$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft File: alg23em52u81qKf3TWMm9rQtp00.mft (raw, json) Hash identifier: nSfXYHJd+bGbpshGHXfdYfz9zir5mJgnwY/FT0rZijA= Subject key identifier: 6B:62:63:91:25:00:D6:E4:77:11:22:F7:98:89:00:2D:97:D2:F5:4D Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d Certificate serial: 019E1EA3136572FE240F5FA5BAD3EE1A9CE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft Manifest number: 0FCA Signing time: Wed 13 May 2026 00:01:04 +0000 Manifest this update: Wed 13 May 2026 00:01:04 +0000 Manifest next update: Thu 14 May 2026 00:01:04 +0000 Files and hashes: 1: 2wOulV0vAbQf8biJXAnQkgGArPI.roa (hash: 7hYlyThHw9PBylpjQHX2//RefihYkxx++H9IszVVhRo=) 2: 588PNHg6CncRbEovNSIqaa8i5LI.roa (hash: cKLcHrzYxurc879bXkmUn4CshZz0QJYPGDzoguXub1Y=) 3: 8tE1XoXALCHY82O8b8qmwszNbGs.roa (hash: Wenx4p8ARt+i0JB3aRNXys0FukN+g6qNblR6qJZ7KAY=) 4: G8BPphhm9oFoNoaDVHCDJOi1A1I.roa (hash: o25EiApUpZto47Wgp7aaZGTEkqSv5P2WX51MC5xNgcg=) 5: M0vUEBMIUgT4jDZek6CAIPYaSIg.roa (hash: PIpybvqNjJxeWjfkr7UEGiD+MMuADppLXWFHDY6S5Vc=) 6: MZRQk6tT-Iy_0EmbTY5ZwDElyos.roa (hash: pr7kUc7XXbghgioDyj2+ehsGl4rvR5Ny0ZhIypP6qnE=) 7: PRl542vKWzERjZy8INPb-TgkXr4.roa (hash: EnUZ2TcojekWId1tvYvvKcumXfp94C7iBeo+v/ZBk5c=) 8: alg23em52u81qKf3TWMm9rQtp00.crl (hash: /bdRtAM8dvuJrFHaSCNi2bSDTZ6X4veZS7cuqfI6avc=) 9: cx2hNcUqecSEJqe3n2yH1nbkzcQ.roa (hash: VM9cV3NpEOzoGjoegWLpfoVKjMdeb/qreQ0du+7oLuc=) 10: mSzzMA6L5QbhcWeV8GJlOnBN0cM.roa (hash: KFpvmdmXJzfhj/vqjMViv2cspmTTL885sm48c0BNhjc=) 11: pcGsYQ6WmjLQ7fW-l50FaHq8fAw.roa (hash: OyCY6h+GWUv+mGKdOjMTfLCqD3xuf3tOl0/vrW+coks=) 12: pnFO1a6gizeUc-Mp5yF3aD9GKrY.roa (hash: 12+yB/uNotyYBuazoRPVxuRnI9x9XM3niLtRN4n27c0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 20:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1e:a3:13:65:72:fe:24:0f:5f:a5:ba:d3:ee:1a:9c:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d Validity Not Before: May 13 00:01:04 2026 GMT Not After : May 14 00:01:04 2026 GMT Subject: CN=6b6263912500d6e4771122f79889002d97d2f54d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:16:55:89:bb:99:27:89:22:b7:98:05:e6:d5: c7:6e:5c:f3:2c:53:52:ce:3f:46:ca:48:0d:24:7c: cb:0d:5c:84:a2:df:84:c1:16:d5:2d:17:4f:4c:b6: bf:41:62:13:9b:ce:d2:36:92:c9:b6:21:6f:5f:60: a5:8e:b7:e9:ca:4e:e9:bc:5a:d6:2f:2b:e5:77:fb: 19:77:04:a7:49:e9:59:a3:fd:c6:45:d1:e2:62:7e: c4:7d:05:31:9c:f6:1d:3d:e2:6e:4d:51:eb:4a:c2: 22:4b:ca:49:0b:a6:33:f3:47:74:0e:a5:0e:75:12: 04:4f:ac:fe:4a:da:e3:1b:e0:36:fe:70:0f:24:f3: fb:20:f8:b8:af:0f:0b:ce:c8:05:67:fb:82:d5:d6: 31:9b:b9:1c:91:0d:78:6b:3f:34:a6:f0:b7:7f:aa: ee:e1:c6:1f:8a:1f:b0:c8:b1:31:33:7a:3c:c3:24: 14:f0:5d:ce:f8:d5:bb:cf:d6:9d:0e:85:97:bb:02: f2:e3:a2:25:96:4e:b4:3b:0b:22:a8:c4:d6:9e:6c: 81:eb:81:58:42:15:a3:6d:6a:75:79:4d:a0:a7:1d: 41:81:48:43:d3:a8:3d:0b:ec:0e:d7:80:53:e1:97: b1:e7:8b:29:e9:77:3f:4f:3e:c0:9d:e0:5a:d7:8e: 95:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:62:63:91:25:00:D6:E4:77:11:22:F7:98:89:00:2D:97:D2:F5:4D X509v3 Authority Key Identifier: keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:40:33:86:6a:0c:f3:86:f4:d7:fe:6e:de:89:e3:be:11:e6: d7:10:49:ce:95:05:99:34:64:75:50:b6:3d:bb:81:04:34:29: ea:64:9e:c0:85:39:9a:f1:9d:14:0e:75:d4:62:3c:65:ec:20: bb:b0:1f:4f:cc:b0:00:47:c2:68:4f:1b:f8:11:88:4b:6e:b8: b7:a6:98:cc:17:fd:30:2b:d6:87:5a:ff:b1:5d:cb:1a:3a:e1: 53:8b:0e:35:b0:8a:b4:c6:55:46:ba:a2:ec:80:2f:dd:e8:9d: cc:ad:06:47:89:d0:b1:e3:dc:cc:37:7f:33:5c:fc:46:ed:0f: 32:82:e0:c7:8b:c5:eb:ea:3a:e9:85:31:59:b2:3b:f9:ce:26: 7a:85:00:7b:93:ae:be:21:f7:76:42:0a:dc:8b:97:75:77:e3: 23:b5:40:26:16:d1:f2:42:9a:ed:53:6a:27:a4:14:13:25:a6: cc:da:99:14:ec:4f:1e:6c:0a:91:a1:81:74:65:01:fc:8b:81: 9a:a4:1e:14:af:98:5c:68:35:5b:f6:aa:d5:c8:dd:46:d1:c7: b3:7e:f1:fc:de:22:ae:bd:af:f3:a6:04:fd:b7:1c:f8:ad:fa: 43:2a:5c:6d:45:28:a3:80:68:91:c5:0d:ac:60:8b:77:5e:9f: 5e:2b:ea:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4eoxNlcv4kD1+lutPuGpzlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhNTgzNmRkZTliOWRhZWYzNWE4YTdmNzRkNjMyNmY2YjQy ZGE3NGQwHhcNMjYwNTEzMDAwMTA0WhcNMjYwNTE0MDAwMTA0WjAzMTEwLwYDVQQD Eyg2YjYyNjM5MTI1MDBkNmU0NzcxMTIyZjc5ODg5MDAyZDk3ZDJmNTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshZVibuZJ4kit5gF5tXHblzzLFNS zj9GykgNJHzLDVyEot+EwRbVLRdPTLa/QWITm87SNpLJtiFvX2Cljrfpyk7pvFrW Lyvld/sZdwSnSelZo/3GRdHiYn7EfQUxnPYdPeJuTVHrSsIiS8pJC6Yz80d0DqUO dRIET6z+StrjG+A2/nAPJPP7IPi4rw8LzsgFZ/uC1dYxm7kckQ14az80pvC3f6ru 4cYfih+wyLExM3o8wyQU8F3O+NW7z9adDoWXuwLy46Illk60OwsiqMTWnmyB64FY QhWjbWp1eU2gpx1BgUhD06g9C+wO14BT4Zex54sp6Xc/Tz7AneBa146VHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGtiY5ElANbkdxEi95iJAC2X0vVNMB8GA1UdIwQY MBaAFGpYNt3pudrvNain901jJva0LadNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUt YzE5OTQyNzM3ZTZkLzEvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUtYzE5OTQyNzM3ZTZk LzEvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACEAzhmoM 84b01/5u3onjvhHm1xBJzpUFmTRkdVC2PbuBBDQp6mSewIU5mvGdFA511GI8Zewg u7AfT8ywAEfCaE8b+BGIS264t6aYzBf9MCvWh1r/sV3LGjrhU4sONbCKtMZVRrqi 7IAv3eidzK0GR4nQsePczDd/M1z8Ru0PMoLgx4vF6+o66YUxWbI7+c4meoUAe5Ou viH3dkIK3IuXdXfjI7VAJhbR8kKa7VNqJ6QUEyWmzNqZFOxPHmwKkaGBdGUB/IuB mqQeFK+YXGg1W/aq1cjdRtHHs37x/N4irr2v86YE/bcc+K36QypcbUUoo4BokcUN rGCLd16fXivq5Q== -----END CERTIFICATE-----Generated at Wed May 13 03:39:03 2026 by rpki-client