Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
File:                     A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft (raw, json)
Hash identifier:          Fsw4SOSCQSeLDYBIJSQCFhv5rLhchV5DYhQxxRGZ6PI=
Subject key identifier:   B9:B9:18:D8:47:20:AF:45:90:DE:BA:40:E3:84:6E:05:32:8E:97:F0
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Certificate issuer:       /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial:       39226BC4BE429A45BEEF778E7CB6AC0A7C21D390
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
Manifest number:          0735
Signing time:             Mon 01 Jun 2026 06:47:20 +0000
Manifest this update:     Mon 01 Jun 2026 06:42:20 +0000
Manifest next update:     Tue 02 Jun 2026 07:29:20 +0000
Files and hashes:         1: 3139342e33312e3139342e302f32342d3234203d3e203339333638.roa (hash: qMisc8M9fAgiB1zw7/Tn0y61M2FDJt3sqCMkzKcplhA=)
                          2: 34352e382e3231382e302f32342d3234203d3e20323132333834.roa (hash: tj3yrp12EwOeT1ZEKtZIphksitaxnh11pc39cLh8XvY=)
                          3: 322e35392e36322e302f32342d3234203d3e203633303233.roa (hash: UYplWrPuNpBK4+VRoAMeNfrXsCP+FyebbT8k9JdoYnw=)
                          4: 322e35392e36302e302f32342d3234203d3e20323132323338.roa (hash: siAtwvTAZM+LlD3wdnarFDX9+Ycc62d+jei/mDFB4w0=)
                          5: 38352e3230392e3233302e302f32342d3234203d3e20313430323234.roa (hash: l2LIzKinG0BfxQ8d6ejTKmtFPNdSKUK9y0vPJ8skqFk=)
                          6: 3139342e33312e3139352e302f32342d3234203d3e20323133363638.roa (hash: pCuQNjK5vxSYZwtC7uzq87OexUIwDcw+LKWQti/Nk9E=)
                          7: 322e35392e36332e302f32342d3234203d3e20383334.roa (hash: 8DqvUUgTHwg4fnhfYD2q3DFHCSCucv2RToLFRdMK/4s=)
                          8: 352e3138312e3138372e302f32342d3234203d3e20323135373033.roa (hash: EJ6RmJBNoUg0c9WoYw2Ja1OnADVswQoLG/EoG0ZGnFE=)
                          9: 38352e3230392e3233302e302f32342d3234203d3e203138313836.roa (hash: wLYhvbcU/etiFzebOUkFMR3b0g4xeh82nSHNvUEIAsY=)
                          10: 352e3138312e3138342e302f32342d3234203d3e20323131333733.roa (hash: HxZ7OQY4wmmok4f1jyMFC6WkeyQaBhCRYtiYzwz8qYg=)
                          11: 38352e3230392e3233312e302f32342d3234203d3e203135343430.roa (hash: 5P7OofszcYzyRXLoqtlNETBM0YQubML8godGGz1Zc2U=)
                          12: 34352e382e3231372e302f32342d3234203d3e20343032323938.roa (hash: kelqIGWqA6A5CmDeq94bFFXh8OyDYHhPA+ITnx16dp4=)
                          13: 3134362e31392e33382e302f32342d3234203d3e20313939363534.roa (hash: KCPy6uAOav6R+jmrUTgTpbZkeje3mnKOXa6FXDMEhhE=)
                          14: 38352e3230392e3232382e302f32342d3234203d3e203230343733.roa (hash: 1VJONXDxJnPHUDzUm7XiO/UF/aXr3KYuVDC6vKiNDOc=)
                          15: 38352e3230392e3232392e302f32342d3234203d3e203432383331.roa (hash: vjpMNqLq25F9up6mT05GhHQJMJ0KbktUxvDSn9v6kBA=)
                          16: 3134362e31392e33382e302f32342d3234203d3e203136323736.roa (hash: norYvgZGO2Imho4UnQcnY8UITUyuaQwpwpHqXsoPDao=)
                          17: 322e35392e36312e302f32342d3234203d3e203438323636.roa (hash: sgoOb4bX1m2rIZlacxTZqlmJneicsHhOxQYCb/BB8fA=)
                          18: 3139342e33312e3139372e302f32342d3234203d3e203432383331.roa (hash: KMAsq44hIBrFB+eRrhhDssa2B+eAZmGDL1feRYL/R5o=)
                          19: 322e35392e36322e302f32342d3234203d3e20313432313131.roa (hash: c23s9WCLyWR8C29b7voS/R0hWodZcVrxRN5kAioljng=)
                          20: 34352e39352e3231322e302f32322d3232203d3e2037303239.roa (hash: b3HfoeSSJnwEFBW/P8/Hh1DNPoifdQtxChWclKR01cY=)
                          21: 34352e39352e3231332e302f32342d3234203d3e20343030303339.roa (hash: XrIv1BWbF+to8I3saogND52oHBVFoDY38lWpbUFLA6o=)
                          22: 352e3138312e3138362e302f32342d3234203d3e20323036313530.roa (hash: QGg1o/UsEXwX7QWOmnciGR0lfU5zaV2UWyNlVxa/Ka8=)
                          23: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl (hash: VYVitvnCtPQ6Bd+6OHcRMRAK2++y2Ks+XsQ5qsI5gvI=)
                          24: 38352e3230392e3233302e302f32342d3234203d3e203633393032.roa (hash: VaOxQtitcotEwDKcqVbfty4V+UnBaFXCz621Z/5UMPE=)
                          25: 3139342e33312e3139362e302f32342d3234203d3e20313939373337.roa (hash: qc608O9yB+6tqsDBDhoINI3nGVPIPfhQ49+yA4p+itg=)
                          26: 3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa (hash: /pttCsH3EqNiBOKmYU2SEK0bSx+Q89rOic38LmDTjfU=)
                          27: 34352e39352e3231352e302f32342d3234203d3e203239383032.roa (hash: Q1OlQJwADffmDxnZKj7bvhSo1kOL5aXrHpMtVtZFtuQ=)
                          28: 3139342e33312e3139352e302f32342d3234203d3e203334393933.roa (hash: /RrqrRO8J+Vsp3FaP0KZwFzXiRmxrRbyseKOqWdHYpY=)
                          29: 3139342e33312e3139362e302f32342d3234203d3e20323030303137.roa (hash: mYDAbrfXE2SMRwMvSEq6zRWmL22fizr0hTNDEPKCMHw=)
                          30: 34352e382e3231362e302f32342d3234203d3e20323131343430.roa (hash: e8OtHDGrOLuThDlvGfoczJuukmiEX6Dq6BRiXUAdwSs=)
                          31: 36322e332e32302e302f32342d3234203d3e20323132393830.roa (hash: f/GL2G2QMX1DeHxo/IzFzuj9b3uiMiTDtg1wGwI4Lb8=)
                          32: 34352e39352e3231342e302f32342d3234203d3e20313938323530.roa (hash: cWZ4izllTaa4CjT3fbEMgCbmIhf6LWTGafANc9j4YVM=)
                          33: 34352e39352e3231352e302f32342d3234203d3e203631333137.roa (hash: jtw5h4s7N892mHMRX7q1v9D/8tuL7heVW+cms9i1OJM=)
                          34: 34352e39352e3231322e302f32342d3234203d3e20323039353534.roa (hash: 9IsmuufWVjFLEbYLLcJg7Yp7+j5DqB4kK41/uY19nMQ=)
                          35: 34352e382e3231392e302f32342d3234203d3e2039303039.roa (hash: 0zn1M6udTfOcCIE/Cifu6WDNTkQzSgcujlgX6HE4/sQ=)
                          36: 352e3138312e3138352e302f32342d3234203d3e20323131333733.roa (hash: tIeHJEF41zbDRQ8KbMBp/GsLGj1RgNxno+RElBJQNMw=)
                          37: 352e3138312e3138342e302f32342d3234203d3e20323132333335.roa (hash: UCQA4MebhnFRuGzYIjyz+Oaxw3thh569/39f5fjzuDM=)
                          38: 3139342e33312e3139352e302f32342d3234203d3e203132383236.roa (hash: dZ5pA0FTXTMIyebmvvTrXa2pwRmRVDj8qy5ZN+EkpPo=)
                          39: 34352e382e3231362e302f32342d3234203d3e20323132333834.roa (hash: a81beBwcXvnxQQXt8vP0FnYxX0zBkKmQl4zg0OFOfqc=)
                          40: 322e35392e36302e302f32342d3234203d3e203631333137.roa (hash: BBdnQvjsMGsAKdV0CMmUgkUx9rKK17g08iyDVXfqF5c=)
                          41: 34352e39352e3231342e302f32342d3234203d3e20343032323134.roa (hash: IAhhGhhBpF4cl6c96AeOIUO3QUQaMO1YcC9zPWe02Zs=)
                          42: 3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa (hash: 1cwuvx0f/bXZ/DwexRmaaQu0tTmkULuIbOfrQVnX4ao=)
                          43: 352e3138312e3138352e302f32342d3234203d3e20323132333834.roa (hash: PkrjX5lEKZeku6HbTZFd/bgZgjS0Ra0J+FcQrImRmsQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 02 Jun 2026 07:29:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:22:6b:c4:be:42:9a:45:be:ef:77:8e:7c:b6:ac:0a:7c:21:d3:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
        Validity
            Not Before: Jun  1 06:42:20 2026 GMT
            Not After : Jun  2 07:29:20 2026 GMT
        Subject: CN=B9B918D84720AF4590DEBA40E3846E05328E97F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f0:6b:7e:aa:17:dd:08:cf:e1:ce:81:9c:de:
                    a1:69:dc:73:8c:9e:ae:ba:54:2d:dc:25:36:34:b7:
                    22:2f:c6:30:06:cc:00:65:c5:82:e8:82:28:31:50:
                    8c:15:c0:37:cc:15:24:ae:55:05:90:f3:24:bb:3a:
                    47:a1:89:4c:3a:32:ca:61:13:a0:77:9f:c9:85:3b:
                    4e:ec:56:64:5d:73:06:10:92:cb:34:87:fb:55:09:
                    70:a8:55:9f:59:2a:b8:5c:e4:23:79:08:33:83:ea:
                    04:24:9e:33:c9:09:fc:18:d8:16:c7:de:f7:7c:1f:
                    80:63:1e:a8:fe:6c:12:d5:a7:b2:2f:27:c1:6f:3a:
                    23:50:11:42:32:fd:21:5f:a5:f2:1c:f3:05:56:cc:
                    fc:09:bc:54:ce:1e:e4:e4:c4:13:e7:03:70:84:59:
                    f5:db:7d:e5:22:ba:1c:70:5c:d6:68:36:41:37:a8:
                    a2:27:0c:f3:2c:17:65:ce:2d:ff:49:55:47:8c:5f:
                    18:8e:b6:4f:c2:bd:81:3e:a5:c7:a3:ff:b6:72:46:
                    6b:b4:27:25:b4:ff:54:31:2e:ff:ab:42:91:36:b3:
                    e8:09:eb:a1:7c:f0:d9:c9:2d:07:30:c1:bf:e6:45:
                    e2:80:b3:c6:d1:81:db:7a:78:04:92:27:46:0d:d5:
                    eb:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B9:18:D8:47:20:AF:45:90:DE:BA:40:E3:84:6E:05:32:8E:97:F0
            X509v3 Authority Key Identifier:
                keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:f6:82:04:a0:53:8e:f4:30:e5:e0:4e:50:9a:37:cf:84:dc:
         6f:41:43:11:4b:5f:1d:0f:5d:fa:af:c0:81:4f:3e:b9:1b:1d:
         e8:55:27:fd:59:b5:cf:49:6e:92:77:da:13:3b:c8:e4:21:b0:
         f9:1c:06:ab:02:45:6b:64:6e:19:84:a1:e6:dc:f6:08:78:19:
         35:6d:f5:f4:15:4f:9f:fe:f0:52:2b:13:50:80:2e:73:82:8e:
         f2:a7:bc:32:e1:1c:32:d5:51:66:a8:00:be:ad:e3:5f:78:c4:
         33:6a:0f:db:1e:6e:96:fc:7a:b0:e5:a2:da:8d:e2:ca:4f:a5:
         f3:7f:df:ed:53:1a:d5:56:99:60:3c:48:da:d5:76:6b:0b:e4:
         a0:e9:fe:c3:ea:d7:3b:a9:da:c8:15:fb:92:ee:e1:78:60:67:
         4b:69:21:a5:3f:08:bc:cf:83:b5:ad:97:ad:c3:94:ae:0c:fe:
         c0:66:3d:44:01:a7:d6:19:2c:65:81:28:c3:5c:89:eb:d9:a1:
         86:a8:bf:0d:6d:7d:dd:1a:70:58:67:22:78:af:f2:07:ed:29:
         6d:99:6e:76:e5:b9:30:c0:2d:c0:e5:27:38:34:b0:13:ec:9f:
         50:a4:6e:1b:36:fe:54:71:db:49:fb:df:51:0f:f8:c0:4b:e0:
         20:9f:fa:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 1 20:35:36 2026 by rpki-client