$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft File: ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft (raw, json) Hash identifier: li1JNxZcLNV8AGqad0Ojm3IbcP8GQFt4+FWMKmDUbgs= Subject key identifier: 31:B1:F6:55:2F:AF:D1:21:2B:FC:CB:32:90:53:4B:F0:7D:C1:D7:5F Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66 Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566 Certificate serial: 01A1DB3854E37E913AC7D2CA12F699CDC3BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft Manifest number: 0B44 Signing time: Sat 14 Nov 2026 18:01:04 +0000 Manifest this update: Sat 14 Nov 2026 18:01:04 +0000 Manifest next update: Sun 15 Nov 2026 18:01:04 +0000 Files and hashes: 1: 42iMMMRyCj6t5Gb7iHxpdxdIZnw.roa (hash: oV05xJ3ianPj2d2p5u2rAJjPxzr+kZmbQ6SGxfEYdL0=) 2: 9skBFy-gVmDl-nkjxXAKgHcli-I.roa (hash: 7gSJ6zN5NW6BGUihBJnVoBFmgqEGP4fmTIDMGINspMU=) 3: ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl (hash: RgYrlGIBnS+kcJ0x5QaJK6Y8z5q9EU+E6oWr6CavFRY=) 4: CYN-6kj2u9HIpYoQ3hmgvSsB35k.roa (hash: uoS5teZaIQEfymaaNdwi0VIQaDXV2jMrircb9XoayTE=) 5: Cn2XHyeB81WqaZSjg7QBfwHD8CU.roa (hash: +H1tXQmNkJ0PpJOqloukby4uXtryrpKFGs7NDZGKF+U=) 6: Eh1zKu3hD9M9mfNTxR_zbWN_UoY.roa (hash: LmM/Lacelv6UENbWxP7rIgedmTwgXdIq3BTIdVtbP+c=) 7: IzioJZxghFwgMTnVeVHHpMj-swI.roa (hash: wRkEhmwjz0Z3CuNMqban/3il9wF+W+3UoPcrnrnPUQI=) 8: RHYHLfX7MZwqTOjtai1Px4dZdUk.roa (hash: 9gqUDjHutLNZlP+IlfjuYLEG7YjcoaY1UFU3hwr+l/I=) 9: U0T21bHsT2j1MueUQfzfVxTuFZQ.roa (hash: 8mdLmQ605wsI8HkkExAKeuL0NcxSn5gGLXOqg42+2n8=) 10: XrhTyd43MHncGJTMciHpODy7294.roa (hash: yVW52UUrwkYiOF8JUIP6W3uIzWKuFx7yMBbNqolCFRo=) 11: ZTRYP_xNQ-xHfjwU3V1iHE8I5Sk.roa (hash: 82wNZlZVa9PTuuaZD0iq9g3BjS5GghQ+K3v6FuHGgcA=) 12: fd8bJA8DM-0zr8RLGfMJuFRYj1U.roa (hash: AOSETmD6hQ/zex92QpyDr+KfP3AtnIbAXfSo/7qIWOQ=) 13: gsmGiuBcv0H2dNMyzqGYlvMZgB8.roa (hash: YAjRepSXiV21hnlqtzGBka5AQsC2Q/c9dyI4/lADp+0=) 14: qfDAGHDDZhbG_VUXj0goKE-xsTE.roa (hash: 00PBxTZATabx2MDk9b4T2x5pqNTy64WZzmYqaLHUFhk=) 15: qp8bK0_zELwwRnea3kYnPZuv5kU.roa (hash: KKFbcXLRieVJeInE5UEIj+fyTeLEa9fncQ29NqsfdFw=) 16: u5dp8n3I7jflzjFJbZJ5BPdSfSg.roa (hash: SdwZS8EmIER4C5RBFO+zi0xPjMT8sLGC4SKpUhZ0ViQ=) 17: xuhDpHE2bnYdJOoJ6yInvIa6YrE.roa (hash: ohBVT4HyJLZk/hzU7rkg4mhr642F6fJ3Kl5PbeKWAPM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 12:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:db:38:54:e3:7e:91:3a:c7:d2:ca:12:f6:99:cd:c3:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566 Validity Not Before: Nov 14 18:01:04 2026 GMT Not After : Nov 15 18:01:04 2026 GMT Subject: CN=31b1f6552fafd1212bfccb3290534bf07dc1d75f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5b:ce:42:95:f9:57:19:5a:e6:9e:f4:3b:02: de:1c:9f:87:2f:dc:78:84:35:8a:7b:d0:cc:68:6d: 9d:c7:cd:7c:86:2a:11:b3:1f:2e:de:23:4d:79:e3: 09:3c:2d:a0:bd:33:af:4c:00:a0:81:3f:60:e3:e5: 1e:41:7a:1d:b2:f2:31:44:75:dc:63:e2:b3:37:50: 40:04:cb:66:6d:c7:41:75:36:ce:f2:d1:11:e7:ea: 00:8a:c5:67:3d:c0:38:4f:3f:d5:6a:b9:b4:54:54: 91:82:0f:72:36:81:4f:f5:75:68:ed:39:50:71:94: 8d:c2:7b:3b:db:28:37:21:78:60:bc:93:2c:c4:45: d6:05:e3:7f:ba:8f:63:96:0e:4e:c5:cd:7a:5b:69: 6b:a9:2c:2b:7e:8b:28:8d:3e:0c:1d:7e:bd:d2:90: ab:2b:5c:6d:fa:d6:80:b1:b9:24:86:e4:3e:d7:2b: 13:31:0e:7c:e7:0b:43:45:6a:e6:8d:7b:da:e3:02: b6:d6:12:ff:cf:22:56:ab:fe:95:dd:3b:d8:7c:2c: e7:a6:9b:6c:d8:99:67:d0:24:df:17:52:bb:37:7c: 98:80:08:db:15:96:bf:02:16:22:96:cc:c6:de:b5: f1:21:ba:81:46:ff:02:f8:31:bd:a3:f9:8d:d8:fa: 7c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:B1:F6:55:2F:AF:D1:21:2B:FC:CB:32:90:53:4B:F0:7D:C1:D7:5F X509v3 Authority Key Identifier: keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:53:fd:72:59:37:50:3f:f7:b0:9d:5a:57:37:48:5d:00:af: b3:12:9e:d0:70:d7:11:d9:19:25:92:5b:64:65:35:c4:6e:d2: 89:65:9f:f9:da:3a:da:a5:b8:27:3d:41:c0:f8:dc:19:e4:0e: 2c:6c:39:e0:37:e6:2d:fd:ce:6f:57:23:11:47:c4:86:9d:30: 5c:1a:69:0e:da:48:97:3b:3e:e3:cb:bb:23:32:a4:ce:3f:7a: e6:b8:a8:97:04:02:5c:f8:6d:f2:40:fc:28:af:59:04:e3:71: 01:69:8a:7b:0c:71:78:e3:13:6f:d3:66:8e:48:f4:55:5d:7f: 27:72:17:04:18:3e:70:d4:18:f1:af:8a:46:a5:f6:df:33:41: ca:b8:fb:ba:31:be:81:ae:61:52:ac:44:bb:42:5e:2f:45:6d: 8e:83:91:88:cb:bf:6e:3f:33:d1:f1:1b:95:6c:fe:5f:30:fb: a3:0e:8b:47:d9:80:62:b3:1d:02:ac:15:ab:51:f6:ef:bf:0b: 83:ee:35:16:7c:21:56:b5:70:f6:2b:c9:cf:a2:a3:19:6b:7d: f5:8b:3d:10:c3:6e:d7:93:44:c0:bc:8d:3c:ba:29:ad:b6:49: f0:aa:e9:20:64:b4:b5:01:d8:2d:ee:b1:9a:dc:ad:29:8e:e9: 89:40:73:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHbOFTjfpE6x9LKEvaZzcO/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMjY0N2M4MDFmYjU4ZmNmYWFjMTM1YmI0OGY1ZTYxZmVh N2U1NjYwHhcNMjYxMTE0MTgwMTA0WhcNMjYxMTE1MTgwMTA0WjAzMTEwLwYDVQQD EygzMWIxZjY1NTJmYWZkMTIxMmJmY2NiMzI5MDUzNGJmMDdkYzFkNzVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVvOQpX5Vxla5p70OwLeHJ+HL9x4 hDWKe9DMaG2dx818hioRsx8u3iNNeeMJPC2gvTOvTACggT9g4+UeQXodsvIxRHXc Y+KzN1BABMtmbcdBdTbO8tER5+oAisVnPcA4Tz/Varm0VFSRgg9yNoFP9XVo7TlQ cZSNwns72yg3IXhgvJMsxEXWBeN/uo9jlg5Oxc16W2lrqSwrfosojT4MHX690pCr K1xt+taAsbkkhuQ+1ysTMQ585wtDRWrmjXva4wK21hL/zyJWq/6V3TvYfCznppts 2Jln0CTfF1K7N3yYgAjbFZa/AhYilszG3rXxIbqBRv8C+DG9o/mN2Pp8jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDGx9lUvr9EhK/zLMpBTS/B9wddfMB8GA1UdIwQY MBaAFAAmR8gB+1j8+qwTW7SPXmH+p+VmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODIt OTRlZmJmNWNlY2Q0LzEvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODItOTRlZmJmNWNlY2Q0 LzEvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASlP9clk3 UD/3sJ1aVzdIXQCvsxKe0HDXEdkZJZJbZGU1xG7SiWWf+do62qW4Jz1BwPjcGeQO LGw54DfmLf3Ob1cjEUfEhp0wXBppDtpIlzs+48u7IzKkzj965riolwQCXPht8kD8 KK9ZBONxAWmKewxxeOMTb9Nmjkj0VV1/J3IXBBg+cNQY8a+KRqX23zNByrj7ujG+ ga5hUqxEu0JeL0VtjoORiMu/bj8z0fEblWz+XzD7ow6LR9mAYrMdAqwVq1H2778L g+41FnwhVrVw9ivJz6KjGWt99Ys9EMNu15NEwLyNPLoprbZJ8KrpIGS0tQHYLe6x mtytKY7piUBzww== -----END CERTIFICATE-----Generated at Sat Nov 14 22:37:09 2026 by rpki-client