$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft File: 34laPuIhG27i33IC8JpCZoDWYmk.mft (raw, json) Hash identifier: 1Wo0C+J3nUJYl9ItZx8bDlIehENjzaYXxVfKwib19no= Subject key identifier: 96:1F:51:9E:70:39:B7:82:F5:07:81:23:BD:ED:C4:00:B6:33:0E:A7 Authority key identifier: DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69 Certificate issuer: /CN=df895a3ee2211b6ee2df7202f09a426680d66269 Certificate serial: 01A08CB159896F9021D8EE5EC3ED04962FDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft Manifest number: 093D Signing time: Thu 10 Sep 2026 19:00:27 +0000 Manifest this update: Thu 10 Sep 2026 19:00:27 +0000 Manifest next update: Fri 11 Sep 2026 19:00:27 +0000 Files and hashes: 1: 0XLwdTu4nRGxVAQOFOgi-F-CPp8.roa (hash: pak6BtTzWa98W3dJFCCof2yZ3EkBaahZi9HG5ewTysQ=) 2: 34laPuIhG27i33IC8JpCZoDWYmk.crl (hash: 571lTTIngbkFgQGDQzV/kChfTXm3iNK65sZQ8a+BwPk=) 3: JbC08AZZ4yXpMlH-fCQSdJypEsk.roa (hash: dv25QT/BTHr/Vmlb0AXRPmd0ZYYxQm5AHmzhJRYqsHI=) 4: aDmk7bmr7GaG3aSI9qiX-uXwSWg.roa (hash: PRIIqS3HIlOlOVEL7UW8zij6bOh1J2Z1Qs2Esv77scQ=) 5: cw-KXeWioyTYbIA1vAnNwGD9GhY.roa (hash: EbcWuoOspeZih7eQTLeYWoRHq4YiGEsO0VMZUGNEFB0=) 6: e5CgRNX8DO6ZSqQ9MJH71FE7_jc.roa (hash: V4ZA2YkMaTT1slmusEGl0z9gt2912EuUoJMbm9ZyTsM=) 7: j-PFBiL03S6WRSrBU8S47xwyndA.roa (hash: K7P+QUsdp4yG+ErvjouO0SB+AUJcFrNu/1BLrwwoCmk=) 8: mHlUc70rNMbtkPfKuvhCKEylgkY.roa (hash: h1dT3/iB5II0F3sw3D3rAshjNyDRMEmfsyBcGUSBbMs=) 9: onJwIsBG_TlNzJPQVYzWvXnQYTU.roa (hash: CF4OHpZC0xd0XR18QoBgWTx8t9RwFhji6OFqhQG0Qog=) 10: tDWgVsxN09kg7oAdG68IGAVT8Zg.roa (hash: 92PHhhSbJSKdw93N+YcB/DCcsP8fP/+3+zAHfz750FA=) 11: wNRTB3A2q9f-yV1rTSijUO5gEB8.roa (hash: Mvkmn5/K4C/vX+W0bmirSKlojMyVfTuv4C+eRU2oTlU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 19:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:8c:b1:59:89:6f:90:21:d8:ee:5e:c3:ed:04:96:2f:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df895a3ee2211b6ee2df7202f09a426680d66269 Validity Not Before: Sep 10 19:00:27 2026 GMT Not After : Sep 11 19:00:27 2026 GMT Subject: CN=961f519e7039b782f5078123bdedc400b6330ea7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:ce:7a:39:73:8e:4e:17:3f:b1:e8:05:92:7b: 5a:1b:56:72:46:05:7e:44:93:a1:bc:9b:be:fb:b2: d5:9e:35:73:76:af:17:77:0d:88:76:94:12:19:b1: 4b:a0:e1:c3:10:2a:38:c1:d1:74:98:a8:60:3b:54: 60:71:51:4f:8b:76:c8:06:54:b1:9d:4f:96:0c:73: 84:aa:06:c1:ce:9c:4c:1c:86:82:04:a1:18:ee:e7: dd:81:87:3b:46:28:45:be:e4:51:ea:5f:4a:e9:38: 1b:1b:c9:0c:e6:3e:9a:d4:46:62:4b:0a:ef:d6:3a: b0:88:c5:ec:42:42:f9:f6:4c:12:c1:fe:79:1b:7c: d6:21:77:ff:27:13:0d:fe:ec:fc:2d:2c:37:a3:e7: 32:eb:06:e5:c1:01:b5:39:6d:f0:a9:be:38:ce:0d: 38:b0:09:ab:10:d5:98:ff:16:93:78:b9:ed:51:f3: 1d:f3:50:08:4b:aa:c6:2c:a0:23:7a:da:cf:7c:3b: 6f:f6:c0:55:59:d0:4a:1a:f4:b3:b8:8d:01:d9:35: 4d:eb:03:26:12:e1:63:3c:04:41:a0:4b:ae:e4:91: c9:c9:7f:f3:83:66:a2:ba:91:77:9d:cc:66:dd:76: fc:d7:1c:10:4e:10:96:dc:f7:87:a6:fb:38:62:6e: 70:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:1F:51:9E:70:39:B7:82:F5:07:81:23:BD:ED:C4:00:B6:33:0E:A7 X509v3 Authority Key Identifier: keyid:DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:d3:5c:c6:e6:0a:db:fd:b3:c1:3d:56:16:05:80:35:cc:68: bd:33:bb:62:17:41:e3:03:fe:41:75:db:71:e4:4b:d0:09:e4: e8:41:96:42:73:29:e5:13:2d:b0:46:9e:a8:65:9d:35:7e:93: 6c:42:cb:cd:69:b5:af:64:33:9c:9c:3c:96:a0:f4:b2:c1:3d: e7:a9:c4:c8:4a:f8:0a:44:6a:5b:6a:a7:25:f2:a3:d2:56:36: 95:4f:1a:f0:d5:a2:45:4c:97:a1:6c:2d:18:72:9e:e3:43:a7: ea:d7:3f:18:d6:49:83:e1:e3:6f:ca:df:fa:1d:c6:89:9d:a3: 90:86:d4:6f:3d:b0:c4:53:cd:aa:fd:f5:76:1e:b4:3b:a0:91: 89:23:e7:cb:c4:a2:13:2f:de:83:e0:14:ed:12:0d:94:10:82: db:cd:6c:11:a5:a4:81:a8:3d:d3:06:c5:75:c0:d3:92:db:09: 50:cf:5b:23:f0:f6:34:ea:b0:36:82:b9:1f:a5:df:e2:3f:20: 7f:49:05:c3:75:d6:a5:d7:33:e2:c0:79:12:9b:e6:70:44:f6: 49:d1:d7:c8:08:15:a4:81:f8:a2:a1:16:7a:38:3e:d0:c8:e3: 63:8a:f9:53:90:fd:41:03:fd:48:d0:73:93:2f:55:19:02:64: af:85:9c:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCMsVmJb5Ah2O5ew+0Eli/dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmODk1YTNlZTIyMTFiNmVlMmRmNzIwMmYwOWE0MjY2ODBk NjYyNjkwHhcNMjYwOTEwMTkwMDI3WhcNMjYwOTExMTkwMDI3WjAzMTEwLwYDVQQD Eyg5NjFmNTE5ZTcwMzliNzgyZjUwNzgxMjNiZGVkYzQwMGI2MzMwZWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+c56OXOOThc/segFkntaG1ZyRgV+ RJOhvJu++7LVnjVzdq8Xdw2IdpQSGbFLoOHDECo4wdF0mKhgO1RgcVFPi3bIBlSx nU+WDHOEqgbBzpxMHIaCBKEY7ufdgYc7RihFvuRR6l9K6TgbG8kM5j6a1EZiSwrv 1jqwiMXsQkL59kwSwf55G3zWIXf/JxMN/uz8LSw3o+cy6wblwQG1OW3wqb44zg04 sAmrENWY/xaTeLntUfMd81AIS6rGLKAjetrPfDtv9sBVWdBKGvSzuI0B2TVN6wMm EuFjPARBoEuu5JHJyX/zg2aiupF3ncxm3Xb81xwQThCW3PeHpvs4Ym5w7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJYfUZ5wObeC9QeBI73txAC2Mw6nMB8GA1UdIwQY MBaAFN+JWj7iIRtu4t9yAvCaQmaA1mJpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8xYTcyYTctMjc3ZC00NGY1LTg3ZGUt NzBiMmViZDUxNDM4LzEvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8xYTcyYTctMjc3ZC00NGY1LTg3ZGUtNzBiMmViZDUxNDM4 LzEvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlNNcxuYK 2/2zwT1WFgWANcxovTO7YhdB4wP+QXXbceRL0Ank6EGWQnMp5RMtsEaeqGWdNX6T bELLzWm1r2QznJw8lqD0ssE956nEyEr4CkRqW2qnJfKj0lY2lU8a8NWiRUyXoWwt GHKe40On6tc/GNZJg+Hjb8rf+h3GiZ2jkIbUbz2wxFPNqv31dh60O6CRiSPny8Si Ey/eg+AU7RINlBCC281sEaWkgag90wbFdcDTktsJUM9bI/D2NOqwNoK5H6Xf4j8g f0kFw3XWpdcz4sB5EpvmcET2SdHXyAgVpIH4oqEWejg+0MjjY4r5U5D9QQP9SNBz ky9VGQJkr4WcOw== -----END CERTIFICATE-----Generated at Fri Sep 11 03:14:13 2026 by rpki-client