Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft
File:                     529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft (raw, json)
Hash identifier:          HpvzBFSH36hxbYmFm79wBBBOdhblxoQDs2W1FwsovPY=
Subject key identifier:   28:52:67:30:3F:62:30:41:78:B7:D9:18:D5:33:2C:D8:5B:0E:E4:8A
Authority key identifier: 52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F
Certificate issuer:       /CN=529BFC6DD306B2C49629AA6CEB313194CAA5D33F
Certificate serial:       51368AFA6FE34B647EEFF1662214F1C4C63E84B4
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft
Manifest number:          D1
Signing time:             Sat 13 Jun 2026 06:23:44 +0000
Manifest this update:     Sat 13 Jun 2026 06:18:44 +0000
Manifest next update:     Sun 14 Jun 2026 10:11:44 +0000
Files and hashes:         1: 326130663a316363363a623135303a3a2f34342d3438203d3e20313939383137.roa (hash: jAjlYxtD2JiQt/anCFJXoX013l22BEoSBOom0VVJ2SM=)
                          2: 326130663a316363363a623132303a3a2f34342d3438203d3e20323039353537.roa (hash: scEe2IowhilowN4x+WVVH9irUBDlv+kjiHhElpwuSSI=)
                          3: 326130663a316363363a623137303a3a2f34342d3438203d3e20313938353838.roa (hash: Z1D2tzNH9Lk3h3VvnoiCB7e43V2PFv05dOJ2CtKqIbE=)
                          4: 326130663a316363363a623230303a3a2f34342d3438203d3e20313938313535.roa (hash: R0Zp25uniUy1vGT1s0rsGRtZxCDntggB9KJVr/ZGHFk=)
                          5: 529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl (hash: i/2ObbjNelkbS+XYhzdz7Kbr+LQnyQUDRGLnuDaE1bc=)
                          6: 326130663a316363363a623133303a3a2f34342d3438203d3e20323031373730.roa (hash: Efws7PM/OQeywU7TXDwbueQNU1D1OoCjFxiKYnz5zVA=)
                          7: 326130663a316363363a626162303a3a2f34342d3438203d3e20323034353335.roa (hash: cHEORjblcG00sbZyjw6Bu9EsXIA7oC5/AO7mRT4IUjg=)
                          8: 326130663a316363363a623139303a3a2f34342d3438203d3e20313938333035.roa (hash: MqnRABjnmlRpFJeXPojgQfKbU77XB43KxaLrjADcIBQ=)
                          9: 326130663a316363363a623134303a3a2f34342d3438203d3e203230343733.roa (hash: 0uVBH5sUFKMTa796Uvv1SVvRGarUL75dm7ieOip7W/Q=)
                          10: 326130663a316363363a623138303a3a2f34342d3438203d3e20313938333331.roa (hash: SQQpuf9MPugDuKKbLcQGIvoOhKwZP0elwI8EjjLg1go=)
                          11: 326130663a316363363a623136303a3a2f34342d3438203d3e20313939373934.roa (hash: CcK314TQaccXuzd2zjleKccUXAJU6r52sUrMN4OiPfc=)
                          12: 326130663a316363363a623130303a3a2f34342d3438203d3e20323034323131.roa (hash: 29kVVWLYr7weidsqfKbNgXTNshpnIGiMJ62fMPFeOns=)
                          13: 326130663a316363363a666530303a3a2f34302d3438203d3e20313939373934.roa (hash: bczv8HPQxrdQAlSAG21zowjSuyByV0J0vFQmDC8cfZ0=)
                          14: 326130663a316363363a623131303a3a2f34342d3438203d3e20313534313835.roa (hash: ib4ImjZeR/tjrdRWs2Z2Xtcq0lxhnT9KoS6I+V5ukmg=)
                          15: 326130663a316363363a623232303a3a2f34342d3438203d3e20313937313936.roa (hash: HmKrlFyhqlQZZbvjhxJnQb4uO8wWIL79TVFNo65Q1cE=)
                          16: 326130663a316363363a666630303a3a2f34302d3438203d3e20313939373934.roa (hash: u2OSA0CA/LhD/ehNs3nGB0Ac0Hv0xN26zlrjRiwlUDk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 22:39:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:36:8a:fa:6f:e3:4b:64:7e:ef:f1:66:22:14:f1:c4:c6:3e:84:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=529BFC6DD306B2C49629AA6CEB313194CAA5D33F
        Validity
            Not Before: Jun 13 06:18:44 2026 GMT
            Not After : Jun 14 10:11:44 2026 GMT
        Subject: CN=285267303F62304178B7D918D5332CD85B0EE48A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6b:de:1c:5a:ef:fb:e4:0e:bd:98:1e:42:a9:
                    bc:2c:45:fa:3c:9d:53:8a:2d:db:c6:90:ba:4f:91:
                    e0:9d:f1:c5:27:49:df:36:6b:26:2e:15:6e:57:3b:
                    55:78:27:3c:99:a5:6f:27:c2:4a:5b:eb:35:d1:d7:
                    5a:c3:f5:ee:69:5a:f9:f1:af:63:3f:f1:a2:49:9b:
                    7c:3d:16:11:32:62:ff:80:03:00:1a:3c:e4:a9:d7:
                    85:1d:ce:fb:a1:86:41:df:48:61:b7:3f:ed:16:09:
                    fa:b8:91:18:47:1d:ef:f7:de:81:6a:13:7e:60:c8:
                    81:9d:16:bb:cf:75:d6:c5:7c:4f:58:01:75:28:96:
                    36:ce:9b:f9:45:9a:81:1d:fd:8c:1a:12:b1:9a:5a:
                    b5:02:34:76:0e:81:23:5f:2f:60:9b:42:04:2e:26:
                    f8:b3:f7:80:fb:69:c3:1c:81:49:65:d2:7c:97:82:
                    58:79:d8:92:02:c9:6a:d5:31:dd:a1:fc:c8:73:95:
                    56:2e:9c:f2:10:8b:f5:7c:ef:2b:8e:b2:5e:5b:58:
                    7a:fa:59:e8:c4:3b:5b:1a:ee:9d:e7:a3:f7:da:0c:
                    9c:4e:b1:50:b7:3e:23:4c:a7:84:8f:94:60:c0:96:
                    39:03:93:99:55:65:00:e2:e9:d4:6e:f8:b5:cf:85:
                    df:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:52:67:30:3F:62:30:41:78:B7:D9:18:D5:33:2C:D8:5B:0E:E4:8A
            X509v3 Authority Key Identifier:
                keyid:52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:65:33:3e:76:38:c5:48:28:a9:c0:73:2a:80:8e:3f:c9:46:
         d6:08:e9:5a:10:b0:47:9c:8d:87:2b:58:3c:97:d1:91:50:13:
         24:21:28:f0:45:7c:0b:92:5a:fe:d6:10:23:de:a0:09:ec:b3:
         d0:48:a0:43:1e:12:ae:de:94:a7:4f:96:48:2d:38:de:45:a1:
         9f:b3:49:61:b2:36:56:9b:1b:cf:cb:c1:8c:9d:ee:3a:26:0f:
         0b:e4:f3:c2:d7:d5:23:f6:ae:b9:51:dc:4b:b4:10:a9:38:67:
         15:cf:3c:01:79:3b:d9:a0:28:10:8d:ac:05:21:f3:42:2b:38:
         55:39:74:95:03:3d:29:0d:0f:b8:a1:0a:30:e9:30:cb:74:8b:
         a4:ca:7e:24:15:74:11:72:58:3a:9c:49:66:b7:5f:50:53:c0:
         ac:e9:8b:7e:94:2b:40:72:b8:10:ee:14:9e:84:e1:2c:03:e1:
         13:46:94:92:5a:9c:3c:2e:3a:b1:62:82:bd:08:5c:7a:25:4a:
         5f:2f:4a:ab:85:42:a1:25:5e:6c:1d:7e:b5:9f:99:05:3e:93:
         08:9a:3d:1e:8d:20:d6:00:92:44:f2:58:cc:5c:74:a4:81:d0:
         ae:16:eb:30:3b:79:69:b7:a5:3c:44:59:5a:5f:36:fa:8e:52:
         41:f8:c4:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:22:56 2026 by rpki-client