$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft File: 78D65D4A22DF705BEED7B3432FBE48A356597724.mft (raw, json) Hash identifier: JjHNJClWXEtan414zccroOSO5lctTHNRXn5q39pE470= Subject key identifier: 9A:5B:5B:D4:33:48:F9:C3:98:7B:EE:3E:BD:A5:B9:59:3D:06:04:AD Authority key identifier: 78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24 Certificate issuer: /CN=78d65d4a22df705beed7b3432fbe48a356597724 Certificate serial: 6485A3C58DA1C479F892AB4D0415DBC748A2DBCC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft Manifest number: 0125 Signing time: Wed 25 Mar 2026 15:10:53 +0000 Manifest this update: Wed 25 Mar 2026 15:05:53 +0000 Manifest next update: Thu 26 Mar 2026 18:27:53 +0000 Files and hashes: 1: 38302e38332e3138382e302f32322d3234203d3e20323039323432.roa (hash: wR1ots0KV1BStFiGqKk2l3iZgyPIrhhcn8rzZHOEx3E=) 2: 38302e38332e3138342e302f32322d3232203d3e203539373136.roa (hash: olHSbZHs/2t98PZjXMrMMRiZVSEe6IbSK97ATG0UHJ0=) 3: 3138352e3139302e3232382e302f32332d3234203d3e203534323532.roa (hash: sZFQBZdBZHG+LxDLkg7xE6HoKkP9FywXWpCF+8QUNCA=) 4: 323030313a346365383a3a2f33322d3332203d3e20323530.roa (hash: zJJBd2Rg1C8mF3Brr7ZPVnCCMMdyplxley/QZ6Up3Cg=) 5: 38302e38332e3138382e302f32322d3234203d3e203133333335.roa (hash: ov3ZqP6jiN7cSR/XwriGpMFcKSiH0bdEErZFAioDoh0=) 6: 3138352e3139302e3232382e302f32332d3234203d3e203332313332.roa (hash: jVr1HOM/vAQFN9/2YcEKEGs7D1zQDrdtbTvacM//wP0=) 7: 323030313a346365383a3a2f32392d3239203d3e203539373136.roa (hash: CgDSfpo0IftLrA7o4eNAILZADKAHzaR3sZbqAdusdP4=) 8: 78D65D4A22DF705BEED7B3432FBE48A356597724.crl (hash: nzwqvAJilylFXiYA7pUoW98K2if3KxMkapF5VJ/9IoY=) 9: 3138352e36392e322e302f32342d3234203d3e203539373136.roa (hash: C4vtZUJ4sSvWQ2xt2gUpLOR/9kh093F6GFa+cSWJX6U=) 10: 3138352e3139302e3232382e302f32332d3234203d3e203634323637.roa (hash: 2kT+9B/A73HgiDRsVM67yiwhxTHl0CNzJa5JlwqD97w=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 18:27:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:85:a3:c5:8d:a1:c4:79:f8:92:ab:4d:04:15:db:c7:48:a2:db:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78d65d4a22df705beed7b3432fbe48a356597724 Validity Not Before: Mar 25 15:05:53 2026 GMT Not After : Mar 26 18:27:53 2026 GMT Subject: CN=9A5B5BD43348F9C3987BEE3EBDA5B9593D0604AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:07:6c:e6:37:a1:81:2f:98:11:41:12:ca:a3: 3b:b4:a9:e8:b0:d0:76:7f:64:38:02:f4:cb:2c:06: 1c:99:f1:47:bc:b0:60:d5:e0:8e:c5:ae:89:73:ee: 82:5d:8a:6b:94:91:33:1d:74:16:4b:28:a7:99:e4: 8c:b6:1b:ed:1a:d1:0e:84:56:8d:6e:04:38:5c:0b: 0e:89:e5:2c:e9:92:4f:80:bb:1f:8d:a0:14:27:f6: 96:1a:f8:eb:2e:80:cb:3d:30:37:a6:ad:7e:ae:c6: 53:b4:8f:93:ab:39:c3:76:17:42:70:a0:71:62:46: d9:fb:88:5a:18:f1:e0:84:ad:8d:de:be:0b:23:cd: 4d:2d:2b:06:ce:bd:43:97:5e:0d:2f:c1:9c:d2:8b: de:33:05:f1:17:89:a0:d8:5d:1a:d5:bf:19:17:31: 69:76:f0:21:ed:1b:59:90:51:20:38:c3:87:0f:1f: 65:da:10:03:ed:3b:bc:3e:01:b6:84:ea:b2:49:ec: db:33:7f:02:1d:a1:61:13:9a:d7:f3:c8:b5:37:2a: b4:a6:a4:13:fc:3b:c0:7d:eb:53:5d:77:13:a2:d3: 4a:91:28:d3:bf:39:c3:96:18:04:23:3c:1c:86:c1: 2a:4e:8e:85:0d:0f:b4:c3:11:95:4a:eb:3c:cb:81: 09:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:5B:5B:D4:33:48:F9:C3:98:7B:EE:3E:BD:A5:B9:59:3D:06:04:AD X509v3 Authority Key Identifier: keyid:78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:5f:32:04:09:2e:3d:bd:65:80:74:b7:56:27:2a:fe:d1:6a: d7:24:07:93:f0:d9:34:42:e7:55:0c:44:b0:3d:1a:18:ab:f2: e4:7e:eb:bf:93:9a:d2:f5:01:3b:81:5e:2d:58:bf:4b:e9:9f: 0c:2a:f2:81:22:75:57:20:86:62:04:17:c4:3e:58:f6:0f:08: 3f:e1:c2:5b:07:11:f3:16:87:d3:6f:d4:74:fc:81:ea:40:09: cd:4a:e1:ab:a7:e1:0c:b7:df:3f:32:c0:d4:da:50:d6:4c:7a: 7b:1b:32:6c:ad:74:c9:14:3b:db:ce:b5:27:77:ca:b8:65:00: 3d:22:fd:07:59:90:0e:7e:c2:da:ea:bc:f7:b6:7c:8e:7d:57: a4:25:f8:53:33:f2:c5:42:7c:3c:83:39:4f:22:4f:5b:41:51: 6e:92:af:55:5e:5d:fb:37:72:65:56:54:ae:84:f6:6e:ea:9a: 09:45:7e:d0:90:1c:e2:84:6b:05:7f:c7:40:41:c1:35:42:2c: 9f:d0:01:45:2f:1f:a1:8a:37:28:06:21:c1:ed:8d:fa:6e:ec: 25:ff:ca:2c:0e:da:fe:90:8c:10:bc:f4:c1:e6:9e:7d:7d:3b: 8e:da:af:92:e8:4f:f2:6b:f1:d1:ae:59:1e:4c:94:c0:65:e8: db:81:61:e2 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUZIWjxY2hxHn4kqtNBBXbx0ii28wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhkNjVkNGEyMmRmNzA1YmVlZDdiMzQzMmZiZTQ4YTM1 NjU5NzcyNDAeFw0yNjAzMjUxNTA1NTNaFw0yNjAzMjYxODI3NTNaMDMxMTAvBgNV BAMTKDlBNUI1QkQ0MzM0OEY5QzM5ODdCRUUzRUJEQTVCOTU5M0QwNjA0QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoB2zmN6GBL5gRQRLKozu0qeiw 0HZ/ZDgC9MssBhyZ8Ue8sGDV4I7Frolz7oJdimuUkTMddBZLKKeZ5Iy2G+0a0Q6E Vo1uBDhcCw6J5Szpkk+Aux+NoBQn9pYa+OsugMs9MDemrX6uxlO0j5OrOcN2F0Jw oHFiRtn7iFoY8eCErY3evgsjzU0tKwbOvUOXXg0vwZzSi94zBfEXiaDYXRrVvxkX MWl28CHtG1mQUSA4w4cPH2XaEAPtO7w+AbaE6rJJ7NszfwIdoWETmtfzyLU3KrSm pBP8O8B961NddxOi00qRKNO/OcOWGAQjPByGwSpOjoUND7TDEZVK6zzLgQlnAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUmltb1DNI+cOYe+4+vaW5WT0GBK0wHwYDVR0j BBgwFoAUeNZdSiLfcFvu17NDL75Io1ZZdyQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODkyNWFkMTUtYWYwYi00NWNkLWI4ODMtMWEwNThmYTBl YmExLzAvNzhENjVENEEyMkRGNzA1QkVFRDdCMzQzMkZCRTQ4QTM1NjU5NzcyNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VOWmRTaUxmY0Z2dTE3TkRMNzVJbzFa WmR5US5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI1YWQxNS1h ZjBiLTQ1Y2QtYjg4My0xYTA1OGZhMGViYTEvMC83OEQ2NUQ0QTIyREY3MDVCRUVE N0IzNDMyRkJFNDhBMzU2NTk3NzI0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl18yBAkuPb1lgHS3Vicq /tFq1yQHk/DZNELnVQxEsD0aGKvy5H7rv5Oa0vUBO4FeLVi/S+mfDCrygSJ1VyCG YgQXxD5Y9g8IP+HCWwcR8xaH02/UdPyB6kAJzUrhq6fhDLffPzLA1NpQ1kx6exsy bK10yRQ72861J3fKuGUAPSL9B1mQDn7C2uq897Z8jn1XpCX4UzPyxUJ8PIM5TyJP W0FRbpKvVV5d+zdyZVZUroT2buqaCUV+0JAc4oRrBX/HQEHBNUIsn9ABRS8foYo3 KAYhwe2N+m7sJf/KLA7a/pCMELz0weaefX07jtqvkuhP8mvx0a5ZHkyUwGXo24Fh 4g== -----END CERTIFICATE-----Generated at Thu Mar 26 11:10:51 2026 by rpki-client