$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft File: 529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft (raw, json) Hash identifier: cPbuSsP3KRUY7Duj3Var2sG6cak+L9k5RyYCU7yo384= Subject key identifier: 25:3C:50:0E:36:1F:FB:6F:4B:63:57:AE:D7:9E:80:5C:43:9E:7E:84 Authority key identifier: 52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F Certificate issuer: /CN=529BFC6DD306B2C49629AA6CEB313194CAA5D33F Certificate serial: 355D827FF1C8A15EB3D3E6953B48557A2572E1C6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft Manifest number: 86 Signing time: Tue 21 Apr 2026 08:51:48 +0000 Manifest this update: Tue 21 Apr 2026 08:46:48 +0000 Manifest next update: Wed 22 Apr 2026 09:31:48 +0000 Files and hashes: 1: 326130663a316363363a623133303a3a2f34342d3438203d3e20323031373730.roa (hash: Efws7PM/OQeywU7TXDwbueQNU1D1OoCjFxiKYnz5zVA=) 2: 326130663a316363363a666530303a3a2f34302d3438203d3e20313939373934.roa (hash: bczv8HPQxrdQAlSAG21zowjSuyByV0J0vFQmDC8cfZ0=) 3: 326130663a316363363a626162303a3a2f34342d3438203d3e20323034353335.roa (hash: cHEORjblcG00sbZyjw6Bu9EsXIA7oC5/AO7mRT4IUjg=) 4: 326130663a316363363a623135303a3a2f34342d3438203d3e20313939383137.roa (hash: jAjlYxtD2JiQt/anCFJXoX013l22BEoSBOom0VVJ2SM=) 5: 326130663a316363363a623130303a3a2f34342d3438203d3e20323034323131.roa (hash: 29kVVWLYr7weidsqfKbNgXTNshpnIGiMJ62fMPFeOns=) 6: 326130663a316363363a623131303a3a2f34342d3438203d3e20313534313835.roa (hash: ib4ImjZeR/tjrdRWs2Z2Xtcq0lxhnT9KoS6I+V5ukmg=) 7: 326130663a316363363a666630303a3a2f34302d3438203d3e20313939373934.roa (hash: u2OSA0CA/LhD/ehNs3nGB0Ac0Hv0xN26zlrjRiwlUDk=) 8: 326130663a316363363a623134303a3a2f34342d3438203d3e203230343733.roa (hash: 0uVBH5sUFKMTa796Uvv1SVvRGarUL75dm7ieOip7W/Q=) 9: 326130663a316363363a623132303a3a2f34342d3438203d3e20323039353537.roa (hash: scEe2IowhilowN4x+WVVH9irUBDlv+kjiHhElpwuSSI=) 10: 529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl (hash: WPlxqFhraIrdF4Q+/G9ak4JNlczH6Z8d+AHHytG8Xi0=) 11: 326130663a316363363a623136303a3a2f34342d3438203d3e20313939373934.roa (hash: CcK314TQaccXuzd2zjleKccUXAJU6r52sUrMN4OiPfc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Apr 2026 09:31:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:5d:82:7f:f1:c8:a1:5e:b3:d3:e6:95:3b:48:55:7a:25:72:e1:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=529BFC6DD306B2C49629AA6CEB313194CAA5D33F Validity Not Before: Apr 21 08:46:48 2026 GMT Not After : Apr 22 09:31:48 2026 GMT Subject: CN=253C500E361FFB6F4B6357AED79E805C439E7E84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5e:5f:ef:4a:d4:c8:34:a3:4e:f6:7a:d5:0e: 4e:66:ad:eb:77:60:b1:c7:3c:a2:d2:5c:df:1f:bd: 83:f4:91:5c:4f:e2:c8:ec:a5:4b:09:e6:89:b4:08: dd:31:20:51:eb:a1:fa:e1:06:db:5f:86:c4:48:77: 85:2d:83:f7:7d:5e:89:16:ad:21:db:95:f2:6e:83: fb:d5:7b:c0:a2:f0:7f:e3:62:94:b1:eb:e7:e7:e6: 66:05:e7:dd:5b:ba:13:e3:c5:e4:97:1e:c5:d4:03: 1f:db:39:8c:c5:2d:65:d4:a4:dd:8c:70:4d:74:e0: 79:03:2a:25:e4:55:e0:51:8d:f1:07:89:a2:62:cb: eb:71:1b:89:ed:68:d5:dd:04:a1:d2:8c:30:4e:ee: b3:4a:08:f4:ed:ce:98:9a:09:85:3e:81:dd:a7:06: 8c:47:65:28:09:61:d5:1d:3a:a5:fc:2a:49:0a:79: 5e:61:72:df:11:5d:61:96:8f:76:8a:eb:10:c0:1f: 6f:bd:72:94:a4:61:72:c0:b7:29:3d:54:7b:17:55: 75:db:87:67:a2:22:56:f3:06:ed:65:20:e9:b7:0d: 4f:93:94:b1:cc:91:94:e4:00:1c:04:5b:9f:17:cb: e8:80:c9:d2:c5:73:76:c9:7a:8c:ff:5a:c4:81:05: 34:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:3C:50:0E:36:1F:FB:6F:4B:63:57:AE:D7:9E:80:5C:43:9E:7E:84 X509v3 Authority Key Identifier: keyid:52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:6d:70:0e:41:96:3e:77:1c:cd:9e:74:61:5c:bb:2a:a7:57: 44:d5:c2:2c:bd:89:c9:69:b3:82:73:5f:5e:d3:26:8f:74:5d: af:98:f5:ac:d1:88:0c:6f:0e:05:f6:00:d8:ef:1c:6c:b8:b0: 88:58:fe:1a:1a:20:e3:36:70:91:be:61:ca:24:83:81:b3:5e: 0a:55:39:6b:e2:64:7b:25:d4:82:e9:3f:03:a3:1e:f3:ba:d5: 59:74:9e:3e:6e:3a:b5:24:18:fb:c0:bc:80:d3:fc:e2:56:6a: 12:bf:9e:bb:16:b0:c5:90:ef:9e:7d:ce:18:d9:7f:1c:36:54: 1f:be:aa:88:0c:c2:71:15:7d:f6:b3:a1:50:1e:7f:2d:07:54: c6:fe:55:7a:e7:b8:49:a1:ca:92:39:b0:43:4d:e9:b1:9a:62: 79:bb:ac:70:cf:b9:68:4e:ab:ff:3c:92:ff:ef:8e:de:c8:f4: 7a:d1:cd:df:ba:42:56:fd:7d:6f:1c:24:65:82:28:47:11:c4: a4:c2:a3:3e:e7:d0:49:7f:0f:6a:56:c2:17:b1:bd:f3:09:d1: 7d:83:26:6e:02:55:da:04:32:c1:49:86:3f:bf:64:86:82:57: a6:7a:5c:97:86:b2:f2:32:56:68:f9:6b:a7:3c:77:eb:2f:eb: 17:6c:09:5b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUNV2Cf/HIoV6z0+aVO0hVeiVy4cYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI5QkZDNkREMzA2QjJDNDk2MjlBQTZDRUIzMTMxOTRD QUE1RDMzRjAeFw0yNjA0MjEwODQ2NDhaFw0yNjA0MjIwOTMxNDhaMDMxMTAvBgNV BAMTKDI1M0M1MDBFMzYxRkZCNkY0QjYzNTdBRUQ3OUU4MDVDNDM5RTdFODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsXl/vStTINKNO9nrVDk5mret3 YLHHPKLSXN8fvYP0kVxP4sjspUsJ5om0CN0xIFHrofrhBttfhsRId4Utg/d9XokW rSHblfJug/vVe8Ci8H/jYpSx6+fn5mYF591buhPjxeSXHsXUAx/bOYzFLWXUpN2M cE104HkDKiXkVeBRjfEHiaJiy+txG4ntaNXdBKHSjDBO7rNKCPTtzpiaCYU+gd2n BoxHZSgJYdUdOqX8KkkKeV5hct8RXWGWj3aK6xDAH2+9cpSkYXLAtyk9VHsXVXXb h2eiIlbzBu1lIOm3DU+TlLHMkZTkABwEW58Xy+iAydLFc3bJeoz/WsSBBTTbAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUJTxQDjYf+29LY1eu156AXEOefoQwHwYDVR0j BBgwFoAUUpv8bdMGssSWKaps6zExlMql0z8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDkyZDE2ZjItOWI0Ni00YTExLWFjNTktNDJiM2RkZWUx MTA2LzIvNTI5QkZDNkREMzA2QjJDNDk2MjlBQTZDRUIzMTMxOTRDQUE1RDMzRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC81MjlCRkM2REQzMDZCMkM0OTYyOUFBNkNF QjMxMzE5NENBQTVEMzNGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzA5MmQxNmYyLTliNDYtNGExMS1hYzU5LTQyYjNkZGVlMTEwNi8yLzUyOUJGQzZE RDMwNkIyQzQ5NjI5QUE2Q0VCMzEzMTk0Q0FBNUQzM0YubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCEbXAO QZY+dxzNnnRhXLsqp1dE1cIsvYnJabOCc19e0yaPdF2vmPWs0YgMbw4F9gDY7xxs uLCIWP4aGiDjNnCRvmHKJIOBs14KVTlr4mR7JdSC6T8Dox7zutVZdJ4+bjq1JBj7 wLyA0/ziVmoSv567FrDFkO+efc4Y2X8cNlQfvqqIDMJxFX32s6FQHn8tB1TG/lV6 57hJocqSObBDTemxmmJ5u6xwz7loTqv/PJL/747eyPR60c3fukJW/X1vHCRlgihH EcSkwqM+59BJfw9qVsIXsb3zCdF9gyZuAlXaBDLBSYY/v2SGglemelyXhrLyMlZo +WunPHfrL+sXbAlb -----END CERTIFICATE-----Generated at Tue Apr 21 16:36:27 2026 by rpki-client