$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft File: 78D65D4A22DF705BEED7B3432FBE48A356597724.mft (raw, json) Hash identifier: nHV1+0u2ruvkrUke/EhVCmWrSHQSRMlnDExBDmhCO20= Subject key identifier: BB:DA:22:67:83:42:C0:05:A5:77:EA:41:A7:CC:BC:44:04:C4:1B:35 Authority key identifier: 78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24 Certificate issuer: /CN=78d65d4a22df705beed7b3432fbe48a356597724 Certificate serial: 0C76D26EB4DB993A9405F49AFD2001B61BC06675 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft Manifest number: 67 Signing time: Tue 04 Nov 2025 12:52:06 +0000 Manifest this update: Tue 04 Nov 2025 12:47:06 +0000 Manifest next update: Wed 05 Nov 2025 14:47:06 +0000 Files and hashes: 1: 38302e38332e3138342e302f32322d3232203d3e203539373136.roa (hash: olHSbZHs/2t98PZjXMrMMRiZVSEe6IbSK97ATG0UHJ0=) 2: 3138352e3139302e3233302e302f32332d3233203d3e20383334.roa (hash: eLnp9xbWzQy8+riuHENjho7TBbXl2Hx1/6Vkaczbghg=) 3: 323030313a346365383a3a2f33322d3332203d3e20323530.roa (hash: zJJBd2Rg1C8mF3Brr7ZPVnCCMMdyplxley/QZ6Up3Cg=) 4: 38302e38332e3138382e302f32322d3234203d3e203634323637.roa (hash: usGVmfBSjshsI+jZ0UI5vbfRCtEIbFpWtlpk5JhJZu8=) 5: 3138352e36392e322e302f32342d3234203d3e203539373136.roa (hash: C4vtZUJ4sSvWQ2xt2gUpLOR/9kh093F6GFa+cSWJX6U=) 6: 38302e38332e3138392e302f32342d3234203d3e20333937363330.roa (hash: buBr0nPzFwtnExYzKZ33K40LR3ws0xsbE+PF1JfUozA=) 7: 38302e38332e3138382e302f32342d3234203d3e203634323637.roa (hash: Zn2fU/zf/URUjzPX4k5UlzylOiLYtLrcrJVzOaLXmd8=) 8: 38302e38332e3138382e302f32322d3234203d3e203534323532.roa (hash: oxLxEjiJHAfR5sb7doKgFq8fOEt0To+nubINa8ThuEA=) 9: 323030313a346365383a3a2f32392d3239203d3e203539373136.roa (hash: CgDSfpo0IftLrA7o4eNAILZADKAHzaR3sZbqAdusdP4=) 10: 78D65D4A22DF705BEED7B3432FBE48A356597724.crl (hash: WuxSYxewisEDNnLZEbCymawZyFJH1/FYGG/5b0cnhtM=) 11: 3138352e3139302e3232382e302f32332d3233203d3e20383334.roa (hash: o5JJVAsBzcUVFNJ8gFI9g37VvghyzApiiIfu6sGCWy8=) 12: 38302e38332e3138382e302f32322d3234203d3e20333937363330.roa (hash: we+BIDcecMDdhb3LTIFwBqfI4/tuGmFvD0wy77xN0HU=) 13: 38302e38332e3139312e302f32342d3234203d3e203534323532.roa (hash: t/r9GueVtBRqkEzG5ECpDmGAbhT8tQffnXyVbWMfuP8=) 14: 38302e38332e3139302e302f32342d3234203d3e203634323637.roa (hash: e7OjSlp/jABhHoAxV0NvuSo5CYOdNcptQrwcU0YPf4I=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 14:47:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:76:d2:6e:b4:db:99:3a:94:05:f4:9a:fd:20:01:b6:1b:c0:66:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78d65d4a22df705beed7b3432fbe48a356597724 Validity Not Before: Nov 4 12:47:06 2025 GMT Not After : Nov 5 14:47:06 2025 GMT Subject: CN=BBDA22678342C005A577EA41A7CCBC4404C41B35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:6e:f1:bd:81:bb:02:8b:cb:30:d6:a3:0b:da: ff:5a:f3:5f:04:28:2a:85:ad:5c:e0:7a:29:22:8b: b4:7e:3f:46:82:e7:15:86:f8:e4:7c:fb:7e:41:2a: da:1a:a1:89:fa:61:0a:56:41:f6:ad:ec:20:4f:3e: 16:1d:15:86:23:db:71:f1:4b:ac:00:bd:53:76:2b: 66:f5:d8:76:c6:5f:67:ed:55:81:c1:7f:d3:e0:46: 48:c4:23:78:77:6f:ac:e8:c6:13:62:dc:a0:6f:64: 63:fe:70:1a:fe:d9:a6:b3:45:c8:aa:82:cc:cb:8a: 8d:74:da:40:47:0e:a5:f4:28:61:f9:7d:79:b9:68: 5b:7d:42:ba:d1:1c:2a:00:83:1e:08:66:1f:f2:68: 1f:20:97:54:9d:fc:32:32:29:d8:1d:06:d1:fa:62: 95:41:cd:3e:ff:53:11:6f:9b:bf:cb:e1:05:45:bb: 5a:87:92:8e:21:2b:c1:95:77:06:6a:cc:4e:75:89: 19:06:36:dc:69:36:0d:86:1a:67:e2:cf:51:e9:96: 00:21:1e:16:93:d7:58:99:19:71:76:e2:23:e3:67: 98:3b:ce:4a:56:76:ab:cd:9b:7d:8f:aa:e2:39:c7: 7f:97:64:90:a5:d1:ad:36:98:04:fa:97:46:5e:cf: 12:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:DA:22:67:83:42:C0:05:A5:77:EA:41:A7:CC:BC:44:04:C4:1B:35 X509v3 Authority Key Identifier: keyid:78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:80:ca:ab:20:60:ef:a9:84:07:13:e9:10:71:ec:5b:b5:a3: 24:1b:da:05:c1:c9:9c:6d:f5:89:10:f1:5b:cf:88:5b:f1:de: 27:53:29:b3:47:3c:bf:ce:b7:0d:73:02:28:ef:0b:94:16:12: 2d:25:f3:01:05:a6:0d:eb:72:2d:11:cf:10:a2:a9:cc:50:16: 50:9f:1c:a4:70:a9:d6:70:3d:2d:ae:df:3b:1c:11:de:a1:ed: 51:44:56:99:18:42:3b:a8:0d:4b:02:f4:26:96:36:13:40:c6: ef:6b:7c:ab:c4:0f:99:19:5e:22:c0:e9:ad:5d:01:18:13:8a: cf:43:87:da:da:98:c1:02:45:6c:db:3c:fc:24:e6:04:59:b6: 2e:59:e3:fc:85:47:e7:33:b6:f6:e4:32:8c:a1:6c:b3:3e:ab: f1:e9:f6:22:db:f6:80:71:e7:11:4f:f0:63:3a:da:dc:70:ca: b6:57:47:4f:5c:cc:8b:d2:2a:24:f5:32:c7:af:1b:ec:88:23: ce:63:c2:97:23:50:e8:18:b4:36:f6:43:16:3f:09:27:fe:2c: ab:2c:99:3d:5d:a5:e7:0d:e3:45:36:65:70:2e:c0:98:b8:82: 99:33:6f:f9:01:6a:ea:90:ed:e8:f3:c5:b4:e9:81:3d:93:fe: df:d8:77:5c -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUDHbSbrTbmTqUBfSa/SABthvAZnUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhkNjVkNGEyMmRmNzA1YmVlZDdiMzQzMmZiZTQ4YTM1 NjU5NzcyNDAeFw0yNTExMDQxMjQ3MDZaFw0yNTExMDUxNDQ3MDZaMDMxMTAvBgNV BAMTKEJCREEyMjY3ODM0MkMwMDVBNTc3RUE0MUE3Q0NCQzQ0MDRDNDFCMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCObvG9gbsCi8sw1qML2v9a818E KCqFrVzgeikii7R+P0aC5xWG+OR8+35BKtoaoYn6YQpWQfat7CBPPhYdFYYj23Hx S6wAvVN2K2b12HbGX2ftVYHBf9PgRkjEI3h3b6zoxhNi3KBvZGP+cBr+2aazRciq gszLio102kBHDqX0KGH5fXm5aFt9QrrRHCoAgx4IZh/yaB8gl1Sd/DIyKdgdBtH6 YpVBzT7/UxFvm7/L4QVFu1qHko4hK8GVdwZqzE51iRkGNtxpNg2GGmfiz1HplgAh HhaT11iZGXF24iPjZ5g7zkpWdqvNm32PquI5x3+XZJCl0a02mAT6l0ZezxKBAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUu9oiZ4NCwAWld+pBp8y8RATEGzUwHwYDVR0j BBgwFoAUeNZdSiLfcFvu17NDL75Io1ZZdyQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODkyNWFkMTUtYWYwYi00NWNkLWI4ODMtMWEwNThmYTBl YmExLzAvNzhENjVENEEyMkRGNzA1QkVFRDdCMzQzMkZCRTQ4QTM1NjU5NzcyNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VOWmRTaUxmY0Z2dTE3TkRMNzVJbzFa WmR5US5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI1YWQxNS1h ZjBiLTQ1Y2QtYjg4My0xYTA1OGZhMGViYTEvMC83OEQ2NUQ0QTIyREY3MDVCRUVE N0IzNDMyRkJFNDhBMzU2NTk3NzI0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhIDKqyBg76mEBxPpEHHs W7WjJBvaBcHJnG31iRDxW8+IW/HeJ1Mps0c8v863DXMCKO8LlBYSLSXzAQWmDety LRHPEKKpzFAWUJ8cpHCp1nA9La7fOxwR3qHtUURWmRhCO6gNSwL0JpY2E0DG72t8 q8QPmRleIsDprV0BGBOKz0OH2tqYwQJFbNs8/CTmBFm2Llnj/IVH5zO29uQyjKFs sz6r8en2Itv2gHHnEU/wYzra3HDKtldHT1zMi9IqJPUyx68b7IgjzmPClyNQ6Bi0 NvZDFj8JJ/4sqyyZPV2l5w3jRTZlcC7AmLiCmTNv+QFq6pDt6PPFtOmBPZP+39h3 XA== -----END CERTIFICATE-----Generated at Wed Nov 5 02:23:37 2025 by rpki-client