Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
File:                     A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft (raw, json)
Hash identifier:          s+LBaUQUJxgmT3U9yyh02v8+cxqsN1PeAkwMy03+euA=
Subject key identifier:   58:AF:1A:71:97:D0:7B:C3:E6:01:D6:91:46:29:4E:F0:84:F9:68:6A
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Certificate issuer:       /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial:       6E0EF625141BB5710532B6461DD033E91DC41628
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
Manifest number:          06BC
Signing time:             Sat 14 Mar 2026 15:53:16 +0000
Manifest this update:     Sat 14 Mar 2026 15:48:16 +0000
Manifest next update:     Sun 15 Mar 2026 16:38:16 +0000
Files and hashes:         1: 352e3138312e3138342e302f32342d3234203d3e20323131333733.roa (hash: HxZ7OQY4wmmok4f1jyMFC6WkeyQaBhCRYtiYzwz8qYg=)
                          2: 3139342e33312e3139342e302f32342d3234203d3e203339333638.roa (hash: qMisc8M9fAgiB1zw7/Tn0y61M2FDJt3sqCMkzKcplhA=)
                          3: 3134362e31392e33382e302f32342d3234203d3e20313939363534.roa (hash: KCPy6uAOav6R+jmrUTgTpbZkeje3mnKOXa6FXDMEhhE=)
                          4: 352e3138312e3138372e302f32342d3234203d3e20323135373033.roa (hash: EJ6RmJBNoUg0c9WoYw2Ja1OnADVswQoLG/EoG0ZGnFE=)
                          5: 3134362e31392e33382e302f32342d3234203d3e203136323736.roa (hash: norYvgZGO2Imho4UnQcnY8UITUyuaQwpwpHqXsoPDao=)
                          6: 3139342e33312e3139362e302f32342d3234203d3e20323030303137.roa (hash: +5av7/JwxJ2GdszhVyEajY1bsnLhd2JhS01B+/f5cdU=)
                          7: 322e35392e36322e302f32342d3234203d3e20313432313131.roa (hash: c23s9WCLyWR8C29b7voS/R0hWodZcVrxRN5kAioljng=)
                          8: 352e3138312e3138352e302f32342d3234203d3e20323131333733.roa (hash: 2IzUCrtAIyuz9E3rWXqOgG5uo4suNn7bGWeOLhfOKvg=)
                          9: 34352e382e3231382e302f32342d3234203d3e20323132333834.roa (hash: tj3yrp12EwOeT1ZEKtZIphksitaxnh11pc39cLh8XvY=)
                          10: 3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa (hash: 1EdzND/a/KltqRlIJaQnMPD7XH7CVfxCNY9eyK9ocYU=)
                          11: 322e35392e36302e302f32342d3234203d3e203631333137.roa (hash: BBdnQvjsMGsAKdV0CMmUgkUx9rKK17g08iyDVXfqF5c=)
                          12: 3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa (hash: 1cwuvx0f/bXZ/DwexRmaaQu0tTmkULuIbOfrQVnX4ao=)
                          13: 3139342e33312e3139352e302f32342d3234203d3e20323133363638.roa (hash: tD4GyhGOomU4ZODP9QGqyOztFfw1vKOkCjucViT/SZg=)
                          14: 352e3138312e3138342e302f32342d3234203d3e20323132333335.roa (hash: UCQA4MebhnFRuGzYIjyz+Oaxw3thh569/39f5fjzuDM=)
                          15: 38352e3230392e3233302e302f32342d3234203d3e20313430323234.roa (hash: X9S/vAQJZJ3+zexclWqp51kmLLKozc6jAta0ZYx43Ns=)
                          16: 34352e382e3231392e302f32342d3234203d3e2039303039.roa (hash: 0zn1M6udTfOcCIE/Cifu6WDNTkQzSgcujlgX6HE4/sQ=)
                          17: 352e3138312e3138362e302f32342d3234203d3e20323036313530.roa (hash: QGg1o/UsEXwX7QWOmnciGR0lfU5zaV2UWyNlVxa/Ka8=)
                          18: 3139342e33312e3139352e302f32342d3234203d3e203132383236.roa (hash: dZ5pA0FTXTMIyebmvvTrXa2pwRmRVDj8qy5ZN+EkpPo=)
                          19: 322e35392e36332e302f32342d3234203d3e20383334.roa (hash: 8DqvUUgTHwg4fnhfYD2q3DFHCSCucv2RToLFRdMK/4s=)
                          20: 34352e382e3231362e302f32342d3234203d3e20323132333834.roa (hash: A1j+LbNuBb8MeFvlQDvvVkVer3lHzQ8b3CPtY22jros=)
                          21: 322e35392e36302e302f32342d3234203d3e20323132323338.roa (hash: hZ11O4/GfIQ3ZyUgAuxIn+0GkFLCBYYNN1OfZIqVDJk=)
                          22: 322e35392e36312e302f32342d3234203d3e203438323636.roa (hash: sgoOb4bX1m2rIZlacxTZqlmJneicsHhOxQYCb/BB8fA=)
                          23: 3139342e33312e3139372e302f32342d3234203d3e203432383331.roa (hash: KMAsq44hIBrFB+eRrhhDssa2B+eAZmGDL1feRYL/R5o=)
                          24: 34352e382e3231362e302f32342d3234203d3e20323131343430.roa (hash: e8OtHDGrOLuThDlvGfoczJuukmiEX6Dq6BRiXUAdwSs=)
                          25: 34352e39352e3231322e302f32322d3232203d3e2037303239.roa (hash: b3HfoeSSJnwEFBW/P8/Hh1DNPoifdQtxChWclKR01cY=)
                          26: 34352e39352e3231352e302f32342d3234203d3e203631333137.roa (hash: jtw5h4s7N892mHMRX7q1v9D/8tuL7heVW+cms9i1OJM=)
                          27: 34352e39352e3231342e302f32342d3234203d3e203434353437.roa (hash: 4mA1gqLsHB6B1P8mI+JnCzpqXJzdsvy8YAE1F7eD96c=)
                          28: 34352e39352e3231332e302f32342d3234203d3e20343030303339.roa (hash: XrIv1BWbF+to8I3saogND52oHBVFoDY38lWpbUFLA6o=)
                          29: 34352e39352e3231352e302f32342d3234203d3e203239383032.roa (hash: Q1OlQJwADffmDxnZKj7bvhSo1kOL5aXrHpMtVtZFtuQ=)
                          30: 38352e3230392e3232382e302f32342d3234203d3e203230343733.roa (hash: 1VJONXDxJnPHUDzUm7XiO/UF/aXr3KYuVDC6vKiNDOc=)
                          31: 34352e39352e3231322e302f32342d3234203d3e20323039353534.roa (hash: 9IsmuufWVjFLEbYLLcJg7Yp7+j5DqB4kK41/uY19nMQ=)
                          32: 352e3138312e3138352e302f32342d3234203d3e20323132333834.roa (hash: erSH6Mf15T5HOlDb5lpbU/Ku2eMK+cc/6OxLysGJmP4=)
                          33: 34352e382e3231372e302f32342d3234203d3e20323136303232.roa (hash: hhXc/MDi5B7M4hlHOjLVsLkGzhKvVMLy6aW3Y+PG9Lw=)
                          34: 38352e3230392e3233302e302f32342d3234203d3e203633393032.roa (hash: P3VDMMBoXLUjrVK3m58S6qhassJbF7wO/iSY6p4T2ZU=)
                          35: 34352e39352e3231342e302f32342d3234203d3e20323136303939.roa (hash: D/Nmap/PxRG4O5COkUTsliUnadwaB6xsHT4TvPGKFlQ=)
                          36: 322e35392e36322e302f32342d3234203d3e203633303233.roa (hash: /Ku1phd3ouPkx4ZDyzwkq+GI0U8NGNl14wVu1lc6q1k=)
                          37: 3139342e33312e3139362e302f32342d3234203d3e20313939373337.roa (hash: kk3tkqt3pEQIayEC5akWsEQ7ftglPpO+Tt2YC9Lk7HM=)
                          38: 38352e3230392e3233312e302f32342d3234203d3e203135343430.roa (hash: 5P7OofszcYzyRXLoqtlNETBM0YQubML8godGGz1Zc2U=)
                          39: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl (hash: jX3dCdAfk3YgZVJnulxC96prDH60CoGUCwmzuSN1IPg=)
                          40: 38352e3230392e3233302e302f32342d3234203d3e203138313836.roa (hash: +OSq4m/6RpxEZih63506Gv6cOkBhW+YglqTPEKg/ZcM=)
                          41: 36322e332e32302e302f32342d3234203d3e203633313939.roa (hash: kA6rLFNlx80Eesn7dN44PcjtBhqBSQbqVN30KxWFEiA=)
                          42: 3139342e33312e3139352e302f32342d3234203d3e203334393933.roa (hash: /RrqrRO8J+Vsp3FaP0KZwFzXiRmxrRbyseKOqWdHYpY=)
                          43: 38352e3230392e3232392e302f32342d3234203d3e203432383331.roa (hash: vjpMNqLq25F9up6mT05GhHQJMJ0KbktUxvDSn9v6kBA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Mar 2026 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:0e:f6:25:14:1b:b5:71:05:32:b6:46:1d:d0:33:e9:1d:c4:16:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
        Validity
            Not Before: Mar 14 15:48:16 2026 GMT
            Not After : Mar 15 16:38:16 2026 GMT
        Subject: CN=58AF1A7197D07BC3E601D69146294EF084F9686A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:db:6d:00:8c:72:d6:b5:bc:a0:96:7a:6c:37:
                    4b:fb:21:be:24:0c:d8:3a:75:2d:98:25:5b:1e:d3:
                    3a:3f:93:d4:ab:ef:7e:ae:33:62:81:56:98:f0:63:
                    69:3b:5a:0e:6f:69:3f:76:f2:c2:2a:b8:e5:4e:a6:
                    93:29:0e:74:58:a7:e1:43:ba:eb:7f:44:93:c1:78:
                    b8:a2:c4:c3:76:17:32:6f:7c:7c:b0:a6:a2:a6:00:
                    b1:90:c6:ee:4f:f4:ae:59:9b:89:2b:eb:a3:05:fc:
                    98:48:60:3b:c6:4b:48:34:84:4a:ff:55:70:ea:f6:
                    12:5e:33:50:07:94:8d:8a:32:74:26:f0:d9:d8:b1:
                    2f:7f:11:12:c9:ba:e5:da:fe:99:91:1e:5b:f0:a4:
                    ca:e5:ba:f4:dc:2a:f0:0c:cd:9a:ff:74:6f:18:b6:
                    4a:e6:d2:24:6b:36:f4:f2:44:75:dd:0a:a5:9a:7e:
                    f7:9f:40:e2:cb:fa:b0:eb:06:ef:1c:31:4f:f9:fe:
                    83:00:4c:e9:95:b7:04:0f:90:19:aa:f7:c3:91:1a:
                    2d:b8:98:29:62:c0:9a:4a:11:ed:4e:01:75:ab:8a:
                    28:85:c2:43:06:b0:36:4d:24:33:fb:58:61:52:74:
                    50:35:d6:4f:b4:79:95:76:ab:ce:24:0a:7c:da:31:
                    05:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:AF:1A:71:97:D0:7B:C3:E6:01:D6:91:46:29:4E:F0:84:F9:68:6A
            X509v3 Authority Key Identifier:
                keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:89:5e:28:af:0f:4b:2a:1f:2d:a8:e6:15:ed:8a:76:a1:19:
         24:31:b6:42:64:bb:d4:6b:9b:df:91:bb:1a:99:93:67:c2:aa:
         34:00:05:88:8b:f4:f0:7d:ea:58:8a:bd:25:4d:dc:ae:68:5e:
         46:fd:15:7d:88:c2:19:6e:6e:73:6b:74:75:9e:af:58:62:ce:
         1f:2c:51:8c:1d:b6:65:a2:ca:5c:30:0f:67:53:be:93:7d:68:
         9c:6e:85:d0:d5:cc:e9:b6:b5:47:09:de:13:c5:06:98:0d:6f:
         d8:9a:64:56:e7:7c:41:cd:d0:fd:fe:f1:1f:66:d6:31:50:d3:
         33:d8:98:43:45:63:5f:f2:36:46:a5:d4:ef:9e:a6:12:94:dc:
         6f:a5:eb:7d:70:98:9d:ca:28:2b:63:f5:ea:15:8d:f7:f0:de:
         bb:53:23:12:16:2a:63:e6:05:62:a3:37:6f:e8:f6:06:0f:58:
         74:7d:39:8b:83:ab:59:07:a9:43:84:81:66:74:32:b5:d4:d0:
         64:6d:e3:20:35:74:bd:db:1f:e6:fc:fa:3b:4a:e0:82:20:4c:
         6c:53:07:06:b8:d1:c2:eb:a0:bd:f6:dc:48:df:70:17:09:e8:
         c2:3b:81:e3:b9:b5:8e:19:4b:6a:41:fd:db:8e:db:b4:3b:b1:
         54:93:81:87
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUbg72JRQbtXEFMrZGHdAz6R3EFigwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTk0MjBlNmM2ZjI0YjBlNDIyZGE3ZmU3ZTQyMGVmNTAz
NTRmNDVjNjAeFw0yNjAzMTQxNTQ4MTZaFw0yNjAzMTUxNjM4MTZaMDMxMTAvBgNV
BAMTKDU4QUYxQTcxOTdEMDdCQzNFNjAxRDY5MTQ2Mjk0RUYwODRGOTY4NkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH220AjHLWtbyglnpsN0v7Ib4k
DNg6dS2YJVse0zo/k9Sr736uM2KBVpjwY2k7Wg5vaT928sIquOVOppMpDnRYp+FD
uut/RJPBeLiixMN2FzJvfHywpqKmALGQxu5P9K5Zm4kr66MF/JhIYDvGS0g0hEr/
VXDq9hJeM1AHlI2KMnQm8NnYsS9/ERLJuuXa/pmRHlvwpMrluvTcKvAMzZr/dG8Y
tkrm0iRrNvTyRHXdCqWafvefQOLL+rDrBu8cMU/5/oMATOmVtwQPkBmq98ORGi24
mCliwJpKEe1OAXWriiiFwkMGsDZNJDP7WGFSdFA11k+0eZV2q84kCnzaMQVJAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUWK8acZfQe8PmAdaRRilO8IT5aGowHwYDVR0j
BBgwFoAUqUIObG8ksOQi2n/n5CDvUDVPRcYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWY5ODIzZDAtMDg1NS00MWYyLWFjNDYtNTlhMmU5OGRh
NzM2LzEvQTk0MjBFNkM2RjI0QjBFNDIyREE3RkU3RTQyMEVGNTAzNTRGNDVDNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FVSU9iRzhrc09RaTJuX241Q0R2VURW
UFJjWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xZjk4MjNkMC0w
ODU1LTQxZjItYWM0Ni01OWEyZTk4ZGE3MzYvMS9BOTQyMEU2QzZGMjRCMEU0MjJE
QTdGRTdFNDIwRUY1MDM1NEY0NUM2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuYleKK8PSyofLajmFe2K
dqEZJDG2QmS71Gub35G7GpmTZ8KqNAAFiIv08H3qWIq9JU3crmheRv0VfYjCGW5u
c2t0dZ6vWGLOHyxRjB22ZaLKXDAPZ1O+k31onG6F0NXM6ba1RwneE8UGmA1v2Jpk
Vud8Qc3Q/f7xH2bWMVDTM9iYQ0VjX/I2RqXU756mEpTcb6XrfXCYncooK2P16hWN
9/Deu1MjEhYqY+YFYqM3b+j2Bg9YdH05i4OrWQepQ4SBZnQytdTQZG3jIDV0vdsf
5vz6O0rggiBMbFMHBrjRwuugvfbcSN9wFwnowjuB47m1jhlLakH9247btDuxVJOB
hw==
-----END CERTIFICATE-----
Generated at Sat Mar 14 20:20:31 2026 by rpki-client