$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft File: 78D65D4A22DF705BEED7B3432FBE48A356597724.mft (raw, json) Hash identifier: eD0ezdk39UgjZaiDLaQaySqRFGufW6b1XQVt6iSev94= Subject key identifier: 58:33:B0:ED:66:67:25:42:3C:95:9D:25:8D:74:9D:05:B0:9F:BC:54 Authority key identifier: 78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24 Certificate issuer: /CN=78d65d4a22df705beed7b3432fbe48a356597724 Certificate serial: 2759ABA0245ED9E59BF7B7DD14192C8B3EED76DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft Manifest number: 021A Signing time: Thu 24 Sep 2026 01:40:53 +0000 Manifest this update: Thu 24 Sep 2026 01:35:53 +0000 Manifest next update: Fri 25 Sep 2026 05:25:53 +0000 Files and hashes: 1: 78D65D4A22DF705BEED7B3432FBE48A356597724.crl (hash: ae6bW53Pfr8z+sG1rbC68VSJ685cKJpPpvzU1S7pNr4=) 2: 38302e38332e3138382e302f32322d3234203d3e20323039323432.roa (hash: wR1ots0KV1BStFiGqKk2l3iZgyPIrhhcn8rzZHOEx3E=) 3: 323030313a346365383a3a2f33322d3332203d3e20323530.roa (hash: S6zvsTSnybC5v19XM+wBc97Rf5SG4IRKmCl8ae093X0=) 4: 3138352e3139302e3232382e302f32332d3234203d3e203230343733.roa (hash: sSjQo0gwcaB1VwvZuBlzZHXLcXQx3UMY0dQE8gGvjAA=) 5: 38302e38332e3138342e302f32322d3232203d3e203539373136.roa (hash: KSRZt1DwB9bxNmKSPK6BxOjex5dyK6FY9yIPPnRxY/U=) 6: 323030313a346365383a3a2f32392d3239203d3e203539373136.roa (hash: kWLECgVV1VftZUfr9I58+oOD7uIghr725IwWATJehFU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 05:25:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:59:ab:a0:24:5e:d9:e5:9b:f7:b7:dd:14:19:2c:8b:3e:ed:76:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78d65d4a22df705beed7b3432fbe48a356597724 Validity Not Before: Sep 24 01:35:53 2026 GMT Not After : Sep 25 05:25:53 2026 GMT Subject: CN=5833B0ED666725423C959D258D749D05B09FBC54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:47:f8:59:05:47:ef:ae:78:c6:ce:2d:9e:a5: 36:cb:bf:f4:df:1f:63:63:d8:a8:86:43:9a:e4:fe: 11:58:68:60:8b:91:05:63:e3:4d:10:bb:ec:31:dd: c1:77:f3:d6:37:30:b3:69:cf:17:5f:43:af:36:37: dd:e6:5b:24:02:31:50:4c:6e:86:90:c1:b5:b1:47: aa:91:2c:45:07:c7:1e:29:f7:2a:d5:f7:be:af:5b: c0:ef:c9:96:e9:8a:b4:fb:af:ab:d8:43:84:50:a0: 30:80:29:6b:1b:4d:55:76:16:6b:59:5d:8c:12:69: 77:92:66:20:d9:a1:fc:9c:62:1f:b9:77:97:af:2c: 18:40:82:54:7e:e1:44:c3:05:40:3b:04:be:19:bd: bf:53:f6:8e:3d:66:ae:9d:04:e3:f8:b8:2b:8c:82: 8d:92:d0:1b:73:b2:9d:48:3d:22:f2:11:59:f7:0b: e0:21:4b:0d:aa:a0:22:4b:c0:c4:7e:ff:bf:b2:0e: f7:88:58:b1:8a:03:51:c4:21:4e:57:cc:bf:38:b2: 75:60:05:37:8e:f6:d7:a0:95:3b:1a:78:a4:e8:7b: 3a:3d:31:c1:77:7c:dd:c5:83:3f:c9:a3:2d:22:ed: 22:bb:4d:ae:7f:44:ab:ab:c7:a2:ed:ec:c5:fe:cf: 4c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:33:B0:ED:66:67:25:42:3C:95:9D:25:8D:74:9D:05:B0:9F:BC:54 X509v3 Authority Key Identifier: keyid:78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:dd:67:53:dd:25:e7:17:3c:28:99:ae:df:7f:28:f0:ac:5e: bc:7f:2a:b2:6f:5b:f0:5b:7e:8e:6b:d0:6e:51:9c:ce:89:3a: 23:ce:16:c6:15:2b:08:33:7a:f9:21:ce:59:cf:8c:40:66:aa: 23:04:24:94:4e:0c:c0:dc:37:a0:8d:68:35:eb:71:0e:9d:d5: c1:f3:e9:ab:2d:0b:2e:5d:7d:08:0e:46:50:7f:a7:9f:25:9b: 3d:0b:85:45:d1:b9:ed:2a:bc:01:a6:0e:1b:64:45:7f:d0:94: cf:78:d2:f1:8d:86:ca:cb:a2:a5:c2:8a:a7:93:05:18:18:55: e9:8c:9c:ae:51:3a:83:59:c8:b2:2e:26:f5:10:3f:e6:f1:b6: 18:3d:c5:5e:af:e0:c5:d0:ea:00:54:0a:53:d4:2d:c9:84:d0: 84:e2:1b:6f:77:5f:78:cc:d8:8f:01:1e:0c:d5:e4:d5:ea:94: f0:64:b5:15:ea:f6:4b:e6:48:53:7f:11:43:ee:b9:a9:f0:6c: b9:c1:f5:bd:5a:58:c8:9f:52:7a:48:79:a6:be:2a:03:ad:cf: 13:8b:f7:d0:85:b0:66:35:18:20:69:b2:8b:16:1e:e4:0b:2b: 7b:f6:67:3a:e9:45:9e:bf:d9:0c:8c:de:21:70:e2:ad:bb:05: e8:c2:e5:58 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUJ1mroCRe2eWb97fdFBksiz7tdt4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhkNjVkNGEyMmRmNzA1YmVlZDdiMzQzMmZiZTQ4YTM1 NjU5NzcyNDAeFw0yNjA5MjQwMTM1NTNaFw0yNjA5MjUwNTI1NTNaMDMxMTAvBgNV BAMTKDU4MzNCMEVENjY2NzI1NDIzQzk1OUQyNThENzQ5RDA1QjA5RkJDNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDER/hZBUfvrnjGzi2epTbLv/Tf H2Nj2KiGQ5rk/hFYaGCLkQVj400Qu+wx3cF389Y3MLNpzxdfQ682N93mWyQCMVBM boaQwbWxR6qRLEUHxx4p9yrV976vW8DvyZbpirT7r6vYQ4RQoDCAKWsbTVV2FmtZ XYwSaXeSZiDZofycYh+5d5evLBhAglR+4UTDBUA7BL4Zvb9T9o49Zq6dBOP4uCuM go2S0Btzsp1IPSLyEVn3C+AhSw2qoCJLwMR+/7+yDveIWLGKA1HEIU5XzL84snVg BTeO9teglTsaeKToezo9McF3fN3Fgz/Joy0i7SK7Ta5/RKurx6Lt7MX+z0w/AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUWDOw7WZnJUI8lZ0ljXSdBbCfvFQwHwYDVR0j BBgwFoAUeNZdSiLfcFvu17NDL75Io1ZZdyQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODkyNWFkMTUtYWYwYi00NWNkLWI4ODMtMWEwNThmYTBl YmExLzAvNzhENjVENEEyMkRGNzA1QkVFRDdCMzQzMkZCRTQ4QTM1NjU5NzcyNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VOWmRTaUxmY0Z2dTE3TkRMNzVJbzFa WmR5US5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI1YWQxNS1h ZjBiLTQ1Y2QtYjg4My0xYTA1OGZhMGViYTEvMC83OEQ2NUQ0QTIyREY3MDVCRUVE N0IzNDMyRkJFNDhBMzU2NTk3NzI0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASt1nU90l5xc8KJmu338o 8KxevH8qsm9b8Ft+jmvQblGczok6I84WxhUrCDN6+SHOWc+MQGaqIwQklE4MwNw3 oI1oNetxDp3VwfPpqy0LLl19CA5GUH+nnyWbPQuFRdG57Sq8AaYOG2RFf9CUz3jS 8Y2GysuipcKKp5MFGBhV6YycrlE6g1nIsi4m9RA/5vG2GD3FXq/gxdDqAFQKU9Qt yYTQhOIbb3dfeMzYjwEeDNXk1eqU8GS1Fer2S+ZIU38RQ+65qfBsucH1vVpYyJ9S ekh5pr4qA63PE4v30IWwZjUYIGmyixYe5Asre/ZnOulFnr/ZDIzeIXDirbsF6MLl WA== -----END CERTIFICATE-----Generated at Thu Sep 24 10:55:26 2026 by rpki-client