$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft File: 42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft (raw, json) Hash identifier: 7F9+0t/pop2Llob8Yo3ttNo7oFgDpSbCOSMyXtM1Fhw= Subject key identifier: CF:F9:43:AD:76:AC:8E:9B:8A:76:B1:1E:06:94:2E:C3:EA:3A:D0:14 Authority key identifier: 42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57 Certificate issuer: /CN=42e508fba8960f48071b119accbf57bdbf3a8057 Certificate serial: 0C8FD68A5B876EB27BB56D133DC9DF356D4DE4C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft Manifest number: 02BE Signing time: Sun 01 Mar 2026 05:09:41 +0000 Manifest this update: Sun 01 Mar 2026 05:04:41 +0000 Manifest next update: Mon 02 Mar 2026 05:23:41 +0000 Files and hashes: 1: 3139352e39352e3134392e302f32342d3234203d3e203331383938.roa (hash: nIlM4wp0iNBT5SN8C9VsrwDGSOsVnjaNLplEtHDOmPI=) 2: 42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl (hash: b8E5EEaX2uXHOJDtqyk6PuEIlT5zhlBpw8XXmwkowbg=) 3: 36322e3138322e3139322e302f32312d3234203d3e203432353332.roa (hash: 3uX+IJtCK1auUN/owB303ntI6bBy0+b5ouSYztCnTmQ=) 4: 326130623a346530343a646561643a3a2f34382d3438203d3e203331383938.roa (hash: V5g1oVVpactG3mKu8PF61hy91x6gtyEU1mTZQLj69yk=) 5: 326130623a346530343a626565663a3a2f34382d3438203d3e203236393534.roa (hash: dXSnrOSsmksjfaruQTR4onccvLxLXawLPmHLDP+0pZ0=) 6: 5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer (hash: xVnvGBOQAGx7ddcmxacteZKEbUgAqtkW3B5rWiVC4Gw=) 7: 326130623a346530343a646561643a3a2f34382d3438203d3e203236393534.roa (hash: baWQi1OtzFs3EXfopwYbyPRpvtk3lpDNhJaB1/yO3UE=) 8: 326130623a346530343a3a2f34382d3438203d3e203236393534.roa (hash: kjCVplBQIQWTrk/MT/vsXbIMmP0BY/AuB2NZAKC1i00=) 9: 3139352e39352e3134392e302f32342d3234203d3e203236393534.roa (hash: 4RKcXrOywUF2n3zLGUholuQfQjsDw3jfgXGtm0jfONU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 05:23:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:8f:d6:8a:5b:87:6e:b2:7b:b5:6d:13:3d:c9:df:35:6d:4d:e4:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42e508fba8960f48071b119accbf57bdbf3a8057 Validity Not Before: Mar 1 05:04:41 2026 GMT Not After : Mar 2 05:23:41 2026 GMT Subject: CN=CFF943AD76AC8E9B8A76B11E06942EC3EA3AD014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:07:75:e9:f2:44:be:a4:93:52:70:20:2d:07: 82:41:38:f7:8c:fa:73:65:70:5d:47:cf:56:db:5c: d1:eb:0f:20:02:1b:bc:45:d0:9f:72:ba:65:68:e4: e7:3f:1c:94:5b:9e:37:80:3e:5a:5f:8c:c3:ba:36: 86:2d:b1:48:32:88:d6:aa:d9:ef:25:80:b2:d0:35: fe:8b:40:77:90:a8:8a:46:b7:1f:05:8b:7b:62:fb: ab:49:c9:9e:d6:37:58:eb:b0:61:bb:ad:97:8f:c0: 6a:aa:d6:21:0a:cf:20:1d:05:5a:09:2f:e3:43:bc: a9:7a:5d:97:c1:bd:0c:a4:20:2f:18:8b:46:c4:49: 74:0e:2b:e3:bc:af:84:74:36:e9:73:0e:70:65:32: 34:d8:6e:16:65:13:c7:62:39:61:d1:1e:45:b1:da: 2f:ab:40:df:e6:df:ce:5b:30:ca:5d:75:6c:1c:61: 3f:1c:96:b0:1c:a4:2c:ee:2a:44:23:31:45:0a:9d: 41:4f:a9:92:e9:5b:d8:d8:87:ec:29:c7:4c:4f:32: 59:eb:e3:dc:5c:d2:6e:ae:7c:b0:3e:7b:d8:e0:69: c7:d4:17:0f:cb:fa:1a:7e:67:99:fa:b0:e1:42:d6: 7d:7e:b8:9f:87:42:c6:9b:51:25:0b:61:01:4f:00: 9b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:F9:43:AD:76:AC:8E:9B:8A:76:B1:1E:06:94:2E:C3:EA:3A:D0:14 X509v3 Authority Key Identifier: keyid:42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:f5:00:95:23:b6:87:2a:2a:c2:57:ad:1a:07:4e:1e:13:0e: 35:d7:3b:87:7d:0a:e2:06:96:73:13:0b:6b:08:62:9d:bd:7c: 2f:fe:59:22:db:ce:41:83:ac:e2:81:68:85:78:f8:4c:9b:8d: da:d0:b7:13:46:c8:80:60:66:f2:17:ba:f6:18:bc:ea:72:32: fa:06:dc:a9:00:87:da:e1:0d:82:3c:e8:b7:0c:a6:29:9a:6f: e9:0e:61:0d:de:32:55:95:b4:9c:c5:39:c0:f0:95:a2:96:df: 73:25:14:7d:03:9b:33:17:de:ee:23:c6:7c:50:b7:8e:f6:b2: d8:cf:08:28:5b:7e:4f:2a:a0:f9:11:c1:cd:8f:f5:f8:cf:18: a1:ca:46:ce:e8:dd:51:36:46:86:8f:a0:13:0d:4d:9c:97:f5: 26:5a:05:d8:d6:63:09:d9:83:e3:cc:43:eb:ce:80:2f:86:b3: b9:39:a9:d8:29:1d:5d:fa:c6:f9:59:bf:3d:26:6f:d6:d9:7a: a4:0e:d5:27:28:41:cb:fa:31:a1:38:4a:3e:9a:0a:59:03:9e: 2d:3d:5c:42:b5:38:95:3d:31:36:51:ce:70:c4:bf:f4:88:97: cf:65:68:0a:51:47:16:ab:6f:c3:25:14:55:5d:27:0e:36:d0: 14:4a:70:e1 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUDI/WiluHbrJ7tW0TPcnfNW1N5MMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJlNTA4ZmJhODk2MGY0ODA3MWIxMTlhY2NiZjU3YmRi ZjNhODA1NzAeFw0yNjAzMDEwNTA0NDFaFw0yNjAzMDIwNTIzNDFaMDMxMTAvBgNV BAMTKENGRjk0M0FENzZBQzhFOUI4QTc2QjExRTA2OTQyRUMzRUEzQUQwMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDB3Xp8kS+pJNScCAtB4JBOPeM +nNlcF1Hz1bbXNHrDyACG7xF0J9yumVo5Oc/HJRbnjeAPlpfjMO6NoYtsUgyiNaq 2e8lgLLQNf6LQHeQqIpGtx8Fi3ti+6tJyZ7WN1jrsGG7rZePwGqq1iEKzyAdBVoJ L+NDvKl6XZfBvQykIC8Yi0bESXQOK+O8r4R0NulzDnBlMjTYbhZlE8diOWHRHkWx 2i+rQN/m385bMMpddWwcYT8clrAcpCzuKkQjMUUKnUFPqZLpW9jYh+wpx0xPMlnr 49xc0m6ufLA+e9jgacfUFw/L+hp+Z5n6sOFC1n1+uJ+HQsabUSULYQFPAJsNAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUz/lDrXasjpuKdrEeBpQuw+o60BQwHwYDVR0j BBgwFoAUQuUI+6iWD0gHGxGazL9Xvb86gFcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEtOGJhNS00NzlmLWEyMjktMGFiNzBlNDgx NWJiLzAvNDJFNTA4RkJBODk2MEY0ODA3MUIxMTlBQ0NCRjU3QkRCRjNBODA1Ny5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1F1VUktNmlXRDBnSEd4R2F6TDlYdmI4 NmdGYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83M2I4ZWMwMS04 YmE1LTQ3OWYtYTIyOS0wYWI3MGU0ODE1YmIvMC80MkU1MDhGQkE4OTYwRjQ4MDcx QjExOUFDQ0JGNTdCREJGM0E4MDU3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS/UAlSO2hyoqwletGgdO HhMONdc7h30K4gaWcxMLawhinb18L/5ZItvOQYOs4oFohXj4TJuN2tC3E0bIgGBm 8he69hi86nIy+gbcqQCH2uENgjzotwymKZpv6Q5hDd4yVZW0nMU5wPCVopbfcyUU fQObMxfe7iPGfFC3jvay2M8IKFt+Tyqg+RHBzY/1+M8YocpGzujdUTZGho+gEw1N nJf1JloF2NZjCdmD48xD686AL4azuTmp2CkdXfrG+Vm/PSZv1tl6pA7VJyhBy/ox oThKPpoKWQOeLT1cQrU4lT0xNlHOcMS/9IiXz2VoClFHFqtvwyUUVV0nDjbQFEpw 4Q== -----END CERTIFICATE-----Generated at Sun Mar 1 18:21:09 2026 by rpki-client