$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.mft File: 258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.mft (raw, json) Hash identifier: m+GZoRSCYnwjjlOP2eETILtFuXNsYSdGClIADiC7t2Q= Subject key identifier: A6:23:60:1F:6F:A4:3A:47:2C:E2:57:35:68:21:5B:BD:DF:BB:AD:8E Authority key identifier: 25:8D:1C:E0:CB:76:A9:86:E5:6C:7A:90:A6:6B:A7:DC:72:F5:95:2A Certificate issuer: /CN=258D1CE0CB76A986E56C7A90A66BA7DC72F5952A Certificate serial: 5F76A2EA6CCE4F82F05A648ECDDFF1775719A0ED Authority info access: rsync://rpki.axivora.net/repo/Axivora-Net/2/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.mft Manifest number: 01C3 Signing time: Fri 25 Sep 2026 01:45:24 +0000 Manifest this update: Fri 25 Sep 2026 01:40:24 +0000 Manifest next update: Sat 26 Sep 2026 02:52:24 +0000 Files and hashes: 1: 258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.crl (hash: npa7a1m8G1l2LJITE2bnghDnI00oWdkifQG1y33HxV4=) 2: 326131343a373538303a3737373a3a2f34382d3438203d3e203134363138.roa (hash: RTK2m9QZnNSKC5ZVcuz7+tdRZKTs7/hzcAu/hXd2ZTc=) 3: 326131343a373538303a3737353a3a2f34382d3438203d3e203134363138.roa (hash: MfUF2laHihcgibdMapv7JAFGkNEIH6JIdDfIW/lhqFE=) 4: 326131343a373538303a3737303a3a2f34342d3438203d3e20323133383931.roa (hash: woLwL0VEJzWnepdsx0zvpMFwwJXef1WYeYkaz1KcaHg=) 5: 326131343a373538303a3737353a3a2f34382d3438203d3e203136353039.roa (hash: LbzBckLICgXq7UKYaeP/CXL1PXD0JCr+a84omRC/7VY=) 6: 326131343a373538303a3737373a3a2f34382d3438203d3e203136353039.roa (hash: xvnqSl1qLoVMIEzXN9sXRb87iGsN7N/pVeZWynFQufE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.crl rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.mft rsync://rpki.axivora.net/repo/Axivora-Net/2/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.cer rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 16:49:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:76:a2:ea:6c:ce:4f:82:f0:5a:64:8e:cd:df:f1:77:57:19:a0:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=258D1CE0CB76A986E56C7A90A66BA7DC72F5952A Validity Not Before: Sep 25 01:40:24 2026 GMT Not After : Sep 26 02:52:24 2026 GMT Subject: CN=A623601F6FA43A472CE2573568215BBDDFBBAD8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ca:1f:7b:05:f2:26:c6:a2:70:e4:61:4c:26: 96:36:7b:6c:54:1e:59:ec:82:74:76:c2:0b:a1:ff: 32:82:d6:fb:19:84:72:c9:e7:fa:8b:21:2d:9a:29: 3e:c6:8b:24:d4:cb:09:b2:d2:eb:7e:41:84:07:85: 10:4f:58:c9:93:79:1b:b7:58:f5:e9:26:18:4d:c4: 2b:9d:1d:96:6a:d6:0e:58:a1:bc:14:ef:5d:b9:5b: 2a:e2:34:b5:74:91:a2:cf:a1:b0:08:2d:d5:4d:a1: f4:db:4c:61:ec:14:a3:f4:41:3a:a3:36:31:ff:d2: ee:99:f6:ae:a3:7e:6e:9b:71:37:64:80:16:8f:4e: d6:18:fa:3f:da:40:d3:0e:32:97:29:b0:e3:9b:f8: be:7c:22:42:7e:ff:1c:c7:09:df:ee:8c:7b:61:c9: 97:d6:a6:4c:45:f6:8d:3a:62:a7:1d:d3:36:d8:01: 8e:dd:b0:f0:0e:ce:06:7d:cb:0b:43:aa:fa:50:31: aa:4e:7a:a7:20:f0:6f:e0:49:12:01:4f:58:c3:fd: 0c:da:71:cb:7a:dd:9c:77:b6:1f:a6:ee:9a:fd:f5: c4:56:94:a9:59:33:f4:2c:1f:6a:09:a4:a0:66:69: 03:78:70:eb:19:3c:7b:cb:0d:fd:1e:d0:b1:bb:5c: 7c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:23:60:1F:6F:A4:3A:47:2C:E2:57:35:68:21:5B:BD:DF:BB:AD:8E X509v3 Authority Key Identifier: keyid:25:8D:1C:E0:CB:76:A9:86:E5:6C:7A:90:A6:6B:A7:DC:72:F5:95:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:33:7e:da:c1:1c:3a:ea:24:dc:45:13:a0:00:ec:45:7e:97: de:3b:42:32:f4:2f:c8:98:5f:c5:18:bd:93:fe:78:b3:0a:11: 41:6c:ec:df:35:d1:8e:33:4e:52:50:7f:ca:37:b1:ce:13:c8: 48:2e:36:39:e1:82:03:0b:ca:91:a0:bc:96:6c:81:00:ef:dd: f6:c0:9d:4c:ab:70:da:12:03:d9:c7:c4:7b:20:6a:c3:c4:bf: de:7a:72:f0:e3:ee:cf:2d:a4:4c:b2:c6:5b:61:56:7e:9e:4c: 97:6c:04:ba:66:63:9f:27:9d:9f:b4:6c:16:ac:8d:12:de:c1: e4:e9:bc:8a:db:61:5b:56:da:a8:80:87:76:3e:3d:f7:3c:bd: 72:35:3d:e1:4c:ef:1c:e3:b2:1b:cc:e3:42:44:7a:25:f3:3b: 08:06:fa:55:28:e8:08:0d:02:01:a4:e0:75:19:5e:e3:18:d0: f0:6c:17:c1:e5:83:97:2d:b6:a8:9e:12:5e:19:9d:a7:19:8a: 5c:6c:20:74:48:94:7c:9a:db:56:a5:f3:35:97:ce:72:77:83: 4e:2d:56:fa:d9:ca:04:fd:77:fd:e7:8d:98:57:2f:86:02:73: 25:96:f5:f9:f0:6a:0b:37:c5:09:51:19:9e:6f:35:a5:26:b3: dd:b5:93:81 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgIUX3ai6mzOT4LwWmSOzd/xd1cZoO0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU4RDFDRTBDQjc2QTk4NkU1NkM3QTkwQTY2QkE3REM3 MkY1OTUyQTAeFw0yNjA5MjUwMTQwMjRaFw0yNjA5MjYwMjUyMjRaMDMxMTAvBgNV BAMTKEE2MjM2MDFGNkZBNDNBNDcyQ0UyNTczNTY4MjE1QkJEREZCQkFEOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvyh97BfImxqJw5GFMJpY2e2xU HlnsgnR2wguh/zKC1vsZhHLJ5/qLIS2aKT7GiyTUywmy0ut+QYQHhRBPWMmTeRu3 WPXpJhhNxCudHZZq1g5YobwU7125WyriNLV0kaLPobAILdVNofTbTGHsFKP0QTqj NjH/0u6Z9q6jfm6bcTdkgBaPTtYY+j/aQNMOMpcpsOOb+L58IkJ+/xzHCd/ujHth yZfWpkxF9o06Yqcd0zbYAY7dsPAOzgZ9ywtDqvpQMapOeqcg8G/gSRIBT1jD/Qza cct63Zx3th+m7pr99cRWlKlZM/QsH2oJpKBmaQN4cOsZPHvLDf0e0LG7XHz7AgMB AAGjggJXMIICUzAdBgNVHQ4EFgQUpiNgH2+kOkcs4lc1aCFbvd+7rY4wHwYDVR0j BBgwFoAUJY0c4Mt2qYblbHqQpmun3HL1lSowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDNmZDBiNzYtNzI0My00YjI2LTk3NjAtY2MwN2I5NGJm ZTIzLzEvMjU4RDFDRTBDQjc2QTk4NkU1NkM3QTkwQTY2QkE3REM3MkY1OTUyQS5j cmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3luYzovL3Jwa2kuYXhp dm9yYS5uZXQvcmVwby9BeGl2b3JhLU5ldC8yLzI1OEQxQ0UwQ0I3NkE5ODZFNTZD N0E5MEE2NkJBN0RDNzJGNTk1MkEuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9z aXRvcnkvMDNmZDBiNzYtNzI0My00YjI2LTk3NjAtY2MwN2I5NGJmZTIzLzEvMjU4 RDFDRTBDQjc2QTk4NkU1NkM3QTkwQTY2QkE3REM3MkY1OTUyQS5tZnQwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEB ADYzftrBHDrqJNxFE6AA7EV+l947QjL0L8iYX8UYvZP+eLMKEUFs7N810Y4zTlJQ f8o3sc4TyEguNjnhggMLypGgvJZsgQDv3fbAnUyrcNoSA9nHxHsgasPEv956cvDj 7s8tpEyyxlthVn6eTJdsBLpmY58nnZ+0bBasjRLeweTpvIrbYVtW2qiAh3Y+Pfc8 vXI1PeFM7xzjshvM40JEeiXzOwgG+lUo6AgNAgGk4HUZXuMY0PBsF8Hlg5cttqie El4ZnacZilxsIHRIlHya21al8zWXznJ3g04tVvrZygT9d/3njZhXL4YCcyWW9fnw ags3xQlRGZ5vNaUms921k4E= -----END CERTIFICATE-----Generated at Fri Sep 25 06:22:48 2026 by rpki-client