$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft File: CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft (raw, json) Hash identifier: +8LwB1JRgYhDrlItPg5h8ByEOlUXxsH9OR8yDc39gws= Subject key identifier: F9:8C:47:6D:E7:5A:B8:5F:83:B9:60:88:71:7A:76:54:00:29:62:A0 Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4 Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4 Certificate serial: 0659BEEDEC353C3D72C4E54001A42A3D3D4E243F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft Manifest number: 07B7 Signing time: Mon 09 Nov 2026 02:09:31 +0000 Manifest this update: Mon 09 Nov 2026 02:04:31 +0000 Manifest next update: Tue 10 Nov 2026 04:50:31 +0000 Files and hashes: 1: 3134362e31392e35332e302f32342d3234203d3e20313432313131.roa (hash: lvJfFtfLFIbur8y503IXjh3IqK3A+RUCpmg6qhQ2seM=) 2: 34352e31332e3135312e302f32342d3234203d3e20323135373033.roa (hash: cUgxyla8jJ5OroUuNzjvJUi/GEQoiTv5Q7R/8q4Fm1g=) 3: 322e35382e38362e302f32342d3234203d3e203432383331.roa (hash: 2T8d9j//ixeFGVAUX0jaZjAvKikAyceNqE4eC70GAlk=) 4: 3231332e352e3132382e302f32342d3234203d3e20313939303538.roa (hash: M/VDbD6X7IWmHx3gMi6h9miP6a1jez1ttIkf8txe0i8=) 5: 3134362e31392e32322e302f32342d3234203d3e2039323934.roa (hash: e0SSS0xo7gvmOJksQW02nulgd/BU6NIi1E4uFnNkKKU=) 6: 3137362e3132362e3130352e302f32342d3234203d3e20313532363732.roa (hash: Aze0H1EmJtfCr2E388tFbkXXQhKMmQb0+wnPTMjfsF4=) 7: 34352e382e3137352e302f32342d3234203d3e2037353632.roa (hash: O5xaR+jQW/wFf5fQ4meB7PNzpTh/uGAmEj862jE+YtE=) 8: 3231322e31382e3131352e302f32342d3234203d3e20323135323234.roa (hash: QUzMWd8WT15LNmhOlxttrAzUMOiO/BrrGpvkhqR84HY=) 9: 34352e382e3137322e302f32342d3234203d3e20323035373333.roa (hash: VnT6f7eup0/WhMwv7EXnvyzWk35rQ2W/LJCTBqUDvJk=) 10: 36322e3132322e3138352e302f32342d3234203d3e20333937343233.roa (hash: WeteA5qOGTmhboj/I1IbXUTAA6Vr+NpjXoqkx1UDFSQ=) 11: 322e35382e38352e302f32342d3234203d3e203136323736.roa (hash: 7BCCo1S44O1GzhjGjkFaT0HearfARUjEUX+ZehyGppM=) 12: 34352e382e3137342e302f32342d3234203d3e2037353632.roa (hash: KPixncOWZtATcB6bGH2vfbq/4FYYzxp8WcVaCPh1cuU=) 13: 3231322e31382e3131352e302f32342d3234203d3e20323131343834.roa (hash: C+TxIzF6QDeooBljKtU5g8jHCoJKYteQs88g8gs89EQ=) 14: 3134362e31392e3231352e302f32342d3234203d3e20323031313331.roa (hash: u4ojb2YE51vFgMkjWXXe4FgVm1kbuMMqef5geHX+2I4=) 15: 3134362e31392e35332e302f32342d3234203d3e20313532363732.roa (hash: kMNRAnqn2ex5ku/KO9MIvv7GjcuVg1AMPoliCEdigOQ=) 16: 34352e36362e3135312e302f32342d3234203d3e20333933393432.roa (hash: oZ9oAIkx04oyjdrYnnMVN8eWxNzVYaRW8fHPenuhT5I=) 17: 3231322e31382e3131362e302f32342d3234203d3e203139343337.roa (hash: AtBxdbDSCGMlhk1DR/UjZZkrH6SVbsoHhpopN+8q4gI=) 18: 34352e36362e3134392e302f32342d3234203d3e20323132323338.roa (hash: 8iycEhNuolwACS0ekQ/GS7kI3v9bE81gf9pF0KINbWM=) 19: 34352e36362e3135302e302f32342d3234203d3e20333937333733.roa (hash: pqQl3e2pCUusFmVQbZmEOu3yKXeyiAgp/5DUklbgvdM=) 20: 34352e31332e3135302e302f32342d3234203d3e2039323934.roa (hash: VpEKhz7umJbmzKVJDVzsQ68HCIsHIOJmXbqn2EpmOdc=) 21: CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl (hash: 7qQXZKUrqaimNHlEsWV6X82buuVy7Q5o/HOkoCC4p1Q=) 22: 322e35382e38342e302f32342d3234203d3e20323133373931.roa (hash: GP7G3iKZS0eBPTwu6D554rUd6n3xCyAeAvzjRiXprSw=) 23: 36322e3132322e3138362e302f32342d3234203d3e20343032383636.roa (hash: Gi/MFaHQEM/Dn6eXagj6hZsyESLpGovppu9NGfn557s=) 24: 36322e332e31382e302f32342d3234203d3e20323136323232.roa (hash: ZeyolARCBdnsWHMtggmGQcHiKd280GfS1/j3/Bp8NX4=) 25: 3138352e3235312e32332e302f32342d3234203d3e20323030303137.roa (hash: OQXHvkMUYk1QDZhR0DoeAz0QI4bv3B7tsWGIo840D3k=) 26: 322e35382e38342e302f32342d3234203d3e20323136323231.roa (hash: HDA68mLG6MRopGu3U6pdcLVz81PI4pAevW0Vz54vlJI=) 27: 322e35382e38372e302f32342d3234203d3e20323634343039.roa (hash: iUAlfRBN5KS/1VqvPfEgfqMU6CFwcD1SlH+jygOFSU8=) 28: 36322e332e31382e302f32342d3234203d3e20323136323931.roa (hash: 39Ecrxd/FkCAGTvy7OXLB4dzwM2Ae3nIKwg+e1og5Lc=) 29: 3231322e32342e3132372e302f32342d3234203d3e20323035353434.roa (hash: Mxn8uOU1SwCqejZhgNenv9gthI4/mGec1zouYkB+GgA=) 30: 322e35382e38372e302f32342d3234203d3e203631353936.roa (hash: DqkOkBW2woP2N8YHrabfFdqR1xr69WhJQBP7HpN+bxQ=) 31: 34352e36362e3134382e302f32342d3234203d3e20313532363036.roa (hash: EKOgOzOtGvJuJZn6XL7WpW4xB1wA+9sc389+2dbv3Ag=) 32: 3137362e3132362e3130352e302f32342d3234203d3e20313432313131.roa (hash: uX4TUpc9QWawvTEY8DM2zgQlxykPZg4zImAv7y2dBbA=) 33: 34352e31332e3134392e302f32342d3234203d3e203631333137.roa (hash: PqF1eE/0Vytv7KbARFQc98GTbtGeCuQLtbd2lwf8340=) 34: 3134362e31392e3231362e302f32342d3234203d3e20313334363737.roa (hash: yycXD37CweWcSXqvIiIHSQ/Otu/gODYxcJV0XE2Z5fg=) 35: 34352e31332e3134382e302f32332d3233203d3e203632333837.roa (hash: mtoEJfZDnNC4yDUgLMX3zgAOQvqNn4zdImsuSsOQHFo=) 36: 34352e382e3137332e302f32342d3234203d3e20313937313936.roa (hash: 3jTf9ki7y9rdeYaN5lJ4A9BLxW2mRTrdw0puXBgOnH8=) 37: 3139332e33352e3232362e302f32342d3234203d3e203536393632.roa (hash: m2vKqOV6PJPhocfYUg+46CWALN6X7Mk2hxAjRjOTe4Q=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Nov 2026 02:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:59:be:ed:ec:35:3c:3d:72:c4:e5:40:01:a4:2a:3d:3d:4e:24:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4 Validity Not Before: Nov 9 02:04:31 2026 GMT Not After : Nov 10 04:50:31 2026 GMT Subject: CN=F98C476DE75AB85F83B96088717A7654002962A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:33:f4:b5:82:62:26:ca:67:ed:8e:1d:e3:86: 16:7f:02:56:4b:4e:32:fc:05:ca:ba:03:1a:55:a2: 82:78:a0:17:b6:79:b9:bd:93:de:21:e5:a7:e4:0a: b4:44:67:7a:b4:38:61:ec:0a:82:4c:39:f1:3e:1c: 79:3b:83:4b:34:a3:01:bc:c4:ae:1a:36:60:01:ca: 43:ee:a0:c2:09:06:b5:42:91:96:f3:a4:21:65:84: 77:b7:0d:11:f1:ab:d1:62:1d:e1:90:52:80:2f:88: 57:99:a9:dd:ae:9e:59:82:6c:75:15:92:bf:0f:57: 93:cc:74:06:9a:0b:51:b4:95:73:bd:94:28:50:c8: 5f:f3:41:df:6e:e7:6e:cf:ce:89:22:35:29:98:e8: c3:37:07:72:c2:79:9a:65:54:ef:8a:16:41:25:c6: fd:48:13:74:43:02:66:40:d7:c3:af:fa:80:38:e3: 20:31:60:8d:a8:82:f9:ba:69:3b:3e:57:0d:b9:31: d7:83:dd:96:98:81:af:e4:47:d9:c4:73:52:32:2b: f6:f1:62:65:f8:05:1f:a5:fd:84:ec:f1:17:ea:86: 39:72:2c:ec:64:b2:e2:cd:1e:4f:c0:50:0b:0a:8e: af:10:c0:0b:c2:96:32:38:5a:b6:03:ca:dc:06:c2: a6:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:8C:47:6D:E7:5A:B8:5F:83:B9:60:88:71:7A:76:54:00:29:62:A0 X509v3 Authority Key Identifier: keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:96:c2:f8:87:f5:65:27:a5:98:8a:57:ba:08:a8:a9:f5:16: 3c:6f:37:eb:e6:13:94:bd:55:56:bf:d6:73:4b:8d:56:d3:46: 79:48:ca:07:3e:f6:b7:70:ac:d5:08:22:28:91:1a:c7:d3:94: 8a:92:a7:e6:d1:73:23:81:9e:69:0a:c9:f8:40:34:ea:04:9a: 24:23:3f:20:7c:13:73:38:43:fc:52:1c:4b:f8:f6:87:b4:da: cf:43:71:9f:c0:b2:19:37:84:8e:37:d9:dc:21:3f:a0:63:4b: 0a:bb:62:ba:ef:90:03:e7:37:77:ec:24:c7:ca:d4:71:77:5a: 16:f7:45:e7:a1:91:3f:46:9f:72:e7:6d:f1:02:20:f4:64:f4: 17:00:35:79:ac:65:50:99:5e:43:78:40:56:4d:4d:28:1b:97: 20:f9:31:9c:bb:9b:96:75:02:64:6f:9f:1f:5e:49:98:dc:63: 4e:af:29:06:d9:89:3c:58:8b:d8:16:14:a5:bd:1d:1b:25:3d: 8b:f7:01:4d:f3:cb:7d:74:6c:61:21:17:ca:87:f8:5d:6d:04: 7d:00:8b:5f:f6:15:a1:af:67:0a:ca:46:11:05:d9:b6:5b:c1: fb:5f:17:e3:84:47:e2:71:ed:ae:65:88:a5:5a:30:0d:c7:6b: b3:c4:2d:e1 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUBlm+7ew1PD1yxOVAAaQqPT1OJD8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2VmY2U0NDliZWE4ZGVhZWRiMTgwNGRiYTI1YzU4NGRm NTg3M2RjNDAeFw0yNjExMDkwMjA0MzFaFw0yNjExMTAwNDUwMzFaMDMxMTAvBgNV BAMTKEY5OEM0NzZERTc1QUI4NUY4M0I5NjA4ODcxN0E3NjU0MDAyOTYyQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChM/S1gmImymftjh3jhhZ/AlZL TjL8Bcq6AxpVooJ4oBe2ebm9k94h5afkCrREZ3q0OGHsCoJMOfE+HHk7g0s0owG8 xK4aNmABykPuoMIJBrVCkZbzpCFlhHe3DRHxq9FiHeGQUoAviFeZqd2unlmCbHUV kr8PV5PMdAaaC1G0lXO9lChQyF/zQd9u527PzokiNSmY6MM3B3LCeZplVO+KFkEl xv1IE3RDAmZA18Ov+oA44yAxYI2ogvm6aTs+Vw25MdeD3ZaYga/kR9nEc1IyK/bx YmX4BR+l/YTs8RfqhjlyLOxksuLNHk/AUAsKjq8QwAvCljI4WrYDytwGwqZbAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU+YxHbedauF+DuWCIcXp2VAApYqAwHwYDVR0j BBgwFoAUzvzkSb6o3q7bGATbolxYTfWHPcQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDFiMzVmOGItNmY0OC00YmFkLWIxODUtNWMxZGFhOGFj ZGE5LzAvQ0VGQ0U0NDlCRUE4REVBRURCMTgwNERCQTI1QzU4NERGNTg3M0RDNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p2emtTYjZvM3E3YkdBVGJvbHhZVGZX SFBjUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kMWIzNWY4Yi02 ZjQ4LTRiYWQtYjE4NS01YzFkYWE4YWNkYTkvMC9DRUZDRTQ0OUJFQThERUFFREIx ODA0REJBMjVDNTg0REY1ODczREM0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGJbC+If1ZSelmIpXugio qfUWPG836+YTlL1VVr/Wc0uNVtNGeUjKBz72t3Cs1QgiKJEax9OUipKn5tFzI4Ge aQrJ+EA06gSaJCM/IHwTczhD/FIcS/j2h7Taz0Nxn8CyGTeEjjfZ3CE/oGNLCrti uu+QA+c3d+wkx8rUcXdaFvdF56GRP0afcudt8QIg9GT0FwA1eaxlUJleQ3hAVk1N KBuXIPkxnLublnUCZG+fH15JmNxjTq8pBtmJPFiL2BYUpb0dGyU9i/cBTfPLfXRs YSEXyof4XW0EfQCLX/YVoa9nCspGEQXZtlvB+18X44RH4nHtrmWIpVowDcdrs8Qt 4Q== -----END CERTIFICATE-----Generated at Mon Nov 9 09:43:23 2026 by rpki-client