$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft File: CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft (raw, json) Hash identifier: oxuiB06ZlOV2tk4BHbhtyYw0Lth17ainA0LY8Ahqq4E= Subject key identifier: 96:BA:32:6F:6C:40:C5:E8:E7:A1:3C:2E:52:62:DA:18:6C:95:46:67 Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4 Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4 Certificate serial: 2A383EE925D10BB343521CC447E66CB0022EA432 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft Manifest number: 07B1 Signing time: Wed 04 Nov 2026 11:09:03 +0000 Manifest this update: Wed 04 Nov 2026 11:04:03 +0000 Manifest next update: Thu 05 Nov 2026 14:15:03 +0000 Files and hashes: 1: 34352e31332e3135302e302f32342d3234203d3e2039323934.roa (hash: VpEKhz7umJbmzKVJDVzsQ68HCIsHIOJmXbqn2EpmOdc=) 2: 3139332e33352e3232362e302f32342d3234203d3e203536393632.roa (hash: m2vKqOV6PJPhocfYUg+46CWALN6X7Mk2hxAjRjOTe4Q=) 3: 34352e31332e3134382e302f32332d3233203d3e203632333837.roa (hash: mtoEJfZDnNC4yDUgLMX3zgAOQvqNn4zdImsuSsOQHFo=) 4: 34352e31332e3135312e302f32342d3234203d3e20323135373033.roa (hash: cUgxyla8jJ5OroUuNzjvJUi/GEQoiTv5Q7R/8q4Fm1g=) 5: 3134362e31392e3231362e302f32342d3234203d3e20313334363737.roa (hash: yycXD37CweWcSXqvIiIHSQ/Otu/gODYxcJV0XE2Z5fg=) 6: 3231322e31382e3131362e302f32342d3234203d3e203139343337.roa (hash: AtBxdbDSCGMlhk1DR/UjZZkrH6SVbsoHhpopN+8q4gI=) 7: 34352e36362e3134392e302f32342d3234203d3e20323132323338.roa (hash: 8iycEhNuolwACS0ekQ/GS7kI3v9bE81gf9pF0KINbWM=) 8: 322e35382e38372e302f32342d3234203d3e203631353936.roa (hash: DqkOkBW2woP2N8YHrabfFdqR1xr69WhJQBP7HpN+bxQ=) 9: 322e35382e38372e302f32342d3234203d3e20323634343039.roa (hash: iUAlfRBN5KS/1VqvPfEgfqMU6CFwcD1SlH+jygOFSU8=) 10: 3134362e31392e32322e302f32342d3234203d3e2039323934.roa (hash: e0SSS0xo7gvmOJksQW02nulgd/BU6NIi1E4uFnNkKKU=) 11: 322e35382e38342e302f32342d3234203d3e20323136323231.roa (hash: HDA68mLG6MRopGu3U6pdcLVz81PI4pAevW0Vz54vlJI=) 12: 34352e382e3137342e302f32342d3234203d3e2037353632.roa (hash: KPixncOWZtATcB6bGH2vfbq/4FYYzxp8WcVaCPh1cuU=) 13: 36322e332e31382e302f32342d3234203d3e20323136323232.roa (hash: ZeyolARCBdnsWHMtggmGQcHiKd280GfS1/j3/Bp8NX4=) 14: 3134362e31392e35332e302f32342d3234203d3e20313432313131.roa (hash: lvJfFtfLFIbur8y503IXjh3IqK3A+RUCpmg6qhQ2seM=) 15: 3137362e3132362e3130352e302f32342d3234203d3e20313432313131.roa (hash: uX4TUpc9QWawvTEY8DM2zgQlxykPZg4zImAv7y2dBbA=) 16: 3231322e32342e3132372e302f32342d3234203d3e20323035353434.roa (hash: Mxn8uOU1SwCqejZhgNenv9gthI4/mGec1zouYkB+GgA=) 17: 34352e382e3137332e302f32342d3234203d3e20313937313936.roa (hash: 3jTf9ki7y9rdeYaN5lJ4A9BLxW2mRTrdw0puXBgOnH8=) 18: 34352e382e3137322e302f32342d3234203d3e20323035373333.roa (hash: VnT6f7eup0/WhMwv7EXnvyzWk35rQ2W/LJCTBqUDvJk=) 19: 34352e31332e3134392e302f32342d3234203d3e203631333137.roa (hash: PqF1eE/0Vytv7KbARFQc98GTbtGeCuQLtbd2lwf8340=) 20: 3134362e31392e3231352e302f32342d3234203d3e20323031313331.roa (hash: u4ojb2YE51vFgMkjWXXe4FgVm1kbuMMqef5geHX+2I4=) 21: 34352e36362e3135302e302f32342d3234203d3e20333937333733.roa (hash: pqQl3e2pCUusFmVQbZmEOu3yKXeyiAgp/5DUklbgvdM=) 22: CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl (hash: QVO0G8HD0Wlpz+3QznhLDELR3T4dMohPBCWvMPvZG/g=) 23: 322e35382e38352e302f32342d3234203d3e203136323736.roa (hash: 7BCCo1S44O1GzhjGjkFaT0HearfARUjEUX+ZehyGppM=) 24: 3231322e31382e3131352e302f32342d3234203d3e20323135323234.roa (hash: QUzMWd8WT15LNmhOlxttrAzUMOiO/BrrGpvkhqR84HY=) 25: 36322e3132322e3138362e302f32342d3234203d3e20343032383636.roa (hash: Gi/MFaHQEM/Dn6eXagj6hZsyESLpGovppu9NGfn557s=) 26: 322e35382e38342e302f32342d3234203d3e20323133373931.roa (hash: GP7G3iKZS0eBPTwu6D554rUd6n3xCyAeAvzjRiXprSw=) 27: 322e35382e38362e302f32342d3234203d3e203432383331.roa (hash: 2T8d9j//ixeFGVAUX0jaZjAvKikAyceNqE4eC70GAlk=) 28: 3134362e31392e35332e302f32342d3234203d3e20313532363732.roa (hash: kMNRAnqn2ex5ku/KO9MIvv7GjcuVg1AMPoliCEdigOQ=) 29: 34352e36362e3135312e302f32342d3234203d3e20333933393432.roa (hash: oZ9oAIkx04oyjdrYnnMVN8eWxNzVYaRW8fHPenuhT5I=) 30: 3138352e3235312e32332e302f32342d3234203d3e20323030303137.roa (hash: OQXHvkMUYk1QDZhR0DoeAz0QI4bv3B7tsWGIo840D3k=) 31: 36322e332e31382e302f32342d3234203d3e20323136323931.roa (hash: 39Ecrxd/FkCAGTvy7OXLB4dzwM2Ae3nIKwg+e1og5Lc=) 32: 34352e36362e3134382e302f32342d3234203d3e20313532363036.roa (hash: EKOgOzOtGvJuJZn6XL7WpW4xB1wA+9sc389+2dbv3Ag=) 33: 3137362e3132362e3130352e302f32342d3234203d3e20313532363732.roa (hash: Aze0H1EmJtfCr2E388tFbkXXQhKMmQb0+wnPTMjfsF4=) 34: 3231332e352e3132382e302f32342d3234203d3e20313939303538.roa (hash: M/VDbD6X7IWmHx3gMi6h9miP6a1jez1ttIkf8txe0i8=) 35: 34352e382e3137352e302f32342d3234203d3e2037353632.roa (hash: O5xaR+jQW/wFf5fQ4meB7PNzpTh/uGAmEj862jE+YtE=) 36: 36322e3132322e3138352e302f32342d3234203d3e20333937343233.roa (hash: WeteA5qOGTmhboj/I1IbXUTAA6Vr+NpjXoqkx1UDFSQ=) 37: 3231322e31382e3131352e302f32342d3234203d3e20323131343834.roa (hash: C+TxIzF6QDeooBljKtU5g8jHCoJKYteQs88g8gs89EQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Nov 2026 14:15:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:38:3e:e9:25:d1:0b:b3:43:52:1c:c4:47:e6:6c:b0:02:2e:a4:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4 Validity Not Before: Nov 4 11:04:03 2026 GMT Not After : Nov 5 14:15:03 2026 GMT Subject: CN=96BA326F6C40C5E8E7A13C2E5262DA186C954667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c7:63:19:3d:4c:aa:28:7a:9f:dd:87:df:63: 5c:8b:bf:15:2f:a7:48:39:c3:f3:91:3e:4e:1b:f4: 1e:22:d1:31:20:02:af:cb:1a:d0:d6:f3:d3:8c:2a: 11:94:7b:6c:95:96:12:cd:db:02:39:8d:67:7e:93: 7d:fe:dd:8f:bf:c5:14:ee:9a:0a:2a:a1:07:79:38: a0:9e:9d:7c:cd:4b:c0:da:65:15:5c:64:5c:59:ac: b2:eb:2b:e0:89:10:1c:1e:18:b9:24:d2:c6:0b:82: cc:04:33:37:c4:07:da:5a:f1:10:84:53:4c:f7:04: d3:08:db:85:a0:3a:06:f1:c7:4c:9c:f6:26:a8:bb: f3:52:21:2c:1d:e5:24:b5:3e:b8:35:bc:de:5b:e8: 8c:a4:70:37:6f:8e:24:1a:ad:27:e0:20:55:29:c7: a1:c1:36:09:6f:2e:46:31:ff:65:07:c0:59:51:fa: 4f:a8:7c:41:60:1f:cb:4e:b3:72:b7:f9:fd:2f:ae: 8c:5e:b1:db:e9:73:0a:81:3b:fc:76:47:82:59:60: 2a:19:3b:ce:fc:6b:c0:20:61:85:55:f9:1b:98:71: 23:43:97:03:0d:08:af:69:f1:3a:48:4d:a0:53:10: 48:7d:bb:1e:58:b3:b3:61:1f:27:27:3e:9e:44:7b: 26:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:BA:32:6F:6C:40:C5:E8:E7:A1:3C:2E:52:62:DA:18:6C:95:46:67 X509v3 Authority Key Identifier: keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:2b:ac:fb:ec:c4:e3:6b:59:23:06:e9:10:5f:cb:25:f2:45: ee:51:75:15:4b:29:b1:b5:90:3e:8f:51:f2:1c:b1:dc:dd:02: 80:9b:6a:96:85:86:17:5f:90:49:6d:63:d6:e1:dd:c6:b8:d5: 11:d7:f6:a5:51:76:73:7c:e3:94:3b:ab:a9:21:44:a5:f8:2d: 6c:fe:b6:d1:d7:cf:95:6c:ca:ea:6f:f5:4d:67:a9:6b:f4:44: d7:ef:d5:df:bb:b3:8c:df:38:91:5b:8d:fe:cb:ba:a6:35:87: 85:90:ef:5e:5e:74:bf:e3:df:ba:96:6e:6b:f5:0a:d0:8c:b8: e8:34:21:d7:c1:91:82:9c:ef:f5:a0:cc:b4:7d:75:e8:d9:72: f9:ac:76:1d:0f:98:c6:80:ad:aa:95:a5:a3:58:44:2e:f9:8c: 0b:90:5b:73:5b:68:ff:78:c0:67:5f:62:1c:66:c5:af:a9:dc: 43:01:36:81:fc:77:ac:bd:c9:2e:2a:89:ac:77:16:51:34:e7: 37:a2:d6:9b:36:82:3e:6d:46:16:ff:88:41:02:08:21:38:8a: 41:af:83:72:be:3b:1c:8c:01:f7:1f:d5:e3:3a:ba:0c:04:eb: d0:f3:a5:6e:b8:90:15:89:11:55:8c:57:05:e2:fa:7b:bd:28: f5:8c:13:7d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUKjg+6SXRC7NDUhzER+ZssAIupDIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2VmY2U0NDliZWE4ZGVhZWRiMTgwNGRiYTI1YzU4NGRm NTg3M2RjNDAeFw0yNjExMDQxMTA0MDNaFw0yNjExMDUxNDE1MDNaMDMxMTAvBgNV BAMTKDk2QkEzMjZGNkM0MEM1RThFN0ExM0MyRTUyNjJEQTE4NkM5NTQ2NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0x2MZPUyqKHqf3YffY1yLvxUv p0g5w/ORPk4b9B4i0TEgAq/LGtDW89OMKhGUe2yVlhLN2wI5jWd+k33+3Y+/xRTu mgoqoQd5OKCenXzNS8DaZRVcZFxZrLLrK+CJEBweGLkk0sYLgswEMzfEB9pa8RCE U0z3BNMI24WgOgbxx0yc9iaou/NSISwd5SS1Prg1vN5b6IykcDdvjiQarSfgIFUp x6HBNglvLkYx/2UHwFlR+k+ofEFgH8tOs3K3+f0vroxesdvpcwqBO/x2R4JZYCoZ O878a8AgYYVV+RuYcSNDlwMNCK9p8TpITaBTEEh9ux5Ys7NhHycnPp5EeyapAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUlroyb2xAxejnoTwuUmLaGGyVRmcwHwYDVR0j BBgwFoAUzvzkSb6o3q7bGATbolxYTfWHPcQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDFiMzVmOGItNmY0OC00YmFkLWIxODUtNWMxZGFhOGFj ZGE5LzAvQ0VGQ0U0NDlCRUE4REVBRURCMTgwNERCQTI1QzU4NERGNTg3M0RDNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p2emtTYjZvM3E3YkdBVGJvbHhZVGZX SFBjUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kMWIzNWY4Yi02 ZjQ4LTRiYWQtYjE4NS01YzFkYWE4YWNkYTkvMC9DRUZDRTQ0OUJFQThERUFFREIx ODA0REJBMjVDNTg0REY1ODczREM0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYyus++zE42tZIwbpEF/L JfJF7lF1FUspsbWQPo9R8hyx3N0CgJtqloWGF1+QSW1j1uHdxrjVEdf2pVF2c3zj lDurqSFEpfgtbP620dfPlWzK6m/1TWepa/RE1+/V37uzjN84kVuN/su6pjWHhZDv Xl50v+PfupZua/UK0Iy46DQh18GRgpzv9aDMtH116Nly+ax2HQ+YxoCtqpWlo1hE LvmMC5Bbc1to/3jAZ19iHGbFr6ncQwE2gfx3rL3JLiqJrHcWUTTnN6LWmzaCPm1G Fv+IQQIIITiKQa+Dcr47HIwB9x/V4zq6DATr0POlbriQFYkRVYxXBeL6e70o9YwT fQ== -----END CERTIFICATE-----Generated at Thu Nov 5 02:29:57 2026 by rpki-client