$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft File: 42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft (raw, json) Hash identifier: MpAli9hpMVI+jhUOpsf19Aol9p/nzHn4L8/8XBgZ8Fs= Subject key identifier: D9:B0:DC:93:53:FA:57:4E:C7:A5:4B:3D:A2:0A:BD:2C:7C:FF:56:19 Authority key identifier: 42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57 Certificate issuer: /CN=42e508fba8960f48071b119accbf57bdbf3a8057 Certificate serial: 76FD2EC574CCE1754FAEE8F8E61B3A019FB803A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft Manifest number: 0382 Signing time: Sat 13 Jun 2026 04:46:49 +0000 Manifest this update: Sat 13 Jun 2026 04:41:49 +0000 Manifest next update: Sun 14 Jun 2026 06:07:49 +0000 Files and hashes: 1: AS202301.asa (hash: ft6tQ1rOWUa2YsQRj7uIGgH8Nr6RXCQJpFhPQabkhnM=) 2: 326130623a346530373a6234333a3a2f34382d3438203d3e20313937333234.roa (hash: /NicVI9ZA6HI/WOoAhhTorEr85yfvxle9J9tMstWWS8=) 3: 326130623a346530343a3a2f33322d3438203d3e203236393534.roa (hash: F+gO6ZKYcboOFSJKnCm81psNizqbMEENngfXl2NTHEQ=) 4: 36322e3138322e3139322e302f32312d3234203d3e203432353332.roa (hash: k22wzf+MNF3rdZwWDi2NJmXkW92pMk1IiR0y5N9dN8c=) 5: 3139352e39352e3134392e302f32342d3234203d3e203236393534.roa (hash: 4RKcXrOywUF2n3zLGUholuQfQjsDw3jfgXGtm0jfONU=) 6: 5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer (hash: lXe13RBUxovtDeo0vUNLNiUlbTuVxQ0Bok87KRz7tc0=) 7: 326130623a346530343a33613a3a2f34382d3438203d3e20323032333031.roa (hash: PxM9g8iygtPE0W8UaxD6VQbthErf6scMW5Q5B330XGE=) 8: 326130623a346530343a343966353a3a2f34382d3438203d3e20343032353336.roa (hash: pWY9PAU1e4HYq/0yecEeibEgLvdjkG+Q4SYrRpaltss=) 9: 42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl (hash: V+8Yi5dsAeRZipCi/cg6wzQQkhHWjptcEuRBnXsNSQg=) 10: AS26954.asa (hash: GJbuxOOIwYdyKeNuY3ueZtcbp7hkyah5TRoeVRKV13c=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 06:07:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:fd:2e:c5:74:cc:e1:75:4f:ae:e8:f8:e6:1b:3a:01:9f:b8:03:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42e508fba8960f48071b119accbf57bdbf3a8057 Validity Not Before: Jun 13 04:41:49 2026 GMT Not After : Jun 14 06:07:49 2026 GMT Subject: CN=D9B0DC9353FA574EC7A54B3DA20ABD2C7CFF5619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e1:ab:f5:5e:11:24:5a:52:f9:bf:5a:3d:b5: e9:c5:b9:38:f3:20:dc:f0:10:18:57:f4:8d:84:c0: f1:6a:18:d4:2a:86:41:9a:88:46:23:79:2c:c2:0e: d7:1b:bb:d3:09:12:c4:1a:31:d9:52:92:f0:4d:d4: 5f:24:4a:54:80:52:9c:e9:31:da:35:ef:df:d5:e4: 7c:31:e6:cd:13:dc:48:75:35:79:0f:78:89:e7:48: 33:29:f9:34:f4:be:da:9d:61:16:a5:ae:9e:58:06: 87:d4:fc:3c:49:1e:da:35:e4:4c:29:0c:b5:32:db: 61:f5:74:2d:cf:f3:72:c6:bc:5c:0b:46:5b:1a:ff: 13:b8:da:20:d8:cb:3f:c3:8a:3e:5b:3b:b9:66:aa: a8:63:1a:67:93:c9:e5:a2:8f:4c:d7:41:df:94:b4: dd:6a:f2:1d:04:9d:34:c0:55:03:35:f3:94:54:cb: d0:58:2b:d1:46:08:a7:57:9f:54:70:b4:4e:6e:c5: 5f:d5:6e:df:e5:33:99:7d:7a:79:b6:79:18:9d:43: e5:42:dc:1f:eb:35:13:98:f6:4b:3d:3a:94:fc:bf: 4a:87:15:93:d0:ea:da:58:02:5b:10:a2:a7:b8:34: 50:97:8c:ec:1b:5a:2b:43:cf:67:e1:fc:51:a5:f0: e2:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B0:DC:93:53:FA:57:4E:C7:A5:4B:3D:A2:0A:BD:2C:7C:FF:56:19 X509v3 Authority Key Identifier: keyid:42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:9a:43:8c:72:90:9d:a9:a4:ea:8a:75:2a:53:d7:6e:23:74: 8f:ce:bf:ba:89:ff:da:21:74:b0:35:48:9e:1e:0c:70:26:5d: aa:a5:69:45:29:0b:da:50:e4:bc:f0:01:7e:f7:11:f8:2b:96: 32:15:22:d8:69:3b:b3:b8:dc:01:0e:52:b2:1e:06:9b:d4:c3: 36:3f:37:3d:36:b0:a6:16:71:cd:f3:68:cd:7f:7d:b4:5c:d7: 8e:22:9a:7e:92:be:e1:e8:4e:bc:88:60:8f:4d:14:6a:41:a9: 4d:06:9f:4f:1a:3e:7d:4f:6e:88:5c:86:19:dd:bf:e6:ba:77: 07:c4:45:9f:85:72:40:64:65:e8:32:b7:44:cd:89:dd:6c:9d: e5:14:e8:8c:87:64:00:2c:0a:1a:34:5e:dc:a0:7b:ff:6b:01: 69:40:8a:d5:3a:80:61:5c:1b:7c:c2:6e:2e:01:2f:b7:a3:86: 3f:1a:7d:f4:3c:72:1d:ce:9b:45:fa:b5:0c:d0:0c:a5:a9:5e: ae:9f:be:00:d7:4c:3a:03:d7:14:27:05:f0:a8:88:80:a7:d4: 58:e6:64:e1:9a:c8:b8:80:2d:00:90:52:2f:b5:6c:0b:fb:21: 4a:e8:11:3e:f0:95:df:e4:7f:fe:10:df:ef:46:29:be:54:ba: ce:e0:d9:83 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUdv0uxXTM4XVPruj45hs6AZ+4A6QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJlNTA4ZmJhODk2MGY0ODA3MWIxMTlhY2NiZjU3YmRi ZjNhODA1NzAeFw0yNjA2MTMwNDQxNDlaFw0yNjA2MTQwNjA3NDlaMDMxMTAvBgNV BAMTKEQ5QjBEQzkzNTNGQTU3NEVDN0E1NEIzREEyMEFCRDJDN0NGRjU2MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl4av1XhEkWlL5v1o9tenFuTjz INzwEBhX9I2EwPFqGNQqhkGaiEYjeSzCDtcbu9MJEsQaMdlSkvBN1F8kSlSAUpzp Mdo179/V5Hwx5s0T3Eh1NXkPeInnSDMp+TT0vtqdYRalrp5YBofU/DxJHto15Ewp DLUy22H1dC3P83LGvFwLRlsa/xO42iDYyz/Dij5bO7lmqqhjGmeTyeWij0zXQd+U tN1q8h0EnTTAVQM185RUy9BYK9FGCKdXn1RwtE5uxV/Vbt/lM5l9enm2eRidQ+VC 3B/rNROY9ks9OpT8v0qHFZPQ6tpYAlsQoqe4NFCXjOwbWitDz2fh/FGl8OIJAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU2bDck1P6V07HpUs9ogq9LHz/VhkwHwYDVR0j BBgwFoAUQuUI+6iWD0gHGxGazL9Xvb86gFcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEtOGJhNS00NzlmLWEyMjktMGFiNzBlNDgx NWJiLzAvNDJFNTA4RkJBODk2MEY0ODA3MUIxMTlBQ0NCRjU3QkRCRjNBODA1Ny5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1F1VUktNmlXRDBnSEd4R2F6TDlYdmI4 NmdGYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83M2I4ZWMwMS04 YmE1LTQ3OWYtYTIyOS0wYWI3MGU0ODE1YmIvMC80MkU1MDhGQkE4OTYwRjQ4MDcx QjExOUFDQ0JGNTdCREJGM0E4MDU3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXZpDjHKQnamk6op1KlPX biN0j86/uon/2iF0sDVInh4McCZdqqVpRSkL2lDkvPABfvcR+CuWMhUi2Gk7s7jc AQ5Ssh4Gm9TDNj83PTawphZxzfNozX99tFzXjiKafpK+4ehOvIhgj00UakGpTQaf Txo+fU9uiFyGGd2/5rp3B8RFn4VyQGRl6DK3RM2J3Wyd5RTojIdkACwKGjRe3KB7 /2sBaUCK1TqAYVwbfMJuLgEvt6OGPxp99DxyHc6bRfq1DNAMpalerp++ANdMOgPX FCcF8KiIgKfUWOZk4ZrIuIAtAJBSL7VsC/shSugRPvCV3+R//hDf70YpvlS6zuDZ gw== -----END CERTIFICATE-----Generated at Sat Jun 13 13:12:38 2026 by rpki-client