$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft File: alg23em52u81qKf3TWMm9rQtp00.mft (raw, json) Hash identifier: pqgUPa2KlVx8ezKI3yuxtgl2/nU2/VjT/Trjopuuf8s= Subject key identifier: 8E:EB:AC:8E:DC:BA:1B:0F:6F:07:9F:10:69:6A:EB:E9:62:33:F0:BF Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d Certificate serial: 019D7A7D13CD489BBBE3A97D0B8379CA3218 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft Manifest number: 0F75 Signing time: Sat 11 Apr 2026 03:01:50 +0000 Manifest this update: Sat 11 Apr 2026 03:01:50 +0000 Manifest next update: Sun 12 Apr 2026 03:01:50 +0000 Files and hashes: 1: 2wOulV0vAbQf8biJXAnQkgGArPI.roa (hash: 7hYlyThHw9PBylpjQHX2//RefihYkxx++H9IszVVhRo=) 2: 588PNHg6CncRbEovNSIqaa8i5LI.roa (hash: cKLcHrzYxurc879bXkmUn4CshZz0QJYPGDzoguXub1Y=) 3: 8tE1XoXALCHY82O8b8qmwszNbGs.roa (hash: Wenx4p8ARt+i0JB3aRNXys0FukN+g6qNblR6qJZ7KAY=) 4: G8BPphhm9oFoNoaDVHCDJOi1A1I.roa (hash: o25EiApUpZto47Wgp7aaZGTEkqSv5P2WX51MC5xNgcg=) 5: M0vUEBMIUgT4jDZek6CAIPYaSIg.roa (hash: PIpybvqNjJxeWjfkr7UEGiD+MMuADppLXWFHDY6S5Vc=) 6: MZRQk6tT-Iy_0EmbTY5ZwDElyos.roa (hash: pr7kUc7XXbghgioDyj2+ehsGl4rvR5Ny0ZhIypP6qnE=) 7: PRl542vKWzERjZy8INPb-TgkXr4.roa (hash: EnUZ2TcojekWId1tvYvvKcumXfp94C7iBeo+v/ZBk5c=) 8: alg23em52u81qKf3TWMm9rQtp00.crl (hash: GeSnIFeRC+ymQkKXMn4baingDiIngyH4eR/ogKVsFSo=) 9: cx2hNcUqecSEJqe3n2yH1nbkzcQ.roa (hash: VM9cV3NpEOzoGjoegWLpfoVKjMdeb/qreQ0du+7oLuc=) 10: mSzzMA6L5QbhcWeV8GJlOnBN0cM.roa (hash: KFpvmdmXJzfhj/vqjMViv2cspmTTL885sm48c0BNhjc=) 11: pcGsYQ6WmjLQ7fW-l50FaHq8fAw.roa (hash: OyCY6h+GWUv+mGKdOjMTfLCqD3xuf3tOl0/vrW+coks=) 12: pnFO1a6gizeUc-Mp5yF3aD9GKrY.roa (hash: 12+yB/uNotyYBuazoRPVxuRnI9x9XM3niLtRN4n27c0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 12 Apr 2026 03:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:7a:7d:13:cd:48:9b:bb:e3:a9:7d:0b:83:79:ca:32:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d Validity Not Before: Apr 11 03:01:50 2026 GMT Not After : Apr 12 03:01:50 2026 GMT Subject: CN=8eebac8edcba1b0f6f079f10696aebe96233f0bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:24:c2:8c:90:63:86:a6:fc:b0:90:ef:6e:50: f7:20:e2:55:5c:a2:0f:03:d5:fd:36:12:a5:91:53: 0b:31:16:76:d0:d9:a2:b7:b6:b9:d3:68:8f:a7:7d: 8b:25:2c:63:82:64:e4:e0:a2:71:c6:47:87:fe:3c: f0:f2:f5:30:15:d0:e7:a6:8a:9e:5a:21:f1:3a:57: a6:73:bd:33:75:c1:5a:3e:03:f0:45:e7:83:dd:78: 9d:44:2f:9f:2a:61:b6:61:e3:2c:d5:fb:0a:24:f3: cb:08:38:18:0a:61:e6:19:58:d3:88:30:2e:06:50: d9:ac:d8:61:14:b2:cc:2b:bb:d3:6f:b8:3b:27:99: e2:1f:5f:b0:f7:e6:65:93:e9:10:09:bf:92:ae:ee: b8:90:ad:3d:22:ff:5c:ff:0e:36:c3:0d:19:d8:3d: cd:18:fb:55:53:23:ee:6e:0f:01:8b:9f:3f:da:ba: 75:4b:a6:db:aa:aa:c3:60:fb:fd:cb:22:3d:74:8d: ba:99:e5:59:d8:b6:79:b3:af:b0:a9:4e:f0:08:cb: ce:6b:31:60:82:ee:13:ff:8d:d8:46:79:93:59:58: 26:e8:f1:21:ee:2f:a7:f0:fb:7e:68:c7:58:af:ed: e3:04:a1:25:6c:28:29:25:bf:98:fb:ca:80:ac:99: d0:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:EB:AC:8E:DC:BA:1B:0F:6F:07:9F:10:69:6A:EB:E9:62:33:F0:BF X509v3 Authority Key Identifier: keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:e9:69:03:70:2a:0f:33:7c:be:62:f6:2c:87:fc:d3:f2:60: 9a:8a:ec:5e:de:cf:4f:9f:44:3c:18:2a:2a:8f:85:4e:5e:26: 76:16:88:b1:7a:70:2c:bf:1d:c3:5c:54:c8:09:44:b1:a9:1e: 12:70:53:f8:24:50:23:4e:f0:ee:dd:a0:94:28:07:36:ac:67: f4:c2:45:16:8e:a8:7d:2d:b0:53:b4:25:a8:37:7c:1b:d4:2c: 96:be:b4:eb:a7:6c:8f:d4:c0:45:6d:c6:8a:a1:c5:49:ac:80: 7e:d7:f6:d4:37:14:55:00:d1:32:62:66:e0:a8:69:32:26:70: 11:75:16:b0:d6:8d:da:57:43:d7:32:2b:7d:98:c8:c0:fb:2f: 26:85:89:bf:2e:40:bd:b8:e0:6b:03:7d:6b:8d:37:9e:18:79: cc:90:c1:27:fe:6f:60:55:9a:51:74:62:3e:82:af:7a:89:b9: be:a5:c5:e2:1b:8a:74:5a:98:54:f9:57:ae:28:e8:aa:33:37: 1b:2c:d7:95:00:c8:8e:66:d4:6a:53:4f:4d:ed:3d:6b:0c:49: 32:b5:f0:79:52:9c:ff:ed:84:48:9b:93:0f:35:03:fa:b4:b7: b4:aa:24:14:99:9f:ef:4e:5c:bb:c8:1f:19:58:fe:67:d9:e2: d9:23:5e:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ16fRPNSJu746l9C4N5yjIYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhNTgzNmRkZTliOWRhZWYzNWE4YTdmNzRkNjMyNmY2YjQy ZGE3NGQwHhcNMjYwNDExMDMwMTUwWhcNMjYwNDEyMDMwMTUwWjAzMTEwLwYDVQQD Eyg4ZWViYWM4ZWRjYmExYjBmNmYwNzlmMTA2OTZhZWJlOTYyMzNmMGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSTCjJBjhqb8sJDvblD3IOJVXKIP A9X9NhKlkVMLMRZ20Nmit7a502iPp32LJSxjgmTk4KJxxkeH/jzw8vUwFdDnpoqe WiHxOlemc70zdcFaPgPwReeD3XidRC+fKmG2YeMs1fsKJPPLCDgYCmHmGVjTiDAu BlDZrNhhFLLMK7vTb7g7J5niH1+w9+Zlk+kQCb+Sru64kK09Iv9c/w42ww0Z2D3N GPtVUyPubg8Bi58/2rp1S6bbqqrDYPv9yyI9dI26meVZ2LZ5s6+wqU7wCMvOazFg gu4T/43YRnmTWVgm6PEh7i+n8Pt+aMdYr+3jBKElbCgpJb+Y+8qArJnQXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI7rrI7cuhsPbwefEGlq6+liM/C/MB8GA1UdIwQY MBaAFGpYNt3pudrvNain901jJva0LadNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUt YzE5OTQyNzM3ZTZkLzEvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUtYzE5OTQyNzM3ZTZk LzEvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPOlpA3Aq DzN8vmL2LIf80/JgmorsXt7PT59EPBgqKo+FTl4mdhaIsXpwLL8dw1xUyAlEsake EnBT+CRQI07w7t2glCgHNqxn9MJFFo6ofS2wU7QlqDd8G9Qslr6066dsj9TARW3G iqHFSayAftf21DcUVQDRMmJm4KhpMiZwEXUWsNaN2ldD1zIrfZjIwPsvJoWJvy5A vbjgawN9a403nhh5zJDBJ/5vYFWaUXRiPoKveom5vqXF4huKdFqYVPlXrijoqjM3 GyzXlQDIjmbUalNPTe09awxJMrXweVKc/+2ESJuTDzUD+rS3tKokFJmf705cu8gf GVj+Z9ni2SNetA== -----END CERTIFICATE-----Generated at Sat Apr 11 14:00:12 2026 by rpki-client