$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft File: 45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft (raw, json) Hash identifier: SNiiu1UWuPzd8/pJdAdEmd1lTLSLNAH6IzQFCIft6LM= Subject key identifier: 7C:D3:49:8F:3D:80:4F:D8:82:EB:B1:97:E4:1E:F2:5C:67:0A:A1:25 Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b Certificate serial: 3D6E81668FD6D4336D5343A39A2C4DCB8E8150DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft Manifest number: 015C Signing time: Wed 05 Nov 2025 07:33:14 +0000 Manifest this update: Wed 05 Nov 2025 07:28:14 +0000 Manifest next update: Thu 06 Nov 2025 10:59:14 +0000 Files and hashes: 1: 3138352e33392e3138302e302f32342d3234203d3e203438353932.roa (hash: eRfFsAmiOd7fmXSkLY1iDQqDLPihvnF73pAdlTyZEec=) 2: 37372e38312e38302e302f32332d3233203d3e203230383630.roa (hash: ENs1tyjr+QsCNkYiVs8CGb16BSmudiUVAdhDAu4V/ek=) 3: 37372e38312e37392e302f32342d3234203d3e2037303138.roa (hash: Mtmk/kZphhA5s4uopguvEbJvjOjUXgfeStc99+50/4U=) 4: 3138352e33392e3138312e302f32342d3234203d3e203438353932.roa (hash: Vuif+1Rwal2KWngsbR1gG7PlppvF8JCFTHMdlSgwTho=) 5: 3139342e32362e32302e302f32342d3234203d3e20323132323338.roa (hash: YP/VU7Ddy/RINA1ejeDsmhFrZUIqFHueTf4iQvV7+Jw=) 6: 37372e38312e37382e302f32342d3234203d3e203438353932.roa (hash: sxtXA2eVprRgAPdjB6IZUpHTWxye7ZI2nEVGAB55zbo=) 7: 3132382e36352e3136342e302f32322d3232203d3e2033333230.roa (hash: jUzg8MFBi50HDoiq8ZBSiLc/BkEY3Sqp4qzgmYg5v/k=) 8: 3132382e36352e3136302e302f32322d3232203d3e203438353932.roa (hash: e2sDKCcJlT/U2mWShGzkoM6fLVC3axyQA7582KFjXl0=) 9: 3139342e32362e32312e302f32342d3234203d3e2037303138.roa (hash: 7yEbo3DradWn9p6FL6O0sR90rL76BXVbRvfqqu/D+3E=) 10: 3139342e32362e332e302f32342d3234203d3e20343031313930.roa (hash: LIKAmocMMAfJYEkBfDTJGvC18ZVuFHLl0Op0JOVO1hY=) 11: 37372e38312e38322e302f32342d3234203d3e203438353932.roa (hash: g9+qPCIMbMsxLbmabycfUHp6SrIAw5buxV/5VJi8ArY=) 12: 3139332e3234362e3136342e302f32342d3234203d3e20313335333931.roa (hash: JL/dBZtc7cqNfBqDUBsHO8zmA5iOWu/V8229oSGf3qQ=) 13: 3139332e3234362e3136352e302f32342d3234203d3e20323136313539.roa (hash: 6btW8oVMBrDCtZqv+Luv6y7+nYwucV6SF0bhOqSqdro=) 14: 3139342e32362e32312e302f32342d3234203d3e20343031383338.roa (hash: W6OrrdK1OeSj0zhiikePRhbHjS9VOD7qyg5G4TQyO4k=) 15: 3138382e3231342e3233322e302f32332d3233203d3e2035303635.roa (hash: BFuLnnyWuJctlm6cMRTXIHiK+UW5qbLi6zguqt9+aRs=) 16: 3138352e33392e3138332e302f32342d3234203d3e203438353932.roa (hash: 1itaUJD6MM9qJoykl2AD3Me7plWTAUPMb45hv4KS1Is=) 17: 3139342e32362e322e302f32342d3234203d3e2037303138.roa (hash: KZ2g79XWhSpy1OjdBEbA7bKBiIPr4KF5cEbdhi1cO+c=) 18: 45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl (hash: 0zc5oTHxy7F1taohu878hGfcb4l7tUi7qdC9LnVrqWY=) 19: 37372e38312e37362e302f32342d3234203d3e203438353932.roa (hash: AeGgNi4bw9l3zN1DkQ6g095MQ+7U7OthIn51Fzss3Oc=) 20: 3139332e3234362e3136352e302f32342d3234203d3e20323135373237.roa (hash: lSm6X66gNWDs/TTuCVneNTdg6ziFYnxT4m3l/GUHEaA=) 21: 3138352e33392e3138322e302f32342d3234203d3e203438353932.roa (hash: ZRiHbt3iKKs0O/K+Xj70IALSK3+jGBgHEkJ3Uk6rxC8=) 22: 3132382e36352e3136382e302f32312d3234203d3e2036303739.roa (hash: i6JhDTo2qgsHKnhvdAD8kBBVl6YUcjppNLTK7aRFku0=) 23: 37372e38312e37372e302f32342d3234203d3e203438323636.roa (hash: J/r1ohjqm58lYGf0PKhjS1FTmSVJSsFJuiHDfyKNQLE=) 24: 39312e3230392e3137392e302f32342d3234203d3e203136323736.roa (hash: 29p+IQjE0X+w+9GfW3lBtkzy5qmkEsdg0O7SGsHy+z8=) 25: 3139332e3234362e3136352e302f32342d3234203d3e20323132383135.roa (hash: v4ysGluIX7l1o3oYHo6hoD+oU+wMieIX0KtE9SekExI=) 26: 37372e38312e37392e302f32342d3234203d3e20343031383338.roa (hash: jqhfslJN0nyOj/30XxhLZVefzpoYoh0e1/irmr4G57s=) 27: 37372e38312e38332e302f32342d3234203d3e203438353932.roa (hash: FUbnkxuvcKLpw8C4HQaABzR8zDln4ay05cwGyEgtqLs=) 28: 3139332e3234362e3136352e302f32342d3234203d3e2035353131.roa (hash: dGzL7JETjjIym98dnO672H+l9ARVq+lFYDpH7EjSgtE=) 29: 3139342e32362e322e302f32342d3234203d3e20343031383338.roa (hash: hww+5Hf4jmFo7Au813kPo2lBtFDkf7ALOlVDrCFDow8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 03:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:6e:81:66:8f:d6:d4:33:6d:53:43:a3:9a:2c:4d:cb:8e:81:50:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b Validity Not Before: Nov 5 07:28:14 2025 GMT Not After : Nov 6 10:59:14 2025 GMT Subject: CN=7CD3498F3D804FD882EBB197E41EF25C670AA125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0f:af:be:fb:29:83:be:d9:f6:17:69:a9:ba: 28:19:79:51:40:98:78:77:e7:5a:fd:85:13:6d:d7: a3:1d:76:cd:bf:d6:be:15:a5:8a:2f:0c:2a:d1:6b: 05:09:35:8e:6a:72:5e:cc:1d:cc:81:46:be:a2:55: 02:9c:f2:fc:ec:c7:bc:1a:28:e2:d6:96:0f:93:ab: 6a:f4:66:9e:7b:12:f5:83:e9:b4:45:07:be:7e:97: 15:2d:92:04:eb:3c:2d:e0:2d:95:f4:11:92:b6:9b: 18:61:d9:d4:ae:e1:a3:e2:4c:df:37:31:1d:5d:b0: f8:89:b4:81:69:86:71:d9:7c:1d:56:16:ff:6c:01: a6:c3:7d:4d:cc:66:14:f6:38:61:17:0c:32:24:a9: 2f:90:66:29:b6:01:f4:e2:6a:b2:bb:b9:49:02:71: b4:2f:2a:94:c6:be:77:1f:00:f1:f9:bd:f6:33:bb: 02:12:3a:6e:48:e4:7f:6d:5f:c6:77:8d:9a:e8:ca: c2:3e:7e:0c:12:0f:be:b0:31:7e:64:11:a4:a9:96: 0c:85:86:6d:4f:5b:58:67:d3:4f:95:06:d2:22:26: f7:7b:87:1f:b8:dd:93:7e:cb:3f:e1:ce:16:2a:30: dd:66:09:99:bc:00:76:fc:6f:c9:8f:67:69:1c:13: 3f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:D3:49:8F:3D:80:4F:D8:82:EB:B1:97:E4:1E:F2:5C:67:0A:A1:25 X509v3 Authority Key Identifier: keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:e1:61:0c:b9:7e:1b:5a:f7:69:22:4f:2b:f5:20:95:5d:99: 68:bf:20:97:3e:7c:a2:89:a9:0b:7a:95:83:91:6f:2e:32:83: dc:cf:e2:29:8d:29:f6:7d:e5:6a:91:58:75:6e:88:fb:2e:a9: 6f:61:2e:69:83:26:d0:ac:2f:f9:26:ab:12:2a:57:70:55:12: 28:a7:0d:dd:16:32:35:4f:0a:31:09:9f:10:70:08:d7:99:9a: 20:11:6f:fb:49:12:33:5b:19:69:a8:72:4f:40:1e:d8:e0:a3: a7:42:a4:6a:7e:8c:e0:93:32:a2:e7:cf:7e:2d:ff:51:5a:07: 04:09:cb:00:f3:68:b3:76:a3:3a:47:9e:81:65:ee:30:2d:1d: 51:5d:c2:57:99:96:c3:6b:45:86:74:87:26:8d:93:2a:46:63: 18:f1:6e:6d:9d:ca:23:05:e5:1b:54:fe:df:f2:30:51:87:66: 82:01:79:a6:b8:63:57:a1:ae:b8:b6:06:eb:f9:df:5f:39:23: cc:8e:19:ba:e0:8d:ba:3c:78:18:64:06:86:3b:2f:79:42:83: 2c:92:1e:a8:1f:c1:2c:21:1e:60:1d:b5:04:3b:3f:44:3d:76: 67:89:61:89:15:ef:ac:b9:01:42:2d:e4:45:e2:85:2f:1b:f0: bb:8d:04:49 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUPW6BZo/W1DNtU0OjmixNy46BUNowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVlODY0OGU0NDVkY2NkMGQ4ZWU2OTlmNTE0MGJiODE0 ZTQzYWUxYjAeFw0yNTExMDUwNzI4MTRaFw0yNTExMDYxMDU5MTRaMDMxMTAvBgNV BAMTKDdDRDM0OThGM0Q4MDRGRDg4MkVCQjE5N0U0MUVGMjVDNjcwQUExMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdD6+++ymDvtn2F2mpuigZeVFA mHh351r9hRNt16Mdds2/1r4VpYovDCrRawUJNY5qcl7MHcyBRr6iVQKc8vzsx7wa KOLWlg+Tq2r0Zp57EvWD6bRFB75+lxUtkgTrPC3gLZX0EZK2mxhh2dSu4aPiTN83 MR1dsPiJtIFphnHZfB1WFv9sAabDfU3MZhT2OGEXDDIkqS+QZim2AfTiarK7uUkC cbQvKpTGvncfAPH5vfYzuwISOm5I5H9tX8Z3jZroysI+fgwSD76wMX5kEaSplgyF hm1PW1hn00+VBtIiJvd7hx+43ZN+yz/hzhYqMN1mCZm8AHb8b8mPZ2kcEz8tAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUfNNJjz2AT9iC67GX5B7yXGcKoSUwHwYDVR0j BBgwFoAURehkjkRdzNDY7mmfUUC7gU5DrhswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTMzYjJmZDctMzFjMS00NTFjLTgyODgtYzFhYTBhYTEy NzUwLzAvNDVFODY0OEU0NDVEQ0NEMEQ4RUU2OTlGNTE0MEJCODE0RTQzQUUxQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JlaGtqa1Jkek5EWTdtbWZVVUM3Z1U1 RHJocy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85MzNiMmZkNy0z MWMxLTQ1MWMtODI4OC1jMWFhMGFhMTI3NTAvMC80NUU4NjQ4RTQ0NURDQ0QwRDhF RTY5OUY1MTQwQkI4MTRFNDNBRTFCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHeFhDLl+G1r3aSJPK/Ug lV2ZaL8glz58oompC3qVg5FvLjKD3M/iKY0p9n3lapFYdW6I+y6pb2EuaYMm0Kwv +SarEipXcFUSKKcN3RYyNU8KMQmfEHAI15maIBFv+0kSM1sZaahyT0Ae2OCjp0Kk an6M4JMyoufPfi3/UVoHBAnLAPNos3ajOkeegWXuMC0dUV3CV5mWw2tFhnSHJo2T KkZjGPFubZ3KIwXlG1T+3/IwUYdmggF5prhjV6GuuLYG6/nfXzkjzI4ZuuCNujx4 GGQGhjsveUKDLJIeqB/BLCEeYB21BDs/RD12Z4lhiRXvrLkBQi3kReKFLxvwu40E SQ== -----END CERTIFICATE-----Generated at Wed Nov 5 09:32:21 2025 by rpki-client