$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft File: 529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft (raw, json) Hash identifier: gN3ylZKA93MwYvy5DwEkjxtAhMp28fWa+BC1UJHAEe0= Subject key identifier: A1:7F:2B:79:D2:A5:94:10:3C:A3:8E:6D:35:4F:5E:10:A8:AE:4A:1D Authority key identifier: 52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F Certificate issuer: /CN=529BFC6DD306B2C49629AA6CEB313194CAA5D33F Certificate serial: 4F7A6E4E705B92856C695D45B110690B0AF9C25C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft Manifest number: 3E Signing time: Sun 01 Mar 2026 10:33:23 +0000 Manifest this update: Sun 01 Mar 2026 10:28:23 +0000 Manifest next update: Mon 02 Mar 2026 13:26:23 +0000 Files and hashes: 1: 326130663a316363363a623131303a3a2f34342d3438203d3e20313534313835.roa (hash: ib4ImjZeR/tjrdRWs2Z2Xtcq0lxhnT9KoS6I+V5ukmg=) 2: 326130663a316363363a626162303a3a2f34342d3438203d3e20323034353335.roa (hash: cHEORjblcG00sbZyjw6Bu9EsXIA7oC5/AO7mRT4IUjg=) 3: 326130663a316363363a623130303a3a2f34342d3438203d3e20323034323131.roa (hash: 29kVVWLYr7weidsqfKbNgXTNshpnIGiMJ62fMPFeOns=) 4: 326130663a316363363a623133303a3a2f34342d3438203d3e20323031373730.roa (hash: Efws7PM/OQeywU7TXDwbueQNU1D1OoCjFxiKYnz5zVA=) 5: 326130663a316363363a623132303a3a2f34342d3438203d3e20323039353537.roa (hash: scEe2IowhilowN4x+WVVH9irUBDlv+kjiHhElpwuSSI=) 6: 529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl (hash: mx4eqUL8CIlP4b5JeHCEI08qWSHPCJtyKojVnXUQbpI=) 7: 326130663a316363363a623134303a3a2f34342d3438203d3e203230343733.roa (hash: 0uVBH5sUFKMTa796Uvv1SVvRGarUL75dm7ieOip7W/Q=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 13:26:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:7a:6e:4e:70:5b:92:85:6c:69:5d:45:b1:10:69:0b:0a:f9:c2:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=529BFC6DD306B2C49629AA6CEB313194CAA5D33F Validity Not Before: Mar 1 10:28:23 2026 GMT Not After : Mar 2 13:26:23 2026 GMT Subject: CN=A17F2B79D2A594103CA38E6D354F5E10A8AE4A1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:da:54:4e:ce:ed:d9:92:54:71:f6:15:69:91: 26:ff:15:5b:6e:eb:60:3c:67:80:36:8a:b9:5b:08: c1:a1:7e:86:58:a1:54:d2:26:09:2f:5c:dc:78:26: ff:6e:ca:7a:91:65:f9:52:9c:08:b0:00:58:36:94: 0d:ad:96:d7:67:bb:69:e5:a8:54:9c:11:0c:34:1c: e1:0d:4b:50:a1:4d:e6:1c:d8:29:2c:44:79:a1:1e: 83:f1:f2:47:86:e3:e9:e9:a3:68:94:37:67:db:dd: bf:8c:06:5f:a8:8e:be:47:4e:dc:f5:b1:16:a5:fe: 7e:7c:c1:a9:b6:78:e7:6d:38:7d:6f:e2:9e:14:87: c5:18:03:8a:15:06:bf:32:15:74:c5:33:d5:9c:6a: 61:ac:c9:f2:07:16:90:3d:fd:31:45:4f:ec:27:46: 01:e9:0b:2c:57:38:40:53:34:21:52:35:2f:24:cb: 4c:b5:d0:40:b9:87:ce:76:ca:d9:26:b5:03:0c:85: 0d:11:8c:f0:21:a1:24:b8:d5:a8:b3:cc:38:24:a0: 14:e1:dc:e3:7e:83:9f:23:38:f5:06:4a:85:3d:2a: 96:87:ef:7f:ab:54:0f:5b:a6:d0:19:62:f6:b8:fd: 77:7f:c8:bb:ad:3c:51:67:5a:53:1c:8c:36:4d:49: 68:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:7F:2B:79:D2:A5:94:10:3C:A3:8E:6D:35:4F:5E:10:A8:AE:4A:1D X509v3 Authority Key Identifier: keyid:52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:8e:75:52:bf:65:f4:f3:86:a0:68:d3:95:f5:c6:25:1a:cb: 67:6c:86:0e:59:ab:79:da:b1:ed:20:43:29:6f:68:e4:48:b0: ee:4f:da:23:3f:9e:b8:86:0c:8e:e8:ad:a7:7b:01:61:54:40: 9c:39:dd:84:52:07:02:6a:7e:73:7d:1d:53:3b:46:a7:aa:71: 29:46:a5:07:84:48:84:41:03:6d:b2:ee:b3:30:70:b4:52:05: f4:3b:05:c3:f7:92:8a:e2:59:c2:cd:24:90:bd:cb:88:02:fe: f8:44:2f:6d:07:d4:c7:c5:08:bf:f0:a4:4e:b6:02:85:b1:64: 4b:d0:48:b7:42:8b:98:0c:af:58:da:c3:fd:a1:0b:40:e9:e3: f8:46:33:a8:6c:3b:aa:32:48:40:84:a1:3e:67:fe:35:30:8e: 19:6e:01:d0:34:36:d2:b1:65:0c:ba:0f:90:08:82:fe:82:bc: d7:fa:37:29:60:02:dc:91:c7:9a:a5:97:42:3c:54:cd:06:58: 88:fe:f9:46:60:17:29:b1:b2:da:33:80:6c:3e:de:64:e5:12: 99:24:33:cf:e4:32:e8:c1:ab:df:9f:de:49:ff:6c:b2:fb:67: 27:55:66:fd:9c:da:7a:94:70:f9:b6:38:6d:af:46:39:ea:f4: 38:75:af:35 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUT3puTnBbkoVsaV1FsRBpCwr5wlwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI5QkZDNkREMzA2QjJDNDk2MjlBQTZDRUIzMTMxOTRD QUE1RDMzRjAeFw0yNjAzMDExMDI4MjNaFw0yNjAzMDIxMzI2MjNaMDMxMTAvBgNV BAMTKEExN0YyQjc5RDJBNTk0MTAzQ0EzOEU2RDM1NEY1RTEwQThBRTRBMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh2lROzu3ZklRx9hVpkSb/FVtu 62A8Z4A2irlbCMGhfoZYoVTSJgkvXNx4Jv9uynqRZflSnAiwAFg2lA2tltdnu2nl qFScEQw0HOENS1ChTeYc2CksRHmhHoPx8keG4+npo2iUN2fb3b+MBl+ojr5HTtz1 sRal/n58wam2eOdtOH1v4p4Uh8UYA4oVBr8yFXTFM9WcamGsyfIHFpA9/TFFT+wn RgHpCyxXOEBTNCFSNS8ky0y10EC5h852ytkmtQMMhQ0RjPAhoSS41aizzDgkoBTh 3ON+g58jOPUGSoU9KpaH73+rVA9bptAZYva4/Xd/yLutPFFnWlMcjDZNSWg/AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUoX8redKllBA8o45tNU9eEKiuSh0wHwYDVR0j BBgwFoAUUpv8bdMGssSWKaps6zExlMql0z8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDkyZDE2ZjItOWI0Ni00YTExLWFjNTktNDJiM2RkZWUx MTA2LzIvNTI5QkZDNkREMzA2QjJDNDk2MjlBQTZDRUIzMTMxOTRDQUE1RDMzRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC81MjlCRkM2REQzMDZCMkM0OTYyOUFBNkNF QjMxMzE5NENBQTVEMzNGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzA5MmQxNmYyLTliNDYtNGExMS1hYzU5LTQyYjNkZGVlMTEwNi8yLzUyOUJGQzZE RDMwNkIyQzQ5NjI5QUE2Q0VCMzEzMTk0Q0FBNUQzM0YubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAbjnVS v2X084agaNOV9cYlGstnbIYOWat52rHtIEMpb2jkSLDuT9ojP564hgyO6K2newFh VECcOd2EUgcCan5zfR1TO0anqnEpRqUHhEiEQQNtsu6zMHC0UgX0OwXD95KK4lnC zSSQvcuIAv74RC9tB9THxQi/8KROtgKFsWRL0Ei3QouYDK9Y2sP9oQtA6eP4RjOo bDuqMkhAhKE+Z/41MI4ZbgHQNDbSsWUMug+QCIL+grzX+jcpYALckceapZdCPFTN BliI/vlGYBcpsbLaM4BsPt5k5RKZJDPP5DLowavfn95J/2yy+2cnVWb9nNp6lHD5 tjhtr0Y56vQ4da81 -----END CERTIFICATE-----Generated at Mon Mar 2 00:01:09 2026 by rpki-client