$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft File: 45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft (raw, json) Hash identifier: PZNxfTtilN1t1y0DsYWsleilgET2s61ilOIEk+ShTH0= Subject key identifier: B6:D4:4A:49:B5:99:6B:2B:56:BE:D7:32:4A:AD:31:02:18:5B:F5:27 Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b Certificate serial: 5BDE09089242654C09E68CE80F800279CE4AD061 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft Manifest number: 91 Signing time: Mon 16 Jun 2025 01:43:00 +0000 Manifest this update: Mon 16 Jun 2025 01:38:00 +0000 Manifest next update: Tue 17 Jun 2025 05:30:00 +0000 Files and hashes: 1: 37372e38312e37362e302f32342d3234203d3e203438353932.roa (hash: AeGgNi4bw9l3zN1DkQ6g095MQ+7U7OthIn51Fzss3Oc=) 2: 3139342e32362e322e302f32342d3234203d3e2037303138.roa (hash: KZ2g79XWhSpy1OjdBEbA7bKBiIPr4KF5cEbdhi1cO+c=) 3: 45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl (hash: jyOqvE7HkVgZHZbhElOiuoinxlq2bUayXroCvsJ8HM8=) 4: 3138352e33392e3138312e302f32342d3234203d3e203438353932.roa (hash: Vuif+1Rwal2KWngsbR1gG7PlppvF8JCFTHMdlSgwTho=) 5: 3139342e32362e332e302f32342d3234203d3e203236373337.roa (hash: vAloYgRmheNvh8P1qphoutsfkKJ8NLcb3vYOmiEsQYI=) 6: 3139342e32362e32302e302f32342d3234203d3e20323130373332.roa (hash: tT1wyhQtNYuEkQ+eyJ48jXUB9g2vmRFlZCizzCPBgqg=) 7: 3138352e33392e3138302e302f32342d3234203d3e203438353932.roa (hash: eRfFsAmiOd7fmXSkLY1iDQqDLPihvnF73pAdlTyZEec=) 8: 3138382e3231342e3233322e302f32332d3233203d3e2035303635.roa (hash: BFuLnnyWuJctlm6cMRTXIHiK+UW5qbLi6zguqt9+aRs=) 9: 3132382e36352e3136302e302f32322d3232203d3e203438353932.roa (hash: e2sDKCcJlT/U2mWShGzkoM6fLVC3axyQA7582KFjXl0=) 10: 37372e38312e37372e302f32342d3234203d3e20313337353137.roa (hash: mnQJW4GBjGEsRXTh3Y2cxT8Pj8O29OUkMaI68Qj1ywg=) 11: 3132382e36352e3136342e302f32322d3232203d3e2033333230.roa (hash: jUzg8MFBi50HDoiq8ZBSiLc/BkEY3Sqp4qzgmYg5v/k=) 12: 39312e3230392e3137392e302f32342d3234203d3e2039323332.roa (hash: DUgBG+DDM8ST08Z0XIhaDsSEtBOUn3VXDgiNBjQq7a4=) 13: 37372e38312e38302e302f32332d3233203d3e203230343733.roa (hash: PUzP/p5Okr3bvZ4WF8kcm0JJSJ70QPVxP+cQ0aO0FQg=) 14: 3139342e32362e32312e302f32342d3234203d3e2037303138.roa (hash: 7yEbo3DradWn9p6FL6O0sR90rL76BXVbRvfqqu/D+3E=) 15: 37372e38312e37382e302f32342d3234203d3e203438353932.roa (hash: sxtXA2eVprRgAPdjB6IZUpHTWxye7ZI2nEVGAB55zbo=) 16: 3132382e36352e3136382e302f32312d3234203d3e2036303739.roa (hash: i6JhDTo2qgsHKnhvdAD8kBBVl6YUcjppNLTK7aRFku0=) 17: 37372e38312e38332e302f32342d3234203d3e203438353932.roa (hash: FUbnkxuvcKLpw8C4HQaABzR8zDln4ay05cwGyEgtqLs=) 18: 37372e38312e38322e302f32342d3234203d3e203438353932.roa (hash: g9+qPCIMbMsxLbmabycfUHp6SrIAw5buxV/5VJi8ArY=) 19: 37372e38312e37392e302f32342d3234203d3e2037303138.roa (hash: Mtmk/kZphhA5s4uopguvEbJvjOjUXgfeStc99+50/4U=) 20: 3138352e33392e3138332e302f32342d3234203d3e203438353932.roa (hash: 1itaUJD6MM9qJoykl2AD3Me7plWTAUPMb45hv4KS1Is=) 21: 3138352e33392e3138322e302f32342d3234203d3e203438353932.roa (hash: ZRiHbt3iKKs0O/K+Xj70IALSK3+jGBgHEkJ3Uk6rxC8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 17 Jun 2025 05:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:de:09:08:92:42:65:4c:09:e6:8c:e8:0f:80:02:79:ce:4a:d0:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b Validity Not Before: Jun 16 01:38:00 2025 GMT Not After : Jun 17 05:30:00 2025 GMT Subject: CN=B6D44A49B5996B2B56BED7324AAD3102185BF527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:20:23:79:67:e4:fc:70:8f:39:0c:55:64:f8: 81:9f:dc:2c:af:fa:c5:c1:a7:ad:d6:a4:63:fe:ae: 65:3f:ea:ff:11:cc:06:99:eb:12:57:75:e8:3b:26: d0:7e:c7:8e:b5:13:cc:eb:be:58:76:be:df:66:b4: 4a:c9:f0:65:c1:96:47:4f:a9:9c:8c:4a:f3:e8:a0: 32:9e:48:6b:4f:5e:5a:35:f2:4d:53:52:61:a9:6b: 3a:96:8d:cf:e7:09:62:ee:d7:86:c4:a0:db:8c:5e: ad:e6:ad:45:5b:a5:1d:35:37:db:04:b9:8a:52:1a: 9f:3f:3c:8d:76:5d:0a:9f:85:a5:66:12:6d:6a:0a: ea:0f:c9:df:7b:2a:64:7c:fa:60:dd:90:1a:79:2a: cd:71:c5:4c:a7:40:79:e7:4c:78:0c:c8:cf:7f:f5: 0d:2a:bc:cb:f8:69:6c:04:6d:a9:ad:8a:b7:ef:59: 93:e1:38:0b:fd:b0:7f:96:45:0b:70:bf:7a:ac:42: 50:17:05:5a:3a:73:c0:fb:0e:ff:fe:27:e9:9e:33: 3b:9f:36:6b:46:36:52:ce:54:03:90:21:2d:dd:cd: 12:c5:71:95:43:66:71:fa:65:82:9f:79:1c:01:a2: fb:8b:30:22:e4:23:a3:a9:fa:a1:7a:6d:d9:3e:66: de:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:D4:4A:49:B5:99:6B:2B:56:BE:D7:32:4A:AD:31:02:18:5B:F5:27 X509v3 Authority Key Identifier: keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:38:05:b9:e7:6f:6c:e8:59:8b:6a:cc:d9:1e:54:5c:ee:e3: aa:dd:03:1e:8e:de:f5:93:f2:b4:25:dc:f3:63:f4:26:6a:94: e7:e7:88:89:52:2d:82:1d:b5:f0:74:45:8f:61:d6:d2:e9:a0: 08:c6:61:0d:32:4d:3b:59:94:17:a2:f2:01:b2:22:c3:b2:98: 83:ee:23:49:96:e5:36:b1:be:db:3a:c9:22:62:fc:29:ae:a8: d4:27:11:f3:d1:45:ab:bf:b7:83:0e:68:b5:49:6c:97:ea:ec: 0e:97:c7:2f:bb:ec:0a:a9:57:77:ba:30:ba:65:2e:b4:a4:9e: 9d:a3:1f:40:fc:67:d0:aa:f4:44:75:9d:17:66:75:6a:01:8b: f7:e6:aa:db:77:a4:cf:00:e0:fa:da:be:39:44:20:3e:53:38: 8b:66:1a:61:43:fb:ba:56:82:08:eb:4f:59:4c:fc:8b:d2:fc: 84:07:d2:85:17:31:6f:21:b3:1d:02:bf:32:5b:84:78:0c:5f: 0d:0d:b2:10:f1:76:98:7c:ee:58:74:dd:b7:22:78:f6:7f:9b: 28:2c:87:c7:b9:6a:a9:f6:b4:5b:f1:6f:a0:97:90:ee:49:0f: e4:d2:48:bc:9d:93:07:38:79:7f:d0:ed:bb:1b:3b:6e:c2:1d: 05:c0:67:f6 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUW94JCJJCZUwJ5ozoD4ACec5K0GEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVlODY0OGU0NDVkY2NkMGQ4ZWU2OTlmNTE0MGJiODE0 ZTQzYWUxYjAeFw0yNTA2MTYwMTM4MDBaFw0yNTA2MTcwNTMwMDBaMDMxMTAvBgNV BAMTKEI2RDQ0QTQ5QjU5OTZCMkI1NkJFRDczMjRBQUQzMTAyMTg1QkY1MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDICN5Z+T8cI85DFVk+IGf3Cyv +sXBp63WpGP+rmU/6v8RzAaZ6xJXdeg7JtB+x461E8zrvlh2vt9mtErJ8GXBlkdP qZyMSvPooDKeSGtPXlo18k1TUmGpazqWjc/nCWLu14bEoNuMXq3mrUVbpR01N9sE uYpSGp8/PI12XQqfhaVmEm1qCuoPyd97KmR8+mDdkBp5Ks1xxUynQHnnTHgMyM9/ 9Q0qvMv4aWwEbamtirfvWZPhOAv9sH+WRQtwv3qsQlAXBVo6c8D7Dv/+J+meMzuf NmtGNlLOVAOQIS3dzRLFcZVDZnH6ZYKfeRwBovuLMCLkI6Op+qF6bdk+Zt7HAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUttRKSbWZaytWvtcySq0xAhhb9ScwHwYDVR0j BBgwFoAURehkjkRdzNDY7mmfUUC7gU5DrhswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTMzYjJmZDctMzFjMS00NTFjLTgyODgtYzFhYTBhYTEy NzUwLzAvNDVFODY0OEU0NDVEQ0NEMEQ4RUU2OTlGNTE0MEJCODE0RTQzQUUxQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JlaGtqa1Jkek5EWTdtbWZVVUM3Z1U1 RHJocy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85MzNiMmZkNy0z MWMxLTQ1MWMtODI4OC1jMWFhMGFhMTI3NTAvMC80NUU4NjQ4RTQ0NURDQ0QwRDhF RTY5OUY1MTQwQkI4MTRFNDNBRTFCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZDgFuedvbOhZi2rM2R5U XO7jqt0DHo7e9ZPytCXc82P0JmqU5+eIiVItgh218HRFj2HW0umgCMZhDTJNO1mU F6LyAbIiw7KYg+4jSZblNrG+2zrJImL8Ka6o1CcR89FFq7+3gw5otUlsl+rsDpfH L7vsCqlXd7owumUutKSenaMfQPxn0Kr0RHWdF2Z1agGL9+aq23ekzwDg+tq+OUQg PlM4i2YaYUP7ulaCCOtPWUz8i9L8hAfShRcxbyGzHQK/MluEeAxfDQ2yEPF2mHzu WHTdtyJ49n+bKCyHx7lqqfa0W/FvoJeQ7kkP5NJIvJ2TBzh5f9Dtuxs7bsIdBcBn 9g== -----END CERTIFICATE-----Generated at Mon Jun 16 14:43:52 2025 by rpki-client