$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft File: 34laPuIhG27i33IC8JpCZoDWYmk.mft (raw, json) Hash identifier: VIGRJ6ikSBThVX9oPEsXuCL7NAMuM1bMzzKeqPVLTDA= Subject key identifier: AC:15:86:B9:79:91:9F:6E:BE:9B:F1:D7:7B:EC:FA:52:25:5C:45:49 Authority key identifier: DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69 Certificate issuer: /CN=df895a3ee2211b6ee2df7202f09a426680d66269 Certificate serial: 019F8FB569E31E55514476446C2990937B80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft Manifest number: 08B8 Signing time: Thu 23 Jul 2026 16:00:58 +0000 Manifest this update: Thu 23 Jul 2026 16:00:58 +0000 Manifest next update: Fri 24 Jul 2026 16:00:58 +0000 Files and hashes: 1: 0XLwdTu4nRGxVAQOFOgi-F-CPp8.roa (hash: pak6BtTzWa98W3dJFCCof2yZ3EkBaahZi9HG5ewTysQ=) 2: 34laPuIhG27i33IC8JpCZoDWYmk.crl (hash: HIFGsS3VIcF8g2thn90A5wZlCYaMYfIij1tAzEVfARc=) 3: 9D5WwjKLKWgOIgPanR8axjhLcU4.roa (hash: ZLdDEz7U/sFImJ7TRS2LLSrQd9lNXvIbMcJRDgvz3sA=) 4: aDmk7bmr7GaG3aSI9qiX-uXwSWg.roa (hash: PRIIqS3HIlOlOVEL7UW8zij6bOh1J2Z1Qs2Esv77scQ=) 5: cw-KXeWioyTYbIA1vAnNwGD9GhY.roa (hash: EbcWuoOspeZih7eQTLeYWoRHq4YiGEsO0VMZUGNEFB0=) 6: e5CgRNX8DO6ZSqQ9MJH71FE7_jc.roa (hash: V4ZA2YkMaTT1slmusEGl0z9gt2912EuUoJMbm9ZyTsM=) 7: j-PFBiL03S6WRSrBU8S47xwyndA.roa (hash: K7P+QUsdp4yG+ErvjouO0SB+AUJcFrNu/1BLrwwoCmk=) 8: mHlUc70rNMbtkPfKuvhCKEylgkY.roa (hash: h1dT3/iB5II0F3sw3D3rAshjNyDRMEmfsyBcGUSBbMs=) 9: onJwIsBG_TlNzJPQVYzWvXnQYTU.roa (hash: CF4OHpZC0xd0XR18QoBgWTx8t9RwFhji6OFqhQG0Qog=) 10: tDWgVsxN09kg7oAdG68IGAVT8Zg.roa (hash: 92PHhhSbJSKdw93N+YcB/DCcsP8fP/+3+zAHfz750FA=) 11: wNRTB3A2q9f-yV1rTSijUO5gEB8.roa (hash: Mvkmn5/K4C/vX+W0bmirSKlojMyVfTuv4C+eRU2oTlU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 16:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8f:b5:69:e3:1e:55:51:44:76:44:6c:29:90:93:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df895a3ee2211b6ee2df7202f09a426680d66269 Validity Not Before: Jul 23 16:00:58 2026 GMT Not After : Jul 24 16:00:58 2026 GMT Subject: CN=ac1586b979919f6ebe9bf1d77becfa52255c4549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:50:be:29:93:e3:d6:6a:e1:f9:51:af:5b:c1: 2f:41:ff:49:36:77:b3:34:96:eb:7f:06:03:cb:0f: 9e:49:00:21:33:79:ed:fa:96:a3:cb:ec:d5:bb:4b: d2:c1:bf:59:cc:1a:ad:5e:b9:4b:7b:9a:57:1e:58: 10:91:3f:3f:06:ce:26:df:55:f3:fe:b6:fe:a0:88: d8:6e:b1:00:1e:c2:b5:3b:c9:f9:84:51:a3:80:15: ab:b1:c4:0e:73:03:cb:62:b0:9a:da:f7:d4:c2:bb: 71:af:42:ae:67:49:5c:ef:56:72:cd:20:22:6e:f2: 2b:35:a4:1c:2a:bc:69:32:41:a8:25:37:d6:3e:e1: 88:a3:47:d0:14:4b:a7:25:ce:4e:d3:9a:6f:b4:b5: d6:5d:85:02:86:da:79:ba:46:78:dc:c1:f0:dd:b9: 3a:36:13:f2:73:05:22:6c:ab:39:af:0f:6e:be:0d: bc:14:a8:c8:5f:65:e9:c2:35:5a:fe:b2:6f:fa:96: 66:0e:30:2a:e0:ef:23:8d:97:45:1d:f6:e0:47:41: b2:48:de:73:b1:d1:d3:af:b0:4c:c3:1e:13:83:92: fa:00:79:a7:42:e4:10:f8:53:e8:ec:db:e1:d9:e3: e2:18:ef:90:61:81:3e:ba:b8:af:79:54:02:9c:89: ac:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:15:86:B9:79:91:9F:6E:BE:9B:F1:D7:7B:EC:FA:52:25:5C:45:49 X509v3 Authority Key Identifier: keyid:DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:0c:26:74:88:ef:be:ee:f2:92:9a:39:0c:10:3d:e1:05:29: a9:ba:a5:e0:de:e0:8b:84:7e:c4:d3:00:96:ee:62:0a:c7:1f: 77:26:5a:e4:f3:85:27:d6:b9:25:83:96:76:69:83:1b:cb:40: 7e:2c:27:5b:8c:5b:6f:d5:ad:88:13:4d:ee:ea:61:23:f1:00: 5c:82:5b:86:70:df:cd:cd:63:ea:48:0b:83:73:c1:03:57:71: 0a:76:58:2f:16:8a:fe:ce:44:6c:4b:73:d2:9f:00:08:06:49: 66:19:0d:81:00:c0:0c:42:f1:6a:79:7d:5b:de:b8:9e:21:ec: 28:83:ef:85:34:d8:30:01:a9:36:6c:43:2e:11:60:53:57:1a: a5:c6:bc:69:e0:71:72:74:48:99:61:28:4f:1d:d3:e5:da:5c: 45:fb:d1:d7:e4:3e:11:f7:b7:40:ee:d1:c7:af:08:a8:e7:91: 42:e4:6e:29:8a:f3:aa:e2:ee:80:39:66:70:ad:2a:b8:66:1b: 82:a5:fa:93:e9:cf:b4:19:39:2e:77:58:1e:83:0d:5f:7d:15: 39:14:74:b9:59:37:69:23:f5:38:a7:c3:b8:1f:fc:e4:32:7f: e6:6a:68:3b:62:17:03:c8:08:6b:af:90:75:16:94:40:3b:2e: 75:09:50:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+PtWnjHlVRRHZEbCmQk3uAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmODk1YTNlZTIyMTFiNmVlMmRmNzIwMmYwOWE0MjY2ODBk NjYyNjkwHhcNMjYwNzIzMTYwMDU4WhcNMjYwNzI0MTYwMDU4WjAzMTEwLwYDVQQD EyhhYzE1ODZiOTc5OTE5ZjZlYmU5YmYxZDc3YmVjZmE1MjI1NWM0NTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1C+KZPj1mrh+VGvW8EvQf9JNnez NJbrfwYDyw+eSQAhM3nt+pajy+zVu0vSwb9ZzBqtXrlLe5pXHlgQkT8/Bs4m31Xz /rb+oIjYbrEAHsK1O8n5hFGjgBWrscQOcwPLYrCa2vfUwrtxr0KuZ0lc71ZyzSAi bvIrNaQcKrxpMkGoJTfWPuGIo0fQFEunJc5O05pvtLXWXYUChtp5ukZ43MHw3bk6 NhPycwUibKs5rw9uvg28FKjIX2XpwjVa/rJv+pZmDjAq4O8jjZdFHfbgR0GySN5z sdHTr7BMwx4Tg5L6AHmnQuQQ+FPo7Nvh2ePiGO+QYYE+uriveVQCnImswQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKwVhrl5kZ9uvpvx13vs+lIlXEVJMB8GA1UdIwQY MBaAFN+JWj7iIRtu4t9yAvCaQmaA1mJpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8xYTcyYTctMjc3ZC00NGY1LTg3ZGUt NzBiMmViZDUxNDM4LzEvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8xYTcyYTctMjc3ZC00NGY1LTg3ZGUtNzBiMmViZDUxNDM4 LzEvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADQwmdIjv vu7ykpo5DBA94QUpqbql4N7gi4R+xNMAlu5iCscfdyZa5POFJ9a5JYOWdmmDG8tA fiwnW4xbb9WtiBNN7uphI/EAXIJbhnDfzc1j6kgLg3PBA1dxCnZYLxaK/s5EbEtz 0p8ACAZJZhkNgQDADELxanl9W964niHsKIPvhTTYMAGpNmxDLhFgU1capca8aeBx cnRImWEoTx3T5dpcRfvR1+Q+Efe3QO7Rx68IqOeRQuRuKYrzquLugDlmcK0quGYb gqX6k+nPtBk5LndYHoMNX30VORR0uVk3aSP1OKfDuB/85DJ/5mpoO2IXA8gIa6+Q dRaUQDsudQlQIg== -----END CERTIFICATE-----Generated at Fri Jul 24 01:57:36 2026 by rpki-client