Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
File:                     A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft (raw, json)
Hash identifier:          xqsMe/bC/MlTi9kWDiekjNS83GFB0oC2jsP1FqLr5yc=
Subject key identifier:   55:B3:D1:7E:F2:A4:D0:4E:0F:83:0D:15:30:73:71:C6:80:8B:62:95
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Certificate issuer:       /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial:       03F6213AC750474E32EEDA6296B7E516F310FC8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
Manifest number:          0594
Signing time:             Sat 23 Aug 2025 04:47:33 +0000
Manifest this update:     Sat 23 Aug 2025 04:42:33 +0000
Manifest next update:     Sun 24 Aug 2025 05:11:33 +0000
Files and hashes:         1: 34352e39352e3231322e302f32322d3232203d3e2037303239.roa (hash: wXll8iGOq5bo/V4iKTWa0gWLbXOr0lpoVBYORUbUhI0=)
                          2: 34352e39352e3231342e302f32342d3234203d3e203434353437.roa (hash: 4mA1gqLsHB6B1P8mI+JnCzpqXJzdsvy8YAE1F7eD96c=)
                          3: 322e35392e36302e302f32342d3234203d3e20323132323338.roa (hash: hZ11O4/GfIQ3ZyUgAuxIn+0GkFLCBYYNN1OfZIqVDJk=)
                          4: 3139342e33312e3139362e302f32342d3234203d3e20323030303137.roa (hash: +5av7/JwxJ2GdszhVyEajY1bsnLhd2JhS01B+/f5cdU=)
                          5: 3139342e33312e3139372e302f32342d3234203d3e203432383331.roa (hash: KMAsq44hIBrFB+eRrhhDssa2B+eAZmGDL1feRYL/R5o=)
                          6: 3134362e31392e33382e302f32342d3234203d3e20313939363534.roa (hash: tMu2dDNgxRe+VDjoQWDh2D5B14b9X3sh+JRsGfPn8q4=)
                          7: 34352e39352e3231352e302f32342d3234203d3e203631333137.roa (hash: jtw5h4s7N892mHMRX7q1v9D/8tuL7heVW+cms9i1OJM=)
                          8: 38352e3230392e3233302e302f32342d3234203d3e203633393032.roa (hash: P3VDMMBoXLUjrVK3m58S6qhassJbF7wO/iSY6p4T2ZU=)
                          9: 34352e39352e3231352e302f32342d3234203d3e203239383032.roa (hash: Q1OlQJwADffmDxnZKj7bvhSo1kOL5aXrHpMtVtZFtuQ=)
                          10: 322e35392e36332e302f32342d3234203d3e20323039363432.roa (hash: RaxlZegunO166WwhSyVfZX5K+6/U6SSWAALUv6FWG/c=)
                          11: 34352e39352e3231322e302f32342d3234203d3e20323039353534.roa (hash: D9JHULDkg0M1wT0M8wVTfDaCTJBMJIgvLcTza5q7f5c=)
                          12: 352e3138312e3138372e302f32342d3234203d3e20323135373033.roa (hash: NPvxKSNfdGX2aoCtCwLVMBnzeoN7AU2GpBh+K+JOMMc=)
                          13: 322e35392e36312e302f32342d3234203d3e203438323636.roa (hash: 6dfl8lI1/2dWL8ffIUYhSFUUS7mSu5VjjS42Z8HkW7c=)
                          14: 3139342e33312e3139352e302f32342d3234203d3e203132383236.roa (hash: Hiowcu87+rnRP4VBm949hK9/XoAe1JP45hqg/KNcyVc=)
                          15: 3139342e33312e3139352e302f32342d3234203d3e203334393933.roa (hash: u4qzpzCcpcy7ZWgFmuZevTcx8Lt6OWg/1tciNCqCqYM=)
                          16: 34352e382e3231382e302f32342d3234203d3e20323132333834.roa (hash: fFoVzPmBBS3RRm+U3RPtjG4VEvF1de7uQ6FGaPF9XH0=)
                          17: 352e3138312e3138352e302f32342d3234203d3e20323132333834.roa (hash: erSH6Mf15T5HOlDb5lpbU/Ku2eMK+cc/6OxLysGJmP4=)
                          18: 3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa (hash: 1cwuvx0f/bXZ/DwexRmaaQu0tTmkULuIbOfrQVnX4ao=)
                          19: 38352e3230392e3233302e302f32342d3234203d3e203138313836.roa (hash: +OSq4m/6RpxEZih63506Gv6cOkBhW+YglqTPEKg/ZcM=)
                          20: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl (hash: UHFLm5aobURa1so2h6hF+FHuLNg75t8rhejanGQ6cFs=)
                          21: 3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa (hash: 1EdzND/a/KltqRlIJaQnMPD7XH7CVfxCNY9eyK9ocYU=)
                          22: 3139342e33312e3139352e302f32342d3234203d3e20323133363638.roa (hash: tD4GyhGOomU4ZODP9QGqyOztFfw1vKOkCjucViT/SZg=)
                          23: 38352e3230392e3233302e302f32342d3234203d3e20313430323234.roa (hash: X9S/vAQJZJ3+zexclWqp51kmLLKozc6jAta0ZYx43Ns=)
                          24: 3231322e31382e3131342e302f32342d3234203d3e20323635393139.roa (hash: hab4hIGZSaDFVIiuhh8M27XjJNP2UIzC71avB4BPqKc=)
                          25: 34352e39352e3231342e302f32342d3234203d3e20323136303939.roa (hash: e4sOWlDxZzPIXQ3Vnqya07udsUK1KYBFfN3K3q4TdIQ=)
                          26: 34352e382e3231372e302f32342d3234203d3e20323136303232.roa (hash: 8eRvRykZqahsRM0VQoPLCYYNfC1yyS358fE8muRhEDA=)
                          27: 34352e382e3231362e302f32342d3234203d3e20323132333834.roa (hash: A1j+LbNuBb8MeFvlQDvvVkVer3lHzQ8b3CPtY22jros=)
                          28: 352e3138312e3138352e302f32342d3234203d3e20323131333733.roa (hash: 2IzUCrtAIyuz9E3rWXqOgG5uo4suNn7bGWeOLhfOKvg=)
                          29: 3139342e33312e3139362e302f32342d3234203d3e20313939373337.roa (hash: kk3tkqt3pEQIayEC5akWsEQ7ftglPpO+Tt2YC9Lk7HM=)
                          30: 38352e3230392e3233312e302f32342d3234203d3e203135343430.roa (hash: cUer1fFgoUaMXBv/Ofy3VHFv8QPdEE9BGuKF+6jEGKA=)
                          31: 322e35392e36302e302f32342d3234203d3e203631333137.roa (hash: q2CusaPkf+9tq5tpeWHdsbDXlriozRiwrVa0ak4+VcM=)
                          32: 3231322e31382e3131342e302f32342d3234203d3e203133333335.roa (hash: vO05yPqpp4iOUltzxMrFn4LhWc4dalJCoS4kQJCbZB8=)
                          33: 352e3138312e3138342e302f32342d3234203d3e20323131333733.roa (hash: tJ6A7U51n+GmIhk14F2miBqIQAmoLzM8TwWGKyDUw/Q=)
                          34: 34352e382e3231392e302f32342d3234203d3e2039303039.roa (hash: 0tQfil3TCFdk5LEcr0D0xtOoBgJdLwmHivVySWFI/b8=)
                          35: 38352e3230392e3232382e302f32342d3234203d3e203230343733.roa (hash: LvALS0QzJUIn2y2aM1WJBNeefzd38B8yBzedKpN4nB8=)
                          36: 352e3138312e3138362e302f32342d3234203d3e203239303636.roa (hash: 5g1iTpy4+Ocf7g6idB3LUlopM7lH9cpsMczTTuu+hV0=)
                          37: 3139342e33312e3139342e302f32342d3234203d3e203339333638.roa (hash: SFZs2oMtwnIqXXrJ+wKfTfWn9twNuN9+e0KffE2zcpE=)
                          38: 352e3138312e3138342e302f32342d3234203d3e20323132333335.roa (hash: EGBFBscvQ1YWstG9kbxkZOotMsNA8UcpxsIuwRfrnH4=)
                          39: 36322e332e32302e302f32342d3234203d3e2039333034.roa (hash: 753vkBqDOJEpN/a5gmm4zhX9VKR3lQ+josL1BYJMcL8=)
                          40: 34352e39352e3231332e302f32342d3234203d3e20343030303339.roa (hash: w5NU7XhSCx4TB+ZVVuz65lQXaRG4sh/qolM03TzoQNc=)
                          41: 38352e3230392e3232392e302f32342d3234203d3e2039333034.roa (hash: TKqHRwCUVnc7CRdC56DXSH6l4ApVuAdNtL61vrXPyTg=)
                          42: 322e35392e36322e302f32342d3234203d3e20313432313131.roa (hash: c23s9WCLyWR8C29b7voS/R0hWodZcVrxRN5kAioljng=)
                          43: 322e35392e36322e302f32342d3234203d3e203633303233.roa (hash: /Ku1phd3ouPkx4ZDyzwkq+GI0U8NGNl14wVu1lc6q1k=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:f6:21:3a:c7:50:47:4e:32:ee:da:62:96:b7:e5:16:f3:10:fc:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
        Validity
            Not Before: Aug 23 04:42:33 2025 GMT
            Not After : Aug 24 05:11:33 2025 GMT
        Subject: CN=55B3D17EF2A4D04E0F830D15307371C6808B6295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:12:91:42:1a:88:f1:d7:26:f4:2b:74:d9:86:
                    88:ac:51:8b:af:a1:7b:1e:72:ab:05:4b:cb:6e:83:
                    96:d7:04:4d:87:73:2f:52:08:dc:a0:e3:ce:da:1e:
                    09:e5:5d:c9:6d:6b:77:32:ef:90:18:1a:cc:e4:0d:
                    c9:4d:de:a4:10:70:87:52:2b:a9:58:98:b5:a2:c8:
                    8b:0b:54:a9:d8:4f:19:b3:af:a9:b0:6d:60:cc:41:
                    02:be:a0:4c:86:6f:b4:76:cf:58:37:33:4c:33:8e:
                    03:a2:17:a9:a6:7e:fa:0f:ec:0e:b6:c4:91:5b:af:
                    c9:0d:3f:47:f4:2c:21:11:a9:e7:c9:72:c7:e3:5f:
                    29:8f:aa:52:cc:71:00:17:67:0b:be:ba:e8:62:12:
                    b9:a2:2c:ac:f2:24:5c:56:18:f5:30:c1:58:fc:23:
                    e4:97:3e:06:9c:88:c4:3f:58:e7:b0:e6:e3:70:d4:
                    50:14:2d:0d:a4:2f:75:3a:d6:c1:5c:bc:8b:e2:70:
                    43:84:15:1b:0d:f9:d2:d8:d6:4a:68:40:fb:e9:1f:
                    2e:d8:e6:65:67:85:db:95:9c:c4:1d:50:06:c9:f5:
                    dd:9e:36:4f:63:50:e5:a3:fe:99:d5:02:82:90:d4:
                    ff:d1:71:6a:1e:87:51:db:05:38:2b:81:cc:c4:27:
                    06:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:B3:D1:7E:F2:A4:D0:4E:0F:83:0D:15:30:73:71:C6:80:8B:62:95
            X509v3 Authority Key Identifier:
                keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:2a:af:65:5c:a7:10:f9:6f:80:45:c2:1c:75:c2:e1:05:10:
         d9:1a:97:3d:31:7f:9a:c0:36:9a:60:38:1b:68:35:f6:1c:0e:
         e9:1b:d0:66:ef:3b:77:b7:d4:02:17:de:3c:4a:7f:eb:75:4e:
         84:fa:da:8c:1c:63:92:ab:3a:d3:26:1d:71:d8:1e:00:4c:cb:
         45:7c:ea:20:c9:1e:16:b1:de:dd:5d:37:e4:a8:f5:ef:ad:76:
         ae:f6:7a:50:00:b4:0c:2d:6a:d9:39:58:d0:c6:57:af:4e:d2:
         51:86:33:4f:7e:e5:d0:7b:35:63:55:04:8a:39:b5:9c:da:3c:
         59:39:5f:be:f9:e0:57:b1:27:1f:4c:88:28:23:f4:dc:0c:3a:
         97:ba:68:d2:73:58:46:52:ed:c0:36:4c:1b:86:54:d4:b3:74:
         17:3e:b7:61:f6:cf:a8:40:24:b1:e2:12:65:8b:47:38:25:48:
         e7:7b:db:4a:6c:22:c2:7f:c0:2e:ae:f3:b6:96:08:54:d7:84:
         67:b8:f8:6e:8e:e1:d1:5d:a3:de:5c:ee:16:99:21:18:1d:e8:
         ee:c7:51:4b:ff:4d:f8:f6:2c:96:1c:cd:fa:55:7e:75:34:f9:
         03:f4:b1:42:2b:b3:cf:a5:75:13:6b:16:03:cf:ca:7d:bf:f4:
         c7:b0:98:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:47:56 2025 by rpki-client