$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft File: ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft (raw, json) Hash identifier: 6e6wS3kIHB+Hh43VJfyIIcD3IyXGGfON+RZONRTXhP4= Subject key identifier: 20:22:0C:B6:0F:51:E5:3B:DF:E2:2A:8F:25:62:D9:95:6D:0B:98:A9 Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66 Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566 Certificate serial: 019923D6291CCADF73614107388E1F8DE664 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft Manifest number: 06BA Signing time: Sun 07 Sep 2025 11:01:01 +0000 Manifest this update: Sun 07 Sep 2025 11:01:01 +0000 Manifest next update: Mon 08 Sep 2025 11:01:01 +0000 Files and hashes: 1: 1-uTBCLOK73rHSJLOlUQ-epuLoy8.roa (hash: Bqcx0fgQqDT5DRqxLv9EmiSVlrc1SMjWRU26HKGHfk0=) 2: 5V2g6MJj7dsq53aQs_gefLBp5Z4.roa (hash: GtrQ3gaHPox47NPapYnseB3SBuPrMZKw5czf1Xj3ENg=) 3: 8GsKkPCNYtANPJyVZQmZ5T10KvI.roa (hash: zX2E+FfBNNuuVeq4vGDgBKP+nDjvCw1D0NMFDjkyZQQ=) 4: ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl (hash: /a83crwkt3fvL2eYPGOYmMiFDwhMrWNmunluMOv7Bac=) 5: BidivErepoioJfqkh8JqhsT6Y0E.roa (hash: gPDhk6nw0RaD24YbC59K5ViOofzgizOeouA5It+O86c=) 6: BpM-voHb9K2iJxJY8SxNfPQuLF4.roa (hash: 1PYFIRJEPMW2UgztqnKtVEYDwZbmHSrG3iRca3uOxto=) 7: Bv6MBTedcpr_B6_oO8eTccBIQXE.roa (hash: M4DlQKoz0wcJrMEgONkFSivGcd9oRnwKT0iyKzZRR1U=) 8: D93WpefA2fEKH5CwkxHRVKVVGDE.roa (hash: sejvSUljcvRNijzUP45J9DLRfVxOV0EFmP0l7r/w6JE=) 9: GObcR9hgxYtKxaUXaZ0nwJvCSlI.roa (hash: mJ4r9DD2kUaHJKv7RZ1iwemftAsaMPHMdIq5FZLHqHM=) 10: OR-q2mr40h2Mxz1GJNBEkMgDXfk.roa (hash: OZOrHpvHdNdldGGtmy643oboyvE3QirCRL6jGNlpTTE=) 11: OzmL8MqAa2-X27J7Du7ob4hEFDo.roa (hash: 67bO8d1cBVGdosTH6AkLFRrzveWa066aLizEU+HXDw8=) 12: X6hpALPvB09npx39S49umMA-THA.roa (hash: PoYWJMZDu5dCmNIBFkjyxLfCTBJCBDYsgzUbvy53DiA=) 13: _9bFBYB_k6GXZHR1-xZAhQ3eul4.roa (hash: 34A0Q3Dk3Owj3UknY1ubH8nl0XA87N5T5ZjBHePpvlQ=) 14: bo4OF6d3WBwVINWIFOBfuv1feWM.roa (hash: WIlEeoS03KZhYkB/WVxtVnsXKvvfA/PVNs3E9rKLLHc=) 15: brMk3gl69Me1_usejlq7n_aFcbs.roa (hash: XIBruDiDrzwuJ2km6f10dEO4egVqiOzQXAOAx/azAoI=) 16: cEVPwNbLIFpJQaQN99L79YbdZFs.roa (hash: 7yqd4jXtQb5LIzfk6g4nBxk7f59NFM9ePlx7mxIWUTM=) 17: f6xCmAT1EvkpF_dM7V8B0WZ2JzY.roa (hash: /Uli5evUzqWgPNfeMCmH6c7Sm84Knk09uKihlQyb6BE=) 18: k6kKIVAv-jwyDzCK8KCndkKezm4.roa (hash: 9OfjcrTpYlDZtVI65z19fiMSAQ7JmOuVXABpqc0KiR0=) 19: paDHFexShR8IgT1Cfs8ojH6itFs.roa (hash: 0S2IjKwmwpAXhezTE4dwFNaoTX7yEnubobJWMu7C1i4=) 20: w_3OHe3oBHAstdFpj23_j9IY5z0.roa (hash: DkSON5pUO9oWMI7L2Ago3db4u/NlpBI0OJjsuIhumIM=) 21: yWsq8ztQpda_SybRwY3Ir3EqckU.roa (hash: vKk1jV9P2hHEV9u5O5eqBjFX7vf7BhEUoVBK1pR0NME=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 07:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:23:d6:29:1c:ca:df:73:61:41:07:38:8e:1f:8d:e6:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566 Validity Not Before: Sep 7 11:01:01 2025 GMT Not After : Sep 8 11:01:01 2025 GMT Subject: CN=20220cb60f51e53bdfe22a8f2562d9956d0b98a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:09:0c:af:e8:7f:c4:5a:62:67:b5:c4:7f:32: d7:0d:c8:0d:a5:1b:7c:c9:29:d6:93:b5:0c:2c:0f: 21:ef:be:0d:9d:9f:20:64:a0:3b:97:a8:66:d4:4f: b2:50:74:07:a9:7c:44:c2:d9:af:b1:20:5a:90:dc: 79:61:d7:01:7a:ca:49:d7:d9:c9:54:4f:d5:6b:40: 97:d4:45:dd:5b:fc:c3:ac:80:9d:00:c1:c7:e4:ee: 9e:03:20:fb:cb:83:ef:e6:29:81:ad:98:72:87:b9: 9b:fb:1d:3e:e2:12:a1:ab:2e:5b:94:1c:68:ee:10: 00:97:37:32:73:76:fc:6f:79:fd:5e:47:cc:a8:b9: 10:34:5d:a6:6a:1b:ad:fb:67:5e:b1:30:8d:0d:f9: b3:35:6b:08:90:a2:78:7b:b3:42:18:0d:28:fb:08: c8:7e:4a:62:a9:f3:31:92:d3:5b:08:48:15:1d:7a: 41:9f:49:42:a1:9c:3e:48:3d:a4:a4:cc:08:a7:c1: d3:4c:79:7e:ce:43:ab:28:4c:f3:9e:84:56:43:19: cb:39:73:17:c6:85:a5:37:cc:ca:05:11:96:f4:79: 0f:85:65:6e:03:f1:35:d9:93:5d:70:88:32:a1:7e: e8:b1:43:22:62:72:b0:de:98:57:0d:21:11:20:1c: 81:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:22:0C:B6:0F:51:E5:3B:DF:E2:2A:8F:25:62:D9:95:6D:0B:98:A9 X509v3 Authority Key Identifier: keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:b9:0c:b0:71:b8:66:49:4f:fd:18:12:1d:6a:23:ad:e2:60: e6:7b:d8:65:78:91:b3:64:95:56:56:30:7d:22:f5:9d:a3:23: d0:6f:ff:54:43:c2:6d:59:fc:ac:ed:d6:fe:8e:d8:40:46:a9: 48:79:d9:fc:a1:c8:68:45:fd:b7:3d:36:6e:01:f4:dc:e7:5c: e4:2d:3a:9f:4d:99:3b:47:17:46:ed:e9:c6:d8:76:56:38:14: 27:b3:9b:86:7b:95:88:f0:fc:f4:65:cc:fe:de:3b:45:41:64: c8:c7:d9:34:a3:2a:f3:88:88:45:85:57:a2:34:24:20:3a:5d: 16:d6:93:d8:7a:0c:52:8c:fe:fd:80:ff:81:0b:b0:41:52:a9: 42:b8:66:32:37:6a:9c:07:0c:eb:59:ae:5b:0a:ac:e7:6a:ad: 04:6b:e3:28:6d:79:28:60:37:56:85:ca:c2:aa:d1:ee:0d:88: 7b:25:c6:2e:9d:57:fb:59:a9:12:7e:90:6d:0f:c1:5b:f6:4a: 9e:98:26:c9:a4:22:0c:16:8f:17:59:1f:5c:8e:ab:0c:ac:7c: 0e:3a:8d:56:85:c8:f7:34:68:c0:50:c2:50:1b:f7:22:d0:f4: 81:f0:22:21:4d:8e:0c:dd:a3:31:b8:7e:0c:08:b2:e2:c1:c6: 0f:fe:72:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkj1ikcyt9zYUEHOI4fjeZkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMjY0N2M4MDFmYjU4ZmNmYWFjMTM1YmI0OGY1ZTYxZmVh N2U1NjYwHhcNMjUwOTA3MTEwMTAxWhcNMjUwOTA4MTEwMTAxWjAzMTEwLwYDVQQD EygyMDIyMGNiNjBmNTFlNTNiZGZlMjJhOGYyNTYyZDk5NTZkMGI5OGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9wkMr+h/xFpiZ7XEfzLXDcgNpRt8 ySnWk7UMLA8h774NnZ8gZKA7l6hm1E+yUHQHqXxEwtmvsSBakNx5YdcBespJ19nJ VE/Va0CX1EXdW/zDrICdAMHH5O6eAyD7y4Pv5imBrZhyh7mb+x0+4hKhqy5blBxo 7hAAlzcyc3b8b3n9XkfMqLkQNF2mahut+2desTCNDfmzNWsIkKJ4e7NCGA0o+wjI fkpiqfMxktNbCEgVHXpBn0lCoZw+SD2kpMwIp8HTTHl+zkOrKEzznoRWQxnLOXMX xoWlN8zKBRGW9HkPhWVuA/E12ZNdcIgyoX7osUMiYnKw3phXDSERIByBUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCAiDLYPUeU73+IqjyVi2ZVtC5ipMB8GA1UdIwQY MBaAFAAmR8gB+1j8+qwTW7SPXmH+p+VmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODIt OTRlZmJmNWNlY2Q0LzEvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODItOTRlZmJmNWNlY2Q0 LzEvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAabkMsHG4 ZklP/RgSHWojreJg5nvYZXiRs2SVVlYwfSL1naMj0G//VEPCbVn8rO3W/o7YQEap SHnZ/KHIaEX9tz02bgH03Odc5C06n02ZO0cXRu3pxth2VjgUJ7ObhnuViPD89GXM /t47RUFkyMfZNKMq84iIRYVXojQkIDpdFtaT2HoMUoz+/YD/gQuwQVKpQrhmMjdq nAcM61muWwqs52qtBGvjKG15KGA3VoXKwqrR7g2IeyXGLp1X+1mpEn6QbQ/BW/ZK npgmyaQiDBaPF1kfXI6rDKx8DjqNVoXI9zRowFDCUBv3ItD0gfAiIU2ODN2jMbh+ DAiy4sHGD/5yDg== -----END CERTIFICATE-----Generated at Sun Sep 7 15:02:58 2025 by rpki-client