$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft File: 529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft (raw, json) Hash identifier: U1B8BdbOFo/MlX8KjRF7VN0L9EmA1eCGcywsVxJ9guw= Subject key identifier: F6:B2:97:E0:78:5A:33:BC:99:9C:B1:FD:84:0B:05:3C:87:48:E2:C4 Authority key identifier: 52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F Certificate issuer: /CN=529BFC6DD306B2C49629AA6CEB313194CAA5D33F Certificate serial: 22DFC5D85A66AC6C08CB7A3585E10E33255D838F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft Manifest number: 45 Signing time: Fri 06 Mar 2026 19:03:23 +0000 Manifest this update: Fri 06 Mar 2026 18:58:23 +0000 Manifest next update: Sat 07 Mar 2026 21:27:23 +0000 Files and hashes: 1: 326130663a316363363a623133303a3a2f34342d3438203d3e20323031373730.roa (hash: Efws7PM/OQeywU7TXDwbueQNU1D1OoCjFxiKYnz5zVA=) 2: 326130663a316363363a623134303a3a2f34342d3438203d3e203230343733.roa (hash: 0uVBH5sUFKMTa796Uvv1SVvRGarUL75dm7ieOip7W/Q=) 3: 326130663a316363363a623130303a3a2f34342d3438203d3e20323034323131.roa (hash: 29kVVWLYr7weidsqfKbNgXTNshpnIGiMJ62fMPFeOns=) 4: 326130663a316363363a626162303a3a2f34342d3438203d3e20323034353335.roa (hash: cHEORjblcG00sbZyjw6Bu9EsXIA7oC5/AO7mRT4IUjg=) 5: 529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl (hash: O9EBRN/AVK/kwHQGcWnzYL1VpPkq2Dd+1oM697X62Uw=) 6: 326130663a316363363a623131303a3a2f34342d3438203d3e20313534313835.roa (hash: ib4ImjZeR/tjrdRWs2Z2Xtcq0lxhnT9KoS6I+V5ukmg=) 7: 326130663a316363363a623132303a3a2f34342d3438203d3e20323039353537.roa (hash: scEe2IowhilowN4x+WVVH9irUBDlv+kjiHhElpwuSSI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Mar 2026 21:27:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:df:c5:d8:5a:66:ac:6c:08:cb:7a:35:85:e1:0e:33:25:5d:83:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=529BFC6DD306B2C49629AA6CEB313194CAA5D33F Validity Not Before: Mar 6 18:58:23 2026 GMT Not After : Mar 7 21:27:23 2026 GMT Subject: CN=F6B297E0785A33BC999CB1FD840B053C8748E2C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bd:96:53:a9:11:5f:8d:fe:85:ed:cf:e2:02: 4a:c2:d5:ef:34:15:2d:16:29:b8:a5:5b:43:d4:95: 91:e5:b2:e3:a5:f7:11:ac:22:59:92:26:06:b2:06: 60:54:3c:48:5f:38:13:e5:5e:b7:93:7b:94:86:29: 3c:8e:99:19:5e:fa:e4:c7:95:d0:58:fd:82:ac:27: 6a:ed:0b:2c:f7:c9:4c:a1:e6:59:2f:a0:8e:31:a0: 39:ca:40:66:b0:0d:40:8e:d5:5b:5b:59:40:88:0a: 25:75:38:31:8b:b2:ec:0f:bd:59:04:78:c0:5a:82: 47:fd:72:b7:44:f7:91:b9:81:ec:aa:69:b6:67:ad: cc:38:d3:44:2d:64:63:11:c6:7e:2f:75:7a:8d:84: a3:e3:ad:86:29:52:2c:17:e4:01:1d:dd:7b:db:4c: c3:5c:38:b7:0d:d1:92:c7:5e:cc:c9:37:11:e3:1d: e8:6f:91:d7:f1:c0:e5:48:83:94:ae:e1:34:45:40: 00:53:a6:64:f8:95:7d:dc:2b:17:4e:79:82:df:48: 0d:64:20:08:98:f1:d3:2a:fa:8a:8f:96:f8:7c:de: a3:ed:77:fd:a7:16:bd:e7:a5:e2:08:f5:a4:b9:aa: a5:a4:12:01:a8:8e:74:33:9a:71:3f:32:47:97:ba: ec:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:B2:97:E0:78:5A:33:BC:99:9C:B1:FD:84:0B:05:3C:87:48:E2:C4 X509v3 Authority Key Identifier: keyid:52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:b3:58:b7:22:90:e2:2d:36:c8:42:c5:44:6a:28:b0:72:94: c8:b1:24:47:75:07:c4:d8:d4:90:c6:82:fa:d2:1b:65:c3:7c: 0b:29:fc:0e:2c:51:44:aa:89:5a:da:a0:a5:46:da:c4:fd:e6: c2:bd:c6:c2:d5:70:6c:f9:8f:d6:0b:ef:46:b8:28:ee:78:37: 84:d5:81:3a:09:30:a4:5a:d3:ff:c0:04:a8:36:3e:af:a7:51: 8e:df:11:64:bf:dd:19:c5:08:7e:79:3b:3f:ec:cd:c8:02:03: 40:e7:74:78:1a:ab:c4:c9:e7:6e:25:e5:97:b0:5b:15:f5:52: bb:3b:da:40:d3:6a:f7:69:17:d6:07:25:fe:ae:d9:57:20:c6: d4:28:9e:6e:6d:c3:fd:90:e1:0d:9d:c1:51:80:85:92:32:1c: 27:ad:56:a3:9f:6e:ac:3c:b0:38:87:5d:53:f1:68:0d:52:d9: dd:51:be:9d:69:75:19:67:c0:05:e3:f1:74:f0:94:00:2e:5a: fc:42:8a:fb:d8:9b:03:cc:d1:de:80:94:27:9a:ce:97:6f:e1: b5:dd:63:17:1b:e8:60:a8:67:0c:28:f9:c9:1e:a1:62:30:35: 9c:9a:4b:13:78:20:2f:f5:09:56:43:b9:cc:74:1c:cc:5a:6d: 84:6d:a0:f1 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUIt/F2FpmrGwIy3o1heEOMyVdg48wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI5QkZDNkREMzA2QjJDNDk2MjlBQTZDRUIzMTMxOTRD QUE1RDMzRjAeFw0yNjAzMDYxODU4MjNaFw0yNjAzMDcyMTI3MjNaMDMxMTAvBgNV BAMTKEY2QjI5N0UwNzg1QTMzQkM5OTlDQjFGRDg0MEIwNTNDODc0OEUyQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1vZZTqRFfjf6F7c/iAkrC1e80 FS0WKbilW0PUlZHlsuOl9xGsIlmSJgayBmBUPEhfOBPlXreTe5SGKTyOmRle+uTH ldBY/YKsJ2rtCyz3yUyh5lkvoI4xoDnKQGawDUCO1VtbWUCICiV1ODGLsuwPvVkE eMBagkf9crdE95G5geyqabZnrcw400QtZGMRxn4vdXqNhKPjrYYpUiwX5AEd3Xvb TMNcOLcN0ZLHXszJNxHjHehvkdfxwOVIg5Su4TRFQABTpmT4lX3cKxdOeYLfSA1k IAiY8dMq+oqPlvh83qPtd/2nFr3npeII9aS5qqWkEgGojnQzmnE/MkeXuux1AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU9rKX4HhaM7yZnLH9hAsFPIdI4sQwHwYDVR0j BBgwFoAUUpv8bdMGssSWKaps6zExlMql0z8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDkyZDE2ZjItOWI0Ni00YTExLWFjNTktNDJiM2RkZWUx MTA2LzIvNTI5QkZDNkREMzA2QjJDNDk2MjlBQTZDRUIzMTMxOTRDQUE1RDMzRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC81MjlCRkM2REQzMDZCMkM0OTYyOUFBNkNF QjMxMzE5NENBQTVEMzNGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzA5MmQxNmYyLTliNDYtNGExMS1hYzU5LTQyYjNkZGVlMTEwNi8yLzUyOUJGQzZE RDMwNkIyQzQ5NjI5QUE2Q0VCMzEzMTk0Q0FBNUQzM0YubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC+s1i3 IpDiLTbIQsVEaiiwcpTIsSRHdQfE2NSQxoL60htlw3wLKfwOLFFEqola2qClRtrE /ebCvcbC1XBs+Y/WC+9GuCjueDeE1YE6CTCkWtP/wASoNj6vp1GO3xFkv90ZxQh+ eTs/7M3IAgNA53R4GqvEyeduJeWXsFsV9VK7O9pA02r3aRfWByX+rtlXIMbUKJ5u bcP9kOENncFRgIWSMhwnrVajn26sPLA4h11T8WgNUtndUb6daXUZZ8AF4/F08JQA Llr8Qor72JsDzNHegJQnms6Xb+G13WMXG+hgqGcMKPnJHqFiMDWcmksTeCAv9QlW Q7nMdBzMWm2EbaDx -----END CERTIFICATE-----Generated at Sat Mar 7 14:14:34 2026 by rpki-client