Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
File:                     A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft (raw, json)
Hash identifier:          X7CUDXfYJlCzkoBPwm1szW7i9zxFm+Q/qBiFTevieOs=
Subject key identifier:   C7:7C:50:70:14:F5:8A:0C:9B:5D:0F:70:D0:4D:AF:D8:58:D4:24:A6
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Certificate issuer:       /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial:       17C61F6A2DEF4EE444E8FF0A2C0B446E5B364799
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
Manifest number:          0540
Signing time:             Sat 28 Jun 2025 06:39:09 +0000
Manifest this update:     Sat 28 Jun 2025 06:34:09 +0000
Manifest next update:     Sun 29 Jun 2025 10:23:09 +0000
Files and hashes:         1: 38352e3230392e3233302e302f32342d3234203d3e20313430323234.roa (hash: X9S/vAQJZJ3+zexclWqp51kmLLKozc6jAta0ZYx43Ns=)
                          2: 38352e3230392e3232392e302f32342d3234203d3e20383334.roa (hash: Vz5JKMXsuq4dM9WXBkKEYV/7pFbyG3pvLjRS9Y02R/M=)
                          3: 3134362e31392e33382e302f32342d3234203d3e20313939363534.roa (hash: tMu2dDNgxRe+VDjoQWDh2D5B14b9X3sh+JRsGfPn8q4=)
                          4: 36322e332e32302e302f32342d3234203d3e2039333034.roa (hash: 753vkBqDOJEpN/a5gmm4zhX9VKR3lQ+josL1BYJMcL8=)
                          5: 352e3138312e3138352e302f32342d3234203d3e20323131333733.roa (hash: 2IzUCrtAIyuz9E3rWXqOgG5uo4suNn7bGWeOLhfOKvg=)
                          6: 34352e39352e3231322e302f32342d3234203d3e20323039353534.roa (hash: D9JHULDkg0M1wT0M8wVTfDaCTJBMJIgvLcTza5q7f5c=)
                          7: 322e35392e36302e302f32342d3234203d3e20323132323338.roa (hash: hZ11O4/GfIQ3ZyUgAuxIn+0GkFLCBYYNN1OfZIqVDJk=)
                          8: 3139342e33312e3139352e302f32342d3234203d3e203334393933.roa (hash: u4qzpzCcpcy7ZWgFmuZevTcx8Lt6OWg/1tciNCqCqYM=)
                          9: 34352e39352e3231342e302f32342d3234203d3e203434353437.roa (hash: 4mA1gqLsHB6B1P8mI+JnCzpqXJzdsvy8YAE1F7eD96c=)
                          10: 352e3138312e3138352e302f32342d3234203d3e20323132333834.roa (hash: erSH6Mf15T5HOlDb5lpbU/Ku2eMK+cc/6OxLysGJmP4=)
                          11: 38352e3230392e3232382e302f32342d3234203d3e203230343733.roa (hash: LvALS0QzJUIn2y2aM1WJBNeefzd38B8yBzedKpN4nB8=)
                          12: 38352e3230392e3233312e302f32342d3234203d3e203135343430.roa (hash: cUer1fFgoUaMXBv/Ofy3VHFv8QPdEE9BGuKF+6jEGKA=)
                          13: 322e35392e36312e302f32342d3234203d3e203438323636.roa (hash: 6dfl8lI1/2dWL8ffIUYhSFUUS7mSu5VjjS42Z8HkW7c=)
                          14: 3139342e33312e3139372e302f32342d3234203d3e203432383331.roa (hash: K/AgWhdBwRNuHNiBHXtZ25SaRir/NPec0zhFlGbzmks=)
                          15: 3139342e33312e3139342e302f32342d3234203d3e203339333638.roa (hash: SFZs2oMtwnIqXXrJ+wKfTfWn9twNuN9+e0KffE2zcpE=)
                          16: 3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa (hash: b7J5ZHAXcSY0Xj1PSon6tEeZ1GDcJuT1aGzIBTYCrpo=)
                          17: 34352e39352e3231342e302f32342d3234203d3e20323136303939.roa (hash: e4sOWlDxZzPIXQ3Vnqya07udsUK1KYBFfN3K3q4TdIQ=)
                          18: 3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa (hash: PY8NObpnksEy4Gap1Hc7MyHqiFU62dabk5L2A/Q0beE=)
                          19: 3139342e33312e3139352e302f32342d3234203d3e20323133363638.roa (hash: tD4GyhGOomU4ZODP9QGqyOztFfw1vKOkCjucViT/SZg=)
                          20: 34352e382e3231372e302f32342d3234203d3e20323136303232.roa (hash: 8eRvRykZqahsRM0VQoPLCYYNfC1yyS358fE8muRhEDA=)
                          21: 322e35392e36322e302f32342d3234203d3e203633303233.roa (hash: DSrssF4mQ2FpkJ2bTT0rXZrpSPxbZ/p2NNnVGrB1zBA=)
                          22: 34352e382e3231392e302f32342d3234203d3e2039303039.roa (hash: 0tQfil3TCFdk5LEcr0D0xtOoBgJdLwmHivVySWFI/b8=)
                          23: 352e3138312e3138372e302f32342d3234203d3e20323135373033.roa (hash: NPvxKSNfdGX2aoCtCwLVMBnzeoN7AU2GpBh+K+JOMMc=)
                          24: 3134362e31392e3136372e302f32342d3234203d3e203633303233.roa (hash: ZHdW+pei9XIhTbcUkYdHIOR86A1hj8LVQhQf+2OeqZ0=)
                          25: 322e35392e36332e302f32342d3234203d3e20323039363432.roa (hash: RaxlZegunO166WwhSyVfZX5K+6/U6SSWAALUv6FWG/c=)
                          26: 38352e3230392e3233302e302f32342d3234203d3e203633393032.roa (hash: P3VDMMBoXLUjrVK3m58S6qhassJbF7wO/iSY6p4T2ZU=)
                          27: 3231322e31382e3131342e302f32342d3234203d3e203133333335.roa (hash: vO05yPqpp4iOUltzxMrFn4LhWc4dalJCoS4kQJCbZB8=)
                          28: 352e3138312e3138342e302f32342d3234203d3e20323131333733.roa (hash: tJ6A7U51n+GmIhk14F2miBqIQAmoLzM8TwWGKyDUw/Q=)
                          29: 34352e39352e3231352e302f32342d3234203d3e203631333137.roa (hash: 1rledH/nQm8w0NijGoGbm37JgiwE6dNG9uQzsEzjcaQ=)
                          30: 38352e3230392e3233302e302f32342d3234203d3e203138313836.roa (hash: +OSq4m/6RpxEZih63506Gv6cOkBhW+YglqTPEKg/ZcM=)
                          31: 3139342e33312e3139352e302f32342d3234203d3e203132383236.roa (hash: Hiowcu87+rnRP4VBm949hK9/XoAe1JP45hqg/KNcyVc=)
                          32: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl (hash: /1szOYZFhaoE/6Nqbye2gIwi+Ze1ovtFw2Mzowx97u8=)
                          33: 352e3138312e3138342e302f32342d3234203d3e20323132333335.roa (hash: EGBFBscvQ1YWstG9kbxkZOotMsNA8UcpxsIuwRfrnH4=)
                          34: 3139342e33312e3139362e302f32342d3234203d3e20313939373337.roa (hash: kk3tkqt3pEQIayEC5akWsEQ7ftglPpO+Tt2YC9Lk7HM=)
                          35: 34352e39352e3231332e302f32342d3234203d3e20343030303339.roa (hash: w5NU7XhSCx4TB+ZVVuz65lQXaRG4sh/qolM03TzoQNc=)
                          36: 3139342e33312e3139362e302f32342d3234203d3e20323030303137.roa (hash: +5av7/JwxJ2GdszhVyEajY1bsnLhd2JhS01B+/f5cdU=)
                          37: 322e35392e36302e302f32342d3234203d3e203631333137.roa (hash: q2CusaPkf+9tq5tpeWHdsbDXlriozRiwrVa0ak4+VcM=)
                          38: 352e3138312e3138362e302f32342d3234203d3e203239303636.roa (hash: 5g1iTpy4+Ocf7g6idB3LUlopM7lH9cpsMczTTuu+hV0=)
                          39: 3231322e31382e3131342e302f32342d3234203d3e20323635393139.roa (hash: hab4hIGZSaDFVIiuhh8M27XjJNP2UIzC71avB4BPqKc=)
                          40: 34352e382e3231382e302f32342d3234203d3e20323132333834.roa (hash: fFoVzPmBBS3RRm+U3RPtjG4VEvF1de7uQ6FGaPF9XH0=)
                          41: 34352e39352e3231322e302f32322d3232203d3e2037303239.roa (hash: wXll8iGOq5bo/V4iKTWa0gWLbXOr0lpoVBYORUbUhI0=)
                          42: 34352e382e3231362e302f32342d3234203d3e20323132333834.roa (hash: A1j+LbNuBb8MeFvlQDvvVkVer3lHzQ8b3CPtY22jros=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:c6:1f:6a:2d:ef:4e:e4:44:e8:ff:0a:2c:0b:44:6e:5b:36:47:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
        Validity
            Not Before: Jun 28 06:34:09 2025 GMT
            Not After : Jun 29 10:23:09 2025 GMT
        Subject: CN=C77C507014F58A0C9B5D0F70D04DAFD858D424A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:32:aa:e6:d8:e2:4c:c5:75:74:7e:ad:d3:35:
                    74:66:99:fe:6a:e0:f2:17:c3:78:52:9f:20:cf:7f:
                    d2:50:2a:56:26:ff:a0:c4:96:75:18:b7:4e:6a:ac:
                    20:3e:46:0d:88:b0:bd:19:a2:a4:db:8e:8b:4d:83:
                    84:50:ef:c7:88:ea:3c:88:3c:ef:d7:1e:5a:8e:8d:
                    8b:08:5d:5f:8b:88:95:76:82:24:f8:69:e2:91:ac:
                    65:3f:f6:b2:bb:73:01:2f:72:43:52:de:16:49:0a:
                    33:0d:29:59:8b:80:56:22:5c:67:a6:41:1f:1c:81:
                    63:bb:1f:75:45:15:01:f9:08:5b:f3:de:db:5a:45:
                    f8:96:f4:5a:ad:5e:2c:a9:44:ed:a1:44:c7:ac:5f:
                    e2:b9:90:75:50:b3:18:0e:50:0a:db:06:2e:fa:e4:
                    aa:df:0f:1f:52:e6:69:51:87:5e:98:16:08:a9:36:
                    1d:f0:2a:56:2d:5b:21:7c:71:68:8d:3f:5c:51:68:
                    90:db:31:c2:f0:f1:80:3a:dd:d9:3f:80:a2:87:27:
                    94:76:c9:32:ad:43:09:82:ea:4f:4d:5c:0f:d4:8c:
                    50:0a:6c:05:23:de:97:16:8e:6d:de:18:7f:e3:ef:
                    73:16:24:a8:d0:38:4a:a8:4b:36:1e:54:56:a0:6b:
                    12:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:7C:50:70:14:F5:8A:0C:9B:5D:0F:70:D0:4D:AF:D8:58:D4:24:A6
            X509v3 Authority Key Identifier:
                keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:34:c7:54:79:11:08:c2:cf:60:50:73:4a:b8:a5:ee:dd:f3:
         7c:0e:1e:e2:b6:01:c8:61:cb:4b:81:28:e1:cd:37:5b:71:80:
         16:04:e4:bf:97:ca:dc:a1:e4:09:af:96:0e:cd:e6:6b:37:f5:
         48:e2:e0:18:e9:e3:2a:f6:35:35:f3:7f:89:b4:ea:45:74:39:
         c6:fe:7b:70:35:04:48:1c:8d:30:67:c1:4c:2a:d2:7f:55:f2:
         2a:b3:10:eb:96:b6:29:cc:df:52:c6:4d:bc:93:7f:9c:30:09:
         f5:12:ff:a7:14:7e:90:fc:1b:fb:d0:f5:01:a0:02:da:95:07:
         00:97:75:79:15:3a:84:a6:c1:86:7d:96:af:1f:cc:cb:f1:fc:
         7e:6e:b1:65:d6:25:70:35:bd:18:c1:9a:5a:77:fe:7b:b1:1d:
         eb:bc:c0:03:bd:ce:07:cc:69:d7:f8:9f:6e:4c:98:2b:79:4e:
         89:bf:4c:03:99:0b:27:d6:e3:8f:7b:52:f4:35:2d:77:51:1d:
         ad:07:b6:0d:d8:55:18:b8:1e:70:2b:6b:b6:d6:25:5b:61:5a:
         e5:9f:a9:0a:a2:14:ee:b8:f3:f3:0d:f9:72:ae:5d:95:57:dd:
         b5:fd:6d:2e:4b:6b:b3:e5:f6:e7:eb:b9:fc:1a:c3:f0:fb:f3:
         25:91:9d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:43 2025 by rpki-client