$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft File: 529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft (raw, json) Hash identifier: lFWuCmWJFqtdR0ydkJjJAnZkzmc0NmDpCIJ2LMP4U+M= Subject key identifier: 13:3F:B5:A4:43:A0:60:3D:7E:36:24:25:45:22:63:75:19:21:F4:33 Authority key identifier: 52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F Certificate issuer: /CN=529BFC6DD306B2C49629AA6CEB313194CAA5D33F Certificate serial: 3CD709CEEC48344BEEDC6D2F22B49A6C191AB13D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft Manifest number: 60 Signing time: Wed 25 Mar 2026 09:03:32 +0000 Manifest this update: Wed 25 Mar 2026 08:58:32 +0000 Manifest next update: Thu 26 Mar 2026 12:16:32 +0000 Files and hashes: 1: 326130663a316363363a623136303a3a2f34342d3438203d3e20313939373934.roa (hash: CcK314TQaccXuzd2zjleKccUXAJU6r52sUrMN4OiPfc=) 2: 326130663a316363363a623131303a3a2f34342d3438203d3e20313534313835.roa (hash: ib4ImjZeR/tjrdRWs2Z2Xtcq0lxhnT9KoS6I+V5ukmg=) 3: 326130663a316363363a623135303a3a2f34342d3438203d3e20313939383137.roa (hash: jAjlYxtD2JiQt/anCFJXoX013l22BEoSBOom0VVJ2SM=) 4: 326130663a316363363a623134303a3a2f34342d3438203d3e203230343733.roa (hash: 0uVBH5sUFKMTa796Uvv1SVvRGarUL75dm7ieOip7W/Q=) 5: 326130663a316363363a623133303a3a2f34342d3438203d3e20323031373730.roa (hash: Efws7PM/OQeywU7TXDwbueQNU1D1OoCjFxiKYnz5zVA=) 6: 326130663a316363363a626162303a3a2f34342d3438203d3e20323034353335.roa (hash: cHEORjblcG00sbZyjw6Bu9EsXIA7oC5/AO7mRT4IUjg=) 7: 326130663a316363363a623132303a3a2f34342d3438203d3e20323039353537.roa (hash: scEe2IowhilowN4x+WVVH9irUBDlv+kjiHhElpwuSSI=) 8: 529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl (hash: Xcn54xdWjDp1q8zuwIVmdBWa3glfz0HHbLwGM8ujfUg=) 9: 326130663a316363363a623130303a3a2f34342d3438203d3e20323034323131.roa (hash: 29kVVWLYr7weidsqfKbNgXTNshpnIGiMJ62fMPFeOns=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 10:25:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:d7:09:ce:ec:48:34:4b:ee:dc:6d:2f:22:b4:9a:6c:19:1a:b1:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=529BFC6DD306B2C49629AA6CEB313194CAA5D33F Validity Not Before: Mar 25 08:58:32 2026 GMT Not After : Mar 26 12:16:32 2026 GMT Subject: CN=133FB5A443A0603D7E362425452263751921F433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:8f:50:13:e9:e9:17:0e:fa:af:ca:27:e2:8f: 67:0d:7a:8b:84:b5:9c:84:02:ef:67:d9:f9:58:7e: e3:87:ff:94:45:3c:ce:2f:3b:72:9a:a9:05:19:11: aa:b9:22:b8:63:ea:b6:43:65:5e:0c:c1:89:35:0d: 24:30:97:be:89:b5:ac:05:e6:3b:3a:87:0c:c9:c9: ab:07:80:ff:5c:92:9a:ce:80:98:31:36:93:98:fe: 4e:a7:3a:dd:1c:b7:a4:14:24:8f:c8:00:57:bb:f8: 7b:51:49:4c:5d:6a:c4:a8:05:46:94:3f:58:68:4f: 77:4d:25:f0:07:d7:9e:88:95:95:b4:42:41:49:21: 36:e3:ee:5b:01:61:66:41:31:54:45:f4:d1:b4:72: f2:72:c2:e2:1e:01:33:6b:be:d6:1f:56:64:7e:5f: 43:1b:7b:03:a9:69:7f:c6:4b:71:07:0d:f2:b8:5a: 97:bc:0b:2e:8c:70:07:09:93:be:fb:84:8a:e4:67: 69:71:35:e6:33:0f:52:0b:31:4b:4f:b9:ee:a9:13: 38:1a:03:90:2e:77:02:dc:99:32:36:8d:41:15:99: ba:c5:2b:82:84:6f:d9:5e:bf:cc:e5:28:df:ef:f6: 6d:e6:ea:52:c3:8c:65:33:8f:c9:d2:28:8c:26:e6: d6:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:3F:B5:A4:43:A0:60:3D:7E:36:24:25:45:22:63:75:19:21:F4:33 X509v3 Authority Key Identifier: keyid:52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:7c:8b:20:7a:2d:dd:58:11:c9:b3:7b:29:02:e1:79:a9:37: 55:0b:bb:6e:97:c9:a1:c0:85:19:af:4f:62:e1:d5:2a:a6:e6: cc:9b:6b:7e:99:34:6b:7d:78:79:f4:09:40:b5:30:dd:12:e7: e2:a1:70:c4:f6:e5:d8:aa:45:8a:5b:c7:d9:dd:da:9b:b5:5f: dc:81:0f:87:fb:2c:9a:e3:37:49:5d:9f:2b:55:27:5d:a2:e5: db:4c:e5:2e:b7:19:c2:6e:0e:f7:2e:4c:74:62:03:70:8d:a3: 2a:48:f4:b2:0d:01:50:22:85:26:55:b9:d9:b1:27:0c:22:86: 2e:48:59:3c:e3:f0:76:ab:53:4e:39:b7:04:9d:07:22:6c:ac: 80:75:16:6d:f4:22:c4:e1:16:4b:e7:71:d9:b4:d7:90:a8:9a: ae:39:ac:25:d2:80:87:dd:c8:3c:8e:6e:b6:74:3a:2c:bb:bb: bc:b8:b4:6e:df:f4:fa:2c:37:6a:c8:62:9c:2b:60:4e:fa:ed: 99:40:fa:60:51:aa:40:14:3f:41:c9:7b:40:ee:7a:08:76:a3: ad:a5:22:35:56:70:b9:8a:54:f5:d2:3f:43:82:86:56:0e:ca: 2f:c5:a7:3c:93:6a:a4:71:b9:9c:26:92:ec:6a:ae:46:d0:e3: a3:7c:5f:9c -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUPNcJzuxINEvu3G0vIrSabBkasT0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI5QkZDNkREMzA2QjJDNDk2MjlBQTZDRUIzMTMxOTRD QUE1RDMzRjAeFw0yNjAzMjUwODU4MzJaFw0yNjAzMjYxMjE2MzJaMDMxMTAvBgNV BAMTKDEzM0ZCNUE0NDNBMDYwM0Q3RTM2MjQyNTQ1MjI2Mzc1MTkyMUY0MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjj1AT6ekXDvqvyifij2cNeouE tZyEAu9n2flYfuOH/5RFPM4vO3KaqQUZEaq5Irhj6rZDZV4MwYk1DSQwl76JtawF 5js6hwzJyasHgP9ckprOgJgxNpOY/k6nOt0ct6QUJI/IAFe7+HtRSUxdasSoBUaU P1hoT3dNJfAH156IlZW0QkFJITbj7lsBYWZBMVRF9NG0cvJywuIeATNrvtYfVmR+ X0MbewOpaX/GS3EHDfK4Wpe8Cy6McAcJk777hIrkZ2lxNeYzD1ILMUtPue6pEzga A5AudwLcmTI2jUEVmbrFK4KEb9lev8zlKN/v9m3m6lLDjGUzj8nSKIwm5tatAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUEz+1pEOgYD1+NiQlRSJjdRkh9DMwHwYDVR0j BBgwFoAUUpv8bdMGssSWKaps6zExlMql0z8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDkyZDE2ZjItOWI0Ni00YTExLWFjNTktNDJiM2RkZWUx MTA2LzIvNTI5QkZDNkREMzA2QjJDNDk2MjlBQTZDRUIzMTMxOTRDQUE1RDMzRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC81MjlCRkM2REQzMDZCMkM0OTYyOUFBNkNF QjMxMzE5NENBQTVEMzNGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzA5MmQxNmYyLTliNDYtNGExMS1hYzU5LTQyYjNkZGVlMTEwNi8yLzUyOUJGQzZE RDMwNkIyQzQ5NjI5QUE2Q0VCMzEzMTk0Q0FBNUQzM0YubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBqfIsg ei3dWBHJs3spAuF5qTdVC7tul8mhwIUZr09i4dUqpubMm2t+mTRrfXh59AlAtTDd EufioXDE9uXYqkWKW8fZ3dqbtV/cgQ+H+yya4zdJXZ8rVSddouXbTOUutxnCbg73 Lkx0YgNwjaMqSPSyDQFQIoUmVbnZsScMIoYuSFk84/B2q1NOObcEnQcibKyAdRZt 9CLE4RZL53HZtNeQqJquOawl0oCH3cg8jm62dDosu7u8uLRu3/T6LDdqyGKcK2BO +u2ZQPpgUapAFD9ByXtA7noIdqOtpSI1VnC5ilT10j9DgoZWDsovxac8k2qkcbmc JpLsaq5G0OOjfF+c -----END CERTIFICATE-----Generated at Thu Mar 26 04:05:15 2026 by rpki-client