$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft File: ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft (raw, json) Hash identifier: wVyYSGrbAtmYTe87E87n0SC3pevsFNsflQE00b0b6c4= Subject key identifier: 43:11:91:0B:80:F7:CB:75:AA:02:E3:E6:98:71:C2:75:5C:ED:73:02 Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66 Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566 Certificate serial: 019F90C770AD66F781C6305BD4EE7C6D61B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft Manifest number: 0A13 Signing time: Thu 23 Jul 2026 21:00:17 +0000 Manifest this update: Thu 23 Jul 2026 21:00:17 +0000 Manifest next update: Fri 24 Jul 2026 21:00:17 +0000 Files and hashes: 1: 42iMMMRyCj6t5Gb7iHxpdxdIZnw.roa (hash: oV05xJ3ianPj2d2p5u2rAJjPxzr+kZmbQ6SGxfEYdL0=) 2: 9skBFy-gVmDl-nkjxXAKgHcli-I.roa (hash: 7gSJ6zN5NW6BGUihBJnVoBFmgqEGP4fmTIDMGINspMU=) 3: ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl (hash: lbWj+Zkqv/VSbDXF92AcidqQNguD144uXtru4vMRo6U=) 4: CYN-6kj2u9HIpYoQ3hmgvSsB35k.roa (hash: uoS5teZaIQEfymaaNdwi0VIQaDXV2jMrircb9XoayTE=) 5: Cn2XHyeB81WqaZSjg7QBfwHD8CU.roa (hash: +H1tXQmNkJ0PpJOqloukby4uXtryrpKFGs7NDZGKF+U=) 6: Eh1zKu3hD9M9mfNTxR_zbWN_UoY.roa (hash: LmM/Lacelv6UENbWxP7rIgedmTwgXdIq3BTIdVtbP+c=) 7: GXpP16JP0Mjym_u_vszjldIXucM.roa (hash: 0GFGujZKcR3Ga+pFC/exC5L1CnjeKo6DgEs39y2hAc4=) 8: GpC8kKK46MldSup1gVZrU7Mojzc.roa (hash: 6Lu5Oq012D9LKfKVQhXUujBxyGtMssHHbOSP5uQ8bhw=) 9: IzioJZxghFwgMTnVeVHHpMj-swI.roa (hash: wRkEhmwjz0Z3CuNMqban/3il9wF+W+3UoPcrnrnPUQI=) 10: NGpHbF0qELe-yypRyZG8QYDDkQ8.roa (hash: STZ8+oAAgWpB89YtrloGqm8ffW2z9KJfLq0rIu0hcT0=) 11: RHYHLfX7MZwqTOjtai1Px4dZdUk.roa (hash: 9gqUDjHutLNZlP+IlfjuYLEG7YjcoaY1UFU3hwr+l/I=) 12: SyWHbYOnHu_cvDaajuYM-To7M1w.roa (hash: YSRENKcj3fhKWRCWRTPdwxBLbJ6LeYaoc5YN/u+MBoM=) 13: U0T21bHsT2j1MueUQfzfVxTuFZQ.roa (hash: 8mdLmQ605wsI8HkkExAKeuL0NcxSn5gGLXOqg42+2n8=) 14: ZTRYP_xNQ-xHfjwU3V1iHE8I5Sk.roa (hash: 82wNZlZVa9PTuuaZD0iq9g3BjS5GghQ+K3v6FuHGgcA=) 15: eSvAFbt4I_ny3rlI1qsQVvR095k.roa (hash: ASQ/McMElv2jG1XUE+eDIGnRMZkt0bsbVgcxyB63q5k=) 16: fd8bJA8DM-0zr8RLGfMJuFRYj1U.roa (hash: AOSETmD6hQ/zex92QpyDr+KfP3AtnIbAXfSo/7qIWOQ=) 17: gsmGiuBcv0H2dNMyzqGYlvMZgB8.roa (hash: YAjRepSXiV21hnlqtzGBka5AQsC2Q/c9dyI4/lADp+0=) 18: u5dp8n3I7jflzjFJbZJ5BPdSfSg.roa (hash: SdwZS8EmIER4C5RBFO+zi0xPjMT8sLGC4SKpUhZ0ViQ=) 19: xuhDpHE2bnYdJOoJ6yInvIa6YrE.roa (hash: ohBVT4HyJLZk/hzU7rkg4mhr642F6fJ3Kl5PbeKWAPM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:c7:70:ad:66:f7:81:c6:30:5b:d4:ee:7c:6d:61:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566 Validity Not Before: Jul 23 21:00:17 2026 GMT Not After : Jul 24 21:00:17 2026 GMT Subject: CN=4311910b80f7cb75aa02e3e69871c2755ced7302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:48:0c:8f:c3:37:68:c4:d9:20:b5:07:73:67: ad:b1:7c:ab:15:56:9e:67:e7:a2:dc:a3:d7:a0:2f: 72:53:fb:0a:bf:0a:78:84:86:0d:49:83:13:38:cd: 47:8e:3b:1a:49:50:67:4d:06:1d:63:27:96:18:6b: b5:51:3c:15:b4:47:6a:b6:9c:a7:2c:73:ae:34:e0: fb:ad:4c:0d:96:75:9b:37:cc:d3:00:02:fd:4e:fe: 6b:37:fe:94:9c:72:a4:6e:0e:48:9a:69:15:5e:20: 4d:34:13:c8:51:3e:ef:32:70:7b:85:03:e7:ad:13: c7:6d:f8:24:0b:b8:80:21:a6:a2:86:bb:5d:d5:b0: 98:95:4d:d4:94:b6:46:8b:59:2f:2d:e0:06:92:4d: 4d:9d:79:24:64:2e:40:37:23:a5:4a:bf:18:15:0d: aa:a4:34:56:89:b3:0b:fb:c7:c9:4e:f4:2a:ca:e9: d2:51:c1:6b:3b:ae:bb:8f:0e:24:0d:02:1d:45:16: 2c:7b:ea:f2:3e:6d:f5:14:23:7b:3f:fb:be:44:eb: 8c:e7:3c:c5:ce:d3:a7:65:51:0f:20:a8:b6:73:81: 9d:75:88:15:56:b3:0b:0c:5f:e5:e0:93:91:36:1e: 4c:7c:03:28:30:9a:6d:f3:a4:ab:1f:3d:3d:9c:42: 13:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:11:91:0B:80:F7:CB:75:AA:02:E3:E6:98:71:C2:75:5C:ED:73:02 X509v3 Authority Key Identifier: keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:ef:cb:c0:bc:4d:33:f7:0f:37:b7:80:0b:95:0d:3f:95:13: 02:59:72:e0:b9:59:8f:5c:a3:3a:f7:91:6c:3f:8b:1f:7a:b9: dd:45:68:6c:02:14:a0:c6:e6:3e:34:55:da:ad:5c:f2:54:cf: 5e:91:ea:c3:05:72:9e:37:eb:10:22:e3:7f:dd:9a:d2:59:a6: d1:ed:ce:a8:7e:8e:fa:98:b7:6f:93:45:cd:00:8b:87:c3:2a: bf:df:a8:95:39:b7:b7:9c:34:1c:88:b8:7b:89:05:5f:e5:41: c6:d3:80:97:74:3d:fc:1a:a9:1b:36:fc:09:03:42:c2:6d:18: 65:ca:15:9b:ff:d9:b9:90:08:47:88:2e:20:f9:72:f8:3e:00: a1:0f:8e:8a:31:72:13:4c:c9:68:26:ca:33:d2:e1:7c:e7:a4: 4a:74:55:0b:d4:3f:29:5f:87:fb:67:90:2e:8b:5a:71:d5:ee: 07:ac:80:f2:6f:fe:57:c6:9a:d5:c3:1a:89:8a:0c:dd:75:68: 78:12:ab:8c:a9:83:08:38:3b:c2:98:3c:40:98:e3:00:ec:94: 5a:79:cf:e0:1d:98:1e:8b:a2:be:cb:2f:26:70:3c:29:8e:68: 7c:58:45:aa:72:a2:8e:54:5c:90:dc:f6:e9:c7:86:b0:5d:39: ff:07:9d:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+Qx3CtZveBxjBb1O58bWG1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMjY0N2M4MDFmYjU4ZmNmYWFjMTM1YmI0OGY1ZTYxZmVh N2U1NjYwHhcNMjYwNzIzMjEwMDE3WhcNMjYwNzI0MjEwMDE3WjAzMTEwLwYDVQQD Eyg0MzExOTEwYjgwZjdjYjc1YWEwMmUzZTY5ODcxYzI3NTVjZWQ3MzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0gMj8M3aMTZILUHc2etsXyrFVae Z+ei3KPXoC9yU/sKvwp4hIYNSYMTOM1HjjsaSVBnTQYdYyeWGGu1UTwVtEdqtpyn LHOuNOD7rUwNlnWbN8zTAAL9Tv5rN/6UnHKkbg5ImmkVXiBNNBPIUT7vMnB7hQPn rRPHbfgkC7iAIaaihrtd1bCYlU3UlLZGi1kvLeAGkk1NnXkkZC5ANyOlSr8YFQ2q pDRWibML+8fJTvQqyunSUcFrO667jw4kDQIdRRYse+ryPm31FCN7P/u+ROuM5zzF ztOnZVEPIKi2c4GddYgVVrMLDF/l4JORNh5MfAMoMJpt86SrHz09nEITRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEMRkQuA98t1qgLj5phxwnVc7XMCMB8GA1UdIwQY MBaAFAAmR8gB+1j8+qwTW7SPXmH+p+VmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODIt OTRlZmJmNWNlY2Q0LzEvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODItOTRlZmJmNWNlY2Q0 LzEvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALO/LwLxN M/cPN7eAC5UNP5UTAlly4LlZj1yjOveRbD+LH3q53UVobAIUoMbmPjRV2q1c8lTP XpHqwwVynjfrECLjf92a0lmm0e3OqH6O+pi3b5NFzQCLh8Mqv9+olTm3t5w0HIi4 e4kFX+VBxtOAl3Q9/BqpGzb8CQNCwm0YZcoVm//ZuZAIR4guIPly+D4AoQ+OijFy E0zJaCbKM9LhfOekSnRVC9Q/KV+H+2eQLotacdXuB6yA8m/+V8aa1cMaiYoM3XVo eBKrjKmDCDg7wpg8QJjjAOyUWnnP4B2YHouivssvJnA8KY5ofFhFqnKijlRckNz2 6ceGsF05/wedYg== -----END CERTIFICATE-----Generated at Fri Jul 24 00:11:25 2026 by rpki-client