Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
File:                     A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft (raw, json)
Hash identifier:          9Gnp6fA0c+sbr0k65FEANUp9RaWXQk0G4lZm9s7GEEY=
Subject key identifier:   87:0E:CE:21:05:EB:42:E2:EA:86:32:67:FA:07:C2:2C:CC:C9:13:E2
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Certificate issuer:       /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial:       6D1D2F2560B6FDE729D3B51EE3DF1BF3520556F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
Manifest number:          06CA
Signing time:             Mon 23 Mar 2026 11:20:38 +0000
Manifest this update:     Mon 23 Mar 2026 11:15:38 +0000
Manifest next update:     Tue 24 Mar 2026 12:00:38 +0000
Files and hashes:         1: 322e35392e36332e302f32342d3234203d3e20383334.roa (hash: 8DqvUUgTHwg4fnhfYD2q3DFHCSCucv2RToLFRdMK/4s=)
                          2: 352e3138312e3138372e302f32342d3234203d3e20323135373033.roa (hash: EJ6RmJBNoUg0c9WoYw2Ja1OnADVswQoLG/EoG0ZGnFE=)
                          3: 34352e382e3231392e302f32342d3234203d3e2039303039.roa (hash: 0zn1M6udTfOcCIE/Cifu6WDNTkQzSgcujlgX6HE4/sQ=)
                          4: 3139342e33312e3139362e302f32342d3234203d3e20313939373337.roa (hash: kk3tkqt3pEQIayEC5akWsEQ7ftglPpO+Tt2YC9Lk7HM=)
                          5: 322e35392e36302e302f32342d3234203d3e203631333137.roa (hash: BBdnQvjsMGsAKdV0CMmUgkUx9rKK17g08iyDVXfqF5c=)
                          6: 352e3138312e3138352e302f32342d3234203d3e20323132333834.roa (hash: erSH6Mf15T5HOlDb5lpbU/Ku2eMK+cc/6OxLysGJmP4=)
                          7: 322e35392e36322e302f32342d3234203d3e20313432313131.roa (hash: c23s9WCLyWR8C29b7voS/R0hWodZcVrxRN5kAioljng=)
                          8: 38352e3230392e3233302e302f32342d3234203d3e203138313836.roa (hash: +OSq4m/6RpxEZih63506Gv6cOkBhW+YglqTPEKg/ZcM=)
                          9: 34352e382e3231382e302f32342d3234203d3e20323132333834.roa (hash: tj3yrp12EwOeT1ZEKtZIphksitaxnh11pc39cLh8XvY=)
                          10: 352e3138312e3138342e302f32342d3234203d3e20323131333733.roa (hash: HxZ7OQY4wmmok4f1jyMFC6WkeyQaBhCRYtiYzwz8qYg=)
                          11: 34352e382e3231362e302f32342d3234203d3e20323132333834.roa (hash: a81beBwcXvnxQQXt8vP0FnYxX0zBkKmQl4zg0OFOfqc=)
                          12: 36322e332e32302e302f32342d3234203d3e203633313939.roa (hash: kA6rLFNlx80Eesn7dN44PcjtBhqBSQbqVN30KxWFEiA=)
                          13: 34352e382e3231362e302f32342d3234203d3e20323131343430.roa (hash: e8OtHDGrOLuThDlvGfoczJuukmiEX6Dq6BRiXUAdwSs=)
                          14: 3139342e33312e3139352e302f32342d3234203d3e203132383236.roa (hash: dZ5pA0FTXTMIyebmvvTrXa2pwRmRVDj8qy5ZN+EkpPo=)
                          15: 322e35392e36322e302f32342d3234203d3e203633303233.roa (hash: /Ku1phd3ouPkx4ZDyzwkq+GI0U8NGNl14wVu1lc6q1k=)
                          16: 352e3138312e3138342e302f32342d3234203d3e20323132333335.roa (hash: UCQA4MebhnFRuGzYIjyz+Oaxw3thh569/39f5fjzuDM=)
                          17: 352e3138312e3138352e302f32342d3234203d3e20323131333733.roa (hash: 2IzUCrtAIyuz9E3rWXqOgG5uo4suNn7bGWeOLhfOKvg=)
                          18: 3134362e31392e33382e302f32342d3234203d3e203136323736.roa (hash: norYvgZGO2Imho4UnQcnY8UITUyuaQwpwpHqXsoPDao=)
                          19: 38352e3230392e3233312e302f32342d3234203d3e203135343430.roa (hash: 5P7OofszcYzyRXLoqtlNETBM0YQubML8godGGz1Zc2U=)
                          20: 34352e39352e3231322e302f32342d3234203d3e20323039353534.roa (hash: 9IsmuufWVjFLEbYLLcJg7Yp7+j5DqB4kK41/uY19nMQ=)
                          21: 3139342e33312e3139352e302f32342d3234203d3e203334393933.roa (hash: /RrqrRO8J+Vsp3FaP0KZwFzXiRmxrRbyseKOqWdHYpY=)
                          22: 38352e3230392e3232382e302f32342d3234203d3e203230343733.roa (hash: 1VJONXDxJnPHUDzUm7XiO/UF/aXr3KYuVDC6vKiNDOc=)
                          23: 352e3138312e3138362e302f32342d3234203d3e20323036313530.roa (hash: QGg1o/UsEXwX7QWOmnciGR0lfU5zaV2UWyNlVxa/Ka8=)
                          24: 3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa (hash: 1EdzND/a/KltqRlIJaQnMPD7XH7CVfxCNY9eyK9ocYU=)
                          25: 3139342e33312e3139372e302f32342d3234203d3e203432383331.roa (hash: KMAsq44hIBrFB+eRrhhDssa2B+eAZmGDL1feRYL/R5o=)
                          26: 34352e382e3231372e302f32342d3234203d3e20383334.roa (hash: 986H7DOlh4JMdwtbTV1uEyMKn5HaeRMCufNEqQ0K23s=)
                          27: 3139342e33312e3139362e302f32342d3234203d3e20323030303137.roa (hash: +5av7/JwxJ2GdszhVyEajY1bsnLhd2JhS01B+/f5cdU=)
                          28: 34352e39352e3231342e302f32342d3234203d3e20323136303939.roa (hash: D/Nmap/PxRG4O5COkUTsliUnadwaB6xsHT4TvPGKFlQ=)
                          29: 3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa (hash: 1cwuvx0f/bXZ/DwexRmaaQu0tTmkULuIbOfrQVnX4ao=)
                          30: 34352e39352e3231322e302f32322d3232203d3e2037303239.roa (hash: b3HfoeSSJnwEFBW/P8/Hh1DNPoifdQtxChWclKR01cY=)
                          31: 38352e3230392e3232392e302f32342d3234203d3e203432383331.roa (hash: vjpMNqLq25F9up6mT05GhHQJMJ0KbktUxvDSn9v6kBA=)
                          32: 34352e39352e3231342e302f32342d3234203d3e203434353437.roa (hash: 4mA1gqLsHB6B1P8mI+JnCzpqXJzdsvy8YAE1F7eD96c=)
                          33: 3134362e31392e33382e302f32342d3234203d3e20313939363534.roa (hash: KCPy6uAOav6R+jmrUTgTpbZkeje3mnKOXa6FXDMEhhE=)
                          34: 34352e39352e3231332e302f32342d3234203d3e20343030303339.roa (hash: XrIv1BWbF+to8I3saogND52oHBVFoDY38lWpbUFLA6o=)
                          35: 322e35392e36302e302f32342d3234203d3e20323132323338.roa (hash: hZ11O4/GfIQ3ZyUgAuxIn+0GkFLCBYYNN1OfZIqVDJk=)
                          36: 38352e3230392e3233302e302f32342d3234203d3e20313430323234.roa (hash: X9S/vAQJZJ3+zexclWqp51kmLLKozc6jAta0ZYx43Ns=)
                          37: 3139342e33312e3139352e302f32342d3234203d3e20323133363638.roa (hash: tD4GyhGOomU4ZODP9QGqyOztFfw1vKOkCjucViT/SZg=)
                          38: 322e35392e36312e302f32342d3234203d3e203438323636.roa (hash: sgoOb4bX1m2rIZlacxTZqlmJneicsHhOxQYCb/BB8fA=)
                          39: 3139342e33312e3139342e302f32342d3234203d3e203339333638.roa (hash: qMisc8M9fAgiB1zw7/Tn0y61M2FDJt3sqCMkzKcplhA=)
                          40: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl (hash: aYpZme1Uo0+/zEa9faIpRLHZ7MsCd01acYDRPhzAfJ0=)
                          41: 34352e39352e3231352e302f32342d3234203d3e203631333137.roa (hash: jtw5h4s7N892mHMRX7q1v9D/8tuL7heVW+cms9i1OJM=)
                          42: 38352e3230392e3233302e302f32342d3234203d3e203633393032.roa (hash: P3VDMMBoXLUjrVK3m58S6qhassJbF7wO/iSY6p4T2ZU=)
                          43: 34352e39352e3231352e302f32342d3234203d3e203239383032.roa (hash: Q1OlQJwADffmDxnZKj7bvhSo1kOL5aXrHpMtVtZFtuQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 24 Mar 2026 12:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:1d:2f:25:60:b6:fd:e7:29:d3:b5:1e:e3:df:1b:f3:52:05:56:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
        Validity
            Not Before: Mar 23 11:15:38 2026 GMT
            Not After : Mar 24 12:00:38 2026 GMT
        Subject: CN=870ECE2105EB42E2EA863267FA07C22CCCC913E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:cf:28:7a:c0:dd:59:41:41:40:83:a6:85:02:
                    90:20:c5:53:dd:0e:18:2b:4c:d3:e8:23:f6:ca:22:
                    ef:4b:f2:8a:2b:14:c1:63:94:e5:a6:6e:b0:2a:4b:
                    55:19:84:ba:a6:ee:c0:db:3c:ee:41:e6:5d:cd:d1:
                    13:fe:b7:a3:1a:d5:35:6e:d6:dd:21:ba:e6:2f:ce:
                    e4:b1:71:dc:63:61:2a:88:40:53:b4:a5:ae:8f:02:
                    5c:56:fb:cb:fa:12:df:f1:96:bd:fb:78:db:8b:cb:
                    a6:b6:ce:01:3d:97:35:20:6b:7c:22:03:1b:40:24:
                    8c:e9:3c:f1:1b:0f:5c:d1:70:d0:8d:19:a4:4b:8c:
                    87:d1:43:82:0f:08:ca:9d:a0:0c:b8:95:c8:59:89:
                    c1:80:02:aa:8d:f1:e7:97:be:92:a0:5b:ff:2c:8a:
                    c6:75:d1:c3:9b:c7:c6:ab:b5:ff:ac:9c:7c:8f:7a:
                    d4:17:13:b1:8d:49:df:a3:25:01:46:11:49:bc:46:
                    8a:b9:35:f8:75:59:11:f2:77:82:04:a4:66:42:96:
                    98:1d:69:f6:12:c3:14:a8:20:5a:15:81:9f:d0:ed:
                    e9:18:4e:05:68:56:66:c0:9f:6b:b7:c1:3f:9a:8a:
                    c9:42:b8:d9:04:fa:4f:66:93:a1:4b:58:c3:4a:c7:
                    3f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:0E:CE:21:05:EB:42:E2:EA:86:32:67:FA:07:C2:2C:CC:C9:13:E2
            X509v3 Authority Key Identifier:
                keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:64:3e:c6:b1:a7:15:3b:95:2c:42:bf:6d:0a:da:31:84:7c:
         0e:9d:42:b8:75:71:3c:ac:d5:ad:1f:7a:3f:ea:fa:1a:00:03:
         9c:2c:1b:8d:f5:79:f9:60:37:c0:fa:01:e4:92:3d:4d:51:38:
         ab:bf:ce:28:df:23:b7:f1:ab:92:b5:2d:34:3b:91:93:67:81:
         96:9f:77:a9:87:bd:59:69:2a:cd:2b:68:ba:63:76:bc:44:b2:
         f8:4b:9b:25:2c:29:f3:7a:87:fa:7c:09:5d:74:37:92:5b:d6:
         e5:9a:44:58:39:f8:cd:33:b9:1f:69:60:ed:e2:05:83:74:91:
         53:92:09:fd:6a:08:10:2c:d5:70:69:31:ed:5f:34:be:7d:2a:
         94:02:2c:31:a2:30:52:f4:60:3f:8c:c1:0e:d0:3e:6f:ba:4a:
         08:99:a4:56:24:d8:29:af:8f:59:1f:bf:ad:e2:c7:43:7c:0a:
         16:67:dc:db:f5:a1:0c:5a:a1:f7:2f:13:44:b4:73:72:05:e6:
         22:7e:93:3c:dc:cb:fa:5a:c1:a7:9d:68:0b:05:13:d4:2a:98:
         57:8a:b0:eb:55:c7:25:76:6f:ea:f7:83:50:23:f4:0a:b7:70:
         a9:02:29:f8:3a:87:b9:03:13:60:48:42:55:73:78:60:85:0a:
         b9:d4:87:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 02:57:22 2026 by rpki-client