Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
File:                     A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft (raw, json)
Hash identifier:          EWlC9j7G0w8mLP8yHNHmgynbfoDc29EGqvnLC3YNYZo=
Subject key identifier:   4B:02:9D:F7:FF:42:DE:AD:8C:52:FC:7D:32:D5:C2:36:04:3E:5E:DE
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Certificate issuer:       /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial:       54696E51B97D388F21B8628D42DF33A364E2D7C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
Manifest number:          06E4
Signing time:             Thu 09 Apr 2026 06:16:53 +0000
Manifest this update:     Thu 09 Apr 2026 06:11:53 +0000
Manifest next update:     Fri 10 Apr 2026 09:28:53 +0000
Files and hashes:         1: 38352e3230392e3233302e302f32342d3234203d3e203633393032.roa (hash: P3VDMMBoXLUjrVK3m58S6qhassJbF7wO/iSY6p4T2ZU=)
                          2: 38352e3230392e3233302e302f32342d3234203d3e203138313836.roa (hash: +OSq4m/6RpxEZih63506Gv6cOkBhW+YglqTPEKg/ZcM=)
                          3: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl (hash: MB9jj2PCrp8p0Td4qbS27T+Cb6ft+hQuY7R7ypqHbrQ=)
                          4: 3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa (hash: 1cwuvx0f/bXZ/DwexRmaaQu0tTmkULuIbOfrQVnX4ao=)
                          5: 322e35392e36322e302f32342d3234203d3e20313432313131.roa (hash: c23s9WCLyWR8C29b7voS/R0hWodZcVrxRN5kAioljng=)
                          6: 3139342e33312e3139372e302f32342d3234203d3e203432383331.roa (hash: KMAsq44hIBrFB+eRrhhDssa2B+eAZmGDL1feRYL/R5o=)
                          7: 34352e382e3231362e302f32342d3234203d3e20323131343430.roa (hash: e8OtHDGrOLuThDlvGfoczJuukmiEX6Dq6BRiXUAdwSs=)
                          8: 322e35392e36332e302f32342d3234203d3e20383334.roa (hash: 8DqvUUgTHwg4fnhfYD2q3DFHCSCucv2RToLFRdMK/4s=)
                          9: 352e3138312e3138342e302f32342d3234203d3e20323132333335.roa (hash: UCQA4MebhnFRuGzYIjyz+Oaxw3thh569/39f5fjzuDM=)
                          10: 322e35392e36312e302f32342d3234203d3e203438323636.roa (hash: sgoOb4bX1m2rIZlacxTZqlmJneicsHhOxQYCb/BB8fA=)
                          11: 34352e39352e3231352e302f32342d3234203d3e203239383032.roa (hash: Q1OlQJwADffmDxnZKj7bvhSo1kOL5aXrHpMtVtZFtuQ=)
                          12: 38352e3230392e3233302e302f32342d3234203d3e20313430323234.roa (hash: X9S/vAQJZJ3+zexclWqp51kmLLKozc6jAta0ZYx43Ns=)
                          13: 3139342e33312e3139352e302f32342d3234203d3e20323133363638.roa (hash: pCuQNjK5vxSYZwtC7uzq87OexUIwDcw+LKWQti/Nk9E=)
                          14: 352e3138312e3138372e302f32342d3234203d3e20323135373033.roa (hash: EJ6RmJBNoUg0c9WoYw2Ja1OnADVswQoLG/EoG0ZGnFE=)
                          15: 34352e39352e3231322e302f32342d3234203d3e20323039353534.roa (hash: 9IsmuufWVjFLEbYLLcJg7Yp7+j5DqB4kK41/uY19nMQ=)
                          16: 322e35392e36302e302f32342d3234203d3e20323132323338.roa (hash: hZ11O4/GfIQ3ZyUgAuxIn+0GkFLCBYYNN1OfZIqVDJk=)
                          17: 34352e39352e3231352e302f32342d3234203d3e203631333137.roa (hash: jtw5h4s7N892mHMRX7q1v9D/8tuL7heVW+cms9i1OJM=)
                          18: 3139342e33312e3139362e302f32342d3234203d3e20323030303137.roa (hash: +5av7/JwxJ2GdszhVyEajY1bsnLhd2JhS01B+/f5cdU=)
                          19: 3134362e31392e33382e302f32342d3234203d3e203136323736.roa (hash: norYvgZGO2Imho4UnQcnY8UITUyuaQwpwpHqXsoPDao=)
                          20: 34352e382e3231362e302f32342d3234203d3e20323132333834.roa (hash: a81beBwcXvnxQQXt8vP0FnYxX0zBkKmQl4zg0OFOfqc=)
                          21: 3139342e33312e3139352e302f32342d3234203d3e203334393933.roa (hash: /RrqrRO8J+Vsp3FaP0KZwFzXiRmxrRbyseKOqWdHYpY=)
                          22: 352e3138312e3138352e302f32342d3234203d3e20323132333834.roa (hash: erSH6Mf15T5HOlDb5lpbU/Ku2eMK+cc/6OxLysGJmP4=)
                          23: 352e3138312e3138352e302f32342d3234203d3e20323131333733.roa (hash: 2IzUCrtAIyuz9E3rWXqOgG5uo4suNn7bGWeOLhfOKvg=)
                          24: 3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa (hash: 1EdzND/a/KltqRlIJaQnMPD7XH7CVfxCNY9eyK9ocYU=)
                          25: 3134362e31392e33382e302f32342d3234203d3e20313939363534.roa (hash: KCPy6uAOav6R+jmrUTgTpbZkeje3mnKOXa6FXDMEhhE=)
                          26: 38352e3230392e3232382e302f32342d3234203d3e203230343733.roa (hash: 1VJONXDxJnPHUDzUm7XiO/UF/aXr3KYuVDC6vKiNDOc=)
                          27: 3139342e33312e3139342e302f32342d3234203d3e203339333638.roa (hash: qMisc8M9fAgiB1zw7/Tn0y61M2FDJt3sqCMkzKcplhA=)
                          28: 34352e382e3231372e302f32342d3234203d3e20323134303235.roa (hash: +sPrCW3WqbeCRN41T+z7+AXOa7VPtKEnTOhpV5D7dWM=)
                          29: 352e3138312e3138342e302f32342d3234203d3e20323131333733.roa (hash: HxZ7OQY4wmmok4f1jyMFC6WkeyQaBhCRYtiYzwz8qYg=)
                          30: 322e35392e36322e302f32342d3234203d3e203633303233.roa (hash: /Ku1phd3ouPkx4ZDyzwkq+GI0U8NGNl14wVu1lc6q1k=)
                          31: 322e35392e36302e302f32342d3234203d3e203631333137.roa (hash: BBdnQvjsMGsAKdV0CMmUgkUx9rKK17g08iyDVXfqF5c=)
                          32: 34352e39352e3231342e302f32342d3234203d3e20383334.roa (hash: uyj9M5GZXb1vwLJgAddMi8WHcGBSQHUnQEDwce5+NPA=)
                          33: 38352e3230392e3232392e302f32342d3234203d3e203432383331.roa (hash: vjpMNqLq25F9up6mT05GhHQJMJ0KbktUxvDSn9v6kBA=)
                          34: 352e3138312e3138362e302f32342d3234203d3e20323036313530.roa (hash: QGg1o/UsEXwX7QWOmnciGR0lfU5zaV2UWyNlVxa/Ka8=)
                          35: 34352e382e3231392e302f32342d3234203d3e2039303039.roa (hash: 0zn1M6udTfOcCIE/Cifu6WDNTkQzSgcujlgX6HE4/sQ=)
                          36: 3139342e33312e3139362e302f32342d3234203d3e20313939373337.roa (hash: qc608O9yB+6tqsDBDhoINI3nGVPIPfhQ49+yA4p+itg=)
                          37: 34352e39352e3231332e302f32342d3234203d3e20343030303339.roa (hash: XrIv1BWbF+to8I3saogND52oHBVFoDY38lWpbUFLA6o=)
                          38: 3139342e33312e3139352e302f32342d3234203d3e203132383236.roa (hash: dZ5pA0FTXTMIyebmvvTrXa2pwRmRVDj8qy5ZN+EkpPo=)
                          39: 38352e3230392e3233312e302f32342d3234203d3e203135343430.roa (hash: 5P7OofszcYzyRXLoqtlNETBM0YQubML8godGGz1Zc2U=)
                          40: 34352e382e3231382e302f32342d3234203d3e20323132333834.roa (hash: tj3yrp12EwOeT1ZEKtZIphksitaxnh11pc39cLh8XvY=)
                          41: 34352e39352e3231322e302f32322d3232203d3e2037303239.roa (hash: b3HfoeSSJnwEFBW/P8/Hh1DNPoifdQtxChWclKR01cY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 10 Apr 2026 09:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:69:6e:51:b9:7d:38:8f:21:b8:62:8d:42:df:33:a3:64:e2:d7:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
        Validity
            Not Before: Apr  9 06:11:53 2026 GMT
            Not After : Apr 10 09:28:53 2026 GMT
        Subject: CN=4B029DF7FF42DEAD8C52FC7D32D5C236043E5EDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:30:a8:de:9a:3b:52:97:0f:f7:e8:12:15:51:
                    bf:b5:19:d8:ca:d8:6d:5b:70:0a:16:a6:14:df:af:
                    a3:35:db:f0:da:2e:09:90:18:d2:64:84:aa:03:5e:
                    0f:b9:4d:af:df:f1:64:4b:4c:e0:92:b1:99:be:87:
                    02:b3:ac:c3:d1:31:3b:b9:8e:f7:6a:54:69:4c:01:
                    2f:3d:70:8f:dc:75:1a:d7:7a:23:fb:eb:2f:d4:c7:
                    ba:11:b3:45:21:f9:bb:71:45:1f:45:b4:ef:29:7f:
                    ce:1e:49:84:24:d0:81:e0:9f:01:fe:c8:71:dc:8e:
                    c8:de:22:70:18:0b:24:f9:25:67:91:49:c6:a6:8f:
                    74:26:c7:b7:53:e2:0f:f1:4e:c6:88:23:25:89:8d:
                    64:68:79:5d:a1:78:1b:2d:ea:af:7e:cb:68:1b:cd:
                    2e:bd:94:59:38:bf:b4:6c:e1:d6:30:10:f5:ca:80:
                    7e:c1:9c:14:a2:e9:48:f7:26:9f:dd:03:06:fa:74:
                    89:25:20:d6:e7:0a:37:fe:ac:a8:3f:94:43:94:9b:
                    38:c3:57:73:6e:2e:33:31:ee:d3:68:d3:fa:34:ef:
                    84:03:50:02:af:c2:a7:35:41:78:72:8d:3c:69:f1:
                    20:f7:0e:dc:4c:0c:a6:45:14:b3:ce:47:e7:19:98:
                    bf:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:02:9D:F7:FF:42:DE:AD:8C:52:FC:7D:32:D5:C2:36:04:3E:5E:DE
            X509v3 Authority Key Identifier:
                keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:5d:03:9b:f5:2e:cc:ff:0c:c9:50:44:56:2d:08:44:b0:b2:
         ee:15:2c:c1:e1:3d:fd:15:66:35:8c:db:2a:6e:74:63:5d:e4:
         8c:a9:e5:44:1f:12:9d:ba:48:3e:87:fe:37:a1:89:09:80:ad:
         94:e4:ad:f6:6f:33:fe:4d:a5:15:04:0c:52:c4:58:28:6a:b8:
         cf:93:54:b4:eb:1b:a0:41:cd:a3:0a:a0:56:02:e3:0c:93:47:
         ca:46:67:9b:9a:34:1d:57:28:5b:35:c2:1c:f4:97:62:39:83:
         12:29:33:05:01:20:08:ca:86:1c:08:d5:fa:4f:71:fd:3e:3e:
         3c:a9:ba:35:3c:d8:d5:d2:18:bc:d5:3b:66:2e:98:0a:14:94:
         60:41:eb:c4:f7:fd:87:d1:da:d5:37:c7:60:4e:f0:f5:1c:17:
         e2:fd:82:14:27:95:28:7e:54:d0:ed:38:1f:be:5c:b8:0d:73:
         96:45:23:89:df:04:ad:93:4c:0e:7b:f5:a8:42:4e:d2:36:af:
         97:5a:37:07:03:7f:62:fa:85:05:83:a5:e5:4b:9c:32:4c:bc:
         60:ad:05:1f:8d:44:9b:17:a2:2f:48:02:5c:94:40:a1:05:d4:
         6b:cf:62:0d:12:93:98:3f:40:37:32:20:8a:34:aa:08:c9:c8:
         68:06:ea:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 15:07:29 2026 by rpki-client