$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/34DEF610B33BA719BA344A660C4BDA8333112372.mft File: 34DEF610B33BA719BA344A660C4BDA8333112372.mft (raw, json) Hash identifier: 9Rv0+wh59W/SfDyfKze6B5iQ/Qsw+4A1AiH8L6qawz4= Subject key identifier: 2C:5F:A6:DB:04:D6:B6:FB:F6:9D:2F:06:45:C0:18:2A:11:2C:43:8B Authority key identifier: 34:DE:F6:10:B3:3B:A7:19:BA:34:4A:66:0C:4B:DA:83:33:11:23:72 Certificate issuer: /CN=34DEF610B33BA719BA344A660C4BDA8333112372 Certificate serial: 0CE8C0687BC3D4B3ADCE9AD95BD2F23D5B8FB4A6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/34DEF610B33BA719BA344A660C4BDA8333112372.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/34DEF610B33BA719BA344A660C4BDA8333112372.mft Manifest number: 5A Signing time: Sat 07 Mar 2026 02:14:30 +0000 Manifest this update: Sat 07 Mar 2026 02:09:30 +0000 Manifest next update: Sun 08 Mar 2026 03:26:30 +0000 Files and hashes: 1: 326131343a373538363a393030303a3a2f34302d3438203d3e20323134323233.roa (hash: sK/28IbuKKKyA7SCTgY03EIdfGQ4xy21thbu3jiR9Kc=) 2: 326131343a373538363a393030303a3a2f33362d3438203d3e20323134323233.roa (hash: iA4p3IYifVrgGD3/GcCBblPOiSEiC+VZIiOYTHmZ3ew=) 3: 326131343a373538363a393161303a3a2f34342d3438203d3e20323134323233.roa (hash: czMZ6yHzk1H5R4x8pCiKnN7yebua0d7E2WPcIPaQbQU=) 4: 326131343a373538313a396631303a3a2f34342d3438203d3e20323134323233.roa (hash: /757R/290q7lxAjREfkIn9O/IfjmifWYIYI5Pedt0xY=) 5: 326131343a373538363a373030303a3a2f33362d3438203d3e20323134323233.roa (hash: pCJnPNsZB30IXmBLO9EkDOhxW1xXJNPlCqoAbVJT2Wc=) 6: 34DEF610B33BA719BA344A660C4BDA8333112372.crl (hash: BqffHg1Nvp/n9nlg/HoK6+W4QxIQRr0XFUAQolgj/LU=) 7: 326131343a373538363a393162303a3a2f34342d3438203d3e20323134323233.roa (hash: ZO9VHs/jdkk6zzSYMSYZUdvcDq76KLDhmDYi/qPc0gQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/34DEF610B33BA719BA344A660C4BDA8333112372.crl rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/34DEF610B33BA719BA344A660C4BDA8333112372.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/34DEF610B33BA719BA344A660C4BDA8333112372.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Mar 2026 03:26:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:e8:c0:68:7b:c3:d4:b3:ad:ce:9a:d9:5b:d2:f2:3d:5b:8f:b4:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34DEF610B33BA719BA344A660C4BDA8333112372 Validity Not Before: Mar 7 02:09:30 2026 GMT Not After : Mar 8 03:26:30 2026 GMT Subject: CN=2C5FA6DB04D6B6FBF69D2F0645C0182A112C438B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:20:23:18:db:2e:d6:6c:81:8d:8d:b2:ca:6f: d1:c7:09:30:db:b6:b5:45:ee:73:8a:2f:90:2f:7e: 36:1b:52:33:b6:35:19:66:52:05:db:0b:08:ea:0d: 76:bb:f4:8f:a9:d8:7c:51:db:4e:34:15:f9:e4:db: c6:d0:e2:7c:25:84:56:fe:ab:39:50:44:65:35:a8: 5a:93:da:59:fe:87:e3:b5:02:ac:a6:ef:f0:96:11: 45:ce:9a:cf:33:c1:fe:7e:42:12:cc:2b:f0:f1:e1: 59:a4:28:bb:64:0d:7f:82:2b:43:d5:56:b2:0f:4e: c3:44:02:77:87:58:33:ba:ba:38:de:82:32:58:27: 4c:56:81:11:20:04:9c:50:e4:1e:68:eb:90:ff:d3: 07:cd:6a:7b:ef:4f:46:40:74:65:65:9d:fe:a3:39: 2a:b5:32:69:f3:59:5b:5c:44:1c:af:8e:40:15:2e: 30:fa:44:39:76:9d:26:56:48:7c:d5:58:f2:7a:ce: 55:10:49:9d:11:b6:6a:ca:ee:30:c1:c3:42:b3:b6: f2:26:4d:76:e0:2e:9d:94:a5:c1:ac:03:da:9b:f9: a2:e4:ea:65:fc:11:90:31:1f:68:90:4c:a1:4a:f4: 42:44:59:f0:22:ea:19:d1:4b:6b:fd:bc:b7:5d:24: 61:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:5F:A6:DB:04:D6:B6:FB:F6:9D:2F:06:45:C0:18:2A:11:2C:43:8B X509v3 Authority Key Identifier: keyid:34:DE:F6:10:B3:3B:A7:19:BA:34:4A:66:0C:4B:DA:83:33:11:23:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/34DEF610B33BA719BA344A660C4BDA8333112372.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/34DEF610B33BA719BA344A660C4BDA8333112372.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/34DEF610B33BA719BA344A660C4BDA8333112372.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:1f:72:5f:62:de:d1:1d:cb:c8:57:63:3d:85:53:d6:02:e6: 51:c5:21:02:6f:41:9f:d9:b4:65:04:c7:a6:3d:49:8c:ed:6a: 6f:39:2a:35:d0:cf:ad:dd:1e:8d:83:4e:8c:8e:4b:31:1d:c6: 00:cf:68:d0:fc:54:aa:98:8a:69:f5:19:f6:0b:24:eb:5c:e6: e5:04:12:4a:13:db:22:2c:1e:e6:5d:80:91:43:76:1c:29:d9: 61:d0:8f:4d:86:db:8d:10:d1:9c:38:44:92:0d:b6:41:fa:22: 22:7e:7a:3f:71:0c:3d:2a:26:71:fd:7f:e2:e0:c3:f8:b9:8c: d4:9f:97:46:20:35:4b:90:a8:6e:22:21:ea:4c:d2:2a:e7:e6: b1:1a:21:7b:1b:66:a1:48:7a:c6:be:de:15:c6:35:79:cc:ad: 2c:fd:66:a9:44:14:82:b9:de:bc:28:11:54:d4:25:9d:e2:59: c6:e4:96:45:63:73:fc:ca:df:2f:c4:3e:94:a0:06:b5:d4:00: 49:20:fa:db:4d:c9:9e:40:58:0a:0b:23:6b:63:5a:b3:5d:87: ff:e0:40:5b:f0:7b:f4:e1:bf:f5:c1:11:40:3d:eb:96:b9:55: cc:6c:18:18:ec:18:7e:c0:0d:fb:e4:76:01:c4:a9:c1:6b:45: 2c:bb:3a:df -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUDOjAaHvD1LOtzprZW9LyPVuPtKYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRERUY2MTBCMzNCQTcxOUJBMzQ0QTY2MEM0QkRBODMz MzExMjM3MjAeFw0yNjAzMDcwMjA5MzBaFw0yNjAzMDgwMzI2MzBaMDMxMTAvBgNV BAMTKDJDNUZBNkRCMDRENkI2RkJGNjlEMkYwNjQ1QzAxODJBMTEyQzQzOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5ICMY2y7WbIGNjbLKb9HHCTDb trVF7nOKL5AvfjYbUjO2NRlmUgXbCwjqDXa79I+p2HxR2040Ffnk28bQ4nwlhFb+ qzlQRGU1qFqT2ln+h+O1Aqym7/CWEUXOms8zwf5+QhLMK/Dx4VmkKLtkDX+CK0PV VrIPTsNEAneHWDO6ujjegjJYJ0xWgREgBJxQ5B5o65D/0wfNanvvT0ZAdGVlnf6j OSq1MmnzWVtcRByvjkAVLjD6RDl2nSZWSHzVWPJ6zlUQSZ0RtmrK7jDBw0KztvIm TXbgLp2UpcGsA9qb+aLk6mX8EZAxH2iQTKFK9EJEWfAi6hnRS2v9vLddJGH7AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQULF+m2wTWtvv2nS8GRcAYKhEsQ4swHwYDVR0j BBgwFoAUNN72ELM7pxm6NEpmDEvagzMRI3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmVkNGI3ZWItMTdhNy00NGUxLTljYTItMDk4YTMyMzgz YzkwLzEvMzRERUY2MTBCMzNCQTcxOUJBMzQ0QTY2MEM0QkRBODMzMzExMjM3Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zNERFRjYxMEIzM0JBNzE5QkEzNDRBNjYw QzRCREE4MzMzMTEyMzcyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzJlZDRiN2ViLTE3YTctNDRlMS05Y2EyLTA5OGEzMjM4M2M5MC8xLzM0REVGNjEw QjMzQkE3MTlCQTM0NEE2NjBDNEJEQTgzMzMxMTIzNzIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCOH3Jf Yt7RHcvIV2M9hVPWAuZRxSECb0Gf2bRlBMemPUmM7WpvOSo10M+t3R6Ng06Mjksx HcYAz2jQ/FSqmIpp9Rn2CyTrXOblBBJKE9siLB7mXYCRQ3YcKdlh0I9NhtuNENGc OESSDbZB+iIifno/cQw9KiZx/X/i4MP4uYzUn5dGIDVLkKhuIiHqTNIq5+axGiF7 G2ahSHrGvt4VxjV5zK0s/WapRBSCud68KBFU1CWd4lnG5JZFY3P8yt8vxD6UoAa1 1ABJIPrbTcmeQFgKCyNrY1qzXYf/4EBb8Hv04b/1wRFAPeuWuVXMbBgY7Bh+wA37 5HYBxKnBa0Usuzrf -----END CERTIFICATE-----Generated at Sat Mar 7 14:34:35 2026 by rpki-client