$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft File: 34laPuIhG27i33IC8JpCZoDWYmk.mft (raw, json) Hash identifier: W/z5q6AnQhHY2PaLfKNRBxoJ1bYHfV6f+V92v1JlFgY= Subject key identifier: 6D:4C:71:96:65:33:C4:25:5D:D6:38:A4:57:EF:84:7C:01:90:F9:1D Authority key identifier: DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69 Certificate issuer: /CN=df895a3ee2211b6ee2df7202f09a426680d66269 Certificate serial: 01992BFDE15781033928624EC5A53036478B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft Manifest number: 055E Signing time: Tue 09 Sep 2025 01:01:22 +0000 Manifest this update: Tue 09 Sep 2025 01:01:22 +0000 Manifest next update: Wed 10 Sep 2025 01:01:22 +0000 Files and hashes: 1: 34laPuIhG27i33IC8JpCZoDWYmk.crl (hash: iDZKcXIpUQ8Lcj772wicrn8nG/3ZO5AkXfbl02FwKTU=) 2: 7SUWhLqE8A7qWiGUQfWRk3P7j_k.roa (hash: vr+ZGiswiHAuEM9htC6Hmt6v0+gW2jHUeuGOqHmqzNU=) 3: DoutZlvm4IbzXZXDTFrxAAquQLg.roa (hash: qnpQEntxymSrGJJO5sN1jep0qMMWrabFq1224NHJCYE=) 4: Jnp54uEZWEbzo5JH40T_lJ9C9Z0.roa (hash: Fnatp1DYGIx3gW9yEtvyiEfpUNIXk3xQmBuqhYqPnxI=) 5: UIz3uWXq8WvDlEg8PmFeL4rRSwE.roa (hash: gLYU6TimhdtwdZhpJfW5DluA+/Hw1EN6Q7uPN3RrAos=) 6: YtVS-aK9rlFruoFrqFlIl1-G7xQ.roa (hash: 01nxSlc7uYxsqEh9WpT7cgExFmnD4WF+M8+hN9BsatQ=) 7: _MqV1XKDHlZayFJD_tebnGvV-5M.roa (hash: d1lgjgsmxlfmAx6agblK/hzEA0kP5WWi8VR1j2Op8bI=) 8: lD6XQXU5XweY3aFaXvtSaxKbUbg.roa (hash: 6ADKjdzYu1CV/1GsWyr07rGlXGz5FE1o4HR8g0+KmZE=) 9: lP4cxO_3lnzQn7Ilwl6gVjJD0IY.roa (hash: uXIKziw38oRnc113zAOQwsWk6faYXtXNQlUgwb8l2ZE=) 10: p0BVO9Af7Thr9z7m6IM96h1DgmA.roa (hash: M3qrJb8kDeOcqJXYvSqGIOSCSmHqLEZFL25U38otuCQ=) 11: vmUg0yzYcnRJZC2n9pSGw6JlB2A.roa (hash: f45/pAD/SVLyT8PSsTHGZFNyd/9e/fwYtYXEyg22gkw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Sep 2025 23:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:2b:fd:e1:57:81:03:39:28:62:4e:c5:a5:30:36:47:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df895a3ee2211b6ee2df7202f09a426680d66269 Validity Not Before: Sep 9 01:01:22 2025 GMT Not After : Sep 10 01:01:22 2025 GMT Subject: CN=6d4c71966533c4255dd638a457ef847c0190f91d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:af:3f:b3:84:e4:0e:43:d0:f3:f4:1e:90:a0: 8c:09:d0:e7:e1:af:d7:97:ef:47:9b:f6:ae:35:f4: 8a:02:10:7f:fe:ea:d4:0f:57:6c:1e:5d:18:18:f2: 39:4b:92:31:bb:c1:07:82:cd:4d:3d:6e:59:70:5a: c6:73:13:1e:df:df:d6:92:fc:37:2f:68:30:83:89: a4:37:78:ef:37:4f:e7:ad:4e:bf:02:7d:f1:bc:20: 98:9b:ff:ed:74:32:46:82:8e:61:42:f1:31:94:c4: c4:da:9a:74:bf:68:b1:06:a7:25:c0:7c:47:e3:11: ac:e8:49:92:b7:32:8d:57:51:55:d1:a5:33:3b:73: e4:9d:4e:b6:fc:e3:b5:7e:ce:9c:e0:5c:d8:e6:8d: 65:cf:02:19:1b:2a:b7:53:e4:18:cc:6b:f7:3b:c7: 31:38:b7:c9:01:ba:c8:fc:02:0c:15:b7:a6:30:56: bb:29:b7:08:09:18:6a:02:e4:e6:d4:e0:39:2d:10: be:06:80:f7:14:50:da:bc:0d:50:23:22:9b:bc:b7: c9:5d:b9:f8:f8:83:15:20:c8:50:4d:6e:97:e7:09: 12:f1:70:96:4d:3c:09:1c:29:7a:c7:38:a0:fc:94: d3:33:53:55:1e:bd:61:94:70:98:eb:1f:6a:0b:38: ef:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:4C:71:96:65:33:C4:25:5D:D6:38:A4:57:EF:84:7C:01:90:F9:1D X509v3 Authority Key Identifier: keyid:DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:b7:42:e5:b1:31:37:57:f7:4c:2b:0f:9a:4a:3b:01:46:f5: 01:f0:ee:ed:79:09:6c:84:88:fc:60:0d:57:91:92:17:05:65: 14:f9:5f:a1:04:2e:53:ec:43:69:fa:25:88:7f:b8:e9:17:62: 9f:e8:95:c8:66:dc:46:e1:a8:ec:fb:7d:12:e0:3b:5c:13:ed: 3b:71:43:4d:8f:45:98:e0:ab:f6:8a:8a:d2:41:e1:2b:a0:df: a4:93:86:dc:15:98:48:2e:ce:06:b2:2e:aa:78:95:2c:23:1d: 71:ee:0b:e7:f8:a4:e2:0d:cf:9b:d9:6c:9c:2d:4f:31:2d:a3: fb:90:cd:21:02:de:76:90:d6:31:1c:b0:fd:62:62:93:99:bb: f1:3d:7d:bd:3c:23:92:bb:ff:fe:e7:51:a7:63:1c:cc:f7:56: 40:13:e1:67:fc:ce:49:fd:ad:dc:71:96:4d:c3:9a:fc:48:de: 70:00:05:6d:7a:0b:ef:e4:2d:10:d5:10:4d:18:f8:2a:02:16: 57:77:61:15:0d:b5:51:f2:f2:50:c4:a1:a7:44:bf:23:f4:b8: 89:e2:68:93:09:f2:d3:fb:0c:7f:82:e6:fd:8c:19:a7:16:d6: 4e:7a:90:47:e5:29:77:6e:7c:b8:5a:f0:82:60:26:d8:f7:fb: e8:43:f5:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkr/eFXgQM5KGJOxaUwNkeLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmODk1YTNlZTIyMTFiNmVlMmRmNzIwMmYwOWE0MjY2ODBk NjYyNjkwHhcNMjUwOTA5MDEwMTIyWhcNMjUwOTEwMDEwMTIyWjAzMTEwLwYDVQQD Eyg2ZDRjNzE5NjY1MzNjNDI1NWRkNjM4YTQ1N2VmODQ3YzAxOTBmOTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6a8/s4TkDkPQ8/QekKCMCdDn4a/X l+9Hm/auNfSKAhB//urUD1dsHl0YGPI5S5Ixu8EHgs1NPW5ZcFrGcxMe39/Wkvw3 L2gwg4mkN3jvN0/nrU6/An3xvCCYm//tdDJGgo5hQvExlMTE2pp0v2ixBqclwHxH 4xGs6EmStzKNV1FV0aUzO3PknU62/OO1fs6c4FzY5o1lzwIZGyq3U+QYzGv3O8cx OLfJAbrI/AIMFbemMFa7KbcICRhqAuTm1OA5LRC+BoD3FFDavA1QIyKbvLfJXbn4 +IMVIMhQTW6X5wkS8XCWTTwJHCl6xzig/JTTM1NVHr1hlHCY6x9qCzjveQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG1McZZlM8QlXdY4pFfvhHwBkPkdMB8GA1UdIwQY MBaAFN+JWj7iIRtu4t9yAvCaQmaA1mJpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8xYTcyYTctMjc3ZC00NGY1LTg3ZGUt NzBiMmViZDUxNDM4LzEvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8xYTcyYTctMjc3ZC00NGY1LTg3ZGUtNzBiMmViZDUxNDM4 LzEvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlLdC5bEx N1f3TCsPmko7AUb1AfDu7XkJbISI/GANV5GSFwVlFPlfoQQuU+xDafoliH+46Rdi n+iVyGbcRuGo7Pt9EuA7XBPtO3FDTY9FmOCr9oqK0kHhK6DfpJOG3BWYSC7OBrIu qniVLCMdce4L5/ik4g3Pm9lsnC1PMS2j+5DNIQLedpDWMRyw/WJik5m78T19vTwj krv//udRp2MczPdWQBPhZ/zOSf2t3HGWTcOa/EjecAAFbXoL7+QtENUQTRj4KgIW V3dhFQ21UfLyUMShp0S/I/S4ieJokwny0/sMf4Lm/YwZpxbWTnqQR+Upd258uFrw gmAm2Pf76EP12Q== -----END CERTIFICATE-----Generated at Tue Sep 9 08:54:47 2025 by rpki-client