$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft File: 42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft (raw, json) Hash identifier: DOGzQADuubet+SbzMZsI95TacRiaBDwe7SGSGnuksPk= Subject key identifier: 9D:78:7C:71:55:F6:9E:0E:CB:7F:28:59:0D:6A:69:08:C3:45:EA:29 Authority key identifier: 42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57 Certificate issuer: /CN=42e508fba8960f48071b119accbf57bdbf3a8057 Certificate serial: 7DE7B623CC35A124769D0AA41C156FCA0FAAA1CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft Manifest number: 0412 Signing time: Fri 04 Sep 2026 12:56:20 +0000 Manifest this update: Fri 04 Sep 2026 12:51:20 +0000 Manifest next update: Sat 05 Sep 2026 15:36:20 +0000 Files and hashes: 1: 326130623a346530343a3a2f33322d3438203d3e203236393534.roa (hash: F+gO6ZKYcboOFSJKnCm81psNizqbMEENngfXl2NTHEQ=) 2: 42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl (hash: wYYu+0HcmT0/2fexCaeAJxyqHEVnNjJUBbsr7PfKD28=) 3: 3139352e39352e3134392e302f32342d3234203d3e203236393534.roa (hash: wrTYL7mb+1quCshY5bvucyyFtZsLGfBb+j95uYXZhYI=) 4: 5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer (hash: 7Yk5Fa7dW7PqFIWz+JTHUzT2CgBK3TJt4ZSA787OGq4=) 5: 36322e3138322e3139322e302f32312d3234203d3e203432353332.roa (hash: k22wzf+MNF3rdZwWDi2NJmXkW92pMk1IiR0y5N9dN8c=) 6: 326130623a346530373a6234333a3a2f34382d3438203d3e20313937333234.roa (hash: /NicVI9ZA6HI/WOoAhhTorEr85yfvxle9J9tMstWWS8=) 7: 326130623a346530343a343966353a3a2f34382d3438203d3e20343032353336.roa (hash: pWY9PAU1e4HYq/0yecEeibEgLvdjkG+Q4SYrRpaltss=) 8: AS202301.asa (hash: ft6tQ1rOWUa2YsQRj7uIGgH8Nr6RXCQJpFhPQabkhnM=) 9: 326130623a346530343a33613a3a2f34382d3438203d3e20323032333031.roa (hash: PxM9g8iygtPE0W8UaxD6VQbthErf6scMW5Q5B330XGE=) 10: AS26954.asa (hash: IUsw4dy87IC2cWQmte+pB1I+1bOzvTOC48eoRtPn5iE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 15:36:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:e7:b6:23:cc:35:a1:24:76:9d:0a:a4:1c:15:6f:ca:0f:aa:a1:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42e508fba8960f48071b119accbf57bdbf3a8057 Validity Not Before: Sep 4 12:51:20 2026 GMT Not After : Sep 5 15:36:20 2026 GMT Subject: CN=9D787C7155F69E0ECB7F28590D6A6908C345EA29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b6:cc:dd:4a:df:db:c0:be:12:a5:bd:0b:20: 94:a4:7c:bd:be:d0:86:37:fd:ce:07:3a:4c:c9:4d: b3:ac:b1:94:81:93:0f:4f:c8:d3:c2:30:3d:14:e1: b6:38:d9:09:a0:9a:9a:b3:5d:38:55:0c:fe:67:6e: c6:75:42:f3:05:1c:f3:a8:fb:d5:e8:78:6d:ce:69: 1f:d3:8a:9c:48:ab:3e:44:4f:e6:b2:35:05:b9:7e: a5:5d:aa:c0:46:1f:51:5d:82:2f:78:77:b7:36:25: cf:ce:66:e1:1e:94:bd:78:0d:ea:8e:e0:40:11:4f: cc:b6:ae:8b:b3:1d:6e:0c:82:2d:8f:49:b5:d3:d5: 02:7b:53:79:f7:37:5a:ef:89:cd:82:32:b4:51:5f: ca:69:70:0b:92:64:57:5c:52:d8:1b:7a:f4:a2:a8: bb:8d:1a:51:dc:2a:4b:1e:37:9f:62:71:ee:80:14: f6:d4:8e:68:01:10:bd:66:73:a6:12:e9:b5:a5:94: 18:83:bf:96:ea:9f:74:8d:0f:63:78:f2:e9:6d:88: bc:5c:c7:13:ef:5c:e1:a5:1b:41:2f:a1:2d:0e:63: 54:40:d8:4d:de:11:13:36:b4:79:20:d8:43:91:71: 3a:fa:04:d7:47:b4:41:f1:57:7a:1d:5e:f0:be:23: b3:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:78:7C:71:55:F6:9E:0E:CB:7F:28:59:0D:6A:69:08:C3:45:EA:29 X509v3 Authority Key Identifier: keyid:42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:70:22:19:8c:0c:27:99:4f:95:07:60:31:a8:15:84:0f:a3: 6d:cf:65:3d:d1:30:0c:30:bb:ca:1c:b6:4e:e8:30:8a:e6:63: a3:b0:4a:4f:87:83:cd:63:fe:a9:fc:3a:4c:83:17:b9:9a:82: 8a:79:87:a3:4a:d1:1b:84:a4:c7:d0:d5:98:a3:3a:bb:b9:ca: 2e:62:4d:b4:e1:91:6b:41:66:bf:85:4e:ac:ec:35:b6:9c:f7: c1:73:ed:54:46:a6:3c:b0:3b:f3:2c:f4:21:d2:f0:ea:aa:29: 2d:6e:dc:20:c5:14:17:39:53:5f:f2:90:7d:3c:b5:f0:ee:b7: f2:cf:58:22:66:9c:c2:b5:c4:80:52:ac:ae:b5:db:68:cf:51: a9:59:ba:dd:ea:31:29:24:69:c3:79:57:69:84:e1:50:a9:a2: 5e:95:0a:a6:7f:6c:e0:74:4b:91:8e:02:f8:30:11:ff:96:ce: 47:f2:11:69:51:ac:ee:70:15:b6:ce:33:8b:b8:f8:a4:fe:c1: dd:bf:86:7f:69:ea:83:fd:c2:d8:03:c0:71:70:11:55:6d:17: 50:8e:33:8c:93:be:e4:be:66:98:69:af:5e:dd:de:b6:bf:1e: 09:9a:f5:db:ce:01:70:94:a5:34:8f:09:6c:b6:a8:80:3a:0d: 1c:3a:29:1b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUfee2I8w1oSR2nQqkHBVvyg+qocswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJlNTA4ZmJhODk2MGY0ODA3MWIxMTlhY2NiZjU3YmRi ZjNhODA1NzAeFw0yNjA5MDQxMjUxMjBaFw0yNjA5MDUxNTM2MjBaMDMxMTAvBgNV BAMTKDlENzg3QzcxNTVGNjlFMEVDQjdGMjg1OTBENkE2OTA4QzM0NUVBMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDItszdSt/bwL4Spb0LIJSkfL2+ 0IY3/c4HOkzJTbOssZSBkw9PyNPCMD0U4bY42QmgmpqzXThVDP5nbsZ1QvMFHPOo +9XoeG3OaR/TipxIqz5ET+ayNQW5fqVdqsBGH1Fdgi94d7c2Jc/OZuEelL14DeqO 4EART8y2rouzHW4Mgi2PSbXT1QJ7U3n3N1rvic2CMrRRX8ppcAuSZFdcUtgbevSi qLuNGlHcKkseN59ice6AFPbUjmgBEL1mc6YS6bWllBiDv5bqn3SND2N48ultiLxc xxPvXOGlG0EvoS0OY1RA2E3eERM2tHkg2EORcTr6BNdHtEHxV3odXvC+I7NVAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUnXh8cVX2ng7LfyhZDWppCMNF6ikwHwYDVR0j BBgwFoAUQuUI+6iWD0gHGxGazL9Xvb86gFcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEtOGJhNS00NzlmLWEyMjktMGFiNzBlNDgx NWJiLzAvNDJFNTA4RkJBODk2MEY0ODA3MUIxMTlBQ0NCRjU3QkRCRjNBODA1Ny5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1F1VUktNmlXRDBnSEd4R2F6TDlYdmI4 NmdGYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83M2I4ZWMwMS04 YmE1LTQ3OWYtYTIyOS0wYWI3MGU0ODE1YmIvMC80MkU1MDhGQkE4OTYwRjQ4MDcx QjExOUFDQ0JGNTdCREJGM0E4MDU3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADHAiGYwMJ5lPlQdgMagV hA+jbc9lPdEwDDC7yhy2TugwiuZjo7BKT4eDzWP+qfw6TIMXuZqCinmHo0rRG4Sk x9DVmKM6u7nKLmJNtOGRa0Fmv4VOrOw1tpz3wXPtVEamPLA78yz0IdLw6qopLW7c IMUUFzlTX/KQfTy18O638s9YImacwrXEgFKsrrXbaM9RqVm63eoxKSRpw3lXaYTh UKmiXpUKpn9s4HRLkY4C+DAR/5bOR/IRaVGs7nAVts4zi7j4pP7B3b+Gf2nqg/3C 2APAcXARVW0XUI4zjJO+5L5mmGmvXt3etr8eCZr1284BcJSlNI8JbLaogDoNHDop Gw== -----END CERTIFICATE-----Generated at Fri Sep 4 21:50:26 2026 by rpki-client