$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft File: 78D65D4A22DF705BEED7B3432FBE48A356597724.mft (raw, json) Hash identifier: pULyVU0sz9XRQ1t0afaRJTtnBD8LlORQMsfSviZ2xk4= Subject key identifier: FF:3C:80:AA:96:24:FF:55:7A:31:C4:94:DF:EF:51:31:C5:0E:95:2F Authority key identifier: 78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24 Certificate issuer: /CN=78d65d4a22df705beed7b3432fbe48a356597724 Certificate serial: 67056B87F47331CCCA42D10FC34C1B492E8C2FFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft Manifest number: 0166 Signing time: Tue 12 May 2026 21:50:13 +0000 Manifest this update: Tue 12 May 2026 21:45:13 +0000 Manifest next update: Wed 13 May 2026 23:35:13 +0000 Files and hashes: 1: 323030313a346365383a3a2f32392d3239203d3e203539373136.roa (hash: CgDSfpo0IftLrA7o4eNAILZADKAHzaR3sZbqAdusdP4=) 2: 323030313a346365383a3a2f33322d3332203d3e20323530.roa (hash: zJJBd2Rg1C8mF3Brr7ZPVnCCMMdyplxley/QZ6Up3Cg=) 3: 3138352e3139302e3232382e302f32332d3234203d3e203634323637.roa (hash: 2kT+9B/A73HgiDRsVM67yiwhxTHl0CNzJa5JlwqD97w=) 4: 38302e38332e3138342e302f32322d3232203d3e203539373136.roa (hash: olHSbZHs/2t98PZjXMrMMRiZVSEe6IbSK97ATG0UHJ0=) 5: 38302e38332e3138382e302f32322d3234203d3e20323039323432.roa (hash: wR1ots0KV1BStFiGqKk2l3iZgyPIrhhcn8rzZHOEx3E=) 6: 3138352e3139302e3232382e302f32332d3234203d3e203534323532.roa (hash: sZFQBZdBZHG+LxDLkg7xE6HoKkP9FywXWpCF+8QUNCA=) 7: 78D65D4A22DF705BEED7B3432FBE48A356597724.crl (hash: A/1WTv+CItNdBFLn9nnsIKPjjQBmyZX4hKSK/8Ji63s=) 8: 3138352e3139302e3232382e302f32332d3234203d3e203332313332.roa (hash: jVr1HOM/vAQFN9/2YcEKEGs7D1zQDrdtbTvacM//wP0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:05:6b:87:f4:73:31:cc:ca:42:d1:0f:c3:4c:1b:49:2e:8c:2f:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78d65d4a22df705beed7b3432fbe48a356597724 Validity Not Before: May 12 21:45:13 2026 GMT Not After : May 13 23:35:13 2026 GMT Subject: CN=FF3C80AA9624FF557A31C494DFEF5131C50E952F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9a:64:d5:66:c7:99:24:15:fe:01:d0:a1:c9: fb:f0:a1:b7:15:0c:0a:12:e3:f9:8d:61:0d:54:1c: 50:08:5f:a8:cf:84:ad:ed:b5:5b:37:3d:a9:4a:52: 64:e1:15:30:53:e6:e1:b3:6f:0e:bb:ee:ca:02:3b: 6d:19:5d:a9:9e:4d:4e:46:27:f7:1f:6c:5a:19:67: aa:7b:ad:98:de:72:94:3f:1d:bd:72:d6:0c:7a:15: 0c:8f:b6:47:1f:7d:e6:f4:16:14:8c:78:1e:cc:a2: 1b:be:e7:22:44:87:84:6b:b9:bc:3c:0e:b2:2d:2f: 56:2b:eb:1c:62:8c:7e:a8:22:83:eb:72:5f:57:0b: 92:69:13:20:ff:9d:5f:cf:fc:fd:c8:78:11:14:70: 9e:5f:11:76:d0:57:ba:1d:22:a4:89:08:41:27:69: be:3a:5d:7e:78:06:98:59:bc:ef:ad:57:61:7a:8b: aa:80:fd:c1:cc:af:56:a3:0d:d7:6f:92:47:09:16: 28:bc:0f:cd:bd:39:ef:3d:27:33:6a:99:fb:75:f5: 9e:ab:00:7d:09:a2:6f:52:9f:52:97:37:ab:c9:b9: d0:b7:79:84:ed:f8:bd:17:61:f3:75:99:95:c8:2e: de:d4:f8:95:3a:e1:50:1a:29:e7:a6:1f:7b:b4:5c: df:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:3C:80:AA:96:24:FF:55:7A:31:C4:94:DF:EF:51:31:C5:0E:95:2F X509v3 Authority Key Identifier: keyid:78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:74:58:81:ee:23:77:35:ed:e8:8c:cb:4f:5f:0c:82:5b:4f: 21:e4:51:1f:2c:b5:eb:ea:92:49:b9:33:be:33:2a:34:ee:3e: 14:38:cb:3f:44:46:6e:57:99:13:c6:4a:91:ce:16:c7:7e:c6: cc:d9:ce:fc:f6:e2:03:8e:e5:6d:04:4d:85:2b:a8:d9:95:6b: 5a:a1:a6:6d:c4:3b:48:e3:fa:e9:96:3a:af:97:e8:68:16:18: 71:3a:13:b3:2e:3c:06:e5:3b:0c:50:7a:0a:40:35:50:5d:8d: e0:d8:58:0c:aa:7e:52:ac:45:39:fa:28:1b:8c:e4:77:11:dc: c3:cf:0c:25:d6:27:68:14:f2:69:b9:f7:eb:ff:81:0d:0c:fa: 9d:92:be:07:37:78:74:7e:35:33:5c:bf:8f:0c:92:67:3d:34: a1:49:6e:52:25:a2:71:18:e0:b1:04:34:ba:2d:35:b0:4b:3b: 1c:d8:db:c1:42:7e:66:6c:c0:75:b5:1b:1d:6b:94:70:7f:4c: 48:62:ec:c1:20:b1:de:a8:70:54:34:12:30:27:db:d6:a5:66: 94:57:e6:f7:5e:9a:53:ac:fe:3d:56:55:9d:49:cc:95:de:47: 66:01:c0:3e:ea:dd:69:52:62:cb:bb:2b:f1:a3:93:54:47:03: 5c:67:f5:84 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUZwVrh/RzMczKQtEPw0wbSS6ML/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhkNjVkNGEyMmRmNzA1YmVlZDdiMzQzMmZiZTQ4YTM1 NjU5NzcyNDAeFw0yNjA1MTIyMTQ1MTNaFw0yNjA1MTMyMzM1MTNaMDMxMTAvBgNV BAMTKEZGM0M4MEFBOTYyNEZGNTU3QTMxQzQ5NERGRUY1MTMxQzUwRTk1MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVmmTVZseZJBX+AdChyfvwobcV DAoS4/mNYQ1UHFAIX6jPhK3ttVs3PalKUmThFTBT5uGzbw677soCO20ZXameTU5G J/cfbFoZZ6p7rZjecpQ/Hb1y1gx6FQyPtkcffeb0FhSMeB7Mohu+5yJEh4Rrubw8 DrItL1Yr6xxijH6oIoPrcl9XC5JpEyD/nV/P/P3IeBEUcJ5fEXbQV7odIqSJCEEn ab46XX54BphZvO+tV2F6i6qA/cHMr1ajDddvkkcJFii8D829Oe89JzNqmft19Z6r AH0Jom9Sn1KXN6vJudC3eYTt+L0XYfN1mZXILt7U+JU64VAaKeemH3u0XN//AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU/zyAqpYk/1V6McSU3+9RMcUOlS8wHwYDVR0j BBgwFoAUeNZdSiLfcFvu17NDL75Io1ZZdyQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODkyNWFkMTUtYWYwYi00NWNkLWI4ODMtMWEwNThmYTBl YmExLzAvNzhENjVENEEyMkRGNzA1QkVFRDdCMzQzMkZCRTQ4QTM1NjU5NzcyNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VOWmRTaUxmY0Z2dTE3TkRMNzVJbzFa WmR5US5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI1YWQxNS1h ZjBiLTQ1Y2QtYjg4My0xYTA1OGZhMGViYTEvMC83OEQ2NUQ0QTIyREY3MDVCRUVE N0IzNDMyRkJFNDhBMzU2NTk3NzI0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApXRYge4jdzXt6IzLT18M gltPIeRRHyy16+qSSbkzvjMqNO4+FDjLP0RGbleZE8ZKkc4Wx37GzNnO/PbiA47l bQRNhSuo2ZVrWqGmbcQ7SOP66ZY6r5foaBYYcToTsy48BuU7DFB6CkA1UF2N4NhY DKp+UqxFOfooG4zkdxHcw88MJdYnaBTyabn36/+BDQz6nZK+Bzd4dH41M1y/jwyS Zz00oUluUiWicRjgsQQ0ui01sEs7HNjbwUJ+ZmzAdbUbHWuUcH9MSGLswSCx3qhw VDQSMCfb1qVmlFfm916aU6z+PVZVnUnMld5HZgHAPurdaVJiy7sr8aOTVEcDXGf1 hA== -----END CERTIFICATE-----Generated at Wed May 13 06:29:31 2026 by rpki-client