Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
File:                     A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft (raw, json)
Hash identifier:          GQKZdbAX8r3HRIgIO5KANoIrnlQAAkOiW0tQmcpzsLs=
Subject key identifier:   16:0D:C2:07:3A:1F:4C:AC:24:92:F0:0D:9F:BC:2F:44:27:6F:DA:1B
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Certificate issuer:       /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial:       53CCA2E493D59D9B0A984942F84022D3FA2125CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
Manifest number:          06D8
Signing time:             Wed 01 Apr 2026 11:46:57 +0000
Manifest this update:     Wed 01 Apr 2026 11:41:57 +0000
Manifest next update:     Thu 02 Apr 2026 12:25:57 +0000
Files and hashes:         1: 38352e3230392e3233302e302f32342d3234203d3e203633393032.roa (hash: P3VDMMBoXLUjrVK3m58S6qhassJbF7wO/iSY6p4T2ZU=)
                          2: 34352e39352e3231322e302f32342d3234203d3e20323039353534.roa (hash: 9IsmuufWVjFLEbYLLcJg7Yp7+j5DqB4kK41/uY19nMQ=)
                          3: 322e35392e36322e302f32342d3234203d3e203633303233.roa (hash: /Ku1phd3ouPkx4ZDyzwkq+GI0U8NGNl14wVu1lc6q1k=)
                          4: 38352e3230392e3232392e302f32342d3234203d3e203432383331.roa (hash: vjpMNqLq25F9up6mT05GhHQJMJ0KbktUxvDSn9v6kBA=)
                          5: 38352e3230392e3232382e302f32342d3234203d3e203230343733.roa (hash: 1VJONXDxJnPHUDzUm7XiO/UF/aXr3KYuVDC6vKiNDOc=)
                          6: 34352e39352e3231322e302f32322d3232203d3e2037303239.roa (hash: b3HfoeSSJnwEFBW/P8/Hh1DNPoifdQtxChWclKR01cY=)
                          7: 34352e39352e3231342e302f32342d3234203d3e20323136303939.roa (hash: D/Nmap/PxRG4O5COkUTsliUnadwaB6xsHT4TvPGKFlQ=)
                          8: 352e3138312e3138352e302f32342d3234203d3e20323131333733.roa (hash: 2IzUCrtAIyuz9E3rWXqOgG5uo4suNn7bGWeOLhfOKvg=)
                          9: 3139342e33312e3139352e302f32342d3234203d3e203132383236.roa (hash: dZ5pA0FTXTMIyebmvvTrXa2pwRmRVDj8qy5ZN+EkpPo=)
                          10: 34352e382e3231362e302f32342d3234203d3e20323131343430.roa (hash: e8OtHDGrOLuThDlvGfoczJuukmiEX6Dq6BRiXUAdwSs=)
                          11: 3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa (hash: 1cwuvx0f/bXZ/DwexRmaaQu0tTmkULuIbOfrQVnX4ao=)
                          12: 322e35392e36302e302f32342d3234203d3e20323132323338.roa (hash: hZ11O4/GfIQ3ZyUgAuxIn+0GkFLCBYYNN1OfZIqVDJk=)
                          13: 34352e39352e3231342e302f32342d3234203d3e203434353437.roa (hash: 4mA1gqLsHB6B1P8mI+JnCzpqXJzdsvy8YAE1F7eD96c=)
                          14: 34352e382e3231362e302f32342d3234203d3e20323132333834.roa (hash: a81beBwcXvnxQQXt8vP0FnYxX0zBkKmQl4zg0OFOfqc=)
                          15: 3139342e33312e3139372e302f32342d3234203d3e203432383331.roa (hash: KMAsq44hIBrFB+eRrhhDssa2B+eAZmGDL1feRYL/R5o=)
                          16: 34352e39352e3231352e302f32342d3234203d3e203631333137.roa (hash: jtw5h4s7N892mHMRX7q1v9D/8tuL7heVW+cms9i1OJM=)
                          17: 3134362e31392e33382e302f32342d3234203d3e20313939363534.roa (hash: KCPy6uAOav6R+jmrUTgTpbZkeje3mnKOXa6FXDMEhhE=)
                          18: 352e3138312e3138372e302f32342d3234203d3e20323135373033.roa (hash: EJ6RmJBNoUg0c9WoYw2Ja1OnADVswQoLG/EoG0ZGnFE=)
                          19: 34352e382e3231372e302f32342d3234203d3e20323134303235.roa (hash: +sPrCW3WqbeCRN41T+z7+AXOa7VPtKEnTOhpV5D7dWM=)
                          20: 34352e382e3231392e302f32342d3234203d3e2039303039.roa (hash: 0zn1M6udTfOcCIE/Cifu6WDNTkQzSgcujlgX6HE4/sQ=)
                          21: 322e35392e36302e302f32342d3234203d3e203631333137.roa (hash: BBdnQvjsMGsAKdV0CMmUgkUx9rKK17g08iyDVXfqF5c=)
                          22: 3139342e33312e3139352e302f32342d3234203d3e20323133363638.roa (hash: pCuQNjK5vxSYZwtC7uzq87OexUIwDcw+LKWQti/Nk9E=)
                          23: 38352e3230392e3233312e302f32342d3234203d3e203135343430.roa (hash: 5P7OofszcYzyRXLoqtlNETBM0YQubML8godGGz1Zc2U=)
                          24: 352e3138312e3138342e302f32342d3234203d3e20323132333335.roa (hash: UCQA4MebhnFRuGzYIjyz+Oaxw3thh569/39f5fjzuDM=)
                          25: 352e3138312e3138342e302f32342d3234203d3e20323131333733.roa (hash: HxZ7OQY4wmmok4f1jyMFC6WkeyQaBhCRYtiYzwz8qYg=)
                          26: 3139342e33312e3139352e302f32342d3234203d3e203334393933.roa (hash: /RrqrRO8J+Vsp3FaP0KZwFzXiRmxrRbyseKOqWdHYpY=)
                          27: 3139342e33312e3139342e302f32342d3234203d3e203339333638.roa (hash: qMisc8M9fAgiB1zw7/Tn0y61M2FDJt3sqCMkzKcplhA=)
                          28: 34352e39352e3231352e302f32342d3234203d3e203239383032.roa (hash: Q1OlQJwADffmDxnZKj7bvhSo1kOL5aXrHpMtVtZFtuQ=)
                          29: 3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa (hash: 1EdzND/a/KltqRlIJaQnMPD7XH7CVfxCNY9eyK9ocYU=)
                          30: 352e3138312e3138362e302f32342d3234203d3e20323036313530.roa (hash: QGg1o/UsEXwX7QWOmnciGR0lfU5zaV2UWyNlVxa/Ka8=)
                          31: 34352e382e3231382e302f32342d3234203d3e20323132333834.roa (hash: tj3yrp12EwOeT1ZEKtZIphksitaxnh11pc39cLh8XvY=)
                          32: 3139342e33312e3139362e302f32342d3234203d3e20313939373337.roa (hash: qc608O9yB+6tqsDBDhoINI3nGVPIPfhQ49+yA4p+itg=)
                          33: 3139342e33312e3139362e302f32342d3234203d3e20323030303137.roa (hash: +5av7/JwxJ2GdszhVyEajY1bsnLhd2JhS01B+/f5cdU=)
                          34: 38352e3230392e3233302e302f32342d3234203d3e20313430323234.roa (hash: X9S/vAQJZJ3+zexclWqp51kmLLKozc6jAta0ZYx43Ns=)
                          35: 38352e3230392e3233302e302f32342d3234203d3e203138313836.roa (hash: +OSq4m/6RpxEZih63506Gv6cOkBhW+YglqTPEKg/ZcM=)
                          36: 3134362e31392e33382e302f32342d3234203d3e203136323736.roa (hash: norYvgZGO2Imho4UnQcnY8UITUyuaQwpwpHqXsoPDao=)
                          37: 322e35392e36312e302f32342d3234203d3e203438323636.roa (hash: sgoOb4bX1m2rIZlacxTZqlmJneicsHhOxQYCb/BB8fA=)
                          38: 36322e332e32302e302f32342d3234203d3e203633313939.roa (hash: kA6rLFNlx80Eesn7dN44PcjtBhqBSQbqVN30KxWFEiA=)
                          39: 322e35392e36322e302f32342d3234203d3e20313432313131.roa (hash: c23s9WCLyWR8C29b7voS/R0hWodZcVrxRN5kAioljng=)
                          40: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl (hash: X2u9gP9Gqkz0/nmHA5+nGwbnqEq8+IB/uijcBdqI6AA=)
                          41: 322e35392e36332e302f32342d3234203d3e20383334.roa (hash: 8DqvUUgTHwg4fnhfYD2q3DFHCSCucv2RToLFRdMK/4s=)
                          42: 352e3138312e3138352e302f32342d3234203d3e20323132333834.roa (hash: erSH6Mf15T5HOlDb5lpbU/Ku2eMK+cc/6OxLysGJmP4=)
                          43: 34352e39352e3231332e302f32342d3234203d3e20343030303339.roa (hash: XrIv1BWbF+to8I3saogND52oHBVFoDY38lWpbUFLA6o=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 Apr 2026 12:25:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:cc:a2:e4:93:d5:9d:9b:0a:98:49:42:f8:40:22:d3:fa:21:25:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
        Validity
            Not Before: Apr  1 11:41:57 2026 GMT
            Not After : Apr  2 12:25:57 2026 GMT
        Subject: CN=160DC2073A1F4CAC2492F00D9FBC2F44276FDA1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0b:9c:33:1e:01:7c:0a:d2:a9:4d:82:82:d0:
                    c5:48:03:d4:2a:ac:42:6f:4a:df:48:51:6e:ae:1f:
                    5a:5b:42:31:e7:07:22:ed:e1:d8:8d:b5:01:58:aa:
                    8d:7d:4a:83:e8:d2:ee:c6:9f:1c:8c:c8:36:b2:c6:
                    65:32:26:64:d0:71:11:0d:c3:73:ad:89:3d:da:61:
                    40:91:ad:6f:cb:4c:d1:db:ff:f9:7b:db:75:91:64:
                    50:43:71:1a:64:b3:0a:5a:c6:fd:39:5f:97:15:35:
                    ba:6e:76:85:b2:0e:77:72:43:60:d6:b7:91:12:89:
                    ef:a2:11:22:08:49:b7:f1:21:c0:e1:a9:3e:92:ae:
                    fc:cc:2c:6d:e9:80:ac:fc:02:74:42:83:2b:e5:29:
                    94:38:d8:a0:8a:49:2d:c0:fa:0d:05:ae:6e:b8:ad:
                    e7:19:8c:24:35:e0:86:cd:f5:38:ed:db:57:3f:67:
                    69:d4:8d:b3:24:10:57:75:4c:b1:8d:aa:d1:25:81:
                    27:5a:95:87:25:df:20:a6:59:c2:20:5d:58:4e:ed:
                    7a:13:95:b4:0c:02:fc:77:18:2b:cf:8c:30:0f:ee:
                    b3:1c:28:50:e7:60:fe:8b:aa:86:9d:87:18:31:ed:
                    d3:aa:16:03:00:1b:23:0e:06:0e:ca:0c:0c:11:fa:
                    64:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:0D:C2:07:3A:1F:4C:AC:24:92:F0:0D:9F:BC:2F:44:27:6F:DA:1B
            X509v3 Authority Key Identifier:
                keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:c0:29:6a:c9:28:24:4f:7e:83:bf:08:c4:65:d1:03:dd:63:
         c3:98:2f:d5:1a:8a:61:cf:fc:9b:2e:51:a3:3c:a6:d7:70:56:
         fb:23:4f:eb:a4:fa:9c:0a:2d:e2:03:13:70:0f:bd:8c:dc:04:
         4d:2e:84:7e:5b:5a:e0:0e:bd:2a:cd:b0:55:82:a8:07:02:65:
         c8:5a:06:fe:79:c5:24:b6:e3:7c:4f:81:6d:45:39:8f:c1:43:
         7e:53:d9:02:3a:c7:6e:67:af:e3:96:27:8d:2c:2d:31:2b:dc:
         ee:44:29:e0:f1:08:87:25:fc:91:91:52:96:d0:37:98:27:9a:
         80:3c:a7:4d:7f:65:64:21:67:f7:b1:67:2c:99:7e:58:eb:9d:
         ee:e3:d0:24:b7:4f:63:23:b1:1e:2d:cf:17:73:fc:aa:47:0e:
         cf:d9:77:50:23:1b:ec:a2:a5:76:fa:04:b3:a9:0f:b5:04:03:
         fb:92:aa:9e:d2:6e:ae:fa:d4:13:6d:7d:c7:55:a9:a9:55:4d:
         98:f4:f1:96:e2:74:4f:99:9d:8a:94:eb:91:01:81:cd:91:ec:
         4a:54:2e:96:fb:5e:b6:bc:53:e1:e7:5a:56:df:4a:52:27:20:
         a9:a1:97:4f:35:1b:cd:ca:44:18:b5:7b:f4:47:42:cf:98:d1:
         67:c1:17:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 16:26:19 2026 by rpki-client