$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft File: CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft (raw, json) Hash identifier: eD93vmIqMXDVdE1Au1fUj44BG1sXtQiaKz04OrYztnQ= Subject key identifier: 86:E0:30:33:1B:5F:B2:68:4A:07:70:8E:13:35:7C:2F:11:B9:4D:78 Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4 Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4 Certificate serial: 2775E3C61E7DC780E12F86F2F48B7F9977507A0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft Manifest number: 0645 Signing time: Mon 09 Mar 2026 16:14:18 +0000 Manifest this update: Mon 09 Mar 2026 16:09:18 +0000 Manifest next update: Tue 10 Mar 2026 18:24:18 +0000 Files and hashes: 1: 34352e31332e3135302e302f32342d3234203d3e2039323934.roa (hash: GNXJYPkhU5PAMN0CYYnBrOwVIuiyCeBKcANNAOXiG4w=) 2: 34352e31332e3134382e302f32332d3233203d3e203632333837.roa (hash: 5EJNV4UhdWOuwnTNcgbmbjrtx0zc2Gwd0NznlniRrK0=) 3: 34352e36362e3134392e302f32342d3234203d3e20323132323338.roa (hash: UYRhWU2YtAQySXQJqSHhc8PkHnSqANYorHfiKIAiPmA=) 4: 34352e36362e3134382e302f32342d3234203d3e203631333137.roa (hash: 9x1QRSqxq7oLu3gp885IDU4m85ilCP4ZqtuwIJ3/i80=) 5: 3133302e3139332e37352e302f32342d3234203d3e20313938383833.roa (hash: X0vCJBzdFH4FS7gRUxhOxAXsLYNsOL4GffJBGoP62Nc=) 6: 3133302e3139332e37352e302f32342d3234203d3e20323136313539.roa (hash: OScz32SKWiRDIr+bw6qduusJprZYMrHU3JDPa1ynUL8=) 7: 36322e3132322e3138352e302f32342d3234203d3e20333937343233.roa (hash: xE+Kag7RYYIC/6Gdcunr8SGE54x+vaEZMv3MSSvdWDk=) 8: 322e35382e38362e302f32342d3234203d3e203432383331.roa (hash: Ga9fSUVi9MuY7PSZ+TJisDhWnGoWEZ4TH7+EN9QxZpk=) 9: 322e35382e38352e302f32342d3234203d3e20383334.roa (hash: tlmvzJ4yU5noW/rrvRUB30jWwtpRp8Or9JFg8aJLA6I=) 10: 38332e3133382e35302e302f32342d3234203d3e20333936303236.roa (hash: X0JUgkm7bWAXyQ4SYkYDH/4wFz74Xhku1L5c/GFGAX0=) 11: 34352e31332e3134392e302f32342d3234203d3e203631333137.roa (hash: Q3PPUlB/JvHRLRIa7IieyrUl/m1wHR8wutqNN0xNel0=) 12: 3231322e32342e3132372e302f32342d3234203d3e203136323736.roa (hash: Rs7w/chVuiM2q/eQlWg7hYcTj07lMXsGjRzGrKCmtq8=) 13: 36322e3132322e3138362e302f32342d3234203d3e203631333137.roa (hash: gCbw4t50he127cuIH8e7X9edy5RGT/dSqPZYrNWwgUg=) 14: 322e35382e38372e302f32342d3234203d3e203631353936.roa (hash: M45ljxfpitcFdQWEd3Fma8ldSrrzn4db+RAFQgTFz/E=) 15: 3134362e31392e3231362e302f32342d3234203d3e20313334363737.roa (hash: r2VWTeXnfDWuim8gDU2ktI3y2NGYwT6ofTi2l1VlIzk=) 16: 3139332e33352e3232362e302f32342d3234203d3e203536393632.roa (hash: 4UgfT6p/2Q50B5wnsVKN4mv/hFd7RZLIZ15wgnKLY7k=) 17: 34352e382e3137352e302f32342d3234203d3e2037353632.roa (hash: gPOJ5OYy4C3HcRMZFW4SHF49vn1yyv2a5aCn7ZHuj8I=) 18: CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl (hash: tTStPCYZ+3HyFcCv3HTSfRbUOBURpAsxhZTFwF/buL0=) 19: 3133302e3139332e37352e302f32342d3234203d3e2035353131.roa (hash: j6AST7eH5dTOFWE32Sd37BgdQFtqd4Au0z4GNSD60G0=) 20: 3134362e31392e35332e302f32342d3234203d3e20313432313131.roa (hash: 65asAzRxJvDe1YCujUmWbIiKCzT1TU5iNap0EoVkO3Y=) 21: 36322e3132322e3138362e302f32342d3234203d3e203239383032.roa (hash: SD0OyEqKiwHB09Gm8Gi0D14YZmXhWcWzdEUhhoCRMcE=) 22: 3138352e3235312e32332e302f32342d3234203d3e20323030303137.roa (hash: 1nHeHr5ez78VSQCwBDXobb8Hijb3cSpgsJnQt2+b4+w=) 23: 34352e31332e3135312e302f32342d3234203d3e20323135373033.roa (hash: aPdRk0yj6WHAWMnGbb2l+kFCRQlNzfB9p5fiHofDu7s=) 24: 38392e3130372e392e302f32342d3234203d3e20313534303439.roa (hash: W8Nr5Pu7VW6wiorrg4hzFmpLYlb8TxaBJrzhK/IwqPg=) 25: 3231322e31382e3131352e302f32342d3234203d3e20323135323234.roa (hash: QUzMWd8WT15LNmhOlxttrAzUMOiO/BrrGpvkhqR84HY=) 26: 34352e382e3137322e302f32342d3234203d3e20323035373333.roa (hash: 1rINDmT9fsbaOlLLqeJ7eTf+zBwneu4N6jBRg+Yc4gc=) 27: 3137362e3132362e3130352e302f32342d3234203d3e20313532363732.roa (hash: ds/1M3gFH31reCXMtWJtKut2HrejgsPE/Ioz8CidATY=) 28: 3137362e3132362e3130352e302f32342d3234203d3e20313432313131.roa (hash: BtY1Y1S506xUDGL3HPYJouh8HE8Bfu5LiAut28ETk7w=) 29: 34352e36362e3135302e302f32342d3234203d3e20333937333733.roa (hash: 5DUJVA+pSWGfl0obwZfoWi9lZoQLdECnA4H9VJT+xbw=) 30: 36322e332e31382e302f32342d3234203d3e20323136323232.roa (hash: xpvX4DbRPgQDl25Wd7lh+sIK3ZuIxEe17qogwqcSmAY=) 31: 3134362e31392e3231352e302f32342d3234203d3e20323036323136.roa (hash: rPMAE/Emhe8ab0enxKSEB8g0vJLbwLIQWJGIysDgBSk=) 32: 34352e382e3137332e302f32342d3234203d3e20383334.roa (hash: U9x0lOHXeoaAxrubCSXxzIuASm9LMOorSTksQKd5yMc=) 33: 3134362e31392e32322e302f32342d3234203d3e2039323934.roa (hash: 4ThssK8ksZD7mFwPOIttfQuPgXi87SmagzrwaTeHUHI=) 34: 34352e36362e3135312e302f32342d3234203d3e20333933393432.roa (hash: oZ9oAIkx04oyjdrYnnMVN8eWxNzVYaRW8fHPenuhT5I=) 35: 3231332e352e3132382e302f32342d3234203d3e20313939303538.roa (hash: gEy9Oc8qQMzfRi3Vg23eKfgAotPRUQjE79aKVoo7YPw=) 36: 3134362e31392e3231352e302f32342d3234203d3e203432383331.roa (hash: rZD8rahYSCJKmrmYmBTS/7vmJS9IDa+dMQdQnVTzzLc=) 37: 36322e332e31382e302f32342d3234203d3e20323136323931.roa (hash: Mv5UcVUln6H+m2ppbCqxuT1Ft1vn2bxsaMxY5fGcRzU=) 38: 322e35382e38372e302f32342d3234203d3e20323634343039.roa (hash: mkGL2Y74THGESksATgz18aFujAfAh2hZzUMM/zMEgtE=) 39: 34352e382e3137342e302f32342d3234203d3e2037353632.roa (hash: M0Bu6CLDPFxg3KYMEJy4xB3uyzQGHvj9eJ5j3Kf1CaE=) 40: 322e35382e38342e302f32342d3234203d3e20323136323231.roa (hash: U1S3You+fAZhVhvcdrRdWu8kGCzRG+R0tCv8DlClNys=) 41: 3134362e31392e35332e302f32342d3234203d3e20313532363732.roa (hash: R9JC3sHytncw5nwNxoiEF3pniUcJV4GyDa9/Vt4/Lgk=) 42: 3133302e3139332e37352e302f32342d3234203d3e20323135373237.roa (hash: DfFd6UBLBkplTu5ftGj8Fsf1wrwJQPF9A4xQAHF4/X8=) 43: 3133302e3139332e37352e302f32342d3234203d3e20323132383135.roa (hash: 0KfkzJx6v7WvN2jvvqOfF0fI8+Z91Ctb8PuaEX/6n0M=) 44: 322e35382e38342e302f32342d3234203d3e20323133373931.roa (hash: GP7G3iKZS0eBPTwu6D554rUd6n3xCyAeAvzjRiXprSw=) 45: 3231322e31382e3131362e302f32342d3234203d3e203139343337.roa (hash: 2oZavsRfA1Q40x9PaOnupB4Ub1RzFaGZLNyIg+RCt6s=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Mar 2026 18:24:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:75:e3:c6:1e:7d:c7:80:e1:2f:86:f2:f4:8b:7f:99:77:50:7a:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4 Validity Not Before: Mar 9 16:09:18 2026 GMT Not After : Mar 10 18:24:18 2026 GMT Subject: CN=86E030331B5FB2684A07708E13357C2F11B94D78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1d:c8:ce:b8:40:06:b0:75:bb:e4:ff:47:ec: d6:80:7d:75:09:93:f8:6c:95:f8:8b:3e:16:5c:57: 6a:61:75:7e:d8:b6:76:9b:2d:64:cc:10:af:43:1b: be:94:2a:a1:c8:57:e9:ae:db:f4:65:10:a0:2a:2e: c3:5a:1f:fb:19:de:67:23:74:df:9e:52:1e:09:27: 26:9b:d8:b4:c7:7f:51:49:57:78:66:b9:4d:81:78: 6b:47:eb:9c:e8:65:cb:1a:3f:14:df:f0:c7:73:27: bb:14:b9:63:e7:9f:12:c7:48:c7:52:7f:8a:46:6f: 25:07:d5:03:f9:80:49:d5:1e:58:23:fb:1e:ba:b3: 37:c8:17:70:d6:97:95:e7:78:5a:14:87:4c:26:96: 49:86:a9:37:e7:c0:1b:70:5b:3a:3a:a5:62:2d:f2: ba:bd:03:46:16:bf:65:9b:30:ac:c0:11:5f:c6:76: 55:04:2f:c4:b0:74:74:e4:09:ef:20:57:74:62:85: c1:07:e3:78:f5:eb:e5:1f:3b:42:7b:4b:2a:07:1a: 3e:e9:33:48:22:16:68:c8:d5:40:43:9d:c7:1b:df: 88:a1:36:60:8c:c6:3f:4c:01:1b:3c:01:f6:31:13: 7e:1d:29:66:fe:1c:dc:28:b2:6d:71:27:6b:e0:98: b5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:E0:30:33:1B:5F:B2:68:4A:07:70:8E:13:35:7C:2F:11:B9:4D:78 X509v3 Authority Key Identifier: keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:24:e4:c4:b3:dc:71:bf:96:55:22:20:51:10:c6:a1:40:11: 48:7d:4b:84:dc:14:e6:01:11:08:c6:02:a1:94:ed:4c:b0:da: 42:fd:47:3d:b6:58:98:30:61:90:3f:ae:9e:51:86:f0:97:f6: 23:4f:68:34:bc:64:3d:f0:e5:d0:be:b5:98:0e:bf:ac:27:e4: fd:bb:d4:72:de:a9:90:aa:72:ab:fa:48:31:a6:0f:68:ac:a5: 7d:f3:d8:3f:08:81:8f:ef:d8:48:b3:f8:a8:eb:01:64:a1:b9: b4:3a:5e:35:7c:e1:42:33:2d:36:d2:6d:b1:b8:4f:e5:90:6a: 67:b6:d6:40:19:4f:14:59:cd:6d:f2:46:b8:13:93:a5:ee:f1: d3:3b:f2:78:64:f0:ea:33:42:58:c7:61:50:4a:ca:7f:19:94: d0:54:c2:ad:02:27:6b:49:05:ed:0b:e5:81:48:54:82:72:db: 03:fc:21:81:ae:ba:aa:c0:e6:a8:b2:3a:90:e5:0b:81:fe:18: 06:71:fd:87:63:0d:17:ec:bb:09:72:28:fa:a2:0b:1e:a0:1e: 15:35:79:c0:6d:be:41:f0:5b:92:16:34:b6:29:6b:a8:50:cb: d2:a1:b8:bd:af:94:3d:cf:7b:f0:b3:f1:5f:29:07:0c:7f:29: d7:ec:a4:c0 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUJ3Xjxh59x4DhL4by9It/mXdQeg0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2VmY2U0NDliZWE4ZGVhZWRiMTgwNGRiYTI1YzU4NGRm NTg3M2RjNDAeFw0yNjAzMDkxNjA5MThaFw0yNjAzMTAxODI0MThaMDMxMTAvBgNV BAMTKDg2RTAzMDMzMUI1RkIyNjg0QTA3NzA4RTEzMzU3QzJGMTFCOTRENzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpHcjOuEAGsHW75P9H7NaAfXUJ k/hslfiLPhZcV2phdX7YtnabLWTMEK9DG76UKqHIV+mu2/RlEKAqLsNaH/sZ3mcj dN+eUh4JJyab2LTHf1FJV3hmuU2BeGtH65zoZcsaPxTf8MdzJ7sUuWPnnxLHSMdS f4pGbyUH1QP5gEnVHlgj+x66szfIF3DWl5XneFoUh0wmlkmGqTfnwBtwWzo6pWIt 8rq9A0YWv2WbMKzAEV/GdlUEL8SwdHTkCe8gV3RihcEH43j16+UfO0J7SyoHGj7p M0giFmjI1UBDnccb34ihNmCMxj9MARs8AfYxE34dKWb+HNwosm1xJ2vgmLX5AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUhuAwMxtfsmhKB3COEzV8LxG5TXgwHwYDVR0j BBgwFoAUzvzkSb6o3q7bGATbolxYTfWHPcQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDFiMzVmOGItNmY0OC00YmFkLWIxODUtNWMxZGFhOGFj ZGE5LzAvQ0VGQ0U0NDlCRUE4REVBRURCMTgwNERCQTI1QzU4NERGNTg3M0RDNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p2emtTYjZvM3E3YkdBVGJvbHhZVGZX SFBjUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kMWIzNWY4Yi02 ZjQ4LTRiYWQtYjE4NS01YzFkYWE4YWNkYTkvMC9DRUZDRTQ0OUJFQThERUFFREIx ODA0REJBMjVDNTg0REY1ODczREM0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyiTkxLPccb+WVSIgURDG oUARSH1LhNwU5gERCMYCoZTtTLDaQv1HPbZYmDBhkD+unlGG8Jf2I09oNLxkPfDl 0L61mA6/rCfk/bvUct6pkKpyq/pIMaYPaKylffPYPwiBj+/YSLP4qOsBZKG5tDpe NXzhQjMtNtJtsbhP5ZBqZ7bWQBlPFFnNbfJGuBOTpe7x0zvyeGTw6jNCWMdhUErK fxmU0FTCrQIna0kF7QvlgUhUgnLbA/whga66qsDmqLI6kOULgf4YBnH9h2MNF+y7 CXIo+qILHqAeFTV5wG2+QfBbkhY0tilrqFDL0qG4va+UPc978LPxXykHDH8p1+yk wA== -----END CERTIFICATE-----Generated at Tue Mar 10 07:06:44 2026 by rpki-client