Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
File:                     A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft (raw, json)
Hash identifier:          qd3H5vavP9mEWYZDN9xLuM9bv6Ts+S1AygzNcLnyAgM=
Subject key identifier:   BA:CB:77:E4:4A:B0:ED:38:8C:E3:FD:87:55:65:EB:30:01:E2:52:36
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Certificate issuer:       /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial:       1E33809C4E2D131029D0E84BCCBD27A443077CE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
Manifest number:          06B9
Signing time:             Thu 12 Mar 2026 12:17:00 +0000
Manifest this update:     Thu 12 Mar 2026 12:12:00 +0000
Manifest next update:     Fri 13 Mar 2026 12:55:00 +0000
Files and hashes:         1: 34352e382e3231392e302f32342d3234203d3e2039303039.roa (hash: 0zn1M6udTfOcCIE/Cifu6WDNTkQzSgcujlgX6HE4/sQ=)
                          2: 3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa (hash: 1EdzND/a/KltqRlIJaQnMPD7XH7CVfxCNY9eyK9ocYU=)
                          3: 34352e382e3231382e302f32342d3234203d3e20323132333834.roa (hash: tj3yrp12EwOeT1ZEKtZIphksitaxnh11pc39cLh8XvY=)
                          4: 3139342e33312e3139352e302f32342d3234203d3e203334393933.roa (hash: /RrqrRO8J+Vsp3FaP0KZwFzXiRmxrRbyseKOqWdHYpY=)
                          5: 322e35392e36322e302f32342d3234203d3e20313432313131.roa (hash: c23s9WCLyWR8C29b7voS/R0hWodZcVrxRN5kAioljng=)
                          6: 322e35392e36312e302f32342d3234203d3e203438323636.roa (hash: sgoOb4bX1m2rIZlacxTZqlmJneicsHhOxQYCb/BB8fA=)
                          7: 38352e3230392e3232392e302f32342d3234203d3e203432383331.roa (hash: vjpMNqLq25F9up6mT05GhHQJMJ0KbktUxvDSn9v6kBA=)
                          8: 3139342e33312e3139362e302f32342d3234203d3e20323030303137.roa (hash: +5av7/JwxJ2GdszhVyEajY1bsnLhd2JhS01B+/f5cdU=)
                          9: 34352e39352e3231322e302f32342d3234203d3e20323039353534.roa (hash: 9IsmuufWVjFLEbYLLcJg7Yp7+j5DqB4kK41/uY19nMQ=)
                          10: 322e35392e36302e302f32342d3234203d3e203631333137.roa (hash: BBdnQvjsMGsAKdV0CMmUgkUx9rKK17g08iyDVXfqF5c=)
                          11: 38352e3230392e3232382e302f32342d3234203d3e203230343733.roa (hash: 1VJONXDxJnPHUDzUm7XiO/UF/aXr3KYuVDC6vKiNDOc=)
                          12: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl (hash: hZPk468KAXYS4b+FSL8yEnSEF8bHFqojumy8UlGaDys=)
                          13: 36322e332e32302e302f32342d3234203d3e203633313939.roa (hash: kA6rLFNlx80Eesn7dN44PcjtBhqBSQbqVN30KxWFEiA=)
                          14: 322e35392e36302e302f32342d3234203d3e20323132323338.roa (hash: hZ11O4/GfIQ3ZyUgAuxIn+0GkFLCBYYNN1OfZIqVDJk=)
                          15: 34352e39352e3231352e302f32342d3234203d3e203239383032.roa (hash: Q1OlQJwADffmDxnZKj7bvhSo1kOL5aXrHpMtVtZFtuQ=)
                          16: 38352e3230392e3233302e302f32342d3234203d3e203633393032.roa (hash: P3VDMMBoXLUjrVK3m58S6qhassJbF7wO/iSY6p4T2ZU=)
                          17: 34352e382e3231372e302f32342d3234203d3e20323136303232.roa (hash: hhXc/MDi5B7M4hlHOjLVsLkGzhKvVMLy6aW3Y+PG9Lw=)
                          18: 3139342e33312e3139352e302f32342d3234203d3e203132383236.roa (hash: dZ5pA0FTXTMIyebmvvTrXa2pwRmRVDj8qy5ZN+EkpPo=)
                          19: 3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa (hash: 1cwuvx0f/bXZ/DwexRmaaQu0tTmkULuIbOfrQVnX4ao=)
                          20: 38352e3230392e3233312e302f32342d3234203d3e203135343430.roa (hash: 5P7OofszcYzyRXLoqtlNETBM0YQubML8godGGz1Zc2U=)
                          21: 34352e39352e3231342e302f32342d3234203d3e20323136303939.roa (hash: D/Nmap/PxRG4O5COkUTsliUnadwaB6xsHT4TvPGKFlQ=)
                          22: 3139342e33312e3139352e302f32342d3234203d3e20323133363638.roa (hash: tD4GyhGOomU4ZODP9QGqyOztFfw1vKOkCjucViT/SZg=)
                          23: 34352e382e3231362e302f32342d3234203d3e20323132333834.roa (hash: A1j+LbNuBb8MeFvlQDvvVkVer3lHzQ8b3CPtY22jros=)
                          24: 3139342e33312e3139362e302f32342d3234203d3e20313939373337.roa (hash: kk3tkqt3pEQIayEC5akWsEQ7ftglPpO+Tt2YC9Lk7HM=)
                          25: 34352e39352e3231352e302f32342d3234203d3e203631333137.roa (hash: jtw5h4s7N892mHMRX7q1v9D/8tuL7heVW+cms9i1OJM=)
                          26: 3134362e31392e33382e302f32342d3234203d3e203136323736.roa (hash: norYvgZGO2Imho4UnQcnY8UITUyuaQwpwpHqXsoPDao=)
                          27: 3139342e33312e3139372e302f32342d3234203d3e203432383331.roa (hash: KMAsq44hIBrFB+eRrhhDssa2B+eAZmGDL1feRYL/R5o=)
                          28: 322e35392e36322e302f32342d3234203d3e203633303233.roa (hash: /Ku1phd3ouPkx4ZDyzwkq+GI0U8NGNl14wVu1lc6q1k=)
                          29: 38352e3230392e3233302e302f32342d3234203d3e203138313836.roa (hash: +OSq4m/6RpxEZih63506Gv6cOkBhW+YglqTPEKg/ZcM=)
                          30: 34352e39352e3231322e302f32322d3232203d3e2037303239.roa (hash: b3HfoeSSJnwEFBW/P8/Hh1DNPoifdQtxChWclKR01cY=)
                          31: 322e35392e36332e302f32342d3234203d3e20383334.roa (hash: 8DqvUUgTHwg4fnhfYD2q3DFHCSCucv2RToLFRdMK/4s=)
                          32: 352e3138312e3138342e302f32342d3234203d3e20323132333335.roa (hash: UCQA4MebhnFRuGzYIjyz+Oaxw3thh569/39f5fjzuDM=)
                          33: 352e3138312e3138372e302f32342d3234203d3e20323135373033.roa (hash: EJ6RmJBNoUg0c9WoYw2Ja1OnADVswQoLG/EoG0ZGnFE=)
                          34: 34352e39352e3231332e302f32342d3234203d3e20343030303339.roa (hash: XrIv1BWbF+to8I3saogND52oHBVFoDY38lWpbUFLA6o=)
                          35: 352e3138312e3138352e302f32342d3234203d3e20323131333733.roa (hash: 2IzUCrtAIyuz9E3rWXqOgG5uo4suNn7bGWeOLhfOKvg=)
                          36: 34352e39352e3231342e302f32342d3234203d3e203434353437.roa (hash: 4mA1gqLsHB6B1P8mI+JnCzpqXJzdsvy8YAE1F7eD96c=)
                          37: 38352e3230392e3233302e302f32342d3234203d3e20313430323234.roa (hash: X9S/vAQJZJ3+zexclWqp51kmLLKozc6jAta0ZYx43Ns=)
                          38: 34352e382e3231362e302f32342d3234203d3e20323131343430.roa (hash: e8OtHDGrOLuThDlvGfoczJuukmiEX6Dq6BRiXUAdwSs=)
                          39: 3134362e31392e33382e302f32342d3234203d3e20313939363534.roa (hash: KCPy6uAOav6R+jmrUTgTpbZkeje3mnKOXa6FXDMEhhE=)
                          40: 3139342e33312e3139342e302f32342d3234203d3e203339333638.roa (hash: qMisc8M9fAgiB1zw7/Tn0y61M2FDJt3sqCMkzKcplhA=)
                          41: 352e3138312e3138342e302f32342d3234203d3e20323131333733.roa (hash: HxZ7OQY4wmmok4f1jyMFC6WkeyQaBhCRYtiYzwz8qYg=)
                          42: 352e3138312e3138352e302f32342d3234203d3e20323132333834.roa (hash: erSH6Mf15T5HOlDb5lpbU/Ku2eMK+cc/6OxLysGJmP4=)
                          43: 352e3138312e3138362e302f32342d3234203d3e20323036313530.roa (hash: QGg1o/UsEXwX7QWOmnciGR0lfU5zaV2UWyNlVxa/Ka8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 12:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:33:80:9c:4e:2d:13:10:29:d0:e8:4b:cc:bd:27:a4:43:07:7c:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
        Validity
            Not Before: Mar 12 12:12:00 2026 GMT
            Not After : Mar 13 12:55:00 2026 GMT
        Subject: CN=BACB77E44AB0ED388CE3FD875565EB3001E25236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:3f:fa:c8:e7:a9:9e:ed:90:2f:46:83:20:c2:
                    97:a4:eb:c1:43:c3:db:43:31:65:3b:c3:9f:b8:76:
                    69:91:03:26:41:ab:d4:43:03:10:36:10:78:12:d8:
                    c9:94:49:06:ea:34:08:92:68:cc:4a:5e:05:7b:7f:
                    6a:53:1b:7b:ea:83:e3:d3:0b:b2:86:ed:93:c4:e4:
                    5f:d8:da:57:a7:8b:ab:0f:da:b0:9d:75:a8:ce:c3:
                    73:a7:9c:29:86:0b:83:b7:1d:48:ed:fa:39:79:bc:
                    c3:8e:50:40:1a:4e:c4:ec:47:01:a9:ca:71:f8:72:
                    5d:43:55:bd:5d:ab:1f:85:84:4d:17:6b:1e:72:d5:
                    51:53:4c:cb:ae:63:b1:6f:80:11:eb:55:29:50:aa:
                    37:58:6d:6a:94:c1:66:1e:25:f6:3f:67:d9:1f:a0:
                    73:7e:06:b1:dc:54:11:3c:38:00:ee:4b:02:b2:9c:
                    39:07:d8:bf:f5:ef:6a:20:0f:02:40:8a:49:9d:90:
                    f7:59:5f:b9:e5:62:f8:92:d6:ed:f6:ca:c2:b9:e9:
                    93:dd:6d:45:1f:9a:ff:ed:e2:e5:5b:ba:8c:8c:51:
                    58:95:3e:58:65:38:3a:bf:2a:b0:c3:06:b2:55:0e:
                    48:e4:8d:bf:14:f5:ce:e1:76:75:22:d6:b0:41:bb:
                    9e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:CB:77:E4:4A:B0:ED:38:8C:E3:FD:87:55:65:EB:30:01:E2:52:36
            X509v3 Authority Key Identifier:
                keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:99:94:55:79:68:62:ca:25:57:c4:0a:53:c4:55:ce:e0:32:
         44:ac:b1:3c:ee:b1:a4:03:e3:9c:ee:fb:67:78:fe:5d:48:c5:
         d8:f7:bc:e3:c7:0d:ae:7f:77:12:97:24:a0:c0:94:aa:2a:25:
         44:8b:39:de:68:e4:d6:1c:26:9d:85:1b:49:dd:ba:b2:f2:5f:
         56:55:8f:59:e7:07:87:b3:e2:9d:ec:d2:fb:9f:b8:32:33:25:
         b3:b1:67:e5:fd:1b:88:e9:f9:93:e1:9a:c1:08:00:7d:01:23:
         4c:91:86:7b:14:b8:43:25:4e:4c:2e:09:40:19:95:0c:de:f1:
         bb:54:cd:e6:88:33:1a:88:8b:20:03:89:6d:92:2e:65:39:97:
         a1:96:bc:c8:c6:53:72:61:c7:6e:76:4f:4a:61:52:bf:4d:d3:
         f0:0e:60:ae:04:72:5f:a1:69:79:14:2a:55:97:ef:fa:e5:87:
         4e:55:04:48:93:0b:33:6f:ac:44:3a:b9:dd:52:84:a9:38:53:
         f3:8e:10:8d:49:aa:8a:16:e6:5c:83:33:28:a6:0c:06:88:c1:
         e6:b6:3a:61:c2:14:2c:a7:ab:80:60:23:98:e8:77:01:18:dd:
         a9:cd:2a:0b:22:83:bf:8b:04:8e:00:b6:f8:22:ab:85:ae:87:
         55:d5:c4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 00:15:00 2026 by rpki-client