Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
File:                     A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft (raw, json)
Hash identifier:          xhWtV7v+8cP4WqltRNu5wAnaL5gS899iyilQnTmGxrw=
Subject key identifier:   58:A1:39:46:14:60:ED:71:9E:F6:B7:D3:55:07:43:7C:5A:F2:66:6C
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Certificate issuer:       /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial:       1A18A9069D71D49EF3319780C57665ADD87B74CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
Manifest number:          080C
Signing time:             Mon 26 Oct 2026 11:17:15 +0000
Manifest this update:     Mon 26 Oct 2026 11:12:15 +0000
Manifest next update:     Tue 27 Oct 2026 14:54:15 +0000
Files and hashes:         1: 3139342e33312e3139362e302f32342d3234203d3e20313939373337.roa (hash: qc608O9yB+6tqsDBDhoINI3nGVPIPfhQ49+yA4p+itg=)
                          2: 3139342e33312e3139352e302f32342d3234203d3e20323133363638.roa (hash: pCuQNjK5vxSYZwtC7uzq87OexUIwDcw+LKWQti/Nk9E=)
                          3: 34352e39352e3231342e302f32342d3234203d3e20383334.roa (hash: 4X6EQaqJTKhKvN3TJ9GVIsbRzqsZ4tWpY3NIa3KMmkU=)
                          4: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl (hash: YG3j8Mmw+h9ZEPqTtR5GyZzlcfGE+9ZBCFMYNVbZCts=)
                          5: 3139342e33312e3139362e302f32342d3234203d3e20323030303137.roa (hash: mYDAbrfXE2SMRwMvSEq6zRWmL22fizr0hTNDEPKCMHw=)
                          6: 3139342e33312e3139352e302f32342d3234203d3e203334393933.roa (hash: /RrqrRO8J+Vsp3FaP0KZwFzXiRmxrRbyseKOqWdHYpY=)
                          7: 3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa (hash: /pttCsH3EqNiBOKmYU2SEK0bSx+Q89rOic38LmDTjfU=)
                          8: 3139342e33312e3139372e302f32342d3234203d3e20313532373236.roa (hash: fnlzFjlZYHqGcwGwrVLYX0etb5xRMldIiM5/qioqJCc=)
                          9: 34352e382e3231362e302f32342d3234203d3e20323131343430.roa (hash: e8OtHDGrOLuThDlvGfoczJuukmiEX6Dq6BRiXUAdwSs=)
                          10: 34352e39352e3231322e302f32342d3234203d3e20323039353534.roa (hash: 9IsmuufWVjFLEbYLLcJg7Yp7+j5DqB4kK41/uY19nMQ=)
                          11: 352e3138312e3138342e302f32342d3234203d3e20323132333335.roa (hash: UCQA4MebhnFRuGzYIjyz+Oaxw3thh569/39f5fjzuDM=)
                          12: 38352e3230392e3233312e302f32342d3234203d3e203135343430.roa (hash: EK+XXjX9beuphvsOJqRkCLgksPeOmMaixGjse5a+gDs=)
                          13: 352e3138312e3138352e302f32342d3234203d3e20323132333834.roa (hash: PkrjX5lEKZeku6HbTZFd/bgZgjS0Ra0J+FcQrImRmsQ=)
                          14: 3139342e33312e3139342e302f32342d3234203d3e203339333638.roa (hash: DPH0dq8YDEtGyRSQJNel2HWBEDDjKDRiZ8kPBGCbV5I=)
                          15: 38352e3230392e3232392e302f32342d3234203d3e203432383331.roa (hash: Xvqp6d2tCZnDciffj3hq6Qb1JaqBL/EwgvTbKq//+Ks=)
                          16: 38352e3230392e3233302e302f32342d3234203d3e20313430323234.roa (hash: l2LIzKinG0BfxQ8d6ejTKmtFPNdSKUK9y0vPJ8skqFk=)
                          17: 34352e39352e3231352e302f32342d3234203d3e203239383032.roa (hash: kUgYR/Kxqx56Hy24JaK1nIBftzOVeuZOaTeGulm2cfI=)
                          18: 352e3138312e3138342e302f32342d3234203d3e20323132363039.roa (hash: 6u+5ELEJLeXXB4+8NHbO0dG4EQaKYkOwI0K9os45OcQ=)
                          19: 36322e332e32302e302f32342d3234203d3e20323132393830.roa (hash: f/GL2G2QMX1DeHxo/IzFzuj9b3uiMiTDtg1wGwI4Lb8=)
                          20: 322e35392e36322e302f32342d3234203d3e203536363535.roa (hash: 4EVwlY91Vkuy79loMlCVFMeATW2Zd/Dn57Gy1wS/GpY=)
                          21: 38352e3230392e3233312e302f32342d3234203d3e20323133373732.roa (hash: ZhP+zpXWUfzVW2D3Gh421wDniumfO+kc6/F7MRB7boU=)
                          22: 34352e382e3231372e302f32342d3234203d3e20383334.roa (hash: lxgDM+2IpOwskjSyLj/88e3oNG4qGZLEbcXn/wQBWJ8=)
                          23: 322e35392e36332e302f32342d3234203d3e203536363535.roa (hash: nG8puCpSNLbVRezQJ6NEb6pqiujF9Ii465n8Wl9qCgE=)
                          24: 322e35392e36302e302f32342d3234203d3e20383334.roa (hash: 6oFhbwS32nNztM+MkZFvFVF8FZ6win/Ti/cCKIVdiGM=)
                          25: 34352e382e3231392e302f32342d3234203d3e2039303039.roa (hash: VVBKfj3oX4V4HqDYQe/w0vIXEHmTptmcb2dA6LN81Ys=)
                          26: 34352e39352e3231322e302f32322d3232203d3e2037303239.roa (hash: d9+cKpTdsfno2v/b+IKbhlhODzZZZTwj8EEe6uEOYgw=)
                          27: 34352e39352e3231332e302f32342d3234203d3e20343030303339.roa (hash: J1EW+hHtD32FPQGp7ofq9HLTlopn5evJHbexaxjWVK0=)
                          28: 352e3138312e3138372e302f32342d3234203d3e20323135373033.roa (hash: EJ6RmJBNoUg0c9WoYw2Ja1OnADVswQoLG/EoG0ZGnFE=)
                          29: 3134362e31392e33382e302f32342d3234203d3e203136323736.roa (hash: norYvgZGO2Imho4UnQcnY8UITUyuaQwpwpHqXsoPDao=)
                          30: 38352e3230392e3233302e302f32342d3234203d3e203633393032.roa (hash: VaOxQtitcotEwDKcqVbfty4V+UnBaFXCz621Z/5UMPE=)
                          31: 322e35392e36312e302f32342d3234203d3e203438323636.roa (hash: sgoOb4bX1m2rIZlacxTZqlmJneicsHhOxQYCb/BB8fA=)
                          32: 3139342e33312e3139352e302f32342d3234203d3e203132383236.roa (hash: dZ5pA0FTXTMIyebmvvTrXa2pwRmRVDj8qy5ZN+EkpPo=)
                          33: 352e3138312e3138362e302f32342d3234203d3e20323036313530.roa (hash: QGg1o/UsEXwX7QWOmnciGR0lfU5zaV2UWyNlVxa/Ka8=)
                          34: 34352e382e3231382e302f32342d3234203d3e20323132333834.roa (hash: iATVUumriorK7Pdv5iKgHpx/CwKgX/9pfUHykvA0Wrc=)
                          35: 38352e3230392e3232382e302f32342d3234203d3e203230343733.roa (hash: 1VJONXDxJnPHUDzUm7XiO/UF/aXr3KYuVDC6vKiNDOc=)
                          36: 34352e39352e3231352e302f32342d3234203d3e203631333137.roa (hash: Set9jSjJnZk4FzDhKsQCeyo0iC0093IITgk8mXGFRYE=)
                          37: 3134362e31392e33382e302f32342d3234203d3e20313939363534.roa (hash: jX4C5dkRnCIJowfhDMXYwrQg434yiv1EsWttrHB9oRM=)
                          38: 352e3138312e3138352e302f32342d3234203d3e20323131333733.roa (hash: tIeHJEF41zbDRQ8KbMBp/GsLGj1RgNxno+RElBJQNMw=)
                          39: 3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa (hash: X70d0T4GWN6rC/5/Z7B3IR7A4QtMvYWM6LmuwXwdnH0=)
                          40: 352e3138312e3138342e302f32342d3234203d3e20323131333733.roa (hash: 2zHb0T4tIHau6aSZ9D+c/6DXvLxBGB8a+KLhel+Tre4=)
                          41: 34352e382e3231362e302f32342d3234203d3e20323132333834.roa (hash: a81beBwcXvnxQQXt8vP0FnYxX0zBkKmQl4zg0OFOfqc=)
                          42: 38352e3230392e3233302e302f32342d3234203d3e203138313836.roa (hash: wLYhvbcU/etiFzebOUkFMR3b0g4xeh82nSHNvUEIAsY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:18:a9:06:9d:71:d4:9e:f3:31:97:80:c5:76:65:ad:d8:7b:74:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
        Validity
            Not Before: Oct 26 11:12:15 2026 GMT
            Not After : Oct 27 14:54:15 2026 GMT
        Subject: CN=58A139461460ED719EF6B7D35507437C5AF2666C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:54:5f:66:8b:b1:cb:89:ec:f3:38:b0:c3:95:
                    85:7c:3d:cb:e5:e1:15:89:8f:69:31:be:0d:f8:49:
                    f1:87:0d:9c:0b:34:70:b8:1f:f4:2e:01:4f:bf:fc:
                    ab:c2:b4:72:10:2f:c6:cc:9e:85:1b:fb:d2:7e:bf:
                    22:de:28:62:ab:66:d6:c6:47:58:e2:de:1f:36:fc:
                    13:b0:df:ab:62:61:fc:2e:ee:94:6e:fc:e3:c7:3c:
                    9e:3a:0e:c3:24:5d:13:4d:c3:84:0f:25:0f:c3:b3:
                    0b:42:73:5e:08:c6:10:07:cf:e3:46:f5:7d:a3:33:
                    d8:99:3c:9d:c8:ee:bb:cc:66:e4:17:41:bd:b4:71:
                    79:c1:6c:0b:6d:f6:e9:f5:29:38:33:87:87:f3:4d:
                    4d:6b:aa:19:58:39:94:02:64:49:8f:72:8c:16:52:
                    fa:c8:29:f0:64:43:74:0f:70:8b:74:85:b6:49:0c:
                    7d:2e:6f:eb:82:19:2c:a2:f4:ca:9d:de:32:ae:36:
                    e5:92:ec:88:b3:ca:a6:14:2d:bf:2a:2c:d3:13:92:
                    87:8b:ab:fb:7c:a4:e7:bf:da:cd:90:f7:7b:dc:79:
                    5a:67:c9:87:07:8f:03:eb:c9:92:3c:d9:00:5c:3a:
                    f7:94:b9:ab:9e:5c:d1:94:24:85:83:15:f4:34:d0:
                    a3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A1:39:46:14:60:ED:71:9E:F6:B7:D3:55:07:43:7C:5A:F2:66:6C
            X509v3 Authority Key Identifier:
                keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:e2:2d:53:25:3a:d8:1b:9e:ff:1e:00:7d:7b:c1:76:6f:3f:
         0e:76:a1:29:01:03:39:c6:d3:6f:92:5c:e1:29:fe:10:31:aa:
         b5:a6:b5:b5:f1:7c:0a:5f:d9:cb:a8:7a:97:ee:5b:17:bf:67:
         2c:d7:34:3c:5c:1b:d4:21:66:40:07:4e:47:a3:91:c4:3a:ab:
         65:03:1b:06:88:f9:d8:29:bd:02:a4:4e:af:fb:4b:81:cd:fe:
         67:e9:a1:b8:54:40:8d:71:d3:6c:09:98:37:aa:a5:50:a7:f9:
         e7:cc:c8:fe:8e:8b:93:69:a0:ae:d9:69:c6:22:41:fb:77:b2:
         6d:2a:45:64:66:5d:8a:f1:44:ce:86:42:d1:c9:21:73:ed:da:
         68:cd:cc:72:4c:b5:91:63:4e:1a:7e:dd:0a:ff:c3:99:04:cf:
         84:ad:79:0f:5a:e4:87:91:97:26:e5:b5:e0:c9:72:84:33:af:
         81:48:c2:a3:51:5d:3f:61:19:fe:b7:b4:fd:08:d3:79:18:f2:
         5f:85:1a:33:3c:33:b4:a8:26:0f:21:be:42:3d:3d:2b:2e:8b:
         c6:4d:29:c7:75:50:a0:fa:40:31:af:e5:94:8e:3a:54:7e:56:
         3e:fd:1f:de:91:36:bc:f2:d9:38:6a:f6:fb:1c:f8:f7:ee:e2:
         28:07:d1:2c
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUGhipBp1x1J7zMZeAxXZlrdh7dMowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTk0MjBlNmM2ZjI0YjBlNDIyZGE3ZmU3ZTQyMGVmNTAz
NTRmNDVjNjAeFw0yNjEwMjYxMTEyMTVaFw0yNjEwMjcxNDU0MTVaMDMxMTAvBgNV
BAMTKDU4QTEzOTQ2MTQ2MEVENzE5RUY2QjdEMzU1MDc0MzdDNUFGMjY2NkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkVF9mi7HLiezzOLDDlYV8Pcvl
4RWJj2kxvg34SfGHDZwLNHC4H/QuAU+//KvCtHIQL8bMnoUb+9J+vyLeKGKrZtbG
R1ji3h82/BOw36tiYfwu7pRu/OPHPJ46DsMkXRNNw4QPJQ/DswtCc14IxhAHz+NG
9X2jM9iZPJ3I7rvMZuQXQb20cXnBbAtt9un1KTgzh4fzTU1rqhlYOZQCZEmPcowW
UvrIKfBkQ3QPcIt0hbZJDH0ub+uCGSyi9Mqd3jKuNuWS7IizyqYULb8qLNMTkoeL
q/t8pOe/2s2Q93vceVpnyYcHjwPryZI82QBcOveUuaueXNGUJIWDFfQ00KPpAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUWKE5RhRg7XGe9rfTVQdDfFryZmwwHwYDVR0j
BBgwFoAUqUIObG8ksOQi2n/n5CDvUDVPRcYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWY5ODIzZDAtMDg1NS00MWYyLWFjNDYtNTlhMmU5OGRh
NzM2LzEvQTk0MjBFNkM2RjI0QjBFNDIyREE3RkU3RTQyMEVGNTAzNTRGNDVDNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FVSU9iRzhrc09RaTJuX241Q0R2VURW
UFJjWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xZjk4MjNkMC0w
ODU1LTQxZjItYWM0Ni01OWEyZTk4ZGE3MzYvMS9BOTQyMEU2QzZGMjRCMEU0MjJE
QTdGRTdFNDIwRUY1MDM1NEY0NUM2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADeItUyU62Bue/x4AfXvB
dm8/DnahKQEDOcbTb5Jc4Sn+EDGqtaa1tfF8Cl/Zy6h6l+5bF79nLNc0PFwb1CFm
QAdOR6ORxDqrZQMbBoj52Cm9AqROr/tLgc3+Z+mhuFRAjXHTbAmYN6qlUKf558zI
/o6Lk2mgrtlpxiJB+3eybSpFZGZdivFEzoZC0ckhc+3aaM3Mcky1kWNOGn7dCv/D
mQTPhK15D1rkh5GXJuW14MlyhDOvgUjCo1FdP2EZ/re0/QjTeRjyX4UaMzwztKgm
DyG+Qj09Ky6Lxk0px3VQoPpAMa/llI46VH5WPv0f3pE2vPLZOGr2+xz49+7iKAfR
LA==
-----END CERTIFICATE-----
Generated at Mon Oct 26 20:56:13 2026 by rpki-client