$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft File: 42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft (raw, json) Hash identifier: EqvVRVNIuy7E2UAfGGKQ4jRkmdWd5k0nVIWcSVHo2p0= Subject key identifier: 79:FA:53:22:BB:CD:DA:A1:57:9F:66:1B:81:D4:B3:1A:B5:8B:20:8A Authority key identifier: 42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57 Certificate issuer: /CN=42e508fba8960f48071b119accbf57bdbf3a8057 Certificate serial: 500B514DE1002BF70FE8A098125B215BBCF42629 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft Manifest number: 01CF Signing time: Fri 05 Sep 2025 22:46:17 +0000 Manifest this update: Fri 05 Sep 2025 22:41:17 +0000 Manifest next update: Sun 07 Sep 2025 00:05:17 +0000 Files and hashes: 1: 3139352e39352e3134392e302f32342d3234203d3e203236393534.roa (hash: 4RKcXrOywUF2n3zLGUholuQfQjsDw3jfgXGtm0jfONU=) 2: 5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer (hash: xVnvGBOQAGx7ddcmxacteZKEbUgAqtkW3B5rWiVC4Gw=) 3: 36322e3138322e3139322e302f32312d3234203d3e203432353332.roa (hash: 3uX+IJtCK1auUN/owB303ntI6bBy0+b5ouSYztCnTmQ=) 4: 326130623a346530343a626565663a3a2f34382d3438203d3e203236393534.roa (hash: dXSnrOSsmksjfaruQTR4onccvLxLXawLPmHLDP+0pZ0=) 5: 42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl (hash: gILdHO47F2J3Zx1Jyw+PZo3f6L8YtmGrOv4SXyPEiOs=) 6: 326130623a346530343a3a2f34382d3438203d3e203236393534.roa (hash: kjCVplBQIQWTrk/MT/vsXbIMmP0BY/AuB2NZAKC1i00=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Sep 2025 00:05:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:0b:51:4d:e1:00:2b:f7:0f:e8:a0:98:12:5b:21:5b:bc:f4:26:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42e508fba8960f48071b119accbf57bdbf3a8057 Validity Not Before: Sep 5 22:41:17 2025 GMT Not After : Sep 7 00:05:17 2025 GMT Subject: CN=79FA5322BBCDDAA1579F661B81D4B31AB58B208A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c7:8c:ed:f0:88:fa:53:21:51:fd:99:d7:22: 60:3a:7f:7b:fa:5b:ae:d6:a8:1c:81:f3:93:aa:a7: ab:9e:2b:fb:85:47:74:83:62:0a:f7:09:18:28:36: 8c:4f:3f:89:53:ce:d1:c1:32:60:e2:a1:33:38:ce: 29:31:f6:0d:64:5e:80:70:5f:0a:1b:16:bc:26:e1: 2c:0b:1c:51:19:39:2e:ec:cb:2b:eb:db:3e:e4:fc: 19:57:76:7a:7f:9c:9c:44:70:9a:b9:30:3a:98:3d: fe:44:7e:4d:2f:3b:3f:b2:04:24:09:92:45:c3:b0: ef:f4:b8:45:9c:e9:6b:81:31:fe:8c:cd:ee:9b:a2: 53:4d:34:16:d8:28:bb:8d:1c:7e:48:d6:b7:5b:25: d2:6d:59:bd:e6:2b:fa:1b:f1:dc:cc:7a:ad:d0:3c: 0c:32:4f:45:ee:1b:05:d9:dc:c1:7c:4e:00:a0:3f: 28:e1:0c:43:4a:04:82:b1:5c:bc:f6:52:83:58:49: b5:0f:80:61:a1:9b:fa:ae:9b:67:bd:23:76:69:ac: af:f6:c9:ff:ca:d9:be:ce:9c:d6:e3:f6:9c:84:56: 0d:a2:10:94:75:91:f7:1e:23:d7:e2:04:6e:4f:68: bf:da:d8:72:1a:db:a1:b8:6d:39:12:f5:c7:e7:b1: 47:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:FA:53:22:BB:CD:DA:A1:57:9F:66:1B:81:D4:B3:1A:B5:8B:20:8A X509v3 Authority Key Identifier: keyid:42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:6f:fa:32:2a:ae:f1:b7:f2:ff:ba:74:bc:73:73:ca:e6:ff: a1:be:ff:ac:48:e6:fa:d5:b8:2d:08:50:04:be:53:e1:48:f0: a5:63:58:43:e6:48:eb:5b:d1:89:59:25:6f:d9:02:12:81:a3: 80:48:69:50:56:38:d4:37:f3:c3:d9:72:63:44:d8:06:a1:59: 28:05:ff:ab:7e:ec:80:8c:f7:00:34:98:e2:d3:aa:02:06:44: 99:e5:7c:03:c9:ab:aa:94:2e:36:ad:09:25:b0:d3:48:c8:ca: 45:cc:76:ce:9a:08:21:e6:be:37:b9:f0:8c:c1:c6:e1:43:af: ed:6d:22:d3:49:aa:e5:01:cd:7f:e8:60:17:e9:5c:22:b8:36: 6c:c2:af:51:f5:f0:96:fd:e5:3e:b2:4a:d1:44:e7:69:fc:f2: 2a:a0:20:ba:46:dc:9a:2e:84:e0:76:32:7a:45:9c:59:fa:99: 75:cb:79:ed:66:fb:bb:1d:78:6c:25:75:fb:19:18:94:9c:30: 2c:0e:0b:fa:cd:e0:f9:29:39:a6:3b:14:52:87:1d:00:11:0d: 87:e3:ad:bc:87:3c:f8:1a:11:e1:fc:b8:f1:7b:eb:98:1f:53: 13:70:7f:0a:9f:25:51:e9:f6:29:36:eb:78:4c:b6:2c:67:2a: 3d:a9:a8:ec -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUUAtRTeEAK/cP6KCYElshW7z0JikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJlNTA4ZmJhODk2MGY0ODA3MWIxMTlhY2NiZjU3YmRi ZjNhODA1NzAeFw0yNTA5MDUyMjQxMTdaFw0yNTA5MDcwMDA1MTdaMDMxMTAvBgNV BAMTKDc5RkE1MzIyQkJDRERBQTE1NzlGNjYxQjgxRDRCMzFBQjU4QjIwOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIx4zt8Ij6UyFR/ZnXImA6f3v6 W67WqByB85Oqp6ueK/uFR3SDYgr3CRgoNoxPP4lTztHBMmDioTM4zikx9g1kXoBw XwobFrwm4SwLHFEZOS7syyvr2z7k/BlXdnp/nJxEcJq5MDqYPf5Efk0vOz+yBCQJ kkXDsO/0uEWc6WuBMf6Mze6bolNNNBbYKLuNHH5I1rdbJdJtWb3mK/ob8dzMeq3Q PAwyT0XuGwXZ3MF8TgCgPyjhDENKBIKxXLz2UoNYSbUPgGGhm/qum2e9I3ZprK/2 yf/K2b7OnNbj9pyEVg2iEJR1kfceI9fiBG5PaL/a2HIa26G4bTkS9cfnsUdjAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUefpTIrvN2qFXn2YbgdSzGrWLIIowHwYDVR0j BBgwFoAUQuUI+6iWD0gHGxGazL9Xvb86gFcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEtOGJhNS00NzlmLWEyMjktMGFiNzBlNDgx NWJiLzAvNDJFNTA4RkJBODk2MEY0ODA3MUIxMTlBQ0NCRjU3QkRCRjNBODA1Ny5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1F1VUktNmlXRDBnSEd4R2F6TDlYdmI4 NmdGYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83M2I4ZWMwMS04 YmE1LTQ3OWYtYTIyOS0wYWI3MGU0ODE1YmIvMC80MkU1MDhGQkE4OTYwRjQ4MDcx QjExOUFDQ0JGNTdCREJGM0E4MDU3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhG/6Miqu8bfy/7p0vHNz yub/ob7/rEjm+tW4LQhQBL5T4UjwpWNYQ+ZI61vRiVklb9kCEoGjgEhpUFY41Dfz w9lyY0TYBqFZKAX/q37sgIz3ADSY4tOqAgZEmeV8A8mrqpQuNq0JJbDTSMjKRcx2 zpoIIea+N7nwjMHG4UOv7W0i00mq5QHNf+hgF+lcIrg2bMKvUfXwlv3lPrJK0UTn afzyKqAgukbcmi6E4HYyekWcWfqZdct57Wb7ux14bCV1+xkYlJwwLA4L+s3g+Sk5 pjsUUocdABENh+OtvIc8+BoR4fy48XvrmB9TE3B/Cp8lUen2KTbreEy2LGcqPamo 7A== -----END CERTIFICATE-----Generated at Sat Sep 6 12:46:03 2025 by rpki-client