$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft File: 78D65D4A22DF705BEED7B3432FBE48A356597724.mft (raw, json) Hash identifier: 4Cn6CnU4tHj4p/cY9sBB+XTpfzMwvtKZ9102nNZq5K8= Subject key identifier: 94:CF:DF:98:EE:A8:64:15:33:78:B7:1E:35:CC:57:3C:9D:F5:19:FD Authority key identifier: 78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24 Certificate issuer: /CN=78d65d4a22df705beed7b3432fbe48a356597724 Certificate serial: 0CD6052B4E91C6B724A860354D0E71806586BB69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft Manifest number: 51 Signing time: Sat 18 Oct 2025 20:41:31 +0000 Manifest this update: Sat 18 Oct 2025 20:36:31 +0000 Manifest next update: Sun 19 Oct 2025 22:08:31 +0000 Files and hashes: 1: 78D65D4A22DF705BEED7B3432FBE48A356597724.crl (hash: lzXKCuezjIkf0IGh6KYruNe0czyPg2HbC/faRmmvkZ8=) 2: 38302e38332e3139312e302f32342d3234203d3e203534323532.roa (hash: t/r9GueVtBRqkEzG5ECpDmGAbhT8tQffnXyVbWMfuP8=) 3: 38302e38332e3138382e302f32322d3234203d3e203634323637.roa (hash: usGVmfBSjshsI+jZ0UI5vbfRCtEIbFpWtlpk5JhJZu8=) 4: 38302e38332e3138382e302f32322d3234203d3e20333937363330.roa (hash: we+BIDcecMDdhb3LTIFwBqfI4/tuGmFvD0wy77xN0HU=) 5: 323030313a346365383a3a2f32392d3239203d3e203539373136.roa (hash: CgDSfpo0IftLrA7o4eNAILZADKAHzaR3sZbqAdusdP4=) 6: 38302e38332e3138382e302f32342d3234203d3e203634323637.roa (hash: Zn2fU/zf/URUjzPX4k5UlzylOiLYtLrcrJVzOaLXmd8=) 7: 38302e38332e3138382e302f32322d3234203d3e203534323532.roa (hash: oxLxEjiJHAfR5sb7doKgFq8fOEt0To+nubINa8ThuEA=) 8: 38302e38332e3139302e302f32342d3234203d3e203634323637.roa (hash: e7OjSlp/jABhHoAxV0NvuSo5CYOdNcptQrwcU0YPf4I=) 9: 3138352e3139302e3233302e302f32332d3233203d3e20383334.roa (hash: eLnp9xbWzQy8+riuHENjho7TBbXl2Hx1/6Vkaczbghg=) 10: 3138352e36392e322e302f32342d3234203d3e203539373136.roa (hash: C4vtZUJ4sSvWQ2xt2gUpLOR/9kh093F6GFa+cSWJX6U=) 11: 323030313a346365383a3a2f33322d3332203d3e20323530.roa (hash: zJJBd2Rg1C8mF3Brr7ZPVnCCMMdyplxley/QZ6Up3Cg=) 12: 38302e38332e3138342e302f32322d3232203d3e203539373136.roa (hash: olHSbZHs/2t98PZjXMrMMRiZVSEe6IbSK97ATG0UHJ0=) 13: 38302e38332e3138392e302f32342d3234203d3e20333937363330.roa (hash: buBr0nPzFwtnExYzKZ33K40LR3ws0xsbE+PF1JfUozA=) 14: 3138352e3139302e3232382e302f32332d3233203d3e20383334.roa (hash: o5JJVAsBzcUVFNJ8gFI9g37VvghyzApiiIfu6sGCWy8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 19 Oct 2025 22:08:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:d6:05:2b:4e:91:c6:b7:24:a8:60:35:4d:0e:71:80:65:86:bb:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78d65d4a22df705beed7b3432fbe48a356597724 Validity Not Before: Oct 18 20:36:31 2025 GMT Not After : Oct 19 22:08:31 2025 GMT Subject: CN=94CFDF98EEA864153378B71E35CC573C9DF519FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:29:c2:cc:1b:a2:0b:31:6b:6f:eb:64:b4:84: 5e:d9:cc:b7:59:ff:ec:22:46:04:ac:2e:b6:fc:99: 47:4e:43:04:c6:26:6b:ad:9f:c9:8c:fe:0d:3b:00: a2:8a:5a:53:6b:27:54:bf:92:6b:45:50:0a:b2:48: 5d:5e:c6:7e:87:bb:b3:75:fc:91:b2:aa:da:e2:f6: 67:40:40:eb:d5:a2:bd:b9:42:8b:2b:12:ed:d1:e8: bf:c9:c1:9b:72:54:d9:f7:e3:fe:93:44:4a:fa:49: ca:70:20:1a:41:0d:68:a9:dd:f0:0e:a8:2e:25:95: a8:99:d1:17:9f:1b:ad:60:36:5f:d7:f7:cc:e1:04: 7f:9f:f8:9c:1c:7f:35:63:2f:94:20:d2:e1:18:37: d9:01:40:48:56:51:cb:30:5f:62:b2:12:cf:f3:64: c2:28:99:a5:42:ac:fd:9a:bc:fc:cb:db:22:68:45: a9:6e:ec:12:69:3e:82:b5:90:2e:32:74:54:1c:cd: f5:6b:06:9e:ba:de:3a:bc:8f:e1:e7:5b:cc:0e:3a: 86:15:24:7d:2c:37:f1:33:a8:3f:da:8d:7f:ed:f1: 9f:4a:6a:55:c1:ed:fe:4b:51:7b:42:b7:f5:76:f5: 49:ba:41:f2:fb:f6:29:a7:36:7e:6a:ab:ab:01:f5: bc:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:CF:DF:98:EE:A8:64:15:33:78:B7:1E:35:CC:57:3C:9D:F5:19:FD X509v3 Authority Key Identifier: keyid:78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:a7:d0:58:10:9c:7b:1e:df:1a:a8:85:d2:77:fc:97:e4:6e: 3f:8e:57:d1:9e:aa:55:4f:42:17:59:6e:f3:90:8f:6c:4f:e6: ae:51:d6:84:6d:49:91:77:ef:81:09:ab:f1:13:00:ea:fe:40: 58:96:3e:ab:60:7d:b8:aa:d2:11:53:bb:f4:84:7c:e5:d8:4e: ef:f3:35:4e:2f:2c:0f:0c:ed:a5:29:07:7d:d8:05:59:60:0d: 13:f6:c7:7f:25:7c:ef:de:6d:be:dd:b3:45:9b:af:74:3a:38: 54:6f:b4:40:70:c2:4f:0a:df:03:6d:c4:9e:1c:4b:7d:d6:e6: c7:b4:29:8c:bf:1d:86:e5:51:03:ec:59:88:c7:32:e3:9a:3e: 62:f2:d1:1d:43:5f:6e:50:b3:5e:62:ce:1c:09:76:e4:ac:3b: 25:c0:bb:0a:e7:75:9b:8f:d4:8a:68:b7:1f:60:15:c1:2a:f3: a3:b2:e4:96:b5:16:27:8c:34:79:55:19:c3:b9:ba:a8:70:a2: 91:b4:e0:d0:cd:78:97:7d:87:ec:c1:7a:be:cb:47:a4:d1:2e: d9:97:32:35:e1:89:94:3b:38:13:84:e6:99:df:43:69:fd:66: cb:fc:92:c8:ac:67:ea:4a:e2:15:48:43:35:cd:fe:bb:9b:7a: 7d:7b:f0:4b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUDNYFK06RxrckqGA1TQ5xgGWGu2kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhkNjVkNGEyMmRmNzA1YmVlZDdiMzQzMmZiZTQ4YTM1 NjU5NzcyNDAeFw0yNTEwMTgyMDM2MzFaFw0yNTEwMTkyMjA4MzFaMDMxMTAvBgNV BAMTKDk0Q0ZERjk4RUVBODY0MTUzMzc4QjcxRTM1Q0M1NzNDOURGNTE5RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2KcLMG6ILMWtv62S0hF7ZzLdZ /+wiRgSsLrb8mUdOQwTGJmutn8mM/g07AKKKWlNrJ1S/kmtFUAqySF1exn6Hu7N1 /JGyqtri9mdAQOvVor25QosrEu3R6L/JwZtyVNn34/6TREr6ScpwIBpBDWip3fAO qC4llaiZ0RefG61gNl/X98zhBH+f+JwcfzVjL5Qg0uEYN9kBQEhWUcswX2KyEs/z ZMIomaVCrP2avPzL2yJoRalu7BJpPoK1kC4ydFQczfVrBp663jq8j+HnW8wOOoYV JH0sN/EzqD/ajX/t8Z9KalXB7f5LUXtCt/V29Um6QfL79imnNn5qq6sB9bybAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUlM/fmO6oZBUzeLceNcxXPJ31Gf0wHwYDVR0j BBgwFoAUeNZdSiLfcFvu17NDL75Io1ZZdyQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODkyNWFkMTUtYWYwYi00NWNkLWI4ODMtMWEwNThmYTBl YmExLzAvNzhENjVENEEyMkRGNzA1QkVFRDdCMzQzMkZCRTQ4QTM1NjU5NzcyNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VOWmRTaUxmY0Z2dTE3TkRMNzVJbzFa WmR5US5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI1YWQxNS1h ZjBiLTQ1Y2QtYjg4My0xYTA1OGZhMGViYTEvMC83OEQ2NUQ0QTIyREY3MDVCRUVE N0IzNDMyRkJFNDhBMzU2NTk3NzI0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANKfQWBCcex7fGqiF0nf8 l+RuP45X0Z6qVU9CF1lu85CPbE/mrlHWhG1JkXfvgQmr8RMA6v5AWJY+q2B9uKrS EVO79IR85dhO7/M1Ti8sDwztpSkHfdgFWWANE/bHfyV8795tvt2zRZuvdDo4VG+0 QHDCTwrfA23EnhxLfdbmx7QpjL8dhuVRA+xZiMcy45o+YvLRHUNfblCzXmLOHAl2 5Kw7JcC7Cud1m4/Uimi3H2AVwSrzo7LklrUWJ4w0eVUZw7m6qHCikbTg0M14l32H 7MF6vstHpNEu2ZcyNeGJlDs4E4Tmmd9Daf1my/ySyKxn6kriFUhDNc3+u5t6fXvw Sw== -----END CERTIFICATE-----Generated at Sun Oct 19 13:05:15 2025 by rpki-client