$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft File: 6578E79662000496EB1540D8BD8FA65ED8D63A62.mft (raw, json) Hash identifier: 6lr6r6U7L4tr1j4X9eNrKrfVHcZ4vVvnXzyzi8WSZuk= Subject key identifier: A8:C9:98:97:A7:B9:96:91:78:06:5D:4A:90:DA:D8:C6:32:E6:92:AB Authority key identifier: 65:78:E7:96:62:00:04:96:EB:15:40:D8:BD:8F:A6:5E:D8:D6:3A:62 Certificate issuer: /CN=6578E79662000496EB1540D8BD8FA65ED8D63A62 Certificate serial: 785739BA6D0F4CBFF5F609FAC55D2C5112A4331C Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6578E79662000496EB1540D8BD8FA65ED8D63A62.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft Manifest number: 01CD Signing time: Mon 21 Sep 2026 15:11:45 +0000 Manifest this update: Mon 21 Sep 2026 15:06:45 +0000 Manifest next update: Tue 22 Sep 2026 18:03:45 +0000 Files and hashes: 1: 6578E79662000496EB1540D8BD8FA65ED8D63A62.crl (hash: BfgOhPYM+zcO2Ot6scMn7PIs0zLxDMgszyTXn+g3NCY=) 2: 326130363a613030353a6432643a3a2f34382d3438203d3e20313532333638.roa (hash: OI8GOe2+TkBj9rSGei3QzDvWunB1dmRCogAxQNNMVi8=) 3: 326130363a613030353a6432643a3a2f34382d3438203d3e203530313034.roa (hash: VPCifaYotKDxeBBkkXW6HF/0neQ4fTWKc9o0aOWVmJ8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.crl rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6578E79662000496EB1540D8BD8FA65ED8D63A62.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 18:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:57:39:ba:6d:0f:4c:bf:f5:f6:09:fa:c5:5d:2c:51:12:a4:33:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6578E79662000496EB1540D8BD8FA65ED8D63A62 Validity Not Before: Sep 21 15:06:45 2026 GMT Not After : Sep 22 18:03:45 2026 GMT Subject: CN=A8C99897A7B9969178065D4A90DAD8C632E692AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:db:38:d3:91:94:a4:4c:8e:7d:83:7c:98:cd: a4:7a:c1:e9:e4:4e:5c:54:45:c7:b2:59:08:e0:06: bc:36:d1:14:0b:b6:77:59:81:de:6b:4b:fa:85:d8: cd:b5:2b:1f:a2:5e:d6:85:57:b8:83:94:19:39:c3: 9e:95:c7:26:e2:9b:e0:18:f3:be:ee:d6:62:24:e0: ba:d1:5d:21:5a:a7:95:9f:c8:57:4f:3b:3c:4b:5b: f2:06:e2:90:5b:6a:5c:e4:14:51:db:19:1f:06:04: 51:f4:62:2d:44:9b:5b:b2:3d:2f:5a:bf:95:f0:d2: 4b:7a:c7:ee:e1:13:89:76:98:a3:88:4d:6b:39:1c: fe:cf:8a:bf:58:72:21:5a:c9:9b:5a:b3:8a:97:17: 6f:b7:2f:a6:3b:a9:2e:ff:a5:9e:ff:be:a6:d7:bd: d4:bf:fd:37:b4:f4:f0:58:24:61:2d:dc:2f:7e:50: 32:31:56:fe:d0:cf:5f:c4:89:fc:a4:12:7b:b8:de: c7:6c:1a:b9:44:7b:0a:7e:24:d3:da:62:d8:ca:3b: d1:2b:06:2b:39:e8:38:2d:82:74:7b:1a:48:c7:1c: 57:62:70:e8:01:54:8a:8a:47:7d:1a:4a:86:62:74: 7e:2c:d7:67:ad:c9:0a:03:72:4a:c8:6e:38:d1:c4: cb:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:C9:98:97:A7:B9:96:91:78:06:5D:4A:90:DA:D8:C6:32:E6:92:AB X509v3 Authority Key Identifier: keyid:65:78:E7:96:62:00:04:96:EB:15:40:D8:BD:8F:A6:5E:D8:D6:3A:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6578E79662000496EB1540D8BD8FA65ED8D63A62.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:11:3b:8d:ad:ed:32:c2:d9:d0:b6:dd:e3:74:31:96:5f:b7: b9:ab:99:d8:9c:4a:1d:07:56:8a:63:4d:46:25:c8:60:f5:d1: 0a:39:c1:a0:35:de:f6:a1:75:d1:47:69:c5:b1:8e:38:65:7e: 0a:03:65:0f:dc:d2:ed:41:20:9f:13:fe:5c:4e:94:bf:1a:0f: 01:e1:46:27:5e:a7:3c:c2:c6:21:57:8b:3a:c8:71:a4:a9:1f: e1:42:6e:d0:49:9a:22:98:f3:c0:88:9c:37:6b:46:4e:8d:84: 3f:99:a1:65:69:fe:e3:32:3f:b4:70:01:46:5f:5d:f8:6e:94: c3:03:4b:c5:b6:f4:61:a6:98:ad:ce:93:be:b6:68:ef:22:5b: 87:8c:fb:0b:ed:fb:36:30:0e:12:3c:82:72:c6:3e:84:37:90: b1:45:2f:16:4a:db:ce:92:1c:fe:eb:19:7c:25:e1:e5:92:b4: f1:c1:aa:0d:85:c2:32:5e:6a:45:54:b1:ac:97:e1:d2:b2:d0: a2:5f:05:2b:f8:b2:d8:3d:67:d6:a0:3e:d8:1a:9b:10:e9:53: 8d:25:b6:55:a7:0e:b6:1f:18:d0:50:87:fa:30:dc:a9:93:ac: 51:7b:ad:0e:7f:6c:b6:fb:98:e5:96:71:3a:89:0b:27:a4:c5: 36:13:64:ca -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUeFc5um0PTL/19gn6xV0sURKkMxwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU3OEU3OTY2MjAwMDQ5NkVCMTU0MEQ4QkQ4RkE2NUVE OEQ2M0E2MjAeFw0yNjA5MjExNTA2NDVaFw0yNjA5MjIxODAzNDVaMDMxMTAvBgNV BAMTKEE4Qzk5ODk3QTdCOTk2OTE3ODA2NUQ0QTkwREFEOEM2MzJFNjkyQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB2zjTkZSkTI59g3yYzaR6wenk TlxURceyWQjgBrw20RQLtndZgd5rS/qF2M21Kx+iXtaFV7iDlBk5w56Vxybim+AY 877u1mIk4LrRXSFap5WfyFdPOzxLW/IG4pBbalzkFFHbGR8GBFH0Yi1Em1uyPS9a v5Xw0kt6x+7hE4l2mKOITWs5HP7Pir9YciFayZtas4qXF2+3L6Y7qS7/pZ7/vqbX vdS//Te09PBYJGEt3C9+UDIxVv7Qz1/EifykEnu43sdsGrlEewp+JNPaYtjKO9Er Bis56DgtgnR7GkjHHFdicOgBVIqKR30aSoZidH4s12etyQoDckrIbjjRxMsLAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUqMmYl6e5lpF4Bl1KkNrYxjLmkqswHwYDVR0j BBgwFoAUZXjnlmIABJbrFUDYvY+mXtjWOmIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVk OGM0LzgvNjU3OEU3OTY2MjAwMDQ5NkVCMTU0MEQ4QkQ4RkE2NUVEOEQ2M0E2Mi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNjU3OEU3OTY2MjAwMDQ5NkVCMTU0MEQ4QkQ4RkE2NUVEOEQ2 M0E2Mi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmQzMDZiNC1l NWMzLTQ4ZjktYjJlZS0zNmE5YmRkZWQ4YzQvOC82NTc4RTc5NjYyMDAwNDk2RUIx NTQwRDhCRDhGQTY1RUQ4RDYzQTYyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAexE7ja3tMsLZ0Lbd43Qx ll+3uauZ2JxKHQdWimNNRiXIYPXRCjnBoDXe9qF10UdpxbGOOGV+CgNlD9zS7UEg nxP+XE6UvxoPAeFGJ16nPMLGIVeLOshxpKkf4UJu0EmaIpjzwIicN2tGTo2EP5mh ZWn+4zI/tHABRl9d+G6UwwNLxbb0YaaYrc6TvrZo7yJbh4z7C+37NjAOEjyCcsY+ hDeQsUUvFkrbzpIc/usZfCXh5ZK08cGqDYXCMl5qRVSxrJfh0rLQol8FK/iy2D1n 1qA+2BqbEOlTjSW2VacOth8Y0FCH+jDcqZOsUXutDn9stvuY5ZZxOokLJ6TFNhNk yg== -----END CERTIFICATE-----Generated at Tue Sep 22 07:43:06 2026 by rpki-client