$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft File: 34laPuIhG27i33IC8JpCZoDWYmk.mft (raw, json) Hash identifier: oxgbKj2rmBgGh3/y6sXP8Lvom04BS5COVHviIIH2gdI= Subject key identifier: DC:A0:58:70:D0:F8:6C:FD:F0:75:C3:E0:9A:D1:B4:80:31:76:66:13 Authority key identifier: DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69 Certificate issuer: /CN=df895a3ee2211b6ee2df7202f09a426680d66269 Certificate serial: 019889C526A673EA6EF8FB2EC486BB8B7E9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft Manifest number: 050A Signing time: Fri 08 Aug 2025 13:00:55 +0000 Manifest this update: Fri 08 Aug 2025 13:00:55 +0000 Manifest next update: Sat 09 Aug 2025 13:00:55 +0000 Files and hashes: 1: 34laPuIhG27i33IC8JpCZoDWYmk.crl (hash: YMCaNK0qOoVOm1GIyYcmRcPGAN8dfAX4T+e2iYp07Mw=) 2: 7SUWhLqE8A7qWiGUQfWRk3P7j_k.roa (hash: vr+ZGiswiHAuEM9htC6Hmt6v0+gW2jHUeuGOqHmqzNU=) 3: DoutZlvm4IbzXZXDTFrxAAquQLg.roa (hash: qnpQEntxymSrGJJO5sN1jep0qMMWrabFq1224NHJCYE=) 4: Jnp54uEZWEbzo5JH40T_lJ9C9Z0.roa (hash: Fnatp1DYGIx3gW9yEtvyiEfpUNIXk3xQmBuqhYqPnxI=) 5: UIz3uWXq8WvDlEg8PmFeL4rRSwE.roa (hash: gLYU6TimhdtwdZhpJfW5DluA+/Hw1EN6Q7uPN3RrAos=) 6: YtVS-aK9rlFruoFrqFlIl1-G7xQ.roa (hash: 01nxSlc7uYxsqEh9WpT7cgExFmnD4WF+M8+hN9BsatQ=) 7: _MqV1XKDHlZayFJD_tebnGvV-5M.roa (hash: d1lgjgsmxlfmAx6agblK/hzEA0kP5WWi8VR1j2Op8bI=) 8: lD6XQXU5XweY3aFaXvtSaxKbUbg.roa (hash: 6ADKjdzYu1CV/1GsWyr07rGlXGz5FE1o4HR8g0+KmZE=) 9: lP4cxO_3lnzQn7Ilwl6gVjJD0IY.roa (hash: uXIKziw38oRnc113zAOQwsWk6faYXtXNQlUgwb8l2ZE=) 10: p0BVO9Af7Thr9z7m6IM96h1DgmA.roa (hash: M3qrJb8kDeOcqJXYvSqGIOSCSmHqLEZFL25U38otuCQ=) 11: vmUg0yzYcnRJZC2n9pSGw6JlB2A.roa (hash: f45/pAD/SVLyT8PSsTHGZFNyd/9e/fwYtYXEyg22gkw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 09 Aug 2025 11:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:89:c5:26:a6:73:ea:6e:f8:fb:2e:c4:86:bb:8b:7e:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df895a3ee2211b6ee2df7202f09a426680d66269 Validity Not Before: Aug 8 13:00:55 2025 GMT Not After : Aug 9 13:00:55 2025 GMT Subject: CN=dca05870d0f86cfdf075c3e09ad1b48031766613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:60:20:46:8d:7a:bd:72:cf:10:aa:fb:58:8d: c2:69:b7:87:d7:39:59:11:5f:37:f3:bf:5a:99:f3: 4d:af:5d:1c:4b:cb:b6:89:4e:b3:e4:e1:64:42:f9: 92:b7:a6:27:46:d6:c8:16:c8:4f:5f:59:95:93:db: da:8b:f8:ad:bf:2a:58:d4:1e:5a:5b:0b:a3:2f:c4: eb:27:50:51:a4:a7:7a:47:e5:2f:11:03:0a:3e:1d: 9a:47:ed:8d:b2:10:b4:58:4e:ef:c5:43:ca:8e:39: 1e:5c:9c:f2:76:9c:63:ff:4a:63:e9:cb:ca:15:a9: e8:64:29:c0:3b:9a:33:82:ff:59:99:29:fa:91:d1: ce:81:85:f1:55:14:8e:17:aa:53:f1:01:bd:1b:5d: 8f:22:1a:c3:c4:be:e6:c4:4c:c4:13:29:61:ae:40: 57:45:cf:a1:00:2b:36:11:83:e9:f8:88:c2:af:1b: 38:6c:d5:5b:bd:56:f2:c4:bf:2e:12:7d:4b:96:86: 4e:81:6f:68:4f:c1:46:5a:49:ce:de:f8:f9:79:a0: e9:89:27:bd:dc:0a:b9:50:b7:57:82:43:5c:d9:16: 9d:e5:e8:82:ad:a3:0d:53:6e:52:1a:0e:9f:bc:fc: 4d:b1:f6:c9:50:93:f9:01:c5:90:4b:29:d2:20:79: 4f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:A0:58:70:D0:F8:6C:FD:F0:75:C3:E0:9A:D1:B4:80:31:76:66:13 X509v3 Authority Key Identifier: keyid:DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:0d:a3:57:41:ee:ba:98:dc:79:6d:23:bd:3a:9c:1e:eb:e1: 2b:04:25:77:38:37:a5:83:c9:5f:b3:83:67:0d:eb:70:d0:3c: 90:58:a3:5a:c0:f9:a6:3a:15:f7:c1:8c:2d:0b:56:0e:cd:ca: 4c:ab:c1:4f:22:59:6c:1a:de:af:9e:bb:07:5d:f2:3e:79:70: ce:88:d5:fc:25:d6:ac:ca:00:ca:51:05:5c:91:c3:dd:e8:fe: c4:8d:19:6e:15:01:51:f5:24:5b:6f:fb:f3:7e:ae:a0:36:74: 87:32:ea:6c:42:f1:e3:e4:74:9e:52:ce:33:bc:73:40:33:b5: 0a:45:0c:1a:b1:01:80:3c:b0:16:9e:32:00:cd:c1:3c:4b:9e: b7:50:78:26:ab:85:0a:ad:fe:dd:5c:7a:d4:b3:c5:6c:23:4e: 3a:ba:00:97:d0:a8:a2:fe:e7:c2:e6:65:2d:83:c9:8d:2b:73: fe:1e:98:e1:72:85:26:98:d0:c3:2c:02:47:bd:98:2b:e0:55: 39:90:fa:10:bb:18:2d:6f:8b:00:ad:bc:9a:be:00:3f:dd:74: 49:00:0c:cb:8f:88:0d:49:f8:7b:6c:4d:aa:02:ce:b5:9c:89: fd:bf:80:b0:62:65:fc:bb:51:32:48:d6:63:58:b1:5e:ed:31: 98:0d:a6:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiJxSamc+pu+PsuxIa7i36fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmODk1YTNlZTIyMTFiNmVlMmRmNzIwMmYwOWE0MjY2ODBk NjYyNjkwHhcNMjUwODA4MTMwMDU1WhcNMjUwODA5MTMwMDU1WjAzMTEwLwYDVQQD EyhkY2EwNTg3MGQwZjg2Y2ZkZjA3NWMzZTA5YWQxYjQ4MDMxNzY2NjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGAgRo16vXLPEKr7WI3CabeH1zlZ EV83879amfNNr10cS8u2iU6z5OFkQvmSt6YnRtbIFshPX1mVk9vai/itvypY1B5a WwujL8TrJ1BRpKd6R+UvEQMKPh2aR+2NshC0WE7vxUPKjjkeXJzydpxj/0pj6cvK FanoZCnAO5ozgv9ZmSn6kdHOgYXxVRSOF6pT8QG9G12PIhrDxL7mxEzEEylhrkBX Rc+hACs2EYPp+IjCrxs4bNVbvVbyxL8uEn1LloZOgW9oT8FGWknO3vj5eaDpiSe9 3Aq5ULdXgkNc2Rad5eiCraMNU25SGg6fvPxNsfbJUJP5AcWQSynSIHlPbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNygWHDQ+Gz98HXD4JrRtIAxdmYTMB8GA1UdIwQY MBaAFN+JWj7iIRtu4t9yAvCaQmaA1mJpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8xYTcyYTctMjc3ZC00NGY1LTg3ZGUt NzBiMmViZDUxNDM4LzEvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8xYTcyYTctMjc3ZC00NGY1LTg3ZGUtNzBiMmViZDUxNDM4 LzEvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALw2jV0Hu upjceW0jvTqcHuvhKwQldzg3pYPJX7ODZw3rcNA8kFijWsD5pjoV98GMLQtWDs3K TKvBTyJZbBrer567B13yPnlwzojV/CXWrMoAylEFXJHD3ej+xI0ZbhUBUfUkW2/7 836uoDZ0hzLqbELx4+R0nlLOM7xzQDO1CkUMGrEBgDywFp4yAM3BPEuet1B4JquF Cq3+3Vx61LPFbCNOOroAl9Coov7nwuZlLYPJjStz/h6Y4XKFJpjQwywCR72YK+BV OZD6ELsYLW+LAK28mr4AP910SQAMy4+IDUn4e2xNqgLOtZyJ/b+AsGJl/LtRMkjW Y1ixXu0xmA2m+w== -----END CERTIFICATE-----Generated at Fri Aug 8 21:02:08 2025 by rpki-client