$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft File: 34laPuIhG27i33IC8JpCZoDWYmk.mft (raw, json) Hash identifier: 3jW/zfuPr7XfctDzMypCHEuBf57k/xL2Cppd1GEWDxA= Subject key identifier: E0:74:AD:74:01:CE:A5:78:F0:C6:80:AA:4D:20:F4:3B:D0:12:23:7A Authority key identifier: DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69 Certificate issuer: /CN=df895a3ee2211b6ee2df7202f09a426680d66269 Certificate serial: 019FA8D07B76822C78ECA506BF8B33C2786B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft Manifest number: 08C5 Signing time: Tue 28 Jul 2026 13:01:02 +0000 Manifest this update: Tue 28 Jul 2026 13:01:02 +0000 Manifest next update: Wed 29 Jul 2026 13:01:02 +0000 Files and hashes: 1: 0XLwdTu4nRGxVAQOFOgi-F-CPp8.roa (hash: pak6BtTzWa98W3dJFCCof2yZ3EkBaahZi9HG5ewTysQ=) 2: 34laPuIhG27i33IC8JpCZoDWYmk.crl (hash: y1rSVLIT58Ut+XyZgurbUm3jlZYBE6KqvTvFzEzcQNc=) 3: 9D5WwjKLKWgOIgPanR8axjhLcU4.roa (hash: ZLdDEz7U/sFImJ7TRS2LLSrQd9lNXvIbMcJRDgvz3sA=) 4: aDmk7bmr7GaG3aSI9qiX-uXwSWg.roa (hash: PRIIqS3HIlOlOVEL7UW8zij6bOh1J2Z1Qs2Esv77scQ=) 5: cw-KXeWioyTYbIA1vAnNwGD9GhY.roa (hash: EbcWuoOspeZih7eQTLeYWoRHq4YiGEsO0VMZUGNEFB0=) 6: e5CgRNX8DO6ZSqQ9MJH71FE7_jc.roa (hash: V4ZA2YkMaTT1slmusEGl0z9gt2912EuUoJMbm9ZyTsM=) 7: j-PFBiL03S6WRSrBU8S47xwyndA.roa (hash: K7P+QUsdp4yG+ErvjouO0SB+AUJcFrNu/1BLrwwoCmk=) 8: mHlUc70rNMbtkPfKuvhCKEylgkY.roa (hash: h1dT3/iB5II0F3sw3D3rAshjNyDRMEmfsyBcGUSBbMs=) 9: onJwIsBG_TlNzJPQVYzWvXnQYTU.roa (hash: CF4OHpZC0xd0XR18QoBgWTx8t9RwFhji6OFqhQG0Qog=) 10: tDWgVsxN09kg7oAdG68IGAVT8Zg.roa (hash: 92PHhhSbJSKdw93N+YcB/DCcsP8fP/+3+zAHfz750FA=) 11: wNRTB3A2q9f-yV1rTSijUO5gEB8.roa (hash: Mvkmn5/K4C/vX+W0bmirSKlojMyVfTuv4C+eRU2oTlU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 13:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a8:d0:7b:76:82:2c:78:ec:a5:06:bf:8b:33:c2:78:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df895a3ee2211b6ee2df7202f09a426680d66269 Validity Not Before: Jul 28 13:01:02 2026 GMT Not After : Jul 29 13:01:02 2026 GMT Subject: CN=e074ad7401cea578f0c680aa4d20f43bd012237a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:5e:18:4d:63:51:f1:d0:50:b0:95:90:82:54: 5a:6c:66:9e:b1:93:d4:48:5f:e7:50:51:34:11:dd: 48:ba:49:ad:fb:ec:ae:ac:f1:8a:58:6c:4c:21:4c: e6:b2:a9:e9:f4:6c:ea:1a:d4:c3:17:61:17:b0:59: 59:0a:46:54:ff:af:c7:3c:fe:54:be:42:d6:a1:c9: 13:88:21:e9:2f:ee:ba:a7:b8:f9:0e:19:02:23:d2: ac:b6:14:9f:fa:a8:39:7b:6d:ed:35:bf:f1:71:72: 88:62:ce:93:b2:e9:e9:70:ea:3b:35:c4:db:f3:00: 2a:83:43:ac:1d:de:d7:42:4d:db:ff:70:f9:98:8b: a2:2c:04:6e:9e:d5:a5:3f:35:8c:78:f9:1c:73:b4: d0:7c:41:4b:3d:e8:3f:32:4d:b1:3f:70:6f:72:0a: b5:24:3e:f7:45:31:40:ca:5b:86:81:83:ea:61:8d: a4:bb:f0:d3:a0:c3:e1:43:22:34:70:e9:6c:e6:d2: 4f:c2:bd:2f:2b:d8:a1:7a:f0:92:b9:46:3d:ed:1d: 2f:db:2d:97:ca:bb:4b:6b:c5:05:90:73:8d:6b:9f: 7e:7f:aa:c3:39:68:9b:fd:c1:43:be:02:ba:48:c1: de:ec:58:5b:34:75:85:dd:59:41:7b:84:0b:6d:fb: 8b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:74:AD:74:01:CE:A5:78:F0:C6:80:AA:4D:20:F4:3B:D0:12:23:7A X509v3 Authority Key Identifier: keyid:DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:1e:bd:5b:2c:00:96:a3:e4:dd:35:dc:70:9c:40:16:2f:d4: 01:03:b1:ef:27:7d:2f:41:7b:e1:32:f0:8a:2b:36:29:ac:d9: a2:43:53:d8:97:5f:87:6f:f0:15:f6:51:31:e7:90:53:34:7f: 11:15:49:45:11:3c:42:09:9c:71:af:39:26:25:92:71:d9:66: 98:7f:d3:ff:61:5b:73:cc:30:3a:65:13:b5:53:3b:e8:f7:3b: 65:27:1d:df:94:fc:58:27:a1:0f:67:a0:c6:62:04:e7:44:fe: 03:40:72:09:74:e4:c8:0a:94:ba:2d:f9:e9:c0:26:c8:c4:26: d9:2f:ac:76:74:ff:f7:07:c4:18:a1:0f:61:bd:b6:09:d3:ba: 96:85:cc:fe:af:49:27:ce:32:81:bb:19:b7:25:78:61:bb:4e: b3:4c:d0:b2:4a:14:54:29:c8:ca:42:c8:e4:56:53:a0:3f:6a: ba:4b:78:f7:0c:3d:e8:4d:80:f1:55:41:0f:52:65:72:ea:aa: 58:26:37:4a:0b:b1:cd:91:47:5c:ba:b0:b3:c8:11:62:ef:6b: 48:e6:45:1a:96:e5:a7:97:2f:08:08:26:4e:f3:dc:80:2b:d2: 01:6c:29:a8:73:1f:5d:68:60:cb:1b:8a:3c:35:ab:54:82:e4: e9:ea:ae:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+o0Ht2gix47KUGv4szwnhrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmODk1YTNlZTIyMTFiNmVlMmRmNzIwMmYwOWE0MjY2ODBk NjYyNjkwHhcNMjYwNzI4MTMwMTAyWhcNMjYwNzI5MTMwMTAyWjAzMTEwLwYDVQQD EyhlMDc0YWQ3NDAxY2VhNTc4ZjBjNjgwYWE0ZDIwZjQzYmQwMTIyMzdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmV4YTWNR8dBQsJWQglRabGaesZPU SF/nUFE0Ed1Iukmt++yurPGKWGxMIUzmsqnp9GzqGtTDF2EXsFlZCkZU/6/HPP5U vkLWockTiCHpL+66p7j5DhkCI9KsthSf+qg5e23tNb/xcXKIYs6TsunpcOo7NcTb 8wAqg0OsHd7XQk3b/3D5mIuiLARuntWlPzWMePkcc7TQfEFLPeg/Mk2xP3Bvcgq1 JD73RTFAyluGgYPqYY2ku/DToMPhQyI0cOls5tJPwr0vK9ihevCSuUY97R0v2y2X yrtLa8UFkHONa59+f6rDOWib/cFDvgK6SMHe7FhbNHWF3VlBe4QLbfuLzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOB0rXQBzqV48MaAqk0g9DvQEiN6MB8GA1UdIwQY MBaAFN+JWj7iIRtu4t9yAvCaQmaA1mJpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8xYTcyYTctMjc3ZC00NGY1LTg3ZGUt NzBiMmViZDUxNDM4LzEvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8xYTcyYTctMjc3ZC00NGY1LTg3ZGUtNzBiMmViZDUxNDM4 LzEvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVR69WywA lqPk3TXccJxAFi/UAQOx7yd9L0F74TLwiis2KazZokNT2Jdfh2/wFfZRMeeQUzR/ ERVJRRE8Qgmcca85JiWScdlmmH/T/2Fbc8wwOmUTtVM76Pc7ZScd35T8WCehD2eg xmIE50T+A0ByCXTkyAqUui356cAmyMQm2S+sdnT/9wfEGKEPYb22CdO6loXM/q9J J84ygbsZtyV4YbtOs0zQskoUVCnIykLI5FZToD9qukt49ww96E2A8VVBD1Jlcuqq WCY3SguxzZFHXLqws8gRYu9rSOZFGpblp5cvCAgmTvPcgCvSAWwpqHMfXWhgyxuK PDWrVILk6equjg== -----END CERTIFICATE-----Generated at Tue Jul 28 22:26:04 2026 by rpki-client