$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft File: 529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft (raw, json) Hash identifier: a9z9dIESAsn4N1QJFwlzwp7ArLzFk8+KfUD8cG1P810= Subject key identifier: EC:D6:6D:E6:6F:17:51:15:D8:29:47:3C:4B:A9:23:72:D4:79:15:7E Authority key identifier: 52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F Certificate issuer: /CN=529BFC6DD306B2C49629AA6CEB313194CAA5D33F Certificate serial: 04800CEDF581E5C33259B176BE3427444C008E7B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft Manifest number: 0157 Signing time: Sun 20 Sep 2026 01:48:13 +0000 Manifest this update: Sun 20 Sep 2026 01:43:13 +0000 Manifest next update: Mon 21 Sep 2026 03:16:13 +0000 Files and hashes: 1: 326130663a316363363a623130303a3a2f34342d3438203d3e20323034323131.roa (hash: 29kVVWLYr7weidsqfKbNgXTNshpnIGiMJ62fMPFeOns=) 2: 326130663a316363363a623139303a3a2f34342d3438203d3e20313938333035.roa (hash: MqnRABjnmlRpFJeXPojgQfKbU77XB43KxaLrjADcIBQ=) 3: 326130663a316363363a623232303a3a2f34342d3438203d3e20313937313936.roa (hash: HmKrlFyhqlQZZbvjhxJnQb4uO8wWIL79TVFNo65Q1cE=) 4: 326130663a316363363a623233303a3a2f34342d3438203d3e20323139333234.roa (hash: Fbr3d6vsF9f3Md2rcurK4yxy/TMDLffSbQOPQZqVAk8=) 5: 326130663a316363363a623134303a3a2f34342d3438203d3e203230343733.roa (hash: 0uVBH5sUFKMTa796Uvv1SVvRGarUL75dm7ieOip7W/Q=) 6: 326130663a316363363a623138303a3a2f34342d3438203d3e20313938333331.roa (hash: SQQpuf9MPugDuKKbLcQGIvoOhKwZP0elwI8EjjLg1go=) 7: 326130663a316363363a623230303a3a2f34342d3438203d3e20313938313535.roa (hash: R0Zp25uniUy1vGT1s0rsGRtZxCDntggB9KJVr/ZGHFk=) 8: 326130663a316363363a623137303a3a2f34342d3438203d3e20313938353838.roa (hash: Z1D2tzNH9Lk3h3VvnoiCB7e43V2PFv05dOJ2CtKqIbE=) 9: 326130663a316363363a666630303a3a2f34302d3438203d3e20313939373934.roa (hash: u2OSA0CA/LhD/ehNs3nGB0Ac0Hv0xN26zlrjRiwlUDk=) 10: 326130663a316363363a626162303a3a2f34342d3438203d3e20323034353335.roa (hash: cHEORjblcG00sbZyjw6Bu9EsXIA7oC5/AO7mRT4IUjg=) 11: 326130663a316363363a623133303a3a2f34342d3438203d3e20323031373730.roa (hash: Efws7PM/OQeywU7TXDwbueQNU1D1OoCjFxiKYnz5zVA=) 12: 326130663a316363363a623132303a3a2f34342d3438203d3e20323039353537.roa (hash: scEe2IowhilowN4x+WVVH9irUBDlv+kjiHhElpwuSSI=) 13: 529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl (hash: RyaL+ttnbMmX01eN3h1diYxKnUZk2Th64u75ptY04SI=) 14: 326130663a316363363a623135303a3a2f34342d3438203d3e20313939383137.roa (hash: jAjlYxtD2JiQt/anCFJXoX013l22BEoSBOom0VVJ2SM=) 15: 326130663a316363363a623131303a3a2f34342d3438203d3e20313534313835.roa (hash: ib4ImjZeR/tjrdRWs2Z2Xtcq0lxhnT9KoS6I+V5ukmg=) 16: 326130663a316363363a666530303a3a2f34302d3438203d3e20313939373934.roa (hash: bczv8HPQxrdQAlSAG21zowjSuyByV0J0vFQmDC8cfZ0=) 17: 326130663a316363363a623136303a3a2f34342d3438203d3e20313939373934.roa (hash: CcK314TQaccXuzd2zjleKccUXAJU6r52sUrMN4OiPfc=) 18: 326130663a316363363a623235303a3a2f34342d3434203d3e20323131353735.roa (hash: 8mE1jAfmLyWfaMnOLOuvCITYLEI/kRV9tFQm4x0RWuU=) 19: 326130663a316363363a623232303a3a2f34342d3438203d3e20313439353133.roa (hash: +hLyO2byVr3CI7RxU47nKmJbK198DWDlst7nIi5HHww=) 20: 326130663a316363363a666430303a3a2f34302d3438203d3e20313939373934.roa (hash: 7kHfAdGzdlPdhwNaqHeUsijlhqrvdKv4GhsJwDJouZY=) 21: 326130663a316363363a623234303a3a2f34342d3438203d3e20323139323839.roa (hash: bkUuykciTWh1bfFW0KX433jPn5468fT5sPJmNyOz8Lk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 03:16:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:80:0c:ed:f5:81:e5:c3:32:59:b1:76:be:34:27:44:4c:00:8e:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=529BFC6DD306B2C49629AA6CEB313194CAA5D33F Validity Not Before: Sep 20 01:43:13 2026 GMT Not After : Sep 21 03:16:13 2026 GMT Subject: CN=ECD66DE66F175115D829473C4BA92372D479157E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a5:54:96:2d:cb:92:35:27:33:3a:98:dd:ea: f1:fd:c9:f6:b3:17:b5:5c:af:de:15:20:5c:44:2a: 66:f5:29:5c:7c:8a:d6:cf:09:fa:db:bc:ab:9b:c7: a3:43:55:64:64:8b:3c:a3:38:12:5e:1d:18:46:7d: b6:df:74:14:ad:0b:4b:48:ee:75:b0:a6:34:0f:6d: 3f:60:cb:46:34:14:a8:25:af:43:33:73:07:1f:9c: e9:40:68:ce:ca:53:d6:5b:3d:31:00:b4:a7:25:76: 9c:c1:12:ab:51:b0:a2:87:7a:5a:1e:79:e9:cc:00: fe:7b:0d:a2:26:cd:6f:62:78:7a:d5:f3:ef:ab:d9: 30:a6:1d:b5:ac:ef:61:bf:96:be:8b:a4:19:12:4f: 6f:80:8b:8a:d8:6a:f1:63:78:45:af:4b:4b:61:94: 6c:ad:36:a4:43:c3:f6:5d:cb:17:d2:8d:6f:da:9d: ed:57:f0:cf:95:b7:0b:1e:94:4a:ce:51:f1:a6:8b: 0e:cc:00:96:42:0d:b4:50:3d:88:9c:54:96:91:bf: 0e:04:6c:b4:4e:04:c7:82:73:b8:38:f2:66:eb:51: c0:98:b4:bf:4d:dc:2a:12:aa:69:05:96:ab:f0:8c: b8:48:78:3a:ad:10:11:b9:ea:e3:78:ba:d7:fc:bf: b3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:D6:6D:E6:6F:17:51:15:D8:29:47:3C:4B:A9:23:72:D4:79:15:7E X509v3 Authority Key Identifier: keyid:52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:df:fd:cb:33:9d:ac:c9:4d:ab:d8:3a:97:ca:01:c4:bd:5d: 11:10:d9:ae:70:7d:bf:e0:99:c5:e1:fc:bc:35:28:73:41:c6: cf:10:2e:78:04:5b:d2:7d:83:28:63:0c:56:a3:0c:89:5f:4c: bc:bb:58:40:22:83:a3:35:ad:55:99:c0:f7:25:a0:7c:28:c0: e3:31:c7:37:d6:1f:5d:b3:da:47:ff:4a:67:1d:9d:80:bb:44: 3d:1a:f3:4e:56:d3:6f:66:60:37:ab:4f:ea:9b:4f:bf:b7:0f: 27:2e:eb:c3:a0:db:6a:65:5a:0c:1e:ed:29:bf:ce:f3:36:b2: 84:6e:ff:e2:19:e5:92:6f:53:a2:aa:2b:47:d6:e1:a0:ac:07: b3:3c:c9:cd:68:de:48:33:74:c1:01:c9:c5:00:3b:d2:b4:20: 32:26:d7:8b:db:23:4d:5f:82:1d:ae:63:67:87:87:bb:56:5a: ea:6f:ca:cc:3b:fa:4d:00:d5:04:ea:2b:c4:5d:f3:86:e6:74: 9c:67:fc:21:3b:7a:6b:5b:cd:46:9f:1b:b5:4f:33:b1:6d:79: 3d:1d:67:9b:d0:d1:a9:49:56:6f:39:07:13:90:8e:ea:b8:b6: 2d:d4:a4:98:27:a9:a5:72:a7:31:d5:78:98:24:07:98:b6:c7: ac:dc:4f:7d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUBIAM7fWB5cMyWbF2vjQnREwAjnswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI5QkZDNkREMzA2QjJDNDk2MjlBQTZDRUIzMTMxOTRD QUE1RDMzRjAeFw0yNjA5MjAwMTQzMTNaFw0yNjA5MjEwMzE2MTNaMDMxMTAvBgNV BAMTKEVDRDY2REU2NkYxNzUxMTVEODI5NDczQzRCQTkyMzcyRDQ3OTE1N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvpVSWLcuSNSczOpjd6vH9yfaz F7Vcr94VIFxEKmb1KVx8itbPCfrbvKubx6NDVWRkizyjOBJeHRhGfbbfdBStC0tI 7nWwpjQPbT9gy0Y0FKglr0MzcwcfnOlAaM7KU9ZbPTEAtKcldpzBEqtRsKKHeloe eenMAP57DaImzW9ieHrV8++r2TCmHbWs72G/lr6LpBkST2+Ai4rYavFjeEWvS0th lGytNqRDw/ZdyxfSjW/ane1X8M+VtwselErOUfGmiw7MAJZCDbRQPYicVJaRvw4E bLROBMeCc7g48mbrUcCYtL9N3CoSqmkFlqvwjLhIeDqtEBG56uN4utf8v7NPAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU7NZt5m8XURXYKUc8S6kjctR5FX4wHwYDVR0j BBgwFoAUUpv8bdMGssSWKaps6zExlMql0z8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDkyZDE2ZjItOWI0Ni00YTExLWFjNTktNDJiM2RkZWUx MTA2LzIvNTI5QkZDNkREMzA2QjJDNDk2MjlBQTZDRUIzMTMxOTRDQUE1RDMzRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC81MjlCRkM2REQzMDZCMkM0OTYyOUFBNkNF QjMxMzE5NENBQTVEMzNGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzA5MmQxNmYyLTliNDYtNGExMS1hYzU5LTQyYjNkZGVlMTEwNi8yLzUyOUJGQzZE RDMwNkIyQzQ5NjI5QUE2Q0VCMzEzMTk0Q0FBNUQzM0YubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBe3/3L M52syU2r2DqXygHEvV0RENmucH2/4JnF4fy8NShzQcbPEC54BFvSfYMoYwxWowyJ X0y8u1hAIoOjNa1VmcD3JaB8KMDjMcc31h9ds9pH/0pnHZ2Au0Q9GvNOVtNvZmA3 q0/qm0+/tw8nLuvDoNtqZVoMHu0pv87zNrKEbv/iGeWSb1OiqitH1uGgrAezPMnN aN5IM3TBAcnFADvStCAyJteL2yNNX4IdrmNnh4e7Vlrqb8rMO/pNANUE6ivEXfOG 5nScZ/whO3prW81Gnxu1TzOxbXk9HWeb0NGpSVZvOQcTkI7quLYt1KSYJ6mlcqcx 1XiYJAeYtses3E99 -----END CERTIFICATE-----Generated at Sun Sep 20 21:12:30 2026 by rpki-client