Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft
File:                     529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft (raw, json)
Hash identifier:          UEFH8Bt1sLZrxYOCn7rm2tEPtMVeD+l+bITV4frNOPs=
Subject key identifier:   BC:E3:BD:AB:19:5E:EA:2E:BC:5B:72:5C:00:77:83:6E:E8:86:82:93
Authority key identifier: 52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F
Certificate issuer:       /CN=529BFC6DD306B2C49629AA6CEB313194CAA5D33F
Certificate serial:       294663DFDF9E6A8B163E6DCB8625F8F7023D2B68
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft
Manifest number:          0108
Signing time:             Thu 23 Jul 2026 09:38:54 +0000
Manifest this update:     Thu 23 Jul 2026 09:33:54 +0000
Manifest next update:     Fri 24 Jul 2026 12:00:54 +0000
Files and hashes:         1: 326130663a316363363a623132303a3a2f34342d3438203d3e20323039353537.roa (hash: scEe2IowhilowN4x+WVVH9irUBDlv+kjiHhElpwuSSI=)
                          2: 326130663a316363363a623234303a3a2f34342d3438203d3e20323139323839.roa (hash: bkUuykciTWh1bfFW0KX433jPn5468fT5sPJmNyOz8Lk=)
                          3: 326130663a316363363a623133303a3a2f34342d3438203d3e20323031373730.roa (hash: Efws7PM/OQeywU7TXDwbueQNU1D1OoCjFxiKYnz5zVA=)
                          4: 326130663a316363363a626162303a3a2f34342d3438203d3e20323034353335.roa (hash: cHEORjblcG00sbZyjw6Bu9EsXIA7oC5/AO7mRT4IUjg=)
                          5: 326130663a316363363a623233303a3a2f34342d3438203d3e20323139333234.roa (hash: Fbr3d6vsF9f3Md2rcurK4yxy/TMDLffSbQOPQZqVAk8=)
                          6: 326130663a316363363a623232303a3a2f34342d3438203d3e20313439353133.roa (hash: +hLyO2byVr3CI7RxU47nKmJbK198DWDlst7nIi5HHww=)
                          7: 326130663a316363363a623139303a3a2f34342d3438203d3e20313938333035.roa (hash: MqnRABjnmlRpFJeXPojgQfKbU77XB43KxaLrjADcIBQ=)
                          8: 326130663a316363363a623131303a3a2f34342d3438203d3e20313534313835.roa (hash: ib4ImjZeR/tjrdRWs2Z2Xtcq0lxhnT9KoS6I+V5ukmg=)
                          9: 326130663a316363363a623135303a3a2f34342d3438203d3e20313939383137.roa (hash: jAjlYxtD2JiQt/anCFJXoX013l22BEoSBOom0VVJ2SM=)
                          10: 326130663a316363363a623232303a3a2f34342d3438203d3e20313937313936.roa (hash: HmKrlFyhqlQZZbvjhxJnQb4uO8wWIL79TVFNo65Q1cE=)
                          11: 326130663a316363363a623137303a3a2f34342d3438203d3e20313938353838.roa (hash: Z1D2tzNH9Lk3h3VvnoiCB7e43V2PFv05dOJ2CtKqIbE=)
                          12: 326130663a316363363a666630303a3a2f34302d3438203d3e20313939373934.roa (hash: u2OSA0CA/LhD/ehNs3nGB0Ac0Hv0xN26zlrjRiwlUDk=)
                          13: 326130663a316363363a623130303a3a2f34342d3438203d3e20323034323131.roa (hash: 29kVVWLYr7weidsqfKbNgXTNshpnIGiMJ62fMPFeOns=)
                          14: 326130663a316363363a666430303a3a2f34302d3438203d3e20313939373934.roa (hash: 7kHfAdGzdlPdhwNaqHeUsijlhqrvdKv4GhsJwDJouZY=)
                          15: 326130663a316363363a666530303a3a2f34302d3438203d3e20313939373934.roa (hash: bczv8HPQxrdQAlSAG21zowjSuyByV0J0vFQmDC8cfZ0=)
                          16: 529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl (hash: Y7s0vPOCGezHZic30RcWSQjpRozCpvb35WrDacO0aMQ=)
                          17: 326130663a316363363a623230303a3a2f34342d3438203d3e20313938313535.roa (hash: R0Zp25uniUy1vGT1s0rsGRtZxCDntggB9KJVr/ZGHFk=)
                          18: 326130663a316363363a623136303a3a2f34342d3438203d3e20313939373934.roa (hash: CcK314TQaccXuzd2zjleKccUXAJU6r52sUrMN4OiPfc=)
                          19: 326130663a316363363a623134303a3a2f34342d3438203d3e203230343733.roa (hash: 0uVBH5sUFKMTa796Uvv1SVvRGarUL75dm7ieOip7W/Q=)
                          20: 326130663a316363363a623138303a3a2f34342d3438203d3e20313938333331.roa (hash: SQQpuf9MPugDuKKbLcQGIvoOhKwZP0elwI8EjjLg1go=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 12:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:46:63:df:df:9e:6a:8b:16:3e:6d:cb:86:25:f8:f7:02:3d:2b:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=529BFC6DD306B2C49629AA6CEB313194CAA5D33F
        Validity
            Not Before: Jul 23 09:33:54 2026 GMT
            Not After : Jul 24 12:00:54 2026 GMT
        Subject: CN=BCE3BDAB195EEA2EBC5B725C0077836EE8868293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:33:ea:2e:4a:8b:e6:23:05:17:dd:e8:48:9b:
                    39:51:87:31:ae:b2:4f:f2:6b:7d:0e:ac:fa:d1:3c:
                    d2:17:45:16:7a:61:05:ad:3c:61:ac:85:d3:94:2f:
                    67:8b:35:32:13:23:da:ef:f1:33:9b:b6:5a:36:a3:
                    7c:27:bb:13:84:38:91:ea:86:20:1e:3e:d4:a8:69:
                    0c:b9:0c:f3:b9:f6:30:c6:58:30:d1:f8:cb:c4:f2:
                    db:06:29:66:28:05:57:71:0c:e5:9d:1c:e0:16:a4:
                    06:68:69:7f:d8:02:46:2e:ad:4e:11:fe:4d:8a:61:
                    87:a2:29:8e:c5:5e:78:d1:58:07:fe:4b:ce:e6:ae:
                    07:88:af:fe:32:7d:c0:a3:14:cb:48:6a:2c:90:c9:
                    8a:01:a0:dd:05:56:60:4b:00:9b:89:fb:16:ee:61:
                    ce:90:8e:dd:47:d2:42:c2:7d:de:70:b3:f1:14:24:
                    1a:f3:f8:5e:d5:05:da:90:b0:e3:b5:c7:7c:7b:56:
                    0f:04:a2:ed:60:53:6d:4b:80:a5:62:b3:f4:76:fb:
                    1a:27:51:bb:ad:8a:b1:b9:7d:e9:4e:1d:8a:0f:c3:
                    80:d7:d4:8a:c1:10:c7:b6:25:ed:b1:0c:27:5c:cf:
                    b6:88:63:58:da:84:e5:73:1e:23:55:93:bc:38:02:
                    56:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E3:BD:AB:19:5E:EA:2E:BC:5B:72:5C:00:77:83:6E:E8:86:82:93
            X509v3 Authority Key Identifier:
                keyid:52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:34:e9:88:55:0b:4a:2d:48:6a:29:c7:16:f1:b8:20:50:19:
         25:9b:97:08:ca:41:4c:36:50:a9:6f:8c:c2:0e:28:99:40:74:
         eb:88:cb:6c:b9:85:86:b5:38:36:97:42:38:6c:d5:1f:1f:85:
         d6:c9:b7:a9:5d:75:4f:08:ce:d7:ef:8c:97:11:ec:a4:ff:21:
         ea:59:3c:66:29:eb:35:8d:1c:13:f5:e8:f0:94:0a:99:e9:d8:
         6d:9e:c9:4a:51:aa:9d:96:65:e3:6f:4d:91:ae:88:e2:f6:06:
         ce:ed:0d:ec:5c:fa:ed:1e:50:44:72:b7:f2:46:42:77:05:e8:
         46:61:eb:4f:2a:f3:cc:6a:b8:17:c4:ad:cb:a3:f9:ad:64:f1:
         11:b8:7b:63:32:fc:c5:b1:5e:d9:08:3e:ac:20:d8:fa:95:4f:
         1f:19:4a:e3:47:d8:6e:3a:10:cb:91:b0:62:4f:c4:4d:4f:33:
         ca:71:ce:05:20:0b:67:bd:60:29:d4:cc:fb:20:1a:3b:9a:2b:
         eb:3f:19:b6:e2:39:0b:92:6a:50:38:e6:1b:cd:9b:b4:1c:06:
         4c:09:c9:b5:5b:ce:67:49:d6:a8:c5:d4:7c:4e:53:f0:11:38:
         69:87:61:b0:3f:d0:27:3f:d7:03:fd:c2:56:65:f7:13:d2:a1:
         3e:88:67:3a
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUKUZj39+eaosWPm3LhiX49wI9K2gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTI5QkZDNkREMzA2QjJDNDk2MjlBQTZDRUIzMTMxOTRD
QUE1RDMzRjAeFw0yNjA3MjMwOTMzNTRaFw0yNjA3MjQxMjAwNTRaMDMxMTAvBgNV
BAMTKEJDRTNCREFCMTk1RUVBMkVCQzVCNzI1QzAwNzc4MzZFRTg4NjgyOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjM+ouSovmIwUX3ehImzlRhzGu
sk/ya30OrPrRPNIXRRZ6YQWtPGGshdOUL2eLNTITI9rv8TObtlo2o3wnuxOEOJHq
hiAePtSoaQy5DPO59jDGWDDR+MvE8tsGKWYoBVdxDOWdHOAWpAZoaX/YAkYurU4R
/k2KYYeiKY7FXnjRWAf+S87mrgeIr/4yfcCjFMtIaiyQyYoBoN0FVmBLAJuJ+xbu
Yc6Qjt1H0kLCfd5ws/EUJBrz+F7VBdqQsOO1x3x7Vg8Eou1gU21LgKVis/R2+xon
UbutirG5felOHYoPw4DX1IrBEMe2Je2xDCdcz7aIY1jahOVzHiNVk7w4AlYBAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUvOO9qxle6i68W3JcAHeDbuiGgpMwHwYDVR0j
BBgwFoAUUpv8bdMGssSWKaps6zExlMql0z8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDkyZDE2ZjItOWI0Ni00YTExLWFjNTktNDJiM2RkZWUx
MTA2LzIvNTI5QkZDNkREMzA2QjJDNDk2MjlBQTZDRUIzMTMxOTRDQUE1RDMzRi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5
MzktOTVlOS0wMDc3YjgwYjRmMGUvMC81MjlCRkM2REQzMDZCMkM0OTYyOUFBNkNF
QjMxMzE5NENBQTVEMzNGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzA5MmQxNmYyLTliNDYtNGExMS1hYzU5LTQyYjNkZGVlMTEwNi8yLzUyOUJGQzZE
RDMwNkIyQzQ5NjI5QUE2Q0VCMzEzMTk0Q0FBNUQzM0YubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBbNOmI
VQtKLUhqKccW8bggUBklm5cIykFMNlCpb4zCDiiZQHTriMtsuYWGtTg2l0I4bNUf
H4XWybepXXVPCM7X74yXEeyk/yHqWTxmKes1jRwT9ejwlAqZ6dhtnslKUaqdlmXj
b02Rroji9gbO7Q3sXPrtHlBEcrfyRkJ3BehGYetPKvPMargXxK3Lo/mtZPERuHtj
MvzFsV7ZCD6sINj6lU8fGUrjR9huOhDLkbBiT8RNTzPKcc4FIAtnvWAp1Mz7IBo7
mivrPxm24jkLkmpQOOYbzZu0HAZMCcm1W85nSdaoxdR8TlPwEThph2GwP9AnP9cD
/cJWZfcT0qE+iGc6
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:46:44 2026 by rpki-client