$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft File: 45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft (raw, json) Hash identifier: 10uny8pQqvHPK/5/ziccIeO0AmF4pQ4rwvGOP4s6Cvc= Subject key identifier: 19:06:B5:4B:F4:81:FB:6A:24:3A:9F:65:8E:B6:63:69:50:A6:AE:7C Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b Certificate serial: 6572F2FE6B1474E9E828B2216428AB620FE98EB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft Manifest number: 0157 Signing time: Wed 05 Nov 2025 02:52:22 +0000 Manifest this update: Wed 05 Nov 2025 02:47:22 +0000 Manifest next update: Thu 06 Nov 2025 03:22:22 +0000 Files and hashes: 1: 37372e38312e38322e302f32342d3234203d3e203438353932.roa (hash: g9+qPCIMbMsxLbmabycfUHp6SrIAw5buxV/5VJi8ArY=) 2: 3139342e32362e322e302f32342d3234203d3e20343031383338.roa (hash: hww+5Hf4jmFo7Au813kPo2lBtFDkf7ALOlVDrCFDow8=) 3: 3139342e32362e332e302f32342d3234203d3e20343031313930.roa (hash: LIKAmocMMAfJYEkBfDTJGvC18ZVuFHLl0Op0JOVO1hY=) 4: 3139342e32362e32302e302f32342d3234203d3e20323132323338.roa (hash: YP/VU7Ddy/RINA1ejeDsmhFrZUIqFHueTf4iQvV7+Jw=) 5: 3139342e32362e322e302f32342d3234203d3e2037303138.roa (hash: KZ2g79XWhSpy1OjdBEbA7bKBiIPr4KF5cEbdhi1cO+c=) 6: 3138352e33392e3138332e302f32342d3234203d3e203438353932.roa (hash: 1itaUJD6MM9qJoykl2AD3Me7plWTAUPMb45hv4KS1Is=) 7: 37372e38312e37362e302f32342d3234203d3e203438353932.roa (hash: AeGgNi4bw9l3zN1DkQ6g095MQ+7U7OthIn51Fzss3Oc=) 8: 39312e3230392e3137392e302f32342d3234203d3e203136323736.roa (hash: 29p+IQjE0X+w+9GfW3lBtkzy5qmkEsdg0O7SGsHy+z8=) 9: 3138352e33392e3138322e302f32342d3234203d3e203438353932.roa (hash: ZRiHbt3iKKs0O/K+Xj70IALSK3+jGBgHEkJ3Uk6rxC8=) 10: 37372e38312e37372e302f32342d3234203d3e203438323636.roa (hash: J/r1ohjqm58lYGf0PKhjS1FTmSVJSsFJuiHDfyKNQLE=) 11: 37372e38312e38302e302f32332d3233203d3e203230383630.roa (hash: ENs1tyjr+QsCNkYiVs8CGb16BSmudiUVAdhDAu4V/ek=) 12: 37372e38312e38332e302f32342d3234203d3e203438353932.roa (hash: FUbnkxuvcKLpw8C4HQaABzR8zDln4ay05cwGyEgtqLs=) 13: 3132382e36352e3136302e302f32322d3232203d3e203438353932.roa (hash: e2sDKCcJlT/U2mWShGzkoM6fLVC3axyQA7582KFjXl0=) 14: 3132382e36352e3136342e302f32322d3232203d3e2033333230.roa (hash: jUzg8MFBi50HDoiq8ZBSiLc/BkEY3Sqp4qzgmYg5v/k=) 15: 3138382e3231342e3233322e302f32332d3233203d3e2035303635.roa (hash: BFuLnnyWuJctlm6cMRTXIHiK+UW5qbLi6zguqt9+aRs=) 16: 3138352e33392e3138302e302f32342d3234203d3e203438353932.roa (hash: eRfFsAmiOd7fmXSkLY1iDQqDLPihvnF73pAdlTyZEec=) 17: 45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl (hash: FrlQCH6Cen7A3kW+Wcdywn2cULz/k5Bnog4eQgky3/g=) 18: 3139342e32362e32312e302f32342d3234203d3e2037303138.roa (hash: 7yEbo3DradWn9p6FL6O0sR90rL76BXVbRvfqqu/D+3E=) 19: 3132382e36352e3136382e302f32312d3234203d3e2036303739.roa (hash: i6JhDTo2qgsHKnhvdAD8kBBVl6YUcjppNLTK7aRFku0=) 20: 37372e38312e37382e302f32342d3234203d3e203438353932.roa (hash: sxtXA2eVprRgAPdjB6IZUpHTWxye7ZI2nEVGAB55zbo=) 21: 37372e38312e37392e302f32342d3234203d3e20343031383338.roa (hash: jqhfslJN0nyOj/30XxhLZVefzpoYoh0e1/irmr4G57s=) 22: 3138352e33392e3138312e302f32342d3234203d3e203438353932.roa (hash: Vuif+1Rwal2KWngsbR1gG7PlppvF8JCFTHMdlSgwTho=) 23: 37372e38312e37392e302f32342d3234203d3e2037303138.roa (hash: Mtmk/kZphhA5s4uopguvEbJvjOjUXgfeStc99+50/4U=) 24: 3139342e32362e32312e302f32342d3234203d3e20343031383338.roa (hash: W6OrrdK1OeSj0zhiikePRhbHjS9VOD7qyg5G4TQyO4k=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 22:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:72:f2:fe:6b:14:74:e9:e8:28:b2:21:64:28:ab:62:0f:e9:8e:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b Validity Not Before: Nov 5 02:47:22 2025 GMT Not After : Nov 6 03:22:22 2025 GMT Subject: CN=1906B54BF481FB6A243A9F658EB6636950A6AE7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0a:18:c7:d5:af:8b:85:20:00:02:87:f4:37: ab:21:e4:8b:35:cb:3d:13:df:ed:a2:4f:e9:22:a2: 34:8a:1c:c8:1c:2a:69:b6:7e:b2:2d:8f:eb:7a:c6: 82:47:ba:dc:2b:cf:eb:21:4c:c2:21:ea:2e:7b:46: fe:ab:9c:76:41:06:d0:67:f1:82:c0:70:fb:bb:e4: 76:84:35:c6:04:01:9f:bd:6d:cc:8b:0a:f5:93:0f: 09:f1:e2:d2:e3:3d:60:2a:b2:02:1a:0f:6c:db:df: c6:10:54:57:6f:02:7c:e0:09:4f:8e:68:60:7f:ca: 20:19:4e:b7:04:1c:94:00:6a:02:a8:e4:f9:aa:72: 1f:6f:10:cb:16:52:8f:7a:4b:f8:76:58:e3:82:10: 92:a5:4a:d8:e4:12:55:02:6a:5d:49:72:f2:ef:4d: 82:d8:2e:dd:5f:75:ea:9e:4d:d2:76:8f:6e:76:73: 19:06:03:47:60:00:59:63:79:6e:c8:aa:b9:5a:6d: 87:a7:6a:40:01:3e:5b:9c:b6:02:5d:c7:bd:05:86: e8:ec:71:5e:7c:43:7b:e7:c2:7d:18:cd:64:ef:91: c4:b0:8b:f9:35:cb:fa:f7:b1:d4:35:5d:91:67:f9: 8c:3a:19:91:08:82:e0:45:5e:c9:28:e6:3a:23:ef: 02:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:06:B5:4B:F4:81:FB:6A:24:3A:9F:65:8E:B6:63:69:50:A6:AE:7C X509v3 Authority Key Identifier: keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:db:f0:f6:5b:c4:98:31:1f:dd:13:51:48:c4:1b:ec:64:43: a9:2e:8f:17:27:d2:55:f9:fc:5a:7f:3b:21:54:0b:09:04:02: a8:fe:0a:e9:99:2a:38:63:c2:a4:19:9d:20:c2:5b:01:44:2f: f1:7f:74:74:d6:b0:5e:84:c0:0e:25:95:52:a6:0c:d8:56:d3: 86:93:f6:71:b7:31:c1:a4:60:49:2b:42:d5:b1:8c:bb:36:aa: 6a:cf:ba:b0:cb:08:86:3b:37:69:21:4d:4f:9c:2d:57:49:00: 0a:a2:43:c7:31:a3:3f:27:47:e3:b9:bd:d7:7b:43:8d:d5:a2: 52:6f:a4:c1:8f:0d:91:bc:c7:64:8d:c1:de:13:0c:61:6c:95: ac:e8:e7:f1:21:a7:cb:84:21:b8:9e:62:96:b6:a7:57:e7:68: 6d:15:a8:79:d7:85:ed:16:88:7c:b0:ad:ac:19:cd:6a:17:82: a1:36:cc:c1:48:ce:1b:c7:67:fc:79:4b:f0:d6:65:7c:df:bf: 1c:7e:9b:63:83:9c:63:05:91:94:6c:24:df:06:ec:5b:57:9d: 24:0c:45:ce:a2:76:9d:64:58:09:e5:8d:e9:28:a2:97:0a:2a: 2e:4f:fe:d4:ee:b6:b0:e7:32:e0:6c:22:4f:30:ec:24:6b:41: 41:38:19:09 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUZXLy/msUdOnoKLIhZCirYg/pjrcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVlODY0OGU0NDVkY2NkMGQ4ZWU2OTlmNTE0MGJiODE0 ZTQzYWUxYjAeFw0yNTExMDUwMjQ3MjJaFw0yNTExMDYwMzIyMjJaMDMxMTAvBgNV BAMTKDE5MDZCNTRCRjQ4MUZCNkEyNDNBOUY2NThFQjY2MzY5NTBBNkFFN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjChjH1a+LhSAAAof0N6sh5Is1 yz0T3+2iT+kiojSKHMgcKmm2frItj+t6xoJHutwrz+shTMIh6i57Rv6rnHZBBtBn 8YLAcPu75HaENcYEAZ+9bcyLCvWTDwnx4tLjPWAqsgIaD2zb38YQVFdvAnzgCU+O aGB/yiAZTrcEHJQAagKo5Pmqch9vEMsWUo96S/h2WOOCEJKlStjkElUCal1JcvLv TYLYLt1fdeqeTdJ2j252cxkGA0dgAFljeW7IqrlabYenakABPluctgJdx70Fhujs cV58Q3vnwn0YzWTvkcSwi/k1y/r3sdQ1XZFn+Yw6GZEIguBFXsko5joj7wIDAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUGQa1S/SB+2okOp9ljrZjaVCmrnwwHwYDVR0j BBgwFoAURehkjkRdzNDY7mmfUUC7gU5DrhswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTMzYjJmZDctMzFjMS00NTFjLTgyODgtYzFhYTBhYTEy NzUwLzAvNDVFODY0OEU0NDVEQ0NEMEQ4RUU2OTlGNTE0MEJCODE0RTQzQUUxQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JlaGtqa1Jkek5EWTdtbWZVVUM3Z1U1 RHJocy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85MzNiMmZkNy0z MWMxLTQ1MWMtODI4OC1jMWFhMGFhMTI3NTAvMC80NUU4NjQ4RTQ0NURDQ0QwRDhF RTY5OUY1MTQwQkI4MTRFNDNBRTFCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC9vw9lvEmDEf3RNRSMQb 7GRDqS6PFyfSVfn8Wn87IVQLCQQCqP4K6ZkqOGPCpBmdIMJbAUQv8X90dNawXoTA DiWVUqYM2FbThpP2cbcxwaRgSStC1bGMuzaqas+6sMsIhjs3aSFNT5wtV0kACqJD xzGjPydH47m913tDjdWiUm+kwY8NkbzHZI3B3hMMYWyVrOjn8SGny4QhuJ5ilran V+dobRWoedeF7RaIfLCtrBnNaheCoTbMwUjOG8dn/HlL8NZlfN+/HH6bY4OcYwWR lGwk3wbsW1edJAxFzqJ2nWRYCeWN6SiilwoqLk/+1O62sOcy4GwiTzDsJGtBQTgZ CQ== -----END CERTIFICATE-----Generated at Wed Nov 5 05:07:30 2025 by rpki-client