$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft File: alg23em52u81qKf3TWMm9rQtp00.mft (raw, json) Hash identifier: P5z4Tu+wmrUrC1usYQG/COiB4V8qv4Z3OXv3GM1E87A= Subject key identifier: CE:68:F3:3F:6D:AD:1E:8B:EA:F8:37:23:0A:A9:D6:82:09:1A:24:9F Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d Certificate serial: 019F902348520276CB32583FACFF9D664768 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft Manifest number: 108A Signing time: Thu 23 Jul 2026 18:00:58 +0000 Manifest this update: Thu 23 Jul 2026 18:00:58 +0000 Manifest next update: Fri 24 Jul 2026 18:00:58 +0000 Files and hashes: 1: 2wOulV0vAbQf8biJXAnQkgGArPI.roa (hash: 7hYlyThHw9PBylpjQHX2//RefihYkxx++H9IszVVhRo=) 2: 588PNHg6CncRbEovNSIqaa8i5LI.roa (hash: cKLcHrzYxurc879bXkmUn4CshZz0QJYPGDzoguXub1Y=) 3: 8tE1XoXALCHY82O8b8qmwszNbGs.roa (hash: Wenx4p8ARt+i0JB3aRNXys0FukN+g6qNblR6qJZ7KAY=) 4: G8BPphhm9oFoNoaDVHCDJOi1A1I.roa (hash: o25EiApUpZto47Wgp7aaZGTEkqSv5P2WX51MC5xNgcg=) 5: M0vUEBMIUgT4jDZek6CAIPYaSIg.roa (hash: PIpybvqNjJxeWjfkr7UEGiD+MMuADppLXWFHDY6S5Vc=) 6: MZRQk6tT-Iy_0EmbTY5ZwDElyos.roa (hash: pr7kUc7XXbghgioDyj2+ehsGl4rvR5Ny0ZhIypP6qnE=) 7: PRl542vKWzERjZy8INPb-TgkXr4.roa (hash: EnUZ2TcojekWId1tvYvvKcumXfp94C7iBeo+v/ZBk5c=) 8: alg23em52u81qKf3TWMm9rQtp00.crl (hash: RrEkwmQza+HxqhpkseHXzVHmCUfmCU7RyDMYvHNlop0=) 9: cx2hNcUqecSEJqe3n2yH1nbkzcQ.roa (hash: VM9cV3NpEOzoGjoegWLpfoVKjMdeb/qreQ0du+7oLuc=) 10: lbJDMqkl3r_zP_8RcjCwdgnRqqQ.roa (hash: MLj9IAZg1W5TsVOSKsUt+tjSOZpaYeIgJDEMRDXfZGo=) 11: mSzzMA6L5QbhcWeV8GJlOnBN0cM.roa (hash: KFpvmdmXJzfhj/vqjMViv2cspmTTL885sm48c0BNhjc=) 12: pcGsYQ6WmjLQ7fW-l50FaHq8fAw.roa (hash: OyCY6h+GWUv+mGKdOjMTfLCqD3xuf3tOl0/vrW+coks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 18:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:23:48:52:02:76:cb:32:58:3f:ac:ff:9d:66:47:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d Validity Not Before: Jul 23 18:00:58 2026 GMT Not After : Jul 24 18:00:58 2026 GMT Subject: CN=ce68f33f6dad1e8beaf837230aa9d682091a249f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:34:5c:59:69:ee:0d:03:19:0d:03:3f:dd:7f: 9b:b1:e6:21:f7:60:0e:9c:be:52:dd:0f:8e:32:64: 38:b2:87:9d:14:3a:00:08:61:c5:86:c0:fb:52:7d: e2:dd:2a:6b:08:df:fc:3b:e5:51:0b:cf:bd:8d:4b: d8:32:64:fa:44:7b:56:57:12:83:d9:69:da:61:5e: ae:46:13:f4:ef:f3:d5:a4:db:b3:ec:b1:dc:8e:ce: d0:4b:bc:9f:d2:9f:48:2a:9c:67:46:1c:5b:f4:44: b8:e4:e3:07:11:01:4d:94:a2:4b:96:cc:37:85:0b: da:9d:e0:21:f2:cd:0b:d6:d5:af:17:35:03:45:09: 2e:63:df:b2:49:ec:52:74:5e:a9:82:de:4a:4f:ff: 63:e9:08:a8:2d:bf:49:7a:8c:cd:6f:42:1d:51:d1: 60:65:1d:f4:01:38:7a:f7:4d:4f:67:44:76:32:e0: aa:b2:83:3a:1f:d0:12:5a:57:d6:f8:f8:57:41:04: 1f:04:fd:6e:b5:67:5d:b2:5e:6d:5f:57:c0:09:0e: f4:92:30:f8:e6:66:97:30:6b:fe:b5:f0:01:c9:81: 91:e8:3a:50:7d:6b:94:b3:80:07:3a:c9:9c:83:fc: b0:40:5a:48:c8:61:a2:ba:6c:69:24:4d:d9:b1:27: 48:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:68:F3:3F:6D:AD:1E:8B:EA:F8:37:23:0A:A9:D6:82:09:1A:24:9F X509v3 Authority Key Identifier: keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:49:93:10:ce:ec:28:1c:57:72:ce:22:7f:40:42:c6:95:65: bc:92:6e:31:23:26:d9:c1:a8:26:26:54:ea:20:37:6f:76:3c: 52:04:5e:90:9b:d1:7a:64:32:13:bd:3f:64:9b:e9:74:82:f1: cf:68:cb:fa:5d:4c:80:89:1f:c3:a7:db:85:a0:46:36:05:23: 9e:df:42:0b:c5:45:80:c1:47:f1:20:b2:5a:30:f7:7e:8b:85: d8:9f:6a:ab:14:a9:1d:c7:a5:50:c6:40:c8:b2:7f:2c:53:83: be:c3:e1:f0:0a:c2:83:68:03:d1:2f:78:0c:cd:ec:50:a3:1a: ef:97:5e:16:01:5a:12:4b:65:0a:9d:2a:a0:12:78:5e:67:13: d6:18:3d:14:e0:99:17:b1:11:18:2d:b3:47:7d:5c:56:72:04: 88:49:75:2d:d9:a0:f3:74:4b:45:bd:25:5b:a6:31:df:eb:8f: be:c5:2f:d2:1c:90:f0:01:a1:50:8f:3f:a6:38:12:4a:5d:99: 71:39:28:63:1f:51:de:88:e6:65:73:9b:a1:37:f1:0b:79:f4: 13:bd:7a:cf:a6:22:47:59:fb:ff:b6:3a:bc:b7:50:64:e2:b3: a9:ce:bd:69:ca:c9:67:ca:7d:95:d9:f5:41:81:47:b3:81:c2: 26:9d:eb:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+QI0hSAnbLMlg/rP+dZkdoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhNTgzNmRkZTliOWRhZWYzNWE4YTdmNzRkNjMyNmY2YjQy ZGE3NGQwHhcNMjYwNzIzMTgwMDU4WhcNMjYwNzI0MTgwMDU4WjAzMTEwLwYDVQQD EyhjZTY4ZjMzZjZkYWQxZThiZWFmODM3MjMwYWE5ZDY4MjA5MWEyNDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjRcWWnuDQMZDQM/3X+bseYh92AO nL5S3Q+OMmQ4soedFDoACGHFhsD7Un3i3SprCN/8O+VRC8+9jUvYMmT6RHtWVxKD 2WnaYV6uRhP07/PVpNuz7LHcjs7QS7yf0p9IKpxnRhxb9ES45OMHEQFNlKJLlsw3 hQvaneAh8s0L1tWvFzUDRQkuY9+ySexSdF6pgt5KT/9j6QioLb9JeozNb0IdUdFg ZR30ATh6901PZ0R2MuCqsoM6H9ASWlfW+PhXQQQfBP1utWddsl5tX1fACQ70kjD4 5maXMGv+tfAByYGR6DpQfWuUs4AHOsmcg/ywQFpIyGGiumxpJE3ZsSdIswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM5o8z9trR6L6vg3Iwqp1oIJGiSfMB8GA1UdIwQY MBaAFGpYNt3pudrvNain901jJva0LadNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUt YzE5OTQyNzM3ZTZkLzEvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUtYzE5OTQyNzM3ZTZk LzEvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr0mTEM7s KBxXcs4if0BCxpVlvJJuMSMm2cGoJiZU6iA3b3Y8UgRekJvRemQyE70/ZJvpdILx z2jL+l1MgIkfw6fbhaBGNgUjnt9CC8VFgMFH8SCyWjD3fouF2J9qqxSpHcelUMZA yLJ/LFODvsPh8ArCg2gD0S94DM3sUKMa75deFgFaEktlCp0qoBJ4XmcT1hg9FOCZ F7ERGC2zR31cVnIEiEl1Ldmg83RLRb0lW6Yx3+uPvsUv0hyQ8AGhUI8/pjgSSl2Z cTkoYx9R3ojmZXOboTfxC3n0E716z6YiR1n7/7Y6vLdQZOKzqc69acrJZ8p9ldn1 QYFHs4HCJp3rJw== -----END CERTIFICATE-----Generated at Fri Jul 24 03:02:36 2026 by rpki-client