Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
File:                     A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft (raw, json)
Hash identifier:          RUVsNKq3dUNzLlAg5r0ZmYmuSNpgGfRS/zN6Wh3xm1g=
Subject key identifier:   2C:AE:7F:6D:00:4E:75:34:DC:AF:A1:77:E3:A8:AB:47:41:C1:87:17
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Certificate issuer:       /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial:       6A1F0A46E84E5C8ECCB85E9D8AB2135E0D547D4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
Manifest number:          07AE
Signing time:             Mon 24 Aug 2026 00:18:08 +0000
Manifest this update:     Mon 24 Aug 2026 00:13:08 +0000
Manifest next update:     Tue 25 Aug 2026 01:44:08 +0000
Files and hashes:         1: 3134362e31392e33382e302f32342d3234203d3e20313939363534.roa (hash: KCPy6uAOav6R+jmrUTgTpbZkeje3mnKOXa6FXDMEhhE=)
                          2: 3134362e31392e33382e302f32342d3234203d3e203136323736.roa (hash: norYvgZGO2Imho4UnQcnY8UITUyuaQwpwpHqXsoPDao=)
                          3: 34352e39352e3231342e302f32342d3234203d3e20383334.roa (hash: 4X6EQaqJTKhKvN3TJ9GVIsbRzqsZ4tWpY3NIa3KMmkU=)
                          4: 38352e3230392e3232382e302f32342d3234203d3e203230343733.roa (hash: 1VJONXDxJnPHUDzUm7XiO/UF/aXr3KYuVDC6vKiNDOc=)
                          5: 34352e382e3231372e302f32342d3234203d3e20383334.roa (hash: lxgDM+2IpOwskjSyLj/88e3oNG4qGZLEbcXn/wQBWJ8=)
                          6: 34352e39352e3231322e302f32322d3232203d3e2037303239.roa (hash: b3HfoeSSJnwEFBW/P8/Hh1DNPoifdQtxChWclKR01cY=)
                          7: 322e35392e36302e302f32342d3234203d3e20383334.roa (hash: 6oFhbwS32nNztM+MkZFvFVF8FZ6win/Ti/cCKIVdiGM=)
                          8: 34352e39352e3231322e302f32342d3234203d3e20323039353534.roa (hash: 9IsmuufWVjFLEbYLLcJg7Yp7+j5DqB4kK41/uY19nMQ=)
                          9: 352e3138312e3138342e302f32342d3234203d3e20323132363039.roa (hash: 6u+5ELEJLeXXB4+8NHbO0dG4EQaKYkOwI0K9os45OcQ=)
                          10: 3139342e33312e3139362e302f32342d3234203d3e20313939373337.roa (hash: qc608O9yB+6tqsDBDhoINI3nGVPIPfhQ49+yA4p+itg=)
                          11: 3139342e33312e3139362e302f32342d3234203d3e20323030303137.roa (hash: mYDAbrfXE2SMRwMvSEq6zRWmL22fizr0hTNDEPKCMHw=)
                          12: 352e3138312e3138352e302f32342d3234203d3e20323131333733.roa (hash: tIeHJEF41zbDRQ8KbMBp/GsLGj1RgNxno+RElBJQNMw=)
                          13: 34352e39352e3231352e302f32342d3234203d3e203239383032.roa (hash: kUgYR/Kxqx56Hy24JaK1nIBftzOVeuZOaTeGulm2cfI=)
                          14: 3139342e33312e3139372e302f32342d3234203d3e203432383331.roa (hash: DVV+/2t2q4F/UwYf2BwA2+sNCvS3U0sf946czL0uGuw=)
                          15: 3139342e33312e3139342e302f32342d3234203d3e203339333638.roa (hash: qMisc8M9fAgiB1zw7/Tn0y61M2FDJt3sqCMkzKcplhA=)
                          16: 3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa (hash: /pttCsH3EqNiBOKmYU2SEK0bSx+Q89rOic38LmDTjfU=)
                          17: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl (hash: 8LFON7pk0u0Yq8P7Fw0FGc+/sHgynv8JQCrsNNMEukk=)
                          18: 3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa (hash: X70d0T4GWN6rC/5/Z7B3IR7A4QtMvYWM6LmuwXwdnH0=)
                          19: 3139342e33312e3139352e302f32342d3234203d3e20323133363638.roa (hash: pCuQNjK5vxSYZwtC7uzq87OexUIwDcw+LKWQti/Nk9E=)
                          20: 38352e3230392e3233312e302f32342d3234203d3e203135343430.roa (hash: 7ez4FNDsc2VXRnHlSjtzOmyRSh/gDET/tzdpB8U6faI=)
                          21: 34352e382e3231392e302f32342d3234203d3e2039303039.roa (hash: VVBKfj3oX4V4HqDYQe/w0vIXEHmTptmcb2dA6LN81Ys=)
                          22: 34352e382e3231362e302f32342d3234203d3e20323132333834.roa (hash: a81beBwcXvnxQQXt8vP0FnYxX0zBkKmQl4zg0OFOfqc=)
                          23: 352e3138312e3138362e302f32342d3234203d3e20323036313530.roa (hash: QGg1o/UsEXwX7QWOmnciGR0lfU5zaV2UWyNlVxa/Ka8=)
                          24: 36322e332e32302e302f32342d3234203d3e20323132393830.roa (hash: f/GL2G2QMX1DeHxo/IzFzuj9b3uiMiTDtg1wGwI4Lb8=)
                          25: 3139342e33312e3139352e302f32342d3234203d3e203132383236.roa (hash: dZ5pA0FTXTMIyebmvvTrXa2pwRmRVDj8qy5ZN+EkpPo=)
                          26: 34352e39352e3231352e302f32342d3234203d3e203631333137.roa (hash: Set9jSjJnZk4FzDhKsQCeyo0iC0093IITgk8mXGFRYE=)
                          27: 352e3138312e3138342e302f32342d3234203d3e20323131333733.roa (hash: HxZ7OQY4wmmok4f1jyMFC6WkeyQaBhCRYtiYzwz8qYg=)
                          28: 38352e3230392e3233302e302f32342d3234203d3e203138313836.roa (hash: wLYhvbcU/etiFzebOUkFMR3b0g4xeh82nSHNvUEIAsY=)
                          29: 34352e382e3231362e302f32342d3234203d3e20323131343430.roa (hash: e8OtHDGrOLuThDlvGfoczJuukmiEX6Dq6BRiXUAdwSs=)
                          30: 38352e3230392e3232392e302f32342d3234203d3e203432383331.roa (hash: vjpMNqLq25F9up6mT05GhHQJMJ0KbktUxvDSn9v6kBA=)
                          31: 38352e3230392e3233302e302f32342d3234203d3e203633393032.roa (hash: VaOxQtitcotEwDKcqVbfty4V+UnBaFXCz621Z/5UMPE=)
                          32: 352e3138312e3138352e302f32342d3234203d3e20323132333834.roa (hash: PkrjX5lEKZeku6HbTZFd/bgZgjS0Ra0J+FcQrImRmsQ=)
                          33: 352e3138312e3138372e302f32342d3234203d3e20323135373033.roa (hash: EJ6RmJBNoUg0c9WoYw2Ja1OnADVswQoLG/EoG0ZGnFE=)
                          34: 322e35392e36322e302f32332d3234203d3e20383334.roa (hash: U8K8ByMMhjORRMnN107C0qHzPl2EMue6t1DEVbbMMv4=)
                          35: 3139342e33312e3139352e302f32342d3234203d3e203334393933.roa (hash: /RrqrRO8J+Vsp3FaP0KZwFzXiRmxrRbyseKOqWdHYpY=)
                          36: 352e3138312e3138342e302f32342d3234203d3e20323132333335.roa (hash: UCQA4MebhnFRuGzYIjyz+Oaxw3thh569/39f5fjzuDM=)
                          37: 34352e382e3231382e302f32342d3234203d3e20323132333834.roa (hash: tj3yrp12EwOeT1ZEKtZIphksitaxnh11pc39cLh8XvY=)
                          38: 34352e39352e3231332e302f32342d3234203d3e20343030303339.roa (hash: J1EW+hHtD32FPQGp7ofq9HLTlopn5evJHbexaxjWVK0=)
                          39: 322e35392e36312e302f32342d3234203d3e203438323636.roa (hash: sgoOb4bX1m2rIZlacxTZqlmJneicsHhOxQYCb/BB8fA=)
                          40: 38352e3230392e3233302e302f32342d3234203d3e20313430323234.roa (hash: l2LIzKinG0BfxQ8d6ejTKmtFPNdSKUK9y0vPJ8skqFk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Aug 2026 01:44:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:1f:0a:46:e8:4e:5c:8e:cc:b8:5e:9d:8a:b2:13:5e:0d:54:7d:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
        Validity
            Not Before: Aug 24 00:13:08 2026 GMT
            Not After : Aug 25 01:44:08 2026 GMT
        Subject: CN=2CAE7F6D004E7534DCAFA177E3A8AB4741C18717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:67:b5:c1:8a:c1:03:02:49:45:f5:b0:5b:ba:
                    a2:6b:45:f7:35:17:06:62:35:4e:80:3c:c2:cb:a7:
                    72:48:b4:d7:45:43:1e:cd:e7:06:f8:f3:7d:74:14:
                    f6:c5:be:7a:33:06:9e:e7:10:7e:45:64:8f:2d:c2:
                    45:eb:16:45:e2:86:07:15:cc:98:ee:ad:f0:30:11:
                    cb:2e:12:e8:20:c6:68:f2:15:94:a6:45:d4:32:93:
                    5f:27:e8:98:92:f1:a1:97:f8:9d:47:af:49:11:c5:
                    db:90:f1:ee:89:f9:ea:cc:f2:06:7c:38:a9:ee:3a:
                    09:55:06:20:22:43:62:76:34:f0:20:d5:b5:d7:9b:
                    ac:bc:cc:81:20:50:c1:e0:7d:2b:01:22:0d:57:d5:
                    08:47:58:36:fa:0f:58:a2:fd:4a:b3:0d:91:c9:a7:
                    c6:86:9b:73:7d:d6:b4:2c:12:90:c6:92:d2:ba:ab:
                    d1:29:d1:8c:1d:5c:2b:6e:00:1c:91:ff:c4:50:6a:
                    fd:95:f7:cd:b7:0d:de:9d:a9:aa:20:26:27:02:05:
                    1c:eb:54:79:c2:22:c5:21:54:df:06:1d:98:d1:40:
                    57:14:53:9c:7f:61:3e:c6:a2:e6:74:66:36:bd:86:
                    92:e3:1f:4f:86:1b:24:c3:c7:da:0b:9e:df:0c:09:
                    12:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:AE:7F:6D:00:4E:75:34:DC:AF:A1:77:E3:A8:AB:47:41:C1:87:17
            X509v3 Authority Key Identifier:
                keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:d2:b2:ad:d2:99:31:6f:72:1f:49:80:0b:37:c4:a7:3c:c5:
         7c:6e:c6:50:64:6f:55:7a:c7:ca:e3:9c:9f:36:91:d1:89:25:
         c6:7a:3f:6a:da:11:c5:78:1d:98:f5:98:88:a9:4a:1c:9c:b9:
         5a:02:e0:cd:3e:28:ed:a8:3b:55:2b:f7:2f:18:e2:83:98:3d:
         83:8c:e8:c0:3b:47:b2:59:0c:f1:62:54:6a:c0:0e:17:c4:a7:
         e0:ed:27:49:a0:26:2b:08:cf:a6:f8:c5:cd:d3:53:44:14:f3:
         6e:9d:83:ab:03:4a:3a:37:d1:e1:95:d2:fc:00:b1:c9:16:c4:
         72:93:f3:29:21:c2:6b:66:51:9b:6c:b2:87:e3:20:a6:13:8a:
         58:41:d4:42:e3:dc:79:92:30:11:fc:0a:c5:6d:af:31:5b:e8:
         f5:7b:b3:b8:54:2c:0e:e1:d6:f9:a4:46:bd:46:20:32:c6:02:
         a3:17:3b:47:ad:45:8c:7b:e8:58:a0:eb:c2:d8:ce:1f:68:c8:
         31:f4:2b:0b:82:68:08:75:fa:a9:e5:b3:aa:4b:4c:91:55:3b:
         6f:22:67:d6:ce:94:a3:60:24:ad:5a:f7:12:63:5a:53:3b:a4:
         e8:2b:81:80:f8:65:1f:4f:f4:c7:7e:80:4c:e1:b7:ba:1c:34:
         88:ed:b3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 13:22:49 2026 by rpki-client