$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft File: alg23em52u81qKf3TWMm9rQtp00.mft (raw, json) Hash identifier: pZ+4esIJj86USwg3NGocp3n+Bb2iDkeeqv+xJi4GaVg= Subject key identifier: 11:FB:6F:66:E1:A8:F7:1E:69:18:A8:64:4F:BD:A9:C2:AD:23:9D:93 Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d Certificate serial: 019D4FFF678119D89C18277927A5EBEBB10C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft Manifest number: 0F5F Signing time: Thu 02 Apr 2026 21:00:31 +0000 Manifest this update: Thu 02 Apr 2026 21:00:31 +0000 Manifest next update: Fri 03 Apr 2026 21:00:31 +0000 Files and hashes: 1: 2wOulV0vAbQf8biJXAnQkgGArPI.roa (hash: 7hYlyThHw9PBylpjQHX2//RefihYkxx++H9IszVVhRo=) 2: 588PNHg6CncRbEovNSIqaa8i5LI.roa (hash: cKLcHrzYxurc879bXkmUn4CshZz0QJYPGDzoguXub1Y=) 3: 8tE1XoXALCHY82O8b8qmwszNbGs.roa (hash: Wenx4p8ARt+i0JB3aRNXys0FukN+g6qNblR6qJZ7KAY=) 4: G8BPphhm9oFoNoaDVHCDJOi1A1I.roa (hash: o25EiApUpZto47Wgp7aaZGTEkqSv5P2WX51MC5xNgcg=) 5: M0vUEBMIUgT4jDZek6CAIPYaSIg.roa (hash: PIpybvqNjJxeWjfkr7UEGiD+MMuADppLXWFHDY6S5Vc=) 6: MZRQk6tT-Iy_0EmbTY5ZwDElyos.roa (hash: pr7kUc7XXbghgioDyj2+ehsGl4rvR5Ny0ZhIypP6qnE=) 7: PRl542vKWzERjZy8INPb-TgkXr4.roa (hash: EnUZ2TcojekWId1tvYvvKcumXfp94C7iBeo+v/ZBk5c=) 8: alg23em52u81qKf3TWMm9rQtp00.crl (hash: 4z29Mp2JZIp59qePxj0uq2FYMnZ6cc63xxd31RATlw0=) 9: cx2hNcUqecSEJqe3n2yH1nbkzcQ.roa (hash: VM9cV3NpEOzoGjoegWLpfoVKjMdeb/qreQ0du+7oLuc=) 10: mSzzMA6L5QbhcWeV8GJlOnBN0cM.roa (hash: KFpvmdmXJzfhj/vqjMViv2cspmTTL885sm48c0BNhjc=) 11: pcGsYQ6WmjLQ7fW-l50FaHq8fAw.roa (hash: OyCY6h+GWUv+mGKdOjMTfLCqD3xuf3tOl0/vrW+coks=) 12: pnFO1a6gizeUc-Mp5yF3aD9GKrY.roa (hash: 12+yB/uNotyYBuazoRPVxuRnI9x9XM3niLtRN4n27c0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 03 Apr 2026 21:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:4f:ff:67:81:19:d8:9c:18:27:79:27:a5:eb:eb:b1:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d Validity Not Before: Apr 2 21:00:31 2026 GMT Not After : Apr 3 21:00:31 2026 GMT Subject: CN=11fb6f66e1a8f71e6918a8644fbda9c2ad239d93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ff:d1:00:62:b1:ec:01:68:99:7a:63:41:85: 86:7b:e2:41:56:54:45:00:6b:d1:33:c1:89:72:8c: 7d:55:7f:29:20:53:b3:9f:e8:bd:ee:97:6b:be:d2: e3:0f:20:92:13:34:93:b2:75:e1:9e:be:5c:9a:ea: 7f:80:60:30:7d:a2:86:f2:07:97:ed:c9:e9:e2:94: be:89:64:7a:44:c5:c6:dd:f3:fe:10:43:05:41:6f: b6:13:cb:34:ad:25:ca:9b:e2:d2:ce:39:43:e3:d7: 33:82:3f:f3:16:cb:b7:f5:2c:83:50:06:c8:e8:a2: fb:25:b5:ec:df:1e:93:59:16:21:b9:ba:1c:1c:f8: e5:01:71:19:8d:e2:56:21:b8:fc:8e:2c:c9:27:05: 78:30:82:4d:dc:3b:b5:fb:85:d3:a3:aa:e1:f3:f9: 9a:62:91:04:08:ae:f9:34:f1:de:88:56:3a:ae:37: 6c:13:6a:3f:02:85:15:1b:39:46:db:d0:e9:4a:26: cf:9f:ec:0d:63:42:1b:00:a2:d8:97:ad:fa:03:67: 0d:34:25:ff:80:f1:90:cd:80:3b:bd:69:e0:e9:17: 68:05:11:d9:57:22:91:3c:d8:a0:d9:b0:62:dc:cf: 29:c0:e7:36:6f:db:32:bf:95:d4:96:9f:f0:2f:5f: 38:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:FB:6F:66:E1:A8:F7:1E:69:18:A8:64:4F:BD:A9:C2:AD:23:9D:93 X509v3 Authority Key Identifier: keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:93:07:53:ac:8a:c0:fc:0a:b1:94:eb:aa:d0:7d:23:d9:48: 46:0d:5c:d6:33:12:c3:a6:c9:36:d2:6f:ca:df:38:59:62:b0: 22:6c:38:ef:95:99:31:e9:d8:67:94:42:cb:98:c0:c2:26:bb: a9:d0:2a:c5:74:ab:02:f8:8e:59:25:2f:37:cc:31:ab:7e:14: a5:78:27:5c:ac:4f:84:70:22:77:77:00:4a:db:59:aa:87:a5: 42:21:04:83:b9:dc:cb:75:7f:ab:c0:fc:ff:dd:4f:46:0c:d5: cb:e9:dd:0d:7a:85:35:67:8b:18:30:b3:08:5d:80:96:7d:3e: 4b:bf:b0:69:e4:5d:3d:37:ec:b8:72:7b:7d:a0:46:f6:e2:4d: 08:65:62:bf:b0:b9:97:09:e5:1a:93:12:a6:06:f5:3c:4a:0b: 25:d4:ac:b3:7f:d3:c9:27:62:1d:d4:b7:7b:c7:8a:9f:aa:ea: c5:36:de:fd:82:88:45:40:46:4b:e1:2c:fb:0a:ca:8e:32:85: e8:31:b5:dc:f0:35:00:6a:79:2c:3d:6a:f9:70:6a:91:19:7a: 50:c5:b0:c1:08:f2:a6:26:dd:34:1d:13:35:3f:51:8c:d3:d5: e9:6d:ca:ae:fd:a0:f2:0f:37:c6:f2:ce:67:8e:1e:f3:c2:2e: bc:14:5a:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ1P/2eBGdicGCd5J6Xr67EMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhNTgzNmRkZTliOWRhZWYzNWE4YTdmNzRkNjMyNmY2YjQy ZGE3NGQwHhcNMjYwNDAyMjEwMDMxWhcNMjYwNDAzMjEwMDMxWjAzMTEwLwYDVQQD EygxMWZiNmY2NmUxYThmNzFlNjkxOGE4NjQ0ZmJkYTljMmFkMjM5ZDkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5P/RAGKx7AFomXpjQYWGe+JBVlRF AGvRM8GJcox9VX8pIFOzn+i97pdrvtLjDyCSEzSTsnXhnr5cmup/gGAwfaKG8geX 7cnp4pS+iWR6RMXG3fP+EEMFQW+2E8s0rSXKm+LSzjlD49czgj/zFsu39SyDUAbI 6KL7JbXs3x6TWRYhubocHPjlAXEZjeJWIbj8jizJJwV4MIJN3Du1+4XTo6rh8/ma YpEECK75NPHeiFY6rjdsE2o/AoUVGzlG29DpSibPn+wNY0IbAKLYl636A2cNNCX/ gPGQzYA7vWng6RdoBRHZVyKRPNig2bBi3M8pwOc2b9syv5XUlp/wL184gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBH7b2bhqPceaRioZE+9qcKtI52TMB8GA1UdIwQY MBaAFGpYNt3pudrvNain901jJva0LadNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUt YzE5OTQyNzM3ZTZkLzEvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUtYzE5OTQyNzM3ZTZk LzEvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbJMHU6yK wPwKsZTrqtB9I9lIRg1c1jMSw6bJNtJvyt84WWKwImw475WZMenYZ5RCy5jAwia7 qdAqxXSrAviOWSUvN8wxq34UpXgnXKxPhHAid3cASttZqoelQiEEg7ncy3V/q8D8 /91PRgzVy+ndDXqFNWeLGDCzCF2Aln0+S7+waeRdPTfsuHJ7faBG9uJNCGViv7C5 lwnlGpMSpgb1PEoLJdSss3/TySdiHdS3e8eKn6rqxTbe/YKIRUBGS+Es+wrKjjKF 6DG13PA1AGp5LD1q+XBqkRl6UMWwwQjypibdNB0TNT9RjNPV6W3Krv2g8g83xvLO Z44e88IuvBRaJA== -----END CERTIFICATE-----Generated at Fri Apr 3 03:43:02 2026 by rpki-client