$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft File: 34laPuIhG27i33IC8JpCZoDWYmk.mft (raw, json) Hash identifier: DNFDnJP08HGztFeTRg8mIR1aN5GyiRvzLCi6eVxbZPc= Subject key identifier: FD:21:3C:ED:71:50:EF:F9:8C:A6:DD:70:95:F0:F9:18:60:27:54:88 Authority key identifier: DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69 Certificate issuer: /CN=df895a3ee2211b6ee2df7202f09a426680d66269 Certificate serial: 0199FCC691EC5A7F2418E2A3EE41162716DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft Manifest number: 05CB Signing time: Sun 19 Oct 2025 14:01:35 +0000 Manifest this update: Sun 19 Oct 2025 14:01:35 +0000 Manifest next update: Mon 20 Oct 2025 14:01:35 +0000 Files and hashes: 1: 34laPuIhG27i33IC8JpCZoDWYmk.crl (hash: ctMKundCMUSLQ5Mt7ElqwmJj2RmOLBF//3Mq4Z8FXQU=) 2: 5zBBP6A9yXxPnIT5zZIOxAXnWn8.roa (hash: Tk6h46GooTA/gBtAz3CQBGmG5ai7s8MBzIVWccJFxM0=) 3: 7SUWhLqE8A7qWiGUQfWRk3P7j_k.roa (hash: vr+ZGiswiHAuEM9htC6Hmt6v0+gW2jHUeuGOqHmqzNU=) 4: DoutZlvm4IbzXZXDTFrxAAquQLg.roa (hash: qnpQEntxymSrGJJO5sN1jep0qMMWrabFq1224NHJCYE=) 5: Jnp54uEZWEbzo5JH40T_lJ9C9Z0.roa (hash: Fnatp1DYGIx3gW9yEtvyiEfpUNIXk3xQmBuqhYqPnxI=) 6: _MqV1XKDHlZayFJD_tebnGvV-5M.roa (hash: d1lgjgsmxlfmAx6agblK/hzEA0kP5WWi8VR1j2Op8bI=) 7: lD6XQXU5XweY3aFaXvtSaxKbUbg.roa (hash: 6ADKjdzYu1CV/1GsWyr07rGlXGz5FE1o4HR8g0+KmZE=) 8: lP4cxO_3lnzQn7Ilwl6gVjJD0IY.roa (hash: uXIKziw38oRnc113zAOQwsWk6faYXtXNQlUgwb8l2ZE=) 9: p0BVO9Af7Thr9z7m6IM96h1DgmA.roa (hash: M3qrJb8kDeOcqJXYvSqGIOSCSmHqLEZFL25U38otuCQ=) 10: rstqmC9C3deFRwlh7GBOdnhea6U.roa (hash: hc6+4Nud2mXg12AKMVOC6jspD/lRAhLFUQSwRN33KxM=) 11: vmUg0yzYcnRJZC2n9pSGw6JlB2A.roa (hash: f45/pAD/SVLyT8PSsTHGZFNyd/9e/fwYtYXEyg22gkw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:c6:91:ec:5a:7f:24:18:e2:a3:ee:41:16:27:16:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df895a3ee2211b6ee2df7202f09a426680d66269 Validity Not Before: Oct 19 14:01:35 2025 GMT Not After : Oct 20 14:01:35 2025 GMT Subject: CN=fd213ced7150eff98ca6dd7095f0f91860275488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a5:45:8a:9a:02:85:db:8b:c5:88:f9:e0:b6: 10:11:1e:96:83:95:1c:61:dc:c8:89:9b:aa:b0:e6: a8:9a:d2:05:4b:76:21:4b:6d:4a:7f:57:14:2f:af: a8:ac:0b:06:4f:6a:41:de:33:c3:83:7b:ab:fd:1b: c7:b9:ea:c0:49:f5:7a:eb:54:e8:85:36:c7:37:6a: 83:f3:9e:71:9a:6b:02:8f:5c:5b:51:73:46:cc:9d: 6e:57:bb:88:85:e8:12:bd:72:12:a8:59:b3:e8:fc: e9:98:ff:37:3f:7b:ed:18:23:25:a8:aa:29:95:a3: 50:f1:c6:2b:69:b8:fe:a8:a8:50:c1:92:39:a3:94: b0:f4:e8:f1:1c:ea:6b:ab:da:f8:56:e9:11:7e:16: 9d:ae:68:eb:9a:f4:c1:9b:84:82:f0:20:ae:ff:79: 98:38:cc:c2:52:82:32:5f:3b:07:9d:cd:f7:02:68: 2c:60:49:32:5a:7a:35:f9:0d:79:4d:98:74:4f:c2: 43:57:35:3f:27:35:22:46:4e:55:58:4f:20:b1:ed: e0:ca:16:17:fc:7f:54:be:3f:0e:67:63:95:8c:1b: 53:d7:fa:5c:cd:8c:a9:b0:10:98:72:ac:20:38:21: 37:ad:81:2d:4f:df:fa:da:06:13:4c:3f:0e:21:52: 01:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:21:3C:ED:71:50:EF:F9:8C:A6:DD:70:95:F0:F9:18:60:27:54:88 X509v3 Authority Key Identifier: keyid:DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:f7:67:01:78:e9:b1:b4:2b:1e:8b:73:46:60:93:80:a3:c6: b0:6b:b5:a8:2b:b2:d8:fb:30:51:f8:ac:51:ca:4a:d6:68:ee: 20:cc:b3:b1:64:c7:0a:1e:d8:f8:d4:47:c7:b9:6b:63:15:ef: 14:d1:c2:a0:3d:f6:af:d7:8d:80:99:61:a8:fd:5f:aa:d0:49: 96:06:37:fc:3e:4c:29:ee:e2:10:ee:99:10:4e:09:02:53:a2: f7:de:8b:13:ca:91:d8:2d:f8:db:8e:93:f4:bc:36:1e:ce:ae: 15:7e:40:95:f9:fe:95:80:59:68:82:46:cb:91:05:03:17:07: d5:a2:f3:6a:05:90:1d:9b:b6:28:81:9f:3b:09:24:e4:4f:12: 01:b1:e0:f1:d9:f6:e9:7e:8e:d1:15:99:ac:79:ec:b1:18:39: e8:8d:c3:bb:93:d9:6f:ae:fb:2d:7a:ce:39:62:22:b4:0e:f4: 2e:ce:c6:ae:12:e0:bd:b9:c8:0a:2d:a1:01:8d:37:5a:fc:4d: 77:16:13:05:72:dc:11:ff:78:c2:33:37:5e:b2:d2:03:36:da: 8b:02:92:8d:d1:25:e9:49:4b:bf:0f:dd:3e:4c:68:1d:3f:6f: 58:69:0b:fc:f7:5b:08:7f:64:6a:90:c5:a0:cc:b3:87:4d:d9: 66:bc:00:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8xpHsWn8kGOKj7kEWJxbeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmODk1YTNlZTIyMTFiNmVlMmRmNzIwMmYwOWE0MjY2ODBk NjYyNjkwHhcNMjUxMDE5MTQwMTM1WhcNMjUxMDIwMTQwMTM1WjAzMTEwLwYDVQQD EyhmZDIxM2NlZDcxNTBlZmY5OGNhNmRkNzA5NWYwZjkxODYwMjc1NDg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqVFipoChduLxYj54LYQER6Wg5Uc YdzIiZuqsOaomtIFS3YhS21Kf1cUL6+orAsGT2pB3jPDg3ur/RvHuerASfV661To hTbHN2qD855xmmsCj1xbUXNGzJ1uV7uIhegSvXISqFmz6PzpmP83P3vtGCMlqKop laNQ8cYrabj+qKhQwZI5o5Sw9OjxHOprq9r4VukRfhadrmjrmvTBm4SC8CCu/3mY OMzCUoIyXzsHnc33AmgsYEkyWno1+Q15TZh0T8JDVzU/JzUiRk5VWE8gse3gyhYX /H9Uvj8OZ2OVjBtT1/pczYypsBCYcqwgOCE3rYEtT9/62gYTTD8OIVIB8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP0hPO1xUO/5jKbdcJXw+RhgJ1SIMB8GA1UdIwQY MBaAFN+JWj7iIRtu4t9yAvCaQmaA1mJpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8xYTcyYTctMjc3ZC00NGY1LTg3ZGUt NzBiMmViZDUxNDM4LzEvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8xYTcyYTctMjc3ZC00NGY1LTg3ZGUtNzBiMmViZDUxNDM4 LzEvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnfdnAXjp sbQrHotzRmCTgKPGsGu1qCuy2PswUfisUcpK1mjuIMyzsWTHCh7Y+NRHx7lrYxXv FNHCoD32r9eNgJlhqP1fqtBJlgY3/D5MKe7iEO6ZEE4JAlOi996LE8qR2C34246T 9Lw2Hs6uFX5Alfn+lYBZaIJGy5EFAxcH1aLzagWQHZu2KIGfOwkk5E8SAbHg8dn2 6X6O0RWZrHnssRg56I3Du5PZb677LXrOOWIitA70Ls7GrhLgvbnICi2hAY03WvxN dxYTBXLcEf94wjM3XrLSAzbaiwKSjdEl6UlLvw/dPkxoHT9vWGkL/PdbCH9kapDF oMyzh03ZZrwAFQ== -----END CERTIFICATE-----Generated at Sun Oct 19 18:19:52 2025 by rpki-client