$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft File: 45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft (raw, json) Hash identifier: bN3GyULQ/u9YeBZPAMWrVg82drhKIeGPJ2undqP3qGI= Subject key identifier: C4:64:69:3F:A6:76:49:1D:62:80:70:EF:17:E4:8E:E4:17:9F:A3:95 Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b Certificate serial: 2F51FEEF0EFC6F1E3565033D073A6B9C29D19AB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft Manifest number: 48 Signing time: Sat 26 Apr 2025 01:49:57 +0000 Manifest this update: Sat 26 Apr 2025 01:44:57 +0000 Manifest next update: Sun 27 Apr 2025 05:43:57 +0000 Files and hashes: 1: 39312e3230392e3137392e302f32342d3234203d3e2039323332.roa (hash: DUgBG+DDM8ST08Z0XIhaDsSEtBOUn3VXDgiNBjQq7a4=) 2: 3139342e32362e332e302f32342d3234203d3e203236373337.roa (hash: vAloYgRmheNvh8P1qphoutsfkKJ8NLcb3vYOmiEsQYI=) 3: 37372e38312e37372e302f32342d3234203d3e20313337353137.roa (hash: mnQJW4GBjGEsRXTh3Y2cxT8Pj8O29OUkMaI68Qj1ywg=) 4: 45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl (hash: KDtZdGoc8/qkG9e2WeeTxLgBFr3w8WMZZxB9VEb7MGE=) 5: 3138352e33392e3138322e302f32342d3234203d3e203438353932.roa (hash: ZRiHbt3iKKs0O/K+Xj70IALSK3+jGBgHEkJ3Uk6rxC8=) 6: 37372e38312e38322e302f32342d3234203d3e203438353932.roa (hash: g9+qPCIMbMsxLbmabycfUHp6SrIAw5buxV/5VJi8ArY=) 7: 3139342e32362e32312e302f32342d3234203d3e2037303138.roa (hash: 7yEbo3DradWn9p6FL6O0sR90rL76BXVbRvfqqu/D+3E=) 8: 3138382e3231342e3233322e302f32332d3233203d3e2035303635.roa (hash: BFuLnnyWuJctlm6cMRTXIHiK+UW5qbLi6zguqt9+aRs=) 9: 3138352e33392e3138332e302f32342d3234203d3e203438353932.roa (hash: 1itaUJD6MM9qJoykl2AD3Me7plWTAUPMb45hv4KS1Is=) 10: 37372e38312e37362e302f32342d3234203d3e203438353932.roa (hash: AeGgNi4bw9l3zN1DkQ6g095MQ+7U7OthIn51Fzss3Oc=) 11: 3138352e33392e3138312e302f32342d3234203d3e203438353932.roa (hash: Vuif+1Rwal2KWngsbR1gG7PlppvF8JCFTHMdlSgwTho=) 12: 37372e38312e38332e302f32342d3234203d3e203438353932.roa (hash: FUbnkxuvcKLpw8C4HQaABzR8zDln4ay05cwGyEgtqLs=) 13: 3138352e33392e3138302e302f32342d3234203d3e203438353932.roa (hash: eRfFsAmiOd7fmXSkLY1iDQqDLPihvnF73pAdlTyZEec=) 14: 37372e38312e37382e302f32342d3234203d3e203438353932.roa (hash: sxtXA2eVprRgAPdjB6IZUpHTWxye7ZI2nEVGAB55zbo=) 15: 3132382e36352e3136342e302f32322d3232203d3e2033333230.roa (hash: jUzg8MFBi50HDoiq8ZBSiLc/BkEY3Sqp4qzgmYg5v/k=) 16: 37372e38312e38302e302f32332d3233203d3e20383334.roa (hash: 8VRwgNXvFUdu3kfmO50807gw1BniQhmC877LSnpGZWg=) 17: 3139342e32362e32302e302f32342d3234203d3e20323130373332.roa (hash: tT1wyhQtNYuEkQ+eyJ48jXUB9g2vmRFlZCizzCPBgqg=) 18: 3139342e32362e322e302f32342d3234203d3e2037303138.roa (hash: KZ2g79XWhSpy1OjdBEbA7bKBiIPr4KF5cEbdhi1cO+c=) 19: 37372e38312e37392e302f32342d3234203d3e2037303138.roa (hash: Mtmk/kZphhA5s4uopguvEbJvjOjUXgfeStc99+50/4U=) 20: 3132382e36352e3136302e302f32322d3232203d3e203438353932.roa (hash: e2sDKCcJlT/U2mWShGzkoM6fLVC3axyQA7582KFjXl0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 05:43:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:51:fe:ef:0e:fc:6f:1e:35:65:03:3d:07:3a:6b:9c:29:d1:9a:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b Validity Not Before: Apr 26 01:44:57 2025 GMT Not After : Apr 27 05:43:57 2025 GMT Subject: CN=C464693FA676491D628070EF17E48EE4179FA395 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:96:e2:27:01:e7:c3:6b:9f:a2:91:aa:a6:09: c5:48:78:ff:61:03:42:d6:2d:35:bc:cc:e0:12:b9: db:8d:3f:83:18:50:96:ec:e6:ea:97:a9:f0:57:e8: fc:1b:42:ec:f4:d4:70:1c:55:98:e3:21:c7:2c:94: 0d:f5:d0:8d:2c:8c:59:53:60:28:0a:f5:9a:26:09: 9e:e2:94:ba:e7:f3:14:11:5b:10:f7:dd:1b:f6:b9: a3:ed:42:4b:91:a1:82:48:3b:e7:ae:ea:49:b1:03: 89:cf:5d:be:ce:82:15:62:9f:83:b5:97:c0:be:19: 00:57:73:52:a2:1c:7d:d8:29:d6:49:20:3c:1e:39: 91:c2:64:9c:b6:96:4e:84:79:01:ef:43:14:21:a7: d9:15:ed:33:83:90:e9:51:2e:e8:b0:d0:31:7e:76: 64:d7:ac:72:d5:17:9d:20:bc:9b:77:7c:9b:cb:bc: 73:f2:e8:33:71:49:0e:a2:0c:f7:30:da:f8:25:25: c2:2a:9b:e4:c7:e6:3c:85:62:b7:74:10:7b:a1:ff: df:83:eb:72:1b:ce:15:47:67:fe:9b:f4:08:a0:f3: 48:3b:f0:7c:b2:e1:13:21:36:80:2c:3e:db:62:0b: 2d:f1:ba:97:41:9e:0b:e0:57:76:4c:50:6e:f7:50: c6:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:64:69:3F:A6:76:49:1D:62:80:70:EF:17:E4:8E:E4:17:9F:A3:95 X509v3 Authority Key Identifier: keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:ce:e7:56:84:94:52:92:b2:c0:53:c9:9d:77:e3:b8:1b:a2: 8f:4b:a1:69:d2:44:61:d1:c0:ea:4d:30:db:fb:19:56:57:f8: 2b:25:d7:fa:13:8c:51:23:8d:27:05:c1:90:d5:41:7e:d3:2a: fb:ac:ea:1e:fb:e0:11:17:44:7c:09:5a:38:3f:5b:ca:f2:03: 32:a5:fe:de:3e:06:f4:a8:84:a4:3d:18:bf:61:c0:d0:f8:0d: ae:b1:20:50:bb:e1:1e:56:f4:3e:84:37:f4:f2:ce:e5:66:a9: 23:40:39:c5:15:38:9e:fd:6d:3e:e5:a8:3c:60:bc:ba:c7:01: ca:9a:83:20:6b:92:84:67:9b:c5:4c:c9:c4:8e:2d:62:bb:f2: 10:c6:38:1b:94:fc:14:bf:78:fc:07:b0:63:f1:dd:1a:c8:f7: 79:e2:6e:06:73:e6:72:11:11:4b:85:20:3b:e7:db:cb:26:a1: cc:70:0a:a4:e2:bb:3d:50:a7:02:de:99:66:76:2f:34:db:89: fa:2f:9a:cd:fd:8a:9f:45:87:d5:7e:4f:02:ca:c7:74:05:18: 16:9b:b6:51:91:d1:f9:69:f3:f8:6c:f6:ed:d2:35:dd:72:4d: cf:88:64:a6:35:c1:8a:f4:2d:a7:d2:91:1e:4a:13:74:94:48: b6:9c:39:09 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUL1H+7w78bx41ZQM9BzprnCnRmrQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVlODY0OGU0NDVkY2NkMGQ4ZWU2OTlmNTE0MGJiODE0 ZTQzYWUxYjAeFw0yNTA0MjYwMTQ0NTdaFw0yNTA0MjcwNTQzNTdaMDMxMTAvBgNV BAMTKEM0NjQ2OTNGQTY3NjQ5MUQ2MjgwNzBFRjE3RTQ4RUU0MTc5RkEzOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2luInAefDa5+ikaqmCcVIeP9h A0LWLTW8zOASuduNP4MYUJbs5uqXqfBX6PwbQuz01HAcVZjjIccslA310I0sjFlT YCgK9ZomCZ7ilLrn8xQRWxD33Rv2uaPtQkuRoYJIO+eu6kmxA4nPXb7OghVin4O1 l8C+GQBXc1KiHH3YKdZJIDweOZHCZJy2lk6EeQHvQxQhp9kV7TODkOlRLuiw0DF+ dmTXrHLVF50gvJt3fJvLvHPy6DNxSQ6iDPcw2vglJcIqm+TH5jyFYrd0EHuh/9+D 63IbzhVHZ/6b9Aig80g78Hyy4RMhNoAsPttiCy3xupdBngvgV3ZMUG73UMYJAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUxGRpP6Z2SR1igHDvF+SO5Befo5UwHwYDVR0j BBgwFoAURehkjkRdzNDY7mmfUUC7gU5DrhswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTMzYjJmZDctMzFjMS00NTFjLTgyODgtYzFhYTBhYTEy NzUwLzAvNDVFODY0OEU0NDVEQ0NEMEQ4RUU2OTlGNTE0MEJCODE0RTQzQUUxQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JlaGtqa1Jkek5EWTdtbWZVVUM3Z1U1 RHJocy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85MzNiMmZkNy0z MWMxLTQ1MWMtODI4OC1jMWFhMGFhMTI3NTAvMC80NUU4NjQ4RTQ0NURDQ0QwRDhF RTY5OUY1MTQwQkI4MTRFNDNBRTFCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE87nVoSUUpKywFPJnXfj uBuij0uhadJEYdHA6k0w2/sZVlf4KyXX+hOMUSONJwXBkNVBftMq+6zqHvvgERdE fAlaOD9byvIDMqX+3j4G9KiEpD0Yv2HA0PgNrrEgULvhHlb0PoQ39PLO5WapI0A5 xRU4nv1tPuWoPGC8uscBypqDIGuShGebxUzJxI4tYrvyEMY4G5T8FL94/AewY/Hd Gsj3eeJuBnPmchERS4UgO+fbyyahzHAKpOK7PVCnAt6ZZnYvNNuJ+i+azf2Kn0WH 1X5PAsrHdAUYFpu2UZHR+Wnz+Gz27dI13XJNz4hkpjXBivQtp9KRHkoTdJRItpw5 CQ== -----END CERTIFICATE-----Generated at Sat Apr 26 17:49:34 2025 by rpki-client