$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.mft File: 258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.mft (raw, json) Hash identifier: Gc/7KaArRQu7q70GiETVj6ixbO7RDuBIidsbtXjm9tg= Subject key identifier: 3F:18:BB:1D:0A:7C:F8:B0:27:5B:76:66:C2:14:15:10:B9:B6:6B:25 Authority key identifier: 25:8D:1C:E0:CB:76:A9:86:E5:6C:7A:90:A6:6B:A7:DC:72:F5:95:2A Certificate issuer: /CN=258D1CE0CB76A986E56C7A90A66BA7DC72F5952A Certificate serial: 2D393521FD6B2B339824458034FC5DCDE3244B96 Authority info access: rsync://rpki.axivora.net/repo/Axivora-Net/2/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.mft Manifest number: AE Signing time: Sun 01 Mar 2026 10:04:08 +0000 Manifest this update: Sun 01 Mar 2026 09:59:08 +0000 Manifest next update: Mon 02 Mar 2026 13:10:08 +0000 Files and hashes: 1: 326131343a373538303a3737303a3a2f34342d3438203d3e20323133383931.roa (hash: woLwL0VEJzWnepdsx0zvpMFwwJXef1WYeYkaz1KcaHg=) 2: 326131343a373538303a3737373a3a2f34382d3438203d3e203136353039.roa (hash: xvnqSl1qLoVMIEzXN9sXRb87iGsN7N/pVeZWynFQufE=) 3: 258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.crl (hash: vKJRXsldlCDmKHhR8e8eqIiDd4HDdLVWuSbu/CCSQIY=) 4: 326131343a373538303a3737353a3a2f34382d3438203d3e203136353039.roa (hash: LbzBckLICgXq7UKYaeP/CXL1PXD0JCr+a84omRC/7VY=) 5: 326131343a373538303a3737373a3a2f34382d3438203d3e203134363138.roa (hash: RTK2m9QZnNSKC5ZVcuz7+tdRZKTs7/hzcAu/hXd2ZTc=) 6: 326131343a373538303a3737353a3a2f34382d3438203d3e203134363138.roa (hash: MfUF2laHihcgibdMapv7JAFGkNEIH6JIdDfIW/lhqFE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.crl rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.mft rsync://rpki.axivora.net/repo/Axivora-Net/2/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.cer rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 11:54:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:39:35:21:fd:6b:2b:33:98:24:45:80:34:fc:5d:cd:e3:24:4b:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=258D1CE0CB76A986E56C7A90A66BA7DC72F5952A Validity Not Before: Mar 1 09:59:08 2026 GMT Not After : Mar 2 13:10:08 2026 GMT Subject: CN=3F18BB1D0A7CF8B0275B7666C2141510B9B66B25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:38:b5:8e:5b:4d:4a:d4:e0:d1:10:58:a7:1c: 92:33:4a:10:96:22:16:04:90:06:00:f1:3e:69:36: 8a:3a:49:bd:4b:dc:a3:bd:6f:d3:46:5d:71:61:e2: 7d:df:ef:6a:24:3f:5a:6f:90:16:bf:ee:08:85:93: 01:2d:af:11:53:14:4a:75:4c:d8:d9:c9:aa:1a:0d: 62:07:22:ae:af:cf:27:95:22:20:8b:b6:b4:bf:83: 20:41:14:69:ab:83:cb:7a:69:76:f3:92:b6:d6:59: 52:3d:cb:8b:f1:40:96:78:b6:56:04:15:69:6c:38: 35:33:30:bc:5d:16:74:45:40:84:ea:8b:74:c2:37: 22:4e:ec:3f:d6:1c:36:5a:e8:54:85:06:23:05:be: dc:87:e9:4b:6a:27:0c:7d:eb:5e:c8:dc:cd:8f:1b: c5:15:77:53:8f:1c:95:05:34:59:7a:72:cd:e1:ac: c5:fd:8d:db:10:a9:7f:dd:21:92:a8:ac:7f:f3:5f: 82:ea:58:80:b1:a4:ad:f4:29:09:66:36:d3:6b:ec: aa:8e:0c:f7:18:69:e5:03:84:1a:c3:53:5f:3b:02: f3:f3:1a:80:d2:18:a9:6b:d7:99:47:5c:f9:4a:f4: a7:d6:51:66:b3:4a:35:11:9f:c4:7d:4c:4a:89:f8: 96:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:18:BB:1D:0A:7C:F8:B0:27:5B:76:66:C2:14:15:10:B9:B6:6B:25 X509v3 Authority Key Identifier: keyid:25:8D:1C:E0:CB:76:A9:86:E5:6C:7A:90:A6:6B:A7:DC:72:F5:95:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:22:14:25:b9:fb:d5:90:a7:1d:8f:96:e0:ca:07:c7:ac:a2: 77:08:f0:1c:04:76:f7:6b:2a:02:d0:c7:37:23:c4:eb:7e:15: 20:a5:9b:f7:39:61:23:82:6f:1c:a8:e3:2c:97:75:86:1c:c6: 44:3e:22:58:e5:19:6e:a0:04:9d:10:01:ac:a9:e4:bd:62:a7: 22:ed:ae:0e:74:03:72:a7:6c:6e:bd:f1:a8:c9:62:39:40:28: 00:1a:ed:2d:80:ac:ac:f7:b5:e1:85:50:5b:94:d6:a9:f7:2e: ea:c8:f3:82:96:08:50:2b:b6:c9:c8:50:00:d6:f4:0e:87:ba: f4:83:5c:ba:68:ea:3d:2a:29:f0:f3:a7:b6:37:ee:3f:33:73: 98:92:29:aa:8d:31:f9:b0:f9:be:90:c6:dc:8e:65:4f:0b:20: f3:ee:9c:66:be:f2:e6:b4:f0:75:02:1f:2a:40:2d:a1:a4:8c: 27:84:4a:05:07:26:30:52:7b:5d:fb:a7:7c:96:d2:e2:31:28: a5:15:fc:e2:04:80:8b:42:a3:77:26:62:25:d4:89:a3:d9:78: f7:40:81:0c:f8:6b:94:74:25:b3:4e:9f:8e:0c:22:9e:e8:e0: f3:08:38:54:dd:b1:1d:75:d0:ed:11:fc:f4:cb:3c:43:0d:5e: de:ab:73:d4 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgIULTk1If1rKzOYJEWANPxdzeMkS5YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU4RDFDRTBDQjc2QTk4NkU1NkM3QTkwQTY2QkE3REM3 MkY1OTUyQTAeFw0yNjAzMDEwOTU5MDhaFw0yNjAzMDIxMzEwMDhaMDMxMTAvBgNV BAMTKDNGMThCQjFEMEE3Q0Y4QjAyNzVCNzY2NkMyMTQxNTEwQjlCNjZCMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtOLWOW01K1ODREFinHJIzShCW IhYEkAYA8T5pNoo6Sb1L3KO9b9NGXXFh4n3f72okP1pvkBa/7giFkwEtrxFTFEp1 TNjZyaoaDWIHIq6vzyeVIiCLtrS/gyBBFGmrg8t6aXbzkrbWWVI9y4vxQJZ4tlYE FWlsODUzMLxdFnRFQITqi3TCNyJO7D/WHDZa6FSFBiMFvtyH6UtqJwx9617I3M2P G8UVd1OPHJUFNFl6cs3hrMX9jdsQqX/dIZKorH/zX4LqWICxpK30KQlmNtNr7KqO DPcYaeUDhBrDU187AvPzGoDSGKlr15lHXPlK9KfWUWazSjURn8R9TEqJ+JZfAgMB AAGjggJXMIICUzAdBgNVHQ4EFgQUPxi7HQp8+LAnW3ZmwhQVELm2ayUwHwYDVR0j BBgwFoAUJY0c4Mt2qYblbHqQpmun3HL1lSowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDNmZDBiNzYtNzI0My00YjI2LTk3NjAtY2MwN2I5NGJm ZTIzLzEvMjU4RDFDRTBDQjc2QTk4NkU1NkM3QTkwQTY2QkE3REM3MkY1OTUyQS5j cmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3luYzovL3Jwa2kuYXhp dm9yYS5uZXQvcmVwby9BeGl2b3JhLU5ldC8yLzI1OEQxQ0UwQ0I3NkE5ODZFNTZD N0E5MEE2NkJBN0RDNzJGNTk1MkEuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9z aXRvcnkvMDNmZDBiNzYtNzI0My00YjI2LTk3NjAtY2MwN2I5NGJmZTIzLzEvMjU4 RDFDRTBDQjc2QTk4NkU1NkM3QTkwQTY2QkE3REM3MkY1OTUyQS5tZnQwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEB AFwiFCW5+9WQpx2PluDKB8esoncI8BwEdvdrKgLQxzcjxOt+FSClm/c5YSOCbxyo 4yyXdYYcxkQ+IljlGW6gBJ0QAayp5L1ipyLtrg50A3KnbG698ajJYjlAKAAa7S2A rKz3teGFUFuU1qn3LurI84KWCFArtsnIUADW9A6HuvSDXLpo6j0qKfDzp7Y37j8z c5iSKaqNMfmw+b6QxtyOZU8LIPPunGa+8ua08HUCHypALaGkjCeESgUHJjBSe137 p3yW0uIxKKUV/OIEgItCo3cmYiXUiaPZePdAgQz4a5R0JbNOn44MIp7o4PMIOFTd sR110O0R/PTLPEMNXt6rc9Q= -----END CERTIFICATE-----Generated at Sun Mar 1 23:43:40 2026 by rpki-client