$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft File: 34laPuIhG27i33IC8JpCZoDWYmk.mft (raw, json) Hash identifier: zZAsPK2zDf81PVUbIu035NmgcfVNH5yESUJJG9fYCWY= Subject key identifier: 3F:64:F8:69:A7:0A:76:AD:3D:11:C3:0C:66:66:92:1B:16:62:C7:0B Authority key identifier: DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69 Certificate issuer: /CN=df895a3ee2211b6ee2df7202f09a426680d66269 Certificate serial: 019F91A42092A660FFEAFE2A10864195918C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft Manifest number: 08B9 Signing time: Fri 24 Jul 2026 01:01:20 +0000 Manifest this update: Fri 24 Jul 2026 01:01:20 +0000 Manifest next update: Sat 25 Jul 2026 01:01:20 +0000 Files and hashes: 1: 0XLwdTu4nRGxVAQOFOgi-F-CPp8.roa (hash: pak6BtTzWa98W3dJFCCof2yZ3EkBaahZi9HG5ewTysQ=) 2: 34laPuIhG27i33IC8JpCZoDWYmk.crl (hash: bS+qDnB60dmzuc+LUr5CyeqdB+d9ZhFjSSWo4cRkigw=) 3: 9D5WwjKLKWgOIgPanR8axjhLcU4.roa (hash: ZLdDEz7U/sFImJ7TRS2LLSrQd9lNXvIbMcJRDgvz3sA=) 4: aDmk7bmr7GaG3aSI9qiX-uXwSWg.roa (hash: PRIIqS3HIlOlOVEL7UW8zij6bOh1J2Z1Qs2Esv77scQ=) 5: cw-KXeWioyTYbIA1vAnNwGD9GhY.roa (hash: EbcWuoOspeZih7eQTLeYWoRHq4YiGEsO0VMZUGNEFB0=) 6: e5CgRNX8DO6ZSqQ9MJH71FE7_jc.roa (hash: V4ZA2YkMaTT1slmusEGl0z9gt2912EuUoJMbm9ZyTsM=) 7: j-PFBiL03S6WRSrBU8S47xwyndA.roa (hash: K7P+QUsdp4yG+ErvjouO0SB+AUJcFrNu/1BLrwwoCmk=) 8: mHlUc70rNMbtkPfKuvhCKEylgkY.roa (hash: h1dT3/iB5II0F3sw3D3rAshjNyDRMEmfsyBcGUSBbMs=) 9: onJwIsBG_TlNzJPQVYzWvXnQYTU.roa (hash: CF4OHpZC0xd0XR18QoBgWTx8t9RwFhji6OFqhQG0Qog=) 10: tDWgVsxN09kg7oAdG68IGAVT8Zg.roa (hash: 92PHhhSbJSKdw93N+YcB/DCcsP8fP/+3+zAHfz750FA=) 11: wNRTB3A2q9f-yV1rTSijUO5gEB8.roa (hash: Mvkmn5/K4C/vX+W0bmirSKlojMyVfTuv4C+eRU2oTlU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:91:a4:20:92:a6:60:ff:ea:fe:2a:10:86:41:95:91:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df895a3ee2211b6ee2df7202f09a426680d66269 Validity Not Before: Jul 24 01:01:20 2026 GMT Not After : Jul 25 01:01:20 2026 GMT Subject: CN=3f64f869a70a76ad3d11c30c6666921b1662c70b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:16:bb:f3:95:10:64:9d:cf:a8:e8:da:6e:47: f3:2a:71:e3:e1:d5:c7:a9:b6:15:e8:8e:83:b8:de: 7c:66:7a:dd:2a:c6:d6:3b:59:3d:97:e0:fd:db:00: 93:9f:59:c0:ef:99:95:4e:4f:31:a5:38:cb:f6:ae: 3b:da:97:a9:49:96:9c:94:9c:9c:31:db:5f:49:7c: 3a:22:08:48:65:99:2e:cc:b0:e4:f9:68:b1:3d:8c: 06:5f:e0:c6:e0:57:fb:2a:35:cd:c2:e5:6d:9b:f5: c1:3b:4c:8a:05:60:66:13:51:f9:aa:9f:09:65:bb: e9:38:85:ce:60:83:1d:3e:06:fe:49:3f:4c:48:90: 8c:5d:ca:b1:0b:17:2f:e4:ba:31:93:3e:ca:75:c0: 0c:30:ce:7e:12:91:73:d8:e3:42:91:a3:d6:b7:a6: d0:8f:ec:ae:65:2f:ae:9c:79:25:09:a0:49:c3:19: 2d:e0:5b:ed:87:8d:96:ac:5f:e7:96:e4:1e:e0:39: bc:b9:9d:2c:0a:29:4a:5b:fb:40:68:a9:3d:5b:f4: d8:ef:4c:d2:b2:ae:b2:86:a4:03:66:e9:e6:31:7e: ae:3b:0a:45:70:84:45:3b:17:0e:06:e8:53:1e:53: 9e:53:b6:20:84:72:9e:d6:92:8a:f5:4c:1f:a5:03: 58:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:64:F8:69:A7:0A:76:AD:3D:11:C3:0C:66:66:92:1B:16:62:C7:0B X509v3 Authority Key Identifier: keyid:DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:05:6e:1f:4e:7d:2d:0c:e5:39:da:aa:5a:2d:00:c6:46:cc: b6:b1:32:42:b0:db:61:59:46:4f:e0:57:fb:71:26:3a:af:31: 38:bc:b4:1c:2b:01:e7:54:97:5c:6c:12:67:fb:63:20:da:6f: e9:c0:8f:ae:59:8f:9a:47:5d:37:2b:28:46:5a:67:d9:df:ec: 7d:c8:9f:57:6b:c9:a6:53:db:73:79:96:fb:79:a4:90:ea:d9: ff:ed:f7:87:f2:98:d6:8a:f5:05:ec:b2:31:e8:32:36:6b:fa: 35:a2:a4:3b:de:97:82:cb:e9:1b:c5:3b:96:c8:74:13:2f:cd: 79:b2:8c:70:21:d1:b5:72:e9:7c:da:00:4d:6b:e8:67:ba:56: 89:1d:18:32:4a:19:1a:a8:a5:10:8d:23:7b:b1:c8:f4:89:92: 39:d5:e8:ed:10:5c:dc:92:5d:0a:cb:65:85:94:2e:45:c5:87: e3:26:17:56:5c:4e:0e:62:af:a1:49:38:dd:5b:87:38:c5:54: e9:d9:56:e8:02:b4:eb:8f:2f:f3:4a:7e:2f:0f:76:81:89:d3: 9a:94:81:1a:c3:0f:fa:91:3b:18:76:5f:54:c3:0d:d8:48:76: 18:6d:45:6a:08:cd:9b:9b:c8:5f:33:ce:e2:3e:46:9b:26:3e: ba:01:0b:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+RpCCSpmD/6v4qEIZBlZGMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmODk1YTNlZTIyMTFiNmVlMmRmNzIwMmYwOWE0MjY2ODBk NjYyNjkwHhcNMjYwNzI0MDEwMTIwWhcNMjYwNzI1MDEwMTIwWjAzMTEwLwYDVQQD EygzZjY0Zjg2OWE3MGE3NmFkM2QxMWMzMGM2NjY2OTIxYjE2NjJjNzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRa785UQZJ3PqOjabkfzKnHj4dXH qbYV6I6DuN58ZnrdKsbWO1k9l+D92wCTn1nA75mVTk8xpTjL9q472pepSZaclJyc MdtfSXw6IghIZZkuzLDk+WixPYwGX+DG4Ff7KjXNwuVtm/XBO0yKBWBmE1H5qp8J ZbvpOIXOYIMdPgb+ST9MSJCMXcqxCxcv5Loxkz7KdcAMMM5+EpFz2ONCkaPWt6bQ j+yuZS+unHklCaBJwxkt4Fvth42WrF/nluQe4Dm8uZ0sCilKW/tAaKk9W/TY70zS sq6yhqQDZunmMX6uOwpFcIRFOxcOBuhTHlOeU7YghHKe1pKK9UwfpQNY8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD9k+GmnCnatPRHDDGZmkhsWYscLMB8GA1UdIwQY MBaAFN+JWj7iIRtu4t9yAvCaQmaA1mJpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8xYTcyYTctMjc3ZC00NGY1LTg3ZGUt NzBiMmViZDUxNDM4LzEvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8xYTcyYTctMjc3ZC00NGY1LTg3ZGUtNzBiMmViZDUxNDM4 LzEvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAegVuH059 LQzlOdqqWi0AxkbMtrEyQrDbYVlGT+BX+3EmOq8xOLy0HCsB51SXXGwSZ/tjINpv 6cCPrlmPmkddNysoRlpn2d/sfcifV2vJplPbc3mW+3mkkOrZ/+33h/KY1or1Beyy MegyNmv6NaKkO96XgsvpG8U7lsh0Ey/NebKMcCHRtXLpfNoATWvoZ7pWiR0YMkoZ GqilEI0je7HI9ImSOdXo7RBc3JJdCstlhZQuRcWH4yYXVlxODmKvoUk43VuHOMVU 6dlW6AK0648v80p+Lw92gYnTmpSBGsMP+pE7GHZfVMMN2Eh2GG1FagjNm5vIXzPO 4j5GmyY+ugEL6g== -----END CERTIFICATE-----Generated at Fri Jul 24 03:24:13 2026 by rpki-client