$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft File: ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft (raw, json) Hash identifier: gDZbi3fxNci085Er/vHxqZrd5ZHOobwG1LfXqN1Npos= Subject key identifier: 61:AC:98:30:E5:DC:10:54:6C:B6:F9:4C:B2:92:D1:38:6D:DF:35:34 Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66 Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566 Certificate serial: 01983A295648B1BB4A32F633B0C97A119478 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft Manifest number: 0641 Signing time: Thu 24 Jul 2025 02:00:44 +0000 Manifest this update: Thu 24 Jul 2025 02:00:44 +0000 Manifest next update: Fri 25 Jul 2025 02:00:44 +0000 Files and hashes: 1: 1-uTBCLOK73rHSJLOlUQ-epuLoy8.roa (hash: Bqcx0fgQqDT5DRqxLv9EmiSVlrc1SMjWRU26HKGHfk0=) 2: 5V2g6MJj7dsq53aQs_gefLBp5Z4.roa (hash: GtrQ3gaHPox47NPapYnseB3SBuPrMZKw5czf1Xj3ENg=) 3: 8GsKkPCNYtANPJyVZQmZ5T10KvI.roa (hash: zX2E+FfBNNuuVeq4vGDgBKP+nDjvCw1D0NMFDjkyZQQ=) 4: ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl (hash: yCbm9rT+enqXFvNIZkDOm5s6eCPIhalRB3mK0d+PZ6g=) 5: BidivErepoioJfqkh8JqhsT6Y0E.roa (hash: gPDhk6nw0RaD24YbC59K5ViOofzgizOeouA5It+O86c=) 6: BpM-voHb9K2iJxJY8SxNfPQuLF4.roa (hash: 1PYFIRJEPMW2UgztqnKtVEYDwZbmHSrG3iRca3uOxto=) 7: Bv6MBTedcpr_B6_oO8eTccBIQXE.roa (hash: M4DlQKoz0wcJrMEgONkFSivGcd9oRnwKT0iyKzZRR1U=) 8: D93WpefA2fEKH5CwkxHRVKVVGDE.roa (hash: sejvSUljcvRNijzUP45J9DLRfVxOV0EFmP0l7r/w6JE=) 9: GObcR9hgxYtKxaUXaZ0nwJvCSlI.roa (hash: mJ4r9DD2kUaHJKv7RZ1iwemftAsaMPHMdIq5FZLHqHM=) 10: OR-q2mr40h2Mxz1GJNBEkMgDXfk.roa (hash: OZOrHpvHdNdldGGtmy643oboyvE3QirCRL6jGNlpTTE=) 11: OzmL8MqAa2-X27J7Du7ob4hEFDo.roa (hash: 67bO8d1cBVGdosTH6AkLFRrzveWa066aLizEU+HXDw8=) 12: X6hpALPvB09npx39S49umMA-THA.roa (hash: PoYWJMZDu5dCmNIBFkjyxLfCTBJCBDYsgzUbvy53DiA=) 13: _9bFBYB_k6GXZHR1-xZAhQ3eul4.roa (hash: 34A0Q3Dk3Owj3UknY1ubH8nl0XA87N5T5ZjBHePpvlQ=) 14: bo4OF6d3WBwVINWIFOBfuv1feWM.roa (hash: WIlEeoS03KZhYkB/WVxtVnsXKvvfA/PVNs3E9rKLLHc=) 15: brMk3gl69Me1_usejlq7n_aFcbs.roa (hash: XIBruDiDrzwuJ2km6f10dEO4egVqiOzQXAOAx/azAoI=) 16: cEVPwNbLIFpJQaQN99L79YbdZFs.roa (hash: 7yqd4jXtQb5LIzfk6g4nBxk7f59NFM9ePlx7mxIWUTM=) 17: f6xCmAT1EvkpF_dM7V8B0WZ2JzY.roa (hash: /Uli5evUzqWgPNfeMCmH6c7Sm84Knk09uKihlQyb6BE=) 18: k6kKIVAv-jwyDzCK8KCndkKezm4.roa (hash: 9OfjcrTpYlDZtVI65z19fiMSAQ7JmOuVXABpqc0KiR0=) 19: paDHFexShR8IgT1Cfs8ojH6itFs.roa (hash: 0S2IjKwmwpAXhezTE4dwFNaoTX7yEnubobJWMu7C1i4=) 20: w_3OHe3oBHAstdFpj23_j9IY5z0.roa (hash: DkSON5pUO9oWMI7L2Ago3db4u/NlpBI0OJjsuIhumIM=) 21: yWsq8ztQpda_SybRwY3Ir3EqckU.roa (hash: vKk1jV9P2hHEV9u5O5eqBjFX7vf7BhEUoVBK1pR0NME=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Jul 2025 23:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:3a:29:56:48:b1:bb:4a:32:f6:33:b0:c9:7a:11:94:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566 Validity Not Before: Jul 24 02:00:44 2025 GMT Not After : Jul 25 02:00:44 2025 GMT Subject: CN=61ac9830e5dc10546cb6f94cb292d1386ddf3534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:dd:ef:05:20:8a:ea:09:39:1e:4d:fc:ab:c1: 09:04:3e:96:02:f1:b6:82:6d:58:df:60:d1:4a:d2: 50:a5:0f:f6:81:9d:ab:6a:63:de:1d:5e:d0:59:c3: aa:4b:da:9d:06:9c:6f:de:92:fa:17:25:ae:25:2a: 86:df:a1:c5:b9:00:77:5e:1d:ce:a2:e2:75:87:8c: 57:ad:b3:be:ac:6c:41:74:a9:22:fd:ca:f0:e7:49: 88:91:cf:97:bd:27:b3:14:d7:00:cc:df:03:9b:a3: 37:50:07:55:09:5c:8d:c0:fb:42:1e:da:0f:9c:77: 5e:35:9a:eb:e8:c6:76:1f:ff:a8:bc:9d:7f:06:75: 69:b9:d4:cd:38:14:d0:bc:c8:5a:e4:ae:a0:74:70: 2b:f0:5b:d9:f8:c7:c6:fb:cf:c8:53:bf:c0:a8:c5: e6:bc:91:a5:b7:87:17:8a:73:3f:1b:ae:d7:1f:53: 19:e8:48:d7:85:8c:a1:1d:79:5f:26:7c:7b:80:bd: 17:10:11:15:e5:ce:fd:5e:27:31:7a:53:ed:9e:5c: fd:f6:3d:e7:31:9d:fa:26:b4:74:cc:62:6a:0f:12: 48:4d:af:0e:8c:7f:42:3c:76:34:44:a7:4f:c0:29: c2:b4:90:48:b0:91:03:d1:10:3e:35:a5:aa:ba:8f: 56:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:AC:98:30:E5:DC:10:54:6C:B6:F9:4C:B2:92:D1:38:6D:DF:35:34 X509v3 Authority Key Identifier: keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:18:33:f8:15:d3:7e:40:e6:25:cd:70:5b:c6:5f:61:ee:0b: c1:e2:aa:b7:e3:59:d3:cd:6e:82:d8:df:99:ac:df:2c:42:3f: 4f:c2:b4:d7:af:32:4d:2c:51:e0:49:18:56:5f:2d:c5:1d:4b: 19:e7:36:9c:e5:73:65:10:a1:d1:b7:b3:08:0b:97:3b:e9:38: 37:0b:a4:22:79:d0:e5:81:d4:f3:51:4e:fc:db:52:10:e1:da: 94:88:13:da:a9:97:a6:cd:b7:48:c6:35:bd:3e:5b:03:a3:97: 46:f0:a1:ae:c2:da:6c:f6:32:57:c3:2e:d5:6c:01:c2:ea:bd: ab:7a:ac:33:98:17:11:5b:59:2c:5a:1f:26:7b:d7:73:86:90: 58:95:42:e6:ab:01:62:fb:01:b7:bc:d4:79:2e:65:ca:f2:6e: b4:5d:43:98:23:0f:6a:0d:4c:ea:65:ea:38:45:29:76:8d:c8: 88:38:a1:62:1e:71:b4:a2:b1:3b:07:0a:66:f3:38:ef:6b:ee: 75:7c:fb:9e:21:4b:bc:4c:27:fa:91:e2:b3:4c:5d:25:2f:c9: 84:77:dc:86:90:29:dc:7b:68:34:86:a6:cd:1b:7f:f1:4d:cb: dd:4e:57:a9:43:5e:d3:8e:99:a7:10:c7:60:e6:1e:33:fd:e8: 47:a2:cd:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg6KVZIsbtKMvYzsMl6EZR4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMjY0N2M4MDFmYjU4ZmNmYWFjMTM1YmI0OGY1ZTYxZmVh N2U1NjYwHhcNMjUwNzI0MDIwMDQ0WhcNMjUwNzI1MDIwMDQ0WjAzMTEwLwYDVQQD Eyg2MWFjOTgzMGU1ZGMxMDU0NmNiNmY5NGNiMjkyZDEzODZkZGYzNTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmt3vBSCK6gk5Hk38q8EJBD6WAvG2 gm1Y32DRStJQpQ/2gZ2ramPeHV7QWcOqS9qdBpxv3pL6FyWuJSqG36HFuQB3Xh3O ouJ1h4xXrbO+rGxBdKki/crw50mIkc+XvSezFNcAzN8Dm6M3UAdVCVyNwPtCHtoP nHdeNZrr6MZ2H/+ovJ1/BnVpudTNOBTQvMha5K6gdHAr8FvZ+MfG+8/IU7/AqMXm vJGlt4cXinM/G67XH1MZ6EjXhYyhHXlfJnx7gL0XEBEV5c79XicxelPtnlz99j3n MZ36JrR0zGJqDxJITa8OjH9CPHY0RKdPwCnCtJBIsJED0RA+NaWquo9WcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGGsmDDl3BBUbLb5TLKS0Tht3zU0MB8GA1UdIwQY MBaAFAAmR8gB+1j8+qwTW7SPXmH+p+VmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODIt OTRlZmJmNWNlY2Q0LzEvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODItOTRlZmJmNWNlY2Q0 LzEvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGhgz+BXT fkDmJc1wW8ZfYe4LweKqt+NZ081ugtjfmazfLEI/T8K0168yTSxR4EkYVl8txR1L Gec2nOVzZRCh0bezCAuXO+k4NwukInnQ5YHU81FO/NtSEOHalIgT2qmXps23SMY1 vT5bA6OXRvChrsLabPYyV8Mu1WwBwuq9q3qsM5gXEVtZLFofJnvXc4aQWJVC5qsB YvsBt7zUeS5lyvJutF1DmCMPag1M6mXqOEUpdo3IiDihYh5xtKKxOwcKZvM472vu dXz7niFLvEwn+pHis0xdJS/JhHfchpAp3HtoNIamzRt/8U3L3U5XqUNe046ZpxDH YOYeM/3oR6LNJQ== -----END CERTIFICATE-----Generated at Thu Jul 24 04:53:41 2025 by rpki-client