$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft File: 42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft (raw, json) Hash identifier: GtAp0jCGIzugX3XSpIy6GXoBRzjIlNVhmgCNt48Bsws= Subject key identifier: 54:22:7C:C1:7F:15:1B:85:63:A8:DA:6A:06:A2:C2:E3:A8:8F:AD:9F Authority key identifier: 42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57 Certificate issuer: /CN=42e508fba8960f48071b119accbf57bdbf3a8057 Certificate serial: 028F4CE3A8B0A5043692DC618EDD8891B0398755 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft Manifest number: 014A Signing time: Sat 31 May 2025 15:29:17 +0000 Manifest this update: Sat 31 May 2025 15:24:17 +0000 Manifest next update: Sun 01 Jun 2025 15:43:17 +0000 Files and hashes: 1: 42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl (hash: 1jOL/1h8pwE1VL6G85evwqiNKrNKg0MUC8QFhphsDDQ=) 2: 36322e3138322e3139322e302f32312d3234203d3e203432353332.roa (hash: 3uX+IJtCK1auUN/owB303ntI6bBy0+b5ouSYztCnTmQ=) 3: 326130623a346530343a3a2f33322d3438203d3e203236393534.roa (hash: LizvwJL2nprToghg5qQqGpfO97UmahWuyDJ1ZaaEJS0=) 4: 5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer (hash: xVnvGBOQAGx7ddcmxacteZKEbUgAqtkW3B5rWiVC4Gw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 01 Jun 2025 15:43:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:8f:4c:e3:a8:b0:a5:04:36:92:dc:61:8e:dd:88:91:b0:39:87:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42e508fba8960f48071b119accbf57bdbf3a8057 Validity Not Before: May 31 15:24:17 2025 GMT Not After : Jun 1 15:43:17 2025 GMT Subject: CN=54227CC17F151B8563A8DA6A06A2C2E3A88FAD9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c3:c0:ed:f7:10:90:a3:0f:c8:10:ba:0a:c6: f5:17:12:a6:d2:1d:fe:ab:5c:23:ca:05:a6:ed:d6: 8b:e3:87:5d:85:49:b3:1f:ee:af:28:47:d4:90:38: 7d:ee:06:a0:d9:41:73:a5:40:ba:9a:7f:3e:ee:1e: a2:82:59:37:cf:ed:5d:4c:c6:d2:1f:59:34:a8:44: 02:4d:84:2a:5d:78:14:6d:08:3a:e4:c8:07:74:01: 98:6f:63:ab:fc:f4:64:a6:17:f1:04:95:d3:c2:27: f2:b9:87:af:48:08:ec:57:e7:40:c7:be:b9:e4:af: 57:27:b7:3b:5d:0f:48:5b:80:f1:22:d5:96:81:cf: 6c:5c:5f:0e:88:50:0e:c3:f5:7d:78:cc:1c:47:0e: 42:d4:0b:2e:41:9d:ad:ec:21:d7:78:75:93:17:9a: 04:da:0c:ae:95:b3:41:64:13:5b:00:41:ff:89:67: 12:a1:21:6b:c2:f4:73:82:0d:9f:f1:f4:07:43:9d: b2:c1:04:68:54:19:95:91:06:a9:d8:22:99:1a:d0: 7a:31:6b:d5:a7:6d:57:76:80:03:e6:45:a6:87:db: 46:c4:62:a5:70:03:45:35:7e:f9:21:f4:1b:8e:9e: f7:cc:66:8b:d5:32:eb:43:0a:18:1b:3e:ff:39:b4: 86:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:22:7C:C1:7F:15:1B:85:63:A8:DA:6A:06:A2:C2:E3:A8:8F:AD:9F X509v3 Authority Key Identifier: keyid:42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:f0:a2:9a:99:94:0f:2c:d9:d7:eb:68:50:0e:2e:b9:38:76: e0:8d:38:76:78:e3:6b:fb:e7:50:69:86:4d:36:59:89:49:d9: 33:4c:e2:45:78:e0:11:ad:d7:aa:c9:d9:e1:38:13:bb:73:a7: 60:66:5c:ed:4f:3e:bc:9d:39:3e:d8:78:04:90:f0:ca:e9:5e: 35:88:96:1e:24:00:38:c2:c9:d1:1d:a6:c2:36:e5:5c:5d:23: d8:68:96:50:2d:d4:81:41:00:37:dc:dc:b4:7c:2c:e0:e0:da: a5:29:17:7b:2d:06:a2:37:ad:6a:7b:7c:74:4d:0a:46:07:55: 66:1d:25:07:b9:fb:f7:6c:54:c3:dc:60:4e:ad:97:d3:f8:36: a1:49:ca:d4:f6:e3:8d:8d:4e:18:83:a2:43:d5:21:69:50:fd: 5b:10:67:7c:c1:a3:d1:84:95:67:a3:b3:63:eb:e5:49:3c:6a: 96:70:48:9b:b7:18:46:6b:6b:e7:be:45:cf:c8:41:ca:65:a0: c1:a1:f3:2c:02:fa:6d:92:2e:35:ca:76:76:9d:0b:2f:e3:ab: 91:9c:64:8f:80:2b:24:96:4a:95:25:99:c3:ba:33:26:90:0d: 4b:f8:86:4b:66:76:cd:35:9d:be:c2:db:e8:2e:43:c9:0e:47: 83:42:99:9f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUAo9M46iwpQQ2ktxhjt2IkbA5h1UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJlNTA4ZmJhODk2MGY0ODA3MWIxMTlhY2NiZjU3YmRi ZjNhODA1NzAeFw0yNTA1MzExNTI0MTdaFw0yNTA2MDExNTQzMTdaMDMxMTAvBgNV BAMTKDU0MjI3Q0MxN0YxNTFCODU2M0E4REE2QTA2QTJDMkUzQTg4RkFEOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9w8Dt9xCQow/IELoKxvUXEqbS Hf6rXCPKBabt1ovjh12FSbMf7q8oR9SQOH3uBqDZQXOlQLqafz7uHqKCWTfP7V1M xtIfWTSoRAJNhCpdeBRtCDrkyAd0AZhvY6v89GSmF/EEldPCJ/K5h69ICOxX50DH vrnkr1cntztdD0hbgPEi1ZaBz2xcXw6IUA7D9X14zBxHDkLUCy5Bna3sIdd4dZMX mgTaDK6Vs0FkE1sAQf+JZxKhIWvC9HOCDZ/x9AdDnbLBBGhUGZWRBqnYIpka0Hox a9WnbVd2gAPmRaaH20bEYqVwA0U1fvkh9BuOnvfMZovVMutDChgbPv85tIajAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUVCJ8wX8VG4VjqNpqBqLC46iPrZ8wHwYDVR0j BBgwFoAUQuUI+6iWD0gHGxGazL9Xvb86gFcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEtOGJhNS00NzlmLWEyMjktMGFiNzBlNDgx NWJiLzAvNDJFNTA4RkJBODk2MEY0ODA3MUIxMTlBQ0NCRjU3QkRCRjNBODA1Ny5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1F1VUktNmlXRDBnSEd4R2F6TDlYdmI4 NmdGYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83M2I4ZWMwMS04 YmE1LTQ3OWYtYTIyOS0wYWI3MGU0ODE1YmIvMC80MkU1MDhGQkE4OTYwRjQ4MDcx QjExOUFDQ0JGNTdCREJGM0E4MDU3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE/CimpmUDyzZ1+toUA4u uTh24I04dnjja/vnUGmGTTZZiUnZM0ziRXjgEa3XqsnZ4TgTu3OnYGZc7U8+vJ05 Pth4BJDwyuleNYiWHiQAOMLJ0R2mwjblXF0j2GiWUC3UgUEAN9zctHws4ODapSkX ey0Gojetant8dE0KRgdVZh0lB7n792xUw9xgTq2X0/g2oUnK1PbjjY1OGIOiQ9Uh aVD9WxBnfMGj0YSVZ6OzY+vlSTxqlnBIm7cYRmtr575Fz8hBymWgwaHzLAL6bZIu Ncp2dp0LL+OrkZxkj4ArJJZKlSWZw7ozJpANS/iGS2Z2zTWdvsLb6C5DyQ5Hg0KZ nw== -----END CERTIFICATE-----Generated at Sun Jun 1 05:53:22 2025 by rpki-client