Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
File:                     A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft (raw, json)
Hash identifier:          WeQaC24Okd0tEz1SkVNP26tqRkgtZtilj9MrR8RqkAQ=
Subject key identifier:   65:F8:5C:60:90:66:76:0D:DA:29:66:E3:6F:1D:33:F8:53:31:C6:58
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Certificate issuer:       /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial:       1ABFED5E3C44117DA497A1C7328C905CB0019084
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
Manifest number:          07DC
Signing time:             Fri 25 Sep 2026 09:49:35 +0000
Manifest this update:     Fri 25 Sep 2026 09:44:35 +0000
Manifest next update:     Sat 26 Sep 2026 09:55:35 +0000
Files and hashes:         1: 34352e39352e3231352e302f32342d3234203d3e203631333137.roa (hash: Set9jSjJnZk4FzDhKsQCeyo0iC0093IITgk8mXGFRYE=)
                          2: 34352e39352e3231322e302f32342d3234203d3e20323039353534.roa (hash: 9IsmuufWVjFLEbYLLcJg7Yp7+j5DqB4kK41/uY19nMQ=)
                          3: 3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa (hash: /pttCsH3EqNiBOKmYU2SEK0bSx+Q89rOic38LmDTjfU=)
                          4: 352e3138312e3138352e302f32342d3234203d3e20323132333834.roa (hash: PkrjX5lEKZeku6HbTZFd/bgZgjS0Ra0J+FcQrImRmsQ=)
                          5: 3139342e33312e3139352e302f32342d3234203d3e20323133363638.roa (hash: pCuQNjK5vxSYZwtC7uzq87OexUIwDcw+LKWQti/Nk9E=)
                          6: 36322e332e32302e302f32342d3234203d3e20323132393830.roa (hash: f/GL2G2QMX1DeHxo/IzFzuj9b3uiMiTDtg1wGwI4Lb8=)
                          7: 34352e382e3231362e302f32342d3234203d3e20323131343430.roa (hash: e8OtHDGrOLuThDlvGfoczJuukmiEX6Dq6BRiXUAdwSs=)
                          8: 38352e3230392e3233302e302f32342d3234203d3e203138313836.roa (hash: wLYhvbcU/etiFzebOUkFMR3b0g4xeh82nSHNvUEIAsY=)
                          9: 3134362e31392e33382e302f32342d3234203d3e203136323736.roa (hash: norYvgZGO2Imho4UnQcnY8UITUyuaQwpwpHqXsoPDao=)
                          10: 352e3138312e3138342e302f32342d3234203d3e20323132363039.roa (hash: 6u+5ELEJLeXXB4+8NHbO0dG4EQaKYkOwI0K9os45OcQ=)
                          11: 38352e3230392e3232392e302f32342d3234203d3e203432383331.roa (hash: vjpMNqLq25F9up6mT05GhHQJMJ0KbktUxvDSn9v6kBA=)
                          12: 352e3138312e3138342e302f32342d3234203d3e20323132333335.roa (hash: UCQA4MebhnFRuGzYIjyz+Oaxw3thh569/39f5fjzuDM=)
                          13: 34352e39352e3231322e302f32322d3232203d3e2037303239.roa (hash: d9+cKpTdsfno2v/b+IKbhlhODzZZZTwj8EEe6uEOYgw=)
                          14: 3139342e33312e3139352e302f32342d3234203d3e203334393933.roa (hash: /RrqrRO8J+Vsp3FaP0KZwFzXiRmxrRbyseKOqWdHYpY=)
                          15: 322e35392e36302e302f32342d3234203d3e20383334.roa (hash: 6oFhbwS32nNztM+MkZFvFVF8FZ6win/Ti/cCKIVdiGM=)
                          16: 352e3138312e3138352e302f32342d3234203d3e20323131333733.roa (hash: tIeHJEF41zbDRQ8KbMBp/GsLGj1RgNxno+RElBJQNMw=)
                          17: 3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa (hash: X70d0T4GWN6rC/5/Z7B3IR7A4QtMvYWM6LmuwXwdnH0=)
                          18: 3134362e31392e33382e302f32342d3234203d3e20313939363534.roa (hash: KCPy6uAOav6R+jmrUTgTpbZkeje3mnKOXa6FXDMEhhE=)
                          19: 34352e382e3231392e302f32342d3234203d3e2039303039.roa (hash: VVBKfj3oX4V4HqDYQe/w0vIXEHmTptmcb2dA6LN81Ys=)
                          20: 3139342e33312e3139352e302f32342d3234203d3e203132383236.roa (hash: dZ5pA0FTXTMIyebmvvTrXa2pwRmRVDj8qy5ZN+EkpPo=)
                          21: 38352e3230392e3232382e302f32342d3234203d3e203230343733.roa (hash: 1VJONXDxJnPHUDzUm7XiO/UF/aXr3KYuVDC6vKiNDOc=)
                          22: 34352e382e3231372e302f32342d3234203d3e20383334.roa (hash: lxgDM+2IpOwskjSyLj/88e3oNG4qGZLEbcXn/wQBWJ8=)
                          23: 34352e39352e3231352e302f32342d3234203d3e203239383032.roa (hash: kUgYR/Kxqx56Hy24JaK1nIBftzOVeuZOaTeGulm2cfI=)
                          24: 34352e39352e3231342e302f32342d3234203d3e20383334.roa (hash: 4X6EQaqJTKhKvN3TJ9GVIsbRzqsZ4tWpY3NIa3KMmkU=)
                          25: 38352e3230392e3233312e302f32342d3234203d3e203135343430.roa (hash: 7ez4FNDsc2VXRnHlSjtzOmyRSh/gDET/tzdpB8U6faI=)
                          26: 352e3138312e3138342e302f32342d3234203d3e20323131333733.roa (hash: 2zHb0T4tIHau6aSZ9D+c/6DXvLxBGB8a+KLhel+Tre4=)
                          27: 352e3138312e3138372e302f32342d3234203d3e20323135373033.roa (hash: EJ6RmJBNoUg0c9WoYw2Ja1OnADVswQoLG/EoG0ZGnFE=)
                          28: 38352e3230392e3233302e302f32342d3234203d3e203633393032.roa (hash: VaOxQtitcotEwDKcqVbfty4V+UnBaFXCz621Z/5UMPE=)
                          29: 3139342e33312e3139372e302f32342d3234203d3e20383334.roa (hash: 5xlOHrC9cQ2pMdiC9jU0zHtgYmHcu7FKSMzeO+SOiwQ=)
                          30: 34352e382e3231362e302f32342d3234203d3e20323132333834.roa (hash: a81beBwcXvnxQQXt8vP0FnYxX0zBkKmQl4zg0OFOfqc=)
                          31: 34352e382e3231382e302f32342d3234203d3e20323132333834.roa (hash: iATVUumriorK7Pdv5iKgHpx/CwKgX/9pfUHykvA0Wrc=)
                          32: 352e3138312e3138362e302f32342d3234203d3e20323036313530.roa (hash: QGg1o/UsEXwX7QWOmnciGR0lfU5zaV2UWyNlVxa/Ka8=)
                          33: 3139342e33312e3139342e302f32342d3234203d3e203339333638.roa (hash: DPH0dq8YDEtGyRSQJNel2HWBEDDjKDRiZ8kPBGCbV5I=)
                          34: 34352e39352e3231332e302f32342d3234203d3e20343030303339.roa (hash: J1EW+hHtD32FPQGp7ofq9HLTlopn5evJHbexaxjWVK0=)
                          35: 322e35392e36322e302f32332d3234203d3e20383334.roa (hash: U8K8ByMMhjORRMnN107C0qHzPl2EMue6t1DEVbbMMv4=)
                          36: 322e35392e36312e302f32342d3234203d3e203438323636.roa (hash: sgoOb4bX1m2rIZlacxTZqlmJneicsHhOxQYCb/BB8fA=)
                          37: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl (hash: KfeNISya2tovJRmjko+xuWndut4FlXIQdjsS4kkTpNQ=)
                          38: 38352e3230392e3233302e302f32342d3234203d3e20313430323234.roa (hash: l2LIzKinG0BfxQ8d6ejTKmtFPNdSKUK9y0vPJ8skqFk=)
                          39: 3139342e33312e3139362e302f32342d3234203d3e20313939373337.roa (hash: qc608O9yB+6tqsDBDhoINI3nGVPIPfhQ49+yA4p+itg=)
                          40: 3139342e33312e3139362e302f32342d3234203d3e20323030303137.roa (hash: mYDAbrfXE2SMRwMvSEq6zRWmL22fizr0hTNDEPKCMHw=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 09:55:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:bf:ed:5e:3c:44:11:7d:a4:97:a1:c7:32:8c:90:5c:b0:01:90:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
        Validity
            Not Before: Sep 25 09:44:35 2026 GMT
            Not After : Sep 26 09:55:35 2026 GMT
        Subject: CN=65F85C609066760DDA2966E36F1D33F85331C658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:06:6d:58:c8:f8:3e:87:d6:d6:60:ea:1e:94:
                    33:27:85:fa:ef:7a:29:be:de:4f:11:27:0a:f4:46:
                    e0:66:f7:8f:72:f1:0b:23:8e:a8:5d:af:31:fe:61:
                    cf:ee:75:e2:f4:2b:2a:e8:6a:4a:a5:ec:57:a8:4d:
                    3e:a1:dd:8d:04:cf:a6:b9:c3:17:7d:91:bc:f0:2e:
                    f3:07:63:95:0e:59:cd:42:50:32:43:33:a2:51:e9:
                    47:08:ae:b8:2a:04:73:bc:8b:bc:37:1f:3a:54:7e:
                    19:d4:20:f4:3c:d8:9a:93:ca:b1:44:5a:91:19:6c:
                    49:9c:b9:ce:ae:a7:64:25:30:53:dc:7a:fa:d5:0b:
                    70:1a:4d:8b:ce:9c:2c:03:28:36:e4:42:a8:24:47:
                    ff:54:5f:60:b2:f8:4d:be:da:54:9b:b5:6f:9b:c9:
                    22:6b:13:2f:f7:8f:e0:e3:39:1e:9a:a4:8b:29:77:
                    d3:3b:4d:41:cd:3d:3b:57:af:0f:59:9b:67:a2:0f:
                    ca:fc:9c:54:33:82:15:0a:fe:8b:5a:bd:97:09:16:
                    01:a4:ba:57:66:90:c4:48:97:8c:d7:72:67:70:da:
                    b2:3a:ef:af:ce:8c:68:e2:7b:0f:ba:d9:e6:36:0e:
                    ac:89:00:ac:89:7c:71:52:6e:b6:0b:90:25:1a:ea:
                    f8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:F8:5C:60:90:66:76:0D:DA:29:66:E3:6F:1D:33:F8:53:31:C6:58
            X509v3 Authority Key Identifier:
                keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:37:66:1f:e6:31:10:15:27:e3:8c:9d:38:bd:af:91:d5:14:
         28:24:b1:04:0c:37:bf:d2:9f:62:df:a8:ed:d1:50:8f:54:d3:
         2b:3e:b9:2a:79:25:9b:54:66:56:3b:dc:58:de:c7:c1:2b:3f:
         0f:db:27:f2:9a:3b:55:e9:db:cd:1d:53:49:69:ef:1b:0f:2e:
         02:61:c2:98:3d:fd:17:26:92:06:da:79:02:15:bc:e1:b8:69:
         0b:33:cd:c0:c4:f1:fd:a7:aa:e2:a3:bd:47:90:7e:a9:f5:5a:
         68:56:48:37:fc:34:0b:6f:98:5d:a5:dc:ca:d3:92:6d:44:94:
         5f:05:41:83:55:ba:5e:a4:6e:df:ef:a5:6d:df:0e:34:e4:45:
         49:93:93:bb:33:7d:6a:63:4e:15:9b:c7:2c:35:f5:ef:a6:24:
         1f:e5:5b:ae:82:41:4c:3b:f9:60:db:f6:44:93:d9:30:bb:cd:
         5c:f1:a7:1e:c9:30:ee:4f:23:60:91:24:6c:bf:a6:3b:01:d4:
         9c:78:ab:29:da:08:f7:f7:b1:0b:d6:a2:7e:98:c6:0a:be:e2:
         2f:6c:52:42:b3:87:1e:7f:eb:db:89:46:ec:a9:12:09:5d:7d:
         87:b5:0e:72:e9:6c:af:d6:46:b8:40:27:41:48:7a:44:ad:61:
         c0:4b:f0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:04:04 2026 by rpki-client