Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
File:                     A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft (raw, json)
Hash identifier:          XSlG+opXxSpCD5MOi7K5HpGbca2zMSDp8ARIBor/rq8=
Subject key identifier:   B1:4B:70:F1:0F:86:5F:23:F7:1F:D5:3C:20:C9:9F:76:80:CE:FB:02
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Certificate issuer:       /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial:       564D574423E7A34A83A53E0498995B1B66663954
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
Manifest number:          06F2
Signing time:             Sun 19 Apr 2026 09:54:54 +0000
Manifest this update:     Sun 19 Apr 2026 09:49:54 +0000
Manifest next update:     Mon 20 Apr 2026 11:43:54 +0000
Files and hashes:         1: 322e35392e36322e302f32342d3234203d3e203633303233.roa (hash: /Ku1phd3ouPkx4ZDyzwkq+GI0U8NGNl14wVu1lc6q1k=)
                          2: 34352e382e3231382e302f32342d3234203d3e20323132333834.roa (hash: tj3yrp12EwOeT1ZEKtZIphksitaxnh11pc39cLh8XvY=)
                          3: 34352e382e3231362e302f32342d3234203d3e20323131343430.roa (hash: e8OtHDGrOLuThDlvGfoczJuukmiEX6Dq6BRiXUAdwSs=)
                          4: 34352e39352e3231322e302f32342d3234203d3e20323039353534.roa (hash: 9IsmuufWVjFLEbYLLcJg7Yp7+j5DqB4kK41/uY19nMQ=)
                          5: 322e35392e36332e302f32342d3234203d3e20383334.roa (hash: 8DqvUUgTHwg4fnhfYD2q3DFHCSCucv2RToLFRdMK/4s=)
                          6: 38352e3230392e3232382e302f32342d3234203d3e203230343733.roa (hash: 1VJONXDxJnPHUDzUm7XiO/UF/aXr3KYuVDC6vKiNDOc=)
                          7: 3139342e33312e3139352e302f32342d3234203d3e203132383236.roa (hash: dZ5pA0FTXTMIyebmvvTrXa2pwRmRVDj8qy5ZN+EkpPo=)
                          8: 38352e3230392e3232392e302f32342d3234203d3e203432383331.roa (hash: vjpMNqLq25F9up6mT05GhHQJMJ0KbktUxvDSn9v6kBA=)
                          9: 34352e39352e3231352e302f32342d3234203d3e203631333137.roa (hash: jtw5h4s7N892mHMRX7q1v9D/8tuL7heVW+cms9i1OJM=)
                          10: 352e3138312e3138342e302f32342d3234203d3e20323132333335.roa (hash: UCQA4MebhnFRuGzYIjyz+Oaxw3thh569/39f5fjzuDM=)
                          11: 38352e3230392e3233312e302f32342d3234203d3e203135343430.roa (hash: 5P7OofszcYzyRXLoqtlNETBM0YQubML8godGGz1Zc2U=)
                          12: 352e3138312e3138342e302f32342d3234203d3e20323131333733.roa (hash: HxZ7OQY4wmmok4f1jyMFC6WkeyQaBhCRYtiYzwz8qYg=)
                          13: 38352e3230392e3233302e302f32342d3234203d3e203633393032.roa (hash: P3VDMMBoXLUjrVK3m58S6qhassJbF7wO/iSY6p4T2ZU=)
                          14: 3139342e33312e3139362e302f32342d3234203d3e20313939373337.roa (hash: qc608O9yB+6tqsDBDhoINI3nGVPIPfhQ49+yA4p+itg=)
                          15: 3139342e33312e3139372e302f32342d3234203d3e203432383331.roa (hash: KMAsq44hIBrFB+eRrhhDssa2B+eAZmGDL1feRYL/R5o=)
                          16: 3139342e33312e3139342e302f32342d3234203d3e203339333638.roa (hash: qMisc8M9fAgiB1zw7/Tn0y61M2FDJt3sqCMkzKcplhA=)
                          17: 352e3138312e3138352e302f32342d3234203d3e20323132333834.roa (hash: erSH6Mf15T5HOlDb5lpbU/Ku2eMK+cc/6OxLysGJmP4=)
                          18: 38352e3230392e3233302e302f32342d3234203d3e20313430323234.roa (hash: X9S/vAQJZJ3+zexclWqp51kmLLKozc6jAta0ZYx43Ns=)
                          19: 34352e382e3231362e302f32342d3234203d3e20323132333834.roa (hash: a81beBwcXvnxQQXt8vP0FnYxX0zBkKmQl4zg0OFOfqc=)
                          20: 3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa (hash: 1EdzND/a/KltqRlIJaQnMPD7XH7CVfxCNY9eyK9ocYU=)
                          21: 322e35392e36302e302f32342d3234203d3e20323132323338.roa (hash: hZ11O4/GfIQ3ZyUgAuxIn+0GkFLCBYYNN1OfZIqVDJk=)
                          22: 3139342e33312e3139352e302f32342d3234203d3e203334393933.roa (hash: /RrqrRO8J+Vsp3FaP0KZwFzXiRmxrRbyseKOqWdHYpY=)
                          23: 352e3138312e3138352e302f32342d3234203d3e20323131333733.roa (hash: 2IzUCrtAIyuz9E3rWXqOgG5uo4suNn7bGWeOLhfOKvg=)
                          24: 3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa (hash: 1cwuvx0f/bXZ/DwexRmaaQu0tTmkULuIbOfrQVnX4ao=)
                          25: 3139342e33312e3139362e302f32342d3234203d3e20323030303137.roa (hash: +5av7/JwxJ2GdszhVyEajY1bsnLhd2JhS01B+/f5cdU=)
                          26: 34352e382e3231372e302f32342d3234203d3e20323134303235.roa (hash: +sPrCW3WqbeCRN41T+z7+AXOa7VPtKEnTOhpV5D7dWM=)
                          27: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl (hash: 9Dv6WPDP5M9bxPAMLfH5x/ieC0EWRvZZMi/MzJQBfWg=)
                          28: 322e35392e36322e302f32342d3234203d3e20313432313131.roa (hash: c23s9WCLyWR8C29b7voS/R0hWodZcVrxRN5kAioljng=)
                          29: 34352e382e3231392e302f32342d3234203d3e2039303039.roa (hash: 0zn1M6udTfOcCIE/Cifu6WDNTkQzSgcujlgX6HE4/sQ=)
                          30: 322e35392e36302e302f32342d3234203d3e203631333137.roa (hash: BBdnQvjsMGsAKdV0CMmUgkUx9rKK17g08iyDVXfqF5c=)
                          31: 3139342e33312e3139352e302f32342d3234203d3e20323133363638.roa (hash: pCuQNjK5vxSYZwtC7uzq87OexUIwDcw+LKWQti/Nk9E=)
                          32: 352e3138312e3138362e302f32342d3234203d3e20323036313530.roa (hash: QGg1o/UsEXwX7QWOmnciGR0lfU5zaV2UWyNlVxa/Ka8=)
                          33: 3134362e31392e33382e302f32342d3234203d3e203136323736.roa (hash: norYvgZGO2Imho4UnQcnY8UITUyuaQwpwpHqXsoPDao=)
                          34: 34352e39352e3231332e302f32342d3234203d3e20343030303339.roa (hash: XrIv1BWbF+to8I3saogND52oHBVFoDY38lWpbUFLA6o=)
                          35: 34352e39352e3231322e302f32322d3232203d3e2037303239.roa (hash: b3HfoeSSJnwEFBW/P8/Hh1DNPoifdQtxChWclKR01cY=)
                          36: 322e35392e36312e302f32342d3234203d3e203438323636.roa (hash: sgoOb4bX1m2rIZlacxTZqlmJneicsHhOxQYCb/BB8fA=)
                          37: 34352e39352e3231342e302f32342d3234203d3e20313938323530.roa (hash: cWZ4izllTaa4CjT3fbEMgCbmIhf6LWTGafANc9j4YVM=)
                          38: 34352e39352e3231352e302f32342d3234203d3e203239383032.roa (hash: Q1OlQJwADffmDxnZKj7bvhSo1kOL5aXrHpMtVtZFtuQ=)
                          39: 38352e3230392e3233302e302f32342d3234203d3e203138313836.roa (hash: +OSq4m/6RpxEZih63506Gv6cOkBhW+YglqTPEKg/ZcM=)
                          40: 3134362e31392e33382e302f32342d3234203d3e20313939363534.roa (hash: KCPy6uAOav6R+jmrUTgTpbZkeje3mnKOXa6FXDMEhhE=)
                          41: 352e3138312e3138372e302f32342d3234203d3e20323135373033.roa (hash: EJ6RmJBNoUg0c9WoYw2Ja1OnADVswQoLG/EoG0ZGnFE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:4d:57:44:23:e7:a3:4a:83:a5:3e:04:98:99:5b:1b:66:66:39:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
        Validity
            Not Before: Apr 19 09:49:54 2026 GMT
            Not After : Apr 20 11:43:54 2026 GMT
        Subject: CN=B14B70F10F865F23F71FD53C20C99F7680CEFB02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:62:d9:0e:51:b8:02:39:fb:6a:aa:0a:be:aa:
                    18:63:db:d7:d6:40:b9:2b:51:35:a1:5a:89:38:c4:
                    80:3e:22:a9:e7:34:3c:05:e3:f1:a1:c7:7a:75:27:
                    5b:6e:f4:e9:ae:44:ef:d1:47:37:7d:c5:29:e3:a1:
                    e6:ca:5d:d5:4a:a4:75:34:16:96:b7:d3:41:36:b3:
                    46:ce:ae:01:48:89:7d:b5:f8:66:88:3a:a6:0a:ec:
                    a4:12:13:af:91:dd:6e:31:d8:63:e4:12:f3:a6:0e:
                    77:4f:96:c0:92:05:a1:ec:b1:6c:e8:ad:e0:c0:ee:
                    58:c3:0b:7a:ed:2d:fb:b2:88:63:ed:1b:e4:d8:23:
                    8a:1f:db:34:c2:7c:87:41:30:2f:b5:ef:15:6c:1e:
                    7b:af:be:13:9e:e4:30:cd:3b:f5:ce:91:d6:5c:73:
                    ce:0c:e5:57:f8:46:0b:b4:ea:72:a5:40:17:d6:d2:
                    fb:d0:22:f3:ce:84:26:a4:c6:72:cc:a6:84:dd:23:
                    20:ee:b6:c3:48:b4:4e:f9:0e:c4:53:bf:cf:99:c9:
                    6b:aa:b2:24:14:42:6b:84:61:26:9f:6c:65:73:d6:
                    37:6a:72:30:b6:2d:db:b5:54:30:85:d2:d9:ca:97:
                    96:28:c3:57:33:b6:f9:86:b2:fa:66:0b:cf:7e:18:
                    d7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:4B:70:F1:0F:86:5F:23:F7:1F:D5:3C:20:C9:9F:76:80:CE:FB:02
            X509v3 Authority Key Identifier:
                keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:27:50:58:63:f1:41:b6:05:94:e8:9e:07:5e:1c:f8:e2:99:
         c9:a6:57:99:13:f8:11:33:4f:38:27:35:88:e3:84:83:a5:60:
         79:e0:3d:4c:6c:df:f3:8a:fc:00:79:bf:6c:94:cd:1f:64:39:
         79:84:bb:24:e3:a7:de:a0:47:3d:82:01:b9:6f:3a:e0:4a:3f:
         2d:6a:e5:e3:79:23:40:79:68:8e:ad:5f:dd:0d:22:82:69:f6:
         0b:58:dd:e7:19:e6:8f:60:52:84:5b:e6:ae:0c:92:e6:ed:df:
         31:86:14:9a:5e:f7:d3:03:d1:e8:31:fd:a1:c7:e2:b3:80:2b:
         d5:c7:d1:bf:a1:09:5e:36:27:34:0b:45:fb:8b:2b:e9:30:fb:
         dc:05:7a:8f:f1:1d:5f:53:79:05:16:4c:91:62:57:c1:14:d1:
         7a:71:cf:fc:6b:ee:ba:32:57:75:c5:f3:ca:e3:99:b3:0a:e5:
         13:05:a6:36:f0:63:f1:e4:34:25:30:f1:ba:63:cf:88:47:26:
         ce:20:33:25:0a:9d:79:df:15:99:a6:54:01:cf:f2:48:8e:8f:
         aa:0f:09:2f:29:da:32:32:30:cd:6a:3b:94:29:33:56:22:52:
         0a:58:aa:67:9f:32:0b:81:83:ac:72:0d:a4:53:4a:41:d7:12:
         32:43:ce:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:22:51 2026 by rpki-client