$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft File: 42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft (raw, json) Hash identifier: Bj3x4+atDgf+UzeaseMJgcCdSZz0TGNlc2II/T3kN3I= Subject key identifier: D1:59:5F:FF:20:1E:66:11:78:E7:A4:7D:D9:BE:DD:73:B4:67:53:0B Authority key identifier: 42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57 Certificate issuer: /CN=42e508fba8960f48071b119accbf57bdbf3a8057 Certificate serial: 08E91535A02D1266AAD77D533795AA9E47464EF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft Manifest number: 0430 Signing time: Thu 24 Sep 2026 02:16:11 +0000 Manifest this update: Thu 24 Sep 2026 02:11:11 +0000 Manifest next update: Fri 25 Sep 2026 06:00:11 +0000 Files and hashes: 1: 42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl (hash: CL/WcpXISizs+OU2WH/vVCvKtVHtr4xdiDU0Zif7H3w=) 2: 326130623a346530373a6234333a3a2f34382d3438203d3e20313937333234.roa (hash: /NicVI9ZA6HI/WOoAhhTorEr85yfvxle9J9tMstWWS8=) 3: 326130623a346530343a3a2f33322d3438203d3e203236393534.roa (hash: F+gO6ZKYcboOFSJKnCm81psNizqbMEENngfXl2NTHEQ=) 4: 37322e342e36342e302f32312d3234203d3e20323133383737.roa (hash: 5JuaVyoj7uoMOOuQAfWYB3bD3lyM6lnGctkuEoNIEqE=) 5: 36322e3138322e3139322e302f32312d3234203d3e203432353332.roa (hash: k22wzf+MNF3rdZwWDi2NJmXkW92pMk1IiR0y5N9dN8c=) 6: 326130623a346530343a33613a3a2f34382d3438203d3e20323032333031.roa (hash: PxM9g8iygtPE0W8UaxD6VQbthErf6scMW5Q5B330XGE=) 7: AS26954.asa (hash: IUsw4dy87IC2cWQmte+pB1I+1bOzvTOC48eoRtPn5iE=) 8: 326130623a346530343a343966353a3a2f34382d3438203d3e20343032353336.roa (hash: pWY9PAU1e4HYq/0yecEeibEgLvdjkG+Q4SYrRpaltss=) 9: 37322e342e36342e302f32312d3234203d3e20323130353436.roa (hash: 3HoCLBQvrCiDsa8r01UTnlbfabOdnsCU4K+/+QNFf8k=) 10: 5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer (hash: UTtj2AfVN+qJgs0Jtg2lSMG4vd4rZAoAQP7FbKKVJ7M=) 11: 3139352e39352e3134392e302f32342d3234203d3e203236393534.roa (hash: wrTYL7mb+1quCshY5bvucyyFtZsLGfBb+j95uYXZhYI=) 12: 37322e342e36342e302f32312d3234203d3e20323135353930.roa (hash: UU1yktOfkcvmH8tNoOrtykdTweA/Ii+eyGWqUS9LW9w=) 13: AS202301.asa (hash: ft6tQ1rOWUa2YsQRj7uIGgH8Nr6RXCQJpFhPQabkhnM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 23:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:e9:15:35:a0:2d:12:66:aa:d7:7d:53:37:95:aa:9e:47:46:4e:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42e508fba8960f48071b119accbf57bdbf3a8057 Validity Not Before: Sep 24 02:11:11 2026 GMT Not After : Sep 25 06:00:11 2026 GMT Subject: CN=D1595FFF201E661178E7A47DD9BEDD73B467530B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:95:86:00:9a:ad:13:c1:2d:6f:a1:98:ba:16: 08:23:36:83:b7:84:b1:c4:3f:f4:e7:3e:7d:fb:e2: df:13:a6:5e:cf:98:86:b3:c4:f0:37:59:de:d8:59: 7a:a1:cb:be:92:7e:63:65:0f:7b:61:5f:18:d1:d5: f2:94:1e:c1:54:ec:5d:da:8a:9d:c7:cd:4c:14:7b: 26:e1:c1:38:3d:52:9e:2d:1a:31:42:91:03:6f:fe: 97:9d:b8:99:e9:ae:30:2f:f0:cd:37:cb:c5:c7:ae: 6c:16:80:cf:24:af:04:e5:c9:8e:7c:b9:a3:83:e4: 82:cc:a5:58:87:74:a4:7b:60:8e:45:be:62:18:d3: 91:e4:bc:d7:b5:c1:f9:d8:d7:82:19:a5:88:23:73: c4:ec:af:d5:93:9a:56:14:0a:64:dc:03:cd:16:21: aa:d0:d5:ba:cc:44:3a:fc:e7:9b:c8:2b:95:89:cf: 6e:80:f5:1c:93:c5:3c:40:c7:08:b2:2c:6c:f7:88: fa:f3:6e:58:03:67:c9:ac:be:b2:d2:bf:0d:5d:9a: 5a:24:0c:d7:13:93:40:4b:13:35:92:bb:bf:59:23: 32:a5:ff:30:d7:e6:64:ec:c4:2a:c7:58:1d:db:0e: db:67:cb:35:8d:8f:0c:4b:98:2f:15:80:5a:c1:da: a3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:59:5F:FF:20:1E:66:11:78:E7:A4:7D:D9:BE:DD:73:B4:67:53:0B X509v3 Authority Key Identifier: keyid:42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:63:fd:b3:59:fb:b3:e7:51:2c:3f:4a:64:34:79:c6:5f:de: 55:80:6f:1c:c2:40:8e:d9:6e:91:bc:40:70:ee:a1:af:b8:03: a3:cf:f9:f0:80:48:4f:98:1e:07:15:b5:03:03:6f:76:a2:80: c8:3c:b5:7f:65:33:67:b9:92:c8:05:69:b5:c4:c1:b9:b5:f5: 1c:45:b0:56:37:0c:41:d4:02:19:74:fe:06:fc:09:ed:da:ce: b9:a5:f6:82:79:ff:e4:69:9e:5c:e4:b4:c1:32:3f:4b:f5:b2: 90:a1:84:76:fa:93:fe:18:4a:02:a9:cb:88:65:b3:60:86:52: 27:53:28:48:5a:b2:1c:bc:e3:3f:52:1a:23:75:23:a2:d1:1e: 99:a1:69:b6:79:52:86:05:7a:30:87:de:d6:91:2f:f9:81:80: c8:70:ee:a0:63:a8:7c:a7:83:b7:0c:1f:99:43:7d:c4:0a:6f: 17:23:71:da:1e:9e:89:29:e2:d7:61:0a:e6:2a:4b:2d:88:32: f2:1f:15:db:a4:ad:6d:a7:cf:c2:eb:5f:da:06:09:ac:8a:ba: ed:4d:e1:8e:34:80:7a:bf:44:f4:d7:40:e4:d4:56:a1:fd:10: 83:bf:34:31:9d:45:4a:2a:86:2d:4e:bf:ff:46:53:97:e7:45: ef:25:9f:b1 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUCOkVNaAtEmaq131TN5WqnkdGTvUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJlNTA4ZmJhODk2MGY0ODA3MWIxMTlhY2NiZjU3YmRi ZjNhODA1NzAeFw0yNjA5MjQwMjExMTFaFw0yNjA5MjUwNjAwMTFaMDMxMTAvBgNV BAMTKEQxNTk1RkZGMjAxRTY2MTE3OEU3QTQ3REQ5QkVERDczQjQ2NzUzMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+lYYAmq0TwS1voZi6FggjNoO3 hLHEP/TnPn374t8Tpl7PmIazxPA3Wd7YWXqhy76SfmNlD3thXxjR1fKUHsFU7F3a ip3HzUwUeybhwTg9Up4tGjFCkQNv/peduJnprjAv8M03y8XHrmwWgM8krwTlyY58 uaOD5ILMpViHdKR7YI5FvmIY05HkvNe1wfnY14IZpYgjc8Tsr9WTmlYUCmTcA80W IarQ1brMRDr855vIK5WJz26A9RyTxTxAxwiyLGz3iPrzblgDZ8msvrLSvw1dmlok DNcTk0BLEzWSu79ZIzKl/zDX5mTsxCrHWB3bDttnyzWNjwxLmC8VgFrB2qPBAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU0Vlf/yAeZhF456R92b7dc7RnUwswHwYDVR0j BBgwFoAUQuUI+6iWD0gHGxGazL9Xvb86gFcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEtOGJhNS00NzlmLWEyMjktMGFiNzBlNDgx NWJiLzAvNDJFNTA4RkJBODk2MEY0ODA3MUIxMTlBQ0NCRjU3QkRCRjNBODA1Ny5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1F1VUktNmlXRDBnSEd4R2F6TDlYdmI4 NmdGYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83M2I4ZWMwMS04 YmE1LTQ3OWYtYTIyOS0wYWI3MGU0ODE1YmIvMC80MkU1MDhGQkE4OTYwRjQ4MDcx QjExOUFDQ0JGNTdCREJGM0E4MDU3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgWP9s1n7s+dRLD9KZDR5 xl/eVYBvHMJAjtlukbxAcO6hr7gDo8/58IBIT5geBxW1AwNvdqKAyDy1f2UzZ7mS yAVptcTBubX1HEWwVjcMQdQCGXT+BvwJ7drOuaX2gnn/5GmeXOS0wTI/S/WykKGE dvqT/hhKAqnLiGWzYIZSJ1MoSFqyHLzjP1IaI3UjotEemaFptnlShgV6MIfe1pEv +YGAyHDuoGOofKeDtwwfmUN9xApvFyNx2h6eiSni12EK5ipLLYgy8h8V26StbafP wutf2gYJrIq67U3hjjSAer9E9NdA5NRWof0Qg780MZ1FSiqGLU6//0ZTl+dF7yWf sQ== -----END CERTIFICATE-----Generated at Thu Sep 24 08:42:31 2026 by rpki-client