$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft File: CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft (raw, json) Hash identifier: lQrOI463SdRS2GOfDAhVG6b5wsjHXHOTRlGoc69O+/0= Subject key identifier: A6:EF:88:90:08:CA:20:75:D3:FE:AE:D2:A2:41:C6:59:10:4F:00:F7 Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4 Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4 Certificate serial: 7B29AA6EAF9A84045A838EB441F1FB1EB0A8BAC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft Manifest number: 0653 Signing time: Thu 19 Mar 2026 06:44:52 +0000 Manifest this update: Thu 19 Mar 2026 06:39:52 +0000 Manifest next update: Fri 20 Mar 2026 09:40:52 +0000 Files and hashes: 1: 322e35382e38372e302f32342d3234203d3e20323634343039.roa (hash: mkGL2Y74THGESksATgz18aFujAfAh2hZzUMM/zMEgtE=) 2: 3133302e3139332e37352e302f32342d3234203d3e20323132383135.roa (hash: 0KfkzJx6v7WvN2jvvqOfF0fI8+Z91Ctb8PuaEX/6n0M=) 3: 322e35382e38342e302f32342d3234203d3e20323136323231.roa (hash: U1S3You+fAZhVhvcdrRdWu8kGCzRG+R0tCv8DlClNys=) 4: 34352e31332e3135312e302f32342d3234203d3e20323135373033.roa (hash: aPdRk0yj6WHAWMnGbb2l+kFCRQlNzfB9p5fiHofDu7s=) 5: 34352e36362e3135302e302f32342d3234203d3e20333937333733.roa (hash: 5DUJVA+pSWGfl0obwZfoWi9lZoQLdECnA4H9VJT+xbw=) 6: 38392e3130372e392e302f32342d3234203d3e20313534303439.roa (hash: W8Nr5Pu7VW6wiorrg4hzFmpLYlb8TxaBJrzhK/IwqPg=) 7: 38332e3133382e35302e302f32342d3234203d3e20333936303236.roa (hash: X0JUgkm7bWAXyQ4SYkYDH/4wFz74Xhku1L5c/GFGAX0=) 8: 34352e36362e3134392e302f32342d3234203d3e20323132323338.roa (hash: UYRhWU2YtAQySXQJqSHhc8PkHnSqANYorHfiKIAiPmA=) 9: 34352e382e3137332e302f32342d3234203d3e20323032363733.roa (hash: d7fBecaPyrVjM4P3S3kg+4o4EIrWILvQcE2M5oWoSkI=) 10: 3137362e3132362e3130352e302f32342d3234203d3e20313532363732.roa (hash: ds/1M3gFH31reCXMtWJtKut2HrejgsPE/Ioz8CidATY=) 11: 36322e3132322e3138362e302f32342d3234203d3e203239383032.roa (hash: SD0OyEqKiwHB09Gm8Gi0D14YZmXhWcWzdEUhhoCRMcE=) 12: 36322e332e31382e302f32342d3234203d3e20323136323931.roa (hash: Mv5UcVUln6H+m2ppbCqxuT1Ft1vn2bxsaMxY5fGcRzU=) 13: 322e35382e38362e302f32342d3234203d3e203432383331.roa (hash: Ga9fSUVi9MuY7PSZ+TJisDhWnGoWEZ4TH7+EN9QxZpk=) 14: 3231332e352e3132382e302f32342d3234203d3e20313939303538.roa (hash: gEy9Oc8qQMzfRi3Vg23eKfgAotPRUQjE79aKVoo7YPw=) 15: 3134362e31392e32322e302f32342d3234203d3e2039323934.roa (hash: 4ThssK8ksZD7mFwPOIttfQuPgXi87SmagzrwaTeHUHI=) 16: 34352e31332e3135302e302f32342d3234203d3e2039323934.roa (hash: GNXJYPkhU5PAMN0CYYnBrOwVIuiyCeBKcANNAOXiG4w=) 17: 3134362e31392e35332e302f32342d3234203d3e20313532363732.roa (hash: R9JC3sHytncw5nwNxoiEF3pniUcJV4GyDa9/Vt4/Lgk=) 18: 34352e36362e3134382e302f32342d3234203d3e203631333137.roa (hash: 9x1QRSqxq7oLu3gp885IDU4m85ilCP4ZqtuwIJ3/i80=) 19: 3133302e3139332e37352e302f32342d3234203d3e20313938383833.roa (hash: X0vCJBzdFH4FS7gRUxhOxAXsLYNsOL4GffJBGoP62Nc=) 20: 34352e31332e3134392e302f32342d3234203d3e203631333137.roa (hash: Q3PPUlB/JvHRLRIa7IieyrUl/m1wHR8wutqNN0xNel0=) 21: 3133302e3139332e37352e302f32342d3234203d3e2035353131.roa (hash: j6AST7eH5dTOFWE32Sd37BgdQFtqd4Au0z4GNSD60G0=) 22: 36322e3132322e3138352e302f32342d3234203d3e20333937343233.roa (hash: xE+Kag7RYYIC/6Gdcunr8SGE54x+vaEZMv3MSSvdWDk=) 23: 3231322e31382e3131352e302f32342d3234203d3e20323135323234.roa (hash: QUzMWd8WT15LNmhOlxttrAzUMOiO/BrrGpvkhqR84HY=) 24: 322e35382e38372e302f32342d3234203d3e203631353936.roa (hash: M45ljxfpitcFdQWEd3Fma8ldSrrzn4db+RAFQgTFz/E=) 25: 36322e332e31382e302f32342d3234203d3e20323136323232.roa (hash: xpvX4DbRPgQDl25Wd7lh+sIK3ZuIxEe17qogwqcSmAY=) 26: 3134362e31392e35332e302f32342d3234203d3e20313432313131.roa (hash: 65asAzRxJvDe1YCujUmWbIiKCzT1TU5iNap0EoVkO3Y=) 27: 34352e382e3137322e302f32342d3234203d3e20323035373333.roa (hash: 1rINDmT9fsbaOlLLqeJ7eTf+zBwneu4N6jBRg+Yc4gc=) 28: 322e35382e38342e302f32342d3234203d3e20323133373931.roa (hash: GP7G3iKZS0eBPTwu6D554rUd6n3xCyAeAvzjRiXprSw=) 29: 3133302e3139332e37352e302f32342d3234203d3e20323136313539.roa (hash: OScz32SKWiRDIr+bw6qduusJprZYMrHU3JDPa1ynUL8=) 30: 3138352e3235312e32332e302f32342d3234203d3e20323030303137.roa (hash: 1nHeHr5ez78VSQCwBDXobb8Hijb3cSpgsJnQt2+b4+w=) 31: CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl (hash: Luh4XBmaazmN6xWENM7lYjHmd4Pu/A/KB6YXb2i+Bv4=) 32: 34352e382e3137352e302f32342d3234203d3e2037353632.roa (hash: gPOJ5OYy4C3HcRMZFW4SHF49vn1yyv2a5aCn7ZHuj8I=) 33: 3133302e3139332e37352e302f32342d3234203d3e20323135373237.roa (hash: DfFd6UBLBkplTu5ftGj8Fsf1wrwJQPF9A4xQAHF4/X8=) 34: 3137362e3132362e3130352e302f32342d3234203d3e20313432313131.roa (hash: BtY1Y1S506xUDGL3HPYJouh8HE8Bfu5LiAut28ETk7w=) 35: 3231322e32342e3132372e302f32342d3234203d3e203136323736.roa (hash: Rs7w/chVuiM2q/eQlWg7hYcTj07lMXsGjRzGrKCmtq8=) 36: 3134362e31392e3231352e302f32342d3234203d3e203432383331.roa (hash: rZD8rahYSCJKmrmYmBTS/7vmJS9IDa+dMQdQnVTzzLc=) 37: 3134362e31392e3231362e302f32342d3234203d3e20313334363737.roa (hash: r2VWTeXnfDWuim8gDU2ktI3y2NGYwT6ofTi2l1VlIzk=) 38: 34352e31332e3134382e302f32332d3233203d3e203632333837.roa (hash: 5EJNV4UhdWOuwnTNcgbmbjrtx0zc2Gwd0NznlniRrK0=) 39: 36322e3132322e3138362e302f32342d3234203d3e203631333137.roa (hash: gCbw4t50he127cuIH8e7X9edy5RGT/dSqPZYrNWwgUg=) 40: 3139332e33352e3232362e302f32342d3234203d3e203536393632.roa (hash: 4UgfT6p/2Q50B5wnsVKN4mv/hFd7RZLIZ15wgnKLY7k=) 41: 3134362e31392e3231352e302f32342d3234203d3e20323036323136.roa (hash: rPMAE/Emhe8ab0enxKSEB8g0vJLbwLIQWJGIysDgBSk=) 42: 322e35382e38352e302f32342d3234203d3e20383334.roa (hash: tlmvzJ4yU5noW/rrvRUB30jWwtpRp8Or9JFg8aJLA6I=) 43: 34352e382e3137342e302f32342d3234203d3e2037353632.roa (hash: M0Bu6CLDPFxg3KYMEJy4xB3uyzQGHvj9eJ5j3Kf1CaE=) 44: 3138352e3231322e3131332e302f32342d3234203d3e20343032313836.roa (hash: ig0KEkzJrn7cj9kmG3pO4IsDWol5Xes9935Oi26Jres=) 45: 34352e36362e3135312e302f32342d3234203d3e20333933393432.roa (hash: oZ9oAIkx04oyjdrYnnMVN8eWxNzVYaRW8fHPenuhT5I=) 46: 3231322e31382e3131362e302f32342d3234203d3e203139343337.roa (hash: 2oZavsRfA1Q40x9PaOnupB4Ub1RzFaGZLNyIg+RCt6s=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 20 Mar 2026 09:40:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:29:aa:6e:af:9a:84:04:5a:83:8e:b4:41:f1:fb:1e:b0:a8:ba:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4 Validity Not Before: Mar 19 06:39:52 2026 GMT Not After : Mar 20 09:40:52 2026 GMT Subject: CN=A6EF889008CA2075D3FEAED2A241C659104F00F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2f:f1:02:2e:a1:56:ec:9a:84:0b:f6:bb:e5: d1:e7:2a:e7:d9:c0:1a:f5:39:ff:d1:1f:40:17:ca: 8e:8e:a5:8a:c8:31:47:56:47:f5:a1:1a:7e:8d:71: 34:9f:37:cd:f3:87:89:d8:7d:c9:49:22:13:40:09: 8e:d2:26:47:e6:6a:dd:55:0d:8e:31:64:06:dd:a4: 44:9f:4f:af:40:74:7f:fb:60:a1:b8:f3:2d:00:c2: 76:a0:7b:47:3e:b8:91:c8:bb:52:28:78:0c:09:73: 41:71:8d:11:b0:b1:9f:64:2a:24:99:00:ef:5d:9e: 76:18:5a:6a:42:32:02:fe:67:fc:f0:09:79:49:3c: 0c:34:49:13:59:4c:90:c1:bb:75:f1:cc:1d:c2:56: c0:8c:e4:45:39:57:3e:3e:7c:51:8e:e6:76:eb:22: 8c:b6:27:8b:f5:b6:db:d0:1e:06:a2:6b:97:d6:d2: a9:5b:3e:2b:f3:64:37:6e:0b:db:31:d5:53:72:b6: 33:c7:7e:99:64:f0:2f:14:e0:71:d2:0b:cb:2b:21: be:7f:33:89:37:b3:f3:a8:ec:9f:be:87:80:37:30: da:5b:97:bb:8a:18:63:aa:c4:41:b7:5a:c5:03:5f: 2f:35:64:da:4d:f2:d9:b5:fa:77:44:13:75:6c:78: 24:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:EF:88:90:08:CA:20:75:D3:FE:AE:D2:A2:41:C6:59:10:4F:00:F7 X509v3 Authority Key Identifier: keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:5b:fb:d7:3b:8d:87:b9:47:b1:ca:99:4f:1f:93:41:4a:58: d0:5d:cb:aa:6e:75:62:b6:24:5a:4e:16:b7:8a:2e:e3:c7:10: 50:38:1e:03:2c:54:93:67:ff:81:11:eb:f5:02:9c:e5:ae:24: 3f:4c:cf:90:2f:41:fe:94:9b:99:c5:b3:4b:03:d3:8b:76:c0: 1a:c2:84:79:e7:8b:9b:b5:ca:b9:4b:34:9c:05:22:4d:6f:c6: a2:15:ac:59:c8:34:ff:9c:35:10:19:e7:12:96:b3:0a:8d:71: 80:53:22:bc:f6:e5:dd:c0:5d:34:79:88:20:ad:28:66:4c:5b: 90:d3:cd:6d:23:e7:7d:c7:41:db:b0:3f:ff:95:aa:22:9b:4c: bd:22:71:85:83:98:61:6d:a3:26:09:fe:22:c7:27:09:69:3f: fe:d3:56:91:6a:f3:d9:c9:3a:75:47:c6:ef:aa:94:82:32:04: 63:ba:ec:17:a7:21:9c:32:3d:19:c4:e3:de:5e:93:03:5c:4b: 6d:4d:fb:20:5d:a4:3e:f5:26:6c:a0:ae:80:25:cf:1c:2d:da: 21:b7:62:f2:6e:2c:35:55:ac:8f:f9:69:3e:0f:68:94:bd:3d: 42:21:50:e6:09:76:bf:ec:da:d0:17:cb:d7:42:07:17:a9:81: 99:9c:f1:67 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUeymqbq+ahARag460QfH7HrCousQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2VmY2U0NDliZWE4ZGVhZWRiMTgwNGRiYTI1YzU4NGRm NTg3M2RjNDAeFw0yNjAzMTkwNjM5NTJaFw0yNjAzMjAwOTQwNTJaMDMxMTAvBgNV BAMTKEE2RUY4ODkwMDhDQTIwNzVEM0ZFQUVEMkEyNDFDNjU5MTA0RjAwRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwL/ECLqFW7JqEC/a75dHnKufZ wBr1Of/RH0AXyo6OpYrIMUdWR/WhGn6NcTSfN83zh4nYfclJIhNACY7SJkfmat1V DY4xZAbdpESfT69AdH/7YKG48y0Awnage0c+uJHIu1IoeAwJc0FxjRGwsZ9kKiSZ AO9dnnYYWmpCMgL+Z/zwCXlJPAw0SRNZTJDBu3XxzB3CVsCM5EU5Vz4+fFGO5nbr Ioy2J4v1ttvQHgaia5fW0qlbPivzZDduC9sx1VNytjPHfplk8C8U4HHSC8srIb5/ M4k3s/Oo7J++h4A3MNpbl7uKGGOqxEG3WsUDXy81ZNpN8tm1+ndEE3VseCRNAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUpu+IkAjKIHXT/q7SokHGWRBPAPcwHwYDVR0j BBgwFoAUzvzkSb6o3q7bGATbolxYTfWHPcQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDFiMzVmOGItNmY0OC00YmFkLWIxODUtNWMxZGFhOGFj ZGE5LzAvQ0VGQ0U0NDlCRUE4REVBRURCMTgwNERCQTI1QzU4NERGNTg3M0RDNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p2emtTYjZvM3E3YkdBVGJvbHhZVGZX SFBjUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kMWIzNWY4Yi02 ZjQ4LTRiYWQtYjE4NS01YzFkYWE4YWNkYTkvMC9DRUZDRTQ0OUJFQThERUFFREIx ODA0REJBMjVDNTg0REY1ODczREM0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEFv71zuNh7lHscqZTx+T QUpY0F3Lqm51YrYkWk4Wt4ou48cQUDgeAyxUk2f/gRHr9QKc5a4kP0zPkC9B/pSb mcWzSwPTi3bAGsKEeeeLm7XKuUs0nAUiTW/GohWsWcg0/5w1EBnnEpazCo1xgFMi vPbl3cBdNHmIIK0oZkxbkNPNbSPnfcdB27A//5WqIptMvSJxhYOYYW2jJgn+Iscn CWk//tNWkWrz2ck6dUfG76qUgjIEY7rsF6chnDI9GcTj3l6TA1xLbU37IF2kPvUm bKCugCXPHC3aIbdi8m4sNVWsj/lpPg9olL09QiFQ5gl2v+za0BfL10IHF6mBmZzx Zw== -----END CERTIFICATE-----Generated at Thu Mar 19 19:42:18 2026 by rpki-client