$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft File: 78D65D4A22DF705BEED7B3432FBE48A356597724.mft (raw, json) Hash identifier: NJdbxCAcQmGVlHv+c0jjf7Gzo8gwl8G+0v3S+PGUqfQ= Subject key identifier: 1A:02:E4:30:61:00:7E:EB:8D:2A:36:AB:78:62:27:99:6A:FE:DA:79 Authority key identifier: 78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24 Certificate issuer: /CN=78d65d4a22df705beed7b3432fbe48a356597724 Certificate serial: 4A1C97C08A5A7094F3DE93B1086FF4E7EA640ADD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft Manifest number: 01DB Signing time: Fri 07 Aug 2026 16:57:03 +0000 Manifest this update: Fri 07 Aug 2026 16:52:03 +0000 Manifest next update: Sat 08 Aug 2026 18:46:03 +0000 Files and hashes: 1: 323030313a346365383a3a2f32392d3239203d3e203539373136.roa (hash: kWLECgVV1VftZUfr9I58+oOD7uIghr725IwWATJehFU=) 2: 78D65D4A22DF705BEED7B3432FBE48A356597724.crl (hash: o3JMRZs4RKD/+/BS2JtkTtv7ZL1mR+xVEcVqQ6uzz7o=) 3: 323030313a346365383a3a2f33322d3332203d3e20323530.roa (hash: S6zvsTSnybC5v19XM+wBc97Rf5SG4IRKmCl8ae093X0=) 4: 38302e38332e3138382e302f32322d3234203d3e20323039323432.roa (hash: wR1ots0KV1BStFiGqKk2l3iZgyPIrhhcn8rzZHOEx3E=) 5: 38302e38332e3138342e302f32322d3232203d3e203539373136.roa (hash: KSRZt1DwB9bxNmKSPK6BxOjex5dyK6FY9yIPPnRxY/U=) 6: 3138352e3139302e3232382e302f32332d3234203d3e203230343733.roa (hash: sSjQo0gwcaB1VwvZuBlzZHXLcXQx3UMY0dQE8gGvjAA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 08 Aug 2026 16:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:1c:97:c0:8a:5a:70:94:f3:de:93:b1:08:6f:f4:e7:ea:64:0a:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78d65d4a22df705beed7b3432fbe48a356597724 Validity Not Before: Aug 7 16:52:03 2026 GMT Not After : Aug 8 18:46:03 2026 GMT Subject: CN=1A02E43061007EEB8D2A36AB786227996AFEDA79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:61:c1:97:06:f5:ae:b0:c4:02:b7:c2:5c:8e: 6f:59:91:fc:5a:ff:eb:f4:df:07:90:49:53:67:2f: 40:30:2b:e5:83:af:4f:c0:88:4c:9c:d1:35:79:e6: 6f:c0:99:dd:45:e7:98:54:60:b0:5b:d9:bd:29:8f: ce:d7:66:ab:c2:c0:2c:9c:bc:75:49:dc:09:6b:0b: d5:8e:f7:1e:cd:da:43:09:0e:a4:89:67:db:ef:49: 95:e9:bc:72:73:11:65:b4:3c:b1:ff:76:41:6f:7a: 47:73:9e:ef:e8:d2:b4:8e:0a:c9:37:e8:64:28:50: 17:1d:b5:21:f4:73:1e:31:f7:a6:16:f9:14:a4:5e: a7:bc:46:0f:b5:ff:f8:9d:11:a9:97:e7:d8:83:ac: a7:68:7c:c0:50:0a:21:87:9d:19:b3:fc:c7:1f:9d: e1:c7:49:d8:bc:7d:e6:f6:f3:cc:ab:a9:ed:5a:e2: fe:27:07:2c:77:e6:50:11:ed:50:0d:99:dd:69:87: 10:0a:1c:c5:d3:89:35:48:e0:39:7c:70:65:ef:d1: 53:d7:38:4c:2b:62:93:4b:1e:8c:d8:d0:11:51:ca: c4:96:bf:90:fc:53:63:e1:b8:e4:e0:66:e7:10:70: 4b:bd:31:2c:f7:ab:ae:92:fe:80:b5:57:d8:c2:af: e9:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:02:E4:30:61:00:7E:EB:8D:2A:36:AB:78:62:27:99:6A:FE:DA:79 X509v3 Authority Key Identifier: keyid:78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:84:56:7d:5a:c4:13:dd:5e:40:bf:ca:cb:af:c7:a3:4f:96: d3:47:9b:a0:a8:71:41:76:f6:12:2f:47:49:14:83:a3:6b:9c: 2a:5f:f7:8a:e2:68:47:a0:20:7d:b2:1b:52:df:71:80:77:f1: e2:a3:12:52:f7:52:b1:2b:ed:95:7f:36:eb:0e:39:fb:ca:6f: a7:d4:55:69:e0:69:c2:ba:55:d6:80:cf:c0:c0:04:0a:b8:44: 6b:b6:22:63:dc:92:bf:de:07:6e:2b:be:cb:a4:a4:66:32:68: 96:68:b3:7c:cb:c9:3d:84:ea:2e:fc:42:a8:09:02:33:17:f2: a8:35:d3:9e:4f:7c:38:1d:80:60:9f:5f:b5:a3:b6:69:55:6a: ef:b1:5f:09:8b:42:53:7b:a0:f7:a2:e6:1f:7b:46:6e:f1:ea: 3f:ab:5a:d3:ee:4b:ce:32:b8:fc:b7:b1:5c:7d:0b:bb:f8:1b: 41:df:db:7b:fc:7b:4b:f9:a2:35:d2:9a:f3:97:41:5b:1b:4e: 72:17:7d:ab:5c:d0:9f:f4:51:b9:b6:36:0e:f5:3c:0a:12:fb: b3:2d:4b:2d:9e:e5:ca:fe:2f:cf:19:97:02:ca:f9:b3:b7:97: 40:49:c6:24:72:ff:d0:4b:d8:06:7f:66:2c:42:9d:35:fb:11: 1a:f3:ad:e6 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUShyXwIpacJTz3pOxCG/05+pkCt0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhkNjVkNGEyMmRmNzA1YmVlZDdiMzQzMmZiZTQ4YTM1 NjU5NzcyNDAeFw0yNjA4MDcxNjUyMDNaFw0yNjA4MDgxODQ2MDNaMDMxMTAvBgNV BAMTKDFBMDJFNDMwNjEwMDdFRUI4RDJBMzZBQjc4NjIyNzk5NkFGRURBNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjYcGXBvWusMQCt8Jcjm9Zkfxa /+v03weQSVNnL0AwK+WDr0/AiEyc0TV55m/Amd1F55hUYLBb2b0pj87XZqvCwCyc vHVJ3AlrC9WO9x7N2kMJDqSJZ9vvSZXpvHJzEWW0PLH/dkFvekdznu/o0rSOCsk3 6GQoUBcdtSH0cx4x96YW+RSkXqe8Rg+1//idEamX59iDrKdofMBQCiGHnRmz/Mcf neHHSdi8feb288yrqe1a4v4nByx35lAR7VANmd1phxAKHMXTiTVI4Dl8cGXv0VPX OEwrYpNLHozY0BFRysSWv5D8U2PhuOTgZucQcEu9MSz3q66S/oC1V9jCr+kNAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUGgLkMGEAfuuNKjareGInmWr+2nkwHwYDVR0j BBgwFoAUeNZdSiLfcFvu17NDL75Io1ZZdyQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODkyNWFkMTUtYWYwYi00NWNkLWI4ODMtMWEwNThmYTBl YmExLzAvNzhENjVENEEyMkRGNzA1QkVFRDdCMzQzMkZCRTQ4QTM1NjU5NzcyNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VOWmRTaUxmY0Z2dTE3TkRMNzVJbzFa WmR5US5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI1YWQxNS1h ZjBiLTQ1Y2QtYjg4My0xYTA1OGZhMGViYTEvMC83OEQ2NUQ0QTIyREY3MDVCRUVE N0IzNDMyRkJFNDhBMzU2NTk3NzI0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMIRWfVrEE91eQL/Ky6/H o0+W00eboKhxQXb2Ei9HSRSDo2ucKl/3iuJoR6AgfbIbUt9xgHfx4qMSUvdSsSvt lX826w45+8pvp9RVaeBpwrpV1oDPwMAECrhEa7YiY9ySv94Hbiu+y6SkZjJolmiz fMvJPYTqLvxCqAkCMxfyqDXTnk98OB2AYJ9ftaO2aVVq77FfCYtCU3ug96LmH3tG bvHqP6ta0+5LzjK4/LexXH0Lu/gbQd/be/x7S/miNdKa85dBWxtOchd9q1zQn/RR ubY2DvU8ChL7sy1LLZ7lyv4vzxmXAsr5s7eXQEnGJHL/0EvYBn9mLEKdNfsRGvOt 5g== -----END CERTIFICATE-----Generated at Sat Aug 8 01:48:31 2026 by rpki-client