$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft File: 529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft (raw, json) Hash identifier: QXOrvV6t0cl78gFBkEOadzq1onRmbacAEgKMe3uhKsg= Subject key identifier: 8B:E5:1D:CA:FE:1A:2D:7A:76:D9:02:EF:9F:B5:04:64:6F:B7:2D:97 Authority key identifier: 52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F Certificate issuer: /CN=529BFC6DD306B2C49629AA6CEB313194CAA5D33F Certificate serial: 488EF5DB9E278F9CC48363B8208F1F9F243A83DE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft Manifest number: 0143 Signing time: Fri 04 Sep 2026 19:31:40 +0000 Manifest this update: Fri 04 Sep 2026 19:26:40 +0000 Manifest next update: Sat 05 Sep 2026 20:57:40 +0000 Files and hashes: 1: 326130663a316363363a623233303a3a2f34342d3438203d3e20323139333234.roa (hash: Fbr3d6vsF9f3Md2rcurK4yxy/TMDLffSbQOPQZqVAk8=) 2: 326130663a316363363a666430303a3a2f34302d3438203d3e20313939373934.roa (hash: 7kHfAdGzdlPdhwNaqHeUsijlhqrvdKv4GhsJwDJouZY=) 3: 326130663a316363363a626162303a3a2f34342d3438203d3e20323034353335.roa (hash: cHEORjblcG00sbZyjw6Bu9EsXIA7oC5/AO7mRT4IUjg=) 4: 326130663a316363363a623131303a3a2f34342d3438203d3e20313534313835.roa (hash: ib4ImjZeR/tjrdRWs2Z2Xtcq0lxhnT9KoS6I+V5ukmg=) 5: 326130663a316363363a623136303a3a2f34342d3438203d3e20313939373934.roa (hash: CcK314TQaccXuzd2zjleKccUXAJU6r52sUrMN4OiPfc=) 6: 326130663a316363363a623232303a3a2f34342d3438203d3e20313439353133.roa (hash: +hLyO2byVr3CI7RxU47nKmJbK198DWDlst7nIi5HHww=) 7: 326130663a316363363a623132303a3a2f34342d3438203d3e20323039353537.roa (hash: scEe2IowhilowN4x+WVVH9irUBDlv+kjiHhElpwuSSI=) 8: 326130663a316363363a623130303a3a2f34342d3438203d3e20323034323131.roa (hash: 29kVVWLYr7weidsqfKbNgXTNshpnIGiMJ62fMPFeOns=) 9: 326130663a316363363a623234303a3a2f34342d3438203d3e20323139323839.roa (hash: bkUuykciTWh1bfFW0KX433jPn5468fT5sPJmNyOz8Lk=) 10: 529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl (hash: DB0FvwbTo04qOuAs43Zt9wDJkLFQ7aVQaZU2ngMmqOA=) 11: 326130663a316363363a666530303a3a2f34302d3438203d3e20313939373934.roa (hash: bczv8HPQxrdQAlSAG21zowjSuyByV0J0vFQmDC8cfZ0=) 12: 326130663a316363363a623138303a3a2f34342d3438203d3e20313938333331.roa (hash: SQQpuf9MPugDuKKbLcQGIvoOhKwZP0elwI8EjjLg1go=) 13: 326130663a316363363a623133303a3a2f34342d3438203d3e20323031373730.roa (hash: Efws7PM/OQeywU7TXDwbueQNU1D1OoCjFxiKYnz5zVA=) 14: 326130663a316363363a623232303a3a2f34342d3438203d3e20313937313936.roa (hash: HmKrlFyhqlQZZbvjhxJnQb4uO8wWIL79TVFNo65Q1cE=) 15: 326130663a316363363a666630303a3a2f34302d3438203d3e20313939373934.roa (hash: u2OSA0CA/LhD/ehNs3nGB0Ac0Hv0xN26zlrjRiwlUDk=) 16: 326130663a316363363a623137303a3a2f34342d3438203d3e20313938353838.roa (hash: Z1D2tzNH9Lk3h3VvnoiCB7e43V2PFv05dOJ2CtKqIbE=) 17: 326130663a316363363a623235303a3a2f34342d3434203d3e20323131353735.roa (hash: 8mE1jAfmLyWfaMnOLOuvCITYLEI/kRV9tFQm4x0RWuU=) 18: 326130663a316363363a623230303a3a2f34342d3438203d3e20313938313535.roa (hash: R0Zp25uniUy1vGT1s0rsGRtZxCDntggB9KJVr/ZGHFk=) 19: 326130663a316363363a623135303a3a2f34342d3438203d3e20313939383137.roa (hash: jAjlYxtD2JiQt/anCFJXoX013l22BEoSBOom0VVJ2SM=) 20: 326130663a316363363a623139303a3a2f34342d3438203d3e20313938333035.roa (hash: MqnRABjnmlRpFJeXPojgQfKbU77XB43KxaLrjADcIBQ=) 21: 326130663a316363363a623134303a3a2f34342d3438203d3e203230343733.roa (hash: 0uVBH5sUFKMTa796Uvv1SVvRGarUL75dm7ieOip7W/Q=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 20:57:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:8e:f5:db:9e:27:8f:9c:c4:83:63:b8:20:8f:1f:9f:24:3a:83:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=529BFC6DD306B2C49629AA6CEB313194CAA5D33F Validity Not Before: Sep 4 19:26:40 2026 GMT Not After : Sep 5 20:57:40 2026 GMT Subject: CN=8BE51DCAFE1A2D7A76D902EF9FB504646FB72D97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:60:02:e4:a4:b7:97:82:35:93:91:7e:eb:cd: 2f:41:16:97:69:d0:de:60:76:f7:54:1d:96:0e:69: c8:c2:bf:a9:fc:2b:08:0f:31:16:79:ad:7b:80:e4: 7b:e2:e4:3f:54:2e:4a:b7:14:dc:ae:05:cd:ee:b2: d2:c7:d1:13:da:4a:ab:bf:76:30:a3:dd:87:3a:41: 6d:98:37:6c:44:c5:80:b6:50:4e:ce:13:95:40:dd: 4e:73:af:ab:41:72:89:e1:8c:9d:89:71:85:41:ec: 69:7c:a1:75:9b:77:57:94:77:56:18:ac:5a:57:24: 7f:52:ae:67:25:c9:0f:ec:b7:62:cd:f1:2f:83:01: 03:06:c5:f4:23:54:fd:46:6c:1b:52:5f:be:c4:95: d4:98:9d:7f:18:be:8f:d6:cf:8f:be:56:01:b1:77: 8b:ae:db:c7:d2:85:8e:cc:4c:af:f0:85:9d:d6:6a: cd:0a:b1:74:32:ca:fa:36:68:f5:90:ad:6a:83:fb: 3d:df:89:47:12:50:70:c9:19:58:83:cb:b7:20:6c: d4:ff:5a:d1:46:88:0d:03:a0:80:db:7b:5a:ba:13: 98:05:52:0a:bb:fe:e2:01:d7:16:92:f1:98:2d:3d: cd:3a:5d:dc:9f:73:eb:cf:3c:21:a6:83:8c:82:77: 8e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E5:1D:CA:FE:1A:2D:7A:76:D9:02:EF:9F:B5:04:64:6F:B7:2D:97 X509v3 Authority Key Identifier: keyid:52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:70:26:d8:15:ed:06:8a:fc:f0:8e:d4:9c:fe:7f:3c:74:94: 74:fd:0b:92:d1:30:02:11:2d:ff:83:14:ba:f7:13:58:b3:a2: 44:e1:34:e6:13:a8:f0:82:bd:78:30:d6:ed:b8:18:af:2b:ae: 38:4a:ce:71:65:f5:68:56:aa:de:3d:eb:e8:1c:8d:19:8c:98: 51:c0:33:14:3c:16:f8:74:f5:9d:df:d8:62:d5:32:7b:5a:bf: 18:1c:75:cc:4f:7d:09:51:21:91:05:26:f5:91:16:bf:14:d7: d6:8b:66:16:52:4a:93:96:1d:f9:bc:50:09:74:eb:67:0b:46: 71:35:1f:e3:48:ec:46:9e:69:f1:f0:1f:bc:f6:0e:ae:4c:fe: 22:aa:53:2b:4f:89:0d:22:74:6c:3a:be:b7:f9:ee:cc:30:28: a6:0e:bc:ad:d8:e3:55:a5:d1:4a:05:ed:fb:20:8a:72:aa:8c: b0:d7:1e:2f:9e:04:fb:a0:75:cc:02:99:42:f5:b5:dd:05:59: d2:0a:e5:b7:c4:52:f4:69:78:dc:42:a6:d7:6c:c7:60:1b:86: a4:19:ba:25:f7:95:1a:5b:69:b2:df:fe:f5:bb:d3:30:28:75: c6:77:99:7b:4c:27:d3:b7:47:c8:63:c7:3a:30:6f:21:89:0f: 99:9e:c0:84 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUSI71254nj5zEg2O4II8fnyQ6g94wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI5QkZDNkREMzA2QjJDNDk2MjlBQTZDRUIzMTMxOTRD QUE1RDMzRjAeFw0yNjA5MDQxOTI2NDBaFw0yNjA5MDUyMDU3NDBaMDMxMTAvBgNV BAMTKDhCRTUxRENBRkUxQTJEN0E3NkQ5MDJFRjlGQjUwNDY0NkZCNzJEOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4YALkpLeXgjWTkX7rzS9BFpdp 0N5gdvdUHZYOacjCv6n8KwgPMRZ5rXuA5Hvi5D9ULkq3FNyuBc3ustLH0RPaSqu/ djCj3Yc6QW2YN2xExYC2UE7OE5VA3U5zr6tBconhjJ2JcYVB7Gl8oXWbd1eUd1YY rFpXJH9SrmclyQ/st2LN8S+DAQMGxfQjVP1GbBtSX77EldSYnX8Yvo/Wz4++VgGx d4uu28fShY7MTK/whZ3Was0KsXQyyvo2aPWQrWqD+z3fiUcSUHDJGViDy7cgbNT/ WtFGiA0DoIDbe1q6E5gFUgq7/uIB1xaS8ZgtPc06Xdyfc+vPPCGmg4yCd44/AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUi+Udyv4aLXp22QLvn7UEZG+3LZcwHwYDVR0j BBgwFoAUUpv8bdMGssSWKaps6zExlMql0z8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDkyZDE2ZjItOWI0Ni00YTExLWFjNTktNDJiM2RkZWUx MTA2LzIvNTI5QkZDNkREMzA2QjJDNDk2MjlBQTZDRUIzMTMxOTRDQUE1RDMzRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC81MjlCRkM2REQzMDZCMkM0OTYyOUFBNkNF QjMxMzE5NENBQTVEMzNGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzA5MmQxNmYyLTliNDYtNGExMS1hYzU5LTQyYjNkZGVlMTEwNi8yLzUyOUJGQzZE RDMwNkIyQzQ5NjI5QUE2Q0VCMzEzMTk0Q0FBNUQzM0YubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA5cCbY Fe0GivzwjtSc/n88dJR0/QuS0TACES3/gxS69xNYs6JE4TTmE6jwgr14MNbtuBiv K644Ss5xZfVoVqrePevoHI0ZjJhRwDMUPBb4dPWd39hi1TJ7Wr8YHHXMT30JUSGR BSb1kRa/FNfWi2YWUkqTlh35vFAJdOtnC0ZxNR/jSOxGnmnx8B+89g6uTP4iqlMr T4kNInRsOr63+e7MMCimDryt2ONVpdFKBe37IIpyqoyw1x4vngT7oHXMAplC9bXd BVnSCuW3xFL0aXjcQqbXbMdgG4akGbol95UaW2my3/71u9MwKHXGd5l7TCfTt0fI Y8c6MG8hiQ+ZnsCE -----END CERTIFICATE-----Generated at Sat Sep 5 08:34:05 2026 by rpki-client