$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft File: 78D65D4A22DF705BEED7B3432FBE48A356597724.mft (raw, json) Hash identifier: jCdvPgwZnEfHw45ZwPGoiM+cYpQBW8+JanUydOlqtTk= Subject key identifier: 7D:A2:39:57:CE:78:C2:A1:5F:30:6D:B4:4A:C0:91:37:F0:49:96:76 Authority key identifier: 78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24 Certificate issuer: /CN=78d65d4a22df705beed7b3432fbe48a356597724 Certificate serial: 3BC0D54349A265603C392CCACE60D8D8331C2091 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft Manifest number: 013E Signing time: Mon 13 Apr 2026 10:14:39 +0000 Manifest this update: Mon 13 Apr 2026 10:09:39 +0000 Manifest next update: Tue 14 Apr 2026 11:52:39 +0000 Files and hashes: 1: 38302e38332e3138342e302f32322d3232203d3e203539373136.roa (hash: olHSbZHs/2t98PZjXMrMMRiZVSEe6IbSK97ATG0UHJ0=) 2: 38302e38332e3138382e302f32322d3234203d3e203133333335.roa (hash: ov3ZqP6jiN7cSR/XwriGpMFcKSiH0bdEErZFAioDoh0=) 3: 78D65D4A22DF705BEED7B3432FBE48A356597724.crl (hash: K3c4mCbXuh/bVUEBPAbNkJM+xmMw7xtgOPQOnTX/r9w=) 4: 38302e38332e3138382e302f32322d3234203d3e20323039323432.roa (hash: wR1ots0KV1BStFiGqKk2l3iZgyPIrhhcn8rzZHOEx3E=) 5: 3138352e3139302e3232382e302f32332d3234203d3e203534323532.roa (hash: sZFQBZdBZHG+LxDLkg7xE6HoKkP9FywXWpCF+8QUNCA=) 6: 3138352e36392e322e302f32342d3234203d3e203539373136.roa (hash: C4vtZUJ4sSvWQ2xt2gUpLOR/9kh093F6GFa+cSWJX6U=) 7: 323030313a346365383a3a2f33322d3332203d3e20323530.roa (hash: zJJBd2Rg1C8mF3Brr7ZPVnCCMMdyplxley/QZ6Up3Cg=) 8: 3138352e3139302e3232382e302f32332d3234203d3e203634323637.roa (hash: 2kT+9B/A73HgiDRsVM67yiwhxTHl0CNzJa5JlwqD97w=) 9: 3138352e3139302e3232382e302f32332d3234203d3e203332313332.roa (hash: jVr1HOM/vAQFN9/2YcEKEGs7D1zQDrdtbTvacM//wP0=) 10: 323030313a346365383a3a2f32392d3239203d3e203539373136.roa (hash: CgDSfpo0IftLrA7o4eNAILZADKAHzaR3sZbqAdusdP4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 14 Apr 2026 08:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:c0:d5:43:49:a2:65:60:3c:39:2c:ca:ce:60:d8:d8:33:1c:20:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78d65d4a22df705beed7b3432fbe48a356597724 Validity Not Before: Apr 13 10:09:39 2026 GMT Not After : Apr 14 11:52:39 2026 GMT Subject: CN=7DA23957CE78C2A15F306DB44AC09137F0499676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:84:45:21:d0:19:74:f2:c3:b3:68:cd:33:cc: c0:89:b7:dc:e6:9a:6d:16:cc:db:9f:bf:bf:af:10: e1:75:a0:a1:b7:14:d2:75:e5:ea:ba:84:94:1e:6c: cf:9c:cc:79:5d:28:3a:46:17:d5:67:fd:45:71:0e: ac:1d:5d:6e:de:31:ba:26:15:35:74:56:6d:4f:1e: 65:25:13:1e:16:41:13:f3:e1:f5:ae:6b:79:70:60: 90:f3:de:56:1e:74:79:af:2f:de:65:a6:94:81:51: f8:55:1c:3b:7d:a8:79:2f:ab:fe:fc:ce:b6:e1:c4: d6:7e:f6:aa:44:38:b6:56:cf:cc:38:c6:71:1d:58: 85:7e:30:b4:51:0a:48:53:b9:bf:a2:c5:11:99:36: 95:00:69:59:c3:84:c5:4f:f9:d9:e0:33:8b:b4:e5: 47:ec:34:86:3d:79:88:8f:1e:75:2a:d1:e1:7c:d7: c3:f1:12:a4:39:87:21:0e:cd:57:9c:96:31:51:62: 19:bf:d6:2d:56:8f:35:af:86:4e:66:b3:71:33:b9: 45:2b:e7:1d:52:54:68:ca:ed:1b:08:b6:5e:60:6e: e1:0f:ba:17:f5:bb:1b:d5:89:66:a9:c7:8c:82:28: ce:b4:4b:b9:58:d7:ac:3e:b7:9c:be:40:59:24:22: 35:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A2:39:57:CE:78:C2:A1:5F:30:6D:B4:4A:C0:91:37:F0:49:96:76 X509v3 Authority Key Identifier: keyid:78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:86:a5:f4:25:1e:7e:17:57:df:d5:1a:0c:b3:34:c3:2c:d0: 30:f4:20:1f:76:50:d4:fb:20:41:52:77:10:1b:ed:74:55:c7: ec:fc:2c:3d:40:c3:b6:31:1c:8d:03:98:af:68:70:ca:7b:00: 43:44:c8:45:af:b1:36:82:21:8d:7b:58:ca:a4:75:bb:02:a2: 07:31:b4:08:3e:7e:3e:b6:e9:a5:9d:fa:fb:04:a5:0a:b2:e0: 62:c0:6a:aa:c8:1d:cc:00:5f:e0:13:02:88:df:6a:50:8c:86: 64:a3:b3:56:4b:d5:38:62:1e:8e:da:57:0e:65:f7:39:5c:9d: 66:06:8a:7b:e0:c2:f5:7f:94:b2:53:d3:83:34:7f:4d:b2:65: d1:97:9b:65:85:24:c1:32:60:d9:2d:f3:63:e8:c7:6f:cb:2e: 7b:70:2a:26:73:11:6f:06:19:ce:3b:e6:fc:9e:c5:a4:ac:fc: 53:53:b7:e7:07:7b:ea:90:ab:cb:96:cd:81:cf:6c:d3:f7:f9: bb:55:5e:75:3a:93:2d:b7:4b:9d:aa:07:9a:f6:3c:12:12:3b: 62:a9:03:f6:f6:71:d7:a5:70:3c:17:5e:25:41:b4:a9:ab:bf: 50:3c:cb:5b:d2:08:d0:6b:db:97:7c:83:61:b5:f0:19:98:cf: 65:b0:9a:f6 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUO8DVQ0miZWA8OSzKzmDY2DMcIJEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhkNjVkNGEyMmRmNzA1YmVlZDdiMzQzMmZiZTQ4YTM1 NjU5NzcyNDAeFw0yNjA0MTMxMDA5MzlaFw0yNjA0MTQxMTUyMzlaMDMxMTAvBgNV BAMTKDdEQTIzOTU3Q0U3OEMyQTE1RjMwNkRCNDRBQzA5MTM3RjA0OTk2NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDshEUh0Bl08sOzaM0zzMCJt9zm mm0WzNufv7+vEOF1oKG3FNJ15eq6hJQebM+czHldKDpGF9Vn/UVxDqwdXW7eMbom FTV0Vm1PHmUlEx4WQRPz4fWua3lwYJDz3lYedHmvL95lppSBUfhVHDt9qHkvq/78 zrbhxNZ+9qpEOLZWz8w4xnEdWIV+MLRRCkhTub+ixRGZNpUAaVnDhMVP+dngM4u0 5UfsNIY9eYiPHnUq0eF818PxEqQ5hyEOzVecljFRYhm/1i1WjzWvhk5ms3EzuUUr 5x1SVGjK7RsItl5gbuEPuhf1uxvViWapx4yCKM60S7lY16w+t5y+QFkkIjWRAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUfaI5V854wqFfMG20SsCRN/BJlnYwHwYDVR0j BBgwFoAUeNZdSiLfcFvu17NDL75Io1ZZdyQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODkyNWFkMTUtYWYwYi00NWNkLWI4ODMtMWEwNThmYTBl YmExLzAvNzhENjVENEEyMkRGNzA1QkVFRDdCMzQzMkZCRTQ4QTM1NjU5NzcyNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VOWmRTaUxmY0Z2dTE3TkRMNzVJbzFa WmR5US5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI1YWQxNS1h ZjBiLTQ1Y2QtYjg4My0xYTA1OGZhMGViYTEvMC83OEQ2NUQ0QTIyREY3MDVCRUVE N0IzNDMyRkJFNDhBMzU2NTk3NzI0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfYal9CUefhdX39UaDLM0 wyzQMPQgH3ZQ1PsgQVJ3EBvtdFXH7PwsPUDDtjEcjQOYr2hwynsAQ0TIRa+xNoIh jXtYyqR1uwKiBzG0CD5+PrbppZ36+wSlCrLgYsBqqsgdzABf4BMCiN9qUIyGZKOz VkvVOGIejtpXDmX3OVydZgaKe+DC9X+UslPTgzR/TbJl0ZebZYUkwTJg2S3zY+jH b8sue3AqJnMRbwYZzjvm/J7FpKz8U1O35wd76pCry5bNgc9s0/f5u1VedTqTLbdL naoHmvY8EhI7YqkD9vZx16VwPBdeJUG0qau/UDzLW9II0Gvbl3yDYbXwGZjPZbCa 9g== -----END CERTIFICATE-----Generated at Mon Apr 13 13:55:54 2026 by rpki-client