Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
File:                     A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft (raw, json)
Hash identifier:          5izZebbSlhmsNGYTWLQ1tc7OVJ1TMblETS0cEbJM0v8=
Subject key identifier:   E6:40:1B:24:A0:A2:AF:A6:BF:17:01:DA:E6:12:16:07:3F:12:3A:5C
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Certificate issuer:       /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial:       71CB36C191B54BCB108FFD9AEDB0C9C1EA49138A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
Manifest number:          0724
Signing time:             Tue 19 May 2026 07:18:23 +0000
Manifest this update:     Tue 19 May 2026 07:13:23 +0000
Manifest next update:     Wed 20 May 2026 10:39:23 +0000
Files and hashes:         1: 3139342e33312e3139342e302f32342d3234203d3e203339333638.roa (hash: qMisc8M9fAgiB1zw7/Tn0y61M2FDJt3sqCMkzKcplhA=)
                          2: 352e3138312e3138352e302f32342d3234203d3e20323132333834.roa (hash: PkrjX5lEKZeku6HbTZFd/bgZgjS0Ra0J+FcQrImRmsQ=)
                          3: 34352e382e3231362e302f32342d3234203d3e20323131343430.roa (hash: e8OtHDGrOLuThDlvGfoczJuukmiEX6Dq6BRiXUAdwSs=)
                          4: 3139342e33312e3139352e302f32342d3234203d3e20323133363638.roa (hash: pCuQNjK5vxSYZwtC7uzq87OexUIwDcw+LKWQti/Nk9E=)
                          5: 3139342e33312e3139352e302f32342d3234203d3e203334393933.roa (hash: /RrqrRO8J+Vsp3FaP0KZwFzXiRmxrRbyseKOqWdHYpY=)
                          6: 352e3138312e3138342e302f32342d3234203d3e20323132333335.roa (hash: UCQA4MebhnFRuGzYIjyz+Oaxw3thh569/39f5fjzuDM=)
                          7: 3139342e33312e3139372e302f32342d3234203d3e203432383331.roa (hash: KMAsq44hIBrFB+eRrhhDssa2B+eAZmGDL1feRYL/R5o=)
                          8: 36322e332e32302e302f32342d3234203d3e20323132393830.roa (hash: f/GL2G2QMX1DeHxo/IzFzuj9b3uiMiTDtg1wGwI4Lb8=)
                          9: 3139342e33312e3139352e302f32342d3234203d3e203132383236.roa (hash: dZ5pA0FTXTMIyebmvvTrXa2pwRmRVDj8qy5ZN+EkpPo=)
                          10: 352e3138312e3138372e302f32342d3234203d3e20323135373033.roa (hash: EJ6RmJBNoUg0c9WoYw2Ja1OnADVswQoLG/EoG0ZGnFE=)
                          11: 34352e39352e3231352e302f32342d3234203d3e203239383032.roa (hash: Q1OlQJwADffmDxnZKj7bvhSo1kOL5aXrHpMtVtZFtuQ=)
                          12: 352e3138312e3138342e302f32342d3234203d3e20323131333733.roa (hash: HxZ7OQY4wmmok4f1jyMFC6WkeyQaBhCRYtiYzwz8qYg=)
                          13: 38352e3230392e3233312e302f32342d3234203d3e203135343430.roa (hash: 5P7OofszcYzyRXLoqtlNETBM0YQubML8godGGz1Zc2U=)
                          14: 34352e39352e3231352e302f32342d3234203d3e203631333137.roa (hash: jtw5h4s7N892mHMRX7q1v9D/8tuL7heVW+cms9i1OJM=)
                          15: 38352e3230392e3233302e302f32342d3234203d3e203138313836.roa (hash: wLYhvbcU/etiFzebOUkFMR3b0g4xeh82nSHNvUEIAsY=)
                          16: 3139342e33312e3139362e302f32342d3234203d3e20323030303137.roa (hash: mYDAbrfXE2SMRwMvSEq6zRWmL22fizr0hTNDEPKCMHw=)
                          17: 34352e382e3231382e302f32342d3234203d3e20323132333834.roa (hash: tj3yrp12EwOeT1ZEKtZIphksitaxnh11pc39cLh8XvY=)
                          18: 34352e382e3231362e302f32342d3234203d3e20323132333834.roa (hash: a81beBwcXvnxQQXt8vP0FnYxX0zBkKmQl4zg0OFOfqc=)
                          19: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl (hash: bmMGVONLyWcTgxfB+D+beMMGu9RJ6dM3CkaHxX5Ofqs=)
                          20: 38352e3230392e3232392e302f32342d3234203d3e203432383331.roa (hash: vjpMNqLq25F9up6mT05GhHQJMJ0KbktUxvDSn9v6kBA=)
                          21: 34352e39352e3231342e302f32342d3234203d3e20313938323530.roa (hash: cWZ4izllTaa4CjT3fbEMgCbmIhf6LWTGafANc9j4YVM=)
                          22: 322e35392e36332e302f32342d3234203d3e20383334.roa (hash: 8DqvUUgTHwg4fnhfYD2q3DFHCSCucv2RToLFRdMK/4s=)
                          23: 3134362e31392e33382e302f32342d3234203d3e203136323736.roa (hash: norYvgZGO2Imho4UnQcnY8UITUyuaQwpwpHqXsoPDao=)
                          24: 322e35392e36322e302f32342d3234203d3e203633303233.roa (hash: /Ku1phd3ouPkx4ZDyzwkq+GI0U8NGNl14wVu1lc6q1k=)
                          25: 3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa (hash: 1cwuvx0f/bXZ/DwexRmaaQu0tTmkULuIbOfrQVnX4ao=)
                          26: 38352e3230392e3233302e302f32342d3234203d3e203633393032.roa (hash: VaOxQtitcotEwDKcqVbfty4V+UnBaFXCz621Z/5UMPE=)
                          27: 3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa (hash: 1EdzND/a/KltqRlIJaQnMPD7XH7CVfxCNY9eyK9ocYU=)
                          28: 38352e3230392e3233302e302f32342d3234203d3e20313430323234.roa (hash: l2LIzKinG0BfxQ8d6ejTKmtFPNdSKUK9y0vPJ8skqFk=)
                          29: 3134362e31392e33382e302f32342d3234203d3e20313939363534.roa (hash: KCPy6uAOav6R+jmrUTgTpbZkeje3mnKOXa6FXDMEhhE=)
                          30: 322e35392e36322e302f32342d3234203d3e20313432313131.roa (hash: c23s9WCLyWR8C29b7voS/R0hWodZcVrxRN5kAioljng=)
                          31: 34352e39352e3231342e302f32342d3234203d3e20343032323134.roa (hash: IAhhGhhBpF4cl6c96AeOIUO3QUQaMO1YcC9zPWe02Zs=)
                          32: 34352e39352e3231332e302f32342d3234203d3e20343030303339.roa (hash: XrIv1BWbF+to8I3saogND52oHBVFoDY38lWpbUFLA6o=)
                          33: 38352e3230392e3232382e302f32342d3234203d3e203230343733.roa (hash: 1VJONXDxJnPHUDzUm7XiO/UF/aXr3KYuVDC6vKiNDOc=)
                          34: 3139342e33312e3139362e302f32342d3234203d3e20313939373337.roa (hash: qc608O9yB+6tqsDBDhoINI3nGVPIPfhQ49+yA4p+itg=)
                          35: 34352e39352e3231322e302f32342d3234203d3e20323039353534.roa (hash: 9IsmuufWVjFLEbYLLcJg7Yp7+j5DqB4kK41/uY19nMQ=)
                          36: 34352e39352e3231322e302f32322d3232203d3e2037303239.roa (hash: b3HfoeSSJnwEFBW/P8/Hh1DNPoifdQtxChWclKR01cY=)
                          37: 352e3138312e3138352e302f32342d3234203d3e20323131333733.roa (hash: tIeHJEF41zbDRQ8KbMBp/GsLGj1RgNxno+RElBJQNMw=)
                          38: 322e35392e36302e302f32342d3234203d3e203631333137.roa (hash: BBdnQvjsMGsAKdV0CMmUgkUx9rKK17g08iyDVXfqF5c=)
                          39: 34352e382e3231392e302f32342d3234203d3e2039303039.roa (hash: 0zn1M6udTfOcCIE/Cifu6WDNTkQzSgcujlgX6HE4/sQ=)
                          40: 322e35392e36312e302f32342d3234203d3e203438323636.roa (hash: sgoOb4bX1m2rIZlacxTZqlmJneicsHhOxQYCb/BB8fA=)
                          41: 322e35392e36302e302f32342d3234203d3e20323132323338.roa (hash: siAtwvTAZM+LlD3wdnarFDX9+Ycc62d+jei/mDFB4w0=)
                          42: 352e3138312e3138362e302f32342d3234203d3e20323036313530.roa (hash: QGg1o/UsEXwX7QWOmnciGR0lfU5zaV2UWyNlVxa/Ka8=)
                          43: 34352e382e3231372e302f32342d3234203d3e20343032323938.roa (hash: kelqIGWqA6A5CmDeq94bFFXh8OyDYHhPA+ITnx16dp4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 20 May 2026 10:39:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:cb:36:c1:91:b5:4b:cb:10:8f:fd:9a:ed:b0:c9:c1:ea:49:13:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
        Validity
            Not Before: May 19 07:13:23 2026 GMT
            Not After : May 20 10:39:23 2026 GMT
        Subject: CN=E6401B24A0A2AFA6BF1701DAE61216073F123A5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a1:36:1c:da:ae:85:29:3c:b4:68:e7:4e:40:
                    2b:7f:cf:bc:fa:3d:1d:6c:b2:a3:ee:83:47:9c:0f:
                    f7:69:ef:a0:6f:48:56:5a:c8:83:9d:69:e1:59:2c:
                    c3:ed:1b:ec:ac:4e:c7:45:70:c8:db:83:fb:dd:44:
                    b9:4f:a4:9f:2f:a5:c6:63:45:cb:60:34:05:43:a7:
                    d1:1f:87:72:ca:1c:1b:c5:db:7c:2b:63:8d:47:89:
                    d0:63:4c:ba:a5:6c:07:a8:45:e4:79:0c:2c:8f:88:
                    f8:75:9d:bf:13:fa:8d:e3:59:ac:f2:85:b9:5c:ad:
                    8a:c4:f6:8a:4f:7a:e8:71:e8:5d:ad:04:39:28:d7:
                    03:60:1a:7c:df:7e:cf:ec:2a:99:33:21:0a:c1:79:
                    4c:f5:a0:0d:8a:e1:7d:9e:12:01:32:3e:80:36:2f:
                    57:b8:ed:d8:09:61:29:1a:b3:e1:f9:c3:5f:25:b8:
                    86:fa:4e:09:88:b2:4b:38:5b:33:61:63:77:5f:4e:
                    b6:16:0f:ef:2e:15:7e:bc:a8:ab:52:4a:b7:58:f0:
                    72:5b:e9:6c:75:b9:82:76:56:e3:f8:bd:bf:71:47:
                    0f:02:52:bd:ca:9f:d2:a7:93:c0:93:01:34:c3:b1:
                    e1:18:8a:1b:cc:97:b0:57:16:9e:a6:04:c5:ca:e9:
                    a1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:40:1B:24:A0:A2:AF:A6:BF:17:01:DA:E6:12:16:07:3F:12:3A:5C
            X509v3 Authority Key Identifier:
                keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:20:bd:9a:02:64:4f:79:68:b4:b9:13:ac:4c:31:a7:6f:95:
         98:4a:bf:6d:eb:c5:a2:c4:43:47:a6:bf:fb:2b:e8:00:6c:57:
         68:c0:7d:fb:8f:82:77:7b:6b:0a:47:8c:4b:8f:bc:0d:a5:20:
         9b:35:26:92:12:77:ef:0b:cc:76:60:f1:b7:1c:1b:c8:46:e7:
         ae:94:6f:61:a3:ad:a4:25:92:1d:49:ff:01:b7:87:be:5d:d6:
         42:90:d4:30:30:72:67:bf:c8:76:fc:00:dd:89:b7:bd:67:7a:
         7c:63:b7:eb:a2:bb:a3:5b:ba:7f:8b:a6:62:68:dd:0c:85:97:
         75:6d:b4:62:24:6a:b5:e7:33:75:ae:be:3b:c9:a3:8f:a8:ef:
         2c:2f:bf:c2:85:16:2a:70:79:54:e4:c1:80:42:49:58:10:cf:
         85:d3:4c:23:b6:69:2e:cf:14:dd:3f:0c:45:18:bf:50:b0:91:
         13:62:61:f7:3c:4d:27:fe:72:40:42:d4:40:1d:17:16:3c:27:
         fc:4f:37:23:fd:f9:e4:e6:f5:22:c4:a5:ba:e2:9d:21:c3:be:
         37:fe:0f:3f:67:b1:e5:ee:50:73:d7:f0:47:8c:f7:61:0a:99:
         d8:9e:34:11:11:15:89:b4:bb:6b:28:15:91:41:81:7d:ce:86:
         28:c3:cc:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 20 03:48:23 2026 by rpki-client