$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft File: 42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft (raw, json) Hash identifier: i+XmCFlZRRUr7Z1jrhlT2evXnQh2hlef0OqqslSfo98= Subject key identifier: C9:71:EB:58:87:71:EF:31:1A:F6:A9:C3:E7:16:95:8C:5E:D2:61:31 Authority key identifier: 42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57 Certificate issuer: /CN=42e508fba8960f48071b119accbf57bdbf3a8057 Certificate serial: 289005C15BCFC9D8F203C936FD18869C0B8D67B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft Manifest number: 0452 Signing time: Mon 19 Oct 2026 10:09:41 +0000 Manifest this update: Mon 19 Oct 2026 10:04:41 +0000 Manifest next update: Tue 20 Oct 2026 12:12:41 +0000 Files and hashes: 1: AS202301.asa (hash: ft6tQ1rOWUa2YsQRj7uIGgH8Nr6RXCQJpFhPQabkhnM=) 2: 326130623a346530343a33613a3a2f34382d3438203d3e20323032333031.roa (hash: PxM9g8iygtPE0W8UaxD6VQbthErf6scMW5Q5B330XGE=) 3: AS26954.asa (hash: IUsw4dy87IC2cWQmte+pB1I+1bOzvTOC48eoRtPn5iE=) 4: 37322e342e36342e302f32312d3234203d3e20323133383737.roa (hash: 5JuaVyoj7uoMOOuQAfWYB3bD3lyM6lnGctkuEoNIEqE=) 5: 36322e3138322e3139322e302f32312d3234203d3e203432353332.roa (hash: k22wzf+MNF3rdZwWDi2NJmXkW92pMk1IiR0y5N9dN8c=) 6: 5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer (hash: UTtj2AfVN+qJgs0Jtg2lSMG4vd4rZAoAQP7FbKKVJ7M=) 7: 42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl (hash: BPeLuJ3JkYmko8VTHKp1wsYCNj9/3fCg1KxBsNPCqsk=) 8: 326130623a346530373a6234333a3a2f34382d3438203d3e20313937333234.roa (hash: /NicVI9ZA6HI/WOoAhhTorEr85yfvxle9J9tMstWWS8=) 9: 326130623a346530343a3a2f33322d3438203d3e203236393534.roa (hash: F+gO6ZKYcboOFSJKnCm81psNizqbMEENngfXl2NTHEQ=) 10: 3139352e39352e3134392e302f32342d3234203d3e203236393534.roa (hash: wrTYL7mb+1quCshY5bvucyyFtZsLGfBb+j95uYXZhYI=) 11: 326130623a346530343a343966353a3a2f34382d3438203d3e20343032353336.roa (hash: pWY9PAU1e4HYq/0yecEeibEgLvdjkG+Q4SYrRpaltss=) 12: 37322e342e36342e302f32312d3234203d3e20323130353436.roa (hash: 3HoCLBQvrCiDsa8r01UTnlbfabOdnsCU4K+/+QNFf8k=) 13: 37322e342e36342e302f32312d3234203d3e20323135353930.roa (hash: UU1yktOfkcvmH8tNoOrtykdTweA/Ii+eyGWqUS9LW9w=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Oct 2026 12:12:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:90:05:c1:5b:cf:c9:d8:f2:03:c9:36:fd:18:86:9c:0b:8d:67:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42e508fba8960f48071b119accbf57bdbf3a8057 Validity Not Before: Oct 19 10:04:41 2026 GMT Not After : Oct 20 12:12:41 2026 GMT Subject: CN=C971EB588771EF311AF6A9C3E716958C5ED26131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:96:24:3c:ab:a2:6a:83:6c:f2:45:95:1b:d6: 90:55:b4:96:91:d3:34:53:df:87:94:a7:01:36:b0: 01:b9:b2:67:b8:7b:30:63:e5:c7:35:a1:17:6e:05: ca:ec:48:6a:18:82:2a:9c:de:c2:0a:50:9a:e7:67: c5:e1:ae:41:85:15:a8:26:c7:38:55:53:7c:14:ef: bb:4b:cb:05:90:fc:6d:8a:18:b1:13:11:0e:66:47: 6d:63:a7:75:fa:23:c1:cd:a6:d7:5b:a3:44:d2:e3: e1:3b:2c:2a:45:1d:ca:ac:13:44:b6:dd:4a:7d:60: 04:f5:01:51:26:08:b5:f1:ed:97:33:08:d3:b0:00: 60:49:3c:15:38:23:70:a7:d3:27:5e:76:dc:9e:12: a2:a1:59:5a:a9:af:12:cd:f3:fd:87:cf:3a:4a:d4: 2c:6f:f7:f3:be:da:20:bd:00:5f:9e:09:fd:3e:d5: b7:65:54:ee:de:52:20:e0:db:83:a8:2d:da:84:c9: 29:06:fe:ff:1b:86:d4:f3:85:e3:b2:68:e9:27:d8: b8:4e:91:20:36:3c:7d:18:dc:3e:c4:3c:08:ca:f7: 9d:cd:38:ad:34:21:2e:b6:bc:4a:01:22:83:15:fa: 0e:c6:f1:77:c0:88:1d:1b:6f:77:e4:93:2d:56:d5: 58:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:71:EB:58:87:71:EF:31:1A:F6:A9:C3:E7:16:95:8C:5E:D2:61:31 X509v3 Authority Key Identifier: keyid:42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:bd:0e:bf:25:f6:22:3f:8a:21:4c:bd:2e:30:7d:10:80:1a: f2:c6:4e:03:8a:b3:ee:35:f9:43:ca:a6:ce:52:d9:b7:f1:3c: 41:41:93:21:61:77:7a:c8:a2:da:5f:4a:e5:a3:dc:3a:d1:3c: be:7e:75:ea:6c:b3:fb:7f:b2:e9:e2:a0:22:b4:1f:6e:b0:4e: 2c:ab:8a:7a:00:4e:4a:5c:24:53:a2:ad:69:f5:2f:c3:d0:1c: 62:18:09:3c:c4:06:44:48:c9:1b:5b:60:28:8b:57:bc:2b:bd: 5d:74:f8:7c:d3:dc:cf:ae:cf:57:86:a6:20:64:c4:33:b2:27: eb:04:c9:2f:8d:01:92:60:02:d7:ff:23:68:37:e1:41:89:c1: a8:53:73:be:b5:3d:80:de:40:95:2e:04:56:13:fe:78:bf:0b: b4:37:be:48:fa:99:76:87:f1:97:cc:df:f3:33:c6:49:5f:dc: 4f:ad:58:2d:9e:65:16:17:0c:98:81:60:9e:83:73:69:d9:32: 43:f4:a1:0f:bf:df:09:5d:0b:5a:44:3a:c8:ba:d3:2a:78:a2: 67:2a:89:28:e2:b6:77:85:7b:b3:eb:5e:0a:5b:44:1a:35:ed: 32:e2:8c:97:42:b2:1b:91:73:ab:87:bb:ff:4c:ee:64:b0:42: 04:bb:e3:ec -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUKJAFwVvPydjyA8k2/RiGnAuNZ7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJlNTA4ZmJhODk2MGY0ODA3MWIxMTlhY2NiZjU3YmRi ZjNhODA1NzAeFw0yNjEwMTkxMDA0NDFaFw0yNjEwMjAxMjEyNDFaMDMxMTAvBgNV BAMTKEM5NzFFQjU4ODc3MUVGMzExQUY2QTlDM0U3MTY5NThDNUVEMjYxMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVliQ8q6Jqg2zyRZUb1pBVtJaR 0zRT34eUpwE2sAG5sme4ezBj5cc1oRduBcrsSGoYgiqc3sIKUJrnZ8XhrkGFFagm xzhVU3wU77tLywWQ/G2KGLETEQ5mR21jp3X6I8HNptdbo0TS4+E7LCpFHcqsE0S2 3Up9YAT1AVEmCLXx7ZczCNOwAGBJPBU4I3Cn0ydedtyeEqKhWVqprxLN8/2HzzpK 1Cxv9/O+2iC9AF+eCf0+1bdlVO7eUiDg24OoLdqEySkG/v8bhtTzheOyaOkn2LhO kSA2PH0Y3D7EPAjK953NOK00IS62vEoBIoMV+g7G8XfAiB0bb3fkky1W1VhLAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUyXHrWIdx7zEa9qnD5xaVjF7SYTEwHwYDVR0j BBgwFoAUQuUI+6iWD0gHGxGazL9Xvb86gFcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEtOGJhNS00NzlmLWEyMjktMGFiNzBlNDgx NWJiLzAvNDJFNTA4RkJBODk2MEY0ODA3MUIxMTlBQ0NCRjU3QkRCRjNBODA1Ny5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1F1VUktNmlXRDBnSEd4R2F6TDlYdmI4 NmdGYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83M2I4ZWMwMS04 YmE1LTQ3OWYtYTIyOS0wYWI3MGU0ODE1YmIvMC80MkU1MDhGQkE4OTYwRjQ4MDcx QjExOUFDQ0JGNTdCREJGM0E4MDU3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoL0OvyX2Ij+KIUy9LjB9 EIAa8sZOA4qz7jX5Q8qmzlLZt/E8QUGTIWF3esii2l9K5aPcOtE8vn516myz+3+y 6eKgIrQfbrBOLKuKegBOSlwkU6KtafUvw9AcYhgJPMQGREjJG1tgKItXvCu9XXT4 fNPcz67PV4amIGTEM7In6wTJL40BkmAC1/8jaDfhQYnBqFNzvrU9gN5AlS4EVhP+ eL8LtDe+SPqZdofxl8zf8zPGSV/cT61YLZ5lFhcMmIFgnoNzadkyQ/ShD7/fCV0L WkQ6yLrTKniiZyqJKOK2d4V7s+teCltEGjXtMuKMl0KyG5Fzq4e7/0zuZLBCBLvj 7A== -----END CERTIFICATE-----Generated at Tue Oct 20 06:38:41 2026 by rpki-client