Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
File:                     A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft (raw, json)
Hash identifier:          wKd1nYqzUPByFJoDbxQPhzpPqJaI6y5Xc0OvEN7+Qv8=
Subject key identifier:   73:3B:AD:31:65:32:D5:8F:C2:F7:B4:89:E9:31:06:06:7B:71:BA:F9
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Certificate issuer:       /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial:       3E07F0D32C5F1BF9110797ADDE429DE434D5269C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
Manifest number:          0709
Signing time:             Thu 30 Apr 2026 09:41:39 +0000
Manifest this update:     Thu 30 Apr 2026 09:36:39 +0000
Manifest next update:     Fri 01 May 2026 11:57:39 +0000
Files and hashes:         1: 34352e39352e3231352e302f32342d3234203d3e203239383032.roa (hash: Q1OlQJwADffmDxnZKj7bvhSo1kOL5aXrHpMtVtZFtuQ=)
                          2: 38352e3230392e3233302e302f32342d3234203d3e203633393032.roa (hash: VaOxQtitcotEwDKcqVbfty4V+UnBaFXCz621Z/5UMPE=)
                          3: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl (hash: S/T+SdcnRyVU9sHaQI1AMn9vIQ2Y2wwLJz3FZhEOElc=)
                          4: 34352e382e3231362e302f32342d3234203d3e20323132333834.roa (hash: a81beBwcXvnxQQXt8vP0FnYxX0zBkKmQl4zg0OFOfqc=)
                          5: 34352e382e3231382e302f32342d3234203d3e20323132333834.roa (hash: tj3yrp12EwOeT1ZEKtZIphksitaxnh11pc39cLh8XvY=)
                          6: 3139342e33312e3139352e302f32342d3234203d3e203334393933.roa (hash: /RrqrRO8J+Vsp3FaP0KZwFzXiRmxrRbyseKOqWdHYpY=)
                          7: 3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa (hash: 1EdzND/a/KltqRlIJaQnMPD7XH7CVfxCNY9eyK9ocYU=)
                          8: 34352e39352e3231322e302f32322d3232203d3e2037303239.roa (hash: b3HfoeSSJnwEFBW/P8/Hh1DNPoifdQtxChWclKR01cY=)
                          9: 38352e3230392e3232382e302f32342d3234203d3e203230343733.roa (hash: 1VJONXDxJnPHUDzUm7XiO/UF/aXr3KYuVDC6vKiNDOc=)
                          10: 322e35392e36322e302f32342d3234203d3e20313432313131.roa (hash: c23s9WCLyWR8C29b7voS/R0hWodZcVrxRN5kAioljng=)
                          11: 34352e382e3231362e302f32342d3234203d3e20323131343430.roa (hash: e8OtHDGrOLuThDlvGfoczJuukmiEX6Dq6BRiXUAdwSs=)
                          12: 352e3138312e3138362e302f32342d3234203d3e20323036313530.roa (hash: QGg1o/UsEXwX7QWOmnciGR0lfU5zaV2UWyNlVxa/Ka8=)
                          13: 3139342e33312e3139352e302f32342d3234203d3e20323133363638.roa (hash: pCuQNjK5vxSYZwtC7uzq87OexUIwDcw+LKWQti/Nk9E=)
                          14: 322e35392e36312e302f32342d3234203d3e203438323636.roa (hash: sgoOb4bX1m2rIZlacxTZqlmJneicsHhOxQYCb/BB8fA=)
                          15: 3139342e33312e3139362e302f32342d3234203d3e20323030303137.roa (hash: mYDAbrfXE2SMRwMvSEq6zRWmL22fizr0hTNDEPKCMHw=)
                          16: 3139342e33312e3139352e302f32342d3234203d3e203132383236.roa (hash: dZ5pA0FTXTMIyebmvvTrXa2pwRmRVDj8qy5ZN+EkpPo=)
                          17: 352e3138312e3138372e302f32342d3234203d3e20323135373033.roa (hash: EJ6RmJBNoUg0c9WoYw2Ja1OnADVswQoLG/EoG0ZGnFE=)
                          18: 34352e39352e3231332e302f32342d3234203d3e20343030303339.roa (hash: XrIv1BWbF+to8I3saogND52oHBVFoDY38lWpbUFLA6o=)
                          19: 38352e3230392e3232392e302f32342d3234203d3e203432383331.roa (hash: vjpMNqLq25F9up6mT05GhHQJMJ0KbktUxvDSn9v6kBA=)
                          20: 3134362e31392e33382e302f32342d3234203d3e203136323736.roa (hash: norYvgZGO2Imho4UnQcnY8UITUyuaQwpwpHqXsoPDao=)
                          21: 322e35392e36302e302f32342d3234203d3e203631333137.roa (hash: BBdnQvjsMGsAKdV0CMmUgkUx9rKK17g08iyDVXfqF5c=)
                          22: 322e35392e36322e302f32342d3234203d3e203633303233.roa (hash: /Ku1phd3ouPkx4ZDyzwkq+GI0U8NGNl14wVu1lc6q1k=)
                          23: 352e3138312e3138342e302f32342d3234203d3e20323132333335.roa (hash: UCQA4MebhnFRuGzYIjyz+Oaxw3thh569/39f5fjzuDM=)
                          24: 322e35392e36332e302f32342d3234203d3e20383334.roa (hash: 8DqvUUgTHwg4fnhfYD2q3DFHCSCucv2RToLFRdMK/4s=)
                          25: 3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa (hash: 1cwuvx0f/bXZ/DwexRmaaQu0tTmkULuIbOfrQVnX4ao=)
                          26: 34352e39352e3231352e302f32342d3234203d3e203631333137.roa (hash: jtw5h4s7N892mHMRX7q1v9D/8tuL7heVW+cms9i1OJM=)
                          27: 3139342e33312e3139372e302f32342d3234203d3e203432383331.roa (hash: KMAsq44hIBrFB+eRrhhDssa2B+eAZmGDL1feRYL/R5o=)
                          28: 34352e39352e3231322e302f32342d3234203d3e20323039353534.roa (hash: 9IsmuufWVjFLEbYLLcJg7Yp7+j5DqB4kK41/uY19nMQ=)
                          29: 322e35392e36302e302f32342d3234203d3e20323132323338.roa (hash: siAtwvTAZM+LlD3wdnarFDX9+Ycc62d+jei/mDFB4w0=)
                          30: 38352e3230392e3233312e302f32342d3234203d3e203135343430.roa (hash: 5P7OofszcYzyRXLoqtlNETBM0YQubML8godGGz1Zc2U=)
                          31: 34352e39352e3231342e302f32342d3234203d3e20343032323134.roa (hash: IAhhGhhBpF4cl6c96AeOIUO3QUQaMO1YcC9zPWe02Zs=)
                          32: 3134362e31392e33382e302f32342d3234203d3e20313939363534.roa (hash: KCPy6uAOav6R+jmrUTgTpbZkeje3mnKOXa6FXDMEhhE=)
                          33: 34352e39352e3231342e302f32342d3234203d3e20313938323530.roa (hash: cWZ4izllTaa4CjT3fbEMgCbmIhf6LWTGafANc9j4YVM=)
                          34: 352e3138312e3138342e302f32342d3234203d3e20323131333733.roa (hash: HxZ7OQY4wmmok4f1jyMFC6WkeyQaBhCRYtiYzwz8qYg=)
                          35: 352e3138312e3138352e302f32342d3234203d3e20323132333834.roa (hash: erSH6Mf15T5HOlDb5lpbU/Ku2eMK+cc/6OxLysGJmP4=)
                          36: 34352e382e3231392e302f32342d3234203d3e2039303039.roa (hash: 0zn1M6udTfOcCIE/Cifu6WDNTkQzSgcujlgX6HE4/sQ=)
                          37: 38352e3230392e3233302e302f32342d3234203d3e20313430323234.roa (hash: l2LIzKinG0BfxQ8d6ejTKmtFPNdSKUK9y0vPJ8skqFk=)
                          38: 3139342e33312e3139342e302f32342d3234203d3e203339333638.roa (hash: qMisc8M9fAgiB1zw7/Tn0y61M2FDJt3sqCMkzKcplhA=)
                          39: 38352e3230392e3233302e302f32342d3234203d3e203138313836.roa (hash: wLYhvbcU/etiFzebOUkFMR3b0g4xeh82nSHNvUEIAsY=)
                          40: 352e3138312e3138352e302f32342d3234203d3e20323131333733.roa (hash: 2IzUCrtAIyuz9E3rWXqOgG5uo4suNn7bGWeOLhfOKvg=)
                          41: 3139342e33312e3139362e302f32342d3234203d3e20313939373337.roa (hash: qc608O9yB+6tqsDBDhoINI3nGVPIPfhQ49+yA4p+itg=)
                          42: 34352e382e3231372e302f32342d3234203d3e20343032323938.roa (hash: kelqIGWqA6A5CmDeq94bFFXh8OyDYHhPA+ITnx16dp4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 11:57:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:07:f0:d3:2c:5f:1b:f9:11:07:97:ad:de:42:9d:e4:34:d5:26:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
        Validity
            Not Before: Apr 30 09:36:39 2026 GMT
            Not After : May  1 11:57:39 2026 GMT
        Subject: CN=733BAD316532D58FC2F7B489E93106067B71BAF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:45:12:4b:d1:fc:da:79:86:ed:20:2e:f3:d2:
                    92:b9:ec:13:91:1d:e1:02:47:a9:15:3b:94:af:45:
                    34:88:ce:61:2a:03:3e:5a:f3:64:b4:1b:cf:7f:2b:
                    91:6a:b5:98:f6:16:25:0b:70:12:23:16:51:92:96:
                    b2:81:49:9f:8f:a7:b4:5f:c6:3e:c5:af:bd:a3:e9:
                    67:88:dc:aa:4d:f0:2a:f1:61:71:f8:3d:77:ba:e0:
                    50:63:16:ae:07:13:93:10:53:b2:d6:48:b7:e9:88:
                    7f:28:5c:71:e9:eb:c3:31:f4:8e:a0:61:f5:52:1e:
                    94:bf:49:24:a6:9b:d6:ff:16:7d:47:ce:18:7d:c8:
                    8c:b3:ef:30:7e:d8:59:13:e5:04:51:d9:4b:03:df:
                    7a:ff:98:8c:a4:1b:51:d3:c2:d2:6c:6d:ad:75:6c:
                    76:e4:c6:1b:60:a5:5a:5c:0f:a8:b0:44:9b:a3:ee:
                    ca:39:9f:d8:59:88:ea:2e:59:0d:e5:91:22:b4:85:
                    62:06:63:23:59:06:39:53:39:98:be:7f:b4:0c:47:
                    34:99:70:0a:4d:e7:d6:7f:46:27:13:52:71:31:8d:
                    84:d1:f3:96:3c:79:62:fe:a3:8f:bb:3e:af:13:3a:
                    b5:82:c3:f8:69:3c:ca:61:6b:e4:52:cd:c4:42:76:
                    cd:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:3B:AD:31:65:32:D5:8F:C2:F7:B4:89:E9:31:06:06:7B:71:BA:F9
            X509v3 Authority Key Identifier:
                keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:e6:27:21:f1:4a:1f:0f:63:c8:80:fc:63:6f:57:b7:63:d3:
         68:50:9e:aa:c4:4b:dc:6b:90:f7:c7:35:c1:62:22:b0:f0:ea:
         5e:b3:c7:4d:21:e3:72:20:51:de:bd:a3:f2:06:1b:06:51:a3:
         c3:d1:c0:46:54:f2:95:54:d2:88:66:83:8d:1b:dc:a4:19:cf:
         74:b8:4a:79:f8:5f:a1:19:99:92:56:cf:f3:ff:1f:2c:58:f0:
         f1:be:e3:ef:8d:4f:8a:8a:11:51:43:1f:11:da:c8:57:c7:40:
         fc:7e:a3:c5:d5:f0:52:02:bf:8e:2c:c3:e4:b7:75:96:d0:e3:
         4b:4e:58:07:3f:fa:b5:cf:22:79:f0:99:44:13:8e:77:97:94:
         88:e5:54:f3:05:4b:ee:4e:b7:d8:7e:9b:6b:81:0d:1a:45:84:
         20:3a:55:bb:7d:2d:15:a4:8a:30:d5:d9:f1:f5:41:06:84:82:
         1a:db:39:16:f3:61:6b:13:ff:be:88:a6:5b:c3:5c:c3:50:f0:
         bd:85:97:96:76:77:4f:06:60:ad:74:49:71:65:6e:e9:3c:ce:
         04:7a:8f:83:bf:2d:a9:69:1f:72:24:eb:27:38:03:ad:91:9e:
         1d:7a:5e:30:cc:5f:35:9b:49:4b:97:d4:63:f4:df:02:ab:cb:
         1a:86:ea:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 00:30:13 2026 by rpki-client