
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
File:                     CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft (raw, json)
Hash identifier:          ORiEu7Nn3abMQz07yASNBLsUjeh2RmE06f/cxKjVZc8=
Subject key identifier:   8D:08:61:AE:00:1E:97:9A:CB:18:10:A5:5F:7E:B8:34:6E:6A:23:D7
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Certificate issuer:       /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial:       5B330A1DCF2B9AAF220EA672D76746D7139031AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
Manifest number:          0592
Signing time:             Mon 03 Nov 2025 22:41:55 +0000
Manifest this update:     Mon 03 Nov 2025 22:36:55 +0000
Manifest next update:     Wed 05 Nov 2025 00:49:55 +0000
Files and hashes:         1: 34352e36362e3134382e302f32342d3234203d3e203631333137.roa (hash: 9x1QRSqxq7oLu3gp885IDU4m85ilCP4ZqtuwIJ3/i80=)
                          2: 34352e36362e3135312e302f32342d3234203d3e20333933393432.roa (hash: WkX/VhOIB2Xh55Xo8/0X7WB7DxjTEctJTPIyu/NmXnQ=)
                          3: 3134362e31392e3231352e302f32342d3234203d3e20323036323136.roa (hash: bpy3XEt/Glb0ctRVcD/5DBdI9ndCLAP4MyfQv0tMcPQ=)
                          4: 34352e382e3137352e302f32342d3234203d3e2037353632.roa (hash: gPOJ5OYy4C3HcRMZFW4SHF49vn1yyv2a5aCn7ZHuj8I=)
                          5: 3134362e31392e3231362e302f32342d3234203d3e20313334363737.roa (hash: r2VWTeXnfDWuim8gDU2ktI3y2NGYwT6ofTi2l1VlIzk=)
                          6: 3133302e3139332e37352e302f32342d3234203d3e20323135373237.roa (hash: 6RpkFGUytBbpPYpiYeQU8RLNy0XHMLVUHEtirH/7vUw=)
                          7: 3137362e3132362e3130352e302f32342d3234203d3e20313432313131.roa (hash: BtY1Y1S506xUDGL3HPYJouh8HE8Bfu5LiAut28ETk7w=)
                          8: 34352e31332e3134392e302f32342d3234203d3e203631333137.roa (hash: Q3PPUlB/JvHRLRIa7IieyrUl/m1wHR8wutqNN0xNel0=)
                          9: 38392e3130372e392e302f32342d3234203d3e20313534303439.roa (hash: W8Nr5Pu7VW6wiorrg4hzFmpLYlb8TxaBJrzhK/IwqPg=)
                          10: 34352e36362e3135302e302f32342d3234203d3e20333937333733.roa (hash: 5DUJVA+pSWGfl0obwZfoWi9lZoQLdECnA4H9VJT+xbw=)
                          11: 3133302e3139332e37352e302f32342d3234203d3e20323136313539.roa (hash: OScz32SKWiRDIr+bw6qduusJprZYMrHU3JDPa1ynUL8=)
                          12: 3134362e31392e35332e302f32342d3234203d3e20313532363732.roa (hash: R9JC3sHytncw5nwNxoiEF3pniUcJV4GyDa9/Vt4/Lgk=)
                          13: 34352e382e3137332e302f32342d3234203d3e20323032363733.roa (hash: 5zwugYWKE+SXj7j9OQLYcPTCHp3CNiw9ZvtoZL3oq9E=)
                          14: 36322e3132322e3138352e302f32342d3234203d3e20333937343233.roa (hash: xE+Kag7RYYIC/6Gdcunr8SGE54x+vaEZMv3MSSvdWDk=)
                          15: 3231332e352e3132382e302f32342d3234203d3e20313939303538.roa (hash: gEy9Oc8qQMzfRi3Vg23eKfgAotPRUQjE79aKVoo7YPw=)
                          16: 3133302e3139332e37352e302f32342d3234203d3e20323132383135.roa (hash: 0KfkzJx6v7WvN2jvvqOfF0fI8+Z91Ctb8PuaEX/6n0M=)
                          17: 3137362e3132362e3130352e302f32342d3234203d3e20313532363732.roa (hash: ds/1M3gFH31reCXMtWJtKut2HrejgsPE/Ioz8CidATY=)
                          18: 36322e332e31382e302f32342d3234203d3e20323136323931.roa (hash: Mv5UcVUln6H+m2ppbCqxuT1Ft1vn2bxsaMxY5fGcRzU=)
                          19: 34352e31332e3134382e302f32332d3233203d3e203632333837.roa (hash: 5EJNV4UhdWOuwnTNcgbmbjrtx0zc2Gwd0NznlniRrK0=)
                          20: 3231322e31382e3131362e302f32342d3234203d3e203139343337.roa (hash: 2oZavsRfA1Q40x9PaOnupB4Ub1RzFaGZLNyIg+RCt6s=)
                          21: 3139332e33352e3232362e302f32342d3234203d3e203536393632.roa (hash: 4UgfT6p/2Q50B5wnsVKN4mv/hFd7RZLIZ15wgnKLY7k=)
                          22: 322e35382e38372e302f32342d3234203d3e203631353936.roa (hash: M45ljxfpitcFdQWEd3Fma8ldSrrzn4db+RAFQgTFz/E=)
                          23: 34352e36362e3134392e302f32342d3234203d3e20323132323338.roa (hash: UYRhWU2YtAQySXQJqSHhc8PkHnSqANYorHfiKIAiPmA=)
                          24: 36322e3132322e3138362e302f32342d3234203d3e203631333137.roa (hash: gCbw4t50he127cuIH8e7X9edy5RGT/dSqPZYrNWwgUg=)
                          25: 322e35382e38342e302f32342d3234203d3e20323136323231.roa (hash: U1S3You+fAZhVhvcdrRdWu8kGCzRG+R0tCv8DlClNys=)
                          26: 34352e382e3137342e302f32342d3234203d3e2037353632.roa (hash: M0Bu6CLDPFxg3KYMEJy4xB3uyzQGHvj9eJ5j3Kf1CaE=)
                          27: 34352e31332e3135312e302f32342d3234203d3e20323135373033.roa (hash: aPdRk0yj6WHAWMnGbb2l+kFCRQlNzfB9p5fiHofDu7s=)
                          28: 3134362e31392e35332e302f32342d3234203d3e20313432313131.roa (hash: 65asAzRxJvDe1YCujUmWbIiKCzT1TU5iNap0EoVkO3Y=)
                          29: 322e35382e38372e302f32342d3234203d3e20323634343039.roa (hash: mkGL2Y74THGESksATgz18aFujAfAh2hZzUMM/zMEgtE=)
                          30: 3138352e3231322e3131332e302f32342d3234203d3e20323032363738.roa (hash: 0I5n2Zxpd6ZVl5qO7efqO/5G3aMiaibcayoOxL2ddNw=)
                          31: 322e35382e38352e302f32342d3234203d3e2039333034.roa (hash: tirW2IpV28pqP9ZeL9zAVzFPWptjwkyUdF/HXTrgIfQ=)
                          32: CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl (hash: rOF69xJYATexoH2Z3Tw95HWIbjXUgvNndbaH4Meqrs0=)
                          33: 36322e332e31382e302f32342d3234203d3e20323136323232.roa (hash: xpvX4DbRPgQDl25Wd7lh+sIK3ZuIxEe17qogwqcSmAY=)
                          34: 34352e382e3137322e302f32342d3234203d3e20323035373333.roa (hash: 1rINDmT9fsbaOlLLqeJ7eTf+zBwneu4N6jBRg+Yc4gc=)
                          35: 322e35382e38362e302f32342d3234203d3e203432383331.roa (hash: Ga9fSUVi9MuY7PSZ+TJisDhWnGoWEZ4TH7+EN9QxZpk=)
                          36: 3133302e3139332e37352e302f32342d3234203d3e20313938383833.roa (hash: X0vCJBzdFH4FS7gRUxhOxAXsLYNsOL4GffJBGoP62Nc=)
                          37: 3231322e32342e3132372e302f32342d3234203d3e203136323736.roa (hash: Rs7w/chVuiM2q/eQlWg7hYcTj07lMXsGjRzGrKCmtq8=)
                          38: 34352e382e3137332e302f32342d3234203d3e20323135303531.roa (hash: KTke8ZWqVLA3ANHJ800vvcDHEpQ20KNFTJcuTxVUvFI=)
                          39: 3231322e31382e3131352e302f32342d3234203d3e20323135323234.roa (hash: 3xKezHtI+fBhKmdU9ku1wV8BXxr20U7aYSfVPGdTqek=)
                          40: 3134362e31392e3231352e302f32342d3234203d3e203432383331.roa (hash: iRYq59bmQokDL09C0IXxdPyvoOhAH6U1C6tDW9/0QSs=)
                          41: 34352e31332e3135302e302f32342d3234203d3e20383334.roa (hash: DnT+O+r+UXgdQCKaWFgGSd5R+pJJ9zd+7mNwa6ONcCw=)
                          42: 3133302e3139332e37352e302f32342d3234203d3e2035353131.roa (hash: /BJwUN9ogW9gUI5fEpq5TqdItx+gr05E4PzR5YVIKUQ=)
                          43: 38332e3133382e35302e302f32342d3234203d3e20333936303236.roa (hash: X0JUgkm7bWAXyQ4SYkYDH/4wFz74Xhku1L5c/GFGAX0=)
                          44: 3138352e3235312e32332e302f32342d3234203d3e20323030303137.roa (hash: 1nHeHr5ez78VSQCwBDXobb8Hijb3cSpgsJnQt2+b4+w=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 00:49:55 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:33:0a:1d:cf:2b:9a:af:22:0e:a6:72:d7:67:46:d7:13:90:31:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
        Validity
            Not Before: Nov  3 22:36:55 2025 GMT
            Not After : Nov  5 00:49:55 2025 GMT
        Subject: CN=8D0861AE001E979ACB1810A55F7EB8346E6A23D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c4:08:ee:6b:3b:84:c0:e8:87:d4:21:5c:34:
                    03:39:9b:9c:dd:14:52:b5:01:9f:6e:fd:b5:c9:d8:
                    ab:ea:cd:80:6b:c8:4a:3d:5d:df:40:e6:61:ee:c4:
                    04:df:99:54:cd:80:3b:27:ae:0c:2a:66:f5:38:5e:
                    e7:b3:f6:00:51:74:63:97:f2:a0:35:32:c2:57:4d:
                    f7:c8:ac:f0:33:e5:a7:58:37:51:ed:4f:4f:24:53:
                    a5:83:f3:7c:2d:a4:87:27:59:f2:c4:1c:be:30:89:
                    ad:67:8e:a3:2c:fd:62:bb:96:73:c0:9c:5d:be:fd:
                    8f:b3:87:36:a5:5e:e6:04:63:30:86:98:94:14:c3:
                    59:8a:dd:e9:b8:11:a2:c8:bb:3c:36:9f:b7:04:64:
                    f5:cd:ae:42:6e:cc:a5:3f:2e:e1:a1:55:47:d7:4a:
                    39:f1:8f:cb:4e:ed:84:17:29:c3:f5:26:10:1c:c7:
                    a8:9e:48:14:a4:71:46:96:21:d6:a1:08:4a:4e:d7:
                    cd:c0:89:fc:db:ae:35:50:ae:41:e1:c2:7d:db:fa:
                    0c:59:ca:bd:54:ec:2b:c8:60:d7:01:e9:e5:b0:33:
                    38:c1:ae:00:e5:f3:f6:a2:43:9c:c8:c6:ed:98:9b:
                    d7:8b:ad:0b:8f:30:a0:50:ce:ec:47:bc:b9:b0:e3:
                    0c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:08:61:AE:00:1E:97:9A:CB:18:10:A5:5F:7E:B8:34:6E:6A:23:D7
            X509v3 Authority Key Identifier:
                keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         68:c1:a6:03:70:a0:14:81:f4:fe:05:8b:93:57:d0:ee:67:2a:
         f1:3e:80:8a:35:8e:d1:57:b8:9c:43:0e:89:ea:dd:16:2a:78:
         4f:e2:f2:e7:93:73:bb:39:ee:cd:5e:8b:9d:8a:ca:b3:15:92:
         5e:2e:d7:0f:62:6b:df:f7:b0:2d:66:4a:c6:75:81:e9:79:4b:
         ca:bf:25:e4:f0:b6:2a:08:72:45:4c:f9:93:98:0f:e1:3d:4d:
         45:db:e6:76:68:ec:49:f1:43:d8:f6:71:b8:8c:51:fe:8f:2a:
         12:c9:90:6f:02:27:2b:ca:02:c1:98:69:60:b7:e0:81:c6:be:
         a5:af:62:48:76:13:15:60:43:c7:17:66:67:60:db:4f:78:5e:
         7f:c5:da:9e:3c:6b:d1:6a:e4:2d:f0:65:17:9b:04:a3:15:c9:
         c9:8e:3d:69:d6:b3:5d:6e:95:c2:bd:20:73:9e:3a:57:b8:4e:
         ab:11:4c:9f:ff:e2:33:2d:22:14:b3:cc:5e:f4:6c:15:eb:0d:
         4e:ac:2f:46:fb:24:c1:47:0f:80:23:c4:5d:12:7e:74:f8:8d:
         13:f9:80:43:8f:20:fb:65:ca:48:5c:3a:1f:07:2a:87:b7:19:
         42:26:7a:f4:35:6a:0e:e0:47:68:fc:01:b6:4a:5b:24:7f:ad:
         44:aa:23:f9
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUWzMKHc8rmq8iDqZy12dG1xOQMa0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoY2VmY2U0NDliZWE4ZGVhZWRiMTgwNGRiYTI1YzU4NGRm
NTg3M2RjNDAeFw0yNTExMDMyMjM2NTVaFw0yNTExMDUwMDQ5NTVaMDMxMTAvBgNV
BAMTKDhEMDg2MUFFMDAxRTk3OUFDQjE4MTBBNTVGN0VCODM0NkU2QTIzRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCxAjuazuEwOiH1CFcNAM5m5zd
FFK1AZ9u/bXJ2KvqzYBryEo9Xd9A5mHuxATfmVTNgDsnrgwqZvU4Xuez9gBRdGOX
8qA1MsJXTffIrPAz5adYN1HtT08kU6WD83wtpIcnWfLEHL4wia1njqMs/WK7lnPA
nF2+/Y+zhzalXuYEYzCGmJQUw1mK3em4EaLIuzw2n7cEZPXNrkJuzKU/LuGhVUfX
Sjnxj8tO7YQXKcP1JhAcx6ieSBSkcUaWIdahCEpO183AifzbrjVQrkHhwn3b+gxZ
yr1U7CvIYNcB6eWwMzjBrgDl8/aiQ5zIxu2Ym9eLrQuPMKBQzuxHvLmw4wwbAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUjQhhrgAel5rLGBClX364NG5qI9cwHwYDVR0j
BBgwFoAUzvzkSb6o3q7bGATbolxYTfWHPcQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDFiMzVmOGItNmY0OC00YmFkLWIxODUtNWMxZGFhOGFj
ZGE5LzAvQ0VGQ0U0NDlCRUE4REVBRURCMTgwNERCQTI1QzU4NERGNTg3M0RDNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p2emtTYjZvM3E3YkdBVGJvbHhZVGZX
SFBjUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kMWIzNWY4Yi02
ZjQ4LTRiYWQtYjE4NS01YzFkYWE4YWNkYTkvMC9DRUZDRTQ0OUJFQThERUFFREIx
ODA0REJBMjVDNTg0REY1ODczREM0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaMGmA3CgFIH0/gWLk1fQ
7mcq8T6AijWO0Ve4nEMOierdFip4T+Ly55NzuznuzV6LnYrKsxWSXi7XD2Jr3/ew
LWZKxnWB6XlLyr8l5PC2KghyRUz5k5gP4T1NRdvmdmjsSfFD2PZxuIxR/o8qEsmQ
bwInK8oCwZhpYLfggca+pa9iSHYTFWBDxxdmZ2DbT3hef8Xanjxr0WrkLfBlF5sE
oxXJyY49adazXW6Vwr0gc546V7hOqxFMn//iMy0iFLPMXvRsFesNTqwvRvskwUcP
gCPEXRJ+dPiNE/mAQ48g+2XKSFw6Hwcqh7cZQiZ69DVqDuBHaPwBtkpbJH+tRKoj
+Q==
-----END CERTIFICATE-----
Generated at Tue Nov  4 11:16:50 2025 by rpki-client