$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft File: 42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft (raw, json) Hash identifier: /qU9ExZieOwO1uItGCYoPwJymToeSLQZ/H1c93+BkoM= Subject key identifier: E0:B6:6F:7E:57:84:78:07:BF:61:89:B0:E1:1F:A7:A8:8F:5B:1D:BA Authority key identifier: 42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57 Certificate issuer: /CN=42e508fba8960f48071b119accbf57bdbf3a8057 Certificate serial: 7D84FFE81DF0BE26EF69A644ACBC7632DE494CA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft Manifest number: 020D Signing time: Tue 21 Oct 2025 15:33:32 +0000 Manifest this update: Tue 21 Oct 2025 15:28:32 +0000 Manifest next update: Wed 22 Oct 2025 15:47:32 +0000 Files and hashes: 1: 36322e3138322e3139322e302f32312d3234203d3e203432353332.roa (hash: 3uX+IJtCK1auUN/owB303ntI6bBy0+b5ouSYztCnTmQ=) 2: 3139352e39352e3134392e302f32342d3234203d3e203236393534.roa (hash: 4RKcXrOywUF2n3zLGUholuQfQjsDw3jfgXGtm0jfONU=) 3: 5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer (hash: xVnvGBOQAGx7ddcmxacteZKEbUgAqtkW3B5rWiVC4Gw=) 4: 326130623a346530343a626565663a3a2f34382d3438203d3e203236393534.roa (hash: dXSnrOSsmksjfaruQTR4onccvLxLXawLPmHLDP+0pZ0=) 5: 42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl (hash: vYT6B7gzakARTKn2hFpSJpCGj7TUaH0+XsZjTqNXkSI=) 6: 326130623a346530343a3a2f34382d3438203d3e203236393534.roa (hash: kjCVplBQIQWTrk/MT/vsXbIMmP0BY/AuB2NZAKC1i00=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Oct 2025 15:47:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:84:ff:e8:1d:f0:be:26:ef:69:a6:44:ac:bc:76:32:de:49:4c:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42e508fba8960f48071b119accbf57bdbf3a8057 Validity Not Before: Oct 21 15:28:32 2025 GMT Not After : Oct 22 15:47:32 2025 GMT Subject: CN=E0B66F7E57847807BF6189B0E11FA7A88F5B1DBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:5a:e3:37:d1:63:20:1c:d0:43:c8:71:9e:2e: 79:c0:eb:b4:75:9c:c8:09:6c:89:52:69:b1:73:c6: 2f:9e:56:ff:50:65:92:af:7e:f9:b2:c7:da:57:fa: d3:b2:02:d2:53:de:22:01:cc:05:68:18:63:f3:67: 64:fd:a1:d1:7b:16:6b:3e:b8:5c:90:53:84:a1:a0: 4d:df:3a:ae:c5:35:99:a1:17:20:6d:fb:aa:6f:d5: d4:4e:c4:58:68:55:f8:fa:e7:16:ef:0f:bc:d7:f4: 37:cf:a7:32:94:0f:aa:03:ea:1e:7b:b3:17:88:21: 28:fc:8a:7f:8a:f3:c5:84:da:75:21:58:a5:83:0c: 4b:c6:35:a4:f3:00:09:f0:ee:5c:ae:6f:7f:14:83: 2c:29:5a:bf:e2:6f:c6:3a:95:71:50:cd:af:cf:8b: 05:fd:f7:dc:34:b8:8f:c1:98:a3:cd:4e:ef:ba:f0: 33:64:60:99:71:5e:89:6d:34:1e:85:9b:dd:92:3c: ca:45:15:dd:37:dd:7f:91:bf:b8:e3:62:ea:b2:62: 0d:bb:a8:86:ec:70:0d:4c:fd:e0:ef:66:22:26:6e: 03:fb:a6:76:af:be:ea:c6:49:cf:df:bc:36:e9:75: 53:55:e4:30:91:40:59:5b:fa:23:66:02:94:27:21: 53:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:B6:6F:7E:57:84:78:07:BF:61:89:B0:E1:1F:A7:A8:8F:5B:1D:BA X509v3 Authority Key Identifier: keyid:42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:a1:60:d0:75:ed:be:77:03:67:a1:a9:3b:34:6c:62:85:e0: 59:68:90:a5:ce:f6:6c:15:89:d4:09:c2:5f:d4:05:09:3e:25: 87:1c:cb:66:71:7b:43:6b:68:e1:0d:44:fb:0f:34:26:33:5a: 6e:83:62:83:6d:81:a6:31:45:89:62:eb:69:19:d3:9c:12:cc: ee:1b:86:81:d5:c5:5a:6c:26:a9:e0:ab:f2:5a:41:6a:f5:4c: 03:ed:39:68:63:68:72:4d:52:09:43:1f:fc:4f:e6:1e:a8:e4: b4:75:90:a0:37:9f:82:74:5e:23:ca:56:87:ac:4b:7d:3f:36: f7:fc:df:a1:e2:91:37:d2:85:a3:38:15:1b:78:12:34:ba:1a: 45:9f:2b:17:85:94:ee:54:8e:bc:c6:d4:0a:37:27:b5:7c:f8: f5:99:1a:b8:f4:4e:93:87:00:44:c2:57:41:75:44:85:c7:e0: f2:7b:7b:b3:11:91:67:75:c4:64:4c:75:87:36:f0:83:f5:6e: c6:1f:18:f7:eb:63:05:86:fa:6d:2f:ac:e1:b2:ad:60:56:94: c1:a2:b2:4b:0f:8c:2e:8d:62:b1:be:a5:91:bc:a6:45:da:0d: 02:58:d4:3a:30:dc:b7:7b:39:65:de:16:9a:96:36:5b:71:3c: 89:8d:cc:32 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUfYT/6B3wvibvaaZErLx2Mt5JTKUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJlNTA4ZmJhODk2MGY0ODA3MWIxMTlhY2NiZjU3YmRi ZjNhODA1NzAeFw0yNTEwMjExNTI4MzJaFw0yNTEwMjIxNTQ3MzJaMDMxMTAvBgNV BAMTKEUwQjY2RjdFNTc4NDc4MDdCRjYxODlCMEUxMUZBN0E4OEY1QjFEQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTWuM30WMgHNBDyHGeLnnA67R1 nMgJbIlSabFzxi+eVv9QZZKvfvmyx9pX+tOyAtJT3iIBzAVoGGPzZ2T9odF7Fms+ uFyQU4ShoE3fOq7FNZmhFyBt+6pv1dROxFhoVfj65xbvD7zX9DfPpzKUD6oD6h57 sxeIISj8in+K88WE2nUhWKWDDEvGNaTzAAnw7lyub38UgywpWr/ib8Y6lXFQza/P iwX999w0uI/BmKPNTu+68DNkYJlxXoltNB6Fm92SPMpFFd033X+Rv7jjYuqyYg27 qIbscA1M/eDvZiImbgP7pnavvurGSc/fvDbpdVNV5DCRQFlb+iNmApQnIVNJAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU4LZvfleEeAe/YYmw4R+nqI9bHbowHwYDVR0j BBgwFoAUQuUI+6iWD0gHGxGazL9Xvb86gFcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEtOGJhNS00NzlmLWEyMjktMGFiNzBlNDgx NWJiLzAvNDJFNTA4RkJBODk2MEY0ODA3MUIxMTlBQ0NCRjU3QkRCRjNBODA1Ny5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1F1VUktNmlXRDBnSEd4R2F6TDlYdmI4 NmdGYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83M2I4ZWMwMS04 YmE1LTQ3OWYtYTIyOS0wYWI3MGU0ODE1YmIvMC80MkU1MDhGQkE4OTYwRjQ4MDcx QjExOUFDQ0JGNTdCREJGM0E4MDU3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaqFg0HXtvncDZ6GpOzRs YoXgWWiQpc72bBWJ1AnCX9QFCT4lhxzLZnF7Q2to4Q1E+w80JjNaboNig22BpjFF iWLraRnTnBLM7huGgdXFWmwmqeCr8lpBavVMA+05aGNock1SCUMf/E/mHqjktHWQ oDefgnReI8pWh6xLfT829/zfoeKRN9KFozgVG3gSNLoaRZ8rF4WU7lSOvMbUCjcn tXz49ZkauPROk4cARMJXQXVEhcfg8nt7sxGRZ3XEZEx1hzbwg/Vuxh8Y9+tjBYb6 bS+s4bKtYFaUwaKySw+MLo1isb6lkbymRdoNAljUOjDct3s5Zd4WmpY2W3E8iY3M Mg== -----END CERTIFICATE-----Generated at Wed Oct 22 03:02:33 2025 by rpki-client