Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft
File:                     529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft (raw, json)
Hash identifier:          iuZYCcWngKuykMhiL1zC2pqnF6BUSRt2s+S3MOFKPzE=
Subject key identifier:   68:1F:FE:A8:6B:7C:C9:15:70:B4:4F:46:FC:96:1E:F9:24:C3:0B:54
Authority key identifier: 52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F
Certificate issuer:       /CN=529BFC6DD306B2C49629AA6CEB313194CAA5D33F
Certificate serial:       45C4EFDD0ED41089C9DB59CC8811A0DBFC62811A
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft
Manifest number:          0109
Signing time:             Fri 24 Jul 2026 04:03:54 +0000
Manifest this update:     Fri 24 Jul 2026 03:58:54 +0000
Manifest next update:     Sat 25 Jul 2026 05:16:54 +0000
Files and hashes:         1: 326130663a316363363a623134303a3a2f34342d3438203d3e203230343733.roa (hash: 0uVBH5sUFKMTa796Uvv1SVvRGarUL75dm7ieOip7W/Q=)
                          2: 326130663a316363363a623133303a3a2f34342d3438203d3e20323031373730.roa (hash: Efws7PM/OQeywU7TXDwbueQNU1D1OoCjFxiKYnz5zVA=)
                          3: 326130663a316363363a623137303a3a2f34342d3438203d3e20313938353838.roa (hash: Z1D2tzNH9Lk3h3VvnoiCB7e43V2PFv05dOJ2CtKqIbE=)
                          4: 326130663a316363363a623232303a3a2f34342d3438203d3e20313937313936.roa (hash: HmKrlFyhqlQZZbvjhxJnQb4uO8wWIL79TVFNo65Q1cE=)
                          5: 326130663a316363363a623136303a3a2f34342d3438203d3e20313939373934.roa (hash: CcK314TQaccXuzd2zjleKccUXAJU6r52sUrMN4OiPfc=)
                          6: 326130663a316363363a623234303a3a2f34342d3438203d3e20323139323839.roa (hash: bkUuykciTWh1bfFW0KX433jPn5468fT5sPJmNyOz8Lk=)
                          7: 326130663a316363363a623130303a3a2f34342d3438203d3e20323034323131.roa (hash: 29kVVWLYr7weidsqfKbNgXTNshpnIGiMJ62fMPFeOns=)
                          8: 326130663a316363363a626162303a3a2f34342d3438203d3e20323034353335.roa (hash: cHEORjblcG00sbZyjw6Bu9EsXIA7oC5/AO7mRT4IUjg=)
                          9: 326130663a316363363a623230303a3a2f34342d3438203d3e20313938313535.roa (hash: R0Zp25uniUy1vGT1s0rsGRtZxCDntggB9KJVr/ZGHFk=)
                          10: 326130663a316363363a623233303a3a2f34342d3438203d3e20323139333234.roa (hash: Fbr3d6vsF9f3Md2rcurK4yxy/TMDLffSbQOPQZqVAk8=)
                          11: 326130663a316363363a623138303a3a2f34342d3438203d3e20313938333331.roa (hash: SQQpuf9MPugDuKKbLcQGIvoOhKwZP0elwI8EjjLg1go=)
                          12: 326130663a316363363a666430303a3a2f34302d3438203d3e20313939373934.roa (hash: 7kHfAdGzdlPdhwNaqHeUsijlhqrvdKv4GhsJwDJouZY=)
                          13: 326130663a316363363a623139303a3a2f34342d3438203d3e20313938333035.roa (hash: MqnRABjnmlRpFJeXPojgQfKbU77XB43KxaLrjADcIBQ=)
                          14: 326130663a316363363a666530303a3a2f34302d3438203d3e20313939373934.roa (hash: bczv8HPQxrdQAlSAG21zowjSuyByV0J0vFQmDC8cfZ0=)
                          15: 326130663a316363363a623132303a3a2f34342d3438203d3e20323039353537.roa (hash: scEe2IowhilowN4x+WVVH9irUBDlv+kjiHhElpwuSSI=)
                          16: 326130663a316363363a666630303a3a2f34302d3438203d3e20313939373934.roa (hash: u2OSA0CA/LhD/ehNs3nGB0Ac0Hv0xN26zlrjRiwlUDk=)
                          17: 326130663a316363363a623131303a3a2f34342d3438203d3e20313534313835.roa (hash: ib4ImjZeR/tjrdRWs2Z2Xtcq0lxhnT9KoS6I+V5ukmg=)
                          18: 326130663a316363363a623135303a3a2f34342d3438203d3e20313939383137.roa (hash: jAjlYxtD2JiQt/anCFJXoX013l22BEoSBOom0VVJ2SM=)
                          19: 326130663a316363363a623232303a3a2f34342d3438203d3e20313439353133.roa (hash: +hLyO2byVr3CI7RxU47nKmJbK198DWDlst7nIi5HHww=)
                          20: 529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl (hash: FcqnkXClVPU6FaXBVAsDAzFSWR4bxv1ToV8/7xCsnU0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 05:16:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:c4:ef:dd:0e:d4:10:89:c9:db:59:cc:88:11:a0:db:fc:62:81:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=529BFC6DD306B2C49629AA6CEB313194CAA5D33F
        Validity
            Not Before: Jul 24 03:58:54 2026 GMT
            Not After : Jul 25 05:16:54 2026 GMT
        Subject: CN=681FFEA86B7CC91570B44F46FC961EF924C30B54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9f:ba:7c:f6:7a:32:45:3d:76:84:c5:d7:e4:
                    42:a1:fb:f2:8f:84:ec:49:97:e0:cc:b5:a6:f2:75:
                    8c:e5:96:af:f0:89:fb:33:35:8b:27:3e:71:3b:25:
                    b4:13:c5:55:d0:22:16:c0:5a:ee:de:32:7e:a8:c2:
                    d8:65:56:6c:ea:a4:d3:bd:3b:0b:e7:3a:65:18:90:
                    71:a1:e6:12:da:c5:05:78:71:bc:ac:e9:6e:88:3f:
                    e3:7f:e7:f7:dc:51:3d:62:3f:59:fd:4d:6b:1a:f3:
                    77:61:f2:f0:82:c2:92:9e:87:54:3b:87:88:01:a4:
                    60:d6:13:b7:d6:1d:5d:69:e6:98:b3:c1:cb:16:ef:
                    72:4e:c4:c4:37:41:c2:c5:c3:f3:39:1f:cd:fd:dd:
                    20:e0:b5:ba:07:46:a3:cc:b6:68:53:c3:cb:19:5f:
                    e9:89:51:19:a6:de:f3:d1:a8:c2:ed:16:d4:ce:32:
                    18:dc:bc:d1:25:7d:b4:f8:85:02:af:67:f9:8d:fe:
                    b4:30:91:35:7c:a0:47:ac:04:f5:b1:85:67:dd:92:
                    3d:76:87:39:a4:73:a8:25:7b:f3:42:12:1a:ec:ef:
                    d0:be:d2:c2:c3:8d:18:f0:c2:42:d0:53:96:df:6e:
                    9f:b2:7b:8c:67:87:1c:27:ec:72:ba:01:86:ee:70:
                    1f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:1F:FE:A8:6B:7C:C9:15:70:B4:4F:46:FC:96:1E:F9:24:C3:0B:54
            X509v3 Authority Key Identifier:
                keyid:52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:6c:fd:ca:d5:c3:2e:65:d6:cc:1d:11:a3:a3:1a:43:a3:97:
         d7:29:71:cf:55:8e:e4:c8:2d:70:2f:a6:fc:97:24:2a:0e:79:
         77:37:be:96:f8:40:81:2d:61:80:47:61:14:89:2c:f7:86:e4:
         fa:ac:ce:dc:00:22:86:b8:80:3c:78:51:91:0c:b3:4a:dc:a6:
         ae:ed:02:5b:da:57:77:73:9b:fc:c1:5f:a5:cc:a4:42:bf:2f:
         db:41:70:af:f0:d2:4f:3a:b1:1b:c1:01:47:a4:50:61:e1:2d:
         0e:c5:7f:8a:89:20:e7:d7:0a:01:bd:0c:aa:85:ea:8c:57:1c:
         55:ec:00:b0:80:23:60:24:e0:89:13:c2:38:c6:d7:a5:df:c3:
         3c:34:10:61:9a:c7:f8:06:0b:84:48:1e:10:2a:20:f0:2e:9c:
         d8:8c:c0:c9:61:0e:1d:1f:33:7f:38:16:c0:28:5e:81:ef:88:
         ac:5a:51:a0:10:fc:5f:bf:00:25:39:b6:64:f9:7a:56:06:a8:
         b7:19:72:fd:e9:46:0d:e8:45:0a:7c:ce:c7:09:fe:d8:e3:be:
         47:5b:57:0c:f7:1b:5f:d5:f4:e1:56:25:6e:99:d8:a7:5c:be:
         8e:40:e0:29:c8:af:90:fe:36:b4:c6:a9:97:e2:21:16:89:51:
         e8:c0:0c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:00:29 2026 by rpki-client