$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft File: ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft (raw, json) Hash identifier: ToBc3hDQk8K4cx3koBZBGvjrwFAUi2z3tuAaZrkQdTg= Subject key identifier: 7B:B4:63:9C:C2:7B:61:FE:70:8A:AE:40:09:E6:F9:BD:C5:B5:0B:E6 Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66 Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566 Certificate serial: 019A4F2B0CBCB9D5D0E7CB1BE07135031FBA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft Manifest number: 0756 Signing time: Tue 04 Nov 2025 14:00:12 +0000 Manifest this update: Tue 04 Nov 2025 14:00:12 +0000 Manifest next update: Wed 05 Nov 2025 14:00:12 +0000 Files and hashes: 1: 1-uTBCLOK73rHSJLOlUQ-epuLoy8.roa (hash: Bqcx0fgQqDT5DRqxLv9EmiSVlrc1SMjWRU26HKGHfk0=) 2: 8GsKkPCNYtANPJyVZQmZ5T10KvI.roa (hash: zX2E+FfBNNuuVeq4vGDgBKP+nDjvCw1D0NMFDjkyZQQ=) 3: ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl (hash: 40JbUjHJ/18J7h2mwsLCS7/Ce3aBYSVx3AMfKex5Hc4=) 4: BidivErepoioJfqkh8JqhsT6Y0E.roa (hash: gPDhk6nw0RaD24YbC59K5ViOofzgizOeouA5It+O86c=) 5: BpM-voHb9K2iJxJY8SxNfPQuLF4.roa (hash: 1PYFIRJEPMW2UgztqnKtVEYDwZbmHSrG3iRca3uOxto=) 6: Bv6MBTedcpr_B6_oO8eTccBIQXE.roa (hash: M4DlQKoz0wcJrMEgONkFSivGcd9oRnwKT0iyKzZRR1U=) 7: D93WpefA2fEKH5CwkxHRVKVVGDE.roa (hash: sejvSUljcvRNijzUP45J9DLRfVxOV0EFmP0l7r/w6JE=) 8: GObcR9hgxYtKxaUXaZ0nwJvCSlI.roa (hash: mJ4r9DD2kUaHJKv7RZ1iwemftAsaMPHMdIq5FZLHqHM=) 9: OR-q2mr40h2Mxz1GJNBEkMgDXfk.roa (hash: OZOrHpvHdNdldGGtmy643oboyvE3QirCRL6jGNlpTTE=) 10: OzmL8MqAa2-X27J7Du7ob4hEFDo.roa (hash: 67bO8d1cBVGdosTH6AkLFRrzveWa066aLizEU+HXDw8=) 11: X6hpALPvB09npx39S49umMA-THA.roa (hash: PoYWJMZDu5dCmNIBFkjyxLfCTBJCBDYsgzUbvy53DiA=) 12: _9bFBYB_k6GXZHR1-xZAhQ3eul4.roa (hash: 34A0Q3Dk3Owj3UknY1ubH8nl0XA87N5T5ZjBHePpvlQ=) 13: bo4OF6d3WBwVINWIFOBfuv1feWM.roa (hash: WIlEeoS03KZhYkB/WVxtVnsXKvvfA/PVNs3E9rKLLHc=) 14: brMk3gl69Me1_usejlq7n_aFcbs.roa (hash: XIBruDiDrzwuJ2km6f10dEO4egVqiOzQXAOAx/azAoI=) 15: cEVPwNbLIFpJQaQN99L79YbdZFs.roa (hash: 7yqd4jXtQb5LIzfk6g4nBxk7f59NFM9ePlx7mxIWUTM=) 16: f6xCmAT1EvkpF_dM7V8B0WZ2JzY.roa (hash: /Uli5evUzqWgPNfeMCmH6c7Sm84Knk09uKihlQyb6BE=) 17: k6kKIVAv-jwyDzCK8KCndkKezm4.roa (hash: 9OfjcrTpYlDZtVI65z19fiMSAQ7JmOuVXABpqc0KiR0=) 18: paDHFexShR8IgT1Cfs8ojH6itFs.roa (hash: 0S2IjKwmwpAXhezTE4dwFNaoTX7yEnubobJWMu7C1i4=) 19: yWsq8ztQpda_SybRwY3Ir3EqckU.roa (hash: vKk1jV9P2hHEV9u5O5eqBjFX7vf7BhEUoVBK1pR0NME=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4f:2b:0c:bc:b9:d5:d0:e7:cb:1b:e0:71:35:03:1f:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566 Validity Not Before: Nov 4 14:00:12 2025 GMT Not After : Nov 5 14:00:12 2025 GMT Subject: CN=7bb4639cc27b61fe708aae4009e6f9bdc5b50be6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c3:eb:50:16:e0:35:ff:b9:e5:4a:80:23:b4: e9:a9:80:5f:1d:9f:a5:84:32:a1:a8:c8:36:78:84: 39:3c:4d:07:57:fd:20:da:35:28:bf:87:55:03:ce: 42:3f:db:c5:b5:9e:d3:2b:9c:62:f1:8a:02:25:a8: cf:3b:52:2a:b1:13:2a:f7:26:d8:b7:72:f4:56:07: 42:1e:51:6c:a1:54:e6:90:d2:cb:fa:df:c8:20:61: 74:40:19:5a:6f:7f:bd:5d:a7:bd:f9:9e:37:fd:88: b5:d0:17:db:ff:89:b8:6f:b8:7c:aa:96:36:56:9e: 43:7b:b4:66:39:a8:28:d4:43:73:22:bb:f7:ac:1b: 61:74:8c:a7:d8:72:ab:a4:50:de:a2:21:ee:23:db: b4:bb:ea:d8:9a:a6:e2:a6:18:b6:09:2e:e8:7c:74: 10:ed:92:c0:26:8a:fc:43:81:dd:9e:9a:d8:6d:c3: a3:a3:94:e4:f8:19:06:b2:58:a6:e2:03:0b:ef:aa: c4:09:4d:34:69:54:ff:01:8d:af:2b:c3:bc:be:7d: 68:78:cd:88:0b:2c:91:0e:ad:e9:f2:ce:31:f9:83: 32:8a:2f:ec:b0:a9:24:ae:aa:ab:ce:ab:48:f6:8e: 1a:c6:18:c7:91:db:a6:7c:b9:a2:c0:da:f0:f1:84: cc:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:B4:63:9C:C2:7B:61:FE:70:8A:AE:40:09:E6:F9:BD:C5:B5:0B:E6 X509v3 Authority Key Identifier: keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:9b:45:30:02:54:ca:3a:4c:5a:b8:c3:fd:d5:cc:99:be:36: 38:7d:1e:8c:98:fe:33:f3:54:e0:0d:3a:e8:5f:7f:fc:50:ac: 12:0e:8b:c0:a0:c6:17:96:d9:76:56:37:7f:ed:14:56:b3:b7: cf:49:a5:de:6c:47:a0:9c:a3:67:92:ef:d8:af:80:db:4a:ce: 61:e7:94:b1:99:6a:33:94:34:90:fb:25:a3:70:13:1b:c0:e2: 06:b8:21:be:3c:f8:08:5b:34:1e:53:39:eb:94:23:d9:0a:9e: ef:2c:0b:95:1b:78:40:30:9f:7f:bf:3d:25:2c:09:2f:84:d6: a8:ee:70:ed:16:3d:4b:6f:f5:a4:24:24:0c:b9:6e:a4:64:b2: f3:3e:01:4f:3e:20:8f:c3:56:9d:2f:03:63:bd:f8:b7:2b:ea: ea:e7:cb:77:96:ac:9b:f2:a6:26:8e:27:b7:91:64:cd:bc:9b: 2f:a3:71:ec:85:c5:71:cf:e5:8e:d2:8b:6e:e0:e6:f4:72:9b: d2:67:80:96:86:4f:7b:ab:9d:61:17:d4:d0:ba:eb:ec:f8:2a: ea:76:c9:38:8d:81:27:0c:48:19:c0:21:79:8c:dd:4c:24:e5: 81:60:b9:0e:d9:42:af:e0:36:1e:22:ac:e6:79:b1:a7:4e:f9: 8a:a4:64:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpPKwy8udXQ58sb4HE1Ax+6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMjY0N2M4MDFmYjU4ZmNmYWFjMTM1YmI0OGY1ZTYxZmVh N2U1NjYwHhcNMjUxMTA0MTQwMDEyWhcNMjUxMTA1MTQwMDEyWjAzMTEwLwYDVQQD Eyg3YmI0NjM5Y2MyN2I2MWZlNzA4YWFlNDAwOWU2ZjliZGM1YjUwYmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMPrUBbgNf+55UqAI7TpqYBfHZ+l hDKhqMg2eIQ5PE0HV/0g2jUov4dVA85CP9vFtZ7TK5xi8YoCJajPO1IqsRMq9ybY t3L0VgdCHlFsoVTmkNLL+t/IIGF0QBlab3+9Xae9+Z43/Yi10Bfb/4m4b7h8qpY2 Vp5De7RmOago1ENzIrv3rBthdIyn2HKrpFDeoiHuI9u0u+rYmqbiphi2CS7ofHQQ 7ZLAJor8Q4HdnprYbcOjo5Tk+BkGslim4gML76rECU00aVT/AY2vK8O8vn1oeM2I CyyRDq3p8s4x+YMyii/ssKkkrqqrzqtI9o4axhjHkdumfLmiwNrw8YTMDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHu0Y5zCe2H+cIquQAnm+b3FtQvmMB8GA1UdIwQY MBaAFAAmR8gB+1j8+qwTW7SPXmH+p+VmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODIt OTRlZmJmNWNlY2Q0LzEvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODItOTRlZmJmNWNlY2Q0 LzEvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKptFMAJU yjpMWrjD/dXMmb42OH0ejJj+M/NU4A066F9//FCsEg6LwKDGF5bZdlY3f+0UVrO3 z0ml3mxHoJyjZ5Lv2K+A20rOYeeUsZlqM5Q0kPslo3ATG8DiBrghvjz4CFs0HlM5 65Qj2Qqe7ywLlRt4QDCff789JSwJL4TWqO5w7RY9S2/1pCQkDLlupGSy8z4BTz4g j8NWnS8DY734tyvq6ufLd5asm/KmJo4nt5FkzbybL6Nx7IXFcc/ljtKLbuDm9HKb 0meAloZPe6udYRfU0Lrr7Pgq6nbJOI2BJwxIGcAheYzdTCTlgWC5DtlCr+A2HiKs 5nmxp075iqRkog== -----END CERTIFICATE-----Generated at Tue Nov 4 16:46:53 2025 by rpki-client