$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft File: 42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft (raw, json) Hash identifier: OsAIkGnhfnyp3K/qTyyTDMTwkxHRXEiLfdOk99gJbIk= Subject key identifier: 10:FE:B0:0B:F6:33:19:4E:90:ED:3E:8B:64:38:DC:81:65:DE:1A:24 Authority key identifier: 42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57 Certificate issuer: /CN=42e508fba8960f48071b119accbf57bdbf3a8057 Certificate serial: 01BFEC984D3DE680282748FFF5F4752D4F3495AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft Manifest number: 0468 Signing time: Wed 04 Nov 2026 22:08:10 +0000 Manifest this update: Wed 04 Nov 2026 22:03:10 +0000 Manifest next update: Thu 05 Nov 2026 23:16:10 +0000 Files and hashes: 1: 42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl (hash: rQPFdVziH/ggytXxunz7yH5Ow+rGHAObhy50KK5ABm8=) 2: 5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer (hash: UTtj2AfVN+qJgs0Jtg2lSMG4vd4rZAoAQP7FbKKVJ7M=) 3: 326130623a346530343a343966353a3a2f34382d3438203d3e20343032353336.roa (hash: pWY9PAU1e4HYq/0yecEeibEgLvdjkG+Q4SYrRpaltss=) 4: 326130623a346530373a6234333a3a2f34382d3438203d3e20313937333234.roa (hash: /NicVI9ZA6HI/WOoAhhTorEr85yfvxle9J9tMstWWS8=) 5: 326130623a346530343a33613a3a2f34382d3438203d3e20323032333031.roa (hash: PxM9g8iygtPE0W8UaxD6VQbthErf6scMW5Q5B330XGE=) 6: 37322e342e36342e302f32312d3234203d3e20323130353436.roa (hash: 3HoCLBQvrCiDsa8r01UTnlbfabOdnsCU4K+/+QNFf8k=) 7: 37322e342e36342e302f32312d3234203d3e20323133383737.roa (hash: 5JuaVyoj7uoMOOuQAfWYB3bD3lyM6lnGctkuEoNIEqE=) 8: 326130623a346530343a3a2f33322d3438203d3e203236393534.roa (hash: F+gO6ZKYcboOFSJKnCm81psNizqbMEENngfXl2NTHEQ=) 9: AS202301.asa (hash: ft6tQ1rOWUa2YsQRj7uIGgH8Nr6RXCQJpFhPQabkhnM=) 10: AS26954.asa (hash: IUsw4dy87IC2cWQmte+pB1I+1bOzvTOC48eoRtPn5iE=) 11: 37322e342e36342e302f32312d3234203d3e20323135353930.roa (hash: UU1yktOfkcvmH8tNoOrtykdTweA/Ii+eyGWqUS9LW9w=) 12: 3139352e39352e3134392e302f32342d3234203d3e203236393534.roa (hash: wrTYL7mb+1quCshY5bvucyyFtZsLGfBb+j95uYXZhYI=) 13: 36322e3138322e3139322e302f32312d3234203d3e203432353332.roa (hash: k22wzf+MNF3rdZwWDi2NJmXkW92pMk1IiR0y5N9dN8c=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Nov 2026 23:16:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:bf:ec:98:4d:3d:e6:80:28:27:48:ff:f5:f4:75:2d:4f:34:95:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42e508fba8960f48071b119accbf57bdbf3a8057 Validity Not Before: Nov 4 22:03:10 2026 GMT Not After : Nov 5 23:16:10 2026 GMT Subject: CN=10FEB00BF633194E90ED3E8B6438DC8165DE1A24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:af:df:13:07:0f:aa:da:f9:e0:18:ac:be:48: bb:13:cf:c8:f0:4e:2c:12:41:64:af:09:3d:f9:4b: c6:28:13:e5:b0:ca:73:73:63:81:9a:f7:0d:5f:04: e0:47:68:81:11:81:75:a6:1b:eb:b7:8c:7d:2b:32: 2e:09:a6:42:2e:99:6e:6d:a8:06:05:eb:20:6b:84: 12:7f:11:7a:97:ae:fa:36:53:cc:05:35:f0:a7:d8: 63:9f:42:88:46:44:2e:50:75:70:20:8d:58:b4:e8: 9b:ed:8a:b6:a4:9a:d2:2a:6b:19:5a:72:dc:a2:95: c8:52:c1:87:dd:8f:1f:54:77:15:f1:3a:db:76:0c: 11:82:0b:08:66:e8:3c:69:21:37:e0:e2:8b:71:bb: f1:1f:74:63:61:73:7b:27:91:e7:51:cf:2c:fb:7f: bd:15:81:43:1c:3e:a1:51:3b:1e:62:ab:61:38:8f: b8:80:13:56:ce:6c:5a:2a:b3:f7:05:74:bc:e6:5e: be:d6:37:25:ba:ae:8b:98:d9:f9:5a:7c:4b:93:d6: 85:84:48:34:c3:64:0a:49:4d:f1:eb:48:63:14:e9: 05:d1:99:c1:5a:b5:6e:b2:1b:4f:de:83:0f:3e:5b: cc:65:41:7f:de:59:77:d3:12:ec:16:01:67:1a:a5: 8a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:FE:B0:0B:F6:33:19:4E:90:ED:3E:8B:64:38:DC:81:65:DE:1A:24 X509v3 Authority Key Identifier: keyid:42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:13:a5:7f:c6:0f:41:85:cf:f3:54:c2:b5:d2:ee:dd:99:a0: 9d:f9:3d:52:a3:e1:32:5c:98:2a:de:c8:e8:b1:3d:36:8a:cb: e8:df:7a:ea:06:7b:7b:bd:93:7a:c7:9f:52:6e:ff:c2:1c:a5: 05:3b:ec:4e:a3:96:ac:6a:e2:0a:82:c7:c0:ea:3a:a1:7a:95: 52:e3:18:89:f3:4a:d9:29:aa:0b:b0:96:c1:be:0c:37:d4:e1: b8:e5:89:f0:ed:e4:07:cf:e5:0b:58:f4:33:7f:f7:d3:90:4b: 89:3d:a3:c7:dd:d5:22:f5:80:3d:80:6a:8b:4b:12:79:e7:51: 5b:de:f0:a8:d0:3f:50:22:0a:0e:3f:16:0e:2d:a9:58:bb:d5: fb:26:0f:7f:9a:10:f0:2c:ef:c4:c5:76:4b:9f:ed:23:ae:2a: 42:d8:29:16:ef:ac:73:dc:6c:35:5a:d3:58:23:f1:d7:89:f6: f7:b1:84:85:ea:d7:14:e6:b4:06:c3:41:2d:42:d9:d9:b7:0c: f1:7f:84:a8:cd:91:7a:1f:31:57:7e:38:69:fc:79:c7:00:97: 23:b3:7d:13:9d:9a:f3:d0:3a:3a:47:d6:9f:e3:cc:4e:85:c7: 8c:56:da:da:0e:0d:2f:8a:1a:62:b2:7e:fb:8a:0f:44:b0:3b: 2d:86:05:ff -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUAb/smE095oAoJ0j/9fR1LU80la0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJlNTA4ZmJhODk2MGY0ODA3MWIxMTlhY2NiZjU3YmRi ZjNhODA1NzAeFw0yNjExMDQyMjAzMTBaFw0yNjExMDUyMzE2MTBaMDMxMTAvBgNV BAMTKDEwRkVCMDBCRjYzMzE5NEU5MEVEM0U4QjY0MzhEQzgxNjVERTFBMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjr98TBw+q2vngGKy+SLsTz8jw TiwSQWSvCT35S8YoE+WwynNzY4Ga9w1fBOBHaIERgXWmG+u3jH0rMi4JpkIumW5t qAYF6yBrhBJ/EXqXrvo2U8wFNfCn2GOfQohGRC5QdXAgjVi06JvtirakmtIqaxla ctyilchSwYfdjx9UdxXxOtt2DBGCCwhm6DxpITfg4otxu/EfdGNhc3snkedRzyz7 f70VgUMcPqFROx5iq2E4j7iAE1bObFoqs/cFdLzmXr7WNyW6rouY2flafEuT1oWE SDTDZApJTfHrSGMU6QXRmcFatW6yG0/egw8+W8xlQX/eWXfTEuwWAWcapYpVAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUEP6wC/YzGU6Q7T6LZDjcgWXeGiQwHwYDVR0j BBgwFoAUQuUI+6iWD0gHGxGazL9Xvb86gFcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEtOGJhNS00NzlmLWEyMjktMGFiNzBlNDgx NWJiLzAvNDJFNTA4RkJBODk2MEY0ODA3MUIxMTlBQ0NCRjU3QkRCRjNBODA1Ny5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1F1VUktNmlXRDBnSEd4R2F6TDlYdmI4 NmdGYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83M2I4ZWMwMS04 YmE1LTQ3OWYtYTIyOS0wYWI3MGU0ODE1YmIvMC80MkU1MDhGQkE4OTYwRjQ4MDcx QjExOUFDQ0JGNTdCREJGM0E4MDU3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhxOlf8YPQYXP81TCtdLu 3Zmgnfk9UqPhMlyYKt7I6LE9NorL6N966gZ7e72TesefUm7/whylBTvsTqOWrGri CoLHwOo6oXqVUuMYifNK2SmqC7CWwb4MN9ThuOWJ8O3kB8/lC1j0M3/305BLiT2j x93VIvWAPYBqi0sSeedRW97wqNA/UCIKDj8WDi2pWLvV+yYPf5oQ8CzvxMV2S5/t I64qQtgpFu+sc9xsNVrTWCPx14n297GEherXFOa0BsNBLULZ2bcM8X+EqM2Reh8x V344afx5xwCXI7N9E52a89A6OkfWn+PMToXHjFba2g4NL4oaYrJ++4oPRLA7LYYF /w== -----END CERTIFICATE-----Generated at Thu Nov 5 11:08:49 2026 by rpki-client