Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft
File:                     529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft (raw, json)
Hash identifier:          /rWY+cYOm1uJP8knMuvKqZIAD8EeodSZ/W4Rn3FqbNU=
Subject key identifier:   77:F0:2E:A2:A7:05:6F:34:58:1E:F5:51:E4:01:32:FB:93:22:01:51
Authority key identifier: 52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F
Certificate issuer:       /CN=529BFC6DD306B2C49629AA6CEB313194CAA5D33F
Certificate serial:       41F25B266F7BBC588E47DF16C1F5F227AD20292D
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft
Manifest number:          D0
Signing time:             Fri 12 Jun 2026 13:18:44 +0000
Manifest this update:     Fri 12 Jun 2026 13:13:44 +0000
Manifest next update:     Sat 13 Jun 2026 14:18:44 +0000
Files and hashes:         1: 326130663a316363363a623232303a3a2f34342d3438203d3e20313937313936.roa (hash: HmKrlFyhqlQZZbvjhxJnQb4uO8wWIL79TVFNo65Q1cE=)
                          2: 326130663a316363363a666630303a3a2f34302d3438203d3e20313939373934.roa (hash: u2OSA0CA/LhD/ehNs3nGB0Ac0Hv0xN26zlrjRiwlUDk=)
                          3: 326130663a316363363a623131303a3a2f34342d3438203d3e20313534313835.roa (hash: ib4ImjZeR/tjrdRWs2Z2Xtcq0lxhnT9KoS6I+V5ukmg=)
                          4: 326130663a316363363a623130303a3a2f34342d3438203d3e20323034323131.roa (hash: 29kVVWLYr7weidsqfKbNgXTNshpnIGiMJ62fMPFeOns=)
                          5: 326130663a316363363a623133303a3a2f34342d3438203d3e20323031373730.roa (hash: Efws7PM/OQeywU7TXDwbueQNU1D1OoCjFxiKYnz5zVA=)
                          6: 326130663a316363363a666530303a3a2f34302d3438203d3e20313939373934.roa (hash: bczv8HPQxrdQAlSAG21zowjSuyByV0J0vFQmDC8cfZ0=)
                          7: 326130663a316363363a623135303a3a2f34342d3438203d3e20313939383137.roa (hash: jAjlYxtD2JiQt/anCFJXoX013l22BEoSBOom0VVJ2SM=)
                          8: 326130663a316363363a623136303a3a2f34342d3438203d3e20313939373934.roa (hash: CcK314TQaccXuzd2zjleKccUXAJU6r52sUrMN4OiPfc=)
                          9: 326130663a316363363a623134303a3a2f34342d3438203d3e203230343733.roa (hash: 0uVBH5sUFKMTa796Uvv1SVvRGarUL75dm7ieOip7W/Q=)
                          10: 326130663a316363363a623230303a3a2f34342d3438203d3e20313938313535.roa (hash: R0Zp25uniUy1vGT1s0rsGRtZxCDntggB9KJVr/ZGHFk=)
                          11: 326130663a316363363a623139303a3a2f34342d3438203d3e20313938333035.roa (hash: MqnRABjnmlRpFJeXPojgQfKbU77XB43KxaLrjADcIBQ=)
                          12: 529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl (hash: 4lZXRovGeGNy2lu+iHm5eVOcaSIDfh+eS5NU+dwBuFo=)
                          13: 326130663a316363363a623132303a3a2f34342d3438203d3e20323039353537.roa (hash: scEe2IowhilowN4x+WVVH9irUBDlv+kjiHhElpwuSSI=)
                          14: 326130663a316363363a626162303a3a2f34342d3438203d3e20323034353335.roa (hash: cHEORjblcG00sbZyjw6Bu9EsXIA7oC5/AO7mRT4IUjg=)
                          15: 326130663a316363363a623137303a3a2f34342d3438203d3e20313938353838.roa (hash: Z1D2tzNH9Lk3h3VvnoiCB7e43V2PFv05dOJ2CtKqIbE=)
                          16: 326130663a316363363a623138303a3a2f34342d3438203d3e20313938333331.roa (hash: SQQpuf9MPugDuKKbLcQGIvoOhKwZP0elwI8EjjLg1go=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 14:18:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:f2:5b:26:6f:7b:bc:58:8e:47:df:16:c1:f5:f2:27:ad:20:29:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=529BFC6DD306B2C49629AA6CEB313194CAA5D33F
        Validity
            Not Before: Jun 12 13:13:44 2026 GMT
            Not After : Jun 13 14:18:44 2026 GMT
        Subject: CN=77F02EA2A7056F34581EF551E40132FB93220151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:85:53:41:8a:8a:29:69:0e:d7:a8:a4:72:f7:
                    41:15:27:2b:15:70:52:35:b5:9c:d2:76:77:53:5b:
                    81:7f:bb:9c:df:da:e5:14:aa:d8:ed:4c:42:54:b4:
                    01:c7:83:71:09:94:1b:14:44:78:56:4a:f5:19:86:
                    d1:a1:94:a1:e6:20:b8:1b:60:19:c2:14:0e:dd:bf:
                    44:e2:b3:08:ce:70:b3:61:4e:4b:ef:9e:b7:8b:01:
                    f2:95:13:5a:95:01:90:e2:2c:6f:36:9f:da:b5:49:
                    f4:bf:75:40:18:af:10:6d:43:1d:38:72:7a:36:4c:
                    cb:44:e7:cf:c0:9a:ef:f9:7d:33:15:6b:05:f1:84:
                    f7:ce:b9:42:4e:c4:4e:b0:9f:f4:62:3e:0b:bf:a2:
                    a2:d3:a7:82:2c:8e:1d:c6:e1:34:e2:b2:3b:44:2b:
                    88:69:3e:d4:3e:42:d3:d0:00:c5:3e:e7:ac:f2:b4:
                    7f:a4:0d:74:32:09:ec:b1:83:85:a6:93:0e:6b:f0:
                    47:74:74:33:d1:fc:86:ad:f5:58:e2:a5:c1:90:ff:
                    21:bf:41:51:c3:9e:55:ff:4f:a1:f2:45:51:b5:03:
                    22:56:4a:8c:dc:29:de:8a:fe:ca:ae:d0:79:d2:eb:
                    df:21:9c:78:b0:54:9b:84:63:47:f2:1b:20:5d:59:
                    73:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F0:2E:A2:A7:05:6F:34:58:1E:F5:51:E4:01:32:FB:93:22:01:51
            X509v3 Authority Key Identifier:
                keyid:52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:b1:df:e7:6d:2a:96:84:83:25:a3:cc:0d:5f:ea:f8:af:3e:
         67:be:66:d7:8b:00:9c:10:ba:df:e6:31:a6:46:e3:11:53:b7:
         31:86:c0:00:f5:73:50:f9:2b:4f:ea:f6:c4:f6:36:68:f0:fc:
         30:80:5b:0e:ad:b7:e8:df:b2:12:57:65:0d:c0:ef:de:bf:08:
         1c:d0:2a:c6:4d:da:7f:a4:33:83:eb:67:b8:93:0b:e0:63:f5:
         db:69:04:ee:d6:20:77:38:db:63:24:b9:83:6f:1b:1c:6f:b6:
         15:29:9c:dd:cd:f1:90:a6:88:b0:cf:a7:c8:26:97:7f:9d:17:
         30:9c:99:2c:c6:cd:77:30:f2:c4:98:3b:41:00:af:36:6b:9c:
         17:a6:2a:a6:b0:a4:66:39:da:39:ec:eb:2f:cb:e2:73:63:40:
         18:98:7a:59:00:ea:f4:84:7c:75:da:cf:89:37:c2:48:cc:f6:
         3a:f9:e2:27:46:22:f4:82:d7:61:0c:99:07:53:f2:30:bf:b8:
         53:3b:31:09:a0:23:3c:b4:b7:97:f4:95:f6:2a:9a:53:7a:f8:
         bd:a2:70:de:ea:81:fd:8e:5f:35:0d:bc:af:a1:53:ba:f5:66:
         c6:47:ca:1e:45:b7:50:cc:8b:81:65:88:f6:1c:ef:12:90:a7:
         ef:7c:67:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:22:11 2026 by rpki-client