$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft File: 42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft (raw, json) Hash identifier: IiCrus/uLf29zOeDuB6aek1FkY+y/FidbzNPyRz9OM0= Subject key identifier: C9:40:0E:8D:B9:07:C7:9A:C4:7E:64:E5:6F:14:49:D1:18:CE:BA:63 Authority key identifier: 42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57 Certificate issuer: /CN=42e508fba8960f48071b119accbf57bdbf3a8057 Certificate serial: 14DC16E65FB3FDD13E077C6BB30E14E1EC7EF22F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft Manifest number: 02C6 Signing time: Sat 07 Mar 2026 03:14:41 +0000 Manifest this update: Sat 07 Mar 2026 03:09:41 +0000 Manifest next update: Sun 08 Mar 2026 06:38:41 +0000 Files and hashes: 1: 36322e3138322e3139322e302f32312d3234203d3e203432353332.roa (hash: 3uX+IJtCK1auUN/owB303ntI6bBy0+b5ouSYztCnTmQ=) 2: 326130623a346530343a626565663a3a2f34382d3438203d3e203236393534.roa (hash: dXSnrOSsmksjfaruQTR4onccvLxLXawLPmHLDP+0pZ0=) 3: 3139352e39352e3134392e302f32342d3234203d3e203331383938.roa (hash: nIlM4wp0iNBT5SN8C9VsrwDGSOsVnjaNLplEtHDOmPI=) 4: 42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl (hash: kH2Z0AezHNVFswUw1PUsJSZNWxwooJ54M1kGRmyYMgg=) 5: 326130623a346530343a646561643a3a2f34382d3438203d3e203236393534.roa (hash: baWQi1OtzFs3EXfopwYbyPRpvtk3lpDNhJaB1/yO3UE=) 6: 326130623a346530343a3a2f34382d3438203d3e203236393534.roa (hash: kjCVplBQIQWTrk/MT/vsXbIMmP0BY/AuB2NZAKC1i00=) 7: 326130623a346530343a646561643a3a2f34382d3438203d3e203331383938.roa (hash: V5g1oVVpactG3mKu8PF61hy91x6gtyEU1mTZQLj69yk=) 8: 3139352e39352e3134392e302f32342d3234203d3e203236393534.roa (hash: 4RKcXrOywUF2n3zLGUholuQfQjsDw3jfgXGtm0jfONU=) 9: 5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer (hash: xVnvGBOQAGx7ddcmxacteZKEbUgAqtkW3B5rWiVC4Gw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Mar 2026 00:30:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:dc:16:e6:5f:b3:fd:d1:3e:07:7c:6b:b3:0e:14:e1:ec:7e:f2:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42e508fba8960f48071b119accbf57bdbf3a8057 Validity Not Before: Mar 7 03:09:41 2026 GMT Not After : Mar 8 06:38:41 2026 GMT Subject: CN=C9400E8DB907C79AC47E64E56F1449D118CEBA63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:01:02:a6:73:6d:ba:7c:db:e8:63:d1:8d:30: 98:7f:8b:e9:a1:8a:bb:3c:ae:74:1d:7b:b4:d7:1a: 75:3d:5f:33:2b:3a:b9:7f:95:03:0d:50:87:5e:c7: 55:3b:cf:34:56:22:de:7c:49:dd:72:c4:86:55:98: e9:c7:a6:d5:f8:74:e7:16:d3:8e:24:9f:9d:73:f9: 80:a7:ed:5e:4b:81:4c:96:ef:5e:3c:42:1e:03:5b: 29:e9:f8:b5:30:b6:d1:1d:92:40:a9:d1:21:3a:55: af:f6:f7:9e:ee:30:f3:2c:96:2d:37:8a:4e:56:18: 55:35:45:a0:98:9d:1f:e1:a4:ae:fa:e7:25:ce:f8: 1a:b4:16:5e:ad:bd:e5:0b:9c:58:4a:ce:68:0f:6b: dd:ef:ea:bf:d7:8c:9a:d6:dc:72:83:94:5e:10:67: 80:88:5c:3f:e1:ad:c9:37:06:fa:c7:06:bd:41:cd: 0b:1d:b3:64:fb:e9:5a:d8:a7:67:01:9a:84:58:e1: a9:ee:91:d0:fe:57:c5:e1:a4:fd:4a:b6:a6:ae:b8: c8:7e:5d:a7:ef:04:c5:c8:3a:15:e4:c3:58:e9:35: 49:ea:7a:e9:9d:29:a6:a3:4d:bb:bc:15:96:67:ea: 69:4d:4b:59:15:40:88:05:f4:23:2e:ad:5a:df:af: bf:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:40:0E:8D:B9:07:C7:9A:C4:7E:64:E5:6F:14:49:D1:18:CE:BA:63 X509v3 Authority Key Identifier: keyid:42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:9d:87:a1:23:81:c7:79:92:de:68:bf:76:d3:16:b9:b6:f9: 6e:c7:cc:25:b4:f4:54:a1:9b:2e:1a:3d:99:25:54:21:a8:18: f4:34:aa:26:6b:d3:97:ee:2c:73:69:7c:a7:fd:f7:9b:e1:80: 99:dc:1c:f7:95:4a:e5:d8:28:f4:a5:bc:22:6b:a7:32:16:91: d6:a3:73:3d:1a:b4:46:aa:1f:8e:b0:ca:b9:0e:54:04:4c:0d: cd:5e:0a:97:87:3b:74:a8:52:6d:32:a1:bf:39:c5:f3:9c:c4: f1:e1:27:97:28:80:b6:cc:46:07:10:9e:36:cf:b9:3a:e3:55: 4f:f0:37:51:0b:ab:e5:ac:7a:07:2a:00:7c:77:61:95:48:6d: 88:79:b4:db:ce:c6:02:95:66:ed:78:c1:25:ff:5e:a0:05:b6: e2:e2:2e:7c:7f:b5:75:d8:65:4d:18:61:d2:3a:c0:e4:79:b1: fb:63:dc:00:ab:90:cf:69:3c:40:ef:24:b8:2d:36:5e:cb:33: ff:f5:f7:8a:ad:51:47:06:27:75:16:69:4d:49:36:2a:17:19: 08:04:5f:cd:10:cc:07:da:37:cf:f7:35:db:1d:4f:88:45:3c: 90:82:7d:02:96:2f:b0:d4:76:54:30:9b:7b:37:55:52:25:a0: a2:13:8d:be -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUFNwW5l+z/dE+B3xrsw4U4ex+8i8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJlNTA4ZmJhODk2MGY0ODA3MWIxMTlhY2NiZjU3YmRi ZjNhODA1NzAeFw0yNjAzMDcwMzA5NDFaFw0yNjAzMDgwNjM4NDFaMDMxMTAvBgNV BAMTKEM5NDAwRThEQjkwN0M3OUFDNDdFNjRFNTZGMTQ0OUQxMThDRUJBNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNAQKmc226fNvoY9GNMJh/i+mh irs8rnQde7TXGnU9XzMrOrl/lQMNUIdex1U7zzRWIt58Sd1yxIZVmOnHptX4dOcW 044kn51z+YCn7V5LgUyW7148Qh4DWynp+LUwttEdkkCp0SE6Va/2957uMPMsli03 ik5WGFU1RaCYnR/hpK765yXO+Bq0Fl6tveULnFhKzmgPa93v6r/XjJrW3HKDlF4Q Z4CIXD/hrck3BvrHBr1BzQsds2T76VrYp2cBmoRY4anukdD+V8XhpP1KtqauuMh+ XafvBMXIOhXkw1jpNUnqeumdKaajTbu8FZZn6mlNS1kVQIgF9CMurVrfr7+rAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUyUAOjbkHx5rEfmTlbxRJ0RjOumMwHwYDVR0j BBgwFoAUQuUI+6iWD0gHGxGazL9Xvb86gFcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEtOGJhNS00NzlmLWEyMjktMGFiNzBlNDgx NWJiLzAvNDJFNTA4RkJBODk2MEY0ODA3MUIxMTlBQ0NCRjU3QkRCRjNBODA1Ny5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1F1VUktNmlXRDBnSEd4R2F6TDlYdmI4 NmdGYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83M2I4ZWMwMS04 YmE1LTQ3OWYtYTIyOS0wYWI3MGU0ODE1YmIvMC80MkU1MDhGQkE4OTYwRjQ4MDcx QjExOUFDQ0JGNTdCREJGM0E4MDU3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi52HoSOBx3mS3mi/dtMW ubb5bsfMJbT0VKGbLho9mSVUIagY9DSqJmvTl+4sc2l8p/33m+GAmdwc95VK5dgo 9KW8ImunMhaR1qNzPRq0RqofjrDKuQ5UBEwNzV4Kl4c7dKhSbTKhvznF85zE8eEn lyiAtsxGBxCeNs+5OuNVT/A3UQur5ax6ByoAfHdhlUhtiHm0287GApVm7XjBJf9e oAW24uIufH+1ddhlTRhh0jrA5Hmx+2PcAKuQz2k8QO8kuC02Xssz//X3iq1RRwYn dRZpTUk2KhcZCARfzRDMB9o3z/c12x1PiEU8kIJ9ApYvsNR2VDCbezdVUiWgohON vg== -----END CERTIFICATE-----Generated at Sat Mar 7 06:27:10 2026 by rpki-client