$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft File: 45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft (raw, json) Hash identifier: 6qo1YgbbPKs6tt80gPQlAvdnoDhGlMEeYxjcw9fH+Ec= Subject key identifier: 27:47:CA:20:DF:3F:D2:2A:69:63:37:E1:90:20:36:8D:80:EE:4F:36 Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b Certificate serial: 165F476BC0525AA220E95E070870C76D27863509 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft Manifest number: 0325 Signing time: Sat 26 Sep 2026 23:42:11 +0000 Manifest this update: Sat 26 Sep 2026 23:37:11 +0000 Manifest next update: Mon 28 Sep 2026 02:16:11 +0000 Files and hashes: 1: 3138352e33392e3138322e302f32342d3234203d3e203438353932.roa (hash: 2GU98PVW8A06wPHFP07dWrMXh03+0FNfaArisd+625g=) 2: 3139332e3234362e3136342e302f32342d3234203d3e20323134343332.roa (hash: dY1TZgYtt2XOIsVBxW8tOuYVl+qsqJFS06ZKgYUYzuc=) 3: 3139342e32362e32312e302f32342d3234203d3e2036303739.roa (hash: PXc6iwOgxftDj1gzf8ORi/W4+N4fkSzIW7L2p1ULJyk=) 4: 3138352e33392e3138332e302f32342d3234203d3e203438353932.roa (hash: 5y1BpEcUWIqqauwo2u2KJKPFMCa0JPAhvtiDqGTVDHw=) 5: 3132382e36352e3136342e302f32322d3232203d3e2033333230.roa (hash: MdPKw7OONGYXcOZWO/o2hEi1vtA1V+k+wu8N5c3I5aE=) 6: 39312e3230392e3137392e302f32342d3234203d3e2036303739.roa (hash: uNAQ4j+11GZvakb42sQCtDYoj40PG7WcMOyOEXVSeKA=) 7: 45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl (hash: GSQH/uxqIr/iU5qRJNOuR2LKiM9mkErnuPTPBL3mysA=) 8: 3139342e32362e32302e302f32342d3234203d3e20323132323338.roa (hash: 39u3b1aPs44ID+slKDmXnVmqBOUo9+ShXVBFlRqmNOw=) 9: 37372e38312e37372e302f32342d3234203d3e203438323636.roa (hash: 5I0vOu7kvIMlEY7Sq8XZtvSWHaZxS4B46RvJVyxx8WI=) 10: 3138382e3231342e3233322e302f32332d3234203d3e2035303635.roa (hash: x3PmGOoet0cDs7+uuyuNJtaOTgdNjDt0p0iGeQg4oNo=) 11: 3138352e33392e3138312e302f32342d3234203d3e203438353932.roa (hash: wPa88HthyMje0FC4DyK9XcGEOLxJkylfsOcQDqr+i80=) 12: 37372e38312e37382e302f32342d3234203d3e203438353932.roa (hash: 5R59EysS9tL6UTIvemaJCrtszj6x6/cuKApXJ2KN9Lk=) 13: 3138352e33392e3138302e302f32342d3234203d3e203438353932.roa (hash: ZWyLSTcE9mAQsDVjLP4sbforwwRF0gy7YQkGUCm2B9s=) 14: 3139332e3234362e3136352e302f32342d3234203d3e20343031323935.roa (hash: L44J+BEkrVdft9AVRNXbl2gKqXXH8VsPAtFPRC3L9uU=) 15: 3231322e34372e33362e302f32342d3234203d3e2039333138.roa (hash: ZVXQWb7gEfqAkq16Ky0ZSqFCIZ2vC/M8/7YAMrFhXy0=) 16: 37372e38312e38332e302f32342d3234203d3e203438353932.roa (hash: Tv5q+rfM3afhLe0aBDFGLWT8PXWC4GLzMQF3H6VLFL8=) 17: 3139342e32362e322e302f32342d3234203d3e2036303739.roa (hash: eXWT+PlyOnJLCf8fJSBgFCoZbaqBMmvm3nL9Np0p08s=) 18: 37372e38312e37362e302f32342d3234203d3e203438353932.roa (hash: xdM7OBZ/9TbpR6di66FXGgK7azfT3ftRTjEe6Yt/SjQ=) 19: 3139342e32362e32312e302f32342d3234203d3e20343032323336.roa (hash: pUa1ndniCOYV9ES6BNwWdFcD47r2QhLmtLoNdmF7rhw=) 20: 37372e38312e37392e302f32342d3234203d3e20343032323336.roa (hash: M2dmsDaCkf9RNR7OAA/qGmqHIFBJr7jscLVBUWk8SoM=) 21: 3132382e36352e3136302e302f32322d3232203d3e203438353932.roa (hash: A3pVDR25ByDI5MeiQGGyctYtEVKjmHED5jwJjMlcbk4=) 22: 37372e38312e38322e302f32342d3234203d3e203438353932.roa (hash: d5TxhwAkeXwrF6uRbXxfjKGJfxHDWIa7sLTALcjfvN4=) 23: 37372e38312e37392e302f32342d3234203d3e2036303739.roa (hash: CJIevw70hXk1ZbxNXn1s8ukayMRMzgKM7Ytd97RL5pI=) 24: 3139342e32362e322e302f32342d3234203d3e20343032323336.roa (hash: Svrr+wgr/nQThaTFfhRBjAYu9J8WfdukPNEs2F7UKRs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:5f:47:6b:c0:52:5a:a2:20:e9:5e:07:08:70:c7:6d:27:86:35:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b Validity Not Before: Sep 26 23:37:11 2026 GMT Not After : Sep 28 02:16:11 2026 GMT Subject: CN=2747CA20DF3FD22A696337E19020368D80EE4F36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:15:d3:94:58:0a:4c:32:64:ea:c6:4f:f3:ea: 35:7c:f0:5b:7e:9f:0c:cb:78:4f:d9:ad:72:80:22: a1:3f:86:67:17:4b:4f:90:99:66:1d:6f:bf:fb:d8: 13:ae:d7:e7:24:e6:65:07:8f:17:f5:63:60:51:cc: 7b:8a:92:2d:84:c4:32:bf:54:9b:e5:3e:1c:67:f5: 1b:89:ba:22:d1:c7:97:bc:c0:52:4d:a1:9f:c3:d4: e5:22:2e:a2:3c:08:0b:7b:f8:91:c1:47:42:67:c4: c6:f2:01:ae:34:4c:25:ea:c1:4f:9e:b3:78:9a:71: b1:1a:57:77:4d:b9:33:a1:60:5f:06:60:e5:e1:94: b0:53:b3:6a:1a:4c:22:51:7e:51:d0:2a:2a:fd:df: 01:2c:5a:45:ca:75:67:10:11:ce:59:b5:61:91:40: 04:ed:5d:c5:a1:c3:08:3e:08:8d:f0:19:e2:46:09: a0:19:cf:e7:14:59:87:3d:f3:36:d7:f3:a3:e7:66: 25:35:03:67:22:9a:ba:35:9c:2f:71:d1:26:b5:52: cb:b3:82:fa:27:1b:95:8b:5b:3a:38:9c:02:3c:bf: fb:85:a5:d0:b9:d8:49:b8:9b:fe:8b:0b:2b:56:df: 8f:db:e9:f1:59:ba:f2:44:59:3a:46:83:f0:e5:42: 9d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:47:CA:20:DF:3F:D2:2A:69:63:37:E1:90:20:36:8D:80:EE:4F:36 X509v3 Authority Key Identifier: keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:07:92:02:b3:33:8d:98:23:cc:22:db:a4:68:94:70:df:97: bb:80:74:23:c2:86:a7:ba:79:c2:c8:fe:7e:99:ce:26:c6:e6: 3f:68:5c:4e:36:a8:8a:d1:48:2c:4c:9b:05:02:53:c6:7e:17: fa:50:f2:2f:78:52:63:7a:f9:65:ab:fc:c4:60:c7:30:db:da: c2:44:e1:66:01:2e:94:12:5d:7a:39:60:16:69:79:6f:60:f3: 25:d8:f6:34:7c:46:c8:ed:ef:bf:66:98:61:a1:60:37:7f:80: d0:ce:e6:ba:0b:d8:0a:0a:23:a8:89:03:d2:27:94:f4:f4:e9: 70:38:2a:cd:bf:5d:ab:d3:06:9e:93:4f:c8:bc:b0:92:93:a5: c3:ff:32:55:21:8c:bb:e6:f6:c5:59:fd:e9:65:7a:14:29:f3: 0d:72:52:d3:96:a9:ac:6e:36:18:02:d4:05:28:1f:c1:33:d2: 69:14:56:d4:bf:c5:3e:4a:96:0d:d8:96:57:90:0e:b1:2a:98: 40:38:55:bd:47:f2:83:8d:d9:71:e4:31:04:2f:9b:c8:17:b2: bb:f9:43:45:b4:b6:01:b5:c1:ab:33:9e:9d:d2:77:8f:07:77: f7:67:54:9a:2f:50:90:f8:81:c0:fd:cc:c2:c5:bc:84:12:3d: 86:ae:af:8b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUFl9Ha8BSWqIg6V4HCHDHbSeGNQkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVlODY0OGU0NDVkY2NkMGQ4ZWU2OTlmNTE0MGJiODE0 ZTQzYWUxYjAeFw0yNjA5MjYyMzM3MTFaFw0yNjA5MjgwMjE2MTFaMDMxMTAvBgNV BAMTKDI3NDdDQTIwREYzRkQyMkE2OTYzMzdFMTkwMjAzNjhEODBFRTRGMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPFdOUWApMMmTqxk/z6jV88Ft+ nwzLeE/ZrXKAIqE/hmcXS0+QmWYdb7/72BOu1+ck5mUHjxf1Y2BRzHuKki2ExDK/ VJvlPhxn9RuJuiLRx5e8wFJNoZ/D1OUiLqI8CAt7+JHBR0JnxMbyAa40TCXqwU+e s3iacbEaV3dNuTOhYF8GYOXhlLBTs2oaTCJRflHQKir93wEsWkXKdWcQEc5ZtWGR QATtXcWhwwg+CI3wGeJGCaAZz+cUWYc98zbX86PnZiU1A2cimro1nC9x0Sa1Usuz gvonG5WLWzo4nAI8v/uFpdC52Em4m/6LCytW34/b6fFZuvJEWTpGg/DlQp1/AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUJ0fKIN8/0ippYzfhkCA2jYDuTzYwHwYDVR0j BBgwFoAURehkjkRdzNDY7mmfUUC7gU5DrhswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTMzYjJmZDctMzFjMS00NTFjLTgyODgtYzFhYTBhYTEy NzUwLzAvNDVFODY0OEU0NDVEQ0NEMEQ4RUU2OTlGNTE0MEJCODE0RTQzQUUxQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JlaGtqa1Jkek5EWTdtbWZVVUM3Z1U1 RHJocy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85MzNiMmZkNy0z MWMxLTQ1MWMtODI4OC1jMWFhMGFhMTI3NTAvMC80NUU4NjQ4RTQ0NURDQ0QwRDhF RTY5OUY1MTQwQkI4MTRFNDNBRTFCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeQeSArMzjZgjzCLbpGiU cN+Xu4B0I8KGp7p5wsj+fpnOJsbmP2hcTjaoitFILEybBQJTxn4X+lDyL3hSY3r5 Zav8xGDHMNvawkThZgEulBJdejlgFml5b2DzJdj2NHxGyO3vv2aYYaFgN3+A0M7m ugvYCgojqIkD0ieU9PTpcDgqzb9dq9MGnpNPyLywkpOlw/8yVSGMu+b2xVn96WV6 FCnzDXJS05aprG42GALUBSgfwTPSaRRW1L/FPkqWDdiWV5AOsSqYQDhVvUfyg43Z ceQxBC+byBeyu/lDRbS2AbXBqzOendJ3jwd392dUmi9QkPiBwP3MwsW8hBI9hq6v iw== -----END CERTIFICATE-----Generated at Sun Sep 27 06:26:46 2026 by rpki-client