$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft File: 42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft (raw, json) Hash identifier: rJJgN69pZqobOV3onKbCnGhHWyOXWIGSH8otacwXFZY= Subject key identifier: 52:4E:44:FC:90:C6:E5:0F:2C:9F:C8:34:47:77:20:AE:A8:5C:59:7C Authority key identifier: 42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57 Certificate issuer: /CN=42e508fba8960f48071b119accbf57bdbf3a8057 Certificate serial: 7566BF47AB2CA2EBDC78C63D8F7EFAF338DECCCD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft Manifest number: 01A3 Signing time: Sun 03 Aug 2025 20:44:37 +0000 Manifest this update: Sun 03 Aug 2025 20:39:37 +0000 Manifest next update: Mon 04 Aug 2025 21:56:37 +0000 Files and hashes: 1: 326130623a346530343a3a2f34382d3438203d3e203236393534.roa (hash: kjCVplBQIQWTrk/MT/vsXbIMmP0BY/AuB2NZAKC1i00=) 2: 326130623a346530343a626565663a3a2f34382d3438203d3e203236393534.roa (hash: dXSnrOSsmksjfaruQTR4onccvLxLXawLPmHLDP+0pZ0=) 3: 5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer (hash: xVnvGBOQAGx7ddcmxacteZKEbUgAqtkW3B5rWiVC4Gw=) 4: 36322e3138322e3139322e302f32312d3234203d3e203432353332.roa (hash: 3uX+IJtCK1auUN/owB303ntI6bBy0+b5ouSYztCnTmQ=) 5: 3139352e39352e3134392e302f32342d3234203d3e203236393534.roa (hash: 4RKcXrOywUF2n3zLGUholuQfQjsDw3jfgXGtm0jfONU=) 6: 42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl (hash: 5pZZ1Tuq/l5ccrzv4KD/NkC2kQdHk5/yGildpW4lx5w=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 04 Aug 2025 21:56:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:66:bf:47:ab:2c:a2:eb:dc:78:c6:3d:8f:7e:fa:f3:38:de:cc:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42e508fba8960f48071b119accbf57bdbf3a8057 Validity Not Before: Aug 3 20:39:37 2025 GMT Not After : Aug 4 21:56:37 2025 GMT Subject: CN=524E44FC90C6E50F2C9FC834477720AEA85C597C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1b:31:31:ac:e6:08:ae:75:eb:3a:55:b3:d2: 07:60:99:14:7d:c3:ea:01:1d:f3:f6:b0:02:59:95: 60:34:98:77:0c:59:6f:86:55:d8:28:06:50:7f:36: 7b:49:90:02:aa:1c:78:1f:4e:ff:d5:7e:9c:0c:f1: 7c:e5:de:03:1d:2c:71:2c:65:bc:39:33:22:96:a0: 92:ba:82:f2:3a:b0:19:dd:08:ef:7f:d9:83:a4:5a: 0c:3a:72:5d:c3:c4:93:bc:28:ed:63:ec:a4:b7:05: d2:72:17:32:75:54:6a:de:fe:91:3c:85:5b:82:c5: dc:e6:fb:06:b8:d1:cc:44:ee:90:d6:18:a9:df:7c: ae:5a:06:ce:a9:a6:28:bf:74:1c:ed:82:31:91:55: 02:b6:7e:73:37:77:57:dd:4e:39:6e:d5:0c:93:12: 47:e9:41:47:14:7c:51:f0:6b:af:5f:8d:b4:74:7e: 69:3e:3d:40:3f:15:ac:88:95:83:0d:d1:28:e2:94: 9a:ce:5f:10:ff:5b:09:93:17:b3:9d:b9:ac:92:b2: b2:64:87:d2:3e:96:3b:69:29:62:5b:b8:d2:d3:1c: b1:cb:8d:38:14:a3:b2:7b:61:e8:10:22:b0:8a:6d: 12:25:43:c6:43:8b:0f:3c:91:99:9f:c3:7a:33:09: d6:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:4E:44:FC:90:C6:E5:0F:2C:9F:C8:34:47:77:20:AE:A8:5C:59:7C X509v3 Authority Key Identifier: keyid:42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:d4:b1:24:68:4d:87:7a:d0:3c:02:8e:e1:86:c6:6f:c3:05: 34:42:51:b8:85:76:91:35:6b:14:eb:f3:da:bd:3e:ef:af:e2: 74:f0:89:4a:a1:e1:a8:03:dc:b2:37:50:0f:c1:1c:1f:ec:ba: 8c:08:3c:82:67:8b:5e:55:1a:34:f7:48:fe:98:96:b0:fe:99: 5b:ac:9d:9f:0b:7d:5e:75:d3:9f:4d:ac:0a:7b:a0:ed:1d:81: a2:0b:12:50:77:7f:c2:ca:0a:4e:82:da:bc:5a:5a:3c:9b:2d: 9e:af:ae:f0:67:c4:ec:e2:73:76:01:cd:e8:e8:c7:e6:eb:6d: 78:41:e9:01:fa:51:95:a8:7b:eb:99:9f:5c:e1:13:1c:c6:46: 82:fe:11:52:ad:40:98:24:66:8e:b9:13:3a:3a:34:24:bd:ed: 4d:0e:5e:52:80:33:9b:86:50:01:d0:7f:85:0d:9b:c5:36:ad: 30:0a:22:55:ec:ff:4e:f5:ee:1f:d4:1d:4e:a6:27:ba:ad:30: 10:f2:45:c7:db:9e:2c:e5:81:77:75:5c:54:93:85:04:5c:9d: b9:72:82:27:0f:89:ed:85:79:a7:87:d8:f4:d0:b4:d4:99:61: 62:d7:fb:08:13:1a:4f:76:53:3d:4b:5c:ca:32:f7:31:e0:60: a3:a7:61:5d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUdWa/R6ssouvceMY9j3768zjezM0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJlNTA4ZmJhODk2MGY0ODA3MWIxMTlhY2NiZjU3YmRi ZjNhODA1NzAeFw0yNTA4MDMyMDM5MzdaFw0yNTA4MDQyMTU2MzdaMDMxMTAvBgNV BAMTKDUyNEU0NEZDOTBDNkU1MEYyQzlGQzgzNDQ3NzcyMEFFQTg1QzU5N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/GzExrOYIrnXrOlWz0gdgmRR9 w+oBHfP2sAJZlWA0mHcMWW+GVdgoBlB/NntJkAKqHHgfTv/VfpwM8Xzl3gMdLHEs Zbw5MyKWoJK6gvI6sBndCO9/2YOkWgw6cl3DxJO8KO1j7KS3BdJyFzJ1VGre/pE8 hVuCxdzm+wa40cxE7pDWGKnffK5aBs6ppii/dBztgjGRVQK2fnM3d1fdTjlu1QyT EkfpQUcUfFHwa69fjbR0fmk+PUA/FayIlYMN0SjilJrOXxD/WwmTF7OduaySsrJk h9I+ljtpKWJbuNLTHLHLjTgUo7J7YegQIrCKbRIlQ8ZDiw88kZmfw3ozCdZhAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUUk5E/JDG5Q8sn8g0R3cgrqhcWXwwHwYDVR0j BBgwFoAUQuUI+6iWD0gHGxGazL9Xvb86gFcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEtOGJhNS00NzlmLWEyMjktMGFiNzBlNDgx NWJiLzAvNDJFNTA4RkJBODk2MEY0ODA3MUIxMTlBQ0NCRjU3QkRCRjNBODA1Ny5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1F1VUktNmlXRDBnSEd4R2F6TDlYdmI4 NmdGYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83M2I4ZWMwMS04 YmE1LTQ3OWYtYTIyOS0wYWI3MGU0ODE1YmIvMC80MkU1MDhGQkE4OTYwRjQ4MDcx QjExOUFDQ0JGNTdCREJGM0E4MDU3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR9SxJGhNh3rQPAKO4YbG b8MFNEJRuIV2kTVrFOvz2r0+76/idPCJSqHhqAPcsjdQD8EcH+y6jAg8gmeLXlUa NPdI/piWsP6ZW6ydnwt9XnXTn02sCnug7R2BogsSUHd/wsoKToLavFpaPJstnq+u 8GfE7OJzdgHN6OjH5utteEHpAfpRlah765mfXOETHMZGgv4RUq1AmCRmjrkTOjo0 JL3tTQ5eUoAzm4ZQAdB/hQ2bxTatMAoiVez/TvXuH9QdTqYnuq0wEPJFx9ueLOWB d3VcVJOFBFyduXKCJw+J7YV5p4fY9NC01JlhYtf7CBMaT3ZTPUtcyjL3MeBgo6dh XQ== -----END CERTIFICATE-----Generated at Mon Aug 4 11:20:48 2025 by rpki-client