$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/1/F3CC3769D8FD66E30F3BA6B926481F664C7FED13.mft File: F3CC3769D8FD66E30F3BA6B926481F664C7FED13.mft (raw, json) Hash identifier: hXr49Nv+d/mgDHY0MB+XaAqS8TuXgTOuZ5kT5cGlBrc= Subject key identifier: CC:06:93:4E:0D:D1:AA:45:6F:C9:10:FB:DD:63:53:7A:0F:15:65:9A Authority key identifier: F3:CC:37:69:D8:FD:66:E3:0F:3B:A6:B9:26:48:1F:66:4C:7F:ED:13 Certificate issuer: /CN=F3CC3769D8FD66E30F3BA6B926481F664C7FED13 Certificate serial: 5F47A3133B14F123B166091F57F28D82C6886206 Authority info access: rsync://rpki.axivora.net/repo/Axivora-Net/2/F3CC3769D8FD66E30F3BA6B926481F664C7FED13.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/1/F3CC3769D8FD66E30F3BA6B926481F664C7FED13.mft Manifest number: 0222 Signing time: Wed 23 Sep 2026 09:23:47 +0000 Manifest this update: Wed 23 Sep 2026 09:18:47 +0000 Manifest next update: Thu 24 Sep 2026 12:12:47 +0000 Files and hashes: 1: F3CC3769D8FD66E30F3BA6B926481F664C7FED13.crl (hash: 1HPwnwsCTeHKZJKA1rRo3IXIsX4XCwouH/343wFv+Gc=) 2: 326131343a373538303a3765303a3a2f34342d3438203d3e20323131353735.roa (hash: 2yW2cTrURBWc1KghoJNqvMr3yilY8hjaJGrRfYNrlnI=) 3: 326131343a373538303a3765303a3a2f34382d3438203d3e20323134353334.roa (hash: CpYftnzlZeDqedYjZ6V5exipLdXe535/qHz7Sz54bro=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/1/F3CC3769D8FD66E30F3BA6B926481F664C7FED13.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/1/F3CC3769D8FD66E30F3BA6B926481F664C7FED13.mft rsync://rpki.axivora.net/repo/Axivora-Net/2/F3CC3769D8FD66E30F3BA6B926481F664C7FED13.cer rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 12:12:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:47:a3:13:3b:14:f1:23:b1:66:09:1f:57:f2:8d:82:c6:88:62:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3CC3769D8FD66E30F3BA6B926481F664C7FED13 Validity Not Before: Sep 23 09:18:47 2026 GMT Not After : Sep 24 12:12:47 2026 GMT Subject: CN=CC06934E0DD1AA456FC910FBDD63537A0F15659A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b7:c7:7f:07:82:6d:57:46:76:fc:ab:51:04: 3d:e8:3d:77:f8:95:68:9e:b0:07:de:66:ea:b5:c0: e4:2f:e2:c0:f5:d2:a6:d1:48:24:cf:e7:1c:57:1e: 1c:01:b9:45:b4:26:4f:b6:0b:d3:48:c4:9f:7e:3f: 18:71:49:98:67:bd:5f:08:e9:33:fa:f4:6d:c8:58: 90:e6:e4:ab:94:d6:9f:6b:1e:22:bc:56:d1:90:73: 21:a6:a1:03:ee:74:51:c9:db:9c:0d:ba:59:c4:20: 09:91:c7:a6:c6:f5:f3:3f:28:eb:b4:b4:12:be:85: ba:77:0a:52:fd:5f:0d:49:9e:17:ac:f4:45:9c:e5: 83:c0:22:fb:39:5f:8b:35:92:71:dd:25:53:5e:39: cc:68:d6:cc:03:c3:a8:3c:d8:61:74:ff:29:bd:b2: 17:73:17:3c:da:6d:d8:d2:d4:2c:41:91:df:1b:f2: 84:53:d6:ff:62:7f:fe:75:9e:72:8b:10:42:bf:a8: 95:fe:44:52:a5:4a:6f:03:c0:e3:c6:e4:ee:db:04: 9b:8e:6b:5f:3c:b6:84:f5:d5:30:62:51:5c:8d:9a: 2d:a4:e8:4b:68:48:6b:bc:17:1f:78:16:8d:c0:d6: 66:9e:58:1e:fa:73:97:98:a4:7d:ae:f1:22:61:a8: 0d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:06:93:4E:0D:D1:AA:45:6F:C9:10:FB:DD:63:53:7A:0F:15:65:9A X509v3 Authority Key Identifier: keyid:F3:CC:37:69:D8:FD:66:E3:0F:3B:A6:B9:26:48:1F:66:4C:7F:ED:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/1/F3CC3769D8FD66E30F3BA6B926481F664C7FED13.crl Authority Information Access: CA Issuers - URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/F3CC3769D8FD66E30F3BA6B926481F664C7FED13.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/1/F3CC3769D8FD66E30F3BA6B926481F664C7FED13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:86:44:78:1e:7d:6c:e3:d2:54:9a:75:e7:af:ee:36:98:b4: 3f:4b:58:c3:29:a6:29:15:a6:47:07:cc:52:2a:d5:35:be:1b: c3:a0:b2:f3:d7:84:31:09:a4:60:fe:13:9f:76:c8:9e:b5:4f: 7a:2d:59:5f:fa:f5:3a:0a:ab:d2:ee:15:71:61:00:b3:27:0a: 15:56:31:5d:2a:1b:bf:84:7c:e6:13:d4:69:26:9b:f9:0b:db: 0f:23:43:6f:48:f2:1b:b0:2a:96:fa:dd:6b:5a:68:45:58:b7: da:08:fe:61:01:0d:e2:8a:bf:47:d5:df:b3:19:88:3d:0f:92: 67:76:39:14:e4:db:02:94:34:f9:51:56:c0:e2:0c:df:d0:50: f1:8b:18:48:75:5a:eb:90:08:d7:bc:af:5e:aa:47:48:8e:85: f1:f1:11:48:3b:1f:44:90:e0:81:00:be:5c:50:db:83:88:c4: 5e:4d:92:a8:a3:b4:bf:5a:31:d4:aa:e3:c5:6c:e2:fc:d0:5c: 0a:e8:6f:42:41:7b:62:82:a0:2d:02:b4:36:7f:8e:d3:fd:96: d1:71:ff:ce:6b:94:34:d6:4f:15:fc:ab:48:7b:85:1e:78:22: 24:f4:0e:dc:b6:7d:a7:76:86:d7:cf:0f:5e:4e:cb:ce:f8:38: f9:17:8b:a6 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgIUX0ejEzsU8SOxZgkfV/KNgsaIYgYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNDQzM3NjlEOEZENjZFMzBGM0JBNkI5MjY0ODFGNjY0 QzdGRUQxMzAeFw0yNjA5MjMwOTE4NDdaFw0yNjA5MjQxMjEyNDdaMDMxMTAvBgNV BAMTKENDMDY5MzRFMEREMUFBNDU2RkM5MTBGQkRENjM1MzdBMEYxNTY1OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFt8d/B4JtV0Z2/KtRBD3oPXf4 lWiesAfeZuq1wOQv4sD10qbRSCTP5xxXHhwBuUW0Jk+2C9NIxJ9+PxhxSZhnvV8I 6TP69G3IWJDm5KuU1p9rHiK8VtGQcyGmoQPudFHJ25wNulnEIAmRx6bG9fM/KOu0 tBK+hbp3ClL9Xw1Jnhes9EWc5YPAIvs5X4s1knHdJVNeOcxo1swDw6g82GF0/ym9 shdzFzzabdjS1CxBkd8b8oRT1v9if/51nnKLEEK/qJX+RFKlSm8DwOPG5O7bBJuO a188toT11TBiUVyNmi2k6EtoSGu8Fx94Fo3A1maeWB76c5eYpH2u8SJhqA1DAgMB AAGjggJXMIICUzAdBgNVHQ4EFgQUzAaTTg3RqkVvyRD73WNTeg8VZZowHwYDVR0j BBgwFoAU88w3adj9ZuMPO6a5JkgfZkx/7RMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTgxZjk3ODItODk4ZS00YjgzLTk1ZTYtNGZmNGFiNzVj OWRjLzEvRjNDQzM3NjlEOEZENjZFMzBGM0JBNkI5MjY0ODFGNjY0QzdGRUQxMy5j cmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3luYzovL3Jwa2kuYXhp dm9yYS5uZXQvcmVwby9BeGl2b3JhLU5ldC8yL0YzQ0MzNzY5RDhGRDY2RTMwRjNC QTZCOTI2NDgxRjY2NEM3RkVEMTMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9z aXRvcnkvOTgxZjk3ODItODk4ZS00YjgzLTk1ZTYtNGZmNGFiNzVjOWRjLzEvRjND QzM3NjlEOEZENjZFMzBGM0JBNkI5MjY0ODFGNjY0QzdGRUQxMy5tZnQwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEB AAOGRHgefWzj0lSadeev7jaYtD9LWMMppikVpkcHzFIq1TW+G8OgsvPXhDEJpGD+ E592yJ61T3otWV/69ToKq9LuFXFhALMnChVWMV0qG7+EfOYT1Gkmm/kL2w8jQ29I 8huwKpb63WtaaEVYt9oI/mEBDeKKv0fV37MZiD0Pkmd2ORTk2wKUNPlRVsDiDN/Q UPGLGEh1WuuQCNe8r16qR0iOhfHxEUg7H0SQ4IEAvlxQ24OIxF5NkqijtL9aMdSq 48Vs4vzQXArob0JBe2KCoC0CtDZ/jtP9ltFx/85rlDTWTxX8q0h7hR54IiT0Dty2 fad2htfPD15Oy874OPkXi6Y= -----END CERTIFICATE-----Generated at Thu Sep 24 01:03:27 2026 by rpki-client