$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/1/F3CC3769D8FD66E30F3BA6B926481F664C7FED13.mft File: F3CC3769D8FD66E30F3BA6B926481F664C7FED13.mft (raw, json) Hash identifier: wviP+HyG6EhFeIEG8M4quMyd0txRPTN7FLPuV8MeFGo= Subject key identifier: BC:C0:E8:B2:27:61:87:A4:0F:FD:CE:68:A5:75:B4:08:B2:E3:5E:64 Authority key identifier: F3:CC:37:69:D8:FD:66:E3:0F:3B:A6:B9:26:48:1F:66:4C:7F:ED:13 Certificate issuer: /CN=F3CC3769D8FD66E30F3BA6B926481F664C7FED13 Certificate serial: 0EF42DFC8793147EEEE75478064F4096FC3546DC Authority info access: rsync://rpki.axivora.net/repo/Axivora-Net/2/F3CC3769D8FD66E30F3BA6B926481F664C7FED13.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/1/F3CC3769D8FD66E30F3BA6B926481F664C7FED13.mft Manifest number: 021E Signing time: Sun 20 Sep 2026 10:52:43 +0000 Manifest this update: Sun 20 Sep 2026 10:47:43 +0000 Manifest next update: Mon 21 Sep 2026 12:26:43 +0000 Files and hashes: 1: 326131343a373538303a3765303a3a2f34342d3438203d3e20323131353735.roa (hash: 2yW2cTrURBWc1KghoJNqvMr3yilY8hjaJGrRfYNrlnI=) 2: 326131343a373538303a3765303a3a2f34382d3438203d3e20323134353334.roa (hash: CpYftnzlZeDqedYjZ6V5exipLdXe535/qHz7Sz54bro=) 3: F3CC3769D8FD66E30F3BA6B926481F664C7FED13.crl (hash: kBW7rRqMRI04DcEbL50ot532E0GDRMFKqXjcQnzNdzU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/1/F3CC3769D8FD66E30F3BA6B926481F664C7FED13.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/1/F3CC3769D8FD66E30F3BA6B926481F664C7FED13.mft rsync://rpki.axivora.net/repo/Axivora-Net/2/F3CC3769D8FD66E30F3BA6B926481F664C7FED13.cer rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 08:28:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:f4:2d:fc:87:93:14:7e:ee:e7:54:78:06:4f:40:96:fc:35:46:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3CC3769D8FD66E30F3BA6B926481F664C7FED13 Validity Not Before: Sep 20 10:47:43 2026 GMT Not After : Sep 21 12:26:43 2026 GMT Subject: CN=BCC0E8B2276187A40FFDCE68A575B408B2E35E64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5c:bc:ce:23:ca:26:4b:89:70:dc:73:36:c0: 37:f1:07:37:f3:26:47:de:ba:6e:e6:af:5b:a9:51: 00:92:f4:86:7f:8d:6b:b1:cf:99:65:c2:69:d1:ee: d9:56:62:96:f1:c9:33:69:13:25:02:8a:8d:01:cb: b0:c8:8f:3e:d7:71:61:2a:74:49:d4:cc:0a:64:38: 11:a5:87:2f:34:d5:27:75:32:c1:e5:ea:e6:5f:9c: 74:b1:06:5b:93:13:b1:60:2a:47:04:c6:db:ce:21: 19:ba:55:8e:8a:01:63:53:04:c9:9b:11:d8:59:64: 39:55:50:b6:9e:7c:4c:dc:f0:fb:d9:f8:24:a8:c6: a5:3b:2a:20:e1:46:b7:e8:0a:1f:bb:0a:51:16:88: 93:e3:08:d0:9e:a0:c5:36:cf:f6:ad:e4:02:1a:21: 68:cd:54:7c:69:bc:51:3f:4c:3e:be:b7:73:b5:5b: 6f:81:7a:dc:97:97:c9:c0:25:3b:7f:89:f1:92:d6: a6:0e:4c:53:bf:d4:e6:2f:bc:12:d4:03:78:5b:40: 72:58:0a:1b:0b:dc:4b:b7:62:8d:36:6c:7d:63:6c: d1:2f:1c:40:58:f5:d4:f2:df:f8:04:78:16:85:92: e6:ed:11:64:1a:10:d1:b1:2c:b2:df:87:fa:22:81: 57:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:C0:E8:B2:27:61:87:A4:0F:FD:CE:68:A5:75:B4:08:B2:E3:5E:64 X509v3 Authority Key Identifier: keyid:F3:CC:37:69:D8:FD:66:E3:0F:3B:A6:B9:26:48:1F:66:4C:7F:ED:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/1/F3CC3769D8FD66E30F3BA6B926481F664C7FED13.crl Authority Information Access: CA Issuers - URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/F3CC3769D8FD66E30F3BA6B926481F664C7FED13.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/1/F3CC3769D8FD66E30F3BA6B926481F664C7FED13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:8e:0c:4c:2f:fc:ff:60:81:98:b8:70:9f:a2:5f:95:9f:c1: 2b:8e:82:b1:c3:dc:bf:b3:10:e9:38:16:21:a2:cc:cd:2d:f5: 9c:66:94:2b:43:e9:2a:d3:f9:49:26:18:cc:a9:b8:2c:73:06: 76:db:b2:db:fd:76:60:41:82:da:b3:72:d9:bc:fc:59:82:9a: 52:ed:9a:c5:ec:79:d5:83:e7:68:6a:e0:14:38:bc:c9:6f:08: c0:b1:26:5f:5d:66:df:0d:f5:59:2f:26:53:5f:0e:c0:23:b7: 1a:bd:bb:a9:27:e2:74:65:15:12:18:91:a4:1c:22:87:a4:e6: 3a:c0:12:3c:8d:a5:bb:a8:97:2a:84:bb:be:63:40:10:01:4e: 24:44:1a:06:6c:39:66:ef:73:4a:48:c3:59:7f:c9:b6:4e:64: 78:b6:cd:a5:61:87:a4:d7:35:d4:0d:ed:e2:69:86:f9:36:34: ca:8d:11:2a:90:e2:48:1a:b8:d5:13:22:05:3d:3d:60:6e:a5: c6:63:c7:e8:38:83:df:36:ad:40:ea:a7:07:04:42:48:f1:d9: 69:53:68:3b:9f:26:cf:98:f1:d4:37:cb:33:96:ec:52:ea:2a: c3:4f:81:f0:c2:80:bc:99:81:b9:71:db:8b:01:68:b3:f3:de: 0a:1a:6a:79 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgIUDvQt/IeTFH7u51R4Bk9Alvw1RtwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNDQzM3NjlEOEZENjZFMzBGM0JBNkI5MjY0ODFGNjY0 QzdGRUQxMzAeFw0yNjA5MjAxMDQ3NDNaFw0yNjA5MjExMjI2NDNaMDMxMTAvBgNV BAMTKEJDQzBFOEIyMjc2MTg3QTQwRkZEQ0U2OEE1NzVCNDA4QjJFMzVFNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqXLzOI8omS4lw3HM2wDfxBzfz Jkfeum7mr1upUQCS9IZ/jWuxz5llwmnR7tlWYpbxyTNpEyUCio0By7DIjz7XcWEq dEnUzApkOBGlhy801Sd1MsHl6uZfnHSxBluTE7FgKkcExtvOIRm6VY6KAWNTBMmb EdhZZDlVULaefEzc8PvZ+CSoxqU7KiDhRrfoCh+7ClEWiJPjCNCeoMU2z/at5AIa IWjNVHxpvFE/TD6+t3O1W2+BetyXl8nAJTt/ifGS1qYOTFO/1OYvvBLUA3hbQHJY ChsL3Eu3Yo02bH1jbNEvHEBY9dTy3/gEeBaFkubtEWQaENGxLLLfh/oigVe3AgMB AAGjggJXMIICUzAdBgNVHQ4EFgQUvMDosidhh6QP/c5opXW0CLLjXmQwHwYDVR0j BBgwFoAU88w3adj9ZuMPO6a5JkgfZkx/7RMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTgxZjk3ODItODk4ZS00YjgzLTk1ZTYtNGZmNGFiNzVj OWRjLzEvRjNDQzM3NjlEOEZENjZFMzBGM0JBNkI5MjY0ODFGNjY0QzdGRUQxMy5j cmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3luYzovL3Jwa2kuYXhp dm9yYS5uZXQvcmVwby9BeGl2b3JhLU5ldC8yL0YzQ0MzNzY5RDhGRDY2RTMwRjNC QTZCOTI2NDgxRjY2NEM3RkVEMTMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9z aXRvcnkvOTgxZjk3ODItODk4ZS00YjgzLTk1ZTYtNGZmNGFiNzVjOWRjLzEvRjND QzM3NjlEOEZENjZFMzBGM0JBNkI5MjY0ODFGNjY0QzdGRUQxMy5tZnQwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEB ADyODEwv/P9ggZi4cJ+iX5WfwSuOgrHD3L+zEOk4FiGizM0t9ZxmlCtD6SrT+Ukm GMypuCxzBnbbstv9dmBBgtqzctm8/FmCmlLtmsXsedWD52hq4BQ4vMlvCMCxJl9d Zt8N9VkvJlNfDsAjtxq9u6kn4nRlFRIYkaQcIoek5jrAEjyNpbuolyqEu75jQBAB TiREGgZsOWbvc0pIw1l/ybZOZHi2zaVhh6TXNdQN7eJphvk2NMqNESqQ4kgauNUT IgU9PWBupcZjx+g4g982rUDqpwcEQkjx2WlTaDufJs+Y8dQ3yzOW7FLqKsNPgfDC gLyZgblx24sBaLPz3goaank= -----END CERTIFICATE-----Generated at Sun Sep 20 21:51:43 2026 by rpki-client