$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.mft File: 258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.mft (raw, json) Hash identifier: 03yPzFdfn1YL1svvO1dx4pPMfPzR6fADKf8vll5Chx0= Subject key identifier: A2:09:1C:A5:93:59:D3:FD:FF:C7:A8:BC:5B:A2:99:7A:67:FF:28:48 Authority key identifier: 25:8D:1C:E0:CB:76:A9:86:E5:6C:7A:90:A6:6B:A7:DC:72:F5:95:2A Certificate issuer: /CN=258D1CE0CB76A986E56C7A90A66BA7DC72F5952A Certificate serial: 5EC1047EB9C998C0A3D378E1A404667923146982 Authority info access: rsync://rpki.axivora.net/repo/Axivora-Net/2/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.mft Manifest number: 07 Signing time: Tue 04 Nov 2025 08:44:21 +0000 Manifest this update: Tue 04 Nov 2025 08:39:21 +0000 Manifest next update: Wed 05 Nov 2025 11:20:21 +0000 Files and hashes: 1: 326131343a373538303a3737303a3a2f34342d3434203d3e20323133383931.roa (hash: 9kZUXgWMqye7ZXT/x/7wHr1j02GNGx8/gYHoXgHQMXw=) 2: 258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.crl (hash: F+tiXKx7Act8YaXr7sp1OwEEc7gSBSNC7jsZoVXLkrc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.crl rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.mft rsync://rpki.axivora.net/repo/Axivora-Net/2/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.cer rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 11:20:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:c1:04:7e:b9:c9:98:c0:a3:d3:78:e1:a4:04:66:79:23:14:69:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=258D1CE0CB76A986E56C7A90A66BA7DC72F5952A Validity Not Before: Nov 4 08:39:21 2025 GMT Not After : Nov 5 11:20:21 2025 GMT Subject: CN=A2091CA59359D3FDFFC7A8BC5BA2997A67FF2848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:7e:b3:7d:27:eb:db:c7:c1:9e:08:98:a5:36: 51:8c:8f:0a:07:ea:b5:83:a8:c2:d1:87:73:bb:04: 86:8d:ca:1a:9c:b4:c6:a7:1a:12:b2:a2:10:fd:3b: cb:20:37:61:3c:ee:6b:a5:6f:4e:39:80:bb:63:72: 6f:bd:61:fa:8e:2a:46:37:d0:dd:2d:d7:e5:19:76: 88:ef:78:b1:a2:27:39:1b:c9:e1:cf:0d:d1:2b:e1: b2:b6:0e:6d:ef:fb:00:7f:e7:81:52:11:45:cb:1f: df:12:ce:59:79:12:72:db:b2:ef:5f:22:e5:70:fe: 74:6a:97:d6:bf:50:17:b4:73:3d:4e:d3:c8:a6:ff: dc:d5:c9:e3:a4:a5:49:32:da:b7:66:25:0a:19:e2: fa:f4:17:39:c9:ec:92:3b:ca:e6:1b:0b:ed:41:67: c0:a9:cb:5a:c3:c6:2c:76:64:fb:83:5e:06:9d:12: dd:53:89:2e:73:ff:a0:9d:0f:4a:b1:31:1a:60:5e: 9a:a7:de:b8:b6:41:71:79:05:5d:f0:cb:a8:de:bd: af:75:1c:c8:a7:60:02:da:e9:fc:7d:de:96:22:60: fb:4b:a8:86:cb:a9:1e:96:10:d7:3c:fd:21:92:8d: dc:7a:a8:c2:74:84:a4:92:82:0d:de:af:81:74:98: 57:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:09:1C:A5:93:59:D3:FD:FF:C7:A8:BC:5B:A2:99:7A:67:FF:28:48 X509v3 Authority Key Identifier: keyid:25:8D:1C:E0:CB:76:A9:86:E5:6C:7A:90:A6:6B:A7:DC:72:F5:95:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:4e:b4:cb:f3:c9:4c:56:7c:02:30:86:ce:ea:c3:93:c1:69: 96:0a:e7:63:86:8c:1e:35:0a:ae:af:df:15:c9:9c:70:6f:ee: ab:0f:19:c1:94:30:27:9f:68:55:f5:29:6d:d7:33:37:cb:d5: 83:a2:5b:02:93:73:5a:37:08:4a:90:3d:07:55:c2:25:b1:1f: 18:27:f2:89:d3:3c:c8:3a:33:49:ee:23:10:47:2d:1f:38:30: 03:fb:d2:97:d2:5e:3b:ed:e0:82:a4:3d:b8:ff:0a:32:55:6a: 1e:ca:a5:bf:f9:c3:68:99:79:0b:99:b2:f5:60:56:3d:b4:dc: b1:04:ac:4e:f1:6f:69:af:04:f5:32:1a:84:37:ff:e2:36:b2: 00:c8:d4:25:cb:e8:ed:f7:77:e0:b0:d8:47:88:48:1a:d1:ca: 5c:46:a2:41:6e:69:95:be:fc:a9:5c:01:ca:28:c9:21:53:aa: e1:cb:a1:54:c9:63:8f:2c:53:5f:bd:76:89:d4:f4:01:61:68: 8b:d1:53:f1:f5:c1:b2:2b:c8:ca:a9:3f:0a:73:86:bf:f2:0f: 1b:aa:a1:ec:11:f5:66:65:aa:9b:df:7a:c2:b6:e5:8b:c6:e7: 7b:c4:9a:ab:33:e0:c3:ed:2c:97:92:b1:e9:9b:9d:69:4a:41: b0:62:59:a4 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgIUXsEEfrnJmMCj03jhpARmeSMUaYIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU4RDFDRTBDQjc2QTk4NkU1NkM3QTkwQTY2QkE3REM3 MkY1OTUyQTAeFw0yNTExMDQwODM5MjFaFw0yNTExMDUxMTIwMjFaMDMxMTAvBgNV BAMTKEEyMDkxQ0E1OTM1OUQzRkRGRkM3QThCQzVCQTI5OTdBNjdGRjI4NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbfrN9J+vbx8GeCJilNlGMjwoH 6rWDqMLRh3O7BIaNyhqctManGhKyohD9O8sgN2E87mulb045gLtjcm+9YfqOKkY3 0N0t1+UZdojveLGiJzkbyeHPDdEr4bK2Dm3v+wB/54FSEUXLH98Szll5EnLbsu9f IuVw/nRql9a/UBe0cz1O08im/9zVyeOkpUky2rdmJQoZ4vr0FznJ7JI7yuYbC+1B Z8Cpy1rDxix2ZPuDXgadEt1TiS5z/6CdD0qxMRpgXpqn3ri2QXF5BV3wy6jeva91 HMinYALa6fx93pYiYPtLqIbLqR6WENc8/SGSjdx6qMJ0hKSSgg3er4F0mFd5AgMB AAGjggJXMIICUzAdBgNVHQ4EFgQUogkcpZNZ0/3/x6i8W6KZemf/KEgwHwYDVR0j BBgwFoAUJY0c4Mt2qYblbHqQpmun3HL1lSowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDNmZDBiNzYtNzI0My00YjI2LTk3NjAtY2MwN2I5NGJm ZTIzLzEvMjU4RDFDRTBDQjc2QTk4NkU1NkM3QTkwQTY2QkE3REM3MkY1OTUyQS5j cmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3luYzovL3Jwa2kuYXhp dm9yYS5uZXQvcmVwby9BeGl2b3JhLU5ldC8yLzI1OEQxQ0UwQ0I3NkE5ODZFNTZD N0E5MEE2NkJBN0RDNzJGNTk1MkEuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9z aXRvcnkvMDNmZDBiNzYtNzI0My00YjI2LTk3NjAtY2MwN2I5NGJmZTIzLzEvMjU4 RDFDRTBDQjc2QTk4NkU1NkM3QTkwQTY2QkE3REM3MkY1OTUyQS5tZnQwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEB ABFOtMvzyUxWfAIwhs7qw5PBaZYK52OGjB41Cq6v3xXJnHBv7qsPGcGUMCefaFX1 KW3XMzfL1YOiWwKTc1o3CEqQPQdVwiWxHxgn8onTPMg6M0nuIxBHLR84MAP70pfS Xjvt4IKkPbj/CjJVah7Kpb/5w2iZeQuZsvVgVj203LEErE7xb2mvBPUyGoQ3/+I2 sgDI1CXL6O33d+Cw2EeISBrRylxGokFuaZW+/KlcAcooySFTquHLoVTJY48sU1+9 donU9AFhaIvRU/H1wbIryMqpPwpzhr/yDxuqoewR9WZlqpvfesK25YvG53vEmqsz 4MPtLJeSsembnWlKQbBiWaQ= -----END CERTIFICATE-----Generated at Tue Nov 4 22:24:46 2025 by rpki-client