Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft
File:                     06DB699D191D4B0289910C88E99CF94A671142F5.mft (raw, json)
Hash identifier:          YOALkfzw+R/jfi+Z1tIQU5r6Hp/i+0sNl+7yUzGIPhk=
Subject key identifier:   71:15:B2:F0:C1:12:6D:60:9C:B0:40:10:2E:9F:1D:97:BF:FA:B8:92
Authority key identifier: 06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5
Certificate issuer:       /CN=06DB699D191D4B0289910C88E99CF94A671142F5
Certificate serial:       110ED12FAEF4E91B43B68E87EF5B40B156A05369
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft
Manifest number:          01B6
Signing time:             Tue 12 May 2026 13:10:14 +0000
Manifest this update:     Tue 12 May 2026 13:05:14 +0000
Manifest next update:     Wed 13 May 2026 13:11:14 +0000
Files and hashes:         1: 326130363a396634313a3330303a3a2f34302d3438203d3e20323134393239.roa (hash: nHehWoxWXf1o0dbPZ/QJuze/UCT4m10ZkG52IDHzFmw=)
                          2: 326130363a396634313a313030303a3a2f34342d3438203d3e20323035383338.roa (hash: AZY42IY279tP8q55kCb+OP1wLi+9ejrODI15M2jhRhg=)
                          3: 326130643a643930363a3a2f33322d3438203d3e20323134393239.roa (hash: D6RZOojsGndN0vlTfP0QQUwSDXr1XyPrUaJBhshfYr4=)
                          4: 326130363a396634313a3630303a3a2f34342d3438203d3e20323134393239.roa (hash: AMLgwRSBt0CmHGpm323osatfdfROy2bz38NovoAPXrE=)
                          5: 326130363a396634313a613930303a3a2f34382d3438203d3e20323037363832.roa (hash: UqjWSUv2XiZdDsdQ0uOndREGc/szQ2JnxQlbZ2ADckI=)
                          6: 326130363a396634313a3530303a3a2f34302d3438203d3e20323134393239.roa (hash: wyHm6Xb4TACq8vR/cNeWh2WnIEs/uh/Bf1AaKmhxFVI=)
                          7: 38332e3134322e33312e302f32342d3234203d3e20323135303835.roa (hash: K8xHXu8PBNylpSXaMswB01W3KM9JQNKdf8F+yOiMZUQ=)
                          8: 326130363a396634313a613930313a3a2f34382d3438203d3e20323035383338.roa (hash: TZFInP0XSpkR7gzjfw2R3ov4SaV+J0Kzbqc0lAbOzbM=)
                          9: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer (hash: vr0IDnvMrQlAIKTPbmc9XgADtBREMeozkPpGVjOFGr4=)
                          10: 326130363a396634313a3a2f33322d3332203d3e20323135303835.roa (hash: oQiFmCDOiC8wMUPyhseeYgHp6yjZLGbjApAcNJ0LBoc=)
                          11: 326130363a396634313a613130303a3a2f34302d3430203d3e20323135303835.roa (hash: OUt+1oKNkT4q09Fbf5w3L2mK025o9AopYE3nSbhRFR0=)
                          12: 326130363a396634313a3230303a3a2f34302d3438203d3e20323134393239.roa (hash: QtN9SLO6BSjzyIiwoZRqiVH48LS9HyuRs3lqnsdDiKs=)
                          13: 326130363a396634313a613839393a3a2f34382d3438203d3e20323037363832.roa (hash: AsmqfeR8tzd8apPghjomjQ+mrFPKbFgoIC7Ra9M+3/4=)
                          14: 326130363a396634363a3a2f33322d3332203d3e20323135303835.roa (hash: VaQ7E5teHQHLeIM/yhafNgq1UJCeXJLr+dcAS+fpleo=)
                          15: 326130363a396634313a363936393a3a2f34382d3438203d3e20323132323432.roa (hash: oZMKPe8zIqKXDWE+ceP6ZovC366mkj//dk5ag6RqSYo=)
                          16: 06DB699D191D4B0289910C88E99CF94A671142F5.crl (hash: ivou08QJzlZDzExYSx4jxZ1fAtIiM9/ZCSyXM/PR58M=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 13:11:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:0e:d1:2f:ae:f4:e9:1b:43:b6:8e:87:ef:5b:40:b1:56:a0:53:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06DB699D191D4B0289910C88E99CF94A671142F5
        Validity
            Not Before: May 12 13:05:14 2026 GMT
            Not After : May 13 13:11:14 2026 GMT
        Subject: CN=7115B2F0C1126D609CB040102E9F1D97BFFAB892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:03:b2:df:86:6e:08:22:93:e2:83:0f:85:1c:
                    cc:a2:8e:f2:00:67:e6:35:80:ce:2e:68:8d:79:b4:
                    eb:e1:c8:a6:d5:f6:01:88:8e:db:4e:91:fb:25:ca:
                    75:aa:8a:ec:43:94:d4:1c:52:cc:58:26:1c:cf:b8:
                    cf:a0:23:bb:5f:0d:d1:6e:a9:3c:d2:1c:06:9e:30:
                    ad:c8:95:17:19:3b:d3:3c:60:27:55:98:0e:3a:d7:
                    af:a2:a2:86:86:2e:68:f9:ea:50:ed:3e:41:3c:22:
                    26:63:22:80:9b:14:df:33:0d:92:7d:f6:a3:a0:33:
                    11:77:d2:ed:79:1b:4b:9a:b1:c5:43:db:32:8b:f4:
                    42:cd:c6:1e:16:8c:f3:df:b8:b1:25:25:42:0f:42:
                    90:ca:50:db:f0:67:a3:55:28:31:e9:de:79:6a:f8:
                    d4:87:cd:65:a8:f8:7f:78:eb:ba:42:0b:01:c8:f9:
                    07:6a:2d:a5:b9:41:24:88:a8:d2:d8:2b:02:3a:50:
                    ba:71:4c:5c:81:39:45:a9:5c:d7:ca:47:e7:89:8c:
                    6a:55:b7:e7:bc:43:72:ff:07:7a:7d:c4:9c:e6:20:
                    82:da:17:9a:af:93:e1:99:8f:be:5e:33:24:c1:06:
                    77:d2:59:e9:26:3c:f9:a6:bb:6c:09:fd:b2:ca:b8:
                    6b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:15:B2:F0:C1:12:6D:60:9C:B0:40:10:2E:9F:1D:97:BF:FA:B8:92
            X509v3 Authority Key Identifier:
                keyid:06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:95:60:b1:be:f6:cb:1d:8d:ed:d2:fc:10:52:fb:2c:45:8f:
         b7:35:04:05:b2:1f:9c:2e:fe:7c:f8:af:12:1f:dd:56:32:75:
         ec:af:a7:91:63:c5:99:9e:40:22:37:50:37:ff:bf:9e:f0:d0:
         f7:eb:1a:63:a3:79:f3:87:38:34:09:b7:89:96:70:92:24:5d:
         12:8d:9a:e9:59:41:1f:87:59:28:a2:8e:80:43:cd:56:48:b3:
         b3:db:cf:24:46:17:8c:66:5c:60:42:c3:56:8d:0a:5c:34:e5:
         85:8a:07:e0:9a:b7:fb:e2:66:ba:d7:32:5f:3d:1a:b4:b6:86:
         f8:43:15:30:01:3d:80:c3:7d:fb:b5:3e:1f:36:00:0c:31:73:
         e6:04:6e:b6:c2:5a:26:a0:87:b3:3e:ef:94:21:c5:e3:75:c7:
         ce:ce:43:03:bc:23:28:0e:19:79:f0:06:56:7e:13:e7:1c:4c:
         be:36:9f:28:d4:ec:83:5b:52:4f:63:f8:76:55:48:74:5c:c9:
         16:81:62:15:34:6e:a7:32:cc:42:6a:af:d1:88:b8:fb:4d:2f:
         a6:7a:eb:6f:e2:4b:04:7d:68:0b:fe:44:05:db:07:f8:86:80:
         a1:e5:2a:5d:de:27:5e:07:0d:0c:56:3d:7e:d2:87:1f:8f:15:
         d8:1d:ad:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:15:25 2026 by rpki-client