$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft File: ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft (raw, json) Hash identifier: QY89CL4iTI9CO/d2wD2GP86zKCBRgRL68rZHu6yvzcg= Subject key identifier: F4:7E:FA:43:17:90:9E:6C:7E:F6:43:CB:D4:BB:0F:54:8F:5D:14:30 Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66 Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566 Certificate serial: 0199FC2149FE73D09B1D0F74C1D483A7FA76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft Manifest number: 072A Signing time: Sun 19 Oct 2025 11:01:03 +0000 Manifest this update: Sun 19 Oct 2025 11:01:03 +0000 Manifest next update: Mon 20 Oct 2025 11:01:03 +0000 Files and hashes: 1: 1-uTBCLOK73rHSJLOlUQ-epuLoy8.roa (hash: Bqcx0fgQqDT5DRqxLv9EmiSVlrc1SMjWRU26HKGHfk0=) 2: 5V2g6MJj7dsq53aQs_gefLBp5Z4.roa (hash: GtrQ3gaHPox47NPapYnseB3SBuPrMZKw5czf1Xj3ENg=) 3: 8GsKkPCNYtANPJyVZQmZ5T10KvI.roa (hash: zX2E+FfBNNuuVeq4vGDgBKP+nDjvCw1D0NMFDjkyZQQ=) 4: ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl (hash: dsgFpp6c9F71sKBR60ojA8KctT7MNLVdvaDjyuEuv40=) 5: BidivErepoioJfqkh8JqhsT6Y0E.roa (hash: gPDhk6nw0RaD24YbC59K5ViOofzgizOeouA5It+O86c=) 6: BpM-voHb9K2iJxJY8SxNfPQuLF4.roa (hash: 1PYFIRJEPMW2UgztqnKtVEYDwZbmHSrG3iRca3uOxto=) 7: Bv6MBTedcpr_B6_oO8eTccBIQXE.roa (hash: M4DlQKoz0wcJrMEgONkFSivGcd9oRnwKT0iyKzZRR1U=) 8: D93WpefA2fEKH5CwkxHRVKVVGDE.roa (hash: sejvSUljcvRNijzUP45J9DLRfVxOV0EFmP0l7r/w6JE=) 9: GObcR9hgxYtKxaUXaZ0nwJvCSlI.roa (hash: mJ4r9DD2kUaHJKv7RZ1iwemftAsaMPHMdIq5FZLHqHM=) 10: OR-q2mr40h2Mxz1GJNBEkMgDXfk.roa (hash: OZOrHpvHdNdldGGtmy643oboyvE3QirCRL6jGNlpTTE=) 11: OzmL8MqAa2-X27J7Du7ob4hEFDo.roa (hash: 67bO8d1cBVGdosTH6AkLFRrzveWa066aLizEU+HXDw8=) 12: X6hpALPvB09npx39S49umMA-THA.roa (hash: PoYWJMZDu5dCmNIBFkjyxLfCTBJCBDYsgzUbvy53DiA=) 13: _9bFBYB_k6GXZHR1-xZAhQ3eul4.roa (hash: 34A0Q3Dk3Owj3UknY1ubH8nl0XA87N5T5ZjBHePpvlQ=) 14: bo4OF6d3WBwVINWIFOBfuv1feWM.roa (hash: WIlEeoS03KZhYkB/WVxtVnsXKvvfA/PVNs3E9rKLLHc=) 15: brMk3gl69Me1_usejlq7n_aFcbs.roa (hash: XIBruDiDrzwuJ2km6f10dEO4egVqiOzQXAOAx/azAoI=) 16: cEVPwNbLIFpJQaQN99L79YbdZFs.roa (hash: 7yqd4jXtQb5LIzfk6g4nBxk7f59NFM9ePlx7mxIWUTM=) 17: f6xCmAT1EvkpF_dM7V8B0WZ2JzY.roa (hash: /Uli5evUzqWgPNfeMCmH6c7Sm84Knk09uKihlQyb6BE=) 18: k6kKIVAv-jwyDzCK8KCndkKezm4.roa (hash: 9OfjcrTpYlDZtVI65z19fiMSAQ7JmOuVXABpqc0KiR0=) 19: paDHFexShR8IgT1Cfs8ojH6itFs.roa (hash: 0S2IjKwmwpAXhezTE4dwFNaoTX7yEnubobJWMu7C1i4=) 20: w_3OHe3oBHAstdFpj23_j9IY5z0.roa (hash: DkSON5pUO9oWMI7L2Ago3db4u/NlpBI0OJjsuIhumIM=) 21: yWsq8ztQpda_SybRwY3Ir3EqckU.roa (hash: vKk1jV9P2hHEV9u5O5eqBjFX7vf7BhEUoVBK1pR0NME=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:21:49:fe:73:d0:9b:1d:0f:74:c1:d4:83:a7:fa:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566 Validity Not Before: Oct 19 11:01:03 2025 GMT Not After : Oct 20 11:01:03 2025 GMT Subject: CN=f47efa4317909e6c7ef643cbd4bb0f548f5d1430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c0:22:53:27:51:c7:c5:a7:63:96:47:f7:31: aa:fd:cc:1d:29:c9:77:8c:18:23:d5:2b:82:f9:6a: 66:73:a7:50:0e:77:bf:33:9a:41:f8:43:2e:63:8d: 3f:27:f4:1b:05:1d:1b:0a:4b:e4:2b:d4:c1:d2:09: 3b:94:81:86:09:48:3f:54:00:35:c1:6e:6c:6b:b4: cc:81:2b:e9:0f:78:77:b1:74:76:16:15:0f:d3:49: d1:5d:31:17:45:6e:09:d7:45:42:34:06:66:31:a0: dd:81:0d:d9:72:cb:85:82:85:36:ce:e8:b7:f8:4f: ea:65:7e:04:64:fb:28:e7:43:28:97:6f:01:a8:1e: e4:a4:ed:34:8e:bb:9c:c3:b3:6c:1b:53:5b:86:02: 70:d6:d8:d5:ec:29:a8:bf:7f:b9:c8:05:48:12:b7: 33:6e:9f:ce:d1:9c:1a:e4:6c:65:f3:5a:51:36:f4: 8e:d5:23:a1:80:50:9e:76:e9:e3:99:2a:1c:aa:e9: 67:32:ab:e4:80:69:91:de:b7:1d:c6:17:ea:c9:c4: 30:e5:2e:7d:66:39:da:2c:5f:65:cb:5e:81:3d:5f: 00:b1:64:ce:d5:e0:95:ce:1f:49:99:f1:92:88:08: f9:bd:e7:0f:9a:83:84:50:66:40:65:04:85:aa:78: 17:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:7E:FA:43:17:90:9E:6C:7E:F6:43:CB:D4:BB:0F:54:8F:5D:14:30 X509v3 Authority Key Identifier: keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:55:d6:ea:32:2c:cf:76:30:89:2c:9b:71:5c:cd:0e:09:b2: a3:27:ed:55:de:cb:ac:d5:50:51:85:fc:52:df:c3:87:af:1e: 61:45:ee:8b:43:61:a2:ab:ae:01:8e:b8:03:f8:fa:4e:86:9c: 70:56:d8:cb:c2:c1:aa:3b:10:5e:19:70:7b:42:55:e8:08:43: 2c:d3:c0:3f:74:df:53:40:35:71:f9:72:a2:62:5c:67:35:9a: 07:d0:ce:ee:65:76:6f:54:d3:53:e8:90:1e:0a:b0:91:cf:97: 15:0b:73:15:f7:a1:b6:d8:4b:d5:7f:90:29:23:ce:a5:92:2c: fd:c3:b1:08:e2:1d:f7:77:90:30:06:27:99:e0:5f:a4:4b:12: 87:03:14:38:15:0d:ca:f5:68:6b:af:12:55:f4:c2:0c:5a:70: 62:f6:91:ae:9c:be:b9:3b:a6:dc:0e:1f:2b:32:41:53:84:7c: b4:76:6f:c6:e6:af:a3:95:40:d1:75:c3:0c:93:c2:b2:7a:55: db:28:b7:5f:85:0a:e0:09:88:70:e6:56:f9:6a:ba:2f:7b:9a: 55:83:79:d2:d0:5e:ee:86:20:72:b2:aa:e8:4b:7c:82:4a:2d: 3c:96:2b:22:5a:16:cc:f6:11:33:e4:40:eb:4e:3c:af:69:58: c4:40:c4:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8IUn+c9CbHQ90wdSDp/p2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMjY0N2M4MDFmYjU4ZmNmYWFjMTM1YmI0OGY1ZTYxZmVh N2U1NjYwHhcNMjUxMDE5MTEwMTAzWhcNMjUxMDIwMTEwMTAzWjAzMTEwLwYDVQQD EyhmNDdlZmE0MzE3OTA5ZTZjN2VmNjQzY2JkNGJiMGY1NDhmNWQxNDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8AiUydRx8WnY5ZH9zGq/cwdKcl3 jBgj1SuC+Wpmc6dQDne/M5pB+EMuY40/J/QbBR0bCkvkK9TB0gk7lIGGCUg/VAA1 wW5sa7TMgSvpD3h3sXR2FhUP00nRXTEXRW4J10VCNAZmMaDdgQ3ZcsuFgoU2zui3 +E/qZX4EZPso50Mol28BqB7kpO00jrucw7NsG1NbhgJw1tjV7Cmov3+5yAVIErcz bp/O0Zwa5Gxl81pRNvSO1SOhgFCedunjmSocqulnMqvkgGmR3rcdxhfqycQw5S59 ZjnaLF9ly16BPV8AsWTO1eCVzh9JmfGSiAj5vecPmoOEUGZAZQSFqngXrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPR++kMXkJ5sfvZDy9S7D1SPXRQwMB8GA1UdIwQY MBaAFAAmR8gB+1j8+qwTW7SPXmH+p+VmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODIt OTRlZmJmNWNlY2Q0LzEvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODItOTRlZmJmNWNlY2Q0 LzEvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHlXW6jIs z3YwiSybcVzNDgmyoyftVd7LrNVQUYX8Ut/Dh68eYUXui0NhoquuAY64A/j6Toac cFbYy8LBqjsQXhlwe0JV6AhDLNPAP3TfU0A1cflyomJcZzWaB9DO7mV2b1TTU+iQ Hgqwkc+XFQtzFfehtthL1X+QKSPOpZIs/cOxCOId93eQMAYnmeBfpEsShwMUOBUN yvVoa68SVfTCDFpwYvaRrpy+uTum3A4fKzJBU4R8tHZvxuavo5VA0XXDDJPCsnpV 2yi3X4UK4AmIcOZW+Wq6L3uaVYN50tBe7oYgcrKq6Et8gkotPJYrIloWzPYRM+RA 6048r2lYxEDEMg== -----END CERTIFICATE-----Generated at Sun Oct 19 15:32:46 2025 by rpki-client