$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft File: alg23em52u81qKf3TWMm9rQtp00.mft (raw, json) Hash identifier: kT3uWT2+oaq0VPwZlgfjWK13OyfDLCRoKd+fMU1ULds= Subject key identifier: AF:2E:FE:F4:22:78:0F:97:4A:E2:79:8B:5A:9E:8A:99:68:46:BB:35 Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d Certificate serial: 019D55CAB0C73287994EE72F66CC00B44029 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft Manifest number: 0F62 Signing time: Sat 04 Apr 2026 00:00:39 +0000 Manifest this update: Sat 04 Apr 2026 00:00:39 +0000 Manifest next update: Sun 05 Apr 2026 00:00:39 +0000 Files and hashes: 1: 2wOulV0vAbQf8biJXAnQkgGArPI.roa (hash: 7hYlyThHw9PBylpjQHX2//RefihYkxx++H9IszVVhRo=) 2: 588PNHg6CncRbEovNSIqaa8i5LI.roa (hash: cKLcHrzYxurc879bXkmUn4CshZz0QJYPGDzoguXub1Y=) 3: 8tE1XoXALCHY82O8b8qmwszNbGs.roa (hash: Wenx4p8ARt+i0JB3aRNXys0FukN+g6qNblR6qJZ7KAY=) 4: G8BPphhm9oFoNoaDVHCDJOi1A1I.roa (hash: o25EiApUpZto47Wgp7aaZGTEkqSv5P2WX51MC5xNgcg=) 5: M0vUEBMIUgT4jDZek6CAIPYaSIg.roa (hash: PIpybvqNjJxeWjfkr7UEGiD+MMuADppLXWFHDY6S5Vc=) 6: MZRQk6tT-Iy_0EmbTY5ZwDElyos.roa (hash: pr7kUc7XXbghgioDyj2+ehsGl4rvR5Ny0ZhIypP6qnE=) 7: PRl542vKWzERjZy8INPb-TgkXr4.roa (hash: EnUZ2TcojekWId1tvYvvKcumXfp94C7iBeo+v/ZBk5c=) 8: alg23em52u81qKf3TWMm9rQtp00.crl (hash: 2OqvoHHEGRTLj4c1bbG26/UtIwwTaFntSrQ+Rb4KcIA=) 9: cx2hNcUqecSEJqe3n2yH1nbkzcQ.roa (hash: VM9cV3NpEOzoGjoegWLpfoVKjMdeb/qreQ0du+7oLuc=) 10: mSzzMA6L5QbhcWeV8GJlOnBN0cM.roa (hash: KFpvmdmXJzfhj/vqjMViv2cspmTTL885sm48c0BNhjc=) 11: pcGsYQ6WmjLQ7fW-l50FaHq8fAw.roa (hash: OyCY6h+GWUv+mGKdOjMTfLCqD3xuf3tOl0/vrW+coks=) 12: pnFO1a6gizeUc-Mp5yF3aD9GKrY.roa (hash: 12+yB/uNotyYBuazoRPVxuRnI9x9XM3niLtRN4n27c0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 05 Apr 2026 00:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:55:ca:b0:c7:32:87:99:4e:e7:2f:66:cc:00:b4:40:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d Validity Not Before: Apr 4 00:00:39 2026 GMT Not After : Apr 5 00:00:39 2026 GMT Subject: CN=af2efef422780f974ae2798b5a9e8a996846bb35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:92:d2:01:00:f6:ef:90:fd:eb:b6:98:7c:5b: f6:8b:0d:63:fb:19:43:02:ff:2c:6f:b3:a5:08:e7: 66:22:76:65:63:c3:2c:f4:08:88:f6:15:99:a3:77: a1:af:d2:90:95:3e:75:dd:ce:a3:9b:c7:c4:6c:be: e0:22:23:72:bd:27:98:e6:8d:af:20:d7:bc:b4:ce: 42:58:cd:4b:ab:c1:eb:cd:d0:cc:77:6a:d0:20:2d: 49:34:8f:0f:b9:b3:43:0a:60:9a:b5:5b:f5:81:fb: c4:81:2e:91:67:41:5f:4a:54:bf:c2:77:4c:dc:dc: 70:3e:80:63:99:17:44:20:3d:0b:9b:0a:d1:41:cf: b1:e6:27:31:50:e4:37:81:2f:17:ab:61:62:0b:5d: cf:ea:31:95:eb:df:71:83:8a:cf:94:94:be:e3:74: 59:ee:ae:68:2b:3c:c7:fd:23:7f:6a:20:5d:6d:ce: 4e:d6:03:4b:89:d5:99:7b:37:6f:9f:3f:2e:13:1e: 45:0c:83:ed:d6:c7:10:b4:e2:33:48:6b:0e:1c:12: 5d:d0:6c:b7:83:a5:96:ff:ff:c5:51:3f:62:8d:5d: 57:84:e2:29:78:2d:be:bd:2a:60:98:99:c7:af:32: 8c:85:61:fd:c6:c8:7d:40:a0:bb:41:f3:50:42:81: 15:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:2E:FE:F4:22:78:0F:97:4A:E2:79:8B:5A:9E:8A:99:68:46:BB:35 X509v3 Authority Key Identifier: keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:2d:97:ce:a7:cd:b0:21:8e:97:5a:d0:12:e2:8f:7f:06:88: b0:f3:e8:63:73:fd:89:95:96:af:0f:be:df:49:84:7e:74:3c: 34:df:ad:79:ab:e5:87:a0:cf:a3:cd:c5:72:67:6c:a6:e9:7a: 2f:49:e5:57:6d:9c:bd:02:c1:21:87:57:af:14:93:9e:71:d3: e7:99:09:d8:d8:d1:c4:21:e0:e4:4f:8f:3c:ba:f3:49:e5:df: 1a:ca:7c:2f:d8:0a:d8:cc:01:96:8a:f1:56:37:ac:aa:35:cf: d7:75:a8:41:b4:c1:ed:8d:69:8b:d6:15:d5:94:cd:89:15:71: df:8d:6f:1c:17:cd:81:d7:3c:39:2a:cf:39:66:0d:d5:b9:a5: cf:19:3b:a0:02:05:a3:c2:78:6c:78:15:c7:ee:a9:9e:c3:59: 3f:b8:ec:18:67:67:c9:76:1b:25:6a:39:48:98:2a:12:f4:02: 58:02:7e:d6:83:7e:2c:d1:63:10:cf:d7:08:7d:40:e2:07:5b: b2:56:00:c9:45:e3:ec:df:c2:27:1f:a8:e2:d0:60:64:9a:a5: 2a:bc:65:27:1a:40:9a:e9:17:2e:c8:64:fd:d3:1c:5d:c7:00: 77:3d:aa:ee:9f:e7:74:76:df:45:76:a5:6c:95:af:0d:a3:f8: 9b:d7:36:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ1VyrDHMoeZTucvZswAtEApMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhNTgzNmRkZTliOWRhZWYzNWE4YTdmNzRkNjMyNmY2YjQy ZGE3NGQwHhcNMjYwNDA0MDAwMDM5WhcNMjYwNDA1MDAwMDM5WjAzMTEwLwYDVQQD EyhhZjJlZmVmNDIyNzgwZjk3NGFlMjc5OGI1YTllOGE5OTY4NDZiYjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pLSAQD275D967aYfFv2iw1j+xlD Av8sb7OlCOdmInZlY8Ms9AiI9hWZo3ehr9KQlT513c6jm8fEbL7gIiNyvSeY5o2v INe8tM5CWM1Lq8HrzdDMd2rQIC1JNI8PubNDCmCatVv1gfvEgS6RZ0FfSlS/wndM 3NxwPoBjmRdEID0LmwrRQc+x5icxUOQ3gS8Xq2FiC13P6jGV699xg4rPlJS+43RZ 7q5oKzzH/SN/aiBdbc5O1gNLidWZezdvnz8uEx5FDIPt1scQtOIzSGsOHBJd0Gy3 g6WW///FUT9ijV1XhOIpeC2+vSpgmJnHrzKMhWH9xsh9QKC7QfNQQoEV+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK8u/vQieA+XSuJ5i1qeiploRrs1MB8GA1UdIwQY MBaAFGpYNt3pudrvNain901jJva0LadNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUt YzE5OTQyNzM3ZTZkLzEvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUtYzE5OTQyNzM3ZTZk LzEvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApi2XzqfN sCGOl1rQEuKPfwaIsPPoY3P9iZWWrw++30mEfnQ8NN+teavlh6DPo83Fcmdspul6 L0nlV22cvQLBIYdXrxSTnnHT55kJ2NjRxCHg5E+PPLrzSeXfGsp8L9gK2MwBlorx VjesqjXP13WoQbTB7Y1pi9YV1ZTNiRVx341vHBfNgdc8OSrPOWYN1bmlzxk7oAIF o8J4bHgVx+6pnsNZP7jsGGdnyXYbJWo5SJgqEvQCWAJ+1oN+LNFjEM/XCH1A4gdb slYAyUXj7N/CJx+o4tBgZJqlKrxlJxpAmukXLshk/dMcXccAdz2q7p/ndHbfRXal bJWvDaP4m9c2mQ== -----END CERTIFICATE-----Generated at Sat Apr 4 09:16:03 2026 by rpki-client