$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft File: 42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft (raw, json) Hash identifier: w67eO89G9I+vAXqxWDQZa0UyMXGxdZo5gw0TAZZhKn4= Subject key identifier: B8:8E:00:62:9B:94:01:DE:BA:6A:0D:66:F4:57:38:E5:8B:52:C9:6A Authority key identifier: 42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57 Certificate issuer: /CN=42e508fba8960f48071b119accbf57bdbf3a8057 Certificate serial: 5385F653F1C75E6DE4DB96FD2888283DD1FDAA75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft Manifest number: 03C4 Signing time: Tue 21 Jul 2026 10:17:20 +0000 Manifest this update: Tue 21 Jul 2026 10:12:20 +0000 Manifest next update: Wed 22 Jul 2026 12:44:20 +0000 Files and hashes: 1: AS26954.asa (hash: GJbuxOOIwYdyKeNuY3ueZtcbp7hkyah5TRoeVRKV13c=) 2: 326130623a346530343a343966353a3a2f34382d3438203d3e20343032353336.roa (hash: pWY9PAU1e4HYq/0yecEeibEgLvdjkG+Q4SYrRpaltss=) 3: 326130623a346530373a6234333a3a2f34382d3438203d3e20313937333234.roa (hash: /NicVI9ZA6HI/WOoAhhTorEr85yfvxle9J9tMstWWS8=) 4: AS202301.asa (hash: ft6tQ1rOWUa2YsQRj7uIGgH8Nr6RXCQJpFhPQabkhnM=) 5: 326130623a346530343a33613a3a2f34382d3438203d3e20323032333031.roa (hash: PxM9g8iygtPE0W8UaxD6VQbthErf6scMW5Q5B330XGE=) 6: 36322e3138322e3139322e302f32312d3234203d3e203432353332.roa (hash: k22wzf+MNF3rdZwWDi2NJmXkW92pMk1IiR0y5N9dN8c=) 7: 3139352e39352e3134392e302f32342d3234203d3e203236393534.roa (hash: wrTYL7mb+1quCshY5bvucyyFtZsLGfBb+j95uYXZhYI=) 8: 42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl (hash: n2kwNup9vZDol6LI/hH1W5dacfJHnSD8cRxLca9okyQ=) 9: 326130623a346530343a3a2f33322d3438203d3e203236393534.roa (hash: F+gO6ZKYcboOFSJKnCm81psNizqbMEENngfXl2NTHEQ=) 10: 5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer (hash: d4vahFWbuIkxryK9nPDLQbAnhJ/qnY5xdR/sQuscLvM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 12:44:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:85:f6:53:f1:c7:5e:6d:e4:db:96:fd:28:88:28:3d:d1:fd:aa:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42e508fba8960f48071b119accbf57bdbf3a8057 Validity Not Before: Jul 21 10:12:20 2026 GMT Not After : Jul 22 12:44:20 2026 GMT Subject: CN=B88E00629B9401DEBA6A0D66F45738E58B52C96A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:38:73:0d:2f:7f:61:a0:c6:9e:ec:d6:06:1a: 0a:5d:cf:80:80:ad:2c:fb:a8:28:a9:4f:3f:5d:21: ef:10:0d:1c:9e:69:7c:bb:b3:8a:2a:74:6e:63:55: 9f:eb:b9:59:be:e2:ee:52:e2:ca:df:d7:05:fc:dc: 44:89:53:9d:e9:a2:02:fc:29:d7:43:b1:5e:87:80: 1d:cd:95:65:68:1b:b1:dc:cf:cc:28:39:ba:9e:ab: 33:c0:45:f4:a0:e3:11:d4:56:d3:1b:50:04:81:7d: 01:34:fc:85:1d:dc:e1:41:76:c3:7d:7e:92:35:3a: 67:7f:14:3b:f9:c6:37:b6:53:7d:c6:98:42:01:96: b6:a3:c5:dc:34:aa:55:d0:18:71:3d:18:25:a6:3b: 54:27:c9:6d:1d:61:4d:f7:83:f4:81:e8:6a:d2:90: 61:a5:6c:18:26:14:33:d9:6f:bf:4f:c4:aa:ec:de: b7:09:bb:59:31:22:43:9f:0f:a1:81:dc:ca:d3:a4: 1c:47:4e:93:82:61:6f:93:9c:b4:9a:b6:13:ee:4a: 8c:44:be:47:85:80:3a:f0:85:04:b1:74:c1:e9:d6: f2:8b:2c:d6:34:46:e1:6b:0c:89:da:66:f2:ed:58: dc:b5:46:0d:8c:1b:ee:5f:89:89:82:b6:fa:66:01: b9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:8E:00:62:9B:94:01:DE:BA:6A:0D:66:F4:57:38:E5:8B:52:C9:6A X509v3 Authority Key Identifier: keyid:42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:34:2b:fc:0c:cb:31:3f:6f:fc:4d:0b:82:3a:d9:27:ec:c0: 0f:d1:2e:a1:56:cd:f6:21:17:42:8a:d4:3f:9c:b8:16:5a:0d: 7f:23:ee:12:33:09:2b:8c:d9:2c:ed:a0:39:80:b8:40:45:40: f2:99:cd:16:08:41:8c:97:42:c3:54:6d:d5:0c:63:c2:3d:92: 76:34:cc:f3:d2:a4:71:5a:cd:21:1a:57:c7:bd:00:ca:26:d5: 38:86:69:58:5b:d0:37:7d:1b:9e:68:77:aa:8f:80:89:5c:bb: 12:81:89:11:a5:59:e8:82:bb:73:ce:b6:69:af:96:6b:87:5d: 93:55:b8:d3:7d:78:d1:7f:57:45:9f:57:8d:cf:3c:6a:12:94: 51:35:ed:24:2c:91:b3:4d:aa:f8:e8:ce:4d:9f:dd:8f:5b:81: f1:f8:46:d2:b5:75:ab:35:0c:c7:1f:46:43:ee:e3:2b:6e:bb: f1:b3:56:ec:5a:6e:9f:73:6a:2f:7f:b9:fa:12:ea:7c:f0:4c: 23:35:e8:e9:03:fe:c0:c6:24:c5:4b:28:12:d2:9f:12:f1:55: 1a:8e:c9:bf:08:3b:ea:2a:95:8b:c9:09:be:54:ab:61:dc:7b: 83:65:a8:25:ae:e7:fd:cd:72:25:18:34:8a:0d:a9:4b:e5:b3: cf:7a:c7:44 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUU4X2U/HHXm3k25b9KIgoPdH9qnUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJlNTA4ZmJhODk2MGY0ODA3MWIxMTlhY2NiZjU3YmRi ZjNhODA1NzAeFw0yNjA3MjExMDEyMjBaFw0yNjA3MjIxMjQ0MjBaMDMxMTAvBgNV BAMTKEI4OEUwMDYyOUI5NDAxREVCQTZBMEQ2NkY0NTczOEU1OEI1MkM5NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkOHMNL39hoMae7NYGGgpdz4CA rSz7qCipTz9dIe8QDRyeaXy7s4oqdG5jVZ/ruVm+4u5S4srf1wX83ESJU53pogL8 KddDsV6HgB3NlWVoG7Hcz8woObqeqzPARfSg4xHUVtMbUASBfQE0/IUd3OFBdsN9 fpI1Omd/FDv5xje2U33GmEIBlrajxdw0qlXQGHE9GCWmO1QnyW0dYU33g/SB6GrS kGGlbBgmFDPZb79PxKrs3rcJu1kxIkOfD6GB3MrTpBxHTpOCYW+TnLSathPuSoxE vkeFgDrwhQSxdMHp1vKLLNY0RuFrDInaZvLtWNy1Rg2MG+5fiYmCtvpmAbmjAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUuI4AYpuUAd66ag1m9Fc45YtSyWowHwYDVR0j BBgwFoAUQuUI+6iWD0gHGxGazL9Xvb86gFcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEtOGJhNS00NzlmLWEyMjktMGFiNzBlNDgx NWJiLzAvNDJFNTA4RkJBODk2MEY0ODA3MUIxMTlBQ0NCRjU3QkRCRjNBODA1Ny5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1F1VUktNmlXRDBnSEd4R2F6TDlYdmI4 NmdGYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83M2I4ZWMwMS04 YmE1LTQ3OWYtYTIyOS0wYWI3MGU0ODE1YmIvMC80MkU1MDhGQkE4OTYwRjQ4MDcx QjExOUFDQ0JGNTdCREJGM0E4MDU3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhTQr/AzLMT9v/E0LgjrZ J+zAD9EuoVbN9iEXQorUP5y4FloNfyPuEjMJK4zZLO2gOYC4QEVA8pnNFghBjJdC w1Rt1Qxjwj2SdjTM89KkcVrNIRpXx70AyibVOIZpWFvQN30bnmh3qo+AiVy7EoGJ EaVZ6IK7c862aa+Wa4ddk1W403140X9XRZ9Xjc88ahKUUTXtJCyRs02q+OjOTZ/d j1uB8fhG0rV1qzUMxx9GQ+7jK2678bNW7Fpun3NqL3+5+hLqfPBMIzXo6QP+wMYk xUsoEtKfEvFVGo7Jvwg76iqVi8kJvlSrYdx7g2WoJa7n/c1yJRg0ig2pS+Wzz3rH RA== -----END CERTIFICATE-----Generated at Tue Jul 21 20:32:05 2026 by rpki-client