$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft File: 34laPuIhG27i33IC8JpCZoDWYmk.mft (raw, json) Hash identifier: BhD0TuTgN1DCKkF5+Nsf2Y6bjgOtEZbFLZHxGFFcMos= Subject key identifier: A1:E6:57:F8:6D:ED:EB:C1:30:16:D4:ED:42:A7:C4:83:E4:FA:C1:32 Authority key identifier: DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69 Certificate issuer: /CN=df895a3ee2211b6ee2df7202f09a426680d66269 Certificate serial: 01A0E1AABD9CA2B3CDF3426DEA1D8F65B99C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft Manifest number: 0969 Signing time: Sun 27 Sep 2026 07:00:58 +0000 Manifest this update: Sun 27 Sep 2026 07:00:58 +0000 Manifest next update: Mon 28 Sep 2026 07:00:58 +0000 Files and hashes: 1: 0XLwdTu4nRGxVAQOFOgi-F-CPp8.roa (hash: pak6BtTzWa98W3dJFCCof2yZ3EkBaahZi9HG5ewTysQ=) 2: 34laPuIhG27i33IC8JpCZoDWYmk.crl (hash: ta6hDCihWyQkqB+yL99S2a9/QlpKfUe2KkYmNFketM8=) 3: JbC08AZZ4yXpMlH-fCQSdJypEsk.roa (hash: dv25QT/BTHr/Vmlb0AXRPmd0ZYYxQm5AHmzhJRYqsHI=) 4: aDmk7bmr7GaG3aSI9qiX-uXwSWg.roa (hash: PRIIqS3HIlOlOVEL7UW8zij6bOh1J2Z1Qs2Esv77scQ=) 5: cw-KXeWioyTYbIA1vAnNwGD9GhY.roa (hash: EbcWuoOspeZih7eQTLeYWoRHq4YiGEsO0VMZUGNEFB0=) 6: e5CgRNX8DO6ZSqQ9MJH71FE7_jc.roa (hash: V4ZA2YkMaTT1slmusEGl0z9gt2912EuUoJMbm9ZyTsM=) 7: j-PFBiL03S6WRSrBU8S47xwyndA.roa (hash: K7P+QUsdp4yG+ErvjouO0SB+AUJcFrNu/1BLrwwoCmk=) 8: mHlUc70rNMbtkPfKuvhCKEylgkY.roa (hash: h1dT3/iB5II0F3sw3D3rAshjNyDRMEmfsyBcGUSBbMs=) 9: onJwIsBG_TlNzJPQVYzWvXnQYTU.roa (hash: CF4OHpZC0xd0XR18QoBgWTx8t9RwFhji6OFqhQG0Qog=) 10: tDWgVsxN09kg7oAdG68IGAVT8Zg.roa (hash: 92PHhhSbJSKdw93N+YcB/DCcsP8fP/+3+zAHfz750FA=) 11: wNRTB3A2q9f-yV1rTSijUO5gEB8.roa (hash: Mvkmn5/K4C/vX+W0bmirSKlojMyVfTuv4C+eRU2oTlU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Sep 2026 07:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:e1:aa:bd:9c:a2:b3:cd:f3:42:6d:ea:1d:8f:65:b9:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df895a3ee2211b6ee2df7202f09a426680d66269 Validity Not Before: Sep 27 07:00:58 2026 GMT Not After : Sep 28 07:00:58 2026 GMT Subject: CN=a1e657f86dedebc13016d4ed42a7c483e4fac132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ce:58:87:05:ed:f6:7a:31:99:c0:86:6a:75: 26:c0:ba:c5:52:86:69:17:9c:66:8e:d0:b5:5f:48: 83:1c:4b:92:f6:ca:b2:7b:88:02:de:dc:82:a0:cf: ae:ce:11:b0:b6:51:e9:a9:53:86:d4:c0:92:5a:dc: 1c:09:76:30:5d:e9:b2:27:78:15:99:2a:e8:e6:73: 73:01:64:9c:1e:88:d7:0e:0d:70:55:c9:54:b0:e9: da:79:c3:58:2f:a7:ce:2b:9e:d4:e1:c0:b7:7b:7d: ca:ee:cd:5f:df:c8:fe:bd:8f:3a:f6:56:28:54:35: 02:77:7b:3f:01:23:c3:fa:22:07:45:8c:de:85:b7: 8c:ce:c1:ec:48:cf:a4:00:e2:62:c7:95:5e:ec:06: d6:13:8f:cd:46:8e:41:51:da:a8:b3:3d:8f:83:4f: 1e:f9:0d:1a:aa:40:9f:13:0d:62:48:fa:3f:ac:d0: a0:fc:a6:61:7d:e4:57:c2:8d:bc:4f:8f:5a:ef:1a: 23:42:81:3f:3a:be:1a:9a:b8:f8:f8:49:ec:43:69: 4c:91:b7:1d:0f:fd:ff:09:6c:bd:45:d3:81:bb:46: e7:e0:0d:4d:82:b8:18:9c:90:a2:4d:5e:d3:8c:35: 92:e7:ba:31:2f:4a:41:86:c9:dd:76:9f:d1:e3:f3: 52:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:E6:57:F8:6D:ED:EB:C1:30:16:D4:ED:42:A7:C4:83:E4:FA:C1:32 X509v3 Authority Key Identifier: keyid:DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:5a:2e:aa:82:e7:bd:1a:c7:16:a6:82:9d:be:f2:e5:b6:0c: 4f:fe:5b:40:77:f9:19:51:15:96:2b:a4:98:b6:6d:2b:31:13: d2:a6:f1:97:4c:b6:94:38:97:39:f8:9b:ae:58:91:3f:13:87: 48:1e:c6:60:c4:5e:ad:7c:9c:84:24:d1:c1:38:55:cd:93:87: 8a:02:8f:11:6b:ff:d2:b0:cf:ba:fd:d2:2b:46:1e:58:6e:3d: e3:94:e7:29:2c:3b:32:29:05:7d:94:f3:8c:77:3a:69:6f:a1: 2c:6e:9a:e8:72:a9:d4:cb:06:3a:5a:89:56:7a:f4:36:15:e2: de:9d:c7:cd:3d:01:b6:68:c3:47:f2:75:53:0f:cf:38:07:ef: 95:49:45:4a:28:8c:1c:90:f0:f4:85:6a:91:0d:39:ef:3f:8d: fc:56:77:d4:d8:f3:c4:37:b0:b6:e5:20:20:70:0e:3e:63:c0: ea:97:0d:b6:cd:f2:5e:fe:29:c0:96:0b:26:cb:53:f1:b7:02: 8e:1a:4e:05:a4:40:49:06:89:7e:21:8e:a1:fa:71:e4:41:0c: 22:aa:52:12:2e:df:d5:30:c8:cc:8b:92:80:d9:3d:91:a3:7e: a6:18:e9:4a:42:6d:d2:04:ca:40:f1:88:0b:e9:64:39:9a:06: 55:0e:54:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDhqr2corPN80Jt6h2PZbmcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmODk1YTNlZTIyMTFiNmVlMmRmNzIwMmYwOWE0MjY2ODBk NjYyNjkwHhcNMjYwOTI3MDcwMDU4WhcNMjYwOTI4MDcwMDU4WjAzMTEwLwYDVQQD EyhhMWU2NTdmODZkZWRlYmMxMzAxNmQ0ZWQ0MmE3YzQ4M2U0ZmFjMTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5c5YhwXt9noxmcCGanUmwLrFUoZp F5xmjtC1X0iDHEuS9sqye4gC3tyCoM+uzhGwtlHpqVOG1MCSWtwcCXYwXemyJ3gV mSro5nNzAWScHojXDg1wVclUsOnaecNYL6fOK57U4cC3e33K7s1f38j+vY869lYo VDUCd3s/ASPD+iIHRYzehbeMzsHsSM+kAOJix5Ve7AbWE4/NRo5BUdqosz2Pg08e +Q0aqkCfEw1iSPo/rNCg/KZhfeRXwo28T49a7xojQoE/Or4amrj4+EnsQ2lMkbcd D/3/CWy9RdOBu0bn4A1NgrgYnJCiTV7TjDWS57oxL0pBhsnddp/R4/NS0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKHmV/ht7evBMBbU7UKnxIPk+sEyMB8GA1UdIwQY MBaAFN+JWj7iIRtu4t9yAvCaQmaA1mJpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8xYTcyYTctMjc3ZC00NGY1LTg3ZGUt NzBiMmViZDUxNDM4LzEvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8xYTcyYTctMjc3ZC00NGY1LTg3ZGUtNzBiMmViZDUxNDM4 LzEvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACVouqoLn vRrHFqaCnb7y5bYMT/5bQHf5GVEVliukmLZtKzET0qbxl0y2lDiXOfibrliRPxOH SB7GYMRerXychCTRwThVzZOHigKPEWv/0rDPuv3SK0YeWG4945TnKSw7MikFfZTz jHc6aW+hLG6a6HKp1MsGOlqJVnr0NhXi3p3HzT0BtmjDR/J1Uw/POAfvlUlFSiiM HJDw9IVqkQ057z+N/FZ31NjzxDewtuUgIHAOPmPA6pcNts3yXv4pwJYLJstT8bcC jhpOBaRASQaJfiGOofpx5EEMIqpSEi7f1TDIzIuSgNk9kaN+phjpSkJt0gTKQPGI C+lkOZoGVQ5Uuw== -----END CERTIFICATE-----Generated at Sun Sep 27 16:59:15 2026 by rpki-client