$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft File: 45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft (raw, json) Hash identifier: 9rSi1tgLFEHKtsXCNtZ9Ov7gqxmBxaVJMseJONDQ/L8= Subject key identifier: D4:B5:22:D9:AC:0C:B5:07:DD:10:69:AF:20:3A:E5:10:B2:09:E7:AC Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b Certificate serial: 58BD7127E597B1994C82F230B20E277BAB0A003D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft Manifest number: 0243 Signing time: Fri 17 Apr 2026 02:59:42 +0000 Manifest this update: Fri 17 Apr 2026 02:54:42 +0000 Manifest next update: Sat 18 Apr 2026 06:38:42 +0000 Files and hashes: 1: 37372e38312e37392e302f32342d3234203d3e2035363530.roa (hash: chtAnXZi5q6GRUxpR5xO2uIiP96tdCrOBTIeDsoa8hE=) 2: 3139342e32362e322e302f32342d3234203d3e20343031383338.roa (hash: hww+5Hf4jmFo7Au813kPo2lBtFDkf7ALOlVDrCFDow8=) 3: 3139342e32362e32302e302f32342d3234203d3e20323132323338.roa (hash: YP/VU7Ddy/RINA1ejeDsmhFrZUIqFHueTf4iQvV7+Jw=) 4: 3139342e32362e32312e302f32342d3234203d3e2036303739.roa (hash: C+pqIVBYxtX1Vf4vHbq3YBGNZtxuHmXXj5v6GlxMx88=) 5: 3139332e3234362e3136342e302f32342d3234203d3e20313335333931.roa (hash: JL/dBZtc7cqNfBqDUBsHO8zmA5iOWu/V8229oSGf3qQ=) 6: 37372e38312e37362e302f32342d3234203d3e203438353932.roa (hash: xdM7OBZ/9TbpR6di66FXGgK7azfT3ftRTjEe6Yt/SjQ=) 7: 37372e38312e37392e302f32342d3234203d3e2036303739.roa (hash: u0uKpeiU5ZpBWUsg2bqVMuJ+xilyXQyIO7XWxfYa1xw=) 8: 3139342e32362e322e302f32342d3234203d3e2035363530.roa (hash: ZRXlceutGr+HdF7VzH6TN3nc+64+GLWiw3p0vss7mZQ=) 9: 3231322e34372e33362e302f32342d3234203d3e2039333138.roa (hash: ZVXQWb7gEfqAkq16Ky0ZSqFCIZ2vC/M8/7YAMrFhXy0=) 10: 3138352e33392e3138312e302f32342d3234203d3e203438353932.roa (hash: wPa88HthyMje0FC4DyK9XcGEOLxJkylfsOcQDqr+i80=) 11: 3138352e33392e3138302e302f32342d3234203d3e203438353932.roa (hash: ZWyLSTcE9mAQsDVjLP4sbforwwRF0gy7YQkGUCm2B9s=) 12: 3132382e36352e3136302e302f32322d3232203d3e203438353932.roa (hash: A3pVDR25ByDI5MeiQGGyctYtEVKjmHED5jwJjMlcbk4=) 13: 3138382e3231342e3233322e302f32332d3234203d3e2035303635.roa (hash: x3PmGOoet0cDs7+uuyuNJtaOTgdNjDt0p0iGeQg4oNo=) 14: 3139342e32362e32312e302f32342d3234203d3e2035363530.roa (hash: p78KH8kgcBRXXFcw1mzLGQ6wEbtzI8eA56dk/vajAYc=) 15: 37372e38312e37392e302f32342d3234203d3e2037303138.roa (hash: QouC5FWUBHtZ4E7QwYAk/YLY1LKZrC4sUpRgQ8vSbSQ=) 16: 3139342e32362e322e302f32342d3234203d3e2036303739.roa (hash: TjtnNTn7FpO9sB3IOcWEqbyB3qNOxAYh9NFcoqi1238=) 17: 3139332e3234362e3136352e302f32342d3234203d3e20343031323935.roa (hash: /MCjD1gKf8dM428+AJBa7D2BqNWXl/86u8uSaT3JFm0=) 18: 37372e38312e38322e302f32342d3234203d3e203438353932.roa (hash: d5TxhwAkeXwrF6uRbXxfjKGJfxHDWIa7sLTALcjfvN4=) 19: 3138352e33392e3138332e302f32342d3234203d3e203438353932.roa (hash: 5y1BpEcUWIqqauwo2u2KJKPFMCa0JPAhvtiDqGTVDHw=) 20: 3139342e32362e32312e302f32342d3234203d3e20343031383338.roa (hash: W6OrrdK1OeSj0zhiikePRhbHjS9VOD7qyg5G4TQyO4k=) 21: 3139342e32362e32312e302f32342d3234203d3e2037303138.roa (hash: kBcBHXRMQfVwN+zg5BZ4LCUyMZ6cS1mQp15ihx19Joc=) 22: 37372e38312e38332e302f32342d3234203d3e203438353932.roa (hash: Tv5q+rfM3afhLe0aBDFGLWT8PXWC4GLzMQF3H6VLFL8=) 23: 3139342e32362e332e302f32342d3234203d3e20343031313930.roa (hash: LIKAmocMMAfJYEkBfDTJGvC18ZVuFHLl0Op0JOVO1hY=) 24: 37372e38312e37372e302f32342d3234203d3e203438323636.roa (hash: 5I0vOu7kvIMlEY7Sq8XZtvSWHaZxS4B46RvJVyxx8WI=) 25: 3132382e36352e3136342e302f32322d3232203d3e2033333230.roa (hash: MdPKw7OONGYXcOZWO/o2hEi1vtA1V+k+wu8N5c3I5aE=) 26: 3138352e33392e3138322e302f32342d3234203d3e203438353932.roa (hash: 2GU98PVW8A06wPHFP07dWrMXh03+0FNfaArisd+625g=) 27: 37372e38312e37392e302f32342d3234203d3e20343031383338.roa (hash: jqhfslJN0nyOj/30XxhLZVefzpoYoh0e1/irmr4G57s=) 28: 3139342e32362e322e302f32342d3234203d3e2037303138.roa (hash: ipi0vAcQv2svi+muK542zHAIeeVH19r0pk+yh9NadUY=) 29: 37372e38312e37382e302f32342d3234203d3e203438353932.roa (hash: 5R59EysS9tL6UTIvemaJCrtszj6x6/cuKApXJ2KN9Lk=) 30: 45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl (hash: t56+IzQcN613NBwoFYbX3Ekq39+9iZHF3Kyj2KLhmTQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 06:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:bd:71:27:e5:97:b1:99:4c:82:f2:30:b2:0e:27:7b:ab:0a:00:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b Validity Not Before: Apr 17 02:54:42 2026 GMT Not After : Apr 18 06:38:42 2026 GMT Subject: CN=D4B522D9AC0CB507DD1069AF203AE510B209E7AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:be:53:1c:b3:db:c6:02:b3:5f:2f:3d:59:19: 5a:67:7e:69:70:a8:36:9d:ba:22:df:87:eb:84:89: fa:bb:ef:99:35:aa:d1:c6:42:b9:49:b1:30:8b:e1: 95:af:0c:3e:15:91:98:5d:05:7e:09:db:1a:b4:3e: 59:bf:e9:d7:be:8e:91:25:fa:84:5d:86:08:5d:1f: 9d:6f:9f:ae:4e:4d:df:c8:74:dd:5d:bd:b4:6c:04: 35:1f:71:9a:a3:20:4b:4a:49:49:d4:02:47:bf:0f: 28:1a:d9:a7:aa:06:a7:ee:a1:c8:c7:83:fe:5d:d9: 94:4d:d6:04:c2:7c:ec:a7:26:17:f8:b8:dc:a9:19: d7:e3:f0:63:d2:24:a3:63:34:2c:a2:5a:dc:21:12: 63:30:fb:fb:0d:95:48:51:da:42:fa:de:03:aa:14: 9e:8a:78:1e:c2:2b:6e:1b:43:83:2f:77:30:73:f8: c0:66:95:06:c6:42:f8:7d:f1:5f:66:41:5d:43:02: e9:10:8d:44:16:15:93:e7:42:94:47:34:e7:4f:c0: be:ff:97:48:51:71:8d:57:09:58:b8:18:42:ee:97: b2:ac:c3:b2:38:ca:74:e9:85:c5:22:7f:17:fe:df: 4f:fd:62:01:5b:e8:89:e9:e4:75:55:c0:72:75:82: 23:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B5:22:D9:AC:0C:B5:07:DD:10:69:AF:20:3A:E5:10:B2:09:E7:AC X509v3 Authority Key Identifier: keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:c4:f2:03:cf:9b:81:ab:80:9c:37:7f:75:f7:b7:95:64:a0: 04:bd:df:43:39:54:1b:af:3d:44:ba:6d:c2:89:f7:98:5e:0f: 1c:28:47:6f:1e:9e:aa:53:ba:a6:d8:8c:01:e7:8b:20:cd:db: 51:02:f6:21:93:96:a4:44:d1:e1:25:66:ea:f9:34:31:da:2b: 6d:ca:14:f1:66:7c:be:c8:1b:13:3e:94:45:9e:ab:88:a2:e4: 91:02:bb:35:bb:a4:94:58:53:57:fc:5c:72:91:8b:04:83:fe: 68:8b:cd:14:ae:ce:c5:28:2e:b3:f8:d0:a4:0f:0f:ea:75:b5: ef:89:9e:9f:dc:4b:2a:72:8e:a0:8b:2e:05:33:46:b3:2c:71: 47:ce:97:00:db:3f:a3:29:08:e8:fc:b2:c6:db:48:7c:05:eb: 01:88:7c:fe:89:b9:6f:00:9c:0e:b5:fe:b1:60:20:26:aa:8d: 97:f5:51:be:53:9e:8c:48:81:81:3a:6d:db:00:4a:ac:c4:a9: b3:a6:be:ab:52:e6:68:3e:50:b5:ba:95:20:46:1f:d6:2c:dd: cd:b2:29:e3:39:2b:fb:23:9c:5a:8d:35:26:a7:b5:88:ce:05: a4:4a:f5:76:75:41:a4:01:04:83:97:fe:93:5f:4b:1a:16:c6: e6:5d:a0:8f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUWL1xJ+WXsZlMgvIwsg4ne6sKAD0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVlODY0OGU0NDVkY2NkMGQ4ZWU2OTlmNTE0MGJiODE0 ZTQzYWUxYjAeFw0yNjA0MTcwMjU0NDJaFw0yNjA0MTgwNjM4NDJaMDMxMTAvBgNV BAMTKEQ0QjUyMkQ5QUMwQ0I1MDdERDEwNjlBRjIwM0FFNTEwQjIwOUU3QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRvlMcs9vGArNfLz1ZGVpnfmlw qDaduiLfh+uEifq775k1qtHGQrlJsTCL4ZWvDD4VkZhdBX4J2xq0Plm/6de+jpEl +oRdhghdH51vn65OTd/IdN1dvbRsBDUfcZqjIEtKSUnUAke/Dyga2aeqBqfuocjH g/5d2ZRN1gTCfOynJhf4uNypGdfj8GPSJKNjNCyiWtwhEmMw+/sNlUhR2kL63gOq FJ6KeB7CK24bQ4MvdzBz+MBmlQbGQvh98V9mQV1DAukQjUQWFZPnQpRHNOdPwL7/ l0hRcY1XCVi4GELul7Ksw7I4ynTphcUifxf+30/9YgFb6Inp5HVVwHJ1giMJAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU1LUi2awMtQfdEGmvIDrlELIJ56wwHwYDVR0j BBgwFoAURehkjkRdzNDY7mmfUUC7gU5DrhswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTMzYjJmZDctMzFjMS00NTFjLTgyODgtYzFhYTBhYTEy NzUwLzAvNDVFODY0OEU0NDVEQ0NEMEQ4RUU2OTlGNTE0MEJCODE0RTQzQUUxQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JlaGtqa1Jkek5EWTdtbWZVVUM3Z1U1 RHJocy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85MzNiMmZkNy0z MWMxLTQ1MWMtODI4OC1jMWFhMGFhMTI3NTAvMC80NUU4NjQ4RTQ0NURDQ0QwRDhF RTY5OUY1MTQwQkI4MTRFNDNBRTFCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAocTyA8+bgauAnDd/dfe3 lWSgBL3fQzlUG689RLptwon3mF4PHChHbx6eqlO6ptiMAeeLIM3bUQL2IZOWpETR 4SVm6vk0MdorbcoU8WZ8vsgbEz6URZ6riKLkkQK7NbuklFhTV/xccpGLBIP+aIvN FK7OxSgus/jQpA8P6nW174men9xLKnKOoIsuBTNGsyxxR86XANs/oykI6PyyxttI fAXrAYh8/om5bwCcDrX+sWAgJqqNl/VRvlOejEiBgTpt2wBKrMSps6a+q1LmaD5Q tbqVIEYf1izdzbIp4zkr+yOcWo01Jqe1iM4FpEr1dnVBpAEEg5f+k19LGhbG5l2g jw== -----END CERTIFICATE-----Generated at Fri Apr 17 17:40:13 2026 by rpki-client