$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft File: 529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft (raw, json) Hash identifier: UB/oG8tsB+LEg0csdbOzdywRKjq1TuSoOgFhuq/PdBE= Subject key identifier: 1F:5F:DB:2B:FC:57:89:12:7C:0C:D2:83:98:4C:50:22:48:20:BD:56 Authority key identifier: 52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F Certificate issuer: /CN=529BFC6DD306B2C49629AA6CEB313194CAA5D33F Certificate serial: 5CA2392A42E22880D2CF0DC34842E6B1D05D9A67 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft Manifest number: 015D Signing time: Thu 24 Sep 2026 16:23:13 +0000 Manifest this update: Thu 24 Sep 2026 16:18:13 +0000 Manifest next update: Fri 25 Sep 2026 18:08:13 +0000 Files and hashes: 1: 326130663a316363363a623132303a3a2f34342d3438203d3e20323039353537.roa (hash: scEe2IowhilowN4x+WVVH9irUBDlv+kjiHhElpwuSSI=) 2: 326130663a316363363a623138303a3a2f34342d3438203d3e20313938333331.roa (hash: SQQpuf9MPugDuKKbLcQGIvoOhKwZP0elwI8EjjLg1go=) 3: 326130663a316363363a623230303a3a2f34342d3438203d3e20313938313535.roa (hash: R0Zp25uniUy1vGT1s0rsGRtZxCDntggB9KJVr/ZGHFk=) 4: 326130663a316363363a623235303a3a2f34342d3434203d3e20323131353735.roa (hash: 8mE1jAfmLyWfaMnOLOuvCITYLEI/kRV9tFQm4x0RWuU=) 5: 326130663a316363363a623234303a3a2f34342d3438203d3e20323139323839.roa (hash: bkUuykciTWh1bfFW0KX433jPn5468fT5sPJmNyOz8Lk=) 6: 326130663a316363363a666430303a3a2f34302d3438203d3e20313939373934.roa (hash: 7kHfAdGzdlPdhwNaqHeUsijlhqrvdKv4GhsJwDJouZY=) 7: 326130663a316363363a666530303a3a2f34302d3438203d3e20313939373934.roa (hash: bczv8HPQxrdQAlSAG21zowjSuyByV0J0vFQmDC8cfZ0=) 8: 326130663a316363363a623130303a3a2f34342d3438203d3e20323034323131.roa (hash: 29kVVWLYr7weidsqfKbNgXTNshpnIGiMJ62fMPFeOns=) 9: 529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl (hash: liAisY/J8iw86eW4eONb2N9lGfL1GqrgukoBB74PkW8=) 10: 326130663a316363363a623232303a3a2f34342d3438203d3e20313937313936.roa (hash: HmKrlFyhqlQZZbvjhxJnQb4uO8wWIL79TVFNo65Q1cE=) 11: 326130663a316363363a623137303a3a2f34342d3438203d3e20313938353838.roa (hash: Z1D2tzNH9Lk3h3VvnoiCB7e43V2PFv05dOJ2CtKqIbE=) 12: 326130663a316363363a623136303a3a2f34342d3438203d3e20313939373934.roa (hash: CcK314TQaccXuzd2zjleKccUXAJU6r52sUrMN4OiPfc=) 13: 326130663a316363363a623233303a3a2f34342d3438203d3e20323139333234.roa (hash: Fbr3d6vsF9f3Md2rcurK4yxy/TMDLffSbQOPQZqVAk8=) 14: 326130663a316363363a623139303a3a2f34342d3438203d3e20313938333035.roa (hash: MqnRABjnmlRpFJeXPojgQfKbU77XB43KxaLrjADcIBQ=) 15: 326130663a316363363a623131303a3a2f34342d3438203d3e20313534313835.roa (hash: ib4ImjZeR/tjrdRWs2Z2Xtcq0lxhnT9KoS6I+V5ukmg=) 16: 326130663a316363363a623134303a3a2f34342d3438203d3e203230343733.roa (hash: 0uVBH5sUFKMTa796Uvv1SVvRGarUL75dm7ieOip7W/Q=) 17: 326130663a316363363a626162303a3a2f34342d3438203d3e20323034353335.roa (hash: cHEORjblcG00sbZyjw6Bu9EsXIA7oC5/AO7mRT4IUjg=) 18: 326130663a316363363a666630303a3a2f34302d3438203d3e20313939373934.roa (hash: u2OSA0CA/LhD/ehNs3nGB0Ac0Hv0xN26zlrjRiwlUDk=) 19: 326130663a316363363a623133303a3a2f34342d3438203d3e20323031373730.roa (hash: Efws7PM/OQeywU7TXDwbueQNU1D1OoCjFxiKYnz5zVA=) 20: 326130663a316363363a623135303a3a2f34342d3438203d3e20313939383137.roa (hash: jAjlYxtD2JiQt/anCFJXoX013l22BEoSBOom0VVJ2SM=) 21: 326130663a316363363a623232303a3a2f34342d3438203d3e20313439353133.roa (hash: +hLyO2byVr3CI7RxU47nKmJbK198DWDlst7nIi5HHww=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 18:08:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:a2:39:2a:42:e2:28:80:d2:cf:0d:c3:48:42:e6:b1:d0:5d:9a:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=529BFC6DD306B2C49629AA6CEB313194CAA5D33F Validity Not Before: Sep 24 16:18:13 2026 GMT Not After : Sep 25 18:08:13 2026 GMT Subject: CN=1F5FDB2BFC5789127C0CD283984C50224820BD56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:99:a1:6f:6e:a7:ed:da:60:8a:71:e2:a1:68: 5a:92:ae:42:5a:1d:1d:fe:bf:a5:33:5b:36:93:44: 0c:31:0a:be:16:ec:df:cc:cc:76:4c:f5:a7:bf:3d: c7:92:80:55:f9:d0:b7:e0:67:9a:0c:96:4d:01:98: 72:01:c3:19:ad:f2:6a:dc:51:33:97:a5:0c:4e:9a: 61:86:ee:19:ec:fe:64:80:83:03:a7:5d:12:3e:ba: 99:41:35:65:a8:0b:f4:1b:4e:9c:90:53:10:44:af: 65:36:1a:b3:21:85:c6:97:4b:8a:29:a2:50:77:8f: 8f:44:6c:e9:87:b0:9a:99:dd:c0:14:c5:a8:22:4f: 3a:d0:f5:6b:d7:23:38:62:73:53:fd:f7:83:4b:83: b9:e8:97:7f:d5:41:ae:6d:dd:c5:40:e5:2e:8e:60: 2c:de:f6:d1:1a:17:68:66:97:87:ed:8b:a8:41:e4: 2c:50:81:dc:9b:4a:72:04:ee:23:d9:07:df:77:fd: 03:e2:71:e2:03:68:fd:8f:53:d3:ed:2f:52:ea:cc: 7c:8f:52:c0:d7:ec:7e:bb:55:3f:6d:a0:db:26:8c: 6f:32:08:05:d6:a0:65:c3:f2:d3:d0:c9:5a:b4:01: 5f:5f:0d:eb:ea:75:bf:1f:b7:52:d0:6d:c5:3b:d8: 07:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:5F:DB:2B:FC:57:89:12:7C:0C:D2:83:98:4C:50:22:48:20:BD:56 X509v3 Authority Key Identifier: keyid:52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:55:56:65:85:d3:5d:11:de:ea:0f:a4:d6:d0:dd:4b:72:3f: a4:74:97:17:bb:eb:de:62:9f:ce:88:e4:a8:fd:a2:16:72:76: 7a:ee:b3:ad:e6:14:ec:33:6b:6d:d4:92:ca:86:b8:ff:07:09: c9:2d:1a:77:db:43:d1:e9:fc:55:b7:7b:80:86:a0:e7:1b:6c: c7:b3:27:2e:65:20:1f:ed:fb:d8:04:01:86:01:7f:0b:c0:cf: b4:55:79:38:fc:de:c1:e9:4a:05:88:44:7e:7a:a9:b9:64:5d: 4b:ad:3e:91:6d:e1:c5:17:81:cc:10:fd:20:2c:dc:56:ff:46: 35:32:a6:bd:2b:d4:0a:0c:1a:2d:e5:b2:77:f9:fe:f4:e2:e9: 9f:11:95:a0:8f:41:db:cc:04:a7:6a:a4:33:6e:49:8d:58:54: 94:c6:1a:3a:50:d6:9c:1c:3b:f3:19:3b:d9:62:77:85:54:fb: 42:cf:b4:0a:68:78:6a:ba:92:74:0d:2d:b1:81:33:5c:c4:40: a5:59:15:c3:d2:b1:ba:7b:b6:5a:97:56:eb:3b:cc:b3:47:48: 24:04:b4:75:90:a7:ee:e4:f6:ee:ba:a0:38:c6:a1:05:f0:59: e8:53:cf:b3:15:04:f2:81:08:f2:81:39:bd:f7:e4:57:51:c1: 7e:42:68:8c -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUXKI5KkLiKIDSzw3DSELmsdBdmmcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI5QkZDNkREMzA2QjJDNDk2MjlBQTZDRUIzMTMxOTRD QUE1RDMzRjAeFw0yNjA5MjQxNjE4MTNaFw0yNjA5MjUxODA4MTNaMDMxMTAvBgNV BAMTKDFGNUZEQjJCRkM1Nzg5MTI3QzBDRDI4Mzk4NEM1MDIyNDgyMEJENTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrmaFvbqft2mCKceKhaFqSrkJa HR3+v6UzWzaTRAwxCr4W7N/MzHZM9ae/PceSgFX50LfgZ5oMlk0BmHIBwxmt8mrc UTOXpQxOmmGG7hns/mSAgwOnXRI+uplBNWWoC/QbTpyQUxBEr2U2GrMhhcaXS4op olB3j49EbOmHsJqZ3cAUxagiTzrQ9WvXIzhic1P994NLg7nol3/VQa5t3cVA5S6O YCze9tEaF2hml4fti6hB5CxQgdybSnIE7iPZB993/QPiceIDaP2PU9PtL1LqzHyP UsDX7H67VT9toNsmjG8yCAXWoGXD8tPQyVq0AV9fDevqdb8ft1LQbcU72AdHAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUH1/bK/xXiRJ8DNKDmExQIkggvVYwHwYDVR0j BBgwFoAUUpv8bdMGssSWKaps6zExlMql0z8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDkyZDE2ZjItOWI0Ni00YTExLWFjNTktNDJiM2RkZWUx MTA2LzIvNTI5QkZDNkREMzA2QjJDNDk2MjlBQTZDRUIzMTMxOTRDQUE1RDMzRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC81MjlCRkM2REQzMDZCMkM0OTYyOUFBNkNF QjMxMzE5NENBQTVEMzNGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzA5MmQxNmYyLTliNDYtNGExMS1hYzU5LTQyYjNkZGVlMTEwNi8yLzUyOUJGQzZE RDMwNkIyQzQ5NjI5QUE2Q0VCMzEzMTk0Q0FBNUQzM0YubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQArVVZl hdNdEd7qD6TW0N1Lcj+kdJcXu+veYp/OiOSo/aIWcnZ67rOt5hTsM2tt1JLKhrj/ BwnJLRp320PR6fxVt3uAhqDnG2zHsycuZSAf7fvYBAGGAX8LwM+0VXk4/N7B6UoF iER+eqm5ZF1LrT6RbeHFF4HMEP0gLNxW/0Y1Mqa9K9QKDBot5bJ3+f704umfEZWg j0HbzASnaqQzbkmNWFSUxho6UNacHDvzGTvZYneFVPtCz7QKaHhqupJ0DS2xgTNc xEClWRXD0rG6e7Zal1brO8yzR0gkBLR1kKfu5PbuuqA4xqEF8FnoU8+zFQTygQjy gTm99+RXUcF+QmiM -----END CERTIFICATE-----Generated at Fri Sep 25 08:52:38 2026 by rpki-client