$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft File: 42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft (raw, json) Hash identifier: Js+0qhH8hu30JiALZdeBAep/MYrD+Jm802+7KO6XNHw= Subject key identifier: 4F:25:79:B9:75:8D:66:0A:E7:85:E0:12:03:26:82:47:DB:9E:E4:E1 Authority key identifier: 42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57 Certificate issuer: /CN=42e508fba8960f48071b119accbf57bdbf3a8057 Certificate serial: 4D45E7903D962284596AC81BF68F1CA299C2B667 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft Manifest number: 0429 Signing time: Sun 20 Sep 2026 09:47:39 +0000 Manifest this update: Sun 20 Sep 2026 09:42:39 +0000 Manifest next update: Mon 21 Sep 2026 11:16:39 +0000 Files and hashes: 1: 326130623a346530373a6234333a3a2f34382d3438203d3e20313937333234.roa (hash: /NicVI9ZA6HI/WOoAhhTorEr85yfvxle9J9tMstWWS8=) 2: 326130623a346530343a3a2f33322d3438203d3e203236393534.roa (hash: F+gO6ZKYcboOFSJKnCm81psNizqbMEENngfXl2NTHEQ=) 3: 36322e3138322e3139322e302f32312d3234203d3e203432353332.roa (hash: k22wzf+MNF3rdZwWDi2NJmXkW92pMk1IiR0y5N9dN8c=) 4: 3139352e39352e3134392e302f32342d3234203d3e203236393534.roa (hash: wrTYL7mb+1quCshY5bvucyyFtZsLGfBb+j95uYXZhYI=) 5: 42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl (hash: 9858Seav+OFJ9ZlNEmoFDJpTAcRCgIj1HTJF9RYhiNY=) 6: 5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer (hash: UTtj2AfVN+qJgs0Jtg2lSMG4vd4rZAoAQP7FbKKVJ7M=) 7: 326130623a346530343a343966353a3a2f34382d3438203d3e20343032353336.roa (hash: pWY9PAU1e4HYq/0yecEeibEgLvdjkG+Q4SYrRpaltss=) 8: AS26954.asa (hash: IUsw4dy87IC2cWQmte+pB1I+1bOzvTOC48eoRtPn5iE=) 9: AS202301.asa (hash: ft6tQ1rOWUa2YsQRj7uIGgH8Nr6RXCQJpFhPQabkhnM=) 10: 326130623a346530343a33613a3a2f34382d3438203d3e20323032333031.roa (hash: PxM9g8iygtPE0W8UaxD6VQbthErf6scMW5Q5B330XGE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 11:16:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:45:e7:90:3d:96:22:84:59:6a:c8:1b:f6:8f:1c:a2:99:c2:b6:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42e508fba8960f48071b119accbf57bdbf3a8057 Validity Not Before: Sep 20 09:42:39 2026 GMT Not After : Sep 21 11:16:39 2026 GMT Subject: CN=4F2579B9758D660AE785E01203268247DB9EE4E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:06:b6:ee:68:c0:08:2f:1e:17:c4:3a:c5:12: d2:26:de:81:44:3f:18:32:4c:27:41:78:23:d3:78: 5d:be:0a:98:a5:15:92:d9:20:02:e3:e3:84:0f:0e: 32:19:27:d7:b7:06:8d:cc:e9:72:17:35:56:42:f7: fd:ba:c7:14:87:0b:13:12:d7:f7:30:2f:9b:14:d6: 7e:e1:47:c1:64:de:38:75:eb:61:1d:0e:9f:f9:c0: 41:43:6c:2a:e7:89:1b:7c:cb:7c:39:a3:70:fa:4d: 69:50:c4:50:4a:08:99:4f:82:30:07:a9:eb:9b:2e: 9d:c0:89:82:bf:eb:71:a3:0c:f7:af:1d:3c:c2:0c: b5:ee:1b:1e:ce:c5:55:b4:4a:d5:6f:f1:eb:1e:bd: 46:c5:5c:63:99:7f:25:e1:cd:db:9d:43:d2:64:70: 03:39:49:fc:f9:49:b2:a0:bb:a0:04:26:2e:72:e4: f9:24:49:83:5c:0f:45:c6:aa:4b:67:3b:42:7d:e4: c1:53:e8:67:6b:ed:ed:ab:52:58:eb:22:43:b6:a0: e4:db:de:76:f1:3e:c3:a2:ed:a6:46:6a:6e:88:1d: f6:09:b7:0f:61:8e:a7:9a:87:bf:f4:85:2b:e0:ef: 26:68:87:cf:ea:f2:17:15:9c:61:a5:7e:e3:f2:dd: 3d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:25:79:B9:75:8D:66:0A:E7:85:E0:12:03:26:82:47:DB:9E:E4:E1 X509v3 Authority Key Identifier: keyid:42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:bc:d5:b0:13:0d:bd:74:8f:97:19:8a:26:18:92:7f:eb:d7: 35:07:e6:f0:ab:ac:ee:17:62:78:9a:49:c1:08:fc:46:1a:6f: 69:24:1c:d0:73:63:86:7a:6b:76:3f:3e:83:e8:97:1e:a1:4b: 5c:64:1c:2d:07:61:65:6c:35:b8:b6:70:f6:6a:3f:5d:ed:ad: bf:ba:a9:83:8f:07:44:cd:73:c5:2b:44:b5:80:4b:03:21:78: c3:17:74:af:18:ac:57:05:be:7f:43:d1:4d:de:01:4a:f7:d3: af:6f:44:85:c3:8d:2a:49:29:92:9a:ed:89:31:33:5c:b2:0a: 33:a9:ac:c7:03:65:27:25:1a:2d:e9:a6:a0:d6:17:ab:71:fb: a1:b2:73:71:56:5a:e7:0c:98:4a:cb:97:3d:99:88:22:0a:94: de:11:e3:54:24:00:43:66:46:8d:4c:25:3e:17:73:9e:9b:00: 51:a6:53:f4:05:2e:30:df:51:e4:6b:0f:46:b4:73:05:cf:a5: d8:95:b1:0c:f5:ed:4a:37:2f:6f:7e:ce:1a:44:1e:0a:92:fa: 5e:56:8d:a7:32:17:4b:cb:7f:b0:90:82:60:e0:9f:83:45:28: 70:8a:ae:46:4e:f6:57:97:b2:e6:44:ee:43:42:fd:a3:10:26: 80:8d:20:f0 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUTUXnkD2WIoRZasgb9o8copnCtmcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJlNTA4ZmJhODk2MGY0ODA3MWIxMTlhY2NiZjU3YmRi ZjNhODA1NzAeFw0yNjA5MjAwOTQyMzlaFw0yNjA5MjExMTE2MzlaMDMxMTAvBgNV BAMTKDRGMjU3OUI5NzU4RDY2MEFFNzg1RTAxMjAzMjY4MjQ3REI5RUU0RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTBrbuaMAILx4XxDrFEtIm3oFE PxgyTCdBeCPTeF2+CpilFZLZIALj44QPDjIZJ9e3Bo3M6XIXNVZC9/26xxSHCxMS 1/cwL5sU1n7hR8Fk3jh162EdDp/5wEFDbCrniRt8y3w5o3D6TWlQxFBKCJlPgjAH qeubLp3AiYK/63GjDPevHTzCDLXuGx7OxVW0StVv8esevUbFXGOZfyXhzdudQ9Jk cAM5Sfz5SbKgu6AEJi5y5PkkSYNcD0XGqktnO0J95MFT6Gdr7e2rUljrIkO2oOTb 3nbxPsOi7aZGam6IHfYJtw9hjqeah7/0hSvg7yZoh8/q8hcVnGGlfuPy3T2DAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUTyV5uXWNZgrnheASAyaCR9ue5OEwHwYDVR0j BBgwFoAUQuUI+6iWD0gHGxGazL9Xvb86gFcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEtOGJhNS00NzlmLWEyMjktMGFiNzBlNDgx NWJiLzAvNDJFNTA4RkJBODk2MEY0ODA3MUIxMTlBQ0NCRjU3QkRCRjNBODA1Ny5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1F1VUktNmlXRDBnSEd4R2F6TDlYdmI4 NmdGYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83M2I4ZWMwMS04 YmE1LTQ3OWYtYTIyOS0wYWI3MGU0ODE1YmIvMC80MkU1MDhGQkE4OTYwRjQ4MDcx QjExOUFDQ0JGNTdCREJGM0E4MDU3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALbzVsBMNvXSPlxmKJhiS f+vXNQfm8Kus7hdieJpJwQj8RhpvaSQc0HNjhnprdj8+g+iXHqFLXGQcLQdhZWw1 uLZw9mo/Xe2tv7qpg48HRM1zxStEtYBLAyF4wxd0rxisVwW+f0PRTd4BSvfTr29E hcONKkkpkprtiTEzXLIKM6msxwNlJyUaLemmoNYXq3H7obJzcVZa5wyYSsuXPZmI IgqU3hHjVCQAQ2ZGjUwlPhdznpsAUaZT9AUuMN9R5GsPRrRzBc+l2JWxDPXtSjcv b37OGkQeCpL6XlaNpzIXS8t/sJCCYOCfg0UocIquRk72V5ey5kTuQ0L9oxAmgI0g 8A== -----END CERTIFICATE-----Generated at Mon Sep 21 04:16:28 2026 by rpki-client