$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft File: ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft (raw, json) Hash identifier: /cj86vf6wYelp78fj4eTF50YDQvZ+xk09W9Ju3T6f2A= Subject key identifier: CC:B8:67:46:9C:B1:AF:BD:88:E7:28:3D:DA:49:9A:81:0C:E1:C0:39 Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66 Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566 Certificate serial: 0196718AEFDD58728ADC75182ED72EA4ED47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft Manifest number: 0553 Signing time: Sat 26 Apr 2025 10:00:52 +0000 Manifest this update: Sat 26 Apr 2025 10:00:52 +0000 Manifest next update: Sun 27 Apr 2025 10:00:52 +0000 Files and hashes: 1: 1-uTBCLOK73rHSJLOlUQ-epuLoy8.roa (hash: Bqcx0fgQqDT5DRqxLv9EmiSVlrc1SMjWRU26HKGHfk0=) 2: 5V2g6MJj7dsq53aQs_gefLBp5Z4.roa (hash: GtrQ3gaHPox47NPapYnseB3SBuPrMZKw5czf1Xj3ENg=) 3: 8GsKkPCNYtANPJyVZQmZ5T10KvI.roa (hash: zX2E+FfBNNuuVeq4vGDgBKP+nDjvCw1D0NMFDjkyZQQ=) 4: ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl (hash: FHlyA+knF5v8OrJIPueIvsHwf7v6QjuUDwf9C+HCdOM=) 5: BpM-voHb9K2iJxJY8SxNfPQuLF4.roa (hash: 1PYFIRJEPMW2UgztqnKtVEYDwZbmHSrG3iRca3uOxto=) 6: Bv6MBTedcpr_B6_oO8eTccBIQXE.roa (hash: M4DlQKoz0wcJrMEgONkFSivGcd9oRnwKT0iyKzZRR1U=) 7: D93WpefA2fEKH5CwkxHRVKVVGDE.roa (hash: sejvSUljcvRNijzUP45J9DLRfVxOV0EFmP0l7r/w6JE=) 8: OR-q2mr40h2Mxz1GJNBEkMgDXfk.roa (hash: OZOrHpvHdNdldGGtmy643oboyvE3QirCRL6jGNlpTTE=) 9: OzmL8MqAa2-X27J7Du7ob4hEFDo.roa (hash: 67bO8d1cBVGdosTH6AkLFRrzveWa066aLizEU+HXDw8=) 10: X6hpALPvB09npx39S49umMA-THA.roa (hash: PoYWJMZDu5dCmNIBFkjyxLfCTBJCBDYsgzUbvy53DiA=) 11: _4-ItSG7lzRWqaVeFLJ47MKTBAg.roa (hash: numi1Mm92iPYflurCL97ngTmRb514cYINRaa5RuvK2s=) 12: _9bFBYB_k6GXZHR1-xZAhQ3eul4.roa (hash: 34A0Q3Dk3Owj3UknY1ubH8nl0XA87N5T5ZjBHePpvlQ=) 13: bo4OF6d3WBwVINWIFOBfuv1feWM.roa (hash: WIlEeoS03KZhYkB/WVxtVnsXKvvfA/PVNs3E9rKLLHc=) 14: brMk3gl69Me1_usejlq7n_aFcbs.roa (hash: XIBruDiDrzwuJ2km6f10dEO4egVqiOzQXAOAx/azAoI=) 15: cEVPwNbLIFpJQaQN99L79YbdZFs.roa (hash: 7yqd4jXtQb5LIzfk6g4nBxk7f59NFM9ePlx7mxIWUTM=) 16: f6xCmAT1EvkpF_dM7V8B0WZ2JzY.roa (hash: /Uli5evUzqWgPNfeMCmH6c7Sm84Knk09uKihlQyb6BE=) 17: k6kKIVAv-jwyDzCK8KCndkKezm4.roa (hash: 9OfjcrTpYlDZtVI65z19fiMSAQ7JmOuVXABpqc0KiR0=) 18: nmIlkSXw6C8WkWVj6hI0bVg-2gI.roa (hash: nUHXIqF73O7wBBY96SxdeauHwHyuVlB3NyPq0pYeTaU=) 19: paDHFexShR8IgT1Cfs8ojH6itFs.roa (hash: 0S2IjKwmwpAXhezTE4dwFNaoTX7yEnubobJWMu7C1i4=) 20: w_3OHe3oBHAstdFpj23_j9IY5z0.roa (hash: DkSON5pUO9oWMI7L2Ago3db4u/NlpBI0OJjsuIhumIM=) 21: xfVr9fISlXEqAQiEKv6HOjoj5r0.roa (hash: E/Me9Hr6n61NIohLAXFLD6LM7KKjtEyjxNrmC/bwtgE=) 22: yWsq8ztQpda_SybRwY3Ir3EqckU.roa (hash: vKk1jV9P2hHEV9u5O5eqBjFX7vf7BhEUoVBK1pR0NME=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 10:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:71:8a:ef:dd:58:72:8a:dc:75:18:2e:d7:2e:a4:ed:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566 Validity Not Before: Apr 26 10:00:52 2025 GMT Not After : Apr 27 10:00:52 2025 GMT Subject: CN=ccb867469cb1afbd88e7283dda499a810ce1c039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:fd:ee:86:25:ed:a2:f5:4e:26:4f:c2:a7:26: 45:7a:1e:63:be:93:9c:f7:7c:9f:10:1c:c6:27:37: 53:da:7d:4b:c6:ec:63:00:90:4b:59:d1:09:45:df: 9f:ef:f1:25:93:0a:f3:a9:56:0c:d4:c3:a9:6a:05: bd:07:77:ba:2d:d1:a0:bf:a8:4c:ac:82:04:2b:1a: 4d:05:5b:97:a3:6d:ab:4d:25:bb:50:63:e8:c0:4d: 46:fa:ff:7d:b5:8b:a6:01:b4:9e:53:73:b1:b6:08: 4e:3d:bc:e2:33:39:fb:55:93:d2:e9:f0:00:53:dc: 01:27:50:a4:48:85:be:ec:ca:e2:8a:08:6a:ae:43: 65:6b:ed:87:56:33:40:e3:ae:5d:08:86:f9:2e:17: ad:1c:c2:f3:46:4c:9b:7e:9f:b8:9a:78:0f:1b:c3: 8f:9e:b1:27:47:ad:5f:04:25:6c:55:b2:da:61:96: 2e:5e:4d:e8:0e:29:63:98:58:2e:8a:14:2b:41:63: 52:dc:37:07:7b:aa:9e:5a:91:2b:a9:69:1d:00:70: 55:12:34:d8:44:86:08:bc:f8:c0:17:b5:a6:be:b7: 0a:cf:90:ea:4d:26:42:6a:bf:69:08:e0:3b:38:45: b0:29:c5:ab:78:c8:35:bb:a7:0c:75:91:70:b8:be: b1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B8:67:46:9C:B1:AF:BD:88:E7:28:3D:DA:49:9A:81:0C:E1:C0:39 X509v3 Authority Key Identifier: keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:91:c2:65:e5:c5:b0:6f:3d:35:e1:4d:7e:8a:0f:c9:13:1e: 1e:f2:6d:e5:4e:2c:b2:0d:92:e4:36:7f:10:35:45:61:22:a5: 8a:0f:d5:92:72:f3:ce:64:84:b2:69:25:e7:e7:b4:25:e4:0a: 7f:d8:98:2a:ee:81:26:14:0b:4f:b2:68:35:e8:39:a9:d9:83: d3:fd:aa:af:f1:cd:d6:ce:7a:66:43:38:4f:88:fb:bd:0a:5b: e6:f6:07:ed:1d:7c:d4:21:69:e0:7e:19:6c:b1:48:15:41:28: 44:b4:d7:57:04:24:b2:05:a1:d9:64:08:e8:e0:f1:91:a4:a0: 2e:7e:0d:0a:4f:40:5c:4d:b7:fa:fc:56:f5:44:d2:44:6b:0c: 71:3f:c6:cd:6f:61:e9:23:6d:a6:e7:13:14:33:db:96:0d:83: 99:d6:68:bc:b4:ea:f1:52:f7:42:d6:b7:6f:6f:88:fb:fd:1c: 30:ca:0b:2d:30:72:2b:94:8a:ce:9e:c2:8a:61:29:68:c5:21: 1b:7d:f5:e8:af:d1:8e:ac:c5:7e:90:5f:bb:95:0e:23:bc:cf: 4f:0e:ad:9e:d5:cd:16:50:41:7d:37:9a:17:6d:57:41:32:73: 0b:b3:02:c8:93:48:a9:34:22:26:dc:2e:61:2f:eb:be:2d:c5: 02:c8:37:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZxiu/dWHKK3HUYLtcupO1HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMjY0N2M4MDFmYjU4ZmNmYWFjMTM1YmI0OGY1ZTYxZmVh N2U1NjYwHhcNMjUwNDI2MTAwMDUyWhcNMjUwNDI3MTAwMDUyWjAzMTEwLwYDVQQD EyhjY2I4Njc0NjljYjFhZmJkODhlNzI4M2RkYTQ5OWE4MTBjZTFjMDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1P3uhiXtovVOJk/CpyZFeh5jvpOc 93yfEBzGJzdT2n1LxuxjAJBLWdEJRd+f7/ElkwrzqVYM1MOpagW9B3e6LdGgv6hM rIIEKxpNBVuXo22rTSW7UGPowE1G+v99tYumAbSeU3OxtghOPbziMzn7VZPS6fAA U9wBJ1CkSIW+7MriighqrkNla+2HVjNA465dCIb5LhetHMLzRkybfp+4mngPG8OP nrEnR61fBCVsVbLaYZYuXk3oDiljmFguihQrQWNS3DcHe6qeWpErqWkdAHBVEjTY RIYIvPjAF7WmvrcKz5DqTSZCar9pCOA7OEWwKcWreMg1u6cMdZFwuL6xAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMy4Z0acsa+9iOcoPdpJmoEM4cA5MB8GA1UdIwQY MBaAFAAmR8gB+1j8+qwTW7SPXmH+p+VmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODIt OTRlZmJmNWNlY2Q0LzEvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODItOTRlZmJmNWNlY2Q0 LzEvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA5HCZeXF sG89NeFNfooPyRMeHvJt5U4ssg2S5DZ/EDVFYSKlig/VknLzzmSEsmkl5+e0JeQK f9iYKu6BJhQLT7JoNeg5qdmD0/2qr/HN1s56ZkM4T4j7vQpb5vYH7R181CFp4H4Z bLFIFUEoRLTXVwQksgWh2WQI6ODxkaSgLn4NCk9AXE23+vxW9UTSRGsMcT/GzW9h 6SNtpucTFDPblg2DmdZovLTq8VL3Qta3b2+I+/0cMMoLLTByK5SKzp7CimEpaMUh G3316K/RjqzFfpBfu5UOI7zPTw6tntXNFlBBfTeaF21XQTJzC7MCyJNIqTQiJtwu YS/rvi3FAsg3VA== -----END CERTIFICATE-----Generated at Sat Apr 26 19:14:43 2025 by rpki-client