$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.mft File: 258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.mft (raw, json) Hash identifier: bArj0rCPFFqZGh8RMuMijzuw6ODJ//L/xPOgHzYbw0s= Subject key identifier: 30:BC:3B:B3:9B:F2:74:E0:1C:98:4E:65:3D:98:CB:DF:32:1D:DD:2F Authority key identifier: 25:8D:1C:E0:CB:76:A9:86:E5:6C:7A:90:A6:6B:A7:DC:72:F5:95:2A Certificate issuer: /CN=258D1CE0CB76A986E56C7A90A66BA7DC72F5952A Certificate serial: 7DE839AB7FB4784E8747ACCDE36158F356736EF9 Authority info access: rsync://rpki.axivora.net/repo/Axivora-Net/2/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.mft Manifest number: DF Signing time: Mon 06 Apr 2026 21:10:28 +0000 Manifest this update: Mon 06 Apr 2026 21:05:28 +0000 Manifest next update: Tue 07 Apr 2026 21:57:28 +0000 Files and hashes: 1: 258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.crl (hash: y6FyuE4Elja0HUlkWU4LLYBfEh7kHImEy7J+ZpbIxpY=) 2: 326131343a373538303a3737373a3a2f34382d3438203d3e203136353039.roa (hash: xvnqSl1qLoVMIEzXN9sXRb87iGsN7N/pVeZWynFQufE=) 3: 326131343a373538303a3737353a3a2f34382d3438203d3e203136353039.roa (hash: LbzBckLICgXq7UKYaeP/CXL1PXD0JCr+a84omRC/7VY=) 4: 326131343a373538303a3737353a3a2f34382d3438203d3e203134363138.roa (hash: MfUF2laHihcgibdMapv7JAFGkNEIH6JIdDfIW/lhqFE=) 5: 326131343a373538303a3737373a3a2f34382d3438203d3e203134363138.roa (hash: RTK2m9QZnNSKC5ZVcuz7+tdRZKTs7/hzcAu/hXd2ZTc=) 6: 326131343a373538303a3737303a3a2f34342d3438203d3e20323133383931.roa (hash: woLwL0VEJzWnepdsx0zvpMFwwJXef1WYeYkaz1KcaHg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.crl rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.mft rsync://rpki.axivora.net/repo/Axivora-Net/2/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.cer rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 07 Apr 2026 21:26:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:e8:39:ab:7f:b4:78:4e:87:47:ac:cd:e3:61:58:f3:56:73:6e:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=258D1CE0CB76A986E56C7A90A66BA7DC72F5952A Validity Not Before: Apr 6 21:05:28 2026 GMT Not After : Apr 7 21:57:28 2026 GMT Subject: CN=30BC3BB39BF274E01C984E653D98CBDF321DDD2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:38:1e:ef:7a:8a:07:1b:c1:77:5b:6b:9b:27: 8f:4f:54:0b:1d:aa:77:c4:49:8e:a6:fa:43:fc:05: 4a:13:a8:92:dc:c2:70:17:57:79:55:57:18:33:08: c5:ae:48:4a:58:09:92:9b:b4:19:60:3e:0f:eb:6e: df:72:cf:c7:dc:e9:61:de:89:29:30:ca:ee:d8:2d: 6c:c5:bf:3f:85:f4:7b:fe:bb:34:10:8e:27:85:5f: 1d:91:33:67:83:3a:d5:3b:6a:71:8d:d2:73:88:61: 45:be:d0:7c:47:ff:8e:fd:dd:d8:a2:21:8a:cd:19: 44:64:f1:f6:a1:7c:15:58:d6:03:97:1e:04:cc:64: 1a:30:a9:cc:19:57:ac:23:86:f7:59:ed:32:76:7a: 95:4a:3e:ee:41:ee:eb:9b:3c:6f:9c:de:58:1e:ec: 54:6a:90:a9:31:f5:2d:5c:30:d1:18:61:20:b1:bc: 4d:1d:cd:82:2d:8a:b1:45:7b:e0:16:53:31:33:66: 65:ed:fa:3f:82:d1:b8:51:54:5c:c5:e6:93:20:ee: cc:74:61:2b:da:a4:2d:f6:e6:61:84:c8:39:3d:cb: 0d:0a:c1:04:9f:d9:45:ab:b1:c0:e2:85:fd:ac:78: 76:c0:f8:4f:65:9a:ac:17:9c:e8:2d:e2:d9:3f:31: 59:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:BC:3B:B3:9B:F2:74:E0:1C:98:4E:65:3D:98:CB:DF:32:1D:DD:2F X509v3 Authority Key Identifier: keyid:25:8D:1C:E0:CB:76:A9:86:E5:6C:7A:90:A6:6B:A7:DC:72:F5:95:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:35:7e:b7:8c:35:ed:2b:4e:03:ec:07:17:40:f0:01:7b:d3: f9:b1:67:83:66:92:b3:f5:1b:82:21:e5:80:57:89:0a:c0:42: dd:ae:59:a7:48:19:d5:83:4f:9c:0c:56:c4:67:aa:3d:4d:3e: c1:c3:18:cc:8b:92:a9:62:54:8b:a3:c0:23:d3:a0:c2:81:90: fb:81:b8:df:0d:df:4e:5b:cb:00:ed:8e:d7:d3:4d:32:00:0c: bb:89:51:8f:07:4b:1c:87:eb:77:ca:71:83:1c:91:ff:c4:c6: 16:7d:65:49:1e:30:89:68:06:06:71:25:9d:86:63:46:97:48: fb:de:6b:32:72:f5:73:f9:46:47:8c:31:12:e6:16:6f:5d:f0: d5:8d:00:50:50:c6:f2:f2:a7:58:5a:df:ed:c7:ed:0d:e4:d2: 58:38:e4:eb:8b:2e:5f:a9:71:dc:f9:23:6f:90:d6:b6:e0:7d: 08:0d:3e:93:e4:b1:8e:e2:77:5e:a7:a4:ee:27:37:0f:fc:93: 96:53:ff:af:6a:47:5b:04:db:6f:54:95:57:83:92:75:4f:a8: 27:1b:73:92:35:3b:64:39:ce:37:6f:a8:91:d7:ae:4f:3b:e9: 55:94:40:42:cc:a3:f5:63:0f:d4:84:ba:44:cf:b5:5e:ba:a7: 83:6b:00:a6 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgIUfeg5q3+0eE6HR6zN42FY81ZzbvkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU4RDFDRTBDQjc2QTk4NkU1NkM3QTkwQTY2QkE3REM3 MkY1OTUyQTAeFw0yNjA0MDYyMTA1MjhaFw0yNjA0MDcyMTU3MjhaMDMxMTAvBgNV BAMTKDMwQkMzQkIzOUJGMjc0RTAxQzk4NEU2NTNEOThDQkRGMzIxREREMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbOB7veooHG8F3W2ubJ49PVAsd qnfESY6m+kP8BUoTqJLcwnAXV3lVVxgzCMWuSEpYCZKbtBlgPg/rbt9yz8fc6WHe iSkwyu7YLWzFvz+F9Hv+uzQQjieFXx2RM2eDOtU7anGN0nOIYUW+0HxH/4793dii IYrNGURk8fahfBVY1gOXHgTMZBowqcwZV6wjhvdZ7TJ2epVKPu5B7uubPG+c3lge 7FRqkKkx9S1cMNEYYSCxvE0dzYItirFFe+AWUzEzZmXt+j+C0bhRVFzF5pMg7sx0 YSvapC325mGEyDk9yw0KwQSf2UWrscDihf2seHbA+E9lmqwXnOgt4tk/MVnbAgMB AAGjggJXMIICUzAdBgNVHQ4EFgQUMLw7s5vydOAcmE5lPZjL3zId3S8wHwYDVR0j BBgwFoAUJY0c4Mt2qYblbHqQpmun3HL1lSowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDNmZDBiNzYtNzI0My00YjI2LTk3NjAtY2MwN2I5NGJm ZTIzLzEvMjU4RDFDRTBDQjc2QTk4NkU1NkM3QTkwQTY2QkE3REM3MkY1OTUyQS5j cmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3luYzovL3Jwa2kuYXhp dm9yYS5uZXQvcmVwby9BeGl2b3JhLU5ldC8yLzI1OEQxQ0UwQ0I3NkE5ODZFNTZD N0E5MEE2NkJBN0RDNzJGNTk1MkEuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9z aXRvcnkvMDNmZDBiNzYtNzI0My00YjI2LTk3NjAtY2MwN2I5NGJmZTIzLzEvMjU4 RDFDRTBDQjc2QTk4NkU1NkM3QTkwQTY2QkE3REM3MkY1OTUyQS5tZnQwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEB AC01freMNe0rTgPsBxdA8AF70/mxZ4NmkrP1G4Ih5YBXiQrAQt2uWadIGdWDT5wM VsRnqj1NPsHDGMyLkqliVIujwCPToMKBkPuBuN8N305bywDtjtfTTTIADLuJUY8H SxyH63fKcYMckf/ExhZ9ZUkeMIloBgZxJZ2GY0aXSPveazJy9XP5RkeMMRLmFm9d 8NWNAFBQxvLyp1ha3+3H7Q3k0lg45OuLLl+pcdz5I2+Q1rbgfQgNPpPksY7id16n pO4nNw/8k5ZT/69qR1sE229UlVeDknVPqCcbc5I1O2Q5zjdvqJHXrk876VWUQELM o/VjD9SEukTPtV66p4NrAKY= -----END CERTIFICATE-----Generated at Tue Apr 7 12:06:27 2026 by rpki-client