$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.mft File: 258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.mft (raw, json) Hash identifier: IU1N4KfLMTCGNSeoD28a0NjCFRFPONy022sDXm881ds= Subject key identifier: A3:64:D5:37:E4:44:17:7A:4F:9C:28:07:46:DF:6F:55:3C:9C:74:B4 Authority key identifier: 25:8D:1C:E0:CB:76:A9:86:E5:6C:7A:90:A6:6B:A7:DC:72:F5:95:2A Certificate issuer: /CN=258D1CE0CB76A986E56C7A90A66BA7DC72F5952A Certificate serial: 306DF24DA616B5FC08AAD640B0ADEEA76B02049E Authority info access: rsync://rpki.axivora.net/repo/Axivora-Net/2/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.mft Manifest number: 01BD Signing time: Sun 20 Sep 2026 10:34:53 +0000 Manifest this update: Sun 20 Sep 2026 10:29:53 +0000 Manifest next update: Mon 21 Sep 2026 13:43:53 +0000 Files and hashes: 1: 326131343a373538303a3737303a3a2f34342d3438203d3e20323133383931.roa (hash: woLwL0VEJzWnepdsx0zvpMFwwJXef1WYeYkaz1KcaHg=) 2: 326131343a373538303a3737373a3a2f34382d3438203d3e203136353039.roa (hash: xvnqSl1qLoVMIEzXN9sXRb87iGsN7N/pVeZWynFQufE=) 3: 258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.crl (hash: Es7TUSba2H0sfvjA4GnpbmJOwFGNYG9Z4IJygH8GCqM=) 4: 326131343a373538303a3737373a3a2f34382d3438203d3e203134363138.roa (hash: RTK2m9QZnNSKC5ZVcuz7+tdRZKTs7/hzcAu/hXd2ZTc=) 5: 326131343a373538303a3737353a3a2f34382d3438203d3e203136353039.roa (hash: LbzBckLICgXq7UKYaeP/CXL1PXD0JCr+a84omRC/7VY=) 6: 326131343a373538303a3737353a3a2f34382d3438203d3e203134363138.roa (hash: MfUF2laHihcgibdMapv7JAFGkNEIH6JIdDfIW/lhqFE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.crl rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.mft rsync://rpki.axivora.net/repo/Axivora-Net/2/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.cer rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 08:28:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:6d:f2:4d:a6:16:b5:fc:08:aa:d6:40:b0:ad:ee:a7:6b:02:04:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=258D1CE0CB76A986E56C7A90A66BA7DC72F5952A Validity Not Before: Sep 20 10:29:53 2026 GMT Not After : Sep 21 13:43:53 2026 GMT Subject: CN=A364D537E444177A4F9C280746DF6F553C9C74B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:39:0f:06:d8:e8:5b:44:45:2a:b6:77:2f:ec: 70:74:aa:70:58:14:56:0e:46:46:34:99:92:bc:f7: 26:4c:dc:58:8d:ee:5f:f6:3c:42:5f:1f:10:04:4c: 82:8f:6e:5b:ee:8d:88:db:04:08:bc:4d:ef:c3:26: c9:1b:f4:f3:dd:87:43:93:d6:7a:37:5a:79:d2:44: 9f:d3:68:43:15:80:40:23:d8:41:e8:6c:a8:24:99: 6d:3a:c0:56:35:de:7f:be:01:e4:e4:36:76:a1:78: f4:8a:5c:e7:c4:42:d6:6c:ed:bb:35:fe:d0:09:84: e4:76:62:c8:a2:fd:24:0c:69:b6:93:57:74:30:26: 31:2b:23:77:2f:ea:8e:9a:f9:18:b4:b2:86:af:83: d2:6f:a2:da:ba:af:13:17:85:fc:c1:32:a7:37:73: 72:5f:c7:86:e4:ea:de:55:11:07:0c:0e:38:11:42: eb:3b:40:95:8d:82:ff:9a:27:a0:2e:c7:f7:c2:13: 95:59:f6:48:1c:6e:ee:a7:06:e6:ad:15:2a:7d:1a: 4b:db:bb:4d:98:f7:c7:92:a5:d8:3c:5b:ed:7c:f7: c5:c9:97:e6:fe:20:85:2f:e8:33:ca:fc:a3:b6:fc: 7f:c1:f9:47:95:18:d4:71:f3:a0:43:6e:0b:a0:ef: c0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:64:D5:37:E4:44:17:7A:4F:9C:28:07:46:DF:6F:55:3C:9C:74:B4 X509v3 Authority Key Identifier: keyid:25:8D:1C:E0:CB:76:A9:86:E5:6C:7A:90:A6:6B:A7:DC:72:F5:95:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:60:31:73:fe:a7:b8:46:35:1f:16:6b:ed:4d:a4:82:10:01: 45:9d:1c:ff:b4:8e:3e:34:e2:af:40:02:c3:fe:c4:04:13:da: 7d:89:f7:c1:c2:22:6e:94:64:aa:18:92:de:dd:96:1e:2d:51: 29:e6:53:20:05:9b:a0:b6:7d:b7:65:64:b4:eb:cd:26:f7:af: 59:54:41:72:ea:89:e0:13:e0:4d:06:e3:5d:43:34:89:f2:ef: f2:24:e5:1f:1d:7c:23:8b:e6:e8:29:f9:42:18:c9:ca:06:25: ee:44:1b:5f:33:62:d2:5f:69:97:b6:d8:3d:ce:a2:f3:8e:d3: 47:3a:c4:b5:c2:8a:aa:97:a9:a5:cc:de:7e:b0:d9:f8:68:04: c3:89:7c:d6:b7:a1:7c:90:7e:90:a7:13:14:d8:cc:28:84:ba: 54:cb:43:8d:15:f9:99:b5:fd:d6:bf:9f:38:e5:c7:f4:8b:20: 5d:81:59:b8:44:85:ba:dc:d1:59:44:f5:24:16:2f:3c:af:dc: bc:6e:95:f2:cb:1e:1a:43:a2:c7:f5:ab:06:2a:e8:7e:2b:f2: 59:66:39:05:1a:cb:f8:49:00:1c:4b:7b:54:71:5a:8f:3b:80: f5:3b:93:d3:6d:5a:e5:b3:8a:44:5f:28:7c:d1:3d:a6:37:d7: 88:8f:69:4b -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgIUMG3yTaYWtfwIqtZAsK3up2sCBJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU4RDFDRTBDQjc2QTk4NkU1NkM3QTkwQTY2QkE3REM3 MkY1OTUyQTAeFw0yNjA5MjAxMDI5NTNaFw0yNjA5MjExMzQzNTNaMDMxMTAvBgNV BAMTKEEzNjRENTM3RTQ0NDE3N0E0RjlDMjgwNzQ2REY2RjU1M0M5Qzc0QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNOQ8G2OhbREUqtncv7HB0qnBY FFYORkY0mZK89yZM3FiN7l/2PEJfHxAETIKPblvujYjbBAi8Te/DJskb9PPdh0OT 1no3WnnSRJ/TaEMVgEAj2EHobKgkmW06wFY13n++AeTkNnahePSKXOfEQtZs7bs1 /tAJhOR2Ysii/SQMabaTV3QwJjErI3cv6o6a+Ri0soavg9Jvotq6rxMXhfzBMqc3 c3Jfx4bk6t5VEQcMDjgRQus7QJWNgv+aJ6Aux/fCE5VZ9kgcbu6nBuatFSp9Gkvb u02Y98eSpdg8W+1898XJl+b+IIUv6DPK/KO2/H/B+UeVGNRx86BDbgug78ChAgMB AAGjggJXMIICUzAdBgNVHQ4EFgQUo2TVN+REF3pPnCgHRt9vVTycdLQwHwYDVR0j BBgwFoAUJY0c4Mt2qYblbHqQpmun3HL1lSowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDNmZDBiNzYtNzI0My00YjI2LTk3NjAtY2MwN2I5NGJm ZTIzLzEvMjU4RDFDRTBDQjc2QTk4NkU1NkM3QTkwQTY2QkE3REM3MkY1OTUyQS5j cmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3luYzovL3Jwa2kuYXhp dm9yYS5uZXQvcmVwby9BeGl2b3JhLU5ldC8yLzI1OEQxQ0UwQ0I3NkE5ODZFNTZD N0E5MEE2NkJBN0RDNzJGNTk1MkEuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9z aXRvcnkvMDNmZDBiNzYtNzI0My00YjI2LTk3NjAtY2MwN2I5NGJmZTIzLzEvMjU4 RDFDRTBDQjc2QTk4NkU1NkM3QTkwQTY2QkE3REM3MkY1OTUyQS5tZnQwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEB AFNgMXP+p7hGNR8Wa+1NpIIQAUWdHP+0jj404q9AAsP+xAQT2n2J98HCIm6UZKoY kt7dlh4tUSnmUyAFm6C2fbdlZLTrzSb3r1lUQXLqieAT4E0G411DNIny7/Ik5R8d fCOL5ugp+UIYycoGJe5EG18zYtJfaZe22D3OovOO00c6xLXCiqqXqaXM3n6w2fho BMOJfNa3oXyQfpCnExTYzCiEulTLQ40V+Zm1/da/nzjlx/SLIF2BWbhEhbrc0VlE 9SQWLzyv3LxulfLLHhpDosf1qwYq6H4r8llmOQUay/hJABxLe1RxWo87gPU7k9Nt WuWzikRfKHzRPaY314iPaUs= -----END CERTIFICATE-----Generated at Sun Sep 20 21:16:05 2026 by rpki-client