$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft File: alg23em52u81qKf3TWMm9rQtp00.mft (raw, json) Hash identifier: /HAV6PPDf9b+4a5Wz5Dx8uDkjcHC2P6lyWeHy3K7LGk= Subject key identifier: 0D:15:58:18:D6:F7:13:31:4C:B2:10:3F:AC:2B:8B:98:E4:F7:17:CB Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d Certificate serial: 019D0F3314E88EFF8034909F0926220C5799 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft Manifest number: 0F3D Signing time: Sat 21 Mar 2026 07:01:39 +0000 Manifest this update: Sat 21 Mar 2026 07:01:39 +0000 Manifest next update: Sun 22 Mar 2026 07:01:39 +0000 Files and hashes: 1: 1-1nP27bm3gAzWksm3Aa1woQLmTg.roa (hash: 4vMUg/+4aVf6LxIWRfZOUaawIS1qe+jvPE0nds6yR2Q=) 2: 2wOulV0vAbQf8biJXAnQkgGArPI.roa (hash: 7hYlyThHw9PBylpjQHX2//RefihYkxx++H9IszVVhRo=) 3: 588PNHg6CncRbEovNSIqaa8i5LI.roa (hash: cKLcHrzYxurc879bXkmUn4CshZz0QJYPGDzoguXub1Y=) 4: 8tE1XoXALCHY82O8b8qmwszNbGs.roa (hash: Wenx4p8ARt+i0JB3aRNXys0FukN+g6qNblR6qJZ7KAY=) 5: M0vUEBMIUgT4jDZek6CAIPYaSIg.roa (hash: PIpybvqNjJxeWjfkr7UEGiD+MMuADppLXWFHDY6S5Vc=) 6: MZRQk6tT-Iy_0EmbTY5ZwDElyos.roa (hash: pr7kUc7XXbghgioDyj2+ehsGl4rvR5Ny0ZhIypP6qnE=) 7: PRl542vKWzERjZy8INPb-TgkXr4.roa (hash: EnUZ2TcojekWId1tvYvvKcumXfp94C7iBeo+v/ZBk5c=) 8: alg23em52u81qKf3TWMm9rQtp00.crl (hash: /rhpQgq1fS3xz3aDjueqOIL43gH+zg385eeegpbuvdA=) 9: cx2hNcUqecSEJqe3n2yH1nbkzcQ.roa (hash: VM9cV3NpEOzoGjoegWLpfoVKjMdeb/qreQ0du+7oLuc=) 10: mSzzMA6L5QbhcWeV8GJlOnBN0cM.roa (hash: KFpvmdmXJzfhj/vqjMViv2cspmTTL885sm48c0BNhjc=) 11: pcGsYQ6WmjLQ7fW-l50FaHq8fAw.roa (hash: OyCY6h+GWUv+mGKdOjMTfLCqD3xuf3tOl0/vrW+coks=) 12: pnFO1a6gizeUc-Mp5yF3aD9GKrY.roa (hash: 12+yB/uNotyYBuazoRPVxuRnI9x9XM3niLtRN4n27c0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 22 Mar 2026 02:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:0f:33:14:e8:8e:ff:80:34:90:9f:09:26:22:0c:57:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d Validity Not Before: Mar 21 07:01:39 2026 GMT Not After : Mar 22 07:01:39 2026 GMT Subject: CN=0d155818d6f713314cb2103fac2b8b98e4f717cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:68:a5:8d:e1:ed:e0:ae:68:5d:96:90:df:38: 46:3f:52:89:82:ee:38:ef:aa:6c:53:22:45:72:72: 6a:ec:6d:ac:93:30:e3:10:6e:cb:e8:e4:62:2e:28: 56:ad:3b:ac:48:15:e6:33:a2:a4:13:e2:4c:67:29: 2a:b4:44:34:86:e3:08:48:92:24:c1:c5:2a:3f:b5: c3:59:16:50:84:c8:47:01:61:75:3b:01:b3:7b:1e: 40:28:47:65:5c:8c:b2:b1:ff:72:be:55:6c:ff:b0: 0c:8c:dd:5d:7d:19:b7:0d:ab:cb:7d:0c:fb:84:62: c1:58:6e:ef:77:83:85:36:dd:43:59:1d:db:e1:46: 4a:24:14:e6:6c:3c:13:d3:57:32:3c:ca:0d:0a:5d: 5d:09:c3:bc:46:30:c8:9e:26:1e:db:4c:d6:7e:4a: 3f:e8:f9:d0:af:d6:5e:ae:e9:1f:78:c1:90:d3:71: c0:34:7f:2f:80:fb:1d:a8:32:31:3c:41:52:95:76: 9c:23:9b:a2:a7:8c:54:6d:f7:18:ec:91:dc:04:43: 11:04:7d:87:bf:da:72:a9:f7:9d:86:bd:cd:97:be: 21:21:2b:91:84:7d:ab:be:4c:6c:f0:c4:ba:67:b5: 8d:be:27:32:f6:f8:b9:97:98:ea:b0:00:91:8b:ac: 9f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:15:58:18:D6:F7:13:31:4C:B2:10:3F:AC:2B:8B:98:E4:F7:17:CB X509v3 Authority Key Identifier: keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:50:4b:46:d6:f5:3e:d0:a3:fb:0a:0c:0f:be:2c:3d:9e:57: 3b:62:5b:38:c5:f1:c6:55:b9:89:85:e3:74:ab:85:2c:ec:46: 3a:74:59:81:31:86:c4:23:95:96:7c:ef:ec:ab:09:6e:7e:2e: 3d:8f:5a:67:90:70:b5:65:b9:df:84:b4:87:84:0b:60:f0:d2: 12:80:05:5d:92:58:ca:bd:31:7e:d2:6f:09:85:42:45:eb:94: 54:27:55:1e:61:9c:c1:ca:8f:d2:09:89:bd:90:af:b0:fa:7c: 34:76:d8:15:dd:b0:65:43:ae:0e:e2:80:a0:0a:0b:3e:d7:31: f9:f0:e3:61:6e:4d:bf:08:ef:ce:bc:f2:20:9b:cf:73:83:35: 15:48:a7:85:7d:3a:54:6b:48:c6:4f:54:fe:b2:55:a8:64:9d: 24:1f:eb:d9:c4:eb:c4:cb:43:da:1a:29:e1:bf:61:f6:b6:20: 1a:69:51:ef:2a:0c:ca:3f:4d:2c:6f:08:59:19:48:e5:2d:20: 40:b9:ba:b6:11:b9:e1:43:ea:06:0c:9b:73:27:95:c2:37:d2: 7f:02:a2:f9:21:3d:45:02:b7:41:08:8e:40:7c:60:18:77:7a: c3:b4:fd:fb:34:fd:02:87:29:29:79:3a:b7:c4:9b:d1:5f:4e: 5a:69:40:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0PMxTojv+ANJCfCSYiDFeZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhNTgzNmRkZTliOWRhZWYzNWE4YTdmNzRkNjMyNmY2YjQy ZGE3NGQwHhcNMjYwMzIxMDcwMTM5WhcNMjYwMzIyMDcwMTM5WjAzMTEwLwYDVQQD EygwZDE1NTgxOGQ2ZjcxMzMxNGNiMjEwM2ZhYzJiOGI5OGU0ZjcxN2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmiljeHt4K5oXZaQ3zhGP1KJgu44 76psUyJFcnJq7G2skzDjEG7L6ORiLihWrTusSBXmM6KkE+JMZykqtEQ0huMISJIk wcUqP7XDWRZQhMhHAWF1OwGzex5AKEdlXIyysf9yvlVs/7AMjN1dfRm3DavLfQz7 hGLBWG7vd4OFNt1DWR3b4UZKJBTmbDwT01cyPMoNCl1dCcO8RjDIniYe20zWfko/ 6PnQr9ZerukfeMGQ03HANH8vgPsdqDIxPEFSlXacI5uip4xUbfcY7JHcBEMRBH2H v9pyqfedhr3Nl74hISuRhH2rvkxs8MS6Z7WNvicy9vi5l5jqsACRi6yfdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA0VWBjW9xMxTLIQP6wri5jk9xfLMB8GA1UdIwQY MBaAFGpYNt3pudrvNain901jJva0LadNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUt YzE5OTQyNzM3ZTZkLzEvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUtYzE5OTQyNzM3ZTZk LzEvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAilBLRtb1 PtCj+woMD74sPZ5XO2JbOMXxxlW5iYXjdKuFLOxGOnRZgTGGxCOVlnzv7KsJbn4u PY9aZ5BwtWW534S0h4QLYPDSEoAFXZJYyr0xftJvCYVCReuUVCdVHmGcwcqP0gmJ vZCvsPp8NHbYFd2wZUOuDuKAoAoLPtcx+fDjYW5NvwjvzrzyIJvPc4M1FUinhX06 VGtIxk9U/rJVqGSdJB/r2cTrxMtD2hop4b9h9rYgGmlR7yoMyj9NLG8IWRlI5S0g QLm6thG54UPqBgybcyeVwjfSfwKi+SE9RQK3QQiOQHxgGHd6w7T9+zT9AocpKXk6 t8Sb0V9OWmlAGw== -----END CERTIFICATE-----Generated at Sat Mar 21 11:11:57 2026 by rpki-client