$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft File: 42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft (raw, json) Hash identifier: p32LQfAV9Y9HrdV0pnE8U8+Q7CRytgey+Jm5PZBYOYQ= Subject key identifier: 75:BF:0B:DC:4D:B7:26:52:3C:CC:2C:B0:74:D8:82:66:5F:E9:55:C3 Authority key identifier: 42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57 Certificate issuer: /CN=42e508fba8960f48071b119accbf57bdbf3a8057 Certificate serial: 2464B5EACE9B5787548D182395EFE5ACD69FF2ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft Manifest number: 03C8 Signing time: Thu 23 Jul 2026 08:19:45 +0000 Manifest this update: Thu 23 Jul 2026 08:14:45 +0000 Manifest next update: Fri 24 Jul 2026 09:17:45 +0000 Files and hashes: 1: 5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer (hash: sJtYxN0FaM6o/YP2b9hKralwjOLBchpF84WOJZLxMsk=) 2: 326130623a346530343a33613a3a2f34382d3438203d3e20323032333031.roa (hash: PxM9g8iygtPE0W8UaxD6VQbthErf6scMW5Q5B330XGE=) 3: 42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl (hash: TGuE64A14mTOSOlPTOU27VwaxsrTYkStvgrWQQ39KJg=) 4: 326130623a346530373a6234333a3a2f34382d3438203d3e20313937333234.roa (hash: /NicVI9ZA6HI/WOoAhhTorEr85yfvxle9J9tMstWWS8=) 5: 3139352e39352e3134392e302f32342d3234203d3e203236393534.roa (hash: wrTYL7mb+1quCshY5bvucyyFtZsLGfBb+j95uYXZhYI=) 6: AS26954.asa (hash: GJbuxOOIwYdyKeNuY3ueZtcbp7hkyah5TRoeVRKV13c=) 7: 326130623a346530343a343966353a3a2f34382d3438203d3e20343032353336.roa (hash: pWY9PAU1e4HYq/0yecEeibEgLvdjkG+Q4SYrRpaltss=) 8: AS202301.asa (hash: ft6tQ1rOWUa2YsQRj7uIGgH8Nr6RXCQJpFhPQabkhnM=) 9: 36322e3138322e3139322e302f32312d3234203d3e203432353332.roa (hash: k22wzf+MNF3rdZwWDi2NJmXkW92pMk1IiR0y5N9dN8c=) 10: 326130623a346530343a3a2f33322d3438203d3e203236393534.roa (hash: F+gO6ZKYcboOFSJKnCm81psNizqbMEENngfXl2NTHEQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 09:17:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:64:b5:ea:ce:9b:57:87:54:8d:18:23:95:ef:e5:ac:d6:9f:f2:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42e508fba8960f48071b119accbf57bdbf3a8057 Validity Not Before: Jul 23 08:14:45 2026 GMT Not After : Jul 24 09:17:45 2026 GMT Subject: CN=75BF0BDC4DB726523CCC2CB074D882665FE955C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:34:b8:89:6a:bf:30:1c:b0:cd:f9:8c:17:22: 6f:08:ba:f7:1f:9b:16:94:c2:7c:34:d3:c5:f5:d0: 17:b2:83:ad:88:26:67:51:e5:79:83:ba:30:ad:73: 59:c3:5f:7f:25:6d:21:fd:d5:67:e8:ef:f4:2f:73: 60:72:9c:b8:05:40:de:5e:84:2d:15:c7:cd:03:c5: 03:4f:e4:21:22:a5:ec:3e:95:bb:cc:32:0e:a7:17: 8e:5a:12:54:d1:f1:58:b6:4f:33:ef:7e:fb:06:ee: d8:9a:80:21:90:8f:7a:75:3d:b7:07:b7:c7:06:2f: eb:15:24:a0:84:63:72:e9:7c:86:01:87:d2:a1:d9: 7a:d0:26:76:e5:ab:ab:0d:95:3a:38:f7:a5:fb:da: bc:15:03:49:6a:3a:2a:65:ae:1f:f5:cc:57:17:9d: 8c:94:a5:1e:98:85:ee:92:f5:47:7c:ea:bb:7f:95: fc:ce:ee:c6:4e:1d:bf:c1:be:48:13:97:7e:ea:8f: c2:64:9a:ea:23:a3:7b:e8:5b:23:af:99:c2:f2:d7: a8:dc:2d:d7:d8:5f:a4:21:0b:4a:2d:51:ee:72:cf: fc:db:c8:a3:0a:47:41:0e:d5:16:a3:86:1c:62:36: cd:83:86:90:12:c1:26:c2:8c:6a:1f:f6:4c:47:ca: 48:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:BF:0B:DC:4D:B7:26:52:3C:CC:2C:B0:74:D8:82:66:5F:E9:55:C3 X509v3 Authority Key Identifier: keyid:42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:b7:2b:54:4c:2c:8d:8b:58:94:b5:fa:3d:bc:fa:9a:f1:c4: d1:27:10:0d:da:5a:f2:8c:e6:93:b8:22:d5:36:47:04:bc:1e: 3e:c8:63:2d:18:7d:ed:f1:be:bd:5f:73:cd:25:0a:d1:8a:a2: 9b:f1:2f:bb:84:e2:88:8e:08:47:ca:d1:f9:f6:95:47:55:4f: 87:b7:d5:20:18:51:06:da:bf:0d:e2:79:b2:0f:29:28:89:88: 41:84:ff:c3:f7:3c:31:41:c1:2b:46:24:0b:e5:82:48:5c:c8: 25:1f:b5:13:cf:a8:89:83:40:43:c6:33:ba:7b:b2:0d:aa:af: 88:1b:19:15:fe:2b:60:1a:8b:6a:30:70:bd:20:2f:fc:c1:31: 20:d5:76:78:e6:41:2c:f8:a9:1a:93:96:ee:5e:95:ed:4b:9d: 45:19:35:3c:d6:3f:df:0e:23:fd:58:61:2c:0b:51:d9:f5:f2: 64:ab:29:1b:7c:7d:08:f6:48:5e:b1:b4:ca:c6:f2:b6:b8:a9: 06:cd:92:bf:3d:4e:d4:4f:77:f6:bf:d8:3c:14:b7:57:50:15: 52:f2:30:d0:7b:c6:cb:9c:33:11:84:a4:c7:4c:c3:21:46:ee: ea:59:a3:50:2f:e0:61:12:7c:e9:17:4a:a4:57:5d:cd:4f:7d: f0:e9:1a:61 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUJGS16s6bV4dUjRgjle/lrNaf8u0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJlNTA4ZmJhODk2MGY0ODA3MWIxMTlhY2NiZjU3YmRi ZjNhODA1NzAeFw0yNjA3MjMwODE0NDVaFw0yNjA3MjQwOTE3NDVaMDMxMTAvBgNV BAMTKDc1QkYwQkRDNERCNzI2NTIzQ0NDMkNCMDc0RDg4MjY2NUZFOTU1QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfNLiJar8wHLDN+YwXIm8Iuvcf mxaUwnw008X10Beyg62IJmdR5XmDujCtc1nDX38lbSH91Wfo7/Qvc2BynLgFQN5e hC0Vx80DxQNP5CEipew+lbvMMg6nF45aElTR8Vi2TzPvfvsG7tiagCGQj3p1PbcH t8cGL+sVJKCEY3LpfIYBh9Kh2XrQJnblq6sNlTo496X72rwVA0lqOiplrh/1zFcX nYyUpR6Yhe6S9Ud86rt/lfzO7sZOHb/BvkgTl37qj8Jkmuojo3voWyOvmcLy16jc LdfYX6QhC0otUe5yz/zbyKMKR0EO1RajhhxiNs2DhpASwSbCjGof9kxHykh/AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUdb8L3E23JlI8zCywdNiCZl/pVcMwHwYDVR0j BBgwFoAUQuUI+6iWD0gHGxGazL9Xvb86gFcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEtOGJhNS00NzlmLWEyMjktMGFiNzBlNDgx NWJiLzAvNDJFNTA4RkJBODk2MEY0ODA3MUIxMTlBQ0NCRjU3QkRCRjNBODA1Ny5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1F1VUktNmlXRDBnSEd4R2F6TDlYdmI4 NmdGYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83M2I4ZWMwMS04 YmE1LTQ3OWYtYTIyOS0wYWI3MGU0ODE1YmIvMC80MkU1MDhGQkE4OTYwRjQ4MDcx QjExOUFDQ0JGNTdCREJGM0E4MDU3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgLcrVEwsjYtYlLX6Pbz6 mvHE0ScQDdpa8ozmk7gi1TZHBLwePshjLRh97fG+vV9zzSUK0Yqim/Evu4TiiI4I R8rR+faVR1VPh7fVIBhRBtq/DeJ5sg8pKImIQYT/w/c8MUHBK0YkC+WCSFzIJR+1 E8+oiYNAQ8YzunuyDaqviBsZFf4rYBqLajBwvSAv/MExINV2eOZBLPipGpOW7l6V 7UudRRk1PNY/3w4j/VhhLAtR2fXyZKspG3x9CPZIXrG0ysbytripBs2Svz1O1E93 9r/YPBS3V1AVUvIw0HvGy5wzEYSkx0zDIUbu6lmjUC/gYRJ86RdKpFddzU998Oka YQ== -----END CERTIFICATE-----Generated at Thu Jul 23 19:03:42 2026 by rpki-client