Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
File:                     A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft (raw, json)
Hash identifier:          dIolWd7IVTg3KFcFsTnE389Q7KfvjeBeC/1jLaeBtTQ=
Subject key identifier:   69:18:9A:55:61:AD:32:DD:59:C9:80:8A:1D:71:4A:D7:38:1C:AA:D5
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Certificate issuer:       /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial:       551AD95F6538AF60EC86CC52047584030AAC8B96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
Manifest number:          0789
Signing time:             Tue 28 Jul 2026 17:24:17 +0000
Manifest this update:     Tue 28 Jul 2026 17:19:17 +0000
Manifest next update:     Wed 29 Jul 2026 19:49:17 +0000
Files and hashes:         1: 38352e3230392e3233312e302f32342d3234203d3e203135343430.roa (hash: 5P7OofszcYzyRXLoqtlNETBM0YQubML8godGGz1Zc2U=)
                          2: 34352e382e3231392e302f32342d3234203d3e2039303039.roa (hash: 0zn1M6udTfOcCIE/Cifu6WDNTkQzSgcujlgX6HE4/sQ=)
                          3: 352e3138312e3138352e302f32342d3234203d3e20323132333834.roa (hash: PkrjX5lEKZeku6HbTZFd/bgZgjS0Ra0J+FcQrImRmsQ=)
                          4: 352e3138312e3138372e302f32342d3234203d3e20323135373033.roa (hash: EJ6RmJBNoUg0c9WoYw2Ja1OnADVswQoLG/EoG0ZGnFE=)
                          5: 36322e332e32302e302f32342d3234203d3e20323132393830.roa (hash: f/GL2G2QMX1DeHxo/IzFzuj9b3uiMiTDtg1wGwI4Lb8=)
                          6: 352e3138312e3138342e302f32342d3234203d3e20323131333733.roa (hash: HxZ7OQY4wmmok4f1jyMFC6WkeyQaBhCRYtiYzwz8qYg=)
                          7: 34352e382e3231362e302f32342d3234203d3e20323132333834.roa (hash: a81beBwcXvnxQQXt8vP0FnYxX0zBkKmQl4zg0OFOfqc=)
                          8: 34352e382e3231382e302f32342d3234203d3e20323132333834.roa (hash: tj3yrp12EwOeT1ZEKtZIphksitaxnh11pc39cLh8XvY=)
                          9: 3139342e33312e3139362e302f32342d3234203d3e20313939373337.roa (hash: qc608O9yB+6tqsDBDhoINI3nGVPIPfhQ49+yA4p+itg=)
                          10: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl (hash: q3apaY2PVw+i9y0LYJDz3gWk++AA8sAAKb7nxPz1azE=)
                          11: 34352e39352e3231352e302f32342d3234203d3e203631333137.roa (hash: Set9jSjJnZk4FzDhKsQCeyo0iC0093IITgk8mXGFRYE=)
                          12: 3139342e33312e3139352e302f32342d3234203d3e203132383236.roa (hash: dZ5pA0FTXTMIyebmvvTrXa2pwRmRVDj8qy5ZN+EkpPo=)
                          13: 38352e3230392e3233302e302f32342d3234203d3e20313430323234.roa (hash: l2LIzKinG0BfxQ8d6ejTKmtFPNdSKUK9y0vPJ8skqFk=)
                          14: 3134362e31392e33382e302f32342d3234203d3e20313939363534.roa (hash: KCPy6uAOav6R+jmrUTgTpbZkeje3mnKOXa6FXDMEhhE=)
                          15: 322e35392e36302e302f32342d3234203d3e20383334.roa (hash: 6oFhbwS32nNztM+MkZFvFVF8FZ6win/Ti/cCKIVdiGM=)
                          16: 34352e39352e3231322e302f32322d3232203d3e2037303239.roa (hash: b3HfoeSSJnwEFBW/P8/Hh1DNPoifdQtxChWclKR01cY=)
                          17: 3139342e33312e3139352e302f32342d3234203d3e20323133363638.roa (hash: pCuQNjK5vxSYZwtC7uzq87OexUIwDcw+LKWQti/Nk9E=)
                          18: 34352e39352e3231322e302f32342d3234203d3e20323039353534.roa (hash: 9IsmuufWVjFLEbYLLcJg7Yp7+j5DqB4kK41/uY19nMQ=)
                          19: 34352e39352e3231352e302f32342d3234203d3e203239383032.roa (hash: kUgYR/Kxqx56Hy24JaK1nIBftzOVeuZOaTeGulm2cfI=)
                          20: 322e35392e36322e302f32332d3234203d3e20383334.roa (hash: U8K8ByMMhjORRMnN107C0qHzPl2EMue6t1DEVbbMMv4=)
                          21: 34352e39352e3231332e302f32342d3234203d3e20343030303339.roa (hash: XrIv1BWbF+to8I3saogND52oHBVFoDY38lWpbUFLA6o=)
                          22: 3139342e33312e3139342e302f32342d3234203d3e203339333638.roa (hash: qMisc8M9fAgiB1zw7/Tn0y61M2FDJt3sqCMkzKcplhA=)
                          23: 352e3138312e3138342e302f32342d3234203d3e20323132333335.roa (hash: UCQA4MebhnFRuGzYIjyz+Oaxw3thh569/39f5fjzuDM=)
                          24: 3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa (hash: /pttCsH3EqNiBOKmYU2SEK0bSx+Q89rOic38LmDTjfU=)
                          25: 352e3138312e3138362e302f32342d3234203d3e20323036313530.roa (hash: QGg1o/UsEXwX7QWOmnciGR0lfU5zaV2UWyNlVxa/Ka8=)
                          26: 38352e3230392e3233302e302f32342d3234203d3e203633393032.roa (hash: VaOxQtitcotEwDKcqVbfty4V+UnBaFXCz621Z/5UMPE=)
                          27: 322e35392e36312e302f32342d3234203d3e203438323636.roa (hash: sgoOb4bX1m2rIZlacxTZqlmJneicsHhOxQYCb/BB8fA=)
                          28: 38352e3230392e3232392e302f32342d3234203d3e203432383331.roa (hash: vjpMNqLq25F9up6mT05GhHQJMJ0KbktUxvDSn9v6kBA=)
                          29: 3139342e33312e3139372e302f32342d3234203d3e203432383331.roa (hash: DVV+/2t2q4F/UwYf2BwA2+sNCvS3U0sf946czL0uGuw=)
                          30: 3139342e33312e3139352e302f32342d3234203d3e203334393933.roa (hash: /RrqrRO8J+Vsp3FaP0KZwFzXiRmxrRbyseKOqWdHYpY=)
                          31: 38352e3230392e3232382e302f32342d3234203d3e203230343733.roa (hash: 1VJONXDxJnPHUDzUm7XiO/UF/aXr3KYuVDC6vKiNDOc=)
                          32: 3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa (hash: X70d0T4GWN6rC/5/Z7B3IR7A4QtMvYWM6LmuwXwdnH0=)
                          33: 38352e3230392e3233302e302f32342d3234203d3e203138313836.roa (hash: wLYhvbcU/etiFzebOUkFMR3b0g4xeh82nSHNvUEIAsY=)
                          34: 352e3138312e3138352e302f32342d3234203d3e20323131333733.roa (hash: tIeHJEF41zbDRQ8KbMBp/GsLGj1RgNxno+RElBJQNMw=)
                          35: 34352e382e3231372e302f32342d3234203d3e20383334.roa (hash: lxgDM+2IpOwskjSyLj/88e3oNG4qGZLEbcXn/wQBWJ8=)
                          36: 34352e382e3231362e302f32342d3234203d3e20323131343430.roa (hash: e8OtHDGrOLuThDlvGfoczJuukmiEX6Dq6BRiXUAdwSs=)
                          37: 34352e39352e3231342e302f32342d3234203d3e20383334.roa (hash: 4X6EQaqJTKhKvN3TJ9GVIsbRzqsZ4tWpY3NIa3KMmkU=)
                          38: 3139342e33312e3139362e302f32342d3234203d3e20323030303137.roa (hash: mYDAbrfXE2SMRwMvSEq6zRWmL22fizr0hTNDEPKCMHw=)
                          39: 3134362e31392e33382e302f32342d3234203d3e203136323736.roa (hash: norYvgZGO2Imho4UnQcnY8UITUyuaQwpwpHqXsoPDao=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:1a:d9:5f:65:38:af:60:ec:86:cc:52:04:75:84:03:0a:ac:8b:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
        Validity
            Not Before: Jul 28 17:19:17 2026 GMT
            Not After : Jul 29 19:49:17 2026 GMT
        Subject: CN=69189A5561AD32DD59C9808A1D714AD7381CAAD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:af:e7:c1:aa:ae:6a:09:7b:72:f8:9e:76:1b:
                    fc:14:40:66:fb:c6:78:c7:e1:d0:d3:1a:6b:01:a2:
                    e9:56:53:a8:e4:0d:1d:86:63:1e:02:6e:c9:ca:82:
                    89:b5:f8:82:70:27:1a:4f:97:a6:94:76:12:39:05:
                    68:2f:41:67:1c:8f:b9:02:d5:1c:fc:cd:fd:0d:95:
                    60:89:f4:fb:66:bf:81:59:8f:66:5a:1f:03:9d:b1:
                    cf:a2:6f:f9:81:48:c6:50:c7:48:84:8b:5b:ad:1d:
                    cd:68:c3:75:7c:c6:da:5f:2e:65:b2:c9:02:0a:a3:
                    7d:a5:27:f3:82:09:2c:b3:e8:b8:c2:39:be:65:d7:
                    99:4e:14:11:68:51:2e:b9:0d:9b:85:e1:62:06:4d:
                    1b:e5:bc:d2:f6:5f:95:0c:42:ef:8e:57:d1:31:76:
                    72:59:f9:f5:83:06:88:7f:e1:40:30:44:0e:73:bb:
                    ac:9c:8b:f3:c9:f1:71:b8:87:e0:bc:a1:f7:a8:d7:
                    1b:66:c3:d8:5f:c5:15:d8:6b:95:43:a8:a6:5b:2b:
                    d8:08:ed:2b:68:db:3d:b4:8f:fd:39:a4:cc:7d:f7:
                    a4:51:08:25:2c:0d:98:7b:16:17:73:ee:d6:75:95:
                    e2:12:cd:06:92:ac:b1:19:a6:a8:83:08:fe:33:db:
                    72:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:18:9A:55:61:AD:32:DD:59:C9:80:8A:1D:71:4A:D7:38:1C:AA:D5
            X509v3 Authority Key Identifier:
                keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:6a:e4:e8:02:23:ac:ad:13:cc:64:98:99:e2:42:4c:6d:e4:
         86:91:db:6f:67:eb:92:61:04:dc:31:f2:d9:a9:3a:46:15:f3:
         e8:c1:39:9d:65:45:89:8d:70:2a:74:e1:5a:2f:59:b2:4a:5f:
         9e:a8:d3:9d:42:f5:96:f6:4e:9b:ee:55:19:56:24:cd:a4:4f:
         c7:71:3d:b1:71:fe:70:eb:c1:7f:5f:1b:ce:37:cd:0b:63:c6:
         81:56:0e:6f:53:7d:39:b5:f7:39:71:54:7e:dc:59:8d:69:91:
         13:26:4e:83:a2:ab:5c:57:7d:6a:5a:c4:2b:be:2b:7c:0e:c2:
         a2:fd:09:ea:d9:f4:f4:c1:00:5b:18:28:83:8d:48:ee:c8:ac:
         3e:01:c5:bc:c6:e3:e6:ea:61:d7:cb:b1:89:27:c6:7c:6f:99:
         62:83:f1:40:4b:0b:7a:3a:44:71:a0:de:4b:44:f8:d4:13:ae:
         84:21:9d:43:72:1c:e8:6f:be:2c:8b:7e:e6:b0:45:24:f7:bd:
         43:f1:69:fe:9d:ef:53:7e:a8:d5:d4:15:47:44:f9:d5:0d:c6:
         37:38:f4:dc:f2:ab:2e:19:4b:5f:60:44:68:53:56:c5:e7:60:
         0f:76:38:25:db:46:e1:43:6c:df:99:89:aa:47:1a:78:ce:9c:
         0c:e7:57:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:40:04 2026 by rpki-client