$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft File: 42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft (raw, json) Hash identifier: TIsXXkbPU0d34OQ+K+Bagnz6qbgjsAPFlG2X6ovwXF4= Subject key identifier: F3:24:9D:72:6D:B4:48:D6:04:D5:6F:02:43:45:13:43:75:2A:54:CF Authority key identifier: 42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57 Certificate issuer: /CN=42e508fba8960f48071b119accbf57bdbf3a8057 Certificate serial: 5BD3FB06B446BC17E10242C65ACDDCDE2AE6D335 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft Manifest number: 045B Signing time: Mon 26 Oct 2026 02:02:09 +0000 Manifest this update: Mon 26 Oct 2026 01:57:09 +0000 Manifest next update: Tue 27 Oct 2026 04:34:09 +0000 Files and hashes: 1: 326130623a346530373a6234333a3a2f34382d3438203d3e20313937333234.roa (hash: /NicVI9ZA6HI/WOoAhhTorEr85yfvxle9J9tMstWWS8=) 2: 3139352e39352e3134392e302f32342d3234203d3e203236393534.roa (hash: wrTYL7mb+1quCshY5bvucyyFtZsLGfBb+j95uYXZhYI=) 3: 42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl (hash: DqOTJQi9dj7Qj2V65v33+C3Ge8BSB1cwFMfu00rOoRM=) 4: AS202301.asa (hash: ft6tQ1rOWUa2YsQRj7uIGgH8Nr6RXCQJpFhPQabkhnM=) 5: 326130623a346530343a33613a3a2f34382d3438203d3e20323032333031.roa (hash: PxM9g8iygtPE0W8UaxD6VQbthErf6scMW5Q5B330XGE=) 6: 326130623a346530343a3a2f33322d3438203d3e203236393534.roa (hash: F+gO6ZKYcboOFSJKnCm81psNizqbMEENngfXl2NTHEQ=) 7: 37322e342e36342e302f32312d3234203d3e20323133383737.roa (hash: 5JuaVyoj7uoMOOuQAfWYB3bD3lyM6lnGctkuEoNIEqE=) 8: 326130623a346530343a343966353a3a2f34382d3438203d3e20343032353336.roa (hash: pWY9PAU1e4HYq/0yecEeibEgLvdjkG+Q4SYrRpaltss=) 9: 5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer (hash: UTtj2AfVN+qJgs0Jtg2lSMG4vd4rZAoAQP7FbKKVJ7M=) 10: 36322e3138322e3139322e302f32312d3234203d3e203432353332.roa (hash: k22wzf+MNF3rdZwWDi2NJmXkW92pMk1IiR0y5N9dN8c=) 11: 37322e342e36342e302f32312d3234203d3e20323135353930.roa (hash: UU1yktOfkcvmH8tNoOrtykdTweA/Ii+eyGWqUS9LW9w=) 12: AS26954.asa (hash: IUsw4dy87IC2cWQmte+pB1I+1bOzvTOC48eoRtPn5iE=) 13: 37322e342e36342e302f32312d3234203d3e20323130353436.roa (hash: 3HoCLBQvrCiDsa8r01UTnlbfabOdnsCU4K+/+QNFf8k=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Oct 2026 23:31:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:d3:fb:06:b4:46:bc:17:e1:02:42:c6:5a:cd:dc:de:2a:e6:d3:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42e508fba8960f48071b119accbf57bdbf3a8057 Validity Not Before: Oct 26 01:57:09 2026 GMT Not After : Oct 27 04:34:09 2026 GMT Subject: CN=F3249D726DB448D604D56F0243451343752A54CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ad:1f:44:7e:3f:ec:09:f9:b0:38:55:23:97: 8f:bb:75:7d:b4:9f:ae:c0:7b:3c:7c:5e:f2:53:b8: 47:58:c7:61:31:20:9b:2c:5f:4f:d0:39:b3:aa:d7: 58:00:d1:94:21:76:3e:4b:60:03:39:58:59:57:36: b9:c5:89:9d:60:1e:ff:b7:7d:4e:ff:a4:6e:cb:27: 77:90:ce:0d:50:fb:ee:8d:9b:33:de:3b:71:b8:86: ff:10:b1:1f:ca:de:91:f3:5f:02:00:25:bc:1a:cd: 47:39:a6:ac:27:60:53:64:5b:1a:f0:04:05:a6:89: 7b:02:94:6e:a6:62:cb:5b:4d:c9:b6:c3:3c:84:60: a6:32:dd:d5:cb:d5:e3:a8:41:66:24:82:69:1e:3d: ba:57:24:c6:db:71:bd:9c:a8:b4:2f:3f:95:be:8f: 3e:b5:a2:1e:dd:11:98:7b:db:d2:a5:17:f6:05:9c: b5:63:9f:0b:95:43:f1:ca:b5:e0:da:4b:8e:9d:b9: 4d:2d:05:aa:c5:a5:e1:76:e7:82:a6:f3:0a:2c:10: a6:66:59:f1:f2:fc:51:49:17:6e:6d:85:9d:cf:fe: 2f:a5:fb:d8:c8:ab:1a:e8:d2:c0:84:09:b0:71:66: f7:f5:bb:7c:d1:bf:e7:e4:e8:18:71:6c:4d:98:ff: a0:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:24:9D:72:6D:B4:48:D6:04:D5:6F:02:43:45:13:43:75:2A:54:CF X509v3 Authority Key Identifier: keyid:42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:58:d0:45:f9:b0:b7:c0:2f:d5:21:91:4d:62:ef:b1:74:05: 67:08:8d:20:3f:5f:9f:b8:a7:30:a8:e5:fa:97:9f:fd:c8:46: cd:c1:3e:bd:4a:6a:e1:3c:91:4a:dd:ef:ac:c3:f7:1e:d0:0f: a6:cf:fe:3e:ca:ca:98:bb:a4:c3:57:1b:c9:03:31:d9:a6:31: 87:6a:28:f1:da:41:69:14:83:fa:20:e9:2f:ef:bd:c2:02:0c: ee:6f:30:3d:b2:12:51:61:15:a1:29:b4:f8:27:b4:54:62:64: 66:59:3c:f2:bc:be:82:7c:26:34:b8:e1:f0:a9:20:4b:a8:f5: 2b:06:5a:85:b4:99:e2:f6:95:5b:9b:47:ae:9b:be:91:64:03: bf:36:f4:52:a2:7c:b1:09:fe:f4:5a:69:32:c8:51:ac:e2:94: 77:bd:3e:e5:ee:e0:9d:7b:88:18:52:64:cc:5c:8a:db:2e:a5: b3:bf:58:cf:6a:a0:7e:d1:c2:e6:b1:a3:b5:0a:ca:42:c2:d6: 24:14:5f:5a:14:5e:17:39:36:00:d6:91:a2:47:57:a0:f6:77: 9a:1a:47:0b:de:9c:b6:77:69:37:0a:9e:7b:f2:62:0b:21:6d: e4:fa:33:6f:20:30:59:d4:da:3a:b6:55:55:ad:8d:72:09:65: 6e:52:38:63 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUW9P7BrRGvBfhAkLGWs3c3irm0zUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJlNTA4ZmJhODk2MGY0ODA3MWIxMTlhY2NiZjU3YmRi ZjNhODA1NzAeFw0yNjEwMjYwMTU3MDlaFw0yNjEwMjcwNDM0MDlaMDMxMTAvBgNV BAMTKEYzMjQ5RDcyNkRCNDQ4RDYwNEQ1NkYwMjQzNDUxMzQzNzUyQTU0Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJrR9Efj/sCfmwOFUjl4+7dX20 n67Aezx8XvJTuEdYx2ExIJssX0/QObOq11gA0ZQhdj5LYAM5WFlXNrnFiZ1gHv+3 fU7/pG7LJ3eQzg1Q++6NmzPeO3G4hv8QsR/K3pHzXwIAJbwazUc5pqwnYFNkWxrw BAWmiXsClG6mYstbTcm2wzyEYKYy3dXL1eOoQWYkgmkePbpXJMbbcb2cqLQvP5W+ jz61oh7dEZh729KlF/YFnLVjnwuVQ/HKteDaS46duU0tBarFpeF254Km8wosEKZm WfHy/FFJF25thZ3P/i+l+9jIqxro0sCECbBxZvf1u3zRv+fk6BhxbE2Y/6DlAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU8ySdcm20SNYE1W8CQ0UTQ3UqVM8wHwYDVR0j BBgwFoAUQuUI+6iWD0gHGxGazL9Xvb86gFcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEtOGJhNS00NzlmLWEyMjktMGFiNzBlNDgx NWJiLzAvNDJFNTA4RkJBODk2MEY0ODA3MUIxMTlBQ0NCRjU3QkRCRjNBODA1Ny5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1F1VUktNmlXRDBnSEd4R2F6TDlYdmI4 NmdGYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83M2I4ZWMwMS04 YmE1LTQ3OWYtYTIyOS0wYWI3MGU0ODE1YmIvMC80MkU1MDhGQkE4OTYwRjQ4MDcx QjExOUFDQ0JGNTdCREJGM0E4MDU3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfFjQRfmwt8Av1SGRTWLv sXQFZwiNID9fn7inMKjl+pef/chGzcE+vUpq4TyRSt3vrMP3HtAPps/+PsrKmLuk w1cbyQMx2aYxh2oo8dpBaRSD+iDpL++9wgIM7m8wPbISUWEVoSm0+Ce0VGJkZlk8 8ry+gnwmNLjh8KkgS6j1KwZahbSZ4vaVW5tHrpu+kWQDvzb0UqJ8sQn+9FppMshR rOKUd70+5e7gnXuIGFJkzFyK2y6ls79Yz2qgftHC5rGjtQrKQsLWJBRfWhReFzk2 ANaRokdXoPZ3mhpHC96ctndpNwqee/JiCyFt5PozbyAwWdTaOrZVVa2NcgllblI4 Yw== -----END CERTIFICATE-----Generated at Mon Oct 26 08:44:17 2026 by rpki-client