Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
File:                     A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft (raw, json)
Hash identifier:          6BnQRWjYdsSIMmlotTwLXg0B++QsV7zhTy/ZeK5v7gE=
Subject key identifier:   1E:7A:DB:82:9C:BB:12:B8:9A:78:B2:20:FD:7F:37:87:74:64:7F:D9
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Certificate issuer:       /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial:       67017FB0C32EDC1EB797AA90F3439FE0CFE2395F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
Manifest number:          07EC
Signing time:             Tue 06 Oct 2026 18:56:34 +0000
Manifest this update:     Tue 06 Oct 2026 18:51:34 +0000
Manifest next update:     Wed 07 Oct 2026 20:59:34 +0000
Files and hashes:         1: 36322e332e32302e302f32342d3234203d3e20323132393830.roa (hash: f/GL2G2QMX1DeHxo/IzFzuj9b3uiMiTDtg1wGwI4Lb8=)
                          2: 34352e39352e3231332e302f32342d3234203d3e20343030303339.roa (hash: J1EW+hHtD32FPQGp7ofq9HLTlopn5evJHbexaxjWVK0=)
                          3: 3139342e33312e3139352e302f32342d3234203d3e203132383236.roa (hash: dZ5pA0FTXTMIyebmvvTrXa2pwRmRVDj8qy5ZN+EkpPo=)
                          4: 34352e39352e3231322e302f32322d3232203d3e2037303239.roa (hash: d9+cKpTdsfno2v/b+IKbhlhODzZZZTwj8EEe6uEOYgw=)
                          5: 34352e382e3231372e302f32342d3234203d3e20383334.roa (hash: lxgDM+2IpOwskjSyLj/88e3oNG4qGZLEbcXn/wQBWJ8=)
                          6: 38352e3230392e3233302e302f32342d3234203d3e203138313836.roa (hash: wLYhvbcU/etiFzebOUkFMR3b0g4xeh82nSHNvUEIAsY=)
                          7: 352e3138312e3138342e302f32342d3234203d3e20323131333733.roa (hash: 2zHb0T4tIHau6aSZ9D+c/6DXvLxBGB8a+KLhel+Tre4=)
                          8: 38352e3230392e3233302e302f32342d3234203d3e20313430323234.roa (hash: l2LIzKinG0BfxQ8d6ejTKmtFPNdSKUK9y0vPJ8skqFk=)
                          9: 3134362e31392e33382e302f32342d3234203d3e203136323736.roa (hash: norYvgZGO2Imho4UnQcnY8UITUyuaQwpwpHqXsoPDao=)
                          10: 3139342e33312e3139372e302f32342d3234203d3e20383334.roa (hash: 5xlOHrC9cQ2pMdiC9jU0zHtgYmHcu7FKSMzeO+SOiwQ=)
                          11: 352e3138312e3138372e302f32342d3234203d3e20323135373033.roa (hash: EJ6RmJBNoUg0c9WoYw2Ja1OnADVswQoLG/EoG0ZGnFE=)
                          12: 322e35392e36302e302f32342d3234203d3e20383334.roa (hash: 6oFhbwS32nNztM+MkZFvFVF8FZ6win/Ti/cCKIVdiGM=)
                          13: 352e3138312e3138352e302f32342d3234203d3e20323131333733.roa (hash: tIeHJEF41zbDRQ8KbMBp/GsLGj1RgNxno+RElBJQNMw=)
                          14: 322e35392e36322e302f32332d3234203d3e20383334.roa (hash: U8K8ByMMhjORRMnN107C0qHzPl2EMue6t1DEVbbMMv4=)
                          15: 34352e39352e3231322e302f32342d3234203d3e20323039353534.roa (hash: 9IsmuufWVjFLEbYLLcJg7Yp7+j5DqB4kK41/uY19nMQ=)
                          16: 38352e3230392e3232382e302f32342d3234203d3e203230343733.roa (hash: 1VJONXDxJnPHUDzUm7XiO/UF/aXr3KYuVDC6vKiNDOc=)
                          17: 34352e39352e3231352e302f32342d3234203d3e203631333137.roa (hash: Set9jSjJnZk4FzDhKsQCeyo0iC0093IITgk8mXGFRYE=)
                          18: 38352e3230392e3233312e302f32342d3234203d3e203135343430.roa (hash: 7ez4FNDsc2VXRnHlSjtzOmyRSh/gDET/tzdpB8U6faI=)
                          19: 34352e39352e3231352e302f32342d3234203d3e203239383032.roa (hash: kUgYR/Kxqx56Hy24JaK1nIBftzOVeuZOaTeGulm2cfI=)
                          20: 322e35392e36312e302f32342d3234203d3e203438323636.roa (hash: sgoOb4bX1m2rIZlacxTZqlmJneicsHhOxQYCb/BB8fA=)
                          21: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl (hash: fZU/XvVo/EVmG6sdLN2dUs6ot6CSwkzpKm1YGxpyxLs=)
                          22: 352e3138312e3138342e302f32342d3234203d3e20323132333335.roa (hash: UCQA4MebhnFRuGzYIjyz+Oaxw3thh569/39f5fjzuDM=)
                          23: 3139342e33312e3139362e302f32342d3234203d3e20323030303137.roa (hash: mYDAbrfXE2SMRwMvSEq6zRWmL22fizr0hTNDEPKCMHw=)
                          24: 34352e382e3231382e302f32342d3234203d3e20323132333834.roa (hash: iATVUumriorK7Pdv5iKgHpx/CwKgX/9pfUHykvA0Wrc=)
                          25: 352e3138312e3138342e302f32342d3234203d3e20323132363039.roa (hash: 6u+5ELEJLeXXB4+8NHbO0dG4EQaKYkOwI0K9os45OcQ=)
                          26: 3134362e31392e33382e302f32342d3234203d3e20313939363534.roa (hash: jX4C5dkRnCIJowfhDMXYwrQg434yiv1EsWttrHB9oRM=)
                          27: 352e3138312e3138362e302f32342d3234203d3e20323036313530.roa (hash: QGg1o/UsEXwX7QWOmnciGR0lfU5zaV2UWyNlVxa/Ka8=)
                          28: 38352e3230392e3233302e302f32342d3234203d3e203633393032.roa (hash: VaOxQtitcotEwDKcqVbfty4V+UnBaFXCz621Z/5UMPE=)
                          29: 38352e3230392e3232392e302f32342d3234203d3e203432383331.roa (hash: vjpMNqLq25F9up6mT05GhHQJMJ0KbktUxvDSn9v6kBA=)
                          30: 3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa (hash: /pttCsH3EqNiBOKmYU2SEK0bSx+Q89rOic38LmDTjfU=)
                          31: 3139342e33312e3139352e302f32342d3234203d3e203334393933.roa (hash: /RrqrRO8J+Vsp3FaP0KZwFzXiRmxrRbyseKOqWdHYpY=)
                          32: 3139342e33312e3139352e302f32342d3234203d3e20323133363638.roa (hash: pCuQNjK5vxSYZwtC7uzq87OexUIwDcw+LKWQti/Nk9E=)
                          33: 3139342e33312e3139362e302f32342d3234203d3e20313939373337.roa (hash: qc608O9yB+6tqsDBDhoINI3nGVPIPfhQ49+yA4p+itg=)
                          34: 34352e382e3231362e302f32342d3234203d3e20323131343430.roa (hash: e8OtHDGrOLuThDlvGfoczJuukmiEX6Dq6BRiXUAdwSs=)
                          35: 34352e382e3231362e302f32342d3234203d3e20323132333834.roa (hash: a81beBwcXvnxQQXt8vP0FnYxX0zBkKmQl4zg0OFOfqc=)
                          36: 3139342e33312e3139342e302f32342d3234203d3e203339333638.roa (hash: DPH0dq8YDEtGyRSQJNel2HWBEDDjKDRiZ8kPBGCbV5I=)
                          37: 352e3138312e3138352e302f32342d3234203d3e20323132333834.roa (hash: PkrjX5lEKZeku6HbTZFd/bgZgjS0Ra0J+FcQrImRmsQ=)
                          38: 34352e39352e3231342e302f32342d3234203d3e20383334.roa (hash: 4X6EQaqJTKhKvN3TJ9GVIsbRzqsZ4tWpY3NIa3KMmkU=)
                          39: 34352e382e3231392e302f32342d3234203d3e2039303039.roa (hash: VVBKfj3oX4V4HqDYQe/w0vIXEHmTptmcb2dA6LN81Ys=)
                          40: 3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa (hash: X70d0T4GWN6rC/5/Z7B3IR7A4QtMvYWM6LmuwXwdnH0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 13:29:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:01:7f:b0:c3:2e:dc:1e:b7:97:aa:90:f3:43:9f:e0:cf:e2:39:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
        Validity
            Not Before: Oct  6 18:51:34 2026 GMT
            Not After : Oct  7 20:59:34 2026 GMT
        Subject: CN=1E7ADB829CBB12B89A78B220FD7F378774647FD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3b:1c:a0:2d:51:bd:78:44:3f:87:7e:f4:9d:
                    14:f7:bc:df:be:61:8b:70:20:5b:5b:04:3f:33:7f:
                    d0:17:fd:a8:d2:05:d9:53:2a:6b:bb:d9:fc:9a:b1:
                    ec:7d:b7:d5:97:35:db:69:ae:18:bc:d7:67:44:fd:
                    f0:3b:75:ee:09:ce:da:fd:73:63:09:6c:96:2e:e8:
                    3a:3b:48:3e:b2:d0:fc:c9:2e:89:29:5b:6e:2c:95:
                    b6:63:23:2d:df:5b:5a:91:6d:d0:74:2d:fe:c0:6a:
                    9a:d8:de:55:52:eb:01:e4:e1:35:d5:4a:65:a1:b1:
                    c4:f5:e9:15:e7:d5:f0:aa:99:99:b8:8b:17:9f:6d:
                    48:05:56:df:2a:39:1b:3b:03:13:57:82:a0:b4:11:
                    ae:31:4d:7f:30:28:e6:72:89:a4:b6:ad:71:15:7d:
                    67:5c:66:fa:bd:6e:35:f6:7e:8b:41:9b:e1:61:8e:
                    ea:fb:46:64:e6:60:66:d7:09:e9:3f:01:c4:2e:2b:
                    ec:03:53:17:d5:78:3d:ed:9b:41:7a:f8:40:4d:1a:
                    cf:37:d5:a3:2b:dc:3a:78:b0:d1:50:a8:7d:63:c8:
                    20:42:3a:fc:aa:53:30:47:3a:de:04:21:70:de:71:
                    e6:0b:b7:18:96:92:7e:0c:88:e6:85:b7:27:a4:7f:
                    36:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:7A:DB:82:9C:BB:12:B8:9A:78:B2:20:FD:7F:37:87:74:64:7F:D9
            X509v3 Authority Key Identifier:
                keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:c4:f2:04:64:3d:0d:b3:08:85:76:60:b6:09:2a:0d:c1:8f:
         ee:be:61:71:e5:d3:b9:74:36:34:8d:bd:66:71:52:91:19:4f:
         d6:bb:c8:fc:9c:7e:ce:b0:63:7d:44:f1:2b:c9:5b:02:fc:67:
         e9:b5:12:e7:03:be:13:1c:58:1a:f1:c4:1a:ab:71:2e:64:5a:
         83:0b:c7:8e:70:22:cb:c3:fe:a0:3e:1e:81:3e:31:6f:49:d9:
         3b:56:a8:06:f5:15:a5:d3:4c:38:13:bd:6f:8b:cc:53:26:88:
         a0:98:1e:07:b3:13:b9:27:59:5c:4b:db:de:56:1c:24:84:51:
         c8:fb:3c:a8:cb:18:2e:78:ff:6b:44:2a:67:d4:8a:d8:6d:76:
         ae:d1:d8:cf:e3:f2:e3:e8:95:64:1f:3b:64:91:6a:59:11:da:
         02:c7:17:8f:7e:ff:68:a3:d6:12:62:9d:fa:80:9c:bd:90:e7:
         5e:ee:26:1d:24:0d:f0:37:51:f4:6f:b2:5e:ef:c6:d3:8d:30:
         85:1d:e1:e0:91:9e:dc:db:d3:c4:32:ec:5a:09:a5:c9:4e:13:
         7e:0a:4e:91:fc:14:64:92:3b:b0:f0:16:71:66:20:76:48:01:
         ed:83:d0:2c:dc:8e:8f:a6:3c:62:cc:c5:ff:23:60:0f:79:d2:
         7a:7b:18:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 22:58:52 2026 by rpki-client