$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft File: 42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft (raw, json) Hash identifier: +onVtL37By3Ktgko9FS8yiMbOOssPtUyrI51j0IHA+g= Subject key identifier: 2B:E4:F8:C2:B6:96:FC:B6:47:BA:B0:A2:93:0C:8F:E3:58:9E:D5:F4 Authority key identifier: 42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57 Certificate issuer: /CN=42e508fba8960f48071b119accbf57bdbf3a8057 Certificate serial: 0A057085BA8B7B58D55231740C6A7F28D630106D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft Manifest number: 030C Signing time: Fri 17 Apr 2026 00:16:32 +0000 Manifest this update: Fri 17 Apr 2026 00:11:32 +0000 Manifest next update: Sat 18 Apr 2026 01:17:32 +0000 Files and hashes: 1: 42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl (hash: aVhVTrDj5lfhiGfmzHpalK3umRtXBosQ5FMoXN5Rzko=) 2: 3139352e39352e3134392e302f32342d3234203d3e203331383938.roa (hash: nIlM4wp0iNBT5SN8C9VsrwDGSOsVnjaNLplEtHDOmPI=) 3: 326130623a346530343a626565663a3a2f34382d3438203d3e203236393534.roa (hash: dXSnrOSsmksjfaruQTR4onccvLxLXawLPmHLDP+0pZ0=) 4: 3139352e39352e3134392e302f32342d3234203d3e203236393534.roa (hash: 4RKcXrOywUF2n3zLGUholuQfQjsDw3jfgXGtm0jfONU=) 5: 326130623a346530343a34323a3a2f34382d3438203d3e203236393534.roa (hash: J0sU27KhsWLAQskvnilOEJPNfUn6f6vWuMhZwx5IsPQ=) 6: 326130623a346530343a646561643a3a2f34382d3438203d3e203236393534.roa (hash: baWQi1OtzFs3EXfopwYbyPRpvtk3lpDNhJaB1/yO3UE=) 7: 36322e3138322e3139322e302f32312d3234203d3e203432353332.roa (hash: k22wzf+MNF3rdZwWDi2NJmXkW92pMk1IiR0y5N9dN8c=) 8: 326130623a346530343a3a2f34382d3438203d3e203236393534.roa (hash: kjCVplBQIQWTrk/MT/vsXbIMmP0BY/AuB2NZAKC1i00=) 9: 326130623a346530343a646561643a3a2f34382d3438203d3e203331383938.roa (hash: V5g1oVVpactG3mKu8PF61hy91x6gtyEU1mTZQLj69yk=) 10: 5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer (hash: zJspLoAuyjsjcg9AxLgZZFzMqY2tt8V3yZeSo6Pl9Jk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 22:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:05:70:85:ba:8b:7b:58:d5:52:31:74:0c:6a:7f:28:d6:30:10:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42e508fba8960f48071b119accbf57bdbf3a8057 Validity Not Before: Apr 17 00:11:32 2026 GMT Not After : Apr 18 01:17:32 2026 GMT Subject: CN=2BE4F8C2B696FCB647BAB0A2930C8FE3589ED5F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c2:f8:11:de:ca:5c:cd:bc:96:c2:ac:1c:95: 8b:9c:9e:e9:8f:71:3a:d7:89:91:7e:c0:ec:38:1f: 5f:1a:3a:cc:c6:6a:21:71:65:db:f9:0b:e3:45:5c: 6a:42:cf:c3:c9:f8:ee:21:fa:68:cc:c7:6a:f4:b5: e0:fb:23:72:fb:4d:63:2c:80:b3:46:71:9d:a3:35: ae:64:30:32:ae:d4:6a:0a:45:ac:f2:cc:ac:cb:cf: 7b:67:dd:ef:00:77:3c:0b:54:28:4f:22:b0:95:43: e9:b9:2c:b9:4e:e2:5b:2f:10:a1:7b:05:4d:65:70: 1a:cb:d2:89:6c:1f:ca:05:e8:a7:c7:5d:f6:c7:17: f8:ff:02:79:f0:03:93:d7:80:30:41:16:5a:43:02: ef:5c:43:93:3d:73:88:39:76:2e:f5:58:11:0b:c5: 4a:33:96:dc:d2:8c:de:23:39:8e:81:aa:c5:15:e0: 14:1d:0e:39:02:2a:41:89:ff:a2:3b:08:0c:62:46: e7:54:ae:33:8c:c9:bd:3c:80:43:28:a2:3a:2f:9e: a4:40:8a:c5:19:b3:55:3f:2b:ab:9f:7d:b8:33:f1: 2c:cf:10:79:fa:81:5e:b2:33:79:7b:d5:64:e8:05: 60:c2:eb:ea:10:67:ca:b8:b2:89:1c:85:9a:88:3b: 96:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E4:F8:C2:B6:96:FC:B6:47:BA:B0:A2:93:0C:8F:E3:58:9E:D5:F4 X509v3 Authority Key Identifier: keyid:42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:82:1f:81:8e:66:05:f6:0e:ff:67:fd:27:08:6c:f1:bb:b2: 60:98:d9:06:ab:af:52:bb:52:fa:b0:c3:7b:81:c5:a0:ea:64: 0e:9b:91:c7:90:2b:b8:40:cc:20:02:c3:e4:53:ae:d4:32:a8: 89:14:72:57:8b:48:e2:19:80:bf:71:bd:83:ec:5b:b3:d0:04: 68:08:ba:55:f4:58:29:e7:ea:00:07:87:fb:a2:3d:c5:a7:3e: 0c:ba:4f:e1:00:00:dd:0c:a8:87:75:59:89:71:6d:e3:b5:88: aa:8f:32:8e:d1:f5:c8:55:77:92:f8:24:1f:96:59:5b:fc:13: 2c:c7:2e:c1:59:2d:13:8f:84:79:35:d4:8f:8d:13:62:20:e9: 45:27:2d:48:d6:3b:7e:96:31:04:cc:69:dc:6a:60:f8:cc:ba: 74:bb:f4:5e:c2:9b:ca:41:ea:cf:29:f9:fc:e0:96:79:8a:4d: 96:38:b5:35:56:48:8e:48:cc:cf:ac:c7:7c:b9:ff:b2:3c:d4: a1:3a:2d:83:b8:fb:ff:e1:76:fb:02:49:22:e2:d1:c5:42:ee: 83:d0:29:e6:68:67:35:ce:fd:00:d2:56:a2:5e:7e:9a:f1:76: ac:cf:d0:da:27:23:3e:73:77:42:6f:70:09:f6:c9:51:26:ed: 88:2f:1e:28 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUCgVwhbqLe1jVUjF0DGp/KNYwEG0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJlNTA4ZmJhODk2MGY0ODA3MWIxMTlhY2NiZjU3YmRi ZjNhODA1NzAeFw0yNjA0MTcwMDExMzJaFw0yNjA0MTgwMTE3MzJaMDMxMTAvBgNV BAMTKDJCRTRGOEMyQjY5NkZDQjY0N0JBQjBBMjkzMEM4RkUzNTg5RUQ1RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDwvgR3spczbyWwqwclYucnumP cTrXiZF+wOw4H18aOszGaiFxZdv5C+NFXGpCz8PJ+O4h+mjMx2r0teD7I3L7TWMs gLNGcZ2jNa5kMDKu1GoKRazyzKzLz3tn3e8AdzwLVChPIrCVQ+m5LLlO4lsvEKF7 BU1lcBrL0olsH8oF6KfHXfbHF/j/AnnwA5PXgDBBFlpDAu9cQ5M9c4g5di71WBEL xUozltzSjN4jOY6BqsUV4BQdDjkCKkGJ/6I7CAxiRudUrjOMyb08gEMoojovnqRA isUZs1U/K6uffbgz8SzPEHn6gV6yM3l71WToBWDC6+oQZ8q4sokchZqIO5Z7AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUK+T4wraW/LZHurCikwyP41ie1fQwHwYDVR0j BBgwFoAUQuUI+6iWD0gHGxGazL9Xvb86gFcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEtOGJhNS00NzlmLWEyMjktMGFiNzBlNDgx NWJiLzAvNDJFNTA4RkJBODk2MEY0ODA3MUIxMTlBQ0NCRjU3QkRCRjNBODA1Ny5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1F1VUktNmlXRDBnSEd4R2F6TDlYdmI4 NmdGYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83M2I4ZWMwMS04 YmE1LTQ3OWYtYTIyOS0wYWI3MGU0ODE1YmIvMC80MkU1MDhGQkE4OTYwRjQ4MDcx QjExOUFDQ0JGNTdCREJGM0E4MDU3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa4IfgY5mBfYO/2f9Jwhs 8buyYJjZBquvUrtS+rDDe4HFoOpkDpuRx5AruEDMIALD5FOu1DKoiRRyV4tI4hmA v3G9g+xbs9AEaAi6VfRYKefqAAeH+6I9xac+DLpP4QAA3Qyoh3VZiXFt47WIqo8y jtH1yFV3kvgkH5ZZW/wTLMcuwVktE4+EeTXUj40TYiDpRSctSNY7fpYxBMxp3Gpg +My6dLv0XsKbykHqzyn5/OCWeYpNlji1NVZIjkjMz6zHfLn/sjzUoTotg7j7/+F2 +wJJIuLRxULug9Ap5mhnNc79ANJWol5+mvF2rM/Q2icjPnN3Qm9wCfbJUSbtiC8e KA== -----END CERTIFICATE-----Generated at Fri Apr 17 03:22:22 2026 by rpki-client