$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft File: alg23em52u81qKf3TWMm9rQtp00.mft (raw, json) Hash identifier: oLhxznc8x9mn+qGAXLWgbR0k2J/5A3fv2rOANUZPnkM= Subject key identifier: 51:59:F6:5A:83:8A:26:B8:8F:77:9E:16:55:FC:32:88:03:BD:EF:D2 Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d Certificate serial: 0198D5F18D19927D8939F1523650CBCB3CCD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft Manifest number: 0CE3 Signing time: Sat 23 Aug 2025 08:00:33 +0000 Manifest this update: Sat 23 Aug 2025 08:00:33 +0000 Manifest next update: Sun 24 Aug 2025 08:00:33 +0000 Files and hashes: 1: 2GgxymSj789RBZZH6Qr311JOO3c.roa (hash: xxHGIN8RcP18Ff052v35zzO1Qu2FWHnYm7uLj+9oo4s=) 2: 2dufQoC5Jb0ve5IYehtGosKqu7Y.roa (hash: fBd1JLy+BQuX/FeJIoa6E39ivAOuTftwa/xPQ5dGjI8=) 3: 40cJKp1GS5dbr7SdP3Zbev6JmeY.roa (hash: 61/ko+8N7a8c9CNpATaxhZcxgPcvxlUKKJ8fzALh25Q=) 4: 6WF0N3ANEOh5V4LZtgZNOBJ_xJE.roa (hash: GN3SfJqnfgCIXJsZSKWnxtWzFusuFwzLCL2yxaySHOE=) 5: ChTwEJfY2RBJdsthLA8bTIXLsMA.roa (hash: cbosWqvMh54uvMvIlbou9+97Kpv9HxDR4iW8IXMGlK4=) 6: D2VMcyIfr7yJdFbbcvoWjUO3S5s.roa (hash: K6Mxc/3ipJmNEVKu8JpF4VYRsMp9O46DxAh+DI8e7Mg=) 7: DEDTAWSErjGHjVNeqxftVsgs8C4.roa (hash: VWkVJFt6LABue5shuRK4aAz/i+X+zOBxzF8svsKfKqk=) 8: DPUQ6ADZNEMLSYAxon1luKcIY4U.roa (hash: g+MR1MAY/piDayuURth49iV72/Mg+0nfGK3drHlnIS4=) 9: EP2vE3nVk8EDmpGKt4xSRlKDGRg.roa (hash: hMn0ABRgvwjw8LNWxiAha11Y7RHxc4NZtpaX7cPfLrs=) 10: Emm6nRm_ICEiezFVE6yUTG4tNAA.roa (hash: UvVT8bhFqQY2pkkDUxeeKXgnbxEXcnpDfTAVw/qLy9E=) 11: FYOTsLSpnQiXR1FyDbri9gafV38.roa (hash: eOnZOf7HpKncaRMTP6C1fKEmoFib9YbwOdPz9tWkiyg=) 12: G-gh7WH4gz1Kk05-MGnExVF2PmU.roa (hash: h4xwBjw7Tdcyfxt7DupN/CWghsslonDnTSE/po3DUCg=) 13: J1_y8fLGSHC7YJBAA-aTumPpr_Y.roa (hash: i3J50Np/01x2WUAt2PLnQ1zNl7WfqyflGulsmM8CDUI=) 14: L2_Tbp4YwSPyuAKModBbxLXZMDo.roa (hash: /Z9XGoMEp/hyna2qe+ypVXlugIzccNoN9B5IRO6pFkA=) 15: MQQNQpnOLo7xjqCOz6nT8mwPN1c.roa (hash: 2PaPwlupHN5M6LnrEQtTQs0LPCM/gyDxtY5UHvVEJSQ=) 16: N1BQNnOlB_L4IcY2nTO4Nll-BSM.roa (hash: 43i1GeNUI7OSo9laADEtvVyUbVsin7l8KToC84GBNQU=) 17: N4I-OxP3khwcwYxJaU0aHba1zxs.roa (hash: ygfVyS5fxOHwbxH62pf8hcquio83EDy0LB1d41OKxko=) 18: Sxy6K7e73qOvfCbb9KneoPvXeRI.roa (hash: IE71fGGjPNEzI1bTXZSPWcPLR3j32S+b4osxDkIoySw=) 19: TyWwGPBhvtrDTa9-WKai6CZuV8M.roa (hash: 5pzk3M84kVMyD+EhFWS4/PDEBzPW5mhSK7r58e8kVnY=) 20: X1F5b2plSGTPWCvHMe9FbCYpPsg.roa (hash: wcCPXJuHDn30VFNAxZheuTYNkl1x5zVKb+3b+C4+Iuk=) 21: XEHexB-8pofq2gE930syfOe_AV8.roa (hash: gGKEhmbWN9gbDgql+5XbrGE8jaiHHd+CNMLRrD7i0vs=) 22: XHtpEQoraqRFRPdlAEW9sCe6_rY.roa (hash: soXr8YiLhiu6P10YvfCxOODOvjvRErlJJgNef/tqi0c=) 23: Yt3qNyUt06SrZT5AApDBitGbHGU.roa (hash: Km20h2W4I4tgIcq/F3vLRcoaeePSpTMlIN8YOSOAX2Y=) 24: Z_9aQ9yajBZ2JLgMPuP-5DT5zd0.roa (hash: 4CGz9OtQ1X/4la1NVBt5q/Fx1Bc3qLuZdDjOQydgtOs=) 25: aPENAwPWD9_6y24HMW9xEd5C_Ks.roa (hash: o45OJu1Z+D6ZpzE4mC3JFl7eVOetvW4JHfD6F7fpBWE=) 26: alg23em52u81qKf3TWMm9rQtp00.crl (hash: ynQWHFuYTchJWE+E903pWJ4b5tIXPhBElvuO9Zi7MFk=) 27: dH-Fn-bLvIKl5MJZyueaEaNmc38.roa (hash: O5K6pdvBkQ5WVS21x7yQFg9X7BzDm0nUsONeB+D/2mc=) 28: eW2feC_fvyD5GGty5cazOwICcpo.roa (hash: R4Yghz9xM4g2VYCIzVlGHbT7YScIOZ0Rujda+9fP7v0=) 29: lILAw3tMqkc78s59-phvitnFCEU.roa (hash: lLZBlgRbNSYZHWCAtBFaDzH6Ay8YF4H4rNnl21MLxLM=) 30: lxkVaZIbX7I7bmN6ZBzzOQmtNdQ.roa (hash: LfvYFnIRA3jwfBQfIqqFV40UbcQgxtmN1lVv1rOE5/Q=) 31: r1SbFbB8EZVgwwF50O6B6Bo1-2Y.roa (hash: 8jVIVb6+hzs3g8LbDo9uK4ZsOD57ErA+DvNo82vP0Mo=) 32: sUyAiJFfSegxYPYQ3zI2TQB25y0.roa (hash: M94jlBY0zNafDZ0pmCNUNbPA+zqNkoYyovRQSUTW5xg=) 33: tk0w4MkHYzW6M8d0CyA-rbesoRM.roa (hash: eJJn7mXrNJ9k2vCBgWMXyfzpMGFm9QvIqLDFWI01uig=) 34: uSldu0-A3d7ktHLOGE3dm-cK6VA.roa (hash: O7LPBot8oWUSlFYdTabCBBKi4WGD9LTK9pqdyPBhyAk=) 35: whMyZnTeeWmIZ40EAtQYERDXPcw.roa (hash: Pcqdqq7cUSpJc4C3MIQ85eINdsCgh8UDrdKsvWlA+nI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:f1:8d:19:92:7d:89:39:f1:52:36:50:cb:cb:3c:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d Validity Not Before: Aug 23 08:00:33 2025 GMT Not After : Aug 24 08:00:33 2025 GMT Subject: CN=5159f65a838a26b88f779e1655fc328803bdefd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:af:6d:dc:aa:8c:25:21:65:42:1f:bd:bb:7c: 8d:ef:f5:f2:50:16:51:9c:25:32:a7:ae:f9:af:42: 4b:13:5a:65:e7:f9:88:47:6d:07:93:c3:15:c7:18: ad:90:b6:39:88:11:23:19:20:c4:f9:54:44:2b:0e: 55:b5:68:5d:d6:ec:fd:fa:18:c7:07:84:c2:e5:b9: c2:f8:d3:42:81:94:20:29:03:01:f9:d8:54:43:63: ef:31:ab:41:ce:ac:92:50:f4:d9:b7:05:91:b8:22: 37:f1:0f:7b:1b:3e:11:63:6d:ee:1e:45:3e:e4:5f: 25:13:f5:a6:bc:a1:07:64:90:1f:b9:9d:57:57:c6: cf:73:47:8b:86:85:2d:e1:d0:2c:3d:8c:c0:72:db: 5d:15:58:99:80:38:50:93:a1:20:3e:8b:b2:11:3b: 5c:61:ac:a0:d1:c9:5d:83:ec:9a:ee:e5:57:51:62: 08:f4:3c:ef:49:a8:36:3b:6a:d9:c0:b4:6a:61:0d: 84:2a:2c:0f:97:c2:fb:d5:6c:34:2e:36:d5:3a:5f: 29:c4:86:fc:32:46:10:36:57:c8:ac:3e:c6:28:d1: 33:d5:ed:94:de:78:8e:25:36:e9:49:67:c3:6b:54: 03:50:0f:b2:bc:e5:ad:b6:f3:0c:03:38:e9:e1:40: 91:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:59:F6:5A:83:8A:26:B8:8F:77:9E:16:55:FC:32:88:03:BD:EF:D2 X509v3 Authority Key Identifier: keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:2f:81:bf:1f:01:97:d3:da:1d:62:19:f3:11:17:72:62:94: cc:ce:6a:46:c9:e0:b5:2b:2d:e4:02:4e:14:08:b1:0f:72:8b: 16:d9:b9:78:25:ad:e5:19:81:51:6d:0c:2e:78:e6:90:88:7a: bb:c9:e2:a7:19:c5:82:dd:4b:b5:d8:d1:4f:ae:39:7a:46:7c: cc:33:5b:01:b8:1f:f8:4d:66:cc:08:74:2d:b1:ae:b8:df:30: 4a:c9:29:1f:c9:f2:62:f9:64:e2:04:f8:5f:1d:62:b2:4a:25: 6c:6d:26:30:e3:0e:8a:42:98:e7:c4:80:c7:f5:3b:c6:22:8c: 86:9f:61:57:c0:53:c9:9c:c8:73:ff:0d:d8:a6:1f:b7:24:fa: b6:56:e3:64:59:1f:00:38:0c:8b:ed:fd:bb:7c:cb:b6:7f:f0: 21:f4:a3:13:86:10:11:37:eb:a4:87:44:a3:7c:49:1e:9c:40: e4:4b:f8:7d:90:85:ea:63:ea:ad:50:5d:da:77:70:83:ee:af: 2d:d7:3e:4e:02:ab:21:e6:d7:5a:3c:d4:06:66:3e:5a:d5:33: 0c:97:0f:1b:c9:fb:2f:62:db:e6:fe:c8:9b:8f:ee:2a:99:0a: 3f:e3:7b:70:d4:1f:66:98:05:bb:ae:be:90:19:05:49:ce:fb: da:1c:98:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjV8Y0Zkn2JOfFSNlDLyzzNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhNTgzNmRkZTliOWRhZWYzNWE4YTdmNzRkNjMyNmY2YjQy ZGE3NGQwHhcNMjUwODIzMDgwMDMzWhcNMjUwODI0MDgwMDMzWjAzMTEwLwYDVQQD Eyg1MTU5ZjY1YTgzOGEyNmI4OGY3NzllMTY1NWZjMzI4ODAzYmRlZmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtK9t3KqMJSFlQh+9u3yN7/XyUBZR nCUyp675r0JLE1pl5/mIR20Hk8MVxxitkLY5iBEjGSDE+VREKw5VtWhd1uz9+hjH B4TC5bnC+NNCgZQgKQMB+dhUQ2PvMatBzqySUPTZtwWRuCI38Q97Gz4RY23uHkU+ 5F8lE/WmvKEHZJAfuZ1XV8bPc0eLhoUt4dAsPYzActtdFViZgDhQk6EgPouyETtc Yayg0cldg+ya7uVXUWII9DzvSag2O2rZwLRqYQ2EKiwPl8L71Ww0LjbVOl8pxIb8 MkYQNlfIrD7GKNEz1e2U3niOJTbpSWfDa1QDUA+yvOWttvMMAzjp4UCRmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFFZ9lqDiia4j3eeFlX8MogDve/SMB8GA1UdIwQY MBaAFGpYNt3pudrvNain901jJva0LadNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUt YzE5OTQyNzM3ZTZkLzEvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUtYzE5OTQyNzM3ZTZk LzEvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMy+Bvx8B l9PaHWIZ8xEXcmKUzM5qRsngtSst5AJOFAixD3KLFtm5eCWt5RmBUW0MLnjmkIh6 u8nipxnFgt1LtdjRT645ekZ8zDNbAbgf+E1mzAh0LbGuuN8wSskpH8nyYvlk4gT4 Xx1iskolbG0mMOMOikKY58SAx/U7xiKMhp9hV8BTyZzIc/8N2KYftyT6tlbjZFkf ADgMi+39u3zLtn/wIfSjE4YQETfrpIdEo3xJHpxA5Ev4fZCF6mPqrVBd2ndwg+6v Ldc+TgKrIebXWjzUBmY+WtUzDJcPG8n7L2Lb5v7Im4/uKpkKP+N7cNQfZpgFu66+ kBkFSc772hyY3g== -----END CERTIFICATE-----Generated at Sat Aug 23 13:32:40 2025 by rpki-client