$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft File: 78D65D4A22DF705BEED7B3432FBE48A356597724.mft (raw, json) Hash identifier: xTIjoNuCy7p/eHOOdT6cTmA6O6WVHDanWH21XhfSUNA= Subject key identifier: E4:B0:BF:61:8D:7D:6E:8E:BB:9C:C4:60:56:C9:96:BB:19:86:59:C2 Authority key identifier: 78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24 Certificate issuer: /CN=78d65d4a22df705beed7b3432fbe48a356597724 Certificate serial: 0174D35DD7CF9D8F2F8CE43C28EC4294B8BA2530 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft Manifest number: 0111 Signing time: Tue 10 Mar 2026 16:25:04 +0000 Manifest this update: Tue 10 Mar 2026 16:20:04 +0000 Manifest next update: Wed 11 Mar 2026 19:14:04 +0000 Files and hashes: 1: 3138352e3139302e3232382e302f32332d3234203d3e203332313332.roa (hash: jVr1HOM/vAQFN9/2YcEKEGs7D1zQDrdtbTvacM//wP0=) 2: 3138352e36392e322e302f32342d3234203d3e203539373136.roa (hash: C4vtZUJ4sSvWQ2xt2gUpLOR/9kh093F6GFa+cSWJX6U=) 3: 323030313a346365383a3a2f32392d3239203d3e203539373136.roa (hash: CgDSfpo0IftLrA7o4eNAILZADKAHzaR3sZbqAdusdP4=) 4: 78D65D4A22DF705BEED7B3432FBE48A356597724.crl (hash: frIE2a+5dpAo75LzEtBoGln1GNeWUI7w0rga2sxAKYU=) 5: 38302e38332e3138382e302f32322d3234203d3e203133333335.roa (hash: ov3ZqP6jiN7cSR/XwriGpMFcKSiH0bdEErZFAioDoh0=) 6: 38302e38332e3138382e302f32322d3234203d3e20323039323432.roa (hash: wR1ots0KV1BStFiGqKk2l3iZgyPIrhhcn8rzZHOEx3E=) 7: 38302e38332e3138342e302f32322d3232203d3e203539373136.roa (hash: olHSbZHs/2t98PZjXMrMMRiZVSEe6IbSK97ATG0UHJ0=) 8: 3138352e3139302e3232382e302f32332d3234203d3e203634323637.roa (hash: 2kT+9B/A73HgiDRsVM67yiwhxTHl0CNzJa5JlwqD97w=) 9: 323030313a346365383a3a2f33322d3332203d3e20323530.roa (hash: zJJBd2Rg1C8mF3Brr7ZPVnCCMMdyplxley/QZ6Up3Cg=) 10: 3138352e3139302e3232382e302f32332d3234203d3e203534323532.roa (hash: sZFQBZdBZHG+LxDLkg7xE6HoKkP9FywXWpCF+8QUNCA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Mar 2026 19:14:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:74:d3:5d:d7:cf:9d:8f:2f:8c:e4:3c:28:ec:42:94:b8:ba:25:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78d65d4a22df705beed7b3432fbe48a356597724 Validity Not Before: Mar 10 16:20:04 2026 GMT Not After : Mar 11 19:14:04 2026 GMT Subject: CN=E4B0BF618D7D6E8EBB9CC46056C996BB198659C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:90:07:e1:ec:78:e6:c6:e9:cd:9d:c0:fd:59: ff:8a:9d:c7:24:70:f9:af:53:e2:3d:11:33:a4:4b: fb:81:64:55:4d:6e:4b:42:26:33:e7:66:4c:a7:17: 8b:eb:f7:e6:f1:29:86:d2:88:38:3e:f7:ae:9f:61: 58:ad:17:86:7a:93:8d:b9:98:64:1c:25:bf:26:d9: b5:5f:15:e4:49:8f:7d:5e:39:75:a9:85:51:c2:25: fc:f2:8a:74:9b:a9:31:5c:c2:c2:98:ca:36:44:b1: 8f:4d:0f:54:60:66:ac:cf:7f:7b:ae:59:56:cd:a2: 03:1a:9b:d5:07:14:4b:ca:a4:84:41:a9:03:8f:e1: b5:38:26:fc:19:ba:16:43:de:a4:d6:8c:69:19:5b: fd:77:1d:db:7d:9e:a5:8b:ad:cd:49:ab:bd:76:83: f8:78:99:91:1f:b9:cb:49:9f:c7:98:b6:eb:c9:2d: 8f:d9:68:b2:2d:aa:a5:ff:bd:98:67:59:24:5e:bd: e7:91:be:27:cf:14:fe:d0:5b:33:b9:8b:d0:01:23: 19:fc:ab:f0:8d:6a:f3:37:ae:50:d1:c7:bd:53:ef: 84:d3:3b:96:49:04:7e:cd:af:c6:d1:24:79:c6:92: 6a:5a:86:bb:97:ea:28:90:de:36:90:a9:76:9d:91: 0f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:B0:BF:61:8D:7D:6E:8E:BB:9C:C4:60:56:C9:96:BB:19:86:59:C2 X509v3 Authority Key Identifier: keyid:78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:d6:2c:6f:89:d9:08:6b:9c:68:3c:74:d7:69:44:d3:31:27: a1:16:25:ac:04:25:70:cb:d3:64:ad:b0:a6:db:95:3c:6a:cb: f0:a0:34:96:2a:57:ff:d1:40:c9:6b:a6:43:2b:5e:9d:96:1d: 5d:69:7f:5c:bf:9b:b4:1c:b5:a7:ea:06:57:82:03:70:05:37: 6f:71:a2:b0:30:56:01:d2:70:62:dd:92:a0:0f:3e:f3:2b:af: 66:d0:61:b7:2a:74:ff:14:6b:2c:17:f0:b8:12:85:2a:c5:2e: 20:b7:86:12:e8:1c:1d:0e:28:2d:d8:c3:14:de:dd:9d:4c:cc: 56:6b:c9:c5:85:aa:ee:d2:a6:ca:33:8e:4e:32:f4:42:fe:e6: 3f:c1:84:17:45:49:e0:f2:61:3e:f1:b0:c4:72:91:61:5c:c4: 69:9a:5a:f1:52:da:92:4d:82:1d:38:87:8b:68:3d:3c:01:a8: 89:ea:f3:8a:8a:03:78:4f:de:96:b2:15:bb:03:47:0d:93:18: 65:77:b6:37:d1:24:97:83:d2:fa:67:80:cb:38:cd:2a:44:7e: e1:61:14:cd:25:92:3a:86:46:d8:d0:f7:c1:af:da:9f:12:52: 38:04:84:6b:fc:59:f4:13:aa:63:8d:6a:3d:37:17:65:af:41: 6f:7a:a7:2e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUAXTTXdfPnY8vjOQ8KOxClLi6JTAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhkNjVkNGEyMmRmNzA1YmVlZDdiMzQzMmZiZTQ4YTM1 NjU5NzcyNDAeFw0yNjAzMTAxNjIwMDRaFw0yNjAzMTExOTE0MDRaMDMxMTAvBgNV BAMTKEU0QjBCRjYxOEQ3RDZFOEVCQjlDQzQ2MDU2Qzk5NkJCMTk4NjU5QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfkAfh7HjmxunNncD9Wf+Kncck cPmvU+I9ETOkS/uBZFVNbktCJjPnZkynF4vr9+bxKYbSiDg+966fYVitF4Z6k425 mGQcJb8m2bVfFeRJj31eOXWphVHCJfzyinSbqTFcwsKYyjZEsY9ND1RgZqzPf3uu WVbNogMam9UHFEvKpIRBqQOP4bU4JvwZuhZD3qTWjGkZW/13Hdt9nqWLrc1Jq712 g/h4mZEfuctJn8eYtuvJLY/ZaLItqqX/vZhnWSReveeRvifPFP7QWzO5i9ABIxn8 q/CNavM3rlDRx71T74TTO5ZJBH7Nr8bRJHnGkmpahruX6iiQ3jaQqXadkQ8JAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU5LC/YY19bo67nMRgVsmWuxmGWcIwHwYDVR0j BBgwFoAUeNZdSiLfcFvu17NDL75Io1ZZdyQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODkyNWFkMTUtYWYwYi00NWNkLWI4ODMtMWEwNThmYTBl YmExLzAvNzhENjVENEEyMkRGNzA1QkVFRDdCMzQzMkZCRTQ4QTM1NjU5NzcyNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VOWmRTaUxmY0Z2dTE3TkRMNzVJbzFa WmR5US5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI1YWQxNS1h ZjBiLTQ1Y2QtYjg4My0xYTA1OGZhMGViYTEvMC83OEQ2NUQ0QTIyREY3MDVCRUVE N0IzNDMyRkJFNDhBMzU2NTk3NzI0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKNYsb4nZCGucaDx012lE 0zEnoRYlrAQlcMvTZK2wptuVPGrL8KA0lipX/9FAyWumQytenZYdXWl/XL+btBy1 p+oGV4IDcAU3b3GisDBWAdJwYt2SoA8+8yuvZtBhtyp0/xRrLBfwuBKFKsUuILeG EugcHQ4oLdjDFN7dnUzMVmvJxYWq7tKmyjOOTjL0Qv7mP8GEF0VJ4PJhPvGwxHKR YVzEaZpa8VLakk2CHTiHi2g9PAGoierziooDeE/elrIVuwNHDZMYZXe2N9Ekl4PS +meAyzjNKkR+4WEUzSWSOoZG2ND3wa/anxJSOASEa/xZ9BOqY41qPTcXZa9Bb3qn Lg== -----END CERTIFICATE-----Generated at Wed Mar 11 06:42:51 2026 by rpki-client