$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft File: 42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft (raw, json) Hash identifier: oaltkVW7K2URUqha7yTdakPHrNlk/esPbY3S03/2vbM= Subject key identifier: 24:D4:41:9A:88:48:DE:23:C8:E3:B5:08:5F:C8:1F:88:AD:92:D3:13 Authority key identifier: 42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57 Certificate issuer: /CN=42e508fba8960f48071b119accbf57bdbf3a8057 Certificate serial: 2680603FBAB02581F56FA2A87707154E613121CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft Manifest number: 021F Signing time: Tue 04 Nov 2025 01:13:33 +0000 Manifest this update: Tue 04 Nov 2025 01:08:33 +0000 Manifest next update: Wed 05 Nov 2025 03:06:33 +0000 Files and hashes: 1: 42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl (hash: uXX8Djw6y5LlEdHzU4sNpMANW1L3+Tp45uF5mVRF+T4=) 2: 3139352e39352e3134392e302f32342d3234203d3e203236393534.roa (hash: 4RKcXrOywUF2n3zLGUholuQfQjsDw3jfgXGtm0jfONU=) 3: 5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer (hash: xVnvGBOQAGx7ddcmxacteZKEbUgAqtkW3B5rWiVC4Gw=) 4: 36322e3138322e3139322e302f32312d3234203d3e203432353332.roa (hash: 3uX+IJtCK1auUN/owB303ntI6bBy0+b5ouSYztCnTmQ=) 5: 326130623a346530343a626565663a3a2f34382d3438203d3e203236393534.roa (hash: dXSnrOSsmksjfaruQTR4onccvLxLXawLPmHLDP+0pZ0=) 6: 326130623a346530343a3a2f34382d3438203d3e203236393534.roa (hash: kjCVplBQIQWTrk/MT/vsXbIMmP0BY/AuB2NZAKC1i00=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 03:06:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:80:60:3f:ba:b0:25:81:f5:6f:a2:a8:77:07:15:4e:61:31:21:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42e508fba8960f48071b119accbf57bdbf3a8057 Validity Not Before: Nov 4 01:08:33 2025 GMT Not After : Nov 5 03:06:33 2025 GMT Subject: CN=24D4419A8848DE23C8E3B5085FC81F88AD92D313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0d:09:0e:09:cc:23:26:06:7e:36:ee:df:9d: 9f:b1:74:8d:8b:09:79:6f:73:a9:4b:64:2a:2b:b2: 33:dc:22:f3:99:b9:d0:9a:b1:7f:f9:6a:3d:d5:a6: 42:a4:96:cd:9f:41:ca:95:df:86:72:be:aa:e9:89: 00:d2:f7:ca:e6:75:5b:3d:3d:82:30:6b:22:ed:78: d5:1a:a4:c6:56:0b:c1:95:f7:15:ed:c2:46:4e:1d: c0:69:7d:64:f0:db:31:44:f1:81:5a:50:de:46:63: 6d:fa:39:63:da:df:78:5f:74:e8:da:09:3a:0e:bd: 8e:38:3f:51:48:b5:25:d5:f4:2b:29:3e:20:df:8c: 41:6c:61:73:e5:0d:ab:01:49:27:93:26:b7:8c:9a: 03:6d:e5:e1:50:c2:14:31:27:ea:ce:bc:6c:99:76: c1:80:70:b6:78:69:25:f6:ed:4e:04:16:62:50:5a: a9:dc:09:d6:a7:50:51:6c:cb:4b:1b:a3:ba:a6:27: 05:9e:99:23:80:0d:54:f4:bf:20:4f:d5:38:ba:eb: 11:77:e2:78:ed:7e:47:cf:19:88:fb:63:8a:b6:06: c1:b8:05:d8:46:5f:3d:5b:33:1a:ec:d4:e6:7d:29: b9:32:28:70:42:7b:fd:4d:c6:bd:f8:53:4b:7c:57: 64:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:D4:41:9A:88:48:DE:23:C8:E3:B5:08:5F:C8:1F:88:AD:92:D3:13 X509v3 Authority Key Identifier: keyid:42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:9e:84:1a:03:7c:3d:74:d2:7b:9c:54:a8:f7:3d:3b:c4:0a: 32:34:a2:84:39:e2:e0:42:90:9b:2f:f5:f3:11:97:fd:48:2d: c2:0a:af:a9:a3:db:64:11:82:16:0f:13:6a:87:5d:53:eb:68: 5e:30:17:4d:51:ce:67:b3:b9:dd:17:a4:9f:22:6f:b8:8c:5f: b0:bf:d5:1d:c2:e3:e4:0c:0c:5b:0f:3a:9f:3b:82:5b:55:26: 44:47:32:87:37:c8:51:76:dd:a7:f6:34:86:2f:1d:76:53:0f: 8f:50:16:d0:b3:ff:78:94:86:b1:5c:54:7c:f0:b9:52:ca:cd: cb:fe:e6:ba:e8:6a:68:bd:ef:08:bb:57:bf:a6:6f:a3:f9:31: 08:70:35:5b:0c:56:d9:19:f2:28:b7:a6:fd:05:e4:10:88:a5: 75:4a:77:07:a5:67:c9:95:c9:cd:47:2b:f3:05:65:22:00:89: cd:fd:11:fa:05:c2:f9:7e:eb:6e:3d:94:3b:18:16:22:47:72: 1c:43:50:6b:a4:c1:1d:bf:f6:e6:28:f1:df:58:b7:86:25:c9: b9:e6:43:4b:f1:47:7e:29:84:3c:b4:ee:18:7a:b5:d0:97:58: fc:24:04:22:ae:e8:39:b9:5a:f9:1c:94:b4:72:a5:37:6e:19: 20:1e:72:09 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUJoBgP7qwJYH1b6KodwcVTmExIcowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJlNTA4ZmJhODk2MGY0ODA3MWIxMTlhY2NiZjU3YmRi ZjNhODA1NzAeFw0yNTExMDQwMTA4MzNaFw0yNTExMDUwMzA2MzNaMDMxMTAvBgNV BAMTKDI0RDQ0MTlBODg0OERFMjNDOEUzQjUwODVGQzgxRjg4QUQ5MkQzMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClDQkOCcwjJgZ+Nu7fnZ+xdI2L CXlvc6lLZCorsjPcIvOZudCasX/5aj3VpkKkls2fQcqV34ZyvqrpiQDS98rmdVs9 PYIwayLteNUapMZWC8GV9xXtwkZOHcBpfWTw2zFE8YFaUN5GY236OWPa33hfdOja CToOvY44P1FItSXV9CspPiDfjEFsYXPlDasBSSeTJreMmgNt5eFQwhQxJ+rOvGyZ dsGAcLZ4aSX27U4EFmJQWqncCdanUFFsy0sbo7qmJwWemSOADVT0vyBP1Ti66xF3 4njtfkfPGYj7Y4q2BsG4BdhGXz1bMxrs1OZ9KbkyKHBCe/1Nxr34U0t8V2StAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUJNRBmohI3iPI47UIX8gfiK2S0xMwHwYDVR0j BBgwFoAUQuUI+6iWD0gHGxGazL9Xvb86gFcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEtOGJhNS00NzlmLWEyMjktMGFiNzBlNDgx NWJiLzAvNDJFNTA4RkJBODk2MEY0ODA3MUIxMTlBQ0NCRjU3QkRCRjNBODA1Ny5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1F1VUktNmlXRDBnSEd4R2F6TDlYdmI4 NmdGYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83M2I4ZWMwMS04 YmE1LTQ3OWYtYTIyOS0wYWI3MGU0ODE1YmIvMC80MkU1MDhGQkE4OTYwRjQ4MDcx QjExOUFDQ0JGNTdCREJGM0E4MDU3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWJ6EGgN8PXTSe5xUqPc9 O8QKMjSihDni4EKQmy/18xGX/UgtwgqvqaPbZBGCFg8TaoddU+toXjAXTVHOZ7O5 3ReknyJvuIxfsL/VHcLj5AwMWw86nzuCW1UmREcyhzfIUXbdp/Y0hi8ddlMPj1AW 0LP/eJSGsVxUfPC5UsrNy/7muuhqaL3vCLtXv6Zvo/kxCHA1WwxW2RnyKLem/QXk EIildUp3B6VnyZXJzUcr8wVlIgCJzf0R+gXC+X7rbj2UOxgWIkdyHENQa6TBHb/2 5ijx31i3hiXJueZDS/FHfimEPLTuGHq10JdY/CQEIq7oObla+RyUtHKlN24ZIB5y CQ== -----END CERTIFICATE-----Generated at Tue Nov 4 15:09:16 2025 by rpki-client