Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft
File:                     06DB699D191D4B0289910C88E99CF94A671142F5.mft (raw, json)
Hash identifier:          9vq17MCFfSv1JRZ7ZAa8cnMjfbuI5ilqCNpB+8YRGWU=
Subject key identifier:   9F:31:DD:DB:CE:20:96:FC:F9:68:73:62:81:1E:DF:70:29:38:82:A6
Authority key identifier: 06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5
Certificate issuer:       /CN=06DB699D191D4B0289910C88E99CF94A671142F5
Certificate serial:       5C9FC31A9F0319EA4906857DA658B58D65BA52B6
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft
Manifest number:          0223
Signing time:             Thu 23 Jul 2026 06:34:43 +0000
Manifest this update:     Thu 23 Jul 2026 06:29:43 +0000
Manifest next update:     Fri 24 Jul 2026 06:51:43 +0000
Files and hashes:         1: 326130643a643930363a3a2f33322d3332203d3e20323135303835.roa (hash: ZDwbrssOJTEZj/NExBW2DbtjZEYTPTD5m5o8DRunpr8=)
                          2: 38332e3134322e33312e302f32342d3234203d3e20323135303835.roa (hash: c23f5zfF11QepD/hCX1+ZX8Ztc0XcCBU7/BkVhVVOkA=)
                          3: 326130363a396634313a613839393a3a2f34382d3438203d3e20323037363832.roa (hash: AsmqfeR8tzd8apPghjomjQ+mrFPKbFgoIC7Ra9M+3/4=)
                          4: 326130363a396634313a363936393a3a2f34382d3438203d3e20323132323432.roa (hash: oZMKPe8zIqKXDWE+ceP6ZovC366mkj//dk5ag6RqSYo=)
                          5: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer (hash: zDfWjzGK40zSCpRuFh+A3O83EeUEIjX9jMdsKJlIUSE=)
                          6: 326130363a396634313a3530303a3a2f34302d3430203d3e20323134393239.roa (hash: 6i1ZgtOnHj56v46uTmCShLGX5uKMuUUqeo8JAh1N6qA=)
                          7: 326130363a396634313a3330303a3a2f34302d3430203d3e20323134393239.roa (hash: 2IF98WLaAic68Pu908k0h2rFie4r40y3VkB4waaDil0=)
                          8: 326130363a396634313a3a2f33322d3332203d3e20323135303835.roa (hash: oQiFmCDOiC8wMUPyhseeYgHp6yjZLGbjApAcNJ0LBoc=)
                          9: 326130363a396634313a613930303a3a2f34382d3438203d3e20323037363832.roa (hash: IPmhuzBuQk0H65gj7yTl9nlDYGhk58il9d6iAo3tkJ8=)
                          10: 06DB699D191D4B0289910C88E99CF94A671142F5.crl (hash: b1g21fjpb3njJkmczcSiC3ono8mQhrJVTxTsYZY9Fwc=)
                          11: 326130363a396634313a613930313a3a2f34382d3438203d3e20323035383338.roa (hash: 4HEPjtIiPa97P9bGhpyLZGMoz0SO/cByiA91tlp90eY=)
                          12: 326130363a396634313a3a2f34382d3438203d3e20323135303835.roa (hash: ifqv7lMl5QtLHVetA7gis4rsAT0Hkt22y/eFJkwNV2E=)
                          13: 326130363a396634313a313030303a3a2f34342d3438203d3e20323035383338.roa (hash: AZY42IY279tP8q55kCb+OP1wLi+9ejrODI15M2jhRhg=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 06:51:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:9f:c3:1a:9f:03:19:ea:49:06:85:7d:a6:58:b5:8d:65:ba:52:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06DB699D191D4B0289910C88E99CF94A671142F5
        Validity
            Not Before: Jul 23 06:29:43 2026 GMT
            Not After : Jul 24 06:51:43 2026 GMT
        Subject: CN=9F31DDDBCE2096FCF9687362811EDF70293882A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d7:1c:34:9b:15:c8:c1:31:c4:26:b8:98:7e:
                    3d:6e:0d:3a:cd:5e:cf:0f:2e:41:35:c0:fb:41:aa:
                    0f:e2:60:14:d8:ef:b3:28:74:ed:c6:c6:a3:d6:ed:
                    7b:05:0b:38:6e:95:02:9c:51:bf:44:33:6f:b0:f9:
                    08:5d:e9:5f:c3:83:56:70:41:17:0e:6e:18:a8:4f:
                    32:61:4b:2a:ab:ba:d0:66:b9:be:51:84:8a:83:cb:
                    26:4d:43:b9:1b:e4:a8:f1:dc:ce:72:d7:4c:f9:97:
                    68:32:9c:e8:6c:af:92:a8:7b:f3:64:ac:52:de:95:
                    aa:c9:04:f6:f5:95:10:f2:f1:ac:97:79:6c:a1:26:
                    d5:80:b9:38:1b:c5:d0:37:44:57:19:d0:2f:7f:f3:
                    25:ce:1b:37:fc:c0:43:4c:4d:1e:f4:60:f8:05:b4:
                    28:9d:c8:77:38:7c:cf:9b:c7:56:73:37:18:a5:a2:
                    08:cf:e0:b8:28:6c:8b:92:d6:64:09:b4:40:9d:a3:
                    42:48:e5:f1:17:a6:39:3c:bf:7d:b5:ea:97:30:04:
                    06:12:42:e7:fa:c1:5c:39:63:0a:f9:b5:16:02:fa:
                    1e:f0:3c:bf:54:c6:2a:0f:fd:46:47:04:51:fb:49:
                    c7:b5:b3:9a:d2:da:1d:e1:d7:12:0b:1f:52:05:05:
                    77:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:31:DD:DB:CE:20:96:FC:F9:68:73:62:81:1E:DF:70:29:38:82:A6
            X509v3 Authority Key Identifier:
                keyid:06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:45:fa:55:fb:5f:b5:cd:59:bb:f5:3c:c2:dc:8b:e5:94:92:
         a3:3b:f5:2e:8d:db:15:8d:89:8c:4a:45:20:ea:a0:dc:6f:21:
         18:70:3b:4b:60:46:db:2d:56:29:e4:d7:b2:a8:34:2e:d2:31:
         9a:d2:23:2d:1a:d9:a3:2f:22:6c:4e:e7:4f:79:16:47:78:0e:
         c2:20:68:d1:40:de:02:b7:38:66:61:39:06:f7:13:6d:94:a6:
         c8:f3:a7:e9:0f:5b:92:4c:40:4a:af:1a:f6:9a:7d:6f:6b:cc:
         be:06:89:da:94:d6:4d:77:b3:11:d4:19:c2:71:50:bb:7e:21:
         c5:fa:9b:f9:6e:3e:f3:7e:a8:fc:1c:61:fb:6b:09:88:bf:47:
         e5:a7:84:9a:df:17:55:c9:d5:e9:18:35:1e:e2:b3:52:a1:88:
         47:5a:03:df:85:59:4f:2a:45:bb:80:97:6f:6e:97:0e:7b:9a:
         a7:df:a9:e4:95:80:9c:70:73:0b:97:6d:87:e1:80:10:8f:f4:
         20:63:5e:88:a3:11:2f:c9:e3:46:a6:e6:a0:f3:11:5b:25:58:
         68:e4:f7:b1:d6:cf:72:bc:00:14:8d:db:a3:9d:b2:bb:21:53:
         cd:a3:dd:37:ac:d9:2e:8e:e6:0a:d8:3b:ab:6b:43:9f:e2:1b:
         b4:d0:62:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:12:35 2026 by rpki-client