Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
File:                     A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft (raw, json)
Hash identifier:          Dyb7KCuorktQKuJe9IyqPYfyRweDNtZ+jZR3ORCle/o=
Subject key identifier:   40:D4:5A:5A:97:5F:22:06:D1:8B:DE:4F:2C:7C:B5:F6:E5:B9:84:4E
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Certificate issuer:       /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial:       67D52AC7FC84689CF6345728017F1B9BFBE099CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
Manifest number:          073F
Signing time:             Sun 07 Jun 2026 13:41:39 +0000
Manifest this update:     Sun 07 Jun 2026 13:36:39 +0000
Manifest next update:     Mon 08 Jun 2026 13:49:39 +0000
Files and hashes:         1: 322e35392e36322e302f32342d3234203d3e20313432313131.roa (hash: MsiGjvSieUCa/T21XIqsNppHCh9EmLMqXVv3uxcO8n0=)
                          2: 352e3138312e3138342e302f32342d3234203d3e20323132333335.roa (hash: UCQA4MebhnFRuGzYIjyz+Oaxw3thh569/39f5fjzuDM=)
                          3: 3134362e31392e33382e302f32342d3234203d3e203136323736.roa (hash: norYvgZGO2Imho4UnQcnY8UITUyuaQwpwpHqXsoPDao=)
                          4: 3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa (hash: /pttCsH3EqNiBOKmYU2SEK0bSx+Q89rOic38LmDTjfU=)
                          5: 3139342e33312e3139352e302f32342d3234203d3e203132383236.roa (hash: dZ5pA0FTXTMIyebmvvTrXa2pwRmRVDj8qy5ZN+EkpPo=)
                          6: 34352e39352e3231342e302f32342d3234203d3e20313938323530.roa (hash: cWZ4izllTaa4CjT3fbEMgCbmIhf6LWTGafANc9j4YVM=)
                          7: 34352e39352e3231322e302f32342d3234203d3e20323039353534.roa (hash: 9IsmuufWVjFLEbYLLcJg7Yp7+j5DqB4kK41/uY19nMQ=)
                          8: 38352e3230392e3233302e302f32342d3234203d3e203138313836.roa (hash: wLYhvbcU/etiFzebOUkFMR3b0g4xeh82nSHNvUEIAsY=)
                          9: 3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa (hash: X70d0T4GWN6rC/5/Z7B3IR7A4QtMvYWM6LmuwXwdnH0=)
                          10: 352e3138312e3138352e302f32342d3234203d3e20323131333733.roa (hash: tIeHJEF41zbDRQ8KbMBp/GsLGj1RgNxno+RElBJQNMw=)
                          11: 352e3138312e3138362e302f32342d3234203d3e20323036313530.roa (hash: QGg1o/UsEXwX7QWOmnciGR0lfU5zaV2UWyNlVxa/Ka8=)
                          12: 34352e382e3231362e302f32342d3234203d3e20323131343430.roa (hash: e8OtHDGrOLuThDlvGfoczJuukmiEX6Dq6BRiXUAdwSs=)
                          13: 38352e3230392e3232382e302f32342d3234203d3e203230343733.roa (hash: 1VJONXDxJnPHUDzUm7XiO/UF/aXr3KYuVDC6vKiNDOc=)
                          14: 322e35392e36322e302f32342d3234203d3e203633303233.roa (hash: UYplWrPuNpBK4+VRoAMeNfrXsCP+FyebbT8k9JdoYnw=)
                          15: 36322e332e32302e302f32342d3234203d3e20323132393830.roa (hash: f/GL2G2QMX1DeHxo/IzFzuj9b3uiMiTDtg1wGwI4Lb8=)
                          16: 34352e39352e3231322e302f32322d3232203d3e2037303239.roa (hash: b3HfoeSSJnwEFBW/P8/Hh1DNPoifdQtxChWclKR01cY=)
                          17: 3139342e33312e3139362e302f32342d3234203d3e20323030303137.roa (hash: mYDAbrfXE2SMRwMvSEq6zRWmL22fizr0hTNDEPKCMHw=)
                          18: 322e35392e36312e302f32342d3234203d3e203438323636.roa (hash: sgoOb4bX1m2rIZlacxTZqlmJneicsHhOxQYCb/BB8fA=)
                          19: 34352e39352e3231342e302f32342d3234203d3e20343032323134.roa (hash: IAhhGhhBpF4cl6c96AeOIUO3QUQaMO1YcC9zPWe02Zs=)
                          20: 38352e3230392e3233302e302f32342d3234203d3e20313430323234.roa (hash: l2LIzKinG0BfxQ8d6ejTKmtFPNdSKUK9y0vPJ8skqFk=)
                          21: 3139342e33312e3139342e302f32342d3234203d3e203339333638.roa (hash: qMisc8M9fAgiB1zw7/Tn0y61M2FDJt3sqCMkzKcplhA=)
                          22: 352e3138312e3138352e302f32342d3234203d3e20323132333834.roa (hash: PkrjX5lEKZeku6HbTZFd/bgZgjS0Ra0J+FcQrImRmsQ=)
                          23: 3139342e33312e3139352e302f32342d3234203d3e20323133363638.roa (hash: pCuQNjK5vxSYZwtC7uzq87OexUIwDcw+LKWQti/Nk9E=)
                          24: 34352e382e3231362e302f32342d3234203d3e20323132333834.roa (hash: a81beBwcXvnxQQXt8vP0FnYxX0zBkKmQl4zg0OFOfqc=)
                          25: 3139342e33312e3139352e302f32342d3234203d3e203334393933.roa (hash: /RrqrRO8J+Vsp3FaP0KZwFzXiRmxrRbyseKOqWdHYpY=)
                          26: 34352e39352e3231352e302f32342d3234203d3e203631333137.roa (hash: jtw5h4s7N892mHMRX7q1v9D/8tuL7heVW+cms9i1OJM=)
                          27: 3139342e33312e3139372e302f32342d3234203d3e203432383331.roa (hash: KMAsq44hIBrFB+eRrhhDssa2B+eAZmGDL1feRYL/R5o=)
                          28: 34352e39352e3231352e302f32342d3234203d3e203239383032.roa (hash: Q1OlQJwADffmDxnZKj7bvhSo1kOL5aXrHpMtVtZFtuQ=)
                          29: 352e3138312e3138372e302f32342d3234203d3e20323135373033.roa (hash: EJ6RmJBNoUg0c9WoYw2Ja1OnADVswQoLG/EoG0ZGnFE=)
                          30: 34352e39352e3231332e302f32342d3234203d3e20343030303339.roa (hash: XrIv1BWbF+to8I3saogND52oHBVFoDY38lWpbUFLA6o=)
                          31: 3134362e31392e33382e302f32342d3234203d3e20313939363534.roa (hash: KCPy6uAOav6R+jmrUTgTpbZkeje3mnKOXa6FXDMEhhE=)
                          32: 34352e382e3231392e302f32342d3234203d3e2039303039.roa (hash: 0zn1M6udTfOcCIE/Cifu6WDNTkQzSgcujlgX6HE4/sQ=)
                          33: 34352e382e3231382e302f32342d3234203d3e20323132333834.roa (hash: tj3yrp12EwOeT1ZEKtZIphksitaxnh11pc39cLh8XvY=)
                          34: 322e35392e36302e302f32342d3234203d3e20383334.roa (hash: 6oFhbwS32nNztM+MkZFvFVF8FZ6win/Ti/cCKIVdiGM=)
                          35: 38352e3230392e3233302e302f32342d3234203d3e203633393032.roa (hash: VaOxQtitcotEwDKcqVbfty4V+UnBaFXCz621Z/5UMPE=)
                          36: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl (hash: Y9PoOMvtUQbpaz2sO1d3Rv250ThTuxh6rO77mLSsVso=)
                          37: 34352e382e3231372e302f32342d3234203d3e20343032323938.roa (hash: kelqIGWqA6A5CmDeq94bFFXh8OyDYHhPA+ITnx16dp4=)
                          38: 3139342e33312e3139362e302f32342d3234203d3e20313939373337.roa (hash: qc608O9yB+6tqsDBDhoINI3nGVPIPfhQ49+yA4p+itg=)
                          39: 38352e3230392e3232392e302f32342d3234203d3e203432383331.roa (hash: vjpMNqLq25F9up6mT05GhHQJMJ0KbktUxvDSn9v6kBA=)
                          40: 322e35392e36332e302f32342d3234203d3e20383334.roa (hash: 8DqvUUgTHwg4fnhfYD2q3DFHCSCucv2RToLFRdMK/4s=)
                          41: 352e3138312e3138342e302f32342d3234203d3e20323131333733.roa (hash: HxZ7OQY4wmmok4f1jyMFC6WkeyQaBhCRYtiYzwz8qYg=)
                          42: 38352e3230392e3233312e302f32342d3234203d3e203135343430.roa (hash: 5P7OofszcYzyRXLoqtlNETBM0YQubML8godGGz1Zc2U=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Jun 2026 13:49:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:d5:2a:c7:fc:84:68:9c:f6:34:57:28:01:7f:1b:9b:fb:e0:99:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
        Validity
            Not Before: Jun  7 13:36:39 2026 GMT
            Not After : Jun  8 13:49:39 2026 GMT
        Subject: CN=40D45A5A975F2206D18BDE4F2C7CB5F6E5B9844E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9f:51:e8:fd:50:d9:6f:e5:df:cd:a9:f9:bd:
                    91:19:59:bd:8c:b7:45:2d:ca:d6:9a:79:36:c8:59:
                    f5:6e:65:f3:67:d6:a9:42:f2:d2:69:c4:fa:f1:57:
                    87:2d:b8:d5:d3:eb:56:a6:6d:26:87:45:f7:44:18:
                    af:5f:d6:99:98:cd:47:aa:3b:7a:5f:69:05:6b:32:
                    25:e4:48:d5:f9:95:23:b3:9c:29:2f:86:e8:6d:87:
                    e4:89:ef:b6:8d:7a:56:f2:57:9a:a5:61:76:09:6f:
                    f9:46:91:e9:07:23:fc:b0:cc:df:f0:f2:ac:3e:43:
                    bc:95:fb:6c:5b:52:2c:20:1f:97:8b:de:f5:c5:20:
                    5c:bc:d5:ba:32:f4:b4:66:1a:6a:3d:b1:9d:7e:af:
                    ab:09:8b:b4:29:e6:d1:9b:2c:ca:6e:67:00:0f:b9:
                    5c:ff:85:f2:28:75:be:58:c0:17:18:d8:7d:43:7d:
                    68:fc:c8:20:ce:f2:31:7b:c7:fc:f8:e8:7d:49:1a:
                    8c:cd:07:5d:17:3d:37:a6:03:5b:99:0a:8b:7c:fa:
                    a1:28:94:23:e5:ca:58:c7:a7:19:bb:83:07:b7:3a:
                    d9:3c:5e:28:0c:40:a6:1e:aa:2d:ab:77:64:60:80:
                    48:3c:07:7f:a4:51:db:c0:da:20:0c:46:bb:fa:d8:
                    3c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:D4:5A:5A:97:5F:22:06:D1:8B:DE:4F:2C:7C:B5:F6:E5:B9:84:4E
            X509v3 Authority Key Identifier:
                keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:74:30:cd:4d:3f:1d:16:86:1e:ea:3c:2d:9a:7e:6a:7f:ed:
         37:36:0d:08:38:15:3c:e8:c1:df:26:32:11:e1:fc:7f:be:39:
         2d:f7:0e:1d:2a:98:c4:8f:ee:9d:43:22:a6:92:60:d4:53:8a:
         95:c7:3f:18:b6:1d:50:04:03:e3:11:6c:73:c0:fd:d4:aa:b7:
         81:f5:f4:f6:88:17:47:74:20:64:78:78:b3:7f:7c:ec:59:5e:
         dd:17:c9:37:58:75:2d:e2:5e:27:a9:be:fa:c4:9d:72:a8:c8:
         8f:8d:1c:43:9a:3c:b5:2f:01:ee:e1:56:fe:11:22:f3:7c:9a:
         e8:63:a9:98:78:45:27:51:04:bb:bf:af:63:a2:31:a0:a4:d8:
         68:48:11:8b:3a:fc:c2:85:d7:37:fc:13:ff:87:fb:fd:6c:11:
         25:60:c9:d5:db:99:c1:97:d8:0d:81:4a:49:88:42:7d:04:22:
         73:46:0c:bf:85:b6:87:3d:6c:a1:c3:d1:58:e7:e5:aa:b0:bf:
         c5:75:b0:c0:3a:0f:55:5a:db:60:c3:3f:e6:df:69:c4:a1:9f:
         f3:1f:ef:33:e7:7c:6e:1f:43:51:c1:db:d4:54:8e:59:46:83:
         73:2d:03:9b:ed:5a:51:c1:fe:23:88:23:f2:c7:cb:c9:65:c2:
         69:ee:91:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 8 00:06:03 2026 by rpki-client