$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft File: 34laPuIhG27i33IC8JpCZoDWYmk.mft (raw, json) Hash identifier: /wbeg+KOZgowgxSM/Fnybm8GOD7KV+n+C28kNbaiE9M= Subject key identifier: 80:F7:54:15:9E:1C:DD:4D:6B:43:33:AA:AB:05:40:C1:B8:08:94:64 Authority key identifier: DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69 Certificate issuer: /CN=df895a3ee2211b6ee2df7202f09a426680d66269 Certificate serial: 0198D51569374D3F2A674B5B84ACBEFFDD66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft Manifest number: 0531 Signing time: Sat 23 Aug 2025 04:00:06 +0000 Manifest this update: Sat 23 Aug 2025 04:00:06 +0000 Manifest next update: Sun 24 Aug 2025 04:00:06 +0000 Files and hashes: 1: 34laPuIhG27i33IC8JpCZoDWYmk.crl (hash: Gfc5Xtr6/zhi2TJa4MRwrF/kWSBSAb6JpKPDPAvl94w=) 2: 7SUWhLqE8A7qWiGUQfWRk3P7j_k.roa (hash: vr+ZGiswiHAuEM9htC6Hmt6v0+gW2jHUeuGOqHmqzNU=) 3: DoutZlvm4IbzXZXDTFrxAAquQLg.roa (hash: qnpQEntxymSrGJJO5sN1jep0qMMWrabFq1224NHJCYE=) 4: Jnp54uEZWEbzo5JH40T_lJ9C9Z0.roa (hash: Fnatp1DYGIx3gW9yEtvyiEfpUNIXk3xQmBuqhYqPnxI=) 5: UIz3uWXq8WvDlEg8PmFeL4rRSwE.roa (hash: gLYU6TimhdtwdZhpJfW5DluA+/Hw1EN6Q7uPN3RrAos=) 6: YtVS-aK9rlFruoFrqFlIl1-G7xQ.roa (hash: 01nxSlc7uYxsqEh9WpT7cgExFmnD4WF+M8+hN9BsatQ=) 7: _MqV1XKDHlZayFJD_tebnGvV-5M.roa (hash: d1lgjgsmxlfmAx6agblK/hzEA0kP5WWi8VR1j2Op8bI=) 8: lD6XQXU5XweY3aFaXvtSaxKbUbg.roa (hash: 6ADKjdzYu1CV/1GsWyr07rGlXGz5FE1o4HR8g0+KmZE=) 9: lP4cxO_3lnzQn7Ilwl6gVjJD0IY.roa (hash: uXIKziw38oRnc113zAOQwsWk6faYXtXNQlUgwb8l2ZE=) 10: p0BVO9Af7Thr9z7m6IM96h1DgmA.roa (hash: M3qrJb8kDeOcqJXYvSqGIOSCSmHqLEZFL25U38otuCQ=) 11: vmUg0yzYcnRJZC2n9pSGw6JlB2A.roa (hash: f45/pAD/SVLyT8PSsTHGZFNyd/9e/fwYtYXEyg22gkw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:15:69:37:4d:3f:2a:67:4b:5b:84:ac:be:ff:dd:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df895a3ee2211b6ee2df7202f09a426680d66269 Validity Not Before: Aug 23 04:00:06 2025 GMT Not After : Aug 24 04:00:06 2025 GMT Subject: CN=80f754159e1cdd4d6b4333aaab0540c1b8089464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0a:a7:d6:05:47:2e:61:17:c9:a5:35:0e:13: 6d:d8:eb:e0:09:08:25:92:49:cf:b8:e4:bd:37:0c: 9a:83:29:a5:90:61:70:df:a8:f9:e0:b8:6d:30:f6: 9e:ec:ac:e6:db:b6:db:d1:91:ba:f7:4f:94:e4:ae: 2a:76:40:eb:06:26:16:e5:d1:fa:46:97:a4:75:77: fd:03:c7:94:b5:3a:b0:47:91:26:92:a8:91:bf:f9: 40:6a:fc:0e:8f:f7:2a:78:35:c4:95:e8:66:24:9b: c3:c0:c9:dd:89:e2:85:cd:a6:72:10:22:b9:64:bb: c9:ee:c6:4f:e3:8d:50:26:92:30:be:8c:fd:f0:51: a8:c2:9f:cb:f7:f8:33:6d:8a:cc:8c:84:88:6c:6b: 17:a5:72:28:4c:44:9d:36:72:4d:4b:02:ab:67:d5: fd:a0:9a:9d:33:32:c2:fc:55:fd:28:c2:fd:75:08: ff:f7:46:2f:66:04:66:78:50:4b:ea:29:8f:fa:76: 9e:ee:55:7b:0e:ff:77:6f:11:c8:6d:d3:15:db:8a: 9d:41:aa:dc:17:a8:57:21:8b:ea:09:24:ff:8d:c1: 95:87:45:59:13:19:2c:ba:00:64:77:ca:7a:0a:87: 86:f8:29:c1:c2:b1:29:87:3e:c7:e9:b9:06:00:cc: ac:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:F7:54:15:9E:1C:DD:4D:6B:43:33:AA:AB:05:40:C1:B8:08:94:64 X509v3 Authority Key Identifier: keyid:DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:8c:f6:09:4c:1e:50:bb:a0:46:54:79:31:87:5d:0f:61:50: b3:04:69:4a:32:59:2d:8c:a8:d1:5c:c7:70:dc:42:b2:e4:c4: 7a:26:d9:5e:16:de:96:22:f5:05:a8:af:43:b5:2d:de:58:9a: 58:8a:6d:14:bf:fa:9c:0f:b9:31:e2:ff:ae:df:1c:b0:fe:97: 33:d3:d4:44:90:cf:10:21:c0:a9:9a:c3:75:cf:c0:27:15:f5: 01:c9:b6:b5:13:18:cf:81:09:f5:df:70:00:6b:f2:15:0b:8f: 23:55:b1:73:36:6e:99:86:b0:76:06:fd:74:29:f8:a5:aa:81: 07:09:8d:db:84:42:b9:0b:9f:91:42:c4:bc:dd:62:b8:36:8d: 95:33:5b:6c:33:19:6a:c1:c9:04:5e:52:0a:d8:e2:15:07:d6: 13:0a:2e:2e:9d:15:98:1e:06:c0:51:97:b5:35:d0:b3:c5:29: 34:9c:be:03:58:f3:84:f8:8e:e6:a7:96:c0:94:4b:da:24:9c: ca:d8:58:4a:76:2f:77:c2:f6:fb:2f:59:a4:1a:86:57:9a:b6: 12:ff:c7:7f:13:d4:88:53:49:47:e5:a9:81:bb:a7:b2:08:71: b5:bf:3b:f9:63:0d:2d:fc:c6:f0:f1:1b:f3:5c:94:d9:75:4d: 8a:43:ca:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVFWk3TT8qZ0tbhKy+/91mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmODk1YTNlZTIyMTFiNmVlMmRmNzIwMmYwOWE0MjY2ODBk NjYyNjkwHhcNMjUwODIzMDQwMDA2WhcNMjUwODI0MDQwMDA2WjAzMTEwLwYDVQQD Eyg4MGY3NTQxNTllMWNkZDRkNmI0MzMzYWFhYjA1NDBjMWI4MDg5NDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngqn1gVHLmEXyaU1DhNt2OvgCQgl kknPuOS9NwyagymlkGFw36j54LhtMPae7Kzm27bb0ZG690+U5K4qdkDrBiYW5dH6 RpekdXf9A8eUtTqwR5EmkqiRv/lAavwOj/cqeDXElehmJJvDwMndieKFzaZyECK5 ZLvJ7sZP441QJpIwvoz98FGowp/L9/gzbYrMjISIbGsXpXIoTESdNnJNSwKrZ9X9 oJqdMzLC/FX9KML9dQj/90YvZgRmeFBL6imP+nae7lV7Dv93bxHIbdMV24qdQarc F6hXIYvqCST/jcGVh0VZExksugBkd8p6CoeG+CnBwrEphz7H6bkGAMysvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFID3VBWeHN1Na0MzqqsFQMG4CJRkMB8GA1UdIwQY MBaAFN+JWj7iIRtu4t9yAvCaQmaA1mJpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8xYTcyYTctMjc3ZC00NGY1LTg3ZGUt NzBiMmViZDUxNDM4LzEvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8xYTcyYTctMjc3ZC00NGY1LTg3ZGUtNzBiMmViZDUxNDM4 LzEvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcYz2CUwe ULugRlR5MYddD2FQswRpSjJZLYyo0VzHcNxCsuTEeibZXhbeliL1BaivQ7Ut3lia WIptFL/6nA+5MeL/rt8csP6XM9PURJDPECHAqZrDdc/AJxX1Acm2tRMYz4EJ9d9w AGvyFQuPI1WxczZumYawdgb9dCn4paqBBwmN24RCuQufkULEvN1iuDaNlTNbbDMZ asHJBF5SCtjiFQfWEwouLp0VmB4GwFGXtTXQs8UpNJy+A1jzhPiO5qeWwJRL2iSc ythYSnYvd8L2+y9ZpBqGV5q2Ev/HfxPUiFNJR+Wpgbunsghxtb87+WMNLfzG8PEb 81yU2XVNikPKNQ== -----END CERTIFICATE-----Generated at Sat Aug 23 10:30:56 2025 by rpki-client