Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
File:                     A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft (raw, json)
Hash identifier:          D8R0jV4E7vyQu98GSv+ZvKCHTS1VUch02udN+jjBfq0=
Subject key identifier:   1F:4C:39:01:21:6B:E0:B1:BD:FB:40:1F:DF:9B:E1:B5:7C:7B:43:47
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Certificate issuer:       /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial:       5B3C627799651BF9E16EB6867692954451DE518B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
Manifest number:          07CA
Signing time:             Mon 14 Sep 2026 00:55:19 +0000
Manifest this update:     Mon 14 Sep 2026 00:50:19 +0000
Manifest next update:     Tue 15 Sep 2026 00:57:19 +0000
Files and hashes:         1: 352e3138312e3138372e302f32342d3234203d3e20323135373033.roa (hash: EJ6RmJBNoUg0c9WoYw2Ja1OnADVswQoLG/EoG0ZGnFE=)
                          2: 38352e3230392e3233302e302f32342d3234203d3e20313430323234.roa (hash: l2LIzKinG0BfxQ8d6ejTKmtFPNdSKUK9y0vPJ8skqFk=)
                          3: 34352e382e3231392e302f32342d3234203d3e2039303039.roa (hash: VVBKfj3oX4V4HqDYQe/w0vIXEHmTptmcb2dA6LN81Ys=)
                          4: 34352e382e3231372e302f32342d3234203d3e20383334.roa (hash: lxgDM+2IpOwskjSyLj/88e3oNG4qGZLEbcXn/wQBWJ8=)
                          5: 3139342e33312e3139362e302f32342d3234203d3e20313939373337.roa (hash: qc608O9yB+6tqsDBDhoINI3nGVPIPfhQ49+yA4p+itg=)
                          6: 352e3138312e3138342e302f32342d3234203d3e20323131333733.roa (hash: HxZ7OQY4wmmok4f1jyMFC6WkeyQaBhCRYtiYzwz8qYg=)
                          7: 3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa (hash: /pttCsH3EqNiBOKmYU2SEK0bSx+Q89rOic38LmDTjfU=)
                          8: 3139342e33312e3139352e302f32342d3234203d3e203334393933.roa (hash: /RrqrRO8J+Vsp3FaP0KZwFzXiRmxrRbyseKOqWdHYpY=)
                          9: 322e35392e36312e302f32342d3234203d3e203438323636.roa (hash: sgoOb4bX1m2rIZlacxTZqlmJneicsHhOxQYCb/BB8fA=)
                          10: 38352e3230392e3232392e302f32342d3234203d3e203432383331.roa (hash: vjpMNqLq25F9up6mT05GhHQJMJ0KbktUxvDSn9v6kBA=)
                          11: 3139342e33312e3139342e302f32342d3234203d3e203339333638.roa (hash: qMisc8M9fAgiB1zw7/Tn0y61M2FDJt3sqCMkzKcplhA=)
                          12: 352e3138312e3138342e302f32342d3234203d3e20323132333335.roa (hash: UCQA4MebhnFRuGzYIjyz+Oaxw3thh569/39f5fjzuDM=)
                          13: 3134362e31392e33382e302f32342d3234203d3e20313939363534.roa (hash: KCPy6uAOav6R+jmrUTgTpbZkeje3mnKOXa6FXDMEhhE=)
                          14: 38352e3230392e3233312e302f32342d3234203d3e203135343430.roa (hash: 7ez4FNDsc2VXRnHlSjtzOmyRSh/gDET/tzdpB8U6faI=)
                          15: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl (hash: G8pMdA4meJ8hPrQbLdKagXwfwfCyOGREIvY1/w1Rj8s=)
                          16: 3139342e33312e3139352e302f32342d3234203d3e20323133363638.roa (hash: pCuQNjK5vxSYZwtC7uzq87OexUIwDcw+LKWQti/Nk9E=)
                          17: 38352e3230392e3232382e302f32342d3234203d3e203230343733.roa (hash: 1VJONXDxJnPHUDzUm7XiO/UF/aXr3KYuVDC6vKiNDOc=)
                          18: 322e35392e36322e302f32332d3234203d3e20383334.roa (hash: U8K8ByMMhjORRMnN107C0qHzPl2EMue6t1DEVbbMMv4=)
                          19: 34352e39352e3231342e302f32342d3234203d3e20383334.roa (hash: 4X6EQaqJTKhKvN3TJ9GVIsbRzqsZ4tWpY3NIa3KMmkU=)
                          20: 34352e382e3231362e302f32342d3234203d3e20323132333834.roa (hash: a81beBwcXvnxQQXt8vP0FnYxX0zBkKmQl4zg0OFOfqc=)
                          21: 36322e332e32302e302f32342d3234203d3e20323132393830.roa (hash: f/GL2G2QMX1DeHxo/IzFzuj9b3uiMiTDtg1wGwI4Lb8=)
                          22: 3139342e33312e3139362e302f32342d3234203d3e20323030303137.roa (hash: mYDAbrfXE2SMRwMvSEq6zRWmL22fizr0hTNDEPKCMHw=)
                          23: 34352e39352e3231322e302f32322d3232203d3e2037303239.roa (hash: b3HfoeSSJnwEFBW/P8/Hh1DNPoifdQtxChWclKR01cY=)
                          24: 352e3138312e3138352e302f32342d3234203d3e20323131333733.roa (hash: tIeHJEF41zbDRQ8KbMBp/GsLGj1RgNxno+RElBJQNMw=)
                          25: 3139342e33312e3139352e302f32342d3234203d3e203132383236.roa (hash: dZ5pA0FTXTMIyebmvvTrXa2pwRmRVDj8qy5ZN+EkpPo=)
                          26: 38352e3230392e3233302e302f32342d3234203d3e203138313836.roa (hash: wLYhvbcU/etiFzebOUkFMR3b0g4xeh82nSHNvUEIAsY=)
                          27: 34352e39352e3231352e302f32342d3234203d3e203631333137.roa (hash: Set9jSjJnZk4FzDhKsQCeyo0iC0093IITgk8mXGFRYE=)
                          28: 34352e39352e3231352e302f32342d3234203d3e203239383032.roa (hash: kUgYR/Kxqx56Hy24JaK1nIBftzOVeuZOaTeGulm2cfI=)
                          29: 34352e39352e3231322e302f32342d3234203d3e20323039353534.roa (hash: 9IsmuufWVjFLEbYLLcJg7Yp7+j5DqB4kK41/uY19nMQ=)
                          30: 34352e39352e3231332e302f32342d3234203d3e20343030303339.roa (hash: J1EW+hHtD32FPQGp7ofq9HLTlopn5evJHbexaxjWVK0=)
                          31: 34352e382e3231362e302f32342d3234203d3e20323131343430.roa (hash: e8OtHDGrOLuThDlvGfoczJuukmiEX6Dq6BRiXUAdwSs=)
                          32: 3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa (hash: X70d0T4GWN6rC/5/Z7B3IR7A4QtMvYWM6LmuwXwdnH0=)
                          33: 3134362e31392e33382e302f32342d3234203d3e203136323736.roa (hash: norYvgZGO2Imho4UnQcnY8UITUyuaQwpwpHqXsoPDao=)
                          34: 352e3138312e3138342e302f32342d3234203d3e20323132363039.roa (hash: 6u+5ELEJLeXXB4+8NHbO0dG4EQaKYkOwI0K9os45OcQ=)
                          35: 352e3138312e3138352e302f32342d3234203d3e20323132333834.roa (hash: PkrjX5lEKZeku6HbTZFd/bgZgjS0Ra0J+FcQrImRmsQ=)
                          36: 34352e382e3231382e302f32342d3234203d3e20323132333834.roa (hash: tj3yrp12EwOeT1ZEKtZIphksitaxnh11pc39cLh8XvY=)
                          37: 322e35392e36302e302f32342d3234203d3e20383334.roa (hash: 6oFhbwS32nNztM+MkZFvFVF8FZ6win/Ti/cCKIVdiGM=)
                          38: 38352e3230392e3233302e302f32342d3234203d3e203633393032.roa (hash: VaOxQtitcotEwDKcqVbfty4V+UnBaFXCz621Z/5UMPE=)
                          39: 352e3138312e3138362e302f32342d3234203d3e20323036313530.roa (hash: QGg1o/UsEXwX7QWOmnciGR0lfU5zaV2UWyNlVxa/Ka8=)
                          40: 3139342e33312e3139372e302f32342d3234203d3e203432383331.roa (hash: DVV+/2t2q4F/UwYf2BwA2+sNCvS3U0sf946czL0uGuw=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 15 Sep 2026 00:57:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:3c:62:77:99:65:1b:f9:e1:6e:b6:86:76:92:95:44:51:de:51:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
        Validity
            Not Before: Sep 14 00:50:19 2026 GMT
            Not After : Sep 15 00:57:19 2026 GMT
        Subject: CN=1F4C3901216BE0B1BDFB401FDF9BE1B57C7B4347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f6:2a:14:26:0a:7c:67:93:c3:53:76:be:1d:
                    31:50:92:0f:69:ab:5f:dd:89:4c:f3:07:6a:d4:c9:
                    d7:f1:ac:a8:cb:0a:46:69:74:f0:89:94:bc:01:34:
                    be:d4:6b:76:ed:e0:50:fd:8b:6d:2c:34:6e:0b:e9:
                    49:a0:eb:ae:30:62:83:76:a9:52:4c:f6:ef:c6:70:
                    46:f9:d3:fe:96:9a:4e:4e:84:a9:90:ce:18:bc:ee:
                    34:25:3e:83:1c:21:2e:d3:01:17:10:9c:ed:0b:92:
                    8b:35:85:fe:89:f9:e2:09:e4:98:37:60:1e:18:f1:
                    d8:6b:cc:e3:e6:91:77:33:6a:c2:0a:15:0a:2b:df:
                    d6:c5:56:06:cb:0e:0d:e9:2b:ab:bc:67:44:8a:5b:
                    5a:5a:11:61:d5:84:15:42:36:02:36:43:e3:5f:24:
                    51:f2:a3:a1:3f:57:91:9a:b1:09:3e:e5:57:cd:37:
                    00:7b:1e:ea:05:ae:64:17:c3:20:a6:d3:f1:84:ab:
                    48:d0:5a:7f:6d:f2:7f:82:b7:90:df:fc:4d:a6:17:
                    20:05:88:7e:0b:ac:81:a5:9a:57:90:6b:eb:a5:fe:
                    17:1b:23:88:a9:86:48:13:d2:f1:9f:fa:bc:a6:d3:
                    0c:4b:c4:1d:0b:b2:14:55:9c:99:ca:79:bc:10:dc:
                    18:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:4C:39:01:21:6B:E0:B1:BD:FB:40:1F:DF:9B:E1:B5:7C:7B:43:47
            X509v3 Authority Key Identifier:
                keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:36:b6:3d:18:af:9a:21:1f:0d:e1:48:5a:aa:c8:f2:df:5f:
         91:02:f7:c6:21:7d:32:4c:52:b3:7f:47:77:61:89:b5:3b:6e:
         0a:8d:56:4a:1e:ae:07:15:d6:86:eb:e0:cc:c7:f0:0d:12:5e:
         91:39:90:fe:9d:58:28:65:23:fd:ec:a4:4e:ca:73:ad:66:93:
         16:9d:7f:00:7f:4f:ab:59:7f:1c:6d:ca:d2:87:c8:31:0d:8f:
         e0:ad:46:f2:ec:d6:dc:7c:cb:fd:ac:ca:f8:f3:c0:d5:4c:48:
         57:8f:a3:3b:f5:27:79:f2:38:72:c1:cd:8f:5a:7c:93:97:61:
         42:44:c4:3b:76:16:fa:c5:1e:c4:17:31:ae:7c:cd:0c:7f:c0:
         b4:bc:25:00:9c:3a:7a:d9:8e:6b:41:f8:33:94:50:e5:f1:da:
         e8:f0:36:ca:b6:14:1f:13:80:1a:a8:63:af:28:22:63:f2:65:
         20:df:cc:24:4f:bb:15:6a:22:bf:4b:b9:4e:ef:24:d0:08:29:
         a6:89:fe:ff:45:c9:af:9e:30:9e:d7:2a:8d:25:79:74:97:26:
         40:94:99:73:67:69:50:1e:45:f5:11:2c:1e:b5:28:02:c9:b5:
         0c:c5:a5:f5:ac:b1:69:7e:f8:67:60:2f:b0:fa:40:cd:d1:98:
         2b:f1:90:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 14:50:16 2026 by rpki-client