$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft File: 578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft (raw, json) Hash identifier: Ek2TwHidVwA+eCafuX/LjjJ4+Tp1uA+Y44wdKxJ7tbI= Subject key identifier: 6F:4E:45:CC:5B:B3:37:D8:48:71:6F:5E:F8:B4:3D:13:5B:96:0E:14 Authority key identifier: 57:8D:7D:C9:77:9B:27:81:5E:BB:5C:3F:5F:CF:07:CC:58:37:08:B3 Certificate issuer: /CN=578d7dc9779b27815ebb5c3f5fcf07cc583708b3 Certificate serial: 7EF5637FD91F6C6D00AEB61DA9F5EF5BFA610108 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft Manifest number: 0225 Signing time: Sat 28 Mar 2026 19:23:23 +0000 Manifest this update: Sat 28 Mar 2026 19:18:23 +0000 Manifest next update: Sun 29 Mar 2026 19:56:23 +0000 Files and hashes: 1: 3130332e3134372e3135332e302f32342d3234203d3e20323135323936.roa (hash: O+6twnNOV5ruNsTz6gyqZDCueGHR/39L745XmWi2d5I=) 2: 578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl (hash: 7OrbecIl7SQvGn9r2fMt9MSd90F6CQhKviYCoIxSwRc=) 3: AS215296.asa (hash: OtSM7n/M5H4Gr1eK1WwYJcN3J5IxezG9iWmcyo289w0=) 4: 323030313a3637633a6533633a3a2f34382d3438203d3e20323135323936.roa (hash: RGTgCra6z97DL3zPw+EaFuLG0rQZ9DlytQ3X3ko6llc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Mar 2026 19:56:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:f5:63:7f:d9:1f:6c:6d:00:ae:b6:1d:a9:f5:ef:5b:fa:61:01:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=578d7dc9779b27815ebb5c3f5fcf07cc583708b3 Validity Not Before: Mar 28 19:18:23 2026 GMT Not After : Mar 29 19:56:23 2026 GMT Subject: CN=6F4E45CC5BB337D848716F5EF8B43D135B960E14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a7:51:d9:22:b3:49:f8:0e:bc:2e:6f:39:09: 41:34:09:90:e6:31:97:dd:d4:25:ed:42:6a:0a:6b: 22:6c:60:90:99:62:d8:1b:13:3f:aa:17:8f:41:12: 4a:8e:34:e0:d5:b8:65:68:01:eb:d5:62:17:16:ec: 61:53:d5:eb:d4:ee:71:72:5c:05:8f:5c:b6:2a:63: 2d:6e:ce:54:4e:44:0a:cb:87:6b:38:0c:25:52:4b: 81:08:e7:3d:7d:75:90:f3:dc:d4:e8:e8:4a:b0:89: 9f:b9:40:ff:fd:bf:78:56:41:c8:07:2c:66:d9:84: 3a:22:a7:ef:b6:e4:0b:a0:ff:ff:76:c2:90:cf:7a: 80:74:4b:1b:fd:35:db:e2:86:4f:21:5c:85:a8:1a: cb:33:00:69:fe:86:17:c5:ce:ba:da:15:70:dc:f5: e5:b7:8f:fa:29:7e:56:e2:0a:ca:db:11:e4:ea:17: 40:4f:7d:48:1d:65:c2:c2:a2:68:dd:37:ff:b9:12: cd:52:30:b2:76:2d:2a:bf:9d:f4:7d:79:6e:31:e9: c0:9f:48:85:81:2b:5a:55:cd:88:85:34:3e:f8:5c: 50:65:d8:7d:bf:09:dd:3a:17:50:b2:be:5c:69:f3: 05:39:64:e9:15:84:07:05:f2:d3:48:c2:b3:2d:fb: 13:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:4E:45:CC:5B:B3:37:D8:48:71:6F:5E:F8:B4:3D:13:5B:96:0E:14 X509v3 Authority Key Identifier: keyid:57:8D:7D:C9:77:9B:27:81:5E:BB:5C:3F:5F:CF:07:CC:58:37:08:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:97:cf:c6:02:97:d6:d8:47:05:f7:58:f2:a1:41:1f:0d:cd: 38:ff:80:28:d3:68:b4:c0:8a:07:46:11:05:23:17:ae:eb:b1: 9b:d1:58:b4:fe:01:0b:b1:fa:75:da:b5:d6:db:82:94:b5:80: 48:dc:3c:27:63:74:7b:03:66:cf:bb:55:94:8a:79:32:ce:77: d5:85:3c:64:f1:05:68:6b:dc:cc:b0:1a:d4:a3:5a:88:ee:39: 0a:a0:4a:d1:44:d9:ec:75:81:8d:e0:15:6a:a2:eb:b6:0b:6f: 27:d7:de:c9:6a:af:b3:7e:96:d4:45:7e:a2:fb:82:29:25:c7: 94:ca:d8:e6:eb:49:d1:02:73:de:35:aa:36:51:0f:5b:df:4e: bb:a9:5c:07:6f:bc:d5:71:14:a6:16:2a:c5:8e:6e:8c:de:0a: ea:df:d4:e0:73:5f:d4:98:c4:bf:96:8d:64:ae:e0:eb:d5:84: d2:06:2f:a1:9e:2e:33:e8:93:82:b7:14:84:c8:20:23:e5:c2: ad:9f:50:04:de:a2:37:01:0d:89:ea:90:02:6d:c4:a1:1b:b4: 08:c4:2a:ea:e6:de:29:1d:78:9c:e2:7c:ca:30:e4:7d:6f:fb: 5e:c7:50:ca:94:79:01:dd:17:fd:e2:bb:1f:9b:16:16:73:29: 26:b1:1b:c5 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUfvVjf9kfbG0ArrYdqfXvW/phAQgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc4ZDdkYzk3NzliMjc4MTVlYmI1YzNmNWZjZjA3Y2M1 ODM3MDhiMzAeFw0yNjAzMjgxOTE4MjNaFw0yNjAzMjkxOTU2MjNaMDMxMTAvBgNV BAMTKDZGNEU0NUNDNUJCMzM3RDg0ODcxNkY1RUY4QjQzRDEzNUI5NjBFMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbp1HZIrNJ+A68Lm85CUE0CZDm MZfd1CXtQmoKayJsYJCZYtgbEz+qF49BEkqONODVuGVoAevVYhcW7GFT1evU7nFy XAWPXLYqYy1uzlRORArLh2s4DCVSS4EI5z19dZDz3NTo6EqwiZ+5QP/9v3hWQcgH LGbZhDoip++25Aug//92wpDPeoB0Sxv9Ndvihk8hXIWoGsszAGn+hhfFzrraFXDc 9eW3j/opflbiCsrbEeTqF0BPfUgdZcLComjdN/+5Es1SMLJ2LSq/nfR9eW4x6cCf SIWBK1pVzYiFND74XFBl2H2/Cd06F1Cyvlxp8wU5ZOkVhAcF8tNIwrMt+xORAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUb05FzFuzN9hIcW9e+LQ9E1uWDhQwHwYDVR0j BBgwFoAUV419yXebJ4Feu1w/X88HzFg3CLMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWNhMjUzNTAtOWUzZi00NmUxLWFlMmItMWM2MWI2ZWE1 YWUyLzAvNTc4RDdEQzk3NzlCMjc4MTVFQkI1QzNGNUZDRjA3Q0M1ODM3MDhCMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Y0MTl5WGViSjRGZXUxd19YODhIekZn M0NMTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lY2EyNTM1MC05 ZTNmLTQ2ZTEtYWUyYi0xYzYxYjZlYTVhZTIvMC81NzhEN0RDOTc3OUIyNzgxNUVC QjVDM0Y1RkNGMDdDQzU4MzcwOEIzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArJfPxgKX1thHBfdY8qFB Hw3NOP+AKNNotMCKB0YRBSMXruuxm9FYtP4BC7H6ddq11tuClLWASNw8J2N0ewNm z7tVlIp5Ms531YU8ZPEFaGvczLAa1KNaiO45CqBK0UTZ7HWBjeAVaqLrtgtvJ9fe yWqvs36W1EV+ovuCKSXHlMrY5utJ0QJz3jWqNlEPW99Ou6lcB2+81XEUphYqxY5u jN4K6t/U4HNf1JjEv5aNZK7g69WE0gYvoZ4uM+iTgrcUhMggI+XCrZ9QBN6iNwEN ieqQAm3EoRu0CMQq6ubeKR14nOJ8yjDkfW/7XsdQypR5Ad0X/eK7H5sWFnMpJrEb xQ== -----END CERTIFICATE-----Generated at Sun Mar 29 11:13:10 2026 by rpki-client