$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft File: 78D65D4A22DF705BEED7B3432FBE48A356597724.mft (raw, json) Hash identifier: rLZd2YsLKvEmTzVTuJQQ9TDcEIey3rndb0RF7YX0i8o= Subject key identifier: 9F:41:E9:0B:15:B3:4F:6D:6A:07:C5:26:C3:CB:BE:B2:5E:09:6B:A5 Authority key identifier: 78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24 Certificate issuer: /CN=78d65d4a22df705beed7b3432fbe48a356597724 Certificate serial: 07049EEA653E99F6BC8563E2769FBC4E6AF38F41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft Manifest number: 61 Signing time: Thu 30 Oct 2025 22:50:26 +0000 Manifest this update: Thu 30 Oct 2025 22:45:26 +0000 Manifest next update: Sat 01 Nov 2025 02:30:26 +0000 Files and hashes: 1: 3138352e3139302e3233302e302f32332d3233203d3e20383334.roa (hash: eLnp9xbWzQy8+riuHENjho7TBbXl2Hx1/6Vkaczbghg=) 2: 38302e38332e3139302e302f32342d3234203d3e203634323637.roa (hash: e7OjSlp/jABhHoAxV0NvuSo5CYOdNcptQrwcU0YPf4I=) 3: 38302e38332e3138382e302f32322d3234203d3e203534323532.roa (hash: oxLxEjiJHAfR5sb7doKgFq8fOEt0To+nubINa8ThuEA=) 4: 38302e38332e3138382e302f32322d3234203d3e203634323637.roa (hash: usGVmfBSjshsI+jZ0UI5vbfRCtEIbFpWtlpk5JhJZu8=) 5: 38302e38332e3138382e302f32342d3234203d3e203634323637.roa (hash: Zn2fU/zf/URUjzPX4k5UlzylOiLYtLrcrJVzOaLXmd8=) 6: 3138352e36392e322e302f32342d3234203d3e203539373136.roa (hash: C4vtZUJ4sSvWQ2xt2gUpLOR/9kh093F6GFa+cSWJX6U=) 7: 38302e38332e3138342e302f32322d3232203d3e203539373136.roa (hash: olHSbZHs/2t98PZjXMrMMRiZVSEe6IbSK97ATG0UHJ0=) 8: 38302e38332e3138392e302f32342d3234203d3e20333937363330.roa (hash: buBr0nPzFwtnExYzKZ33K40LR3ws0xsbE+PF1JfUozA=) 9: 323030313a346365383a3a2f33322d3332203d3e20323530.roa (hash: zJJBd2Rg1C8mF3Brr7ZPVnCCMMdyplxley/QZ6Up3Cg=) 10: 38302e38332e3139312e302f32342d3234203d3e203534323532.roa (hash: t/r9GueVtBRqkEzG5ECpDmGAbhT8tQffnXyVbWMfuP8=) 11: 38302e38332e3138382e302f32322d3234203d3e20333937363330.roa (hash: we+BIDcecMDdhb3LTIFwBqfI4/tuGmFvD0wy77xN0HU=) 12: 3138352e3139302e3232382e302f32332d3233203d3e20383334.roa (hash: o5JJVAsBzcUVFNJ8gFI9g37VvghyzApiiIfu6sGCWy8=) 13: 323030313a346365383a3a2f32392d3239203d3e203539373136.roa (hash: CgDSfpo0IftLrA7o4eNAILZADKAHzaR3sZbqAdusdP4=) 14: 78D65D4A22DF705BEED7B3432FBE48A356597724.crl (hash: UVo10rKS2nED798Wusutyh3j6qswaruhBKoKsePaFU0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 01 Nov 2025 00:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:04:9e:ea:65:3e:99:f6:bc:85:63:e2:76:9f:bc:4e:6a:f3:8f:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78d65d4a22df705beed7b3432fbe48a356597724 Validity Not Before: Oct 30 22:45:26 2025 GMT Not After : Nov 1 02:30:26 2025 GMT Subject: CN=9F41E90B15B34F6D6A07C526C3CBBEB25E096BA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5f:4a:7e:8f:f3:34:df:36:61:c1:40:23:8e: 8e:0e:c2:26:b3:b1:68:84:fb:a0:01:ae:80:ca:43: 0f:72:fe:77:b3:61:6f:cd:93:52:9f:1a:27:9a:75: df:84:4e:35:e1:79:93:7f:29:4d:aa:b9:45:16:94: 09:59:63:7a:3d:41:02:e6:8a:19:80:5b:33:f0:3f: b9:97:91:98:c3:f0:95:a2:fe:36:05:6c:fc:d8:2c: 45:45:8a:02:59:ea:21:d1:7b:d4:2d:1d:96:7b:72: ac:89:1a:8b:06:c0:3d:86:56:7d:3a:3b:19:b7:52: f5:b2:05:50:a9:30:92:fc:ef:27:9b:31:8e:31:bf: 3b:af:4a:f9:35:1e:63:a4:a3:0b:03:00:dc:b1:9c: a0:a0:9a:1a:3e:10:1e:a9:5e:1b:d8:2a:74:b5:49: f5:d2:b6:65:c6:e0:7b:fc:e9:15:64:12:b0:ef:18: 0a:68:bb:a3:d7:6e:db:f5:f2:76:05:0c:2e:9e:78: 36:b4:d9:18:9d:5c:08:c5:4e:fb:8c:1f:11:f6:20: d6:bd:37:79:1a:92:37:aa:00:58:ed:f6:31:3d:25: 5f:15:25:10:71:10:af:d7:17:ae:18:87:e5:97:7a: 09:0c:5a:60:7a:a0:14:ce:3a:80:c2:49:6c:fe:2e: 10:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:41:E9:0B:15:B3:4F:6D:6A:07:C5:26:C3:CB:BE:B2:5E:09:6B:A5 X509v3 Authority Key Identifier: keyid:78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:64:c5:3a:a4:2c:b0:b5:3f:a7:12:57:49:12:55:d9:a7:88: bb:71:19:db:40:7b:a5:21:6e:7e:44:52:45:0f:e7:00:fe:41: 37:91:07:13:60:73:f8:a0:8a:e8:4c:ad:03:d2:1b:ec:a0:c7: e7:45:26:9c:24:2e:ec:f2:71:a0:c5:2c:c4:75:ff:b1:3d:fb: c3:bd:65:f3:bc:d8:82:78:15:ad:b2:71:03:c4:ea:d3:42:a7: 94:54:b8:19:22:be:7f:2a:ab:e3:d0:d6:cb:c0:d3:a7:55:ac: f3:a3:d8:8b:cb:7b:75:d1:38:06:ac:8b:00:38:f7:5e:62:93: 8d:67:54:cc:0f:03:e7:f7:05:b9:d5:f4:9a:91:2f:27:49:cd: f4:d3:28:49:ce:62:64:a2:4e:e2:1c:d7:ae:d9:f6:40:dc:60: 74:87:d5:8b:e4:1d:de:db:3a:bc:b2:31:01:b2:7a:de:8d:a2: f6:65:75:ea:6f:67:d8:95:c7:97:43:f2:9f:ec:89:ae:10:6e: 2a:94:5f:ce:eb:f7:4c:e2:af:4e:24:c1:98:de:81:f5:18:ed: 06:78:a8:c1:c9:ee:f4:85:4e:4e:59:f9:43:4e:10:d7:62:64: 65:06:1e:63:ef:93:83:4b:fe:b1:79:4b:e1:e3:12:2f:57:b1: 24:ca:63:26 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUBwSe6mU+mfa8hWPidp+8Tmrzj0EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhkNjVkNGEyMmRmNzA1YmVlZDdiMzQzMmZiZTQ4YTM1 NjU5NzcyNDAeFw0yNTEwMzAyMjQ1MjZaFw0yNTExMDEwMjMwMjZaMDMxMTAvBgNV BAMTKDlGNDFFOTBCMTVCMzRGNkQ2QTA3QzUyNkMzQ0JCRUIyNUUwOTZCQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwX0p+j/M03zZhwUAjjo4Owiaz sWiE+6ABroDKQw9y/nezYW/Nk1KfGieadd+ETjXheZN/KU2quUUWlAlZY3o9QQLm ihmAWzPwP7mXkZjD8JWi/jYFbPzYLEVFigJZ6iHRe9QtHZZ7cqyJGosGwD2GVn06 Oxm3UvWyBVCpMJL87yebMY4xvzuvSvk1HmOkowsDANyxnKCgmho+EB6pXhvYKnS1 SfXStmXG4Hv86RVkErDvGApou6PXbtv18nYFDC6eeDa02RidXAjFTvuMHxH2INa9 N3kakjeqAFjt9jE9JV8VJRBxEK/XF64Yh+WXegkMWmB6oBTOOoDCSWz+LhAtAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUn0HpCxWzT21qB8Umw8u+sl4Ja6UwHwYDVR0j BBgwFoAUeNZdSiLfcFvu17NDL75Io1ZZdyQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODkyNWFkMTUtYWYwYi00NWNkLWI4ODMtMWEwNThmYTBl YmExLzAvNzhENjVENEEyMkRGNzA1QkVFRDdCMzQzMkZCRTQ4QTM1NjU5NzcyNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VOWmRTaUxmY0Z2dTE3TkRMNzVJbzFa WmR5US5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI1YWQxNS1h ZjBiLTQ1Y2QtYjg4My0xYTA1OGZhMGViYTEvMC83OEQ2NUQ0QTIyREY3MDVCRUVE N0IzNDMyRkJFNDhBMzU2NTk3NzI0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAumTFOqQssLU/pxJXSRJV 2aeIu3EZ20B7pSFufkRSRQ/nAP5BN5EHE2Bz+KCK6EytA9Ib7KDH50UmnCQu7PJx oMUsxHX/sT37w71l87zYgngVrbJxA8Tq00KnlFS4GSK+fyqr49DWy8DTp1Ws86PY i8t7ddE4BqyLADj3XmKTjWdUzA8D5/cFudX0mpEvJ0nN9NMoSc5iZKJO4hzXrtn2 QNxgdIfVi+Qd3ts6vLIxAbJ63o2i9mV16m9n2JXHl0Pyn+yJrhBuKpRfzuv3TOKv TiTBmN6B9RjtBniowcnu9IVOTln5Q04Q12JkZQYeY++Tg0v+sXlL4eMSL1exJMpj Jg== -----END CERTIFICATE-----Generated at Fri Oct 31 10:16:03 2025 by rpki-client