$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft File: 34laPuIhG27i33IC8JpCZoDWYmk.mft (raw, json) Hash identifier: 1966BL6V9bCUzRePhfmQxqMtpv5HSR8BN6VE2Aqd5M8= Subject key identifier: 83:B4:23:74:E2:7C:53:AE:53:C9:48:22:57:B3:C0:30:DA:83:BB:67 Authority key identifier: DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69 Certificate issuer: /CN=df895a3ee2211b6ee2df7202f09a426680d66269 Certificate serial: 019FA30552950907F9CE8BD0CD09BD369104 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft Manifest number: 08C2 Signing time: Mon 27 Jul 2026 10:01:02 +0000 Manifest this update: Mon 27 Jul 2026 10:01:02 +0000 Manifest next update: Tue 28 Jul 2026 10:01:02 +0000 Files and hashes: 1: 0XLwdTu4nRGxVAQOFOgi-F-CPp8.roa (hash: pak6BtTzWa98W3dJFCCof2yZ3EkBaahZi9HG5ewTysQ=) 2: 34laPuIhG27i33IC8JpCZoDWYmk.crl (hash: x/F6u4bnK5Liuh49yZe+jkCxdP3WMAHHjwM3YUBisKg=) 3: 9D5WwjKLKWgOIgPanR8axjhLcU4.roa (hash: ZLdDEz7U/sFImJ7TRS2LLSrQd9lNXvIbMcJRDgvz3sA=) 4: aDmk7bmr7GaG3aSI9qiX-uXwSWg.roa (hash: PRIIqS3HIlOlOVEL7UW8zij6bOh1J2Z1Qs2Esv77scQ=) 5: cw-KXeWioyTYbIA1vAnNwGD9GhY.roa (hash: EbcWuoOspeZih7eQTLeYWoRHq4YiGEsO0VMZUGNEFB0=) 6: e5CgRNX8DO6ZSqQ9MJH71FE7_jc.roa (hash: V4ZA2YkMaTT1slmusEGl0z9gt2912EuUoJMbm9ZyTsM=) 7: j-PFBiL03S6WRSrBU8S47xwyndA.roa (hash: K7P+QUsdp4yG+ErvjouO0SB+AUJcFrNu/1BLrwwoCmk=) 8: mHlUc70rNMbtkPfKuvhCKEylgkY.roa (hash: h1dT3/iB5II0F3sw3D3rAshjNyDRMEmfsyBcGUSBbMs=) 9: onJwIsBG_TlNzJPQVYzWvXnQYTU.roa (hash: CF4OHpZC0xd0XR18QoBgWTx8t9RwFhji6OFqhQG0Qog=) 10: tDWgVsxN09kg7oAdG68IGAVT8Zg.roa (hash: 92PHhhSbJSKdw93N+YcB/DCcsP8fP/+3+zAHfz750FA=) 11: wNRTB3A2q9f-yV1rTSijUO5gEB8.roa (hash: Mvkmn5/K4C/vX+W0bmirSKlojMyVfTuv4C+eRU2oTlU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Jul 2026 10:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a3:05:52:95:09:07:f9:ce:8b:d0:cd:09:bd:36:91:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df895a3ee2211b6ee2df7202f09a426680d66269 Validity Not Before: Jul 27 10:01:02 2026 GMT Not After : Jul 28 10:01:02 2026 GMT Subject: CN=83b42374e27c53ae53c9482257b3c030da83bb67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:be:65:9a:4d:7a:aa:5d:da:8f:59:45:6d:32: af:1e:88:d9:05:38:5f:0c:74:17:ad:9e:6b:ca:2e: fa:15:e4:77:54:91:b6:ff:53:9b:79:1c:da:e4:2c: 4c:ba:4e:03:f1:63:7e:19:04:fe:db:fa:0d:2d:1f: 25:97:b2:59:bb:f2:f8:d2:6a:10:e9:ed:42:14:eb: fe:37:f7:fc:d0:a8:c3:27:fc:e3:85:56:5f:3e:74: c2:9e:3d:fa:19:f3:2f:25:7f:2f:b3:b6:17:c2:3d: 2b:85:1f:6b:0a:36:da:9f:e1:f9:8b:b4:fe:ce:22: 7a:f9:b9:c0:79:12:f4:d9:ec:2b:2d:15:97:3d:4d: e3:03:81:83:77:b6:42:a8:c8:74:ca:79:af:1b:be: b3:c6:04:1b:7e:48:54:9e:40:c0:8c:8f:42:d0:75: 47:ae:d3:f8:16:0b:c2:e7:b4:bb:22:76:cc:83:5a: fa:72:2a:0b:8d:19:c5:d6:85:fe:72:2e:3e:05:ff: 7a:43:fc:4f:28:b0:91:14:d2:b3:b8:73:4d:5e:a5: 9e:e7:9c:13:00:6f:1e:26:48:d7:7a:0a:9d:2b:99: cd:d5:97:0c:3c:5f:b6:97:17:76:f2:5c:12:ff:4e: 32:16:03:ad:66:e5:41:c7:a2:80:8f:7b:6c:f2:fc: 3b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:B4:23:74:E2:7C:53:AE:53:C9:48:22:57:B3:C0:30:DA:83:BB:67 X509v3 Authority Key Identifier: keyid:DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:2b:92:6c:9e:12:18:48:07:d1:90:98:82:25:56:87:18:3f: 29:20:07:bd:d4:b5:c6:b3:29:be:5f:c6:74:7f:a5:20:f8:66: 3f:5b:69:d8:49:6e:a5:a3:16:68:7c:cb:de:e5:67:ad:70:ed: 25:15:a8:b0:8d:75:ff:2e:85:76:f7:4b:16:f0:ea:17:4e:61: 61:e6:66:02:2d:2c:48:35:0d:84:5e:ca:2c:ad:a2:30:0b:e0: ac:4f:eb:0e:64:fe:b6:6f:c3:bb:cb:06:30:53:e5:0d:4c:b0: 79:13:5e:a3:bc:00:85:46:5c:b9:58:3e:6e:62:44:8c:bc:09: 10:77:5c:64:9b:39:5b:15:15:ec:5c:8f:02:21:46:c5:19:8b: 6f:3d:99:59:9f:e3:47:ac:8c:5e:ca:32:00:b3:e6:cd:a0:60: 6d:33:20:7b:5a:cc:f3:34:69:cc:92:5c:25:68:42:f8:c1:ac: 35:4f:a5:d0:93:16:af:76:25:7b:3f:75:ab:02:3f:65:d0:06: 19:a4:18:04:dc:f2:35:19:94:a7:b4:8f:f3:6c:ad:8d:28:56: 3c:df:d5:5f:e2:64:5f:b6:2a:01:d5:9b:d5:d9:34:f7:f6:b0: 51:77:39:fa:ea:f8:ca:74:16:52:be:a8:6a:11:91:38:db:ed: bd:b6:a4:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+jBVKVCQf5zovQzQm9NpEEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmODk1YTNlZTIyMTFiNmVlMmRmNzIwMmYwOWE0MjY2ODBk NjYyNjkwHhcNMjYwNzI3MTAwMTAyWhcNMjYwNzI4MTAwMTAyWjAzMTEwLwYDVQQD Eyg4M2I0MjM3NGUyN2M1M2FlNTNjOTQ4MjI1N2IzYzAzMGRhODNiYjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA075lmk16ql3aj1lFbTKvHojZBThf DHQXrZ5ryi76FeR3VJG2/1ObeRza5CxMuk4D8WN+GQT+2/oNLR8ll7JZu/L40moQ 6e1CFOv+N/f80KjDJ/zjhVZfPnTCnj36GfMvJX8vs7YXwj0rhR9rCjban+H5i7T+ ziJ6+bnAeRL02ewrLRWXPU3jA4GDd7ZCqMh0ynmvG76zxgQbfkhUnkDAjI9C0HVH rtP4FgvC57S7InbMg1r6cioLjRnF1oX+ci4+Bf96Q/xPKLCRFNKzuHNNXqWe55wT AG8eJkjXegqdK5nN1ZcMPF+2lxd28lwS/04yFgOtZuVBx6KAj3ts8vw7QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIO0I3TifFOuU8lIIlezwDDag7tnMB8GA1UdIwQY MBaAFN+JWj7iIRtu4t9yAvCaQmaA1mJpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8xYTcyYTctMjc3ZC00NGY1LTg3ZGUt NzBiMmViZDUxNDM4LzEvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8xYTcyYTctMjc3ZC00NGY1LTg3ZGUtNzBiMmViZDUxNDM4 LzEvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeSuSbJ4S GEgH0ZCYgiVWhxg/KSAHvdS1xrMpvl/GdH+lIPhmP1tp2ElupaMWaHzL3uVnrXDt JRWosI11/y6FdvdLFvDqF05hYeZmAi0sSDUNhF7KLK2iMAvgrE/rDmT+tm/Du8sG MFPlDUyweRNeo7wAhUZcuVg+bmJEjLwJEHdcZJs5WxUV7FyPAiFGxRmLbz2ZWZ/j R6yMXsoyALPmzaBgbTMge1rM8zRpzJJcJWhC+MGsNU+l0JMWr3Ylez91qwI/ZdAG GaQYBNzyNRmUp7SP82ytjShWPN/VX+JkX7YqAdWb1dk09/awUXc5+ur4ynQWUr6o ahGRONvtvbak7g== -----END CERTIFICATE-----Generated at Mon Jul 27 15:04:26 2026 by rpki-client