$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft File: 45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft (raw, json) Hash identifier: Zp8iQew+xpx1Bw658QWD6aJu3sdLAunSFtDZNnjPFr8= Subject key identifier: 55:71:B9:61:0E:3B:08:FD:B8:A4:EA:FE:BD:DE:A9:C6:C1:02:D2:42 Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b Certificate serial: 44B61C3E70975FDF67D5EA3BA84DD8333B6E83FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft Manifest number: 0140 Signing time: Sun 19 Oct 2025 01:31:33 +0000 Manifest this update: Sun 19 Oct 2025 01:26:33 +0000 Manifest next update: Mon 20 Oct 2025 01:56:33 +0000 Files and hashes: 1: 3138352e33392e3138302e302f32342d3234203d3e203438353932.roa (hash: eRfFsAmiOd7fmXSkLY1iDQqDLPihvnF73pAdlTyZEec=) 2: 3132382e36352e3136302e302f32322d3232203d3e203438353932.roa (hash: e2sDKCcJlT/U2mWShGzkoM6fLVC3axyQA7582KFjXl0=) 3: 3139342e32362e322e302f32342d3234203d3e20343031383338.roa (hash: hww+5Hf4jmFo7Au813kPo2lBtFDkf7ALOlVDrCFDow8=) 4: 37372e38312e37372e302f32342d3234203d3e203438323636.roa (hash: J/r1ohjqm58lYGf0PKhjS1FTmSVJSsFJuiHDfyKNQLE=) 5: 3139342e32362e32312e302f32342d3234203d3e20343031383338.roa (hash: W6OrrdK1OeSj0zhiikePRhbHjS9VOD7qyg5G4TQyO4k=) 6: 3139342e32362e322e302f32342d3234203d3e2037303138.roa (hash: KZ2g79XWhSpy1OjdBEbA7bKBiIPr4KF5cEbdhi1cO+c=) 7: 3138352e33392e3138312e302f32342d3234203d3e203438353932.roa (hash: Vuif+1Rwal2KWngsbR1gG7PlppvF8JCFTHMdlSgwTho=) 8: 37372e38312e38322e302f32342d3234203d3e203438353932.roa (hash: g9+qPCIMbMsxLbmabycfUHp6SrIAw5buxV/5VJi8ArY=) 9: 37372e38312e38302e302f32332d3233203d3e203230383630.roa (hash: ENs1tyjr+QsCNkYiVs8CGb16BSmudiUVAdhDAu4V/ek=) 10: 3132382e36352e3136382e302f32312d3234203d3e2036303739.roa (hash: i6JhDTo2qgsHKnhvdAD8kBBVl6YUcjppNLTK7aRFku0=) 11: 3138352e33392e3138332e302f32342d3234203d3e203438353932.roa (hash: 1itaUJD6MM9qJoykl2AD3Me7plWTAUPMb45hv4KS1Is=) 12: 3138352e33392e3138322e302f32342d3234203d3e203438353932.roa (hash: ZRiHbt3iKKs0O/K+Xj70IALSK3+jGBgHEkJ3Uk6rxC8=) 13: 37372e38312e38332e302f32342d3234203d3e203438353932.roa (hash: FUbnkxuvcKLpw8C4HQaABzR8zDln4ay05cwGyEgtqLs=) 14: 3138382e3231342e3233322e302f32332d3233203d3e2035303635.roa (hash: BFuLnnyWuJctlm6cMRTXIHiK+UW5qbLi6zguqt9+aRs=) 15: 39312e3230392e3137392e302f32342d3234203d3e203136323736.roa (hash: 29p+IQjE0X+w+9GfW3lBtkzy5qmkEsdg0O7SGsHy+z8=) 16: 3139342e32362e332e302f32342d3234203d3e20343031313930.roa (hash: LIKAmocMMAfJYEkBfDTJGvC18ZVuFHLl0Op0JOVO1hY=) 17: 3139342e32362e32302e302f32342d3234203d3e20323132323338.roa (hash: YP/VU7Ddy/RINA1ejeDsmhFrZUIqFHueTf4iQvV7+Jw=) 18: 37372e38312e37392e302f32342d3234203d3e20343031383338.roa (hash: jqhfslJN0nyOj/30XxhLZVefzpoYoh0e1/irmr4G57s=) 19: 45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl (hash: 31JRSvjDW6xcOWAYIPdc5MzkzDK0M7+rL56RYiGj9Ng=) 20: 3139342e32362e32312e302f32342d3234203d3e2037303138.roa (hash: 7yEbo3DradWn9p6FL6O0sR90rL76BXVbRvfqqu/D+3E=) 21: 37372e38312e37362e302f32342d3234203d3e203438353932.roa (hash: AeGgNi4bw9l3zN1DkQ6g095MQ+7U7OthIn51Fzss3Oc=) 22: 37372e38312e37392e302f32342d3234203d3e2037303138.roa (hash: Mtmk/kZphhA5s4uopguvEbJvjOjUXgfeStc99+50/4U=) 23: 37372e38312e37382e302f32342d3234203d3e203438353932.roa (hash: sxtXA2eVprRgAPdjB6IZUpHTWxye7ZI2nEVGAB55zbo=) 24: 3132382e36352e3136342e302f32322d3232203d3e2033333230.roa (hash: jUzg8MFBi50HDoiq8ZBSiLc/BkEY3Sqp4qzgmYg5v/k=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 01:56:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:b6:1c:3e:70:97:5f:df:67:d5:ea:3b:a8:4d:d8:33:3b:6e:83:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b Validity Not Before: Oct 19 01:26:33 2025 GMT Not After : Oct 20 01:56:33 2025 GMT Subject: CN=5571B9610E3B08FDB8A4EAFEBDDEA9C6C102D242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:73:fd:f3:6a:d7:07:d3:1b:29:74:62:ca:ff: c0:c0:6f:44:d0:04:61:11:67:67:c8:c2:d9:3c:2a: 60:44:ee:e3:b8:13:a2:93:a2:5d:32:6b:d9:1c:97: c9:e5:46:93:fb:96:5a:dc:7b:5b:e2:c7:3c:2d:cd: 57:54:af:25:cb:97:f9:08:7e:c2:d7:7f:c1:a2:07: 5b:29:4b:b6:d3:f2:a7:21:0d:e9:20:0a:7c:da:2c: 94:03:b3:0b:77:ab:44:d1:a3:59:52:5a:e6:47:96: 6a:de:95:bf:39:5d:bb:52:73:25:db:63:79:f3:94: 07:8c:92:a0:6c:11:61:85:4a:17:ca:bf:46:1a:2d: cc:dc:a7:58:f0:be:fa:c0:74:21:1d:91:ff:53:17: 26:9a:82:f1:01:92:ea:ae:fe:d8:6b:2b:64:bf:d1: ea:20:80:d2:db:51:58:53:3d:3a:b2:b1:32:04:14: 6b:dd:1e:25:5a:6b:e3:59:b3:ba:49:96:80:57:ff: d0:4f:9c:42:f1:92:fd:8c:6f:09:d2:17:58:89:12: 07:b0:48:df:3e:a8:7c:8e:29:62:9b:8a:bf:f8:3b: d4:1c:42:19:8f:1d:2c:80:72:a9:94:18:91:5a:48: d8:a9:37:29:f8:07:fc:d1:69:cb:38:2b:10:37:a9: bf:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:71:B9:61:0E:3B:08:FD:B8:A4:EA:FE:BD:DE:A9:C6:C1:02:D2:42 X509v3 Authority Key Identifier: keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:1b:b1:b3:cb:e6:c8:5c:9a:11:6c:d0:13:d0:93:ec:c5:a1: 6c:e6:16:3d:1f:4c:b2:3e:db:9a:d7:e3:67:92:a0:15:26:4b: 33:32:ba:fb:ec:9c:3f:3a:b0:67:13:01:5a:16:3a:f8:d7:c2: 09:a8:cd:2c:0f:7e:71:eb:aa:e2:4a:2a:cd:c5:59:75:66:79: 79:77:9a:4c:92:72:2e:87:57:ca:a2:77:b9:6b:13:cd:e6:c4: 29:c5:96:8a:55:9f:58:c0:10:77:03:8b:96:a0:2a:e8:05:59: 49:f4:8a:7e:3b:54:75:2c:51:74:9e:cb:77:e9:d2:94:d9:5e: a8:0a:a7:54:fd:39:c3:4b:0c:85:0b:d9:04:14:33:65:a2:a1: 52:dc:48:2d:81:9e:58:f7:6e:32:28:61:a1:81:09:e2:32:16: c5:af:7c:e4:03:15:82:a5:09:9a:eb:06:e9:8e:a3:ae:7f:b3: 2a:d2:84:26:64:f8:c8:03:95:d7:d6:0a:74:55:08:b3:2e:be: 71:da:46:8b:ca:16:53:d9:c6:c9:c8:66:8d:9a:8d:8a:4d:46: 76:1f:79:1b:ed:0c:ad:08:0a:34:3f:6f:f1:28:7a:3a:f3:74: b6:f4:cb:04:18:db:7a:0e:24:ce:e0:c9:e8:6c:02:04:6b:37: df:70:3b:31 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIURLYcPnCXX99n1eo7qE3YMztug/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVlODY0OGU0NDVkY2NkMGQ4ZWU2OTlmNTE0MGJiODE0 ZTQzYWUxYjAeFw0yNTEwMTkwMTI2MzNaFw0yNTEwMjAwMTU2MzNaMDMxMTAvBgNV BAMTKDU1NzFCOTYxMEUzQjA4RkRCOEE0RUFGRUJEREVBOUM2QzEwMkQyNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoc/3zatcH0xspdGLK/8DAb0TQ BGERZ2fIwtk8KmBE7uO4E6KTol0ya9kcl8nlRpP7llrce1vixzwtzVdUryXLl/kI fsLXf8GiB1spS7bT8qchDekgCnzaLJQDswt3q0TRo1lSWuZHlmrelb85XbtScyXb Y3nzlAeMkqBsEWGFShfKv0YaLczcp1jwvvrAdCEdkf9TFyaagvEBkuqu/thrK2S/ 0eoggNLbUVhTPTqysTIEFGvdHiVaa+NZs7pJloBX/9BPnELxkv2MbwnSF1iJEgew SN8+qHyOKWKbir/4O9QcQhmPHSyAcqmUGJFaSNipNyn4B/zRacs4KxA3qb+zAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUVXG5YQ47CP24pOr+vd6pxsEC0kIwHwYDVR0j BBgwFoAURehkjkRdzNDY7mmfUUC7gU5DrhswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTMzYjJmZDctMzFjMS00NTFjLTgyODgtYzFhYTBhYTEy NzUwLzAvNDVFODY0OEU0NDVEQ0NEMEQ4RUU2OTlGNTE0MEJCODE0RTQzQUUxQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JlaGtqa1Jkek5EWTdtbWZVVUM3Z1U1 RHJocy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85MzNiMmZkNy0z MWMxLTQ1MWMtODI4OC1jMWFhMGFhMTI3NTAvMC80NUU4NjQ4RTQ0NURDQ0QwRDhF RTY5OUY1MTQwQkI4MTRFNDNBRTFCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAixuxs8vmyFyaEWzQE9CT 7MWhbOYWPR9Msj7bmtfjZ5KgFSZLMzK6++ycPzqwZxMBWhY6+NfCCajNLA9+ceuq 4koqzcVZdWZ5eXeaTJJyLodXyqJ3uWsTzebEKcWWilWfWMAQdwOLlqAq6AVZSfSK fjtUdSxRdJ7Ld+nSlNleqAqnVP05w0sMhQvZBBQzZaKhUtxILYGeWPduMihhoYEJ 4jIWxa985AMVgqUJmusG6Y6jrn+zKtKEJmT4yAOV19YKdFUIsy6+cdpGi8oWU9nG ychmjZqNik1Gdh95G+0MrQgKND9v8Sh6OvN0tvTLBBjbeg4kzuDJ6GwCBGs333A7 MQ== -----END CERTIFICATE-----Generated at Sun Oct 19 15:34:17 2025 by rpki-client