$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft File: ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft (raw, json) Hash identifier: ws0FcdB6ZDcJn/VwI8ipmPlSlx6AtfvZw8FrMSQGLIc= Subject key identifier: 4F:25:83:1E:89:AC:0E:1C:83:54:B3:46:B7:8C:92:0F:0D:76:94:52 Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66 Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566 Certificate serial: 019744E68B60D50BC4D94DACA96E6C960A38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft Manifest number: 05C2 Signing time: Fri 06 Jun 2025 11:00:48 +0000 Manifest this update: Fri 06 Jun 2025 11:00:48 +0000 Manifest next update: Sat 07 Jun 2025 11:00:48 +0000 Files and hashes: 1: 1-uTBCLOK73rHSJLOlUQ-epuLoy8.roa (hash: Bqcx0fgQqDT5DRqxLv9EmiSVlrc1SMjWRU26HKGHfk0=) 2: 5V2g6MJj7dsq53aQs_gefLBp5Z4.roa (hash: GtrQ3gaHPox47NPapYnseB3SBuPrMZKw5czf1Xj3ENg=) 3: 8GsKkPCNYtANPJyVZQmZ5T10KvI.roa (hash: zX2E+FfBNNuuVeq4vGDgBKP+nDjvCw1D0NMFDjkyZQQ=) 4: ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl (hash: g/0uhxz5z8i60TZyT38h3fgkQb/vnaBxjbJZUvmGfVo=) 5: BidivErepoioJfqkh8JqhsT6Y0E.roa (hash: gPDhk6nw0RaD24YbC59K5ViOofzgizOeouA5It+O86c=) 6: BpM-voHb9K2iJxJY8SxNfPQuLF4.roa (hash: 1PYFIRJEPMW2UgztqnKtVEYDwZbmHSrG3iRca3uOxto=) 7: Bv6MBTedcpr_B6_oO8eTccBIQXE.roa (hash: M4DlQKoz0wcJrMEgONkFSivGcd9oRnwKT0iyKzZRR1U=) 8: D93WpefA2fEKH5CwkxHRVKVVGDE.roa (hash: sejvSUljcvRNijzUP45J9DLRfVxOV0EFmP0l7r/w6JE=) 9: GObcR9hgxYtKxaUXaZ0nwJvCSlI.roa (hash: mJ4r9DD2kUaHJKv7RZ1iwemftAsaMPHMdIq5FZLHqHM=) 10: OR-q2mr40h2Mxz1GJNBEkMgDXfk.roa (hash: OZOrHpvHdNdldGGtmy643oboyvE3QirCRL6jGNlpTTE=) 11: OzmL8MqAa2-X27J7Du7ob4hEFDo.roa (hash: 67bO8d1cBVGdosTH6AkLFRrzveWa066aLizEU+HXDw8=) 12: X6hpALPvB09npx39S49umMA-THA.roa (hash: PoYWJMZDu5dCmNIBFkjyxLfCTBJCBDYsgzUbvy53DiA=) 13: _9bFBYB_k6GXZHR1-xZAhQ3eul4.roa (hash: 34A0Q3Dk3Owj3UknY1ubH8nl0XA87N5T5ZjBHePpvlQ=) 14: bo4OF6d3WBwVINWIFOBfuv1feWM.roa (hash: WIlEeoS03KZhYkB/WVxtVnsXKvvfA/PVNs3E9rKLLHc=) 15: brMk3gl69Me1_usejlq7n_aFcbs.roa (hash: XIBruDiDrzwuJ2km6f10dEO4egVqiOzQXAOAx/azAoI=) 16: cEVPwNbLIFpJQaQN99L79YbdZFs.roa (hash: 7yqd4jXtQb5LIzfk6g4nBxk7f59NFM9ePlx7mxIWUTM=) 17: f6xCmAT1EvkpF_dM7V8B0WZ2JzY.roa (hash: /Uli5evUzqWgPNfeMCmH6c7Sm84Knk09uKihlQyb6BE=) 18: k6kKIVAv-jwyDzCK8KCndkKezm4.roa (hash: 9OfjcrTpYlDZtVI65z19fiMSAQ7JmOuVXABpqc0KiR0=) 19: paDHFexShR8IgT1Cfs8ojH6itFs.roa (hash: 0S2IjKwmwpAXhezTE4dwFNaoTX7yEnubobJWMu7C1i4=) 20: w_3OHe3oBHAstdFpj23_j9IY5z0.roa (hash: DkSON5pUO9oWMI7L2Ago3db4u/NlpBI0OJjsuIhumIM=) 21: yWsq8ztQpda_SybRwY3Ir3EqckU.roa (hash: vKk1jV9P2hHEV9u5O5eqBjFX7vf7BhEUoVBK1pR0NME=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 11:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:44:e6:8b:60:d5:0b:c4:d9:4d:ac:a9:6e:6c:96:0a:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566 Validity Not Before: Jun 6 11:00:48 2025 GMT Not After : Jun 7 11:00:48 2025 GMT Subject: CN=4f25831e89ac0e1c8354b346b78c920f0d769452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b3:39:f9:9f:70:6d:65:7a:e8:2e:a0:87:44: 91:c3:87:a6:e5:0c:da:b0:c2:25:03:f8:79:5c:57: 4b:53:9f:46:88:9b:6a:31:48:91:e4:33:63:6f:d3: 0f:84:1d:55:03:4b:b9:22:b3:9d:e9:17:2d:2d:bc: 2a:2d:6c:de:eb:76:a6:16:ae:5b:ab:a9:13:59:79: 8f:55:48:c0:f2:50:f5:c7:12:19:4f:94:c1:c8:7b: 8d:e6:d4:91:d6:9d:49:df:a1:0a:41:47:7f:76:90: 05:5f:f9:74:86:80:b9:df:67:f5:b4:bf:d0:42:33: 03:36:93:e8:55:e3:6c:9a:38:0c:75:0a:63:84:df: 0b:17:15:b2:e6:f6:c3:41:85:96:a7:5f:b0:11:31: 4c:bd:f6:d1:7e:8a:20:8a:88:1e:65:8d:f2:0e:0f: 09:cd:18:49:de:67:f4:b0:b0:f7:4c:d0:0a:a0:65: bc:83:75:09:c8:30:7c:24:f5:64:9d:83:d7:8e:ef: b0:ce:3c:6e:f0:8b:6f:96:da:d4:53:f6:d2:b8:56: 95:2f:3d:87:65:50:9e:ea:78:c4:1f:69:b7:bc:f0: 61:83:48:42:21:2b:39:d2:30:4d:99:21:5c:30:1f: db:0f:7b:ad:cd:8e:0c:5e:b6:1b:71:ce:6b:30:29: e6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:25:83:1E:89:AC:0E:1C:83:54:B3:46:B7:8C:92:0F:0D:76:94:52 X509v3 Authority Key Identifier: keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:fd:4a:db:ca:21:c6:27:19:63:c1:42:cf:7b:b0:d3:fb:23: 4b:d6:aa:07:07:01:1b:3d:fb:2c:b8:60:31:30:59:5d:ea:fd: 92:5e:fa:70:90:31:1d:f4:1a:fe:d6:38:41:1d:a8:46:b7:22: 3e:29:ba:af:d0:d6:10:ee:77:bc:3f:41:97:14:6c:65:44:04: c9:7c:bb:c4:56:22:bb:b1:68:5c:9f:70:e3:08:52:01:97:79: f2:7f:1d:d2:c3:a7:f4:9c:fe:e6:96:81:04:53:4f:0c:6e:f4: 4a:2b:92:8a:e2:8c:bd:e3:6a:93:39:59:3d:98:e9:ec:b8:08: da:61:30:9c:7d:e4:f1:11:58:0a:e3:06:79:e8:1f:69:b4:be: c5:f1:e9:60:ed:2e:8e:79:57:0a:9b:6f:5e:fb:c1:71:a5:0a: 50:ee:1d:a5:aa:02:d8:21:be:0f:fc:b4:04:23:bf:4b:b3:f4: 02:6b:bf:08:45:f0:bd:ba:ce:b2:ad:d7:5b:ac:3e:7f:01:2b: c1:bd:e8:71:27:80:b0:af:22:02:58:f8:6d:32:7a:53:ec:95: a7:fb:eb:06:ff:0b:95:4a:e4:63:e9:48:2f:1f:d8:28:73:26: 2e:6c:76:80:a2:db:ad:5e:31:e7:78:82:26:71:4f:3b:32:7e: 3c:e4:ea:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdE5otg1QvE2U2sqW5slgo4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMjY0N2M4MDFmYjU4ZmNmYWFjMTM1YmI0OGY1ZTYxZmVh N2U1NjYwHhcNMjUwNjA2MTEwMDQ4WhcNMjUwNjA3MTEwMDQ4WjAzMTEwLwYDVQQD Eyg0ZjI1ODMxZTg5YWMwZTFjODM1NGIzNDZiNzhjOTIwZjBkNzY5NDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbM5+Z9wbWV66C6gh0SRw4em5Qza sMIlA/h5XFdLU59GiJtqMUiR5DNjb9MPhB1VA0u5IrOd6RctLbwqLWze63amFq5b q6kTWXmPVUjA8lD1xxIZT5TByHuN5tSR1p1J36EKQUd/dpAFX/l0hoC532f1tL/Q QjMDNpPoVeNsmjgMdQpjhN8LFxWy5vbDQYWWp1+wETFMvfbRfoogiogeZY3yDg8J zRhJ3mf0sLD3TNAKoGW8g3UJyDB8JPVknYPXju+wzjxu8ItvltrUU/bSuFaVLz2H ZVCe6njEH2m3vPBhg0hCISs50jBNmSFcMB/bD3utzY4MXrYbcc5rMCnm2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE8lgx6JrA4cg1SzRreMkg8NdpRSMB8GA1UdIwQY MBaAFAAmR8gB+1j8+qwTW7SPXmH+p+VmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODIt OTRlZmJmNWNlY2Q0LzEvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODItOTRlZmJmNWNlY2Q0 LzEvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEf1K28oh xicZY8FCz3uw0/sjS9aqBwcBGz37LLhgMTBZXer9kl76cJAxHfQa/tY4QR2oRrci Pim6r9DWEO53vD9BlxRsZUQEyXy7xFYiu7FoXJ9w4whSAZd58n8d0sOn9Jz+5paB BFNPDG70SiuSiuKMveNqkzlZPZjp7LgI2mEwnH3k8RFYCuMGeegfabS+xfHpYO0u jnlXCptvXvvBcaUKUO4dpaoC2CG+D/y0BCO/S7P0Amu/CEXwvbrOsq3XW6w+fwEr wb3ocSeAsK8iAlj4bTJ6U+yVp/vrBv8LlUrkY+lILx/YKHMmLmx2gKLbrV4x53iC JnFPOzJ+POTq3Q== -----END CERTIFICATE-----Generated at Fri Jun 6 18:17:56 2025 by rpki-client