$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft File: 34laPuIhG27i33IC8JpCZoDWYmk.mft (raw, json) Hash identifier: uIXKwuGMU+tqY3nBuoV9F9Mop7ORm4z/DjALEtFlmHg= Subject key identifier: A1:98:58:62:A2:2E:81:9D:0B:A4:2F:30:A0:A9:54:F6:36:04:E0:B0 Authority key identifier: DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69 Certificate issuer: /CN=df895a3ee2211b6ee2df7202f09a426680d66269 Certificate serial: 01983803A7373B8090B8B8F40061B54207D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft Manifest number: 04DE Signing time: Wed 23 Jul 2025 16:00:20 +0000 Manifest this update: Wed 23 Jul 2025 16:00:20 +0000 Manifest next update: Thu 24 Jul 2025 16:00:20 +0000 Files and hashes: 1: 34laPuIhG27i33IC8JpCZoDWYmk.crl (hash: GAaTJ7GYQrgn1hrqoBaxAC729bSB55v4FsTTmgJXET0=) 2: 7SUWhLqE8A7qWiGUQfWRk3P7j_k.roa (hash: vr+ZGiswiHAuEM9htC6Hmt6v0+gW2jHUeuGOqHmqzNU=) 3: DoutZlvm4IbzXZXDTFrxAAquQLg.roa (hash: qnpQEntxymSrGJJO5sN1jep0qMMWrabFq1224NHJCYE=) 4: Jnp54uEZWEbzo5JH40T_lJ9C9Z0.roa (hash: Fnatp1DYGIx3gW9yEtvyiEfpUNIXk3xQmBuqhYqPnxI=) 5: RI9f3asXCMevaW0HD2_2ty238fc.roa (hash: c2HYbIzMsReBVtW3VvHXPFUAZk26hFpmBAy25ZrJB7o=) 6: UIz3uWXq8WvDlEg8PmFeL4rRSwE.roa (hash: gLYU6TimhdtwdZhpJfW5DluA+/Hw1EN6Q7uPN3RrAos=) 7: _MqV1XKDHlZayFJD_tebnGvV-5M.roa (hash: d1lgjgsmxlfmAx6agblK/hzEA0kP5WWi8VR1j2Op8bI=) 8: lD6XQXU5XweY3aFaXvtSaxKbUbg.roa (hash: 6ADKjdzYu1CV/1GsWyr07rGlXGz5FE1o4HR8g0+KmZE=) 9: lP4cxO_3lnzQn7Ilwl6gVjJD0IY.roa (hash: uXIKziw38oRnc113zAOQwsWk6faYXtXNQlUgwb8l2ZE=) 10: p0BVO9Af7Thr9z7m6IM96h1DgmA.roa (hash: M3qrJb8kDeOcqJXYvSqGIOSCSmHqLEZFL25U38otuCQ=) 11: vMiPWs17mJ2MABRze9Hq1025CDc.roa (hash: 8W9yqTdGHHqBrhEBsNTxK/BVRexUUTjBUT5unYMFEmE=) 12: vmUg0yzYcnRJZC2n9pSGw6JlB2A.roa (hash: f45/pAD/SVLyT8PSsTHGZFNyd/9e/fwYtYXEyg22gkw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Jul 2025 14:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:38:03:a7:37:3b:80:90:b8:b8:f4:00:61:b5:42:07:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df895a3ee2211b6ee2df7202f09a426680d66269 Validity Not Before: Jul 23 16:00:20 2025 GMT Not After : Jul 24 16:00:20 2025 GMT Subject: CN=a1985862a22e819d0ba42f30a0a954f63604e0b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f1:89:e5:9b:b7:d6:51:74:a0:50:16:69:b9: aa:3e:7e:8d:f6:34:bf:1b:3d:bb:cc:05:9b:95:41: 26:0d:46:d1:48:c3:1d:40:35:bc:ac:11:56:5c:25: 76:64:83:35:0a:8a:cf:a1:89:08:bb:89:bd:43:23: 60:e2:f8:44:41:91:10:ae:72:19:a1:38:25:04:43: fb:2a:5d:d6:3f:be:56:ca:c9:8d:cb:d2:1e:de:26: 7c:5e:0f:cb:0c:e4:90:28:cf:ce:31:24:10:cf:e6: 12:41:6e:a0:a1:98:9e:f1:7d:1b:25:3f:78:e5:62: 57:65:6c:82:1c:e2:67:ca:f2:09:0b:e3:61:94:53: b9:73:a0:2e:eb:7a:5a:4d:b3:60:45:a8:7e:ae:75: 7f:1e:a0:c0:1f:8b:1a:e2:ad:64:d0:b0:3c:fa:b7: 4b:2d:fe:66:dd:2f:ad:7f:4b:5b:61:44:d3:c3:1b: 43:39:3e:41:a2:42:8e:ed:ec:35:89:9f:26:29:43: 5a:2e:77:39:5d:fb:7f:d1:13:2b:03:c5:18:9a:81: bd:66:4d:2c:36:98:da:89:50:c1:86:1f:0d:ee:d9: 36:81:d4:98:ed:d2:fe:3c:4b:ca:82:25:af:1a:18: 7e:c9:26:b2:1c:b7:96:27:6d:a0:73:fc:b6:a1:37: 8c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:98:58:62:A2:2E:81:9D:0B:A4:2F:30:A0:A9:54:F6:36:04:E0:B0 X509v3 Authority Key Identifier: keyid:DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:8e:3d:78:a1:35:bd:7e:27:29:18:dc:3a:ba:8c:a5:a3:54: e4:30:2a:06:ec:f5:4a:ca:e4:2d:dc:2d:bc:a4:5a:d9:b8:84: 7b:eb:6f:37:b6:79:0e:9c:dc:78:b0:79:b6:42:32:90:e3:a8: fa:c4:f9:7f:33:ef:39:a0:cb:07:7d:6b:0a:1b:2b:f6:d5:21: 29:6f:48:05:64:9e:31:70:8b:87:f0:40:47:3a:63:3d:3c:ce: 80:49:72:2f:83:1a:37:3d:dc:94:10:ec:4d:54:96:f3:e6:0a: d5:e7:1f:b2:18:28:32:0b:14:91:02:a8:4f:69:81:49:fd:1b: f7:31:8e:a3:61:06:05:4e:1b:6d:4e:5c:52:f7:d4:07:69:90: a9:4d:40:da:dd:b4:97:6d:c7:20:c3:fa:0b:9c:c0:f0:3b:c7: bf:a2:3e:d7:1f:9a:48:c1:83:58:29:0b:ab:7e:dd:85:37:6e: ea:a8:7a:31:cb:0e:92:4d:49:ec:84:61:32:f3:92:a2:1a:66: 24:f5:6b:8b:5c:66:d1:35:dd:88:84:31:4a:0a:0a:f8:cc:35: 08:dd:42:3d:83:77:a1:e6:3b:a1:f4:32:a4:46:26:b7:14:c1: c5:79:51:98:bf:b2:47:54:5a:aa:3e:3c:c6:2f:a1:40:9e:ad: 85:ad:84:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg4A6c3O4CQuLj0AGG1QgfZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmODk1YTNlZTIyMTFiNmVlMmRmNzIwMmYwOWE0MjY2ODBk NjYyNjkwHhcNMjUwNzIzMTYwMDIwWhcNMjUwNzI0MTYwMDIwWjAzMTEwLwYDVQQD EyhhMTk4NTg2MmEyMmU4MTlkMGJhNDJmMzBhMGE5NTRmNjM2MDRlMGIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufGJ5Zu31lF0oFAWabmqPn6N9jS/ Gz27zAWblUEmDUbRSMMdQDW8rBFWXCV2ZIM1CorPoYkIu4m9QyNg4vhEQZEQrnIZ oTglBEP7Kl3WP75WysmNy9Ie3iZ8Xg/LDOSQKM/OMSQQz+YSQW6goZie8X0bJT94 5WJXZWyCHOJnyvIJC+NhlFO5c6Au63paTbNgRah+rnV/HqDAH4sa4q1k0LA8+rdL Lf5m3S+tf0tbYUTTwxtDOT5BokKO7ew1iZ8mKUNaLnc5Xft/0RMrA8UYmoG9Zk0s NpjaiVDBhh8N7tk2gdSY7dL+PEvKgiWvGhh+ySayHLeWJ22gc/y2oTeMIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKGYWGKiLoGdC6QvMKCpVPY2BOCwMB8GA1UdIwQY MBaAFN+JWj7iIRtu4t9yAvCaQmaA1mJpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8xYTcyYTctMjc3ZC00NGY1LTg3ZGUt NzBiMmViZDUxNDM4LzEvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8xYTcyYTctMjc3ZC00NGY1LTg3ZGUtNzBiMmViZDUxNDM4 LzEvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYI49eKE1 vX4nKRjcOrqMpaNU5DAqBuz1SsrkLdwtvKRa2biEe+tvN7Z5DpzceLB5tkIykOOo +sT5fzPvOaDLB31rChsr9tUhKW9IBWSeMXCLh/BARzpjPTzOgElyL4MaNz3clBDs TVSW8+YK1ecfshgoMgsUkQKoT2mBSf0b9zGOo2EGBU4bbU5cUvfUB2mQqU1A2t20 l23HIMP6C5zA8DvHv6I+1x+aSMGDWCkLq37dhTdu6qh6McsOkk1J7IRhMvOSohpm JPVri1xm0TXdiIQxSgoK+Mw1CN1CPYN3oeY7ofQypEYmtxTBxXlRmL+yR1Raqj48 xi+hQJ6tha2ETg== -----END CERTIFICATE-----Generated at Wed Jul 23 23:29:22 2025 by rpki-client