$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft File: 42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft (raw, json) Hash identifier: GiQ+/mIc4AudURuzXNEggNV/wQncu2Z98SAoZkt6MwY= Subject key identifier: E2:D4:1B:FE:CB:ED:89:ED:C7:37:DE:8D:CE:BB:CE:D3:CC:29:8A:9F Authority key identifier: 42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57 Certificate issuer: /CN=42e508fba8960f48071b119accbf57bdbf3a8057 Certificate serial: 2095D525465A0CE4FB7FF94BE126A1BDB2358B87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft Manifest number: 0313 Signing time: Tue 21 Apr 2026 01:36:39 +0000 Manifest this update: Tue 21 Apr 2026 01:31:39 +0000 Manifest next update: Wed 22 Apr 2026 02:19:39 +0000 Files and hashes: 1: 326130623a346530343a626565663a3a2f34382d3438203d3e203236393534.roa (hash: dXSnrOSsmksjfaruQTR4onccvLxLXawLPmHLDP+0pZ0=) 2: 326130623a346530343a646561643a3a2f34382d3438203d3e203236393534.roa (hash: baWQi1OtzFs3EXfopwYbyPRpvtk3lpDNhJaB1/yO3UE=) 3: 42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl (hash: 8DwpZbNIshYkLFcmflmBOz5Ev6TxbaBWRvHC3dU1Ir4=) 4: 3139352e39352e3134392e302f32342d3234203d3e203331383938.roa (hash: nIlM4wp0iNBT5SN8C9VsrwDGSOsVnjaNLplEtHDOmPI=) 5: 5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer (hash: wzf9Q7ucZUXyXzHj7PJEhgpZT5bmFJJKljBiJmh3Xao=) 6: 36322e3138322e3139322e302f32312d3234203d3e203432353332.roa (hash: k22wzf+MNF3rdZwWDi2NJmXkW92pMk1IiR0y5N9dN8c=) 7: 326130623a346530343a646561643a3a2f34382d3438203d3e203331383938.roa (hash: V5g1oVVpactG3mKu8PF61hy91x6gtyEU1mTZQLj69yk=) 8: 326130623a346530343a34323a3a2f34382d3438203d3e203236393534.roa (hash: J0sU27KhsWLAQskvnilOEJPNfUn6f6vWuMhZwx5IsPQ=) 9: 326130623a346530343a3a2f34382d3438203d3e203236393534.roa (hash: kjCVplBQIQWTrk/MT/vsXbIMmP0BY/AuB2NZAKC1i00=) 10: 3139352e39352e3134392e302f32342d3234203d3e203236393534.roa (hash: 4RKcXrOywUF2n3zLGUholuQfQjsDw3jfgXGtm0jfONU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Apr 2026 02:19:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:95:d5:25:46:5a:0c:e4:fb:7f:f9:4b:e1:26:a1:bd:b2:35:8b:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42e508fba8960f48071b119accbf57bdbf3a8057 Validity Not Before: Apr 21 01:31:39 2026 GMT Not After : Apr 22 02:19:39 2026 GMT Subject: CN=E2D41BFECBED89EDC737DE8DCEBBCED3CC298A9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a8:fc:65:37:40:ae:8a:6d:a7:5d:4f:17:23: 44:e7:3e:06:d3:dd:93:2a:f0:d6:f8:ba:0a:f8:d2: 84:e4:ff:24:b8:d1:c0:15:20:1b:33:dd:f6:60:a7: 6f:d1:59:b9:c2:f0:1e:39:d1:65:83:2e:c5:3b:4f: 0e:6f:3b:8f:8d:2d:ea:25:6b:c1:92:c4:af:8c:7e: 3a:65:ed:7b:98:99:ec:ca:95:73:f9:aa:d4:47:25: 76:1d:22:6a:25:85:6c:12:8c:7c:25:a6:da:9c:0d: 25:fc:8c:1d:ce:e8:c3:3c:21:d4:84:e7:b0:af:38: 9c:ca:95:97:f6:25:9b:c0:58:e6:6d:74:f9:ae:a9: 71:19:84:10:15:c8:88:3f:c7:fc:b0:9e:c2:fd:b0: 45:29:a7:ae:b0:a0:ec:1e:88:ea:f9:77:3a:90:8e: b9:c4:3b:90:d7:e6:01:d5:20:50:ff:27:93:f8:04: 12:74:22:d4:cf:cf:5a:00:d1:b3:ea:f6:b5:38:17: 5f:bb:93:86:cb:b9:5f:d7:0a:c7:b9:85:20:3c:76: a5:f8:1b:23:38:e3:97:c5:0f:21:83:57:80:29:49: 59:bf:ca:21:a0:41:9c:f0:ce:e4:d9:cd:e6:58:1c: 33:e8:a5:82:d9:a1:18:48:ed:a1:ad:1c:7d:26:c3: bc:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:D4:1B:FE:CB:ED:89:ED:C7:37:DE:8D:CE:BB:CE:D3:CC:29:8A:9F X509v3 Authority Key Identifier: keyid:42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:21:50:8e:95:37:71:95:7c:1a:28:2b:4c:3d:d4:b1:12:1e: 2f:c5:91:29:3f:38:48:b2:fb:c4:d2:1e:07:35:44:5b:91:90: 82:7c:89:98:fa:91:f7:31:0a:62:16:af:00:4f:bf:0b:b9:43: 93:38:72:79:c5:99:76:83:08:2b:7a:f7:80:d2:bd:ea:a5:1d: 5f:30:4d:21:98:9b:23:6a:9d:48:70:f4:b3:8e:63:6c:a6:ee: c2:54:8c:35:a2:f0:f5:35:dc:f8:88:63:e4:29:23:aa:c1:5f: 1d:d2:20:2f:58:cf:e0:e9:39:c9:4e:bd:58:a4:24:5a:40:6e: 33:56:85:d8:fd:11:58:02:04:27:9d:a4:96:bc:fc:1a:48:98: fb:35:34:a8:92:44:26:1b:b8:fb:29:60:51:02:e2:64:3e:39: 02:9f:05:4d:ac:54:50:a6:80:06:95:f6:93:e9:81:5a:23:93: 20:2a:df:c7:4f:4e:30:32:37:00:ed:53:ab:fd:af:13:34:04: f4:ae:13:25:59:1c:c1:75:9c:14:45:8f:a8:16:21:b3:b9:65: 37:f1:03:7b:83:66:ba:54:18:04:12:71:34:fe:c6:83:be:c2: d8:a9:d6:ec:b1:26:ba:70:d4:23:3a:68:b1:89:38:dc:99:70: 3c:0e:a8:41 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUIJXVJUZaDOT7f/lL4SahvbI1i4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJlNTA4ZmJhODk2MGY0ODA3MWIxMTlhY2NiZjU3YmRi ZjNhODA1NzAeFw0yNjA0MjEwMTMxMzlaFw0yNjA0MjIwMjE5MzlaMDMxMTAvBgNV BAMTKEUyRDQxQkZFQ0JFRDg5RURDNzM3REU4RENFQkJDRUQzQ0MyOThBOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxqPxlN0Cuim2nXU8XI0TnPgbT 3ZMq8Nb4ugr40oTk/yS40cAVIBsz3fZgp2/RWbnC8B450WWDLsU7Tw5vO4+NLeol a8GSxK+Mfjpl7XuYmezKlXP5qtRHJXYdImolhWwSjHwlptqcDSX8jB3O6MM8IdSE 57CvOJzKlZf2JZvAWOZtdPmuqXEZhBAVyIg/x/ywnsL9sEUpp66woOweiOr5dzqQ jrnEO5DX5gHVIFD/J5P4BBJ0ItTPz1oA0bPq9rU4F1+7k4bLuV/XCse5hSA8dqX4 GyM445fFDyGDV4ApSVm/yiGgQZzwzuTZzeZYHDPopYLZoRhI7aGtHH0mw7w3AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU4tQb/svtie3HN96NzrvO08wpip8wHwYDVR0j BBgwFoAUQuUI+6iWD0gHGxGazL9Xvb86gFcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEtOGJhNS00NzlmLWEyMjktMGFiNzBlNDgx NWJiLzAvNDJFNTA4RkJBODk2MEY0ODA3MUIxMTlBQ0NCRjU3QkRCRjNBODA1Ny5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1F1VUktNmlXRDBnSEd4R2F6TDlYdmI4 NmdGYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83M2I4ZWMwMS04 YmE1LTQ3OWYtYTIyOS0wYWI3MGU0ODE1YmIvMC80MkU1MDhGQkE4OTYwRjQ4MDcx QjExOUFDQ0JGNTdCREJGM0E4MDU3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtyFQjpU3cZV8GigrTD3U sRIeL8WRKT84SLL7xNIeBzVEW5GQgnyJmPqR9zEKYhavAE+/C7lDkzhyecWZdoMI K3r3gNK96qUdXzBNIZibI2qdSHD0s45jbKbuwlSMNaLw9TXc+Ihj5CkjqsFfHdIg L1jP4Ok5yU69WKQkWkBuM1aF2P0RWAIEJ52klrz8GkiY+zU0qJJEJhu4+ylgUQLi ZD45Ap8FTaxUUKaABpX2k+mBWiOTICrfx09OMDI3AO1Tq/2vEzQE9K4TJVkcwXWc FEWPqBYhs7llN/EDe4NmulQYBBJxNP7Gg77C2KnW7LEmunDUIzposYk43JlwPA6o QQ== -----END CERTIFICATE-----Generated at Tue Apr 21 10:45:21 2026 by rpki-client