$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft File: 34laPuIhG27i33IC8JpCZoDWYmk.mft (raw, json) Hash identifier: GlxkUUw+g5CkKEREtpmYvtEKjGx+MPaP2GXpio1DNTk= Subject key identifier: 70:F6:9E:5C:6A:D4:85:50:67:4C:6A:E0:D4:BD:00:D6:55:4F:D3:D5 Authority key identifier: DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69 Certificate issuer: /CN=df895a3ee2211b6ee2df7202f09a426680d66269 Certificate serial: 01A17A3AAAE7649DF75FFB2E2EBCEEA55DBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft Manifest number: 09B9 Signing time: Mon 26 Oct 2026 22:00:27 +0000 Manifest this update: Mon 26 Oct 2026 22:00:27 +0000 Manifest next update: Tue 27 Oct 2026 22:00:27 +0000 Files and hashes: 1: 34laPuIhG27i33IC8JpCZoDWYmk.crl (hash: XlfqQdpaKOsoXt7V29W/Qh+jv1bRGDvQPfa2ZS7LP6A=) 2: Dq_PeQEX9w9AZ7hhB8jGjaPXdek.roa (hash: x2vJKbCmJ/r1uDEib+Z5d15/ZK6XfDckYPBmz+6pfec=) 3: JbC08AZZ4yXpMlH-fCQSdJypEsk.roa (hash: dv25QT/BTHr/Vmlb0AXRPmd0ZYYxQm5AHmzhJRYqsHI=) 4: aDmk7bmr7GaG3aSI9qiX-uXwSWg.roa (hash: PRIIqS3HIlOlOVEL7UW8zij6bOh1J2Z1Qs2Esv77scQ=) 5: cw-KXeWioyTYbIA1vAnNwGD9GhY.roa (hash: EbcWuoOspeZih7eQTLeYWoRHq4YiGEsO0VMZUGNEFB0=) 6: e5CgRNX8DO6ZSqQ9MJH71FE7_jc.roa (hash: V4ZA2YkMaTT1slmusEGl0z9gt2912EuUoJMbm9ZyTsM=) 7: j-PFBiL03S6WRSrBU8S47xwyndA.roa (hash: K7P+QUsdp4yG+ErvjouO0SB+AUJcFrNu/1BLrwwoCmk=) 8: mHlUc70rNMbtkPfKuvhCKEylgkY.roa (hash: h1dT3/iB5II0F3sw3D3rAshjNyDRMEmfsyBcGUSBbMs=) 9: tDWgVsxN09kg7oAdG68IGAVT8Zg.roa (hash: 92PHhhSbJSKdw93N+YcB/DCcsP8fP/+3+zAHfz750FA=) 10: wNRTB3A2q9f-yV1rTSijUO5gEB8.roa (hash: Mvkmn5/K4C/vX+W0bmirSKlojMyVfTuv4C+eRU2oTlU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Oct 2026 20:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:7a:3a:aa:e7:64:9d:f7:5f:fb:2e:2e:bc:ee:a5:5d:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df895a3ee2211b6ee2df7202f09a426680d66269 Validity Not Before: Oct 26 22:00:27 2026 GMT Not After : Oct 27 22:00:27 2026 GMT Subject: CN=70f69e5c6ad48550674c6ae0d4bd00d6554fd3d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5c:0c:9a:d3:9e:ab:56:7c:6e:a4:28:86:be: 46:d8:76:87:67:40:ff:ba:33:8c:8a:cb:72:df:79: 41:a1:81:5f:e8:6d:14:51:78:f0:3a:d9:8d:04:57: 69:48:e9:bd:b4:4d:21:c1:29:0a:72:5e:bf:0b:ad: b1:3e:7a:a8:76:77:01:37:c3:5e:9a:fe:fb:79:2e: 71:fd:10:e6:d4:6a:44:a1:c1:07:3f:f8:19:73:2f: 70:38:9d:99:7e:51:cf:c8:69:06:68:ae:52:fd:59: 9f:77:ef:ab:2e:29:1c:82:5f:ef:c1:c2:f4:85:7f: fb:d4:f6:d5:08:b2:08:97:03:8b:32:17:0e:3c:0d: 48:9f:ab:e4:19:05:5a:2a:7f:49:be:f8:10:e6:05: 97:d6:ba:a3:26:fe:4b:bb:98:d8:dd:59:c1:f8:ee: 33:dc:79:59:8d:c4:54:4b:9a:4a:78:79:f7:fd:b9: 99:91:f9:b0:93:88:4b:96:d6:97:f7:e0:ba:c4:11: 1a:1d:ff:3b:93:be:a0:6a:3f:01:5e:ca:72:c0:45: cd:62:e4:5f:ca:b9:3b:58:91:c1:07:34:ff:dc:2e: 40:bf:1a:94:ee:d4:fc:dd:f7:3b:42:4b:19:1c:79: 73:c0:21:1b:0f:3e:86:54:8c:27:c9:fd:0f:82:7e: de:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F6:9E:5C:6A:D4:85:50:67:4C:6A:E0:D4:BD:00:D6:55:4F:D3:D5 X509v3 Authority Key Identifier: keyid:DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:20:04:a1:bb:b5:54:8d:1d:1d:3d:89:2c:72:e3:35:e1:e3: fa:8e:35:65:a1:23:17:ee:6f:ac:0c:d2:27:34:20:6e:b4:4d: 0f:29:5e:79:db:00:21:73:5b:71:d8:75:29:90:9e:8b:c2:51: 2a:48:40:bc:2f:8d:26:16:7e:47:52:19:91:52:35:8a:c6:53: 0c:60:87:46:12:cf:dc:1e:4c:b0:a2:73:4f:00:9f:b4:f4:95: 9d:78:54:c2:1e:9c:23:67:57:f9:f0:1c:da:30:f9:70:cd:58: 70:75:f0:9b:ec:da:cd:e8:35:51:85:bb:9b:3d:9e:81:5e:18: 29:b1:a2:29:15:fd:32:80:9d:1a:31:3a:a2:59:97:ac:75:49: 90:9c:c3:cf:90:0c:c7:60:db:bf:64:b2:e0:46:aa:c5:6c:1a: 4c:1c:a2:38:c3:55:e5:bc:cb:b5:35:8a:fe:dd:36:f2:85:08: 2c:23:aa:6e:24:52:bf:61:2b:5d:38:c8:cd:0c:fe:ae:90:12: 41:bc:5a:89:5f:cd:57:d8:b8:76:f7:d9:14:6b:c1:0b:4f:a6: cc:1b:1c:32:b9:07:81:e4:de:73:94:a0:0e:bf:ae:78:cc:cb: a2:af:ec:50:39:68:a0:60:55:c4:36:f6:9e:ed:bc:ee:c2:f5: 4d:ab:1a:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF6OqrnZJ33X/suLrzupV29MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmODk1YTNlZTIyMTFiNmVlMmRmNzIwMmYwOWE0MjY2ODBk NjYyNjkwHhcNMjYxMDI2MjIwMDI3WhcNMjYxMDI3MjIwMDI3WjAzMTEwLwYDVQQD Eyg3MGY2OWU1YzZhZDQ4NTUwNjc0YzZhZTBkNGJkMDBkNjU1NGZkM2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVwMmtOeq1Z8bqQohr5G2HaHZ0D/ ujOMisty33lBoYFf6G0UUXjwOtmNBFdpSOm9tE0hwSkKcl6/C62xPnqodncBN8Ne mv77eS5x/RDm1GpEocEHP/gZcy9wOJ2ZflHPyGkGaK5S/Vmfd++rLikcgl/vwcL0 hX/71PbVCLIIlwOLMhcOPA1In6vkGQVaKn9JvvgQ5gWX1rqjJv5Lu5jY3VnB+O4z 3HlZjcRUS5pKeHn3/bmZkfmwk4hLltaX9+C6xBEaHf87k76gaj8BXspywEXNYuRf yrk7WJHBBzT/3C5AvxqU7tT83fc7QksZHHlzwCEbDz6GVIwnyf0Pgn7e7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHD2nlxq1IVQZ0xq4NS9ANZVT9PVMB8GA1UdIwQY MBaAFN+JWj7iIRtu4t9yAvCaQmaA1mJpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8xYTcyYTctMjc3ZC00NGY1LTg3ZGUt NzBiMmViZDUxNDM4LzEvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8xYTcyYTctMjc3ZC00NGY1LTg3ZGUtNzBiMmViZDUxNDM4 LzEvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASSAEobu1 VI0dHT2JLHLjNeHj+o41ZaEjF+5vrAzSJzQgbrRNDyleedsAIXNbcdh1KZCei8JR KkhAvC+NJhZ+R1IZkVI1isZTDGCHRhLP3B5MsKJzTwCftPSVnXhUwh6cI2dX+fAc 2jD5cM1YcHXwm+zazeg1UYW7mz2egV4YKbGiKRX9MoCdGjE6olmXrHVJkJzDz5AM x2Dbv2Sy4EaqxWwaTByiOMNV5bzLtTWK/t028oUILCOqbiRSv2ErXTjIzQz+rpAS QbxaiV/NV9i4dvfZFGvBC0+mzBscMrkHgeTec5SgDr+ueMzLoq/sUDlooGBVxDb2 nu287sL1TasaUQ== -----END CERTIFICATE-----Generated at Tue Oct 27 06:27:05 2026 by rpki-client