$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft File: alg23em52u81qKf3TWMm9rQtp00.mft (raw, json) Hash identifier: K4eEPFyJ4xR6IZ6vWPjSop6lawBdS01RrLykHPThHFs= Subject key identifier: 19:B8:F3:4C:E1:F3:69:4D:F7:B0:56:72:A8:56:13:7B:15:A0:2B:13 Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d Certificate serial: 019A3157BB1E660411941D3EB79F3FC6A382 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft Manifest number: 0D9C Signing time: Wed 29 Oct 2025 19:00:24 +0000 Manifest this update: Wed 29 Oct 2025 19:00:24 +0000 Manifest next update: Thu 30 Oct 2025 19:00:24 +0000 Files and hashes: 1: 2GgxymSj789RBZZH6Qr311JOO3c.roa (hash: xxHGIN8RcP18Ff052v35zzO1Qu2FWHnYm7uLj+9oo4s=) 2: 40cJKp1GS5dbr7SdP3Zbev6JmeY.roa (hash: 61/ko+8N7a8c9CNpATaxhZcxgPcvxlUKKJ8fzALh25Q=) 3: 6WF0N3ANEOh5V4LZtgZNOBJ_xJE.roa (hash: GN3SfJqnfgCIXJsZSKWnxtWzFusuFwzLCL2yxaySHOE=) 4: ALbLP8TjT8ZiaC0tUbYyF60YWMU.roa (hash: PHPbB9U1X5V4HGNYYoVlhslI99ykG2RAXT7JZqb/PSg=) 5: ChTwEJfY2RBJdsthLA8bTIXLsMA.roa (hash: cbosWqvMh54uvMvIlbou9+97Kpv9HxDR4iW8IXMGlK4=) 6: D2VMcyIfr7yJdFbbcvoWjUO3S5s.roa (hash: K6Mxc/3ipJmNEVKu8JpF4VYRsMp9O46DxAh+DI8e7Mg=) 7: DEDTAWSErjGHjVNeqxftVsgs8C4.roa (hash: VWkVJFt6LABue5shuRK4aAz/i+X+zOBxzF8svsKfKqk=) 8: EP2vE3nVk8EDmpGKt4xSRlKDGRg.roa (hash: hMn0ABRgvwjw8LNWxiAha11Y7RHxc4NZtpaX7cPfLrs=) 9: Emm6nRm_ICEiezFVE6yUTG4tNAA.roa (hash: UvVT8bhFqQY2pkkDUxeeKXgnbxEXcnpDfTAVw/qLy9E=) 10: FYOTsLSpnQiXR1FyDbri9gafV38.roa (hash: eOnZOf7HpKncaRMTP6C1fKEmoFib9YbwOdPz9tWkiyg=) 11: G-gh7WH4gz1Kk05-MGnExVF2PmU.roa (hash: h4xwBjw7Tdcyfxt7DupN/CWghsslonDnTSE/po3DUCg=) 12: GyrOML102J3dklHvs6i4-ryukzM.roa (hash: w27LbciA57M7CW5Uy7Qs9cwG7zpNpOAEhwMvYHcenEo=) 13: J1_y8fLGSHC7YJBAA-aTumPpr_Y.roa (hash: i3J50Np/01x2WUAt2PLnQ1zNl7WfqyflGulsmM8CDUI=) 14: L2_Tbp4YwSPyuAKModBbxLXZMDo.roa (hash: /Z9XGoMEp/hyna2qe+ypVXlugIzccNoN9B5IRO6pFkA=) 15: MQQNQpnOLo7xjqCOz6nT8mwPN1c.roa (hash: 2PaPwlupHN5M6LnrEQtTQs0LPCM/gyDxtY5UHvVEJSQ=) 16: N1BQNnOlB_L4IcY2nTO4Nll-BSM.roa (hash: 43i1GeNUI7OSo9laADEtvVyUbVsin7l8KToC84GBNQU=) 17: N4I-OxP3khwcwYxJaU0aHba1zxs.roa (hash: ygfVyS5fxOHwbxH62pf8hcquio83EDy0LB1d41OKxko=) 18: Sxy6K7e73qOvfCbb9KneoPvXeRI.roa (hash: IE71fGGjPNEzI1bTXZSPWcPLR3j32S+b4osxDkIoySw=) 19: X1F5b2plSGTPWCvHMe9FbCYpPsg.roa (hash: wcCPXJuHDn30VFNAxZheuTYNkl1x5zVKb+3b+C4+Iuk=) 20: XEHexB-8pofq2gE930syfOe_AV8.roa (hash: gGKEhmbWN9gbDgql+5XbrGE8jaiHHd+CNMLRrD7i0vs=) 21: XHtpEQoraqRFRPdlAEW9sCe6_rY.roa (hash: soXr8YiLhiu6P10YvfCxOODOvjvRErlJJgNef/tqi0c=) 22: YstluQtHpzLnfC3TPFU1_RVo3Kc.roa (hash: VlPhCkrTX50LxfOpD/LlEhXnetd1Xvpjb8V/y67yZIU=) 23: Yt3qNyUt06SrZT5AApDBitGbHGU.roa (hash: Km20h2W4I4tgIcq/F3vLRcoaeePSpTMlIN8YOSOAX2Y=) 24: aPENAwPWD9_6y24HMW9xEd5C_Ks.roa (hash: o45OJu1Z+D6ZpzE4mC3JFl7eVOetvW4JHfD6F7fpBWE=) 25: alg23em52u81qKf3TWMm9rQtp00.crl (hash: fms7KYsM5dO5i43tdV1gatNuZuriwh7l8LAWclEOIQE=) 26: eW2feC_fvyD5GGty5cazOwICcpo.roa (hash: R4Yghz9xM4g2VYCIzVlGHbT7YScIOZ0Rujda+9fP7v0=) 27: lxkVaZIbX7I7bmN6ZBzzOQmtNdQ.roa (hash: LfvYFnIRA3jwfBQfIqqFV40UbcQgxtmN1lVv1rOE5/Q=) 28: r1SbFbB8EZVgwwF50O6B6Bo1-2Y.roa (hash: 8jVIVb6+hzs3g8LbDo9uK4ZsOD57ErA+DvNo82vP0Mo=) 29: ro0BJtUX9Py7-nwF9PZGTlkxD8Q.roa (hash: kym42QPOnyO2r3M4RbWd6NgVZMSowMmWfOpBK++DNqQ=) 30: sUyAiJFfSegxYPYQ3zI2TQB25y0.roa (hash: M94jlBY0zNafDZ0pmCNUNbPA+zqNkoYyovRQSUTW5xg=) 31: tk0w4MkHYzW6M8d0CyA-rbesoRM.roa (hash: eJJn7mXrNJ9k2vCBgWMXyfzpMGFm9QvIqLDFWI01uig=) 32: uSldu0-A3d7ktHLOGE3dm-cK6VA.roa (hash: O7LPBot8oWUSlFYdTabCBBKi4WGD9LTK9pqdyPBhyAk=) 33: whMyZnTeeWmIZ40EAtQYERDXPcw.roa (hash: Pcqdqq7cUSpJc4C3MIQ85eINdsCgh8UDrdKsvWlA+nI=) 34: yPLP9ipRkmjewcTRpvAk38hrlXs.roa (hash: ZpMeVKM02wLQrjHMyK/z7QCo6i1mZBRJQG+qvWJWmTk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 30 Oct 2025 17:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:31:57:bb:1e:66:04:11:94:1d:3e:b7:9f:3f:c6:a3:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d Validity Not Before: Oct 29 19:00:24 2025 GMT Not After : Oct 30 19:00:24 2025 GMT Subject: CN=19b8f34ce1f3694df7b05672a856137b15a02b13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:74:b3:2d:ef:25:0c:16:8b:5d:88:2a:b8:7d: d8:3e:1a:92:65:00:63:89:82:e0:9e:7e:7b:6e:25: de:1b:97:c4:65:8e:b4:0e:c6:93:9d:5b:cd:bd:de: 5d:b2:fc:01:09:75:a9:39:6d:d6:1a:e7:e7:bb:bc: e4:a8:45:21:99:5d:0c:31:d7:2b:76:94:fa:df:ce: 1e:b3:5e:07:b9:5b:53:44:7b:43:de:9d:30:1e:e5: 74:0a:99:c2:a9:00:4e:78:a3:d7:a2:13:3a:37:a6: 7e:bf:36:3d:1c:5f:61:a2:9c:4f:78:da:23:f5:6d: c3:07:13:e9:2e:4f:c2:04:c0:4b:81:7f:fb:94:8b: 82:ac:0c:72:d1:88:96:24:9c:a6:9a:bd:0c:f6:33: 62:85:93:81:1b:ae:81:e5:e3:4b:89:3f:35:44:3b: 61:c6:1c:a3:48:1f:23:63:47:75:09:3d:50:6f:bc: 74:50:62:63:35:d8:6a:cd:3b:da:2d:e3:1b:a7:16: ef:44:fe:26:bb:0e:dd:4f:58:eb:4c:c6:bc:e9:ab: 7a:e0:56:27:76:b1:ad:b6:b0:d7:bd:8b:50:49:27: bd:c6:db:25:81:c6:11:e9:1c:5d:2a:93:79:33:7d: d2:9e:e9:a6:dc:2a:b8:72:b8:94:00:af:67:2a:54: c9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:B8:F3:4C:E1:F3:69:4D:F7:B0:56:72:A8:56:13:7B:15:A0:2B:13 X509v3 Authority Key Identifier: keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:be:56:ad:66:2e:d8:0f:8d:49:ed:0d:a2:8d:63:25:3e:30: 24:8c:23:2a:bf:91:8e:2b:88:c1:47:90:1c:c3:61:1b:b5:d6: 85:65:90:ce:0c:80:6a:c7:92:19:49:b0:12:aa:ea:3c:c2:c1: b0:d3:67:7d:6a:48:1c:ce:6b:e5:f2:18:2e:4e:48:34:91:e0: d5:cb:66:4a:aa:88:14:dc:c3:c2:78:92:69:1b:14:de:fc:f5: 51:6d:30:48:21:13:53:6f:17:71:42:ed:17:12:ed:dc:4c:72: b6:a6:4b:b9:6c:1a:d7:bd:a8:f2:d3:08:7a:02:21:ea:9f:f4: c4:c1:eb:98:3b:62:55:35:40:d3:fc:0c:41:ec:f6:7f:9d:2a: 0a:45:db:34:09:35:c2:1a:06:8b:ad:67:fb:bd:1f:2e:ef:4a: a8:45:24:1f:20:97:29:35:42:3e:9f:b5:c7:d3:f7:07:40:09: c8:ff:f6:39:63:17:0c:ff:b2:94:ae:3d:41:4f:24:e1:e5:91: 36:a8:ca:5e:c0:65:99:0f:4e:39:e7:01:f3:87:c6:75:ae:ba: cf:65:34:c7:06:37:35:26:f1:8d:07:4d:a3:82:72:3a:0b:79: b1:04:6b:f4:9a:47:c3:e1:63:ec:ec:da:80:c5:bf:6e:49:93: 55:c6:95:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoxV7seZgQRlB0+t58/xqOCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhNTgzNmRkZTliOWRhZWYzNWE4YTdmNzRkNjMyNmY2YjQy ZGE3NGQwHhcNMjUxMDI5MTkwMDI0WhcNMjUxMDMwMTkwMDI0WjAzMTEwLwYDVQQD EygxOWI4ZjM0Y2UxZjM2OTRkZjdiMDU2NzJhODU2MTM3YjE1YTAyYjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13SzLe8lDBaLXYgquH3YPhqSZQBj iYLgnn57biXeG5fEZY60DsaTnVvNvd5dsvwBCXWpOW3WGufnu7zkqEUhmV0MMdcr dpT6384es14HuVtTRHtD3p0wHuV0CpnCqQBOeKPXohM6N6Z+vzY9HF9hopxPeNoj 9W3DBxPpLk/CBMBLgX/7lIuCrAxy0YiWJJymmr0M9jNihZOBG66B5eNLiT81RDth xhyjSB8jY0d1CT1Qb7x0UGJjNdhqzTvaLeMbpxbvRP4muw7dT1jrTMa86at64FYn drGttrDXvYtQSSe9xtslgcYR6RxdKpN5M33Snumm3Cq4criUAK9nKlTJwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBm480zh82lN97BWcqhWE3sVoCsTMB8GA1UdIwQY MBaAFGpYNt3pudrvNain901jJva0LadNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUt YzE5OTQyNzM3ZTZkLzEvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUtYzE5OTQyNzM3ZTZk LzEvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj75WrWYu 2A+NSe0Noo1jJT4wJIwjKr+RjiuIwUeQHMNhG7XWhWWQzgyAaseSGUmwEqrqPMLB sNNnfWpIHM5r5fIYLk5INJHg1ctmSqqIFNzDwniSaRsU3vz1UW0wSCETU28XcULt FxLt3ExytqZLuWwa172o8tMIegIh6p/0xMHrmDtiVTVA0/wMQez2f50qCkXbNAk1 whoGi61n+70fLu9KqEUkHyCXKTVCPp+1x9P3B0AJyP/2OWMXDP+ylK49QU8k4eWR NqjKXsBlmQ9OOecB84fGda66z2U0xwY3NSbxjQdNo4JyOgt5sQRr9JpHw+Fj7Oza gMW/bkmTVcaVKg== -----END CERTIFICATE-----Generated at Wed Oct 29 21:35:31 2025 by rpki-client