$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/34DEF610B33BA719BA344A660C4BDA8333112372.mft File: 34DEF610B33BA719BA344A660C4BDA8333112372.mft (raw, json) Hash identifier: +fGSdfFR2tzV3NifI9qh2aDMGQ1rUjMYlI/LmDo4PR4= Subject key identifier: 7F:A5:43:FA:7C:70:96:04:D4:D1:14:46:59:A2:DE:8B:59:E9:AD:AD Authority key identifier: 34:DE:F6:10:B3:3B:A7:19:BA:34:4A:66:0C:4B:DA:83:33:11:23:72 Certificate issuer: /CN=34DEF610B33BA719BA344A660C4BDA8333112372 Certificate serial: 1229B79B21F48818E2F8C0FA84A70F32403545FC Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/34DEF610B33BA719BA344A660C4BDA8333112372.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/34DEF610B33BA719BA344A660C4BDA8333112372.mft Manifest number: 73 Signing time: Wed 25 Mar 2026 09:54:30 +0000 Manifest this update: Wed 25 Mar 2026 09:49:30 +0000 Manifest next update: Thu 26 Mar 2026 10:40:30 +0000 Files and hashes: 1: 326131343a373538363a393161303a3a2f34342d3438203d3e20323134323233.roa (hash: czMZ6yHzk1H5R4x8pCiKnN7yebua0d7E2WPcIPaQbQU=) 2: 34DEF610B33BA719BA344A660C4BDA8333112372.crl (hash: RJfTRCHj0s0PaJ/oE5yUKM+eN8Cof7FZjDEgVchgbbQ=) 3: 326131343a373538363a393030303a3a2f34302d3438203d3e20323134323233.roa (hash: sK/28IbuKKKyA7SCTgY03EIdfGQ4xy21thbu3jiR9Kc=) 4: 326131343a373538313a396631303a3a2f34342d3438203d3e20323134323233.roa (hash: /757R/290q7lxAjREfkIn9O/IfjmifWYIYI5Pedt0xY=) 5: 326131343a373538363a393030303a3a2f33362d3438203d3e20323134323233.roa (hash: iA4p3IYifVrgGD3/GcCBblPOiSEiC+VZIiOYTHmZ3ew=) 6: 326131343a373538363a373030303a3a2f33362d3438203d3e20323134323233.roa (hash: pCJnPNsZB30IXmBLO9EkDOhxW1xXJNPlCqoAbVJT2Wc=) 7: 326131343a373538363a393162303a3a2f34342d3438203d3e20323134323233.roa (hash: ZO9VHs/jdkk6zzSYMSYZUdvcDq76KLDhmDYi/qPc0gQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/34DEF610B33BA719BA344A660C4BDA8333112372.crl rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/34DEF610B33BA719BA344A660C4BDA8333112372.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/34DEF610B33BA719BA344A660C4BDA8333112372.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 10:40:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:29:b7:9b:21:f4:88:18:e2:f8:c0:fa:84:a7:0f:32:40:35:45:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34DEF610B33BA719BA344A660C4BDA8333112372 Validity Not Before: Mar 25 09:49:30 2026 GMT Not After : Mar 26 10:40:30 2026 GMT Subject: CN=7FA543FA7C709604D4D1144659A2DE8B59E9ADAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:fc:08:e9:00:69:56:ab:24:53:9b:07:67:b3: 72:75:28:5e:92:24:6f:ea:03:07:66:b8:ea:bf:49: 5b:84:75:45:70:50:36:f0:7a:fb:1e:8f:43:4d:4b: 1e:5d:a8:d9:62:81:b8:84:7e:20:1f:ac:d8:a4:85: 8a:fe:6b:13:50:f8:20:0e:bd:27:e1:37:96:75:d7: 2a:b1:d5:e1:e4:58:0f:9d:c1:bf:3a:55:6b:50:95: db:75:ac:bb:c9:5c:ee:1d:16:a6:8f:16:ce:7b:83: ed:c5:ed:c3:c9:7a:a0:87:7f:2f:4b:cf:83:3b:0c: 2f:70:58:ed:b9:94:cf:99:de:91:a2:08:58:c1:20: 08:6e:65:15:a2:29:df:b4:ae:24:f1:63:ac:53:5d: 24:b5:be:6a:1b:81:7a:eb:a6:0a:04:a5:24:20:df: 62:91:48:b5:78:fa:b0:ee:df:e9:5e:82:24:50:82: 1e:d7:7e:2a:da:85:80:09:bf:0e:0d:97:ef:e7:fc: c6:f3:1a:04:6b:98:31:26:de:2a:9f:f9:63:f6:86: 06:4e:98:ae:a9:fe:d2:c1:73:ec:9a:4c:fa:f2:e6: 11:85:1e:28:1d:24:9d:b4:26:86:b4:54:b3:87:6d: 0c:ff:fe:26:b2:09:6e:f8:74:37:f7:63:e0:31:3b: 42:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:A5:43:FA:7C:70:96:04:D4:D1:14:46:59:A2:DE:8B:59:E9:AD:AD X509v3 Authority Key Identifier: keyid:34:DE:F6:10:B3:3B:A7:19:BA:34:4A:66:0C:4B:DA:83:33:11:23:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/34DEF610B33BA719BA344A660C4BDA8333112372.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/34DEF610B33BA719BA344A660C4BDA8333112372.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/34DEF610B33BA719BA344A660C4BDA8333112372.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:a4:ac:c3:3c:c3:53:9b:90:25:30:19:5e:36:7f:44:eb:f2: be:e8:cf:df:d3:5b:c7:57:1c:30:40:18:9b:75:b2:1d:5e:95: b6:cf:f2:30:2d:33:e9:6b:18:29:f4:c2:30:b6:45:9f:49:92: 52:aa:b3:59:a5:23:3e:1f:44:9b:77:66:33:5e:a8:55:87:7f: d5:8e:30:49:91:0b:74:53:d7:de:55:fb:2a:63:3c:83:ba:e0: 30:94:0f:54:d1:b3:0e:7e:e7:3c:e7:ec:ab:a1:cf:12:6c:31: 8c:c8:66:7c:ed:fa:cf:1f:40:23:7f:df:38:dd:a0:3a:5b:d6: f5:ce:cc:7a:09:08:4e:26:05:06:6c:24:9b:db:41:1d:2b:35: f5:06:86:91:98:b5:bf:74:12:da:23:10:77:ee:90:91:d0:d2: 51:c8:c2:84:95:4c:80:0b:68:3b:f0:28:af:0d:f6:05:ca:c9: 54:41:a1:f5:14:8b:8b:7a:55:76:70:5c:0a:98:dd:62:8c:3a: f0:a0:1f:0e:e4:06:c8:28:aa:34:7b:a6:11:0e:09:23:0f:14: 84:78:09:9c:4e:af:43:92:df:4d:27:8c:56:f9:84:1a:48:9f: c7:33:7c:cb:fc:d6:54:30:ee:fd:83:75:e0:4b:af:e4:af:c1: 47:91:45:9e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUEim3myH0iBji+MD6hKcPMkA1RfwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRERUY2MTBCMzNCQTcxOUJBMzQ0QTY2MEM0QkRBODMz MzExMjM3MjAeFw0yNjAzMjUwOTQ5MzBaFw0yNjAzMjYxMDQwMzBaMDMxMTAvBgNV BAMTKDdGQTU0M0ZBN0M3MDk2MDRENEQxMTQ0NjU5QTJERThCNTlFOUFEQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg/AjpAGlWqyRTmwdns3J1KF6S JG/qAwdmuOq/SVuEdUVwUDbwevsej0NNSx5dqNligbiEfiAfrNikhYr+axNQ+CAO vSfhN5Z11yqx1eHkWA+dwb86VWtQldt1rLvJXO4dFqaPFs57g+3F7cPJeqCHfy9L z4M7DC9wWO25lM+Z3pGiCFjBIAhuZRWiKd+0riTxY6xTXSS1vmobgXrrpgoEpSQg 32KRSLV4+rDu3+legiRQgh7XfirahYAJvw4Nl+/n/MbzGgRrmDEm3iqf+WP2hgZO mK6p/tLBc+yaTPry5hGFHigdJJ20Joa0VLOHbQz//iayCW74dDf3Y+AxO0J1AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUf6VD+nxwlgTU0RRGWaLei1npra0wHwYDVR0j BBgwFoAUNN72ELM7pxm6NEpmDEvagzMRI3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmVkNGI3ZWItMTdhNy00NGUxLTljYTItMDk4YTMyMzgz YzkwLzEvMzRERUY2MTBCMzNCQTcxOUJBMzQ0QTY2MEM0QkRBODMzMzExMjM3Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zNERFRjYxMEIzM0JBNzE5QkEzNDRBNjYw QzRCREE4MzMzMTEyMzcyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzJlZDRiN2ViLTE3YTctNDRlMS05Y2EyLTA5OGEzMjM4M2M5MC8xLzM0REVGNjEw QjMzQkE3MTlCQTM0NEE2NjBDNEJEQTgzMzMxMTIzNzIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCgpKzD PMNTm5AlMBleNn9E6/K+6M/f01vHVxwwQBibdbIdXpW2z/IwLTPpaxgp9MIwtkWf SZJSqrNZpSM+H0Sbd2YzXqhVh3/VjjBJkQt0U9feVfsqYzyDuuAwlA9U0bMOfuc8 5+yroc8SbDGMyGZ87frPH0Ajf9843aA6W9b1zsx6CQhOJgUGbCSb20EdKzX1BoaR mLW/dBLaIxB37pCR0NJRyMKElUyAC2g78CivDfYFyslUQaH1FIuLelV2cFwKmN1i jDrwoB8O5AbIKKo0e6YRDgkjDxSEeAmcTq9Dkt9NJ4xW+YQaSJ/HM3zL/NZUMO79 g3XgS6/kr8FHkUWe -----END CERTIFICATE-----Generated at Wed Mar 25 23:11:52 2026 by rpki-client