Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
File:                     A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft (raw, json)
Hash identifier:          KtqS4BGeqTZqiMe9qelw/MzXkP6UirbpsFwOcWnGOYI=
Subject key identifier:   45:B4:37:AB:DC:27:D1:B9:B9:E7:FC:BA:48:0A:AD:E6:AB:55:C9:FD
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Certificate issuer:       /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial:       1A88B20ADD5B36BB41FAA5012434EF899B30B9AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
Manifest number:          054A
Signing time:             Tue 01 Jul 2025 13:14:24 +0000
Manifest this update:     Tue 01 Jul 2025 13:09:24 +0000
Manifest next update:     Wed 02 Jul 2025 15:53:24 +0000
Files and hashes:         1: 38352e3230392e3232392e302f32342d3234203d3e20383334.roa (hash: Vz5JKMXsuq4dM9WXBkKEYV/7pFbyG3pvLjRS9Y02R/M=)
                          2: 34352e39352e3231322e302f32322d3232203d3e2037303239.roa (hash: wXll8iGOq5bo/V4iKTWa0gWLbXOr0lpoVBYORUbUhI0=)
                          3: 38352e3230392e3233302e302f32342d3234203d3e20313430323234.roa (hash: X9S/vAQJZJ3+zexclWqp51kmLLKozc6jAta0ZYx43Ns=)
                          4: 34352e39352e3231342e302f32342d3234203d3e203434353437.roa (hash: 4mA1gqLsHB6B1P8mI+JnCzpqXJzdsvy8YAE1F7eD96c=)
                          5: 36322e332e32302e302f32342d3234203d3e2039333034.roa (hash: 753vkBqDOJEpN/a5gmm4zhX9VKR3lQ+josL1BYJMcL8=)
                          6: 34352e382e3231392e302f32342d3234203d3e2039303039.roa (hash: 0tQfil3TCFdk5LEcr0D0xtOoBgJdLwmHivVySWFI/b8=)
                          7: 38352e3230392e3233302e302f32342d3234203d3e203138313836.roa (hash: +OSq4m/6RpxEZih63506Gv6cOkBhW+YglqTPEKg/ZcM=)
                          8: 352e3138312e3138342e302f32342d3234203d3e20323131333733.roa (hash: tJ6A7U51n+GmIhk14F2miBqIQAmoLzM8TwWGKyDUw/Q=)
                          9: 34352e382e3231372e302f32342d3234203d3e20323136303232.roa (hash: 8eRvRykZqahsRM0VQoPLCYYNfC1yyS358fE8muRhEDA=)
                          10: 38352e3230392e3232382e302f32342d3234203d3e203230343733.roa (hash: LvALS0QzJUIn2y2aM1WJBNeefzd38B8yBzedKpN4nB8=)
                          11: 34352e382e3231362e302f32342d3234203d3e20323132333834.roa (hash: A1j+LbNuBb8MeFvlQDvvVkVer3lHzQ8b3CPtY22jros=)
                          12: 3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa (hash: 1cwuvx0f/bXZ/DwexRmaaQu0tTmkULuIbOfrQVnX4ao=)
                          13: 3139342e33312e3139352e302f32342d3234203d3e203132383236.roa (hash: Hiowcu87+rnRP4VBm949hK9/XoAe1JP45hqg/KNcyVc=)
                          14: 3134362e31392e33382e302f32342d3234203d3e20313939363534.roa (hash: tMu2dDNgxRe+VDjoQWDh2D5B14b9X3sh+JRsGfPn8q4=)
                          15: 322e35392e36302e302f32342d3234203d3e203631333137.roa (hash: q2CusaPkf+9tq5tpeWHdsbDXlriozRiwrVa0ak4+VcM=)
                          16: 38352e3230392e3233312e302f32342d3234203d3e203135343430.roa (hash: cUer1fFgoUaMXBv/Ofy3VHFv8QPdEE9BGuKF+6jEGKA=)
                          17: 34352e382e3231382e302f32342d3234203d3e20323132333834.roa (hash: fFoVzPmBBS3RRm+U3RPtjG4VEvF1de7uQ6FGaPF9XH0=)
                          18: 34352e39352e3231352e302f32342d3234203d3e203631333137.roa (hash: 1rledH/nQm8w0NijGoGbm37JgiwE6dNG9uQzsEzjcaQ=)
                          19: 322e35392e36302e302f32342d3234203d3e20323132323338.roa (hash: hZ11O4/GfIQ3ZyUgAuxIn+0GkFLCBYYNN1OfZIqVDJk=)
                          20: 352e3138312e3138352e302f32342d3234203d3e20323131333733.roa (hash: 2IzUCrtAIyuz9E3rWXqOgG5uo4suNn7bGWeOLhfOKvg=)
                          21: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl (hash: SZKDEVgICfaGGG+Gbz+y6jnihPTtyVyJ8RVfdkpl6j8=)
                          22: 352e3138312e3138372e302f32342d3234203d3e20323135373033.roa (hash: NPvxKSNfdGX2aoCtCwLVMBnzeoN7AU2GpBh+K+JOMMc=)
                          23: 352e3138312e3138342e302f32342d3234203d3e20323132333335.roa (hash: EGBFBscvQ1YWstG9kbxkZOotMsNA8UcpxsIuwRfrnH4=)
                          24: 3139342e33312e3139362e302f32342d3234203d3e20313939373337.roa (hash: kk3tkqt3pEQIayEC5akWsEQ7ftglPpO+Tt2YC9Lk7HM=)
                          25: 322e35392e36312e302f32342d3234203d3e203438323636.roa (hash: 6dfl8lI1/2dWL8ffIUYhSFUUS7mSu5VjjS42Z8HkW7c=)
                          26: 3139342e33312e3139362e302f32342d3234203d3e20323030303137.roa (hash: +5av7/JwxJ2GdszhVyEajY1bsnLhd2JhS01B+/f5cdU=)
                          27: 34352e39352e3231322e302f32342d3234203d3e20323039353534.roa (hash: D9JHULDkg0M1wT0M8wVTfDaCTJBMJIgvLcTza5q7f5c=)
                          28: 3139342e33312e3139352e302f32342d3234203d3e203334393933.roa (hash: u4qzpzCcpcy7ZWgFmuZevTcx8Lt6OWg/1tciNCqCqYM=)
                          29: 322e35392e36322e302f32342d3234203d3e203633303233.roa (hash: /Ku1phd3ouPkx4ZDyzwkq+GI0U8NGNl14wVu1lc6q1k=)
                          30: 3231322e31382e3131342e302f32342d3234203d3e203133333335.roa (hash: vO05yPqpp4iOUltzxMrFn4LhWc4dalJCoS4kQJCbZB8=)
                          31: 34352e39352e3231332e302f32342d3234203d3e20343030303339.roa (hash: w5NU7XhSCx4TB+ZVVuz65lQXaRG4sh/qolM03TzoQNc=)
                          32: 352e3138312e3138362e302f32342d3234203d3e203239303636.roa (hash: 5g1iTpy4+Ocf7g6idB3LUlopM7lH9cpsMczTTuu+hV0=)
                          33: 322e35392e36322e302f32342d3234203d3e20313432313131.roa (hash: c23s9WCLyWR8C29b7voS/R0hWodZcVrxRN5kAioljng=)
                          34: 3139342e33312e3139352e302f32342d3234203d3e20323133363638.roa (hash: tD4GyhGOomU4ZODP9QGqyOztFfw1vKOkCjucViT/SZg=)
                          35: 3139342e33312e3139372e302f32342d3234203d3e203432383331.roa (hash: K/AgWhdBwRNuHNiBHXtZ25SaRir/NPec0zhFlGbzmks=)
                          36: 322e35392e36332e302f32342d3234203d3e20323039363432.roa (hash: RaxlZegunO166WwhSyVfZX5K+6/U6SSWAALUv6FWG/c=)
                          37: 38352e3230392e3233302e302f32342d3234203d3e203633393032.roa (hash: P3VDMMBoXLUjrVK3m58S6qhassJbF7wO/iSY6p4T2ZU=)
                          38: 3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa (hash: 1EdzND/a/KltqRlIJaQnMPD7XH7CVfxCNY9eyK9ocYU=)
                          39: 3231322e31382e3131342e302f32342d3234203d3e20323635393139.roa (hash: hab4hIGZSaDFVIiuhh8M27XjJNP2UIzC71avB4BPqKc=)
                          40: 3139342e33312e3139342e302f32342d3234203d3e203339333638.roa (hash: SFZs2oMtwnIqXXrJ+wKfTfWn9twNuN9+e0KffE2zcpE=)
                          41: 34352e39352e3231342e302f32342d3234203d3e20323136303939.roa (hash: e4sOWlDxZzPIXQ3Vnqya07udsUK1KYBFfN3K3q4TdIQ=)
                          42: 352e3138312e3138352e302f32342d3234203d3e20323132333834.roa (hash: erSH6Mf15T5HOlDb5lpbU/Ku2eMK+cc/6OxLysGJmP4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 15:53:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:88:b2:0a:dd:5b:36:bb:41:fa:a5:01:24:34:ef:89:9b:30:b9:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
        Validity
            Not Before: Jul  1 13:09:24 2025 GMT
            Not After : Jul  2 15:53:24 2025 GMT
        Subject: CN=45B437ABDC27D1B9B9E7FCBA480AADE6AB55C9FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e8:4d:68:71:28:40:56:02:90:ed:43:04:1b:
                    b2:46:9b:3e:ba:0d:ff:a5:99:3f:21:94:8e:cf:d9:
                    20:a1:93:da:09:ab:05:1d:63:0f:38:3a:3c:28:c7:
                    97:bd:71:4c:1d:df:9e:6e:88:f7:92:75:f5:16:42:
                    bd:1a:1d:d8:57:5e:d4:6d:fb:87:39:e4:6d:d8:5c:
                    a8:eb:fd:cf:03:2a:87:c4:07:79:da:d7:63:c8:fd:
                    31:ac:16:2f:5c:ed:c4:3e:02:a2:56:91:20:43:96:
                    59:a6:de:d3:52:a6:24:91:9d:15:72:06:e3:89:94:
                    24:e3:e9:a1:a2:49:b1:d2:0c:a2:40:6a:cb:99:52:
                    57:4c:e4:c2:95:e8:bf:bd:b2:21:e2:c8:78:31:e0:
                    fb:63:0f:c1:7c:df:25:1a:4c:e4:1c:9e:d5:c7:56:
                    c9:b1:73:66:f1:09:ca:cf:a8:9c:59:f2:7b:85:0e:
                    f4:94:0a:7b:e3:14:ac:f8:ca:1b:12:b0:8b:5b:f3:
                    65:a7:79:73:c2:ea:c8:85:6c:d7:44:3f:9f:96:9e:
                    35:73:30:2a:3c:5c:47:62:c9:60:18:64:57:75:c8:
                    f7:07:bb:f7:f6:21:43:c8:3a:90:32:c3:ca:d5:0a:
                    15:e4:40:e7:15:8d:93:05:85:a8:42:6d:d5:06:0c:
                    61:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B4:37:AB:DC:27:D1:B9:B9:E7:FC:BA:48:0A:AD:E6:AB:55:C9:FD
            X509v3 Authority Key Identifier:
                keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:95:4c:23:60:4c:e6:98:ec:11:84:8d:ac:c1:3d:2a:5b:d4:
         63:d4:ec:a1:a5:24:63:a5:25:81:ea:7b:4c:91:82:9a:1d:b5:
         ec:6e:c7:35:8f:57:4c:95:08:78:ce:bd:3d:55:11:32:23:e9:
         1b:7c:63:81:69:2f:60:20:de:c0:f0:3d:07:c4:1a:ba:e2:71:
         7f:7e:42:60:80:59:91:3b:03:9a:c5:0e:53:b7:07:ca:6f:4d:
         83:11:86:9a:10:39:f9:d8:24:59:65:31:b2:77:af:65:2e:30:
         fa:68:01:f0:83:72:4c:ed:54:bc:59:eb:4c:ad:b0:a9:4a:53:
         61:55:72:41:35:58:63:20:91:a9:a5:a9:d7:0e:f2:a6:89:06:
         80:d3:a0:ed:1d:f6:5a:e1:5c:2b:73:09:3e:dd:81:9d:a8:d9:
         58:b9:7f:8c:04:72:e3:64:46:75:31:e0:16:4e:41:32:d7:81:
         4a:9e:b1:eb:32:ce:e4:07:fc:a1:1e:f3:c2:c1:dc:ee:44:9b:
         84:cc:31:5f:bd:e9:74:6f:5b:52:b1:d5:e4:86:af:0e:68:03:
         d9:ec:79:3f:1f:42:aa:4b:09:58:7a:92:9e:f8:22:5f:2d:23:
         53:10:64:4e:35:be:b2:cc:5c:64:2e:50:f0:45:aa:c6:1c:5a:
         5b:7e:7f:88
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUGoiyCt1bNrtB+qUBJDTviZswuaswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTk0MjBlNmM2ZjI0YjBlNDIyZGE3ZmU3ZTQyMGVmNTAz
NTRmNDVjNjAeFw0yNTA3MDExMzA5MjRaFw0yNTA3MDIxNTUzMjRaMDMxMTAvBgNV
BAMTKDQ1QjQzN0FCREMyN0QxQjlCOUU3RkNCQTQ4MEFBREU2QUI1NUM5RkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF6E1ocShAVgKQ7UMEG7JGmz66
Df+lmT8hlI7P2SChk9oJqwUdYw84Ojwox5e9cUwd355uiPeSdfUWQr0aHdhXXtRt
+4c55G3YXKjr/c8DKofEB3na12PI/TGsFi9c7cQ+AqJWkSBDllmm3tNSpiSRnRVy
BuOJlCTj6aGiSbHSDKJAasuZUldM5MKV6L+9siHiyHgx4PtjD8F83yUaTOQcntXH
Vsmxc2bxCcrPqJxZ8nuFDvSUCnvjFKz4yhsSsItb82WneXPC6siFbNdEP5+WnjVz
MCo8XEdiyWAYZFd1yPcHu/f2IUPIOpAyw8rVChXkQOcVjZMFhahCbdUGDGGrAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQURbQ3q9wn0bm55/y6SAqt5qtVyf0wHwYDVR0j
BBgwFoAUqUIObG8ksOQi2n/n5CDvUDVPRcYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWY5ODIzZDAtMDg1NS00MWYyLWFjNDYtNTlhMmU5OGRh
NzM2LzEvQTk0MjBFNkM2RjI0QjBFNDIyREE3RkU3RTQyMEVGNTAzNTRGNDVDNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FVSU9iRzhrc09RaTJuX241Q0R2VURW
UFJjWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xZjk4MjNkMC0w
ODU1LTQxZjItYWM0Ni01OWEyZTk4ZGE3MzYvMS9BOTQyMEU2QzZGMjRCMEU0MjJE
QTdGRTdFNDIwRUY1MDM1NEY0NUM2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG5VMI2BM5pjsEYSNrME9
KlvUY9TsoaUkY6Ulgep7TJGCmh217G7HNY9XTJUIeM69PVURMiPpG3xjgWkvYCDe
wPA9B8QauuJxf35CYIBZkTsDmsUOU7cHym9NgxGGmhA5+dgkWWUxsnevZS4w+mgB
8INyTO1UvFnrTK2wqUpTYVVyQTVYYyCRqaWp1w7ypokGgNOg7R32WuFcK3MJPt2B
najZWLl/jARy42RGdTHgFk5BMteBSp6x6zLO5Af8oR7zwsHc7kSbhMwxX73pdG9b
UrHV5IavDmgD2ex5Px9CqksJWHqSnvgiXy0jUxBkTjW+ssxcZC5Q8EWqxhxaW35/
iA==
-----END CERTIFICATE-----
Generated at Wed Jul 2 00:21:44 2025 by rpki-client