$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft File: 78D65D4A22DF705BEED7B3432FBE48A356597724.mft (raw, json) Hash identifier: rClnFk0sGLvvr1TP31l23kVQ/dfR39BOVK/eWx/SB5c= Subject key identifier: 27:7C:54:27:14:7A:11:EF:89:3F:21:95:8F:AB:E6:B5:E4:F0:66:09 Authority key identifier: 78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24 Certificate issuer: /CN=78d65d4a22df705beed7b3432fbe48a356597724 Certificate serial: 314939A434FFCD2909455A889B0E006550DD85AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft Manifest number: 0143 Signing time: Fri 17 Apr 2026 02:39:42 +0000 Manifest this update: Fri 17 Apr 2026 02:34:42 +0000 Manifest next update: Sat 18 Apr 2026 04:02:42 +0000 Files and hashes: 1: 38302e38332e3138382e302f32322d3234203d3e203133333335.roa (hash: ov3ZqP6jiN7cSR/XwriGpMFcKSiH0bdEErZFAioDoh0=) 2: 3138352e36392e322e302f32342d3234203d3e203539373136.roa (hash: C4vtZUJ4sSvWQ2xt2gUpLOR/9kh093F6GFa+cSWJX6U=) 3: 3138352e3139302e3232382e302f32332d3234203d3e203634323637.roa (hash: 2kT+9B/A73HgiDRsVM67yiwhxTHl0CNzJa5JlwqD97w=) 4: 323030313a346365383a3a2f32392d3239203d3e203539373136.roa (hash: CgDSfpo0IftLrA7o4eNAILZADKAHzaR3sZbqAdusdP4=) 5: 3138352e3139302e3232382e302f32332d3234203d3e203332313332.roa (hash: jVr1HOM/vAQFN9/2YcEKEGs7D1zQDrdtbTvacM//wP0=) 6: 323030313a346365383a3a2f33322d3332203d3e20323530.roa (hash: zJJBd2Rg1C8mF3Brr7ZPVnCCMMdyplxley/QZ6Up3Cg=) 7: 38302e38332e3138342e302f32322d3232203d3e203539373136.roa (hash: olHSbZHs/2t98PZjXMrMMRiZVSEe6IbSK97ATG0UHJ0=) 8: 3138352e3139302e3232382e302f32332d3234203d3e203534323532.roa (hash: sZFQBZdBZHG+LxDLkg7xE6HoKkP9FywXWpCF+8QUNCA=) 9: 38302e38332e3138382e302f32322d3234203d3e20323039323432.roa (hash: wR1ots0KV1BStFiGqKk2l3iZgyPIrhhcn8rzZHOEx3E=) 10: 78D65D4A22DF705BEED7B3432FBE48A356597724.crl (hash: QyslsoUoWfMAKIGPAMVCdaFAJ8oZhVf8dJlbZMuvMis=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 04:02:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:49:39:a4:34:ff:cd:29:09:45:5a:88:9b:0e:00:65:50:dd:85:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78d65d4a22df705beed7b3432fbe48a356597724 Validity Not Before: Apr 17 02:34:42 2026 GMT Not After : Apr 18 04:02:42 2026 GMT Subject: CN=277C5427147A11EF893F21958FABE6B5E4F06609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:36:c7:21:b5:4c:14:f0:81:85:1d:fc:7c:4e: 53:3f:77:65:fa:4e:4a:a5:bc:0c:27:ab:77:b6:1d: e3:63:8f:68:ce:0f:6b:fb:27:10:f4:de:7f:ee:80: 20:d0:4d:d0:6e:20:f4:5d:21:c4:c5:9b:60:b0:bf: 14:8a:c8:52:e1:f6:37:14:4a:0b:64:cc:d8:1d:b0: b3:dd:c9:66:2a:a6:bd:63:d7:b3:0e:86:42:49:ae: 0e:9f:f1:e9:20:c2:b1:e5:09:e5:52:dd:0e:47:17: b5:3c:ff:aa:7c:db:a0:82:f2:22:01:36:87:e4:2b: 6f:14:99:f0:7b:29:b2:91:8d:ba:d6:3d:d1:24:0d: c5:58:59:b1:4e:ff:b7:4f:30:e8:a8:30:61:39:b3: 5c:0f:88:01:e0:f4:d8:00:02:70:40:c4:68:1d:78: e4:c5:90:6e:02:9d:fc:8c:fc:7e:94:7e:a8:d5:e2: 09:3e:03:d7:99:66:23:72:78:8c:09:27:9a:1c:3f: f9:fd:cf:62:c4:2f:b7:84:b1:bc:3a:5f:ea:ac:c5: 56:94:01:09:1f:05:96:2b:05:bc:56:b2:64:19:16: af:fd:5b:87:f4:e6:b9:f1:31:ae:92:a1:ff:0b:fc: 78:a4:9f:82:79:d6:f4:1f:35:45:d4:fe:e5:d9:64: d7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:7C:54:27:14:7A:11:EF:89:3F:21:95:8F:AB:E6:B5:E4:F0:66:09 X509v3 Authority Key Identifier: keyid:78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:21:5e:3b:a6:c8:15:c0:37:15:8b:bd:9f:2b:64:2b:a5:da: fe:14:1c:f6:2e:ca:e2:25:61:76:b4:0f:c3:dc:05:9a:ea:64: ed:55:5b:81:e6:af:38:a5:6b:75:88:9b:cd:1a:a7:6c:dd:7b: 4d:71:6d:48:b8:46:12:fa:fa:70:cc:3b:47:7e:b7:50:04:c4: e1:08:73:26:2e:7e:53:a1:82:e0:2f:a5:7e:8b:79:7c:7b:80: 7c:48:5e:af:ed:db:52:9e:c5:26:f0:46:35:e4:c6:c6:00:c3: 99:23:09:3a:c5:b0:d1:85:31:4a:c7:a7:12:2f:7f:6f:d7:40: c7:53:9c:95:61:94:b0:ad:ea:c6:77:b4:3c:cc:ca:ce:a2:e7: 00:5a:d2:5f:27:38:5d:7b:ee:94:2b:80:7c:3f:20:52:7c:45: 85:af:c1:74:42:89:15:e4:38:07:50:1a:53:dc:da:02:ba:22: c9:c4:96:0b:24:de:58:6e:78:41:e2:4b:fd:20:80:4e:2f:12: 5e:e2:d7:45:45:34:d2:6b:59:96:26:54:8b:70:14:d2:e2:5d: 39:07:a9:fe:cc:fe:ef:63:2e:f5:95:8a:9e:54:a9:fc:8d:c0: 46:e0:c4:a5:77:47:69:ee:29:94:bd:aa:63:b0:7e:d4:33:ea: 6f:ea:ca:53 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUMUk5pDT/zSkJRVqImw4AZVDdhawwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhkNjVkNGEyMmRmNzA1YmVlZDdiMzQzMmZiZTQ4YTM1 NjU5NzcyNDAeFw0yNjA0MTcwMjM0NDJaFw0yNjA0MTgwNDAyNDJaMDMxMTAvBgNV BAMTKDI3N0M1NDI3MTQ3QTExRUY4OTNGMjE5NThGQUJFNkI1RTRGMDY2MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDANschtUwU8IGFHfx8TlM/d2X6 TkqlvAwnq3e2HeNjj2jOD2v7JxD03n/ugCDQTdBuIPRdIcTFm2CwvxSKyFLh9jcU SgtkzNgdsLPdyWYqpr1j17MOhkJJrg6f8ekgwrHlCeVS3Q5HF7U8/6p826CC8iIB NofkK28UmfB7KbKRjbrWPdEkDcVYWbFO/7dPMOioMGE5s1wPiAHg9NgAAnBAxGgd eOTFkG4CnfyM/H6UfqjV4gk+A9eZZiNyeIwJJ5ocP/n9z2LEL7eEsbw6X+qsxVaU AQkfBZYrBbxWsmQZFq/9W4f05rnxMa6Sof8L/Hikn4J51vQfNUXU/uXZZNd1AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUJ3xUJxR6Ee+JPyGVj6vmteTwZgkwHwYDVR0j BBgwFoAUeNZdSiLfcFvu17NDL75Io1ZZdyQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODkyNWFkMTUtYWYwYi00NWNkLWI4ODMtMWEwNThmYTBl YmExLzAvNzhENjVENEEyMkRGNzA1QkVFRDdCMzQzMkZCRTQ4QTM1NjU5NzcyNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VOWmRTaUxmY0Z2dTE3TkRMNzVJbzFa WmR5US5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI1YWQxNS1h ZjBiLTQ1Y2QtYjg4My0xYTA1OGZhMGViYTEvMC83OEQ2NUQ0QTIyREY3MDVCRUVE N0IzNDMyRkJFNDhBMzU2NTk3NzI0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAryFeO6bIFcA3FYu9nytk K6Xa/hQc9i7K4iVhdrQPw9wFmupk7VVbgeavOKVrdYibzRqnbN17TXFtSLhGEvr6 cMw7R363UATE4QhzJi5+U6GC4C+lfot5fHuAfEher+3bUp7FJvBGNeTGxgDDmSMJ OsWw0YUxSsenEi9/b9dAx1OclWGUsK3qxne0PMzKzqLnAFrSXyc4XXvulCuAfD8g UnxFha/BdEKJFeQ4B1AaU9zaAroiycSWCyTeWG54QeJL/SCATi8SXuLXRUU00mtZ liZUi3AU0uJdOQep/sz+72Mu9ZWKnlSp/I3ARuDEpXdHae4plL2qY7B+1DPqb+rK Uw== -----END CERTIFICATE-----Generated at Fri Apr 17 13:36:26 2026 by rpki-client