$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft File: CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft (raw, json) Hash identifier: FNqDCD/TyOS/VsIpYSWOmSZw2rjVVF/kfHyFbDaWZDk= Subject key identifier: 39:54:E8:AF:6A:52:BE:EC:B3:64:35:C7:83:12:B8:68:25:93:1F:64 Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4 Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4 Certificate serial: 5455F688E04B92FC531B42A24AF6CAFC7F92DB99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft Manifest number: 07B2 Signing time: Thu 05 Nov 2026 06:19:03 +0000 Manifest this update: Thu 05 Nov 2026 06:14:03 +0000 Manifest next update: Fri 06 Nov 2026 09:16:03 +0000 Files and hashes: 1: 34352e36362e3135302e302f32342d3234203d3e20333937333733.roa (hash: pqQl3e2pCUusFmVQbZmEOu3yKXeyiAgp/5DUklbgvdM=) 2: 322e35382e38372e302f32342d3234203d3e203631353936.roa (hash: DqkOkBW2woP2N8YHrabfFdqR1xr69WhJQBP7HpN+bxQ=) 3: 34352e382e3137322e302f32342d3234203d3e20323035373333.roa (hash: VnT6f7eup0/WhMwv7EXnvyzWk35rQ2W/LJCTBqUDvJk=) 4: 3137362e3132362e3130352e302f32342d3234203d3e20313532363732.roa (hash: Aze0H1EmJtfCr2E388tFbkXXQhKMmQb0+wnPTMjfsF4=) 5: 3137362e3132362e3130352e302f32342d3234203d3e20313432313131.roa (hash: uX4TUpc9QWawvTEY8DM2zgQlxykPZg4zImAv7y2dBbA=) 6: 34352e31332e3134382e302f32332d3233203d3e203632333837.roa (hash: mtoEJfZDnNC4yDUgLMX3zgAOQvqNn4zdImsuSsOQHFo=) 7: 34352e36362e3134392e302f32342d3234203d3e20323132323338.roa (hash: 8iycEhNuolwACS0ekQ/GS7kI3v9bE81gf9pF0KINbWM=) 8: 34352e36362e3134382e302f32342d3234203d3e20313532363036.roa (hash: EKOgOzOtGvJuJZn6XL7WpW4xB1wA+9sc389+2dbv3Ag=) 9: 3134362e31392e35332e302f32342d3234203d3e20313432313131.roa (hash: lvJfFtfLFIbur8y503IXjh3IqK3A+RUCpmg6qhQ2seM=) 10: 36322e3132322e3138352e302f32342d3234203d3e20333937343233.roa (hash: WeteA5qOGTmhboj/I1IbXUTAA6Vr+NpjXoqkx1UDFSQ=) 11: 3231322e31382e3131362e302f32342d3234203d3e203139343337.roa (hash: AtBxdbDSCGMlhk1DR/UjZZkrH6SVbsoHhpopN+8q4gI=) 12: 3134362e31392e3231352e302f32342d3234203d3e20323031313331.roa (hash: u4ojb2YE51vFgMkjWXXe4FgVm1kbuMMqef5geHX+2I4=) 13: 34352e31332e3135312e302f32342d3234203d3e20323135373033.roa (hash: cUgxyla8jJ5OroUuNzjvJUi/GEQoiTv5Q7R/8q4Fm1g=) 14: 34352e31332e3135302e302f32342d3234203d3e2039323934.roa (hash: VpEKhz7umJbmzKVJDVzsQ68HCIsHIOJmXbqn2EpmOdc=) 15: 3231322e32342e3132372e302f32342d3234203d3e20323035353434.roa (hash: Mxn8uOU1SwCqejZhgNenv9gthI4/mGec1zouYkB+GgA=) 16: 34352e382e3137332e302f32342d3234203d3e20313937313936.roa (hash: 3jTf9ki7y9rdeYaN5lJ4A9BLxW2mRTrdw0puXBgOnH8=) 17: 3231322e31382e3131352e302f32342d3234203d3e20323135323234.roa (hash: QUzMWd8WT15LNmhOlxttrAzUMOiO/BrrGpvkhqR84HY=) 18: 3138352e3235312e32332e302f32342d3234203d3e20323030303137.roa (hash: OQXHvkMUYk1QDZhR0DoeAz0QI4bv3B7tsWGIo840D3k=) 19: 3231322e31382e3131352e302f32342d3234203d3e20323131343834.roa (hash: C+TxIzF6QDeooBljKtU5g8jHCoJKYteQs88g8gs89EQ=) 20: 3139332e33352e3232362e302f32342d3234203d3e203536393632.roa (hash: m2vKqOV6PJPhocfYUg+46CWALN6X7Mk2hxAjRjOTe4Q=) 21: 34352e382e3137352e302f32342d3234203d3e2037353632.roa (hash: O5xaR+jQW/wFf5fQ4meB7PNzpTh/uGAmEj862jE+YtE=) 22: 3134362e31392e3231362e302f32342d3234203d3e20313334363737.roa (hash: yycXD37CweWcSXqvIiIHSQ/Otu/gODYxcJV0XE2Z5fg=) 23: 322e35382e38372e302f32342d3234203d3e20323634343039.roa (hash: iUAlfRBN5KS/1VqvPfEgfqMU6CFwcD1SlH+jygOFSU8=) 24: CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl (hash: nV97I5z344LiC8ZIxLCNfFF3kcTqeHrzAvofPns/5+8=) 25: 322e35382e38342e302f32342d3234203d3e20323133373931.roa (hash: GP7G3iKZS0eBPTwu6D554rUd6n3xCyAeAvzjRiXprSw=) 26: 36322e332e31382e302f32342d3234203d3e20323136323232.roa (hash: ZeyolARCBdnsWHMtggmGQcHiKd280GfS1/j3/Bp8NX4=) 27: 34352e382e3137342e302f32342d3234203d3e2037353632.roa (hash: KPixncOWZtATcB6bGH2vfbq/4FYYzxp8WcVaCPh1cuU=) 28: 322e35382e38352e302f32342d3234203d3e203136323736.roa (hash: 7BCCo1S44O1GzhjGjkFaT0HearfARUjEUX+ZehyGppM=) 29: 3231332e352e3132382e302f32342d3234203d3e20313939303538.roa (hash: M/VDbD6X7IWmHx3gMi6h9miP6a1jez1ttIkf8txe0i8=) 30: 322e35382e38362e302f32342d3234203d3e203432383331.roa (hash: 2T8d9j//ixeFGVAUX0jaZjAvKikAyceNqE4eC70GAlk=) 31: 36322e332e31382e302f32342d3234203d3e20323136323931.roa (hash: 39Ecrxd/FkCAGTvy7OXLB4dzwM2Ae3nIKwg+e1og5Lc=) 32: 322e35382e38342e302f32342d3234203d3e20323136323231.roa (hash: HDA68mLG6MRopGu3U6pdcLVz81PI4pAevW0Vz54vlJI=) 33: 3134362e31392e32322e302f32342d3234203d3e2039323934.roa (hash: e0SSS0xo7gvmOJksQW02nulgd/BU6NIi1E4uFnNkKKU=) 34: 3134362e31392e35332e302f32342d3234203d3e20313532363732.roa (hash: kMNRAnqn2ex5ku/KO9MIvv7GjcuVg1AMPoliCEdigOQ=) 35: 34352e31332e3134392e302f32342d3234203d3e203631333137.roa (hash: PqF1eE/0Vytv7KbARFQc98GTbtGeCuQLtbd2lwf8340=) 36: 36322e3132322e3138362e302f32342d3234203d3e20343032383636.roa (hash: Gi/MFaHQEM/Dn6eXagj6hZsyESLpGovppu9NGfn557s=) 37: 34352e36362e3135312e302f32342d3234203d3e20333933393432.roa (hash: oZ9oAIkx04oyjdrYnnMVN8eWxNzVYaRW8fHPenuhT5I=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 08:45:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:55:f6:88:e0:4b:92:fc:53:1b:42:a2:4a:f6:ca:fc:7f:92:db:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4 Validity Not Before: Nov 5 06:14:03 2026 GMT Not After : Nov 6 09:16:03 2026 GMT Subject: CN=3954E8AF6A52BEECB36435C78312B86825931F64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4b:69:98:c3:8f:9d:82:d5:19:d6:79:ff:aa: 5b:9c:43:77:63:2b:7b:0d:2a:c2:46:99:be:f1:02: 7c:1d:83:6f:55:d5:62:c6:f9:6f:4e:0d:db:34:9a: 58:4d:55:1a:f0:e9:b4:49:bc:70:bd:02:fb:d4:1c: 85:85:ce:89:15:4b:a3:18:37:c1:b9:81:20:0d:09: ee:e7:c9:ba:d5:ce:83:3c:eb:a8:16:7b:c5:33:30: ca:60:73:2e:01:ed:55:e3:57:67:52:cc:89:d7:80: c7:94:70:49:f6:75:52:9a:f2:12:fb:da:b4:9d:da: 96:7b:9a:f7:15:ba:c2:0f:56:e1:89:38:45:8c:23: 75:fe:13:2e:72:67:5c:c0:9f:f7:e1:98:ed:27:44: 2b:0a:07:01:1b:54:a2:4c:b1:50:8a:21:66:a7:22: a5:d4:bb:c2:7a:91:27:31:e9:25:0c:d0:8d:d5:2c: c1:c9:a1:ce:b9:17:40:54:b4:59:4a:4d:53:38:8d: 96:68:c4:37:5d:14:6e:c0:12:1b:09:82:f1:b1:09: 9b:c8:a5:40:f6:5a:75:aa:ef:f1:88:5f:c0:6e:08: 21:aa:ed:33:dd:e6:71:d5:6a:d5:bb:44:6a:cd:75: 77:e6:36:0b:72:77:c9:ec:aa:60:f8:eb:54:b5:5d: 99:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:54:E8:AF:6A:52:BE:EC:B3:64:35:C7:83:12:B8:68:25:93:1F:64 X509v3 Authority Key Identifier: keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:e1:1a:bc:97:bd:91:10:75:93:84:b1:40:25:a1:58:f7:d7: ee:12:25:fb:b6:43:b7:8b:0b:28:cd:62:9a:90:1a:df:1b:1a: 0d:9e:31:f7:89:22:8c:0b:2a:57:61:a6:f0:b6:8d:22:05:b2: 95:8a:92:85:85:cb:10:ca:c8:d6:e6:91:75:aa:83:23:3a:0f: 27:0c:55:be:27:c5:2b:7d:e2:ee:a9:62:ff:82:74:17:2d:87: b3:56:03:8f:0a:a0:3a:a5:fa:88:4d:38:cd:d0:92:b3:14:f4: 9f:20:e0:08:04:be:a7:04:b8:9d:1f:34:b9:c1:75:e1:43:ce: 34:80:18:5e:67:3d:39:10:59:66:fd:9a:ea:83:95:b2:2a:c1: 7b:c0:8f:29:b6:2c:48:8c:d3:cd:b0:e8:0f:9a:59:24:28:7f: ac:e7:fc:ae:91:c9:f1:91:20:da:22:46:33:20:44:68:44:7d: 2b:96:9c:a6:75:55:f7:cf:f9:60:0e:1b:65:fe:b2:4a:08:46: 00:7a:30:2e:37:1c:a3:2a:cd:4f:24:cf:1a:39:c8:9a:ab:a1: c1:a8:1c:37:85:d8:c4:76:7c:8d:1c:61:11:6b:94:67:59:89: ed:95:02:8f:87:d2:45:0e:27:55:1b:00:23:b2:f9:f9:22:ba: 6c:be:1c:50 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUVFX2iOBLkvxTG0KiSvbK/H+S25kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2VmY2U0NDliZWE4ZGVhZWRiMTgwNGRiYTI1YzU4NGRm NTg3M2RjNDAeFw0yNjExMDUwNjE0MDNaFw0yNjExMDYwOTE2MDNaMDMxMTAvBgNV BAMTKDM5NTRFOEFGNkE1MkJFRUNCMzY0MzVDNzgzMTJCODY4MjU5MzFGNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvS2mYw4+dgtUZ1nn/qlucQ3dj K3sNKsJGmb7xAnwdg29V1WLG+W9ODds0mlhNVRrw6bRJvHC9AvvUHIWFzokVS6MY N8G5gSANCe7nybrVzoM866gWe8UzMMpgcy4B7VXjV2dSzInXgMeUcEn2dVKa8hL7 2rSd2pZ7mvcVusIPVuGJOEWMI3X+Ey5yZ1zAn/fhmO0nRCsKBwEbVKJMsVCKIWan IqXUu8J6kScx6SUM0I3VLMHJoc65F0BUtFlKTVM4jZZoxDddFG7AEhsJgvGxCZvI pUD2WnWq7/GIX8BuCCGq7TPd5nHVatW7RGrNdXfmNgtyd8nsqmD461S1XZnjAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUOVTor2pSvuyzZDXHgxK4aCWTH2QwHwYDVR0j BBgwFoAUzvzkSb6o3q7bGATbolxYTfWHPcQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDFiMzVmOGItNmY0OC00YmFkLWIxODUtNWMxZGFhOGFj ZGE5LzAvQ0VGQ0U0NDlCRUE4REVBRURCMTgwNERCQTI1QzU4NERGNTg3M0RDNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p2emtTYjZvM3E3YkdBVGJvbHhZVGZX SFBjUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kMWIzNWY4Yi02 ZjQ4LTRiYWQtYjE4NS01YzFkYWE4YWNkYTkvMC9DRUZDRTQ0OUJFQThERUFFREIx ODA0REJBMjVDNTg0REY1ODczREM0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAluEavJe9kRB1k4SxQCWh WPfX7hIl+7ZDt4sLKM1impAa3xsaDZ4x94kijAsqV2Gm8LaNIgWylYqShYXLEMrI 1uaRdaqDIzoPJwxVvifFK33i7qli/4J0Fy2Hs1YDjwqgOqX6iE04zdCSsxT0nyDg CAS+pwS4nR80ucF14UPONIAYXmc9ORBZZv2a6oOVsirBe8CPKbYsSIzTzbDoD5pZ JCh/rOf8rpHJ8ZEg2iJGMyBEaER9K5acpnVV98/5YA4bZf6ySghGAHowLjccoyrN TyTPGjnImquhwagcN4XYxHZ8jRxhEWuUZ1mJ7ZUCj4fSRQ4nVRsAI7L5+SK6bL4c UA== -----END CERTIFICATE-----Generated at Thu Nov 5 15:01:24 2026 by rpki-client