Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
File:                     A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft (raw, json)
Hash identifier:          +svg+NSArX7RhDTHTdK9DLUI6s9xQ4+iy1thRrYiaRo=
Subject key identifier:   82:ED:B9:D2:13:4C:BC:10:C3:04:53:4D:F3:3F:E3:D8:9F:0B:A0:C8
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Certificate issuer:       /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial:       1CD38D6F60103EB60D91F884DD1C87D39925BFA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
Manifest number:          06D0
Signing time:             Fri 27 Mar 2026 08:46:56 +0000
Manifest this update:     Fri 27 Mar 2026 08:41:56 +0000
Manifest next update:     Sat 28 Mar 2026 11:53:56 +0000
Files and hashes:         1: 3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa (hash: 1EdzND/a/KltqRlIJaQnMPD7XH7CVfxCNY9eyK9ocYU=)
                          2: 38352e3230392e3233302e302f32342d3234203d3e20313430323234.roa (hash: X9S/vAQJZJ3+zexclWqp51kmLLKozc6jAta0ZYx43Ns=)
                          3: 38352e3230392e3232392e302f32342d3234203d3e203432383331.roa (hash: vjpMNqLq25F9up6mT05GhHQJMJ0KbktUxvDSn9v6kBA=)
                          4: 352e3138312e3138372e302f32342d3234203d3e20323135373033.roa (hash: EJ6RmJBNoUg0c9WoYw2Ja1OnADVswQoLG/EoG0ZGnFE=)
                          5: 3139342e33312e3139362e302f32342d3234203d3e20313939373337.roa (hash: kk3tkqt3pEQIayEC5akWsEQ7ftglPpO+Tt2YC9Lk7HM=)
                          6: 34352e382e3231382e302f32342d3234203d3e20323132333834.roa (hash: tj3yrp12EwOeT1ZEKtZIphksitaxnh11pc39cLh8XvY=)
                          7: 352e3138312e3138352e302f32342d3234203d3e20323132333834.roa (hash: erSH6Mf15T5HOlDb5lpbU/Ku2eMK+cc/6OxLysGJmP4=)
                          8: 3139342e33312e3139352e302f32342d3234203d3e203132383236.roa (hash: dZ5pA0FTXTMIyebmvvTrXa2pwRmRVDj8qy5ZN+EkpPo=)
                          9: 34352e382e3231372e302f32342d3234203d3e20383334.roa (hash: 986H7DOlh4JMdwtbTV1uEyMKn5HaeRMCufNEqQ0K23s=)
                          10: 34352e39352e3231352e302f32342d3234203d3e203631333137.roa (hash: jtw5h4s7N892mHMRX7q1v9D/8tuL7heVW+cms9i1OJM=)
                          11: 322e35392e36312e302f32342d3234203d3e203438323636.roa (hash: sgoOb4bX1m2rIZlacxTZqlmJneicsHhOxQYCb/BB8fA=)
                          12: 3139342e33312e3139352e302f32342d3234203d3e20323133363638.roa (hash: pCuQNjK5vxSYZwtC7uzq87OexUIwDcw+LKWQti/Nk9E=)
                          13: 38352e3230392e3233312e302f32342d3234203d3e203135343430.roa (hash: 5P7OofszcYzyRXLoqtlNETBM0YQubML8godGGz1Zc2U=)
                          14: 34352e39352e3231322e302f32342d3234203d3e20323039353534.roa (hash: 9IsmuufWVjFLEbYLLcJg7Yp7+j5DqB4kK41/uY19nMQ=)
                          15: 34352e39352e3231352e302f32342d3234203d3e203239383032.roa (hash: Q1OlQJwADffmDxnZKj7bvhSo1kOL5aXrHpMtVtZFtuQ=)
                          16: 352e3138312e3138342e302f32342d3234203d3e20323131333733.roa (hash: HxZ7OQY4wmmok4f1jyMFC6WkeyQaBhCRYtiYzwz8qYg=)
                          17: 352e3138312e3138342e302f32342d3234203d3e20323132333335.roa (hash: UCQA4MebhnFRuGzYIjyz+Oaxw3thh569/39f5fjzuDM=)
                          18: 34352e39352e3231322e302f32322d3232203d3e2037303239.roa (hash: b3HfoeSSJnwEFBW/P8/Hh1DNPoifdQtxChWclKR01cY=)
                          19: 352e3138312e3138362e302f32342d3234203d3e20323036313530.roa (hash: QGg1o/UsEXwX7QWOmnciGR0lfU5zaV2UWyNlVxa/Ka8=)
                          20: 34352e39352e3231342e302f32342d3234203d3e203434353437.roa (hash: 4mA1gqLsHB6B1P8mI+JnCzpqXJzdsvy8YAE1F7eD96c=)
                          21: 322e35392e36302e302f32342d3234203d3e20323132323338.roa (hash: hZ11O4/GfIQ3ZyUgAuxIn+0GkFLCBYYNN1OfZIqVDJk=)
                          22: 36322e332e32302e302f32342d3234203d3e203633313939.roa (hash: kA6rLFNlx80Eesn7dN44PcjtBhqBSQbqVN30KxWFEiA=)
                          23: 322e35392e36302e302f32342d3234203d3e203631333137.roa (hash: BBdnQvjsMGsAKdV0CMmUgkUx9rKK17g08iyDVXfqF5c=)
                          24: 38352e3230392e3232382e302f32342d3234203d3e203230343733.roa (hash: 1VJONXDxJnPHUDzUm7XiO/UF/aXr3KYuVDC6vKiNDOc=)
                          25: 3134362e31392e33382e302f32342d3234203d3e20313939363534.roa (hash: KCPy6uAOav6R+jmrUTgTpbZkeje3mnKOXa6FXDMEhhE=)
                          26: 34352e382e3231362e302f32342d3234203d3e20323132333834.roa (hash: a81beBwcXvnxQQXt8vP0FnYxX0zBkKmQl4zg0OFOfqc=)
                          27: 322e35392e36332e302f32342d3234203d3e20383334.roa (hash: 8DqvUUgTHwg4fnhfYD2q3DFHCSCucv2RToLFRdMK/4s=)
                          28: 34352e39352e3231342e302f32342d3234203d3e20323136303939.roa (hash: D/Nmap/PxRG4O5COkUTsliUnadwaB6xsHT4TvPGKFlQ=)
                          29: 322e35392e36322e302f32342d3234203d3e203633303233.roa (hash: /Ku1phd3ouPkx4ZDyzwkq+GI0U8NGNl14wVu1lc6q1k=)
                          30: 3134362e31392e33382e302f32342d3234203d3e203136323736.roa (hash: norYvgZGO2Imho4UnQcnY8UITUyuaQwpwpHqXsoPDao=)
                          31: 38352e3230392e3233302e302f32342d3234203d3e203633393032.roa (hash: P3VDMMBoXLUjrVK3m58S6qhassJbF7wO/iSY6p4T2ZU=)
                          32: 3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa (hash: 1cwuvx0f/bXZ/DwexRmaaQu0tTmkULuIbOfrQVnX4ao=)
                          33: 352e3138312e3138352e302f32342d3234203d3e20323131333733.roa (hash: 2IzUCrtAIyuz9E3rWXqOgG5uo4suNn7bGWeOLhfOKvg=)
                          34: 38352e3230392e3233302e302f32342d3234203d3e203138313836.roa (hash: +OSq4m/6RpxEZih63506Gv6cOkBhW+YglqTPEKg/ZcM=)
                          35: 3139342e33312e3139372e302f32342d3234203d3e203432383331.roa (hash: KMAsq44hIBrFB+eRrhhDssa2B+eAZmGDL1feRYL/R5o=)
                          36: 34352e382e3231362e302f32342d3234203d3e20323131343430.roa (hash: e8OtHDGrOLuThDlvGfoczJuukmiEX6Dq6BRiXUAdwSs=)
                          37: 3139342e33312e3139352e302f32342d3234203d3e203334393933.roa (hash: /RrqrRO8J+Vsp3FaP0KZwFzXiRmxrRbyseKOqWdHYpY=)
                          38: 34352e39352e3231332e302f32342d3234203d3e20343030303339.roa (hash: XrIv1BWbF+to8I3saogND52oHBVFoDY38lWpbUFLA6o=)
                          39: 34352e382e3231392e302f32342d3234203d3e2039303039.roa (hash: 0zn1M6udTfOcCIE/Cifu6WDNTkQzSgcujlgX6HE4/sQ=)
                          40: 3139342e33312e3139342e302f32342d3234203d3e203339333638.roa (hash: qMisc8M9fAgiB1zw7/Tn0y61M2FDJt3sqCMkzKcplhA=)
                          41: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl (hash: lmvAVNs7MaedhDOF5p4SiC6HadkLk3KJDK1DIOJ5d98=)
                          42: 322e35392e36322e302f32342d3234203d3e20313432313131.roa (hash: c23s9WCLyWR8C29b7voS/R0hWodZcVrxRN5kAioljng=)
                          43: 3139342e33312e3139362e302f32342d3234203d3e20323030303137.roa (hash: +5av7/JwxJ2GdszhVyEajY1bsnLhd2JhS01B+/f5cdU=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:d3:8d:6f:60:10:3e:b6:0d:91:f8:84:dd:1c:87:d3:99:25:bf:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
        Validity
            Not Before: Mar 27 08:41:56 2026 GMT
            Not After : Mar 28 11:53:56 2026 GMT
        Subject: CN=82EDB9D2134CBC10C304534DF33FE3D89F0BA0C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:66:8e:ad:2a:b0:a5:ec:b1:33:7a:67:4a:52:
                    ff:3e:ed:c7:3f:c8:5f:6d:7e:77:55:f1:cd:69:b4:
                    72:9f:0f:21:99:48:c6:c2:38:8f:e3:6e:88:e7:0b:
                    4a:14:8b:b8:6a:a2:a9:6a:0e:02:e4:b9:a2:76:9b:
                    a5:7a:d9:32:2a:fd:14:e6:80:20:70:cb:11:26:76:
                    6b:3b:a6:75:f2:b2:91:fd:1a:38:34:04:20:11:1b:
                    a8:2e:70:19:31:9f:3c:4a:f5:ce:55:90:32:48:83:
                    2c:a6:3d:44:78:25:1d:aa:87:59:f3:94:3b:c6:4a:
                    6b:be:84:76:dd:fc:07:78:77:d4:2a:eb:bb:36:20:
                    11:74:ce:6d:b0:a4:a5:a8:43:c8:19:49:7e:2f:bb:
                    0f:bc:b1:56:07:a1:58:e0:f9:26:0a:e6:07:e8:3b:
                    16:df:e0:ee:e0:b5:04:d5:08:45:2f:72:8e:1b:fd:
                    0d:5b:75:57:aa:b1:07:41:97:52:fb:62:16:2f:2a:
                    5a:b6:1b:a8:53:ef:e1:3d:5f:c8:ee:c5:3c:0a:f9:
                    db:b4:7d:c5:bc:45:a3:ca:69:9c:be:cc:43:d3:34:
                    88:3a:d0:ff:a2:ee:0a:58:64:a8:d2:7c:72:f4:c5:
                    78:7b:f1:74:e9:e1:35:23:02:0c:ff:08:64:86:e2:
                    49:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:ED:B9:D2:13:4C:BC:10:C3:04:53:4D:F3:3F:E3:D8:9F:0B:A0:C8
            X509v3 Authority Key Identifier:
                keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:e1:01:b8:9c:ea:25:ff:f5:53:ca:06:ee:88:e1:24:38:5f:
         fc:f3:1a:d5:81:1f:17:e1:77:d1:cf:fd:65:17:d2:e7:2d:92:
         fe:91:b5:07:83:b1:3e:f3:c4:32:31:c7:e0:87:f5:e1:34:3f:
         1a:5b:75:38:79:89:f8:55:39:ea:84:e2:8c:59:d5:2b:6b:9d:
         30:5e:f9:8c:67:d6:a9:af:fc:c8:51:16:26:ac:60:ad:67:e1:
         d6:ab:fa:85:78:4a:01:6c:8b:6d:6b:da:eb:ca:18:a0:fe:2b:
         ab:4f:31:33:66:d1:43:d3:38:41:48:cc:69:23:ef:65:a6:7a:
         9a:16:16:f3:9b:7a:68:89:70:a1:be:1f:45:de:97:12:b1:36:
         ae:71:7e:a0:d4:07:e7:e9:3a:8d:d1:be:40:ba:aa:d6:dd:97:
         63:ec:6d:af:e9:40:89:0d:cc:76:b8:9e:18:4d:56:85:96:51:
         4a:c6:21:ad:4b:ae:a0:f0:8b:8f:f3:17:20:98:23:35:e3:e7:
         40:52:84:3e:46:16:a1:f3:89:45:a3:c8:56:49:9d:a3:c5:2c:
         06:5c:f8:23:6f:67:18:4d:41:f4:de:52:3b:b2:92:69:2c:cb:
         99:62:c5:62:93:98:8c:0b:af:6c:5f:ad:6c:e2:70:f2:55:b2:
         a4:6a:9d:08
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUHNONb2AQPrYNkfiE3RyH05klv6YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTk0MjBlNmM2ZjI0YjBlNDIyZGE3ZmU3ZTQyMGVmNTAz
NTRmNDVjNjAeFw0yNjAzMjcwODQxNTZaFw0yNjAzMjgxMTUzNTZaMDMxMTAvBgNV
BAMTKDgyRURCOUQyMTM0Q0JDMTBDMzA0NTM0REYzM0ZFM0Q4OUYwQkEwQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyZo6tKrCl7LEzemdKUv8+7cc/
yF9tfndV8c1ptHKfDyGZSMbCOI/jbojnC0oUi7hqoqlqDgLkuaJ2m6V62TIq/RTm
gCBwyxEmdms7pnXyspH9Gjg0BCARG6gucBkxnzxK9c5VkDJIgyymPUR4JR2qh1nz
lDvGSmu+hHbd/Ad4d9Qq67s2IBF0zm2wpKWoQ8gZSX4vuw+8sVYHoVjg+SYK5gfo
Oxbf4O7gtQTVCEUvco4b/Q1bdVeqsQdBl1L7YhYvKlq2G6hT7+E9X8juxTwK+du0
fcW8RaPKaZy+zEPTNIg60P+i7gpYZKjSfHL0xXh78XTp4TUjAgz/CGSG4kkTAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUgu250hNMvBDDBFNN8z/j2J8LoMgwHwYDVR0j
BBgwFoAUqUIObG8ksOQi2n/n5CDvUDVPRcYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWY5ODIzZDAtMDg1NS00MWYyLWFjNDYtNTlhMmU5OGRh
NzM2LzEvQTk0MjBFNkM2RjI0QjBFNDIyREE3RkU3RTQyMEVGNTAzNTRGNDVDNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FVSU9iRzhrc09RaTJuX241Q0R2VURW
UFJjWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xZjk4MjNkMC0w
ODU1LTQxZjItYWM0Ni01OWEyZTk4ZGE3MzYvMS9BOTQyMEU2QzZGMjRCMEU0MjJE
QTdGRTdFNDIwRUY1MDM1NEY0NUM2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj+EBuJzqJf/1U8oG7ojh
JDhf/PMa1YEfF+F30c/9ZRfS5y2S/pG1B4OxPvPEMjHH4If14TQ/Glt1OHmJ+FU5
6oTijFnVK2udMF75jGfWqa/8yFEWJqxgrWfh1qv6hXhKAWyLbWva68oYoP4rq08x
M2bRQ9M4QUjMaSPvZaZ6mhYW85t6aIlwob4fRd6XErE2rnF+oNQH5+k6jdG+QLqq
1t2XY+xtr+lAiQ3MdrieGE1WhZZRSsYhrUuuoPCLj/MXIJgjNePnQFKEPkYWofOJ
RaPIVkmdo8UsBlz4I29nGE1B9N5SO7KSaSzLmWLFYpOYjAuvbF+tbOJw8lWypGqd
CA==
-----END CERTIFICATE-----
Generated at Fri Mar 27 12:26:38 2026 by rpki-client