$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft File: 42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft (raw, json) Hash identifier: e1dO6oK5gx/8/o6kq78iyzRPixmOL2UkRXf3neJyXkQ= Subject key identifier: 46:11:B0:96:9F:6F:B1:62:93:44:6A:8B:99:E3:77:D8:7F:57:D2:40 Authority key identifier: 42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57 Certificate issuer: /CN=42e508fba8960f48071b119accbf57bdbf3a8057 Certificate serial: 45333C791C717866725438CC7EBC2312885DBC9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft Manifest number: 018C Signing time: Sun 20 Jul 2025 10:34:17 +0000 Manifest this update: Sun 20 Jul 2025 10:29:17 +0000 Manifest next update: Mon 21 Jul 2025 14:04:17 +0000 Files and hashes: 1: 36322e3138322e3139322e302f32312d3234203d3e203432353332.roa (hash: 3uX+IJtCK1auUN/owB303ntI6bBy0+b5ouSYztCnTmQ=) 2: 5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer (hash: xVnvGBOQAGx7ddcmxacteZKEbUgAqtkW3B5rWiVC4Gw=) 3: 326130623a346530343a3a2f33322d3438203d3e203236393534.roa (hash: LizvwJL2nprToghg5qQqGpfO97UmahWuyDJ1ZaaEJS0=) 4: 42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl (hash: I9i0D6rvR+ImltbKgmo90wh0tutqch5COmRGgibJOqA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 14:04:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:33:3c:79:1c:71:78:66:72:54:38:cc:7e:bc:23:12:88:5d:bc:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42e508fba8960f48071b119accbf57bdbf3a8057 Validity Not Before: Jul 20 10:29:17 2025 GMT Not After : Jul 21 14:04:17 2025 GMT Subject: CN=4611B0969F6FB16293446A8B99E377D87F57D240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6d:6d:ca:66:eb:05:34:28:c1:ec:7e:a4:c4: d7:59:e5:3f:48:aa:31:57:2d:8c:13:67:55:69:ef: 6b:23:3b:e6:2d:00:23:04:88:9d:53:9a:90:19:3a: 6f:8a:a4:cb:50:2d:b8:14:64:d7:22:a9:b8:bb:09: 6f:57:50:9e:d9:4b:60:15:ab:e3:f4:93:42:5e:80: f9:4f:d8:2d:1c:19:f3:47:59:e5:06:9e:17:31:3d: 58:f5:11:b7:f8:43:15:bd:a4:37:c5:df:93:38:a8: 18:8b:cd:6d:de:71:cf:bb:97:36:60:b7:50:98:72: 65:3a:45:6f:f6:ba:3f:e8:e4:29:a0:77:c5:25:56: 63:ef:73:7e:d2:7d:98:9e:d1:10:6e:d3:ac:5c:d3: d9:cb:46:6d:38:98:3e:91:37:e3:2c:bf:bb:ba:1d: 28:83:f6:c8:41:60:51:dd:22:cf:61:0c:34:ed:73: 89:8d:43:31:35:f6:a6:91:5a:0b:fe:f8:d4:15:14: 7c:47:4e:c1:66:a1:6d:34:97:d4:ff:e9:4c:2c:16: 5d:67:82:e9:54:cc:be:97:be:f3:4a:bc:65:a0:69: 5e:0d:11:28:b1:c9:b8:5f:3d:f9:5c:84:c9:5d:1a: c5:19:22:e1:1f:a4:d9:ee:62:5f:0b:b8:17:bf:54: 10:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:11:B0:96:9F:6F:B1:62:93:44:6A:8B:99:E3:77:D8:7F:57:D2:40 X509v3 Authority Key Identifier: keyid:42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:e9:f3:09:e3:6a:d0:c3:81:9e:0e:98:40:b2:50:54:7a:d6: 3c:cb:a2:c6:64:0b:42:a1:f0:a4:8f:91:64:c0:e3:6c:c2:d9: d5:c3:38:e1:a6:5b:ec:22:64:c0:97:92:47:7b:88:42:8b:94: 4a:eb:cb:3a:6b:e5:b9:cc:24:eb:08:95:02:6d:96:af:39:dd: 71:66:da:eb:3d:71:0d:3f:2e:4b:c3:a7:21:db:bc:09:de:f6: 48:58:4a:b3:53:2c:27:7d:de:34:e2:15:97:4f:db:90:ee:a8: fa:da:6e:0c:2a:57:ad:73:a5:d7:05:ab:4f:0b:97:45:ec:8a: a2:da:0b:86:68:6a:e1:c1:13:c0:70:30:6e:f1:6a:5d:c0:d6: b3:e5:00:79:6e:69:21:5f:a0:c1:22:1a:01:20:55:82:99:d1: a9:6f:e0:44:22:be:82:d0:66:e3:c1:70:4c:50:a0:40:d5:fc: 6c:ce:4e:86:b0:3f:0a:f2:9e:a8:f2:60:6f:2e:3a:d8:08:67: 8b:ac:2d:bb:ea:03:fb:dd:9e:37:26:b5:b2:09:16:a6:2d:fd: 3b:db:c2:1f:81:cd:0d:91:ce:01:ef:6a:2e:88:9e:c3:43:9f: e8:74:a8:9a:43:7d:bc:fb:4f:41:82:eb:be:81:d2:30:5a:9c: 70:36:f6:a6 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIURTM8eRxxeGZyVDjMfrwjEohdvJ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJlNTA4ZmJhODk2MGY0ODA3MWIxMTlhY2NiZjU3YmRi ZjNhODA1NzAeFw0yNTA3MjAxMDI5MTdaFw0yNTA3MjExNDA0MTdaMDMxMTAvBgNV BAMTKDQ2MTFCMDk2OUY2RkIxNjI5MzQ0NkE4Qjk5RTM3N0Q4N0Y1N0QyNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMbW3KZusFNCjB7H6kxNdZ5T9I qjFXLYwTZ1Vp72sjO+YtACMEiJ1TmpAZOm+KpMtQLbgUZNciqbi7CW9XUJ7ZS2AV q+P0k0JegPlP2C0cGfNHWeUGnhcxPVj1Ebf4QxW9pDfF35M4qBiLzW3ecc+7lzZg t1CYcmU6RW/2uj/o5Cmgd8UlVmPvc37SfZie0RBu06xc09nLRm04mD6RN+Msv7u6 HSiD9shBYFHdIs9hDDTtc4mNQzE19qaRWgv++NQVFHxHTsFmoW00l9T/6UwsFl1n gulUzL6XvvNKvGWgaV4NESixybhfPflchMldGsUZIuEfpNnuYl8LuBe/VBB9AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQURhGwlp9vsWKTRGqLmeN32H9X0kAwHwYDVR0j BBgwFoAUQuUI+6iWD0gHGxGazL9Xvb86gFcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEtOGJhNS00NzlmLWEyMjktMGFiNzBlNDgx NWJiLzAvNDJFNTA4RkJBODk2MEY0ODA3MUIxMTlBQ0NCRjU3QkRCRjNBODA1Ny5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1F1VUktNmlXRDBnSEd4R2F6TDlYdmI4 NmdGYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83M2I4ZWMwMS04 YmE1LTQ3OWYtYTIyOS0wYWI3MGU0ODE1YmIvMC80MkU1MDhGQkE4OTYwRjQ4MDcx QjExOUFDQ0JGNTdCREJGM0E4MDU3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPOnzCeNq0MOBng6YQLJQ VHrWPMuixmQLQqHwpI+RZMDjbMLZ1cM44aZb7CJkwJeSR3uIQouUSuvLOmvlucwk 6wiVAm2WrzndcWba6z1xDT8uS8OnIdu8Cd72SFhKs1MsJ33eNOIVl0/bkO6o+tpu DCpXrXOl1wWrTwuXReyKotoLhmhq4cETwHAwbvFqXcDWs+UAeW5pIV+gwSIaASBV gpnRqW/gRCK+gtBm48FwTFCgQNX8bM5OhrA/CvKeqPJgby462Ahni6wtu+oD+92e Nya1sgkWpi39O9vCH4HNDZHOAe9qLoiew0Of6HSomkN9vPtPQYLrvoHSMFqccDb2 pg== -----END CERTIFICATE-----Generated at Mon Jul 21 07:26:39 2025 by rpki-client