Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
File:                     A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft (raw, json)
Hash identifier:          driwfnLuYnIYRWXyPqk68mNjcci7msLnaKISmgSdtt0=
Subject key identifier:   30:B1:5F:24:CE:40:26:FB:02:5A:2E:5A:71:51:C6:A2:F2:34:A5:5B
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Certificate issuer:       /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial:       0BB287994754D6CD40A363599C2C587F477F1F9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
Manifest number:          0714
Signing time:             Thu 07 May 2026 17:42:19 +0000
Manifest this update:     Thu 07 May 2026 17:37:19 +0000
Manifest next update:     Fri 08 May 2026 18:41:19 +0000
Files and hashes:         1: 352e3138312e3138342e302f32342d3234203d3e20323131333733.roa (hash: HxZ7OQY4wmmok4f1jyMFC6WkeyQaBhCRYtiYzwz8qYg=)
                          2: 38352e3230392e3232392e302f32342d3234203d3e203432383331.roa (hash: vjpMNqLq25F9up6mT05GhHQJMJ0KbktUxvDSn9v6kBA=)
                          3: 322e35392e36312e302f32342d3234203d3e203438323636.roa (hash: sgoOb4bX1m2rIZlacxTZqlmJneicsHhOxQYCb/BB8fA=)
                          4: 34352e39352e3231332e302f32342d3234203d3e20343030303339.roa (hash: XrIv1BWbF+to8I3saogND52oHBVFoDY38lWpbUFLA6o=)
                          5: 352e3138312e3138342e302f32342d3234203d3e20323132333335.roa (hash: UCQA4MebhnFRuGzYIjyz+Oaxw3thh569/39f5fjzuDM=)
                          6: 3134362e31392e33382e302f32342d3234203d3e203136323736.roa (hash: norYvgZGO2Imho4UnQcnY8UITUyuaQwpwpHqXsoPDao=)
                          7: 3139342e33312e3139352e302f32342d3234203d3e203132383236.roa (hash: dZ5pA0FTXTMIyebmvvTrXa2pwRmRVDj8qy5ZN+EkpPo=)
                          8: 38352e3230392e3233302e302f32342d3234203d3e203633393032.roa (hash: VaOxQtitcotEwDKcqVbfty4V+UnBaFXCz621Z/5UMPE=)
                          9: 34352e382e3231372e302f32342d3234203d3e20343032323938.roa (hash: kelqIGWqA6A5CmDeq94bFFXh8OyDYHhPA+ITnx16dp4=)
                          10: 322e35392e36332e302f32342d3234203d3e20383334.roa (hash: 8DqvUUgTHwg4fnhfYD2q3DFHCSCucv2RToLFRdMK/4s=)
                          11: 34352e39352e3231342e302f32342d3234203d3e20343032323134.roa (hash: IAhhGhhBpF4cl6c96AeOIUO3QUQaMO1YcC9zPWe02Zs=)
                          12: 3139342e33312e3139352e302f32342d3234203d3e203334393933.roa (hash: /RrqrRO8J+Vsp3FaP0KZwFzXiRmxrRbyseKOqWdHYpY=)
                          13: 34352e39352e3231352e302f32342d3234203d3e203631333137.roa (hash: jtw5h4s7N892mHMRX7q1v9D/8tuL7heVW+cms9i1OJM=)
                          14: 352e3138312e3138362e302f32342d3234203d3e20323036313530.roa (hash: QGg1o/UsEXwX7QWOmnciGR0lfU5zaV2UWyNlVxa/Ka8=)
                          15: 322e35392e36302e302f32342d3234203d3e203631333137.roa (hash: BBdnQvjsMGsAKdV0CMmUgkUx9rKK17g08iyDVXfqF5c=)
                          16: 34352e39352e3231322e302f32322d3232203d3e2037303239.roa (hash: b3HfoeSSJnwEFBW/P8/Hh1DNPoifdQtxChWclKR01cY=)
                          17: 34352e39352e3231322e302f32342d3234203d3e20323039353534.roa (hash: 9IsmuufWVjFLEbYLLcJg7Yp7+j5DqB4kK41/uY19nMQ=)
                          18: 322e35392e36322e302f32342d3234203d3e20313432313131.roa (hash: c23s9WCLyWR8C29b7voS/R0hWodZcVrxRN5kAioljng=)
                          19: 34352e382e3231392e302f32342d3234203d3e2039303039.roa (hash: 0zn1M6udTfOcCIE/Cifu6WDNTkQzSgcujlgX6HE4/sQ=)
                          20: 3134362e31392e33382e302f32342d3234203d3e20313939363534.roa (hash: KCPy6uAOav6R+jmrUTgTpbZkeje3mnKOXa6FXDMEhhE=)
                          21: 3139342e33312e3139372e302f32342d3234203d3e203432383331.roa (hash: KMAsq44hIBrFB+eRrhhDssa2B+eAZmGDL1feRYL/R5o=)
                          22: 322e35392e36302e302f32342d3234203d3e20323132323338.roa (hash: siAtwvTAZM+LlD3wdnarFDX9+Ycc62d+jei/mDFB4w0=)
                          23: 322e35392e36322e302f32342d3234203d3e203633303233.roa (hash: /Ku1phd3ouPkx4ZDyzwkq+GI0U8NGNl14wVu1lc6q1k=)
                          24: 3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa (hash: 1cwuvx0f/bXZ/DwexRmaaQu0tTmkULuIbOfrQVnX4ao=)
                          25: 34352e39352e3231352e302f32342d3234203d3e203239383032.roa (hash: Q1OlQJwADffmDxnZKj7bvhSo1kOL5aXrHpMtVtZFtuQ=)
                          26: 34352e39352e3231342e302f32342d3234203d3e20313938323530.roa (hash: cWZ4izllTaa4CjT3fbEMgCbmIhf6LWTGafANc9j4YVM=)
                          27: 34352e382e3231382e302f32342d3234203d3e20323132333834.roa (hash: tj3yrp12EwOeT1ZEKtZIphksitaxnh11pc39cLh8XvY=)
                          28: 352e3138312e3138372e302f32342d3234203d3e20323135373033.roa (hash: EJ6RmJBNoUg0c9WoYw2Ja1OnADVswQoLG/EoG0ZGnFE=)
                          29: 38352e3230392e3232382e302f32342d3234203d3e203230343733.roa (hash: 1VJONXDxJnPHUDzUm7XiO/UF/aXr3KYuVDC6vKiNDOc=)
                          30: 34352e382e3231362e302f32342d3234203d3e20323131343430.roa (hash: e8OtHDGrOLuThDlvGfoczJuukmiEX6Dq6BRiXUAdwSs=)
                          31: 38352e3230392e3233312e302f32342d3234203d3e203135343430.roa (hash: 5P7OofszcYzyRXLoqtlNETBM0YQubML8godGGz1Zc2U=)
                          32: 34352e382e3231362e302f32342d3234203d3e20323132333834.roa (hash: a81beBwcXvnxQQXt8vP0FnYxX0zBkKmQl4zg0OFOfqc=)
                          33: 3139342e33312e3139352e302f32342d3234203d3e20323133363638.roa (hash: pCuQNjK5vxSYZwtC7uzq87OexUIwDcw+LKWQti/Nk9E=)
                          34: 352e3138312e3138352e302f32342d3234203d3e20323131333733.roa (hash: 2IzUCrtAIyuz9E3rWXqOgG5uo4suNn7bGWeOLhfOKvg=)
                          35: 3139342e33312e3139362e302f32342d3234203d3e20313939373337.roa (hash: qc608O9yB+6tqsDBDhoINI3nGVPIPfhQ49+yA4p+itg=)
                          36: 38352e3230392e3233302e302f32342d3234203d3e203138313836.roa (hash: wLYhvbcU/etiFzebOUkFMR3b0g4xeh82nSHNvUEIAsY=)
                          37: 352e3138312e3138352e302f32342d3234203d3e20323132333834.roa (hash: PkrjX5lEKZeku6HbTZFd/bgZgjS0Ra0J+FcQrImRmsQ=)
                          38: 3139342e33312e3139362e302f32342d3234203d3e20323030303137.roa (hash: mYDAbrfXE2SMRwMvSEq6zRWmL22fizr0hTNDEPKCMHw=)
                          39: 38352e3230392e3233302e302f32342d3234203d3e20313430323234.roa (hash: l2LIzKinG0BfxQ8d6ejTKmtFPNdSKUK9y0vPJ8skqFk=)
                          40: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl (hash: KiSvXS8Qofr12gP4w6IrsEWwQaVKcfsCM7jRtX5+RfE=)
                          41: 3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa (hash: 1EdzND/a/KltqRlIJaQnMPD7XH7CVfxCNY9eyK9ocYU=)
                          42: 36322e332e32302e302f32342d3234203d3e20323132393830.roa (hash: f/GL2G2QMX1DeHxo/IzFzuj9b3uiMiTDtg1wGwI4Lb8=)
                          43: 3139342e33312e3139342e302f32342d3234203d3e203339333638.roa (hash: qMisc8M9fAgiB1zw7/Tn0y61M2FDJt3sqCMkzKcplhA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 May 2026 18:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:b2:87:99:47:54:d6:cd:40:a3:63:59:9c:2c:58:7f:47:7f:1f:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
        Validity
            Not Before: May  7 17:37:19 2026 GMT
            Not After : May  8 18:41:19 2026 GMT
        Subject: CN=30B15F24CE4026FB025A2E5A7151C6A2F234A55B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6a:87:b5:f4:cd:26:a3:4d:18:2d:31:84:7c:
                    33:a6:99:6e:2e:16:51:04:c7:60:c4:30:d5:43:f5:
                    36:6d:ed:64:91:59:36:0b:7c:d5:c9:88:37:30:80:
                    23:0a:07:50:a1:39:1e:8e:a9:75:d5:45:69:ed:43:
                    23:ba:fd:7a:70:82:6a:84:d0:c5:d8:03:00:65:0b:
                    aa:f3:34:d3:1e:e0:46:15:1d:a5:a0:22:18:82:62:
                    69:dd:76:d1:12:f6:49:bf:96:9e:ab:33:62:ba:7a:
                    66:74:ac:29:94:f5:ea:98:84:16:dd:8c:0c:bf:84:
                    44:5d:66:05:1e:87:13:38:47:9f:81:75:ea:23:39:
                    f4:b2:38:2e:ce:d2:a5:71:f4:5e:d1:3d:ad:92:e5:
                    ab:f1:6e:29:42:f8:97:7e:42:d0:83:2f:a5:91:96:
                    ff:70:2b:c7:ea:01:c7:40:cc:a0:e8:78:33:9e:62:
                    7c:9c:1f:2b:d5:93:cc:75:9e:ab:86:a4:99:ca:15:
                    cd:d9:01:39:ae:9b:23:67:c7:9d:1b:35:6b:88:f9:
                    e9:18:7f:91:84:28:2d:c0:9b:82:32:d8:28:26:30:
                    03:cb:f1:7b:c9:48:55:4b:95:a1:80:39:f9:d7:2f:
                    11:34:c4:32:08:27:ad:fa:ff:65:7a:ba:96:0f:37:
                    62:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:B1:5F:24:CE:40:26:FB:02:5A:2E:5A:71:51:C6:A2:F2:34:A5:5B
            X509v3 Authority Key Identifier:
                keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:1c:65:58:01:52:52:fa:00:43:a5:0d:b6:c4:92:91:ee:08:
         0f:2f:49:02:4e:af:4a:2f:a8:28:21:4e:51:b4:fb:af:0c:8c:
         51:98:00:ab:1c:d0:e2:98:f0:fd:19:0e:4b:c4:19:eb:07:a5:
         a7:04:2f:31:83:aa:e4:4f:0e:c6:d9:b3:a5:46:45:41:02:62:
         18:03:13:c2:7c:4c:9a:18:26:69:e6:8a:8b:93:78:15:46:25:
         c3:1d:09:23:80:11:19:0e:85:ae:90:fd:4d:07:ee:b7:c7:c9:
         48:9e:83:ec:50:ec:e1:d0:82:de:83:b4:ca:93:ab:15:0f:fe:
         fa:3e:a0:30:c0:fa:2d:a3:3b:e2:34:b4:f8:2a:4e:33:4d:58:
         f8:2b:36:d6:a0:e1:85:c0:f1:d0:50:14:0f:2e:ab:31:e5:31:
         18:9d:f3:86:fa:39:75:0f:6e:ba:7e:ed:50:72:9c:8c:5b:4e:
         01:cf:5a:b6:02:22:31:0f:f5:62:bf:fa:87:af:fa:f7:db:4b:
         39:0d:0a:6f:38:6e:9c:18:de:73:9a:09:dc:86:01:9c:b8:ff:
         d8:b5:98:c3:b7:e3:bd:55:30:0f:14:f3:25:4a:b2:55:11:07:
         c8:e2:4b:50:4d:db:75:3d:bb:b2:63:12:c3:da:24:d9:99:0b:
         79:2f:97:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 05:23:47 2026 by rpki-client