$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft File: 34laPuIhG27i33IC8JpCZoDWYmk.mft (raw, json) Hash identifier: kGS0kRsbc9Q61kAE6gQPFVgS9vgTHXFUGOHkhwutFqU= Subject key identifier: 4F:E3:E0:07:13:E9:D0:88:C0:8D:01:4D:99:07:0B:6D:16:14:F6:82 Authority key identifier: DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69 Certificate issuer: /CN=df895a3ee2211b6ee2df7202f09a426680d66269 Certificate serial: 019A1644DD7843F52370DA8DE0B9FFD335FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft Manifest number: 05D9 Signing time: Fri 24 Oct 2025 12:50:03 +0000 Manifest this update: Fri 24 Oct 2025 12:50:03 +0000 Manifest next update: Sat 25 Oct 2025 12:50:03 +0000 Files and hashes: 1: 34laPuIhG27i33IC8JpCZoDWYmk.crl (hash: 1A/ikg0NB6FFEZIQDa9rkIWMxKENDaZZwpeSGhHU1Gk=) 2: 5zBBP6A9yXxPnIT5zZIOxAXnWn8.roa (hash: Tk6h46GooTA/gBtAz3CQBGmG5ai7s8MBzIVWccJFxM0=) 3: 7SUWhLqE8A7qWiGUQfWRk3P7j_k.roa (hash: vr+ZGiswiHAuEM9htC6Hmt6v0+gW2jHUeuGOqHmqzNU=) 4: DoutZlvm4IbzXZXDTFrxAAquQLg.roa (hash: qnpQEntxymSrGJJO5sN1jep0qMMWrabFq1224NHJCYE=) 5: Jnp54uEZWEbzo5JH40T_lJ9C9Z0.roa (hash: Fnatp1DYGIx3gW9yEtvyiEfpUNIXk3xQmBuqhYqPnxI=) 6: _MqV1XKDHlZayFJD_tebnGvV-5M.roa (hash: d1lgjgsmxlfmAx6agblK/hzEA0kP5WWi8VR1j2Op8bI=) 7: lD6XQXU5XweY3aFaXvtSaxKbUbg.roa (hash: 6ADKjdzYu1CV/1GsWyr07rGlXGz5FE1o4HR8g0+KmZE=) 8: lP4cxO_3lnzQn7Ilwl6gVjJD0IY.roa (hash: uXIKziw38oRnc113zAOQwsWk6faYXtXNQlUgwb8l2ZE=) 9: p0BVO9Af7Thr9z7m6IM96h1DgmA.roa (hash: M3qrJb8kDeOcqJXYvSqGIOSCSmHqLEZFL25U38otuCQ=) 10: vmUg0yzYcnRJZC2n9pSGw6JlB2A.roa (hash: f45/pAD/SVLyT8PSsTHGZFNyd/9e/fwYtYXEyg22gkw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Oct 2025 12:50:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:16:44:dd:78:43:f5:23:70:da:8d:e0:b9:ff:d3:35:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df895a3ee2211b6ee2df7202f09a426680d66269 Validity Not Before: Oct 24 12:50:03 2025 GMT Not After : Oct 25 12:50:03 2025 GMT Subject: CN=4fe3e00713e9d088c08d014d99070b6d1614f682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:98:07:b7:e1:bb:cb:b9:b3:21:61:7b:fc:7d: dd:be:d9:d5:f9:da:38:9b:46:3a:ee:b5:d6:bf:72: ee:34:22:cc:b4:37:80:5a:a4:09:02:69:b5:e6:e8: 84:e8:67:39:4f:ab:7e:db:9f:5a:92:73:d1:5b:2d: 1a:47:bf:34:d8:79:52:10:d5:3c:8b:a9:fb:a2:82: 37:4b:24:8b:bf:5d:25:8e:62:01:ff:eb:2d:4b:23: 3b:1d:b9:77:5e:39:e4:ee:b6:22:22:07:f2:29:c7: 38:98:6a:9f:cc:f4:35:9a:bf:6d:76:27:41:9a:51: 9b:b8:40:59:6a:bd:e5:88:55:c8:17:ac:06:b0:a2: ab:63:5c:bf:55:93:f2:82:e2:f3:cd:39:e6:a7:c5: 1d:e7:94:88:40:f4:94:8a:b3:28:5b:43:18:b2:e9: 31:5f:25:ae:01:63:9d:4d:95:5e:9e:43:5c:62:06: 0f:4b:9e:f5:b2:8a:80:60:8f:cf:a9:5f:48:01:e9: 4d:f4:c7:dd:35:f9:0c:df:34:08:77:cd:1c:44:2e: 6a:be:c0:9d:cb:cb:e2:71:3b:9e:4d:25:d4:42:b6: 6d:ae:ff:c4:cb:5d:59:73:57:11:6e:44:03:2d:39: 57:ee:e2:3d:c9:7f:9f:a0:aa:b4:9c:15:3c:36:14: dd:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:E3:E0:07:13:E9:D0:88:C0:8D:01:4D:99:07:0B:6D:16:14:F6:82 X509v3 Authority Key Identifier: keyid:DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:9d:5c:43:df:48:20:65:4b:71:58:59:ce:2c:29:48:bf:56: c2:4f:34:2b:1d:c7:da:0d:b4:cc:19:10:27:f8:48:bb:62:d7: 40:bf:c7:fa:36:3b:a2:0f:92:99:e8:d3:63:f2:10:80:ed:e6: 1e:67:11:71:cf:d1:2d:83:11:71:f2:d8:03:89:b5:4c:7d:25: 36:d6:40:85:9b:88:e7:f7:d1:48:21:cb:a8:ed:31:fb:da:81: 2c:b5:43:7f:0d:04:b5:bc:48:6b:e2:ac:2f:31:e0:51:d1:41: 03:23:02:23:78:69:1f:3f:68:10:e9:cd:a4:36:d8:0b:cb:9d: 60:1f:d6:94:3a:96:8c:ba:99:5f:d9:8a:f8:5b:7b:78:78:0f: 9c:34:c5:27:f5:a8:23:21:a2:be:94:d6:36:a3:51:f4:d7:40: 8e:e7:95:5c:b2:f9:fe:cb:91:11:b1:2f:5b:a6:01:97:b2:0b: d7:d9:e2:e0:68:ae:a2:dd:46:0b:ce:97:8b:7b:9a:4f:04:03: bc:8c:e4:dd:1e:d4:17:02:75:8a:9a:a4:4b:8a:81:bb:5d:59: 6e:e0:cb:b7:b6:55:b2:b9:4f:86:55:5a:fc:d1:ab:e8:b8:ea: e9:36:8c:11:8e:74:4d:40:96:1a:f3:04:bc:61:80:26:9c:54: e2:13:81:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoWRN14Q/UjcNqN4Ln/0zX+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmODk1YTNlZTIyMTFiNmVlMmRmNzIwMmYwOWE0MjY2ODBk NjYyNjkwHhcNMjUxMDI0MTI1MDAzWhcNMjUxMDI1MTI1MDAzWjAzMTEwLwYDVQQD Eyg0ZmUzZTAwNzEzZTlkMDg4YzA4ZDAxNGQ5OTA3MGI2ZDE2MTRmNjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZgHt+G7y7mzIWF7/H3dvtnV+do4 m0Y67rXWv3LuNCLMtDeAWqQJAmm15uiE6Gc5T6t+259aknPRWy0aR7802HlSENU8 i6n7ooI3SySLv10ljmIB/+stSyM7Hbl3Xjnk7rYiIgfyKcc4mGqfzPQ1mr9tdidB mlGbuEBZar3liFXIF6wGsKKrY1y/VZPyguLzzTnmp8Ud55SIQPSUirMoW0MYsukx XyWuAWOdTZVenkNcYgYPS571soqAYI/PqV9IAelN9MfdNfkM3zQId80cRC5qvsCd y8vicTueTSXUQrZtrv/Ey11Zc1cRbkQDLTlX7uI9yX+foKq0nBU8NhTdiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE/j4AcT6dCIwI0BTZkHC20WFPaCMB8GA1UdIwQY MBaAFN+JWj7iIRtu4t9yAvCaQmaA1mJpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8xYTcyYTctMjc3ZC00NGY1LTg3ZGUt NzBiMmViZDUxNDM4LzEvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8xYTcyYTctMjc3ZC00NGY1LTg3ZGUtNzBiMmViZDUxNDM4 LzEvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATZ1cQ99I IGVLcVhZziwpSL9Wwk80Kx3H2g20zBkQJ/hIu2LXQL/H+jY7og+SmejTY/IQgO3m HmcRcc/RLYMRcfLYA4m1TH0lNtZAhZuI5/fRSCHLqO0x+9qBLLVDfw0EtbxIa+Ks LzHgUdFBAyMCI3hpHz9oEOnNpDbYC8udYB/WlDqWjLqZX9mK+Ft7eHgPnDTFJ/Wo IyGivpTWNqNR9NdAjueVXLL5/suREbEvW6YBl7IL19ni4Giuot1GC86Xi3uaTwQD vIzk3R7UFwJ1ipqkS4qBu11ZbuDLt7ZVsrlPhlVa/NGr6Ljq6TaMEY50TUCWGvME vGGAJpxU4hOBOw== -----END CERTIFICATE-----Generated at Fri Oct 24 20:49:50 2025 by rpki-client