 18: 37372e38312e37392e302f32342d3234203d3e2037303138.roa (hash: Mtmk/kZphhA5s4uopguvEbJvjOjUXgfeStc99+50/4U=) 19: 37372e38312e38322e302f32342d3234203d3e203438353932.roa (hash: g9+qPCIMbMsxLbmabycfUHp6SrIAw5buxV/5VJi8ArY=) 20: 3139342e32362e32302e302f32342d3234203d3e20323130373332.roa (hash: tT1wyhQtNYuEkQ+eyJ48jXUB9g2vmRFlZCizzCPBgqg=) 21: 39312e3230392e3137392e302f32342d3234203d3e2039323332.roa (hash: DUgBG+DDM8ST08Z0XIhaDsSEtBOUn3VXDgiNBjQq7a4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 01 Jul 2025 19:18:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:36:ae:5f:ae:b7:70:4e:18:6e:eb:b6:54:cd:bf:eb:f2:26:31:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b Validity Not Before: Jun 30 17:34:19 2025 GMT Not After : Jul 1 19:18:19 2025 GMT Subject: CN=E74AE5B0EADFC80A6C03C0C0539B8EA93BF3554C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fc:da:a4:a5:22:97:99:19:b2:61:a4:1c:0e: 4a:7b:22:ff:19:8f:00:40:14:04:1f:20:de:b4:46: 71:8d:f5:23:10:18:37:9d:ba:4a:79:e5:11:99:c9: f3:32:9b:e3:6b:25:dd:a6:c5:d8:c3:9a:e6:2e:ac: aa:df:1d:03:65:09:b3:98:1b:2f:64:42:ea:3b:51: 55:4f:a3:eb:9b:90:c2:48:93:57:99:53:0d:b1:ce: de:65:27:dd:09:56:49:ba:e6:83:c2:8a:7d:7f:40: cb:28:15:96:aa:ae:a4:b2:fe:63:fb:52:be:3b:81: 52:68:eb:2d:c8:95:59:75:37:82:80:80:85:f4:c2: 67:77:cc:99:3b:dd:8c:d1:ca:75:4d:d5:3a:1f:85: 07:28:16:08:3b:47:f7:d1:6b:f6:a2:4a:fe:04:f9: 2f:4d:09:97:a4:85:27:18:b5:5d:d8:58:01:22:bd: 54:ee:39:6e:55:02:b1:6b:53:80:d3:9b:17:70:da: 6d:80:62:9b:78:6e:cc:6e:34:37:e9:7c:79:db:f9: 5c:2f:4d:56:a1:66:38:56:96:c0:5a:d4:3c:93:86: 6e:94:7c:c9:cc:fd:4c:6b:a7:2c:38:a1:0a:ac:4b: f3:82:f8:5a:b9:01:8c:61:16:15:d1:fb:d5:96:26: cb:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:4A:E5:B0:EA:DF:C8:0A:6C:03:C0:C0:53:9B:8E:A9:3B:F3:55:4C X509v3 Authority Key Identifier: keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:ed:70:a3:a9:5b:6c:46:88:d6:e1:43:97:d9:6a:4e:89:8c: 65:76:2f:2a:68:59:7d:a7:1e:2c:1f:12:84:f9:82:aa:0c:e4: 46:e0:2c:25:26:b7:58:82:5a:14:f8:53:0d:a0:ec:75:ff:9e: 59:ec:ba:ba:2d:23:13:b9:45:a3:10:6e:8e:fa:e9:07:8f:9e: 7a:8d:61:d5:94:1d:80:bb:0b:a3:bd:0d:7a:ae:25:17:44:ba: 88:c1:ad:e7:c3:6e:29:48:fe:ca:17:63:3f:49:5f:7b:c7:52: 92:57:46:44:4f:7f:ca:82:c0:74:bc:1e:52:2d:54:e5:f7:54: 71:ed:7f:e9:84:5f:30:45:92:51:65:09:1b:a8:fe:9d:fe:3b: 00:78:59:e0:2e:ec:e4:12:d1:c2:c2:3b:22:f5:e0:03:68:8c: ab:0c:ab:b0:6c:13:9e:c6:aa:ea:57:00:80:40:e4:8c:bf:43: ee:97:d8:53:1b:15:11:20:73:f2:65:a2:c1:3b:83:4b:c1:69: ba:67:4b:54:0a:21:c7:2f:a5:d2:0c:5a:56:53:d5:e6:09:76: a0:11:3e:88:6b:61:81:d9:88:28:23:9a:a1:ea:b6:60:05:dd: c3:42:2c:5b:fe:2c:93:df:43:a8:ee:93:65:8c:38:04:b9:6d: 50:89:ba:4d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUGDauX663cE4Ybuu2VM2/6/ImMaYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVlODY0OGU0NDVkY2NkMGQ4ZWU2OTlmNTE0MGJiODE0 ZTQzYWUxYjAeFw0yNTA2MzAxNzM0MTlaFw0yNTA3MDExOTE4MTlaMDMxMTAvBgNV BAMTKEU3NEFFNUIwRUFERkM4MEE2QzAzQzBDMDUzOUI4RUE5M0JGMzU1NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5/NqkpSKXmRmyYaQcDkp7Iv8Z jwBAFAQfIN60RnGN9SMQGDedukp55RGZyfMym+NrJd2mxdjDmuYurKrfHQNlCbOY Gy9kQuo7UVVPo+ubkMJIk1eZUw2xzt5lJ90JVkm65oPCin1/QMsoFZaqrqSy/mP7 Ur47gVJo6y3IlVl1N4KAgIX0wmd3zJk73YzRynVN1TofhQcoFgg7R/fRa/aiSv4E +S9NCZekhScYtV3YWAEivVTuOW5VArFrU4DTmxdw2m2AYpt4bsxuNDfpfHnb+Vwv TVahZjhWlsBa1DyThm6UfMnM/Uxrpyw4oQqsS/OC+Fq5AYxhFhXR+9WWJsvZAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU50rlsOrfyApsA8DAU5uOqTvzVUwwHwYDVR0j BBgwFoAURehkjkRdzNDY7mmfUUC7gU5DrhswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTMzYjJmZDctMzFjMS00NTFjLTgyODgtYzFhYTBhYTEy NzUwLzAvNDVFODY0OEU0NDVEQ0NEMEQ4RUU2OTlGNTE0MEJCODE0RTQzQUUxQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JlaGtqa1Jkek5EWTdtbWZVVUM3Z1U1 RHJocy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85MzNiMmZkNy0z MWMxLTQ1MWMtODI4OC1jMWFhMGFhMTI3NTAvMC80NUU4NjQ4RTQ0NURDQ0QwRDhF RTY5OUY1MTQwQkI4MTRFNDNBRTFCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABe1wo6lbbEaI1uFDl9lq TomMZXYvKmhZfaceLB8ShPmCqgzkRuAsJSa3WIJaFPhTDaDsdf+eWey6ui0jE7lF oxBujvrpB4+eeo1h1ZQdgLsLo70Neq4lF0S6iMGt58NuKUj+yhdjP0lfe8dSkldG RE9/yoLAdLweUi1U5fdUce1/6YRfMEWSUWUJG6j+nf47AHhZ4C7s5BLRwsI7IvXg A2iMqwyrsGwTnsaq6lcAgEDkjL9D7pfYUxsVESBz8mWiwTuDS8FpumdLVAohxy+l 0gxaVlPV5gl2oBE+iGthgdmIKCOaoeq2YAXdw0IsW/4sk99DqO6TZYw4BLltUIm6 TQ== -----END CERTIFICATE-----Generated at Tue Jul 1 06:57:58 2025 by rpki-client