$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft File: alg23em52u81qKf3TWMm9rQtp00.mft (raw, json) Hash identifier: WDJucuWIWM1ZiPQq9utNQIUt0KEXA2SanLyb6HXteBE= Subject key identifier: 36:26:FC:41:F1:08:E6:CD:0E:D9:BF:40:8C:74:78:BF:8E:DA:9B:9C Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d Certificate serial: 0198C67FA13E114C45BFED4BEC59E40A4F5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft Manifest number: 0CDB Signing time: Wed 20 Aug 2025 08:01:49 +0000 Manifest this update: Wed 20 Aug 2025 08:01:49 +0000 Manifest next update: Thu 21 Aug 2025 08:01:49 +0000 Files and hashes: 1: 2GgxymSj789RBZZH6Qr311JOO3c.roa (hash: xxHGIN8RcP18Ff052v35zzO1Qu2FWHnYm7uLj+9oo4s=) 2: 2dufQoC5Jb0ve5IYehtGosKqu7Y.roa (hash: fBd1JLy+BQuX/FeJIoa6E39ivAOuTftwa/xPQ5dGjI8=) 3: 40cJKp1GS5dbr7SdP3Zbev6JmeY.roa (hash: 61/ko+8N7a8c9CNpATaxhZcxgPcvxlUKKJ8fzALh25Q=) 4: 6WF0N3ANEOh5V4LZtgZNOBJ_xJE.roa (hash: GN3SfJqnfgCIXJsZSKWnxtWzFusuFwzLCL2yxaySHOE=) 5: ChTwEJfY2RBJdsthLA8bTIXLsMA.roa (hash: cbosWqvMh54uvMvIlbou9+97Kpv9HxDR4iW8IXMGlK4=) 6: D2VMcyIfr7yJdFbbcvoWjUO3S5s.roa (hash: K6Mxc/3ipJmNEVKu8JpF4VYRsMp9O46DxAh+DI8e7Mg=) 7: DEDTAWSErjGHjVNeqxftVsgs8C4.roa (hash: VWkVJFt6LABue5shuRK4aAz/i+X+zOBxzF8svsKfKqk=) 8: DPUQ6ADZNEMLSYAxon1luKcIY4U.roa (hash: g+MR1MAY/piDayuURth49iV72/Mg+0nfGK3drHlnIS4=) 9: EP2vE3nVk8EDmpGKt4xSRlKDGRg.roa (hash: hMn0ABRgvwjw8LNWxiAha11Y7RHxc4NZtpaX7cPfLrs=) 10: Emm6nRm_ICEiezFVE6yUTG4tNAA.roa (hash: UvVT8bhFqQY2pkkDUxeeKXgnbxEXcnpDfTAVw/qLy9E=) 11: FYOTsLSpnQiXR1FyDbri9gafV38.roa (hash: eOnZOf7HpKncaRMTP6C1fKEmoFib9YbwOdPz9tWkiyg=) 12: G-gh7WH4gz1Kk05-MGnExVF2PmU.roa (hash: h4xwBjw7Tdcyfxt7DupN/CWghsslonDnTSE/po3DUCg=) 13: J1_y8fLGSHC7YJBAA-aTumPpr_Y.roa (hash: i3J50Np/01x2WUAt2PLnQ1zNl7WfqyflGulsmM8CDUI=) 14: L2_Tbp4YwSPyuAKModBbxLXZMDo.roa (hash: /Z9XGoMEp/hyna2qe+ypVXlugIzccNoN9B5IRO6pFkA=) 15: MQQNQpnOLo7xjqCOz6nT8mwPN1c.roa (hash: 2PaPwlupHN5M6LnrEQtTQs0LPCM/gyDxtY5UHvVEJSQ=) 16: N1BQNnOlB_L4IcY2nTO4Nll-BSM.roa (hash: 43i1GeNUI7OSo9laADEtvVyUbVsin7l8KToC84GBNQU=) 17: N4I-OxP3khwcwYxJaU0aHba1zxs.roa (hash: ygfVyS5fxOHwbxH62pf8hcquio83EDy0LB1d41OKxko=) 18: Sxy6K7e73qOvfCbb9KneoPvXeRI.roa (hash: IE71fGGjPNEzI1bTXZSPWcPLR3j32S+b4osxDkIoySw=) 19: TyWwGPBhvtrDTa9-WKai6CZuV8M.roa (hash: 5pzk3M84kVMyD+EhFWS4/PDEBzPW5mhSK7r58e8kVnY=) 20: X1F5b2plSGTPWCvHMe9FbCYpPsg.roa (hash: wcCPXJuHDn30VFNAxZheuTYNkl1x5zVKb+3b+C4+Iuk=) 21: XEHexB-8pofq2gE930syfOe_AV8.roa (hash: gGKEhmbWN9gbDgql+5XbrGE8jaiHHd+CNMLRrD7i0vs=) 22: XHtpEQoraqRFRPdlAEW9sCe6_rY.roa (hash: soXr8YiLhiu6P10YvfCxOODOvjvRErlJJgNef/tqi0c=) 23: Yt3qNyUt06SrZT5AApDBitGbHGU.roa (hash: Km20h2W4I4tgIcq/F3vLRcoaeePSpTMlIN8YOSOAX2Y=) 24: Z_9aQ9yajBZ2JLgMPuP-5DT5zd0.roa (hash: 4CGz9OtQ1X/4la1NVBt5q/Fx1Bc3qLuZdDjOQydgtOs=) 25: aPENAwPWD9_6y24HMW9xEd5C_Ks.roa (hash: o45OJu1Z+D6ZpzE4mC3JFl7eVOetvW4JHfD6F7fpBWE=) 26: alg23em52u81qKf3TWMm9rQtp00.crl (hash: KjCAUOZVcOmweHOw7/M8gZ1m/pzGkl3L78Q4CjymJo8=) 27: dH-Fn-bLvIKl5MJZyueaEaNmc38.roa (hash: O5K6pdvBkQ5WVS21x7yQFg9X7BzDm0nUsONeB+D/2mc=) 28: eW2feC_fvyD5GGty5cazOwICcpo.roa (hash: R4Yghz9xM4g2VYCIzVlGHbT7YScIOZ0Rujda+9fP7v0=) 29: lILAw3tMqkc78s59-phvitnFCEU.roa (hash: lLZBlgRbNSYZHWCAtBFaDzH6Ay8YF4H4rNnl21MLxLM=) 30: lxkVaZIbX7I7bmN6ZBzzOQmtNdQ.roa (hash: LfvYFnIRA3jwfBQfIqqFV40UbcQgxtmN1lVv1rOE5/Q=) 31: r1SbFbB8EZVgwwF50O6B6Bo1-2Y.roa (hash: 8jVIVb6+hzs3g8LbDo9uK4ZsOD57ErA+DvNo82vP0Mo=) 32: sUyAiJFfSegxYPYQ3zI2TQB25y0.roa (hash: M94jlBY0zNafDZ0pmCNUNbPA+zqNkoYyovRQSUTW5xg=) 33: tk0w4MkHYzW6M8d0CyA-rbesoRM.roa (hash: eJJn7mXrNJ9k2vCBgWMXyfzpMGFm9QvIqLDFWI01uig=) 34: uSldu0-A3d7ktHLOGE3dm-cK6VA.roa (hash: O7LPBot8oWUSlFYdTabCBBKi4WGD9LTK9pqdyPBhyAk=) 35: whMyZnTeeWmIZ40EAtQYERDXPcw.roa (hash: Pcqdqq7cUSpJc4C3MIQ85eINdsCgh8UDrdKsvWlA+nI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 21 Aug 2025 08:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:c6:7f:a1:3e:11:4c:45:bf:ed:4b:ec:59:e4:0a:4f:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d Validity Not Before: Aug 20 08:01:49 2025 GMT Not After : Aug 21 08:01:49 2025 GMT Subject: CN=3626fc41f108e6cd0ed9bf408c7478bf8eda9b9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4a:ca:49:fb:95:31:fe:55:0e:f8:63:bc:7d: 33:e6:56:9f:74:34:79:20:a5:bf:dd:ba:3b:4e:75: 41:18:96:91:0c:96:a3:71:e6:b2:27:55:13:01:b3: e3:aa:12:b8:f9:f7:20:12:fb:43:a2:b1:67:47:94: 0f:2b:d5:89:cf:53:ad:b4:48:a0:3b:f4:84:42:53: d2:df:57:da:85:66:9c:91:8c:b7:bb:32:20:9d:61: ad:47:a8:e4:76:21:3f:47:5f:ba:c2:ed:ab:d1:cb: 2e:91:6d:09:04:53:ca:2d:b9:07:d9:0e:39:31:9f: fd:9f:c6:b8:88:cf:5d:fa:8b:7d:6d:fe:5b:df:ba: d3:ac:a1:25:75:cf:d8:fa:63:3e:fd:7f:0e:e9:6e: 54:dc:ee:8d:10:d2:f3:20:a0:b8:d8:e9:67:61:24: 54:80:2e:e0:f0:e7:54:06:6a:23:4b:fc:21:83:d1: 97:2b:1d:57:f4:b2:c0:82:b0:99:45:bd:3e:9e:af: 71:7d:be:e6:93:e2:2b:3c:a1:09:4b:01:eb:d4:31: ac:b5:e3:c1:0b:8e:59:13:3c:b9:ad:a8:71:4a:a7: 6a:61:37:ee:0b:9a:e7:78:18:ba:1c:d5:db:31:23: ca:1d:b3:0e:ba:60:67:9a:98:0b:50:8d:7a:42:0b: 0e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:26:FC:41:F1:08:E6:CD:0E:D9:BF:40:8C:74:78:BF:8E:DA:9B:9C X509v3 Authority Key Identifier: keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:2d:12:03:58:e0:b7:e7:96:9e:d7:32:af:f5:b5:4d:c4:2f: 98:c8:72:3f:7b:3a:8d:27:bf:36:02:00:8f:9c:ef:4e:2e:dd: bf:4c:0a:6a:f4:f2:28:b7:aa:e5:81:7a:cd:2b:25:a7:43:71: 68:b4:b5:cf:b0:36:b8:03:5e:ab:20:9e:f1:df:d2:a4:15:6c: 14:6f:0a:86:fe:49:36:f7:36:5b:ff:66:1b:3c:64:2a:64:0c: 42:21:d8:b8:c8:85:b1:23:b6:15:c3:07:41:cd:d3:bf:f3:db: 5d:cd:68:c4:e1:50:27:be:9e:f6:59:01:ab:2b:ba:f5:ee:af: fd:a0:58:df:a3:a4:d2:de:eb:b6:20:16:b0:b4:9e:39:b5:9f: 7a:6d:d4:de:8a:b9:e9:fc:76:c8:b0:35:a7:ba:7f:43:f9:24: 3a:1a:43:97:fd:84:27:77:fb:ff:55:69:19:aa:9d:29:da:c9: 8e:04:ec:46:e5:4b:06:c9:46:c3:50:28:19:42:50:b2:a0:78: 1b:f1:bc:8d:71:1f:45:e4:8e:5b:53:95:cf:28:79:3f:90:99: ed:c9:b6:77:cf:26:3d:75:91:9f:f9:61:84:0b:0f:fb:94:e0: 57:8b:44:86:77:09:1e:44:3f:f7:92:85:89:6f:cd:42:dd:f4: f1:60:3c:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjGf6E+EUxFv+1L7FnkCk9aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhNTgzNmRkZTliOWRhZWYzNWE4YTdmNzRkNjMyNmY2YjQy ZGE3NGQwHhcNMjUwODIwMDgwMTQ5WhcNMjUwODIxMDgwMTQ5WjAzMTEwLwYDVQQD EygzNjI2ZmM0MWYxMDhlNmNkMGVkOWJmNDA4Yzc0NzhiZjhlZGE5YjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoErKSfuVMf5VDvhjvH0z5lafdDR5 IKW/3bo7TnVBGJaRDJajceayJ1UTAbPjqhK4+fcgEvtDorFnR5QPK9WJz1OttEig O/SEQlPS31fahWackYy3uzIgnWGtR6jkdiE/R1+6wu2r0csukW0JBFPKLbkH2Q45 MZ/9n8a4iM9d+ot9bf5b37rTrKEldc/Y+mM+/X8O6W5U3O6NENLzIKC42OlnYSRU gC7g8OdUBmojS/whg9GXKx1X9LLAgrCZRb0+nq9xfb7mk+IrPKEJSwHr1DGstePB C45ZEzy5rahxSqdqYTfuC5rneBi6HNXbMSPKHbMOumBnmpgLUI16QgsOHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDYm/EHxCObNDtm/QIx0eL+O2pucMB8GA1UdIwQY MBaAFGpYNt3pudrvNain901jJva0LadNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUt YzE5OTQyNzM3ZTZkLzEvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUtYzE5OTQyNzM3ZTZk LzEvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARi0SA1jg t+eWntcyr/W1TcQvmMhyP3s6jSe/NgIAj5zvTi7dv0wKavTyKLeq5YF6zSslp0Nx aLS1z7A2uANeqyCe8d/SpBVsFG8Khv5JNvc2W/9mGzxkKmQMQiHYuMiFsSO2FcMH Qc3Tv/PbXc1oxOFQJ76e9lkBqyu69e6v/aBY36Ok0t7rtiAWsLSeObWfem3U3oq5 6fx2yLA1p7p/Q/kkOhpDl/2EJ3f7/1VpGaqdKdrJjgTsRuVLBslGw1AoGUJQsqB4 G/G8jXEfReSOW1OVzyh5P5CZ7cm2d88mPXWRn/lhhAsP+5TgV4tEhncJHkQ/95KF iW/NQt308WA8Gw== -----END CERTIFICATE-----Generated at Wed Aug 20 15:28:08 2025 by rpki-client