$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft File: 42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft (raw, json) Hash identifier: fO23dl70CvAB+4PYsxr1fdkYOUTZz5/qVUkux/hT9mI= Subject key identifier: 7B:D9:10:49:9E:F0:B3:A2:89:51:6B:5E:5C:30:B5:8D:D3:86:48:8B Authority key identifier: 42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57 Certificate issuer: /CN=42e508fba8960f48071b119accbf57bdbf3a8057 Certificate serial: 61E733C97EF88864F5C66D3326F68B24927B4C84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft Manifest number: 03D2 Signing time: Tue 28 Jul 2026 12:31:02 +0000 Manifest this update: Tue 28 Jul 2026 12:26:02 +0000 Manifest next update: Wed 29 Jul 2026 16:08:02 +0000 Files and hashes: 1: 3139352e39352e3134392e302f32342d3234203d3e203236393534.roa (hash: wrTYL7mb+1quCshY5bvucyyFtZsLGfBb+j95uYXZhYI=) 2: 36322e3138322e3139322e302f32312d3234203d3e203432353332.roa (hash: k22wzf+MNF3rdZwWDi2NJmXkW92pMk1IiR0y5N9dN8c=) 3: 326130623a346530343a33613a3a2f34382d3438203d3e20323032333031.roa (hash: PxM9g8iygtPE0W8UaxD6VQbthErf6scMW5Q5B330XGE=) 4: 326130623a346530343a343966353a3a2f34382d3438203d3e20343032353336.roa (hash: pWY9PAU1e4HYq/0yecEeibEgLvdjkG+Q4SYrRpaltss=) 5: 42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl (hash: NWj0aHtvFjxMg6x/oJyUzZos8/m0w0LlmO7PvnbdzLM=) 6: 326130623a346530343a3a2f33322d3438203d3e203236393534.roa (hash: F+gO6ZKYcboOFSJKnCm81psNizqbMEENngfXl2NTHEQ=) 7: 326130623a346530373a6234333a3a2f34382d3438203d3e20313937333234.roa (hash: /NicVI9ZA6HI/WOoAhhTorEr85yfvxle9J9tMstWWS8=) 8: 5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer (hash: zbGhbbqyFkTvVvJ0nzf54Stap2yy7rxMQ0TjGFSRd0A=) 9: AS26954.asa (hash: IUsw4dy87IC2cWQmte+pB1I+1bOzvTOC48eoRtPn5iE=) 10: AS202301.asa (hash: ft6tQ1rOWUa2YsQRj7uIGgH8Nr6RXCQJpFhPQabkhnM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 07:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:e7:33:c9:7e:f8:88:64:f5:c6:6d:33:26:f6:8b:24:92:7b:4c:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42e508fba8960f48071b119accbf57bdbf3a8057 Validity Not Before: Jul 28 12:26:02 2026 GMT Not After : Jul 29 16:08:02 2026 GMT Subject: CN=7BD910499EF0B3A289516B5E5C30B58DD386488B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:00:bb:f8:cc:fa:7e:ef:9d:1a:5e:85:b8:04: 76:d4:be:ab:f2:36:c9:d3:05:ee:d1:d0:68:c3:ee: 0a:6e:03:ba:f8:1f:d1:d3:53:30:e0:58:fc:6d:11: 86:e7:a3:c2:1e:39:4a:cb:10:c7:25:40:3f:e9:03: 01:d2:49:f6:79:74:ba:0d:4e:9b:22:b9:7e:e5:39: 48:fa:75:f1:d7:8f:ce:77:6b:b6:f1:01:3d:93:c7: 4d:83:57:59:af:fc:95:db:fb:92:48:02:af:49:1a: 2c:51:07:08:42:49:a0:38:0f:fb:88:dc:4c:63:b5: 1f:6e:9b:c8:e5:90:b8:87:d5:3f:09:3b:23:1d:92: 15:2f:23:fc:42:92:9e:8a:6f:0f:3b:e7:2b:2c:dc: 95:a8:a3:a8:a7:7e:0c:7f:7b:50:43:13:c3:01:89: 2a:e2:c4:ac:9c:de:1b:09:f4:ba:79:97:65:95:4a: 50:0e:8d:38:50:ed:63:e5:ce:88:02:4c:be:a0:6a: 4d:4d:f1:5b:16:c1:2b:7b:10:be:4c:99:53:c6:ca: e8:8e:05:31:53:0c:da:92:9d:45:ad:ad:2a:ff:8a: f8:fd:a7:1e:57:5f:96:0a:69:e2:8f:0c:8d:b2:48: 67:39:4c:4a:0e:13:81:44:46:88:5f:82:02:f1:f4: 76:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:D9:10:49:9E:F0:B3:A2:89:51:6B:5E:5C:30:B5:8D:D3:86:48:8B X509v3 Authority Key Identifier: keyid:42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:10:65:ca:42:d0:5f:a6:71:96:30:87:a3:5c:62:6b:33:19: 57:2a:bb:7b:5a:98:5a:7c:3a:c6:85:fd:d3:91:66:a8:41:35: 1c:dc:f5:6d:83:74:68:04:f1:d6:14:a4:db:b0:d8:c4:8e:9e: 87:58:e3:65:bb:56:5a:e9:9a:bb:3c:83:b8:a5:4f:f6:31:77: 8d:9b:0c:bc:51:c0:ff:bd:52:bb:42:88:a4:82:ef:4f:1f:1b: 20:a4:3b:15:33:8a:3f:7b:58:cc:bd:ef:64:51:91:bb:90:06: 5c:ed:7a:a4:46:32:c5:33:14:0c:00:a7:c6:cf:9b:17:09:a0: e8:17:52:1c:ac:ce:62:f0:04:dd:ff:93:1d:95:ef:8e:8d:3c: fd:61:bf:73:39:f7:da:c2:66:7a:41:9a:5f:04:af:8c:94:5c: 2b:5f:36:11:fd:ed:a6:26:2e:92:ba:a0:a1:c8:02:35:2d:7f: 33:da:6d:15:07:ea:7d:0e:08:aa:dc:04:c4:9c:62:52:92:5e: a5:31:b2:9a:5e:65:d7:22:3d:88:b9:0d:0c:28:90:a5:3b:30: 34:ca:60:75:73:bc:c5:31:44:b8:57:19:d6:67:fb:ea:b6:4e: fd:85:43:60:b3:e4:02:eb:e2:13:f7:63:4b:0f:0d:4e:49:33: d8:47:17:cb -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUYeczyX74iGT1xm0zJvaLJJJ7TIQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJlNTA4ZmJhODk2MGY0ODA3MWIxMTlhY2NiZjU3YmRi ZjNhODA1NzAeFw0yNjA3MjgxMjI2MDJaFw0yNjA3MjkxNjA4MDJaMDMxMTAvBgNV BAMTKDdCRDkxMDQ5OUVGMEIzQTI4OTUxNkI1RTVDMzBCNThERDM4NjQ4OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuALv4zPp+750aXoW4BHbUvqvy NsnTBe7R0GjD7gpuA7r4H9HTUzDgWPxtEYbno8IeOUrLEMclQD/pAwHSSfZ5dLoN TpsiuX7lOUj6dfHXj853a7bxAT2Tx02DV1mv/JXb+5JIAq9JGixRBwhCSaA4D/uI 3ExjtR9um8jlkLiH1T8JOyMdkhUvI/xCkp6Kbw875yss3JWoo6infgx/e1BDE8MB iSrixKyc3hsJ9Lp5l2WVSlAOjThQ7WPlzogCTL6gak1N8VsWwSt7EL5MmVPGyuiO BTFTDNqSnUWtrSr/ivj9px5XX5YKaeKPDI2ySGc5TEoOE4FERohfggLx9HZxAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUe9kQSZ7ws6KJUWteXDC1jdOGSIswHwYDVR0j BBgwFoAUQuUI+6iWD0gHGxGazL9Xvb86gFcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEtOGJhNS00NzlmLWEyMjktMGFiNzBlNDgx NWJiLzAvNDJFNTA4RkJBODk2MEY0ODA3MUIxMTlBQ0NCRjU3QkRCRjNBODA1Ny5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1F1VUktNmlXRDBnSEd4R2F6TDlYdmI4 NmdGYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83M2I4ZWMwMS04 YmE1LTQ3OWYtYTIyOS0wYWI3MGU0ODE1YmIvMC80MkU1MDhGQkE4OTYwRjQ4MDcx QjExOUFDQ0JGNTdCREJGM0E4MDU3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKRBlykLQX6ZxljCHo1xi azMZVyq7e1qYWnw6xoX905FmqEE1HNz1bYN0aATx1hSk27DYxI6eh1jjZbtWWuma uzyDuKVP9jF3jZsMvFHA/71Su0KIpILvTx8bIKQ7FTOKP3tYzL3vZFGRu5AGXO16 pEYyxTMUDACnxs+bFwmg6BdSHKzOYvAE3f+THZXvjo08/WG/czn32sJmekGaXwSv jJRcK182Ef3tpiYukrqgocgCNS1/M9ptFQfqfQ4IqtwExJxiUpJepTGyml5l1yI9 iLkNDCiQpTswNMpgdXO8xTFEuFcZ1mf76rZO/YVDYLPkAuviE/djSw8NTkkz2EcX yw== -----END CERTIFICATE-----Generated at Tue Jul 28 14:46:40 2026 by rpki-client