Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft
File:                     06DB699D191D4B0289910C88E99CF94A671142F5.mft (raw, json)
Hash identifier:          sRvzNZKUNisn058qzVxbtSBwGPJcNPCzfZv3auL755A=
Subject key identifier:   81:E8:4B:CD:11:D2:40:BA:D4:43:5F:A1:49:56:F9:AB:5F:2C:AD:B7
Authority key identifier: 06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5
Certificate issuer:       /CN=06DB699D191D4B0289910C88E99CF94A671142F5
Certificate serial:       26A9110BCBBF4FB383A9ADC47B1877B912756F53
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft
Manifest number:          0173
Signing time:             Wed 25 Mar 2026 07:04:56 +0000
Manifest this update:     Wed 25 Mar 2026 06:59:56 +0000
Manifest next update:     Thu 26 Mar 2026 09:01:56 +0000
Files and hashes:         1: 38332e3134322e33312e302f32342d3234203d3e20323135303835.roa (hash: K8xHXu8PBNylpSXaMswB01W3KM9JQNKdf8F+yOiMZUQ=)
                          2: 326130643a643930363a3a2f33322d3438203d3e20323134393239.roa (hash: D6RZOojsGndN0vlTfP0QQUwSDXr1XyPrUaJBhshfYr4=)
                          3: 326130363a396634313a3230303a3a2f34302d3438203d3e20323134393239.roa (hash: QtN9SLO6BSjzyIiwoZRqiVH48LS9HyuRs3lqnsdDiKs=)
                          4: 326130363a396634313a613130303a3a2f34302d3430203d3e20323135303835.roa (hash: OUt+1oKNkT4q09Fbf5w3L2mK025o9AopYE3nSbhRFR0=)
                          5: 326130363a396634313a3a2f33322d3332203d3e20323135303835.roa (hash: oQiFmCDOiC8wMUPyhseeYgHp6yjZLGbjApAcNJ0LBoc=)
                          6: 326130363a396634313a3330303a3a2f34302d3438203d3e20323134393239.roa (hash: nHehWoxWXf1o0dbPZ/QJuze/UCT4m10ZkG52IDHzFmw=)
                          7: 326130363a396634313a613930303a3a2f34382d3438203d3e20323037363832.roa (hash: UqjWSUv2XiZdDsdQ0uOndREGc/szQ2JnxQlbZ2ADckI=)
                          8: 326130363a396634313a313030303a3a2f34342d3438203d3e20323035383338.roa (hash: AZY42IY279tP8q55kCb+OP1wLi+9ejrODI15M2jhRhg=)
                          9: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer (hash: vr0IDnvMrQlAIKTPbmc9XgADtBREMeozkPpGVjOFGr4=)
                          10: 326130363a396634313a363936393a3a2f34382d3438203d3e20323132323432.roa (hash: oZMKPe8zIqKXDWE+ceP6ZovC366mkj//dk5ag6RqSYo=)
                          11: 326130363a396634313a613930313a3a2f34382d3438203d3e20323035383338.roa (hash: TZFInP0XSpkR7gzjfw2R3ov4SaV+J0Kzbqc0lAbOzbM=)
                          12: 326130363a396634313a613839393a3a2f34382d3438203d3e20323037363832.roa (hash: AsmqfeR8tzd8apPghjomjQ+mrFPKbFgoIC7Ra9M+3/4=)
                          13: 06DB699D191D4B0289910C88E99CF94A671142F5.crl (hash: jswbgpCS0woKBD+aeJKXN15HP0ZaRlOSCfAbZ1S0BZg=)
                          14: 326130363a396634313a3430303a3a2f34302d3438203d3e203230343733.roa (hash: kqvKYNrb9S6UNWNBCSQTGIWwuKbgxvvWmBBrL9fs5G8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 09:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:a9:11:0b:cb:bf:4f:b3:83:a9:ad:c4:7b:18:77:b9:12:75:6f:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06DB699D191D4B0289910C88E99CF94A671142F5
        Validity
            Not Before: Mar 25 06:59:56 2026 GMT
            Not After : Mar 26 09:01:56 2026 GMT
        Subject: CN=81E84BCD11D240BAD4435FA14956F9AB5F2CADB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1f:cf:5b:69:c7:05:24:08:4f:11:9c:c4:6c:
                    11:62:81:73:24:7e:67:88:e1:8c:42:a7:45:c7:02:
                    be:56:e1:af:bf:f1:d8:63:2e:2d:23:59:4e:eb:64:
                    96:c3:6c:9e:66:45:05:c8:26:1c:35:a7:9c:9a:c1:
                    8d:fc:ed:fa:88:1f:2e:43:74:76:c8:63:e7:2c:1c:
                    ff:fb:d6:5b:bc:dd:df:0e:d1:2d:e9:f5:45:64:66:
                    b1:5d:ee:b1:a7:e5:cb:81:83:80:00:fd:a7:84:cc:
                    3a:25:0c:1f:b4:60:de:ef:d6:d1:52:94:c4:a3:6a:
                    8f:e7:b5:66:b4:50:ed:e8:7c:61:48:32:5a:ac:3b:
                    e0:3a:71:38:4e:f3:e1:c8:72:f0:9c:ac:98:9f:65:
                    a7:a7:85:c5:9f:88:9b:e7:18:3b:a4:46:05:51:da:
                    3a:f4:bb:00:17:1b:c9:c9:c0:0c:72:51:9b:11:52:
                    1b:85:04:cc:b3:8e:bb:ec:4b:da:82:fa:95:fa:54:
                    26:1b:80:13:bc:f4:d0:68:82:eb:c3:76:5e:8b:5e:
                    dd:0d:4c:c1:24:76:8b:02:c4:99:08:e0:1c:3c:94:
                    6f:e7:28:53:83:b2:3d:a4:02:41:b7:51:af:95:8c:
                    8b:a2:87:38:78:1b:84:b9:15:c8:08:79:cc:63:5f:
                    4a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:E8:4B:CD:11:D2:40:BA:D4:43:5F:A1:49:56:F9:AB:5F:2C:AD:B7
            X509v3 Authority Key Identifier:
                keyid:06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:99:fa:a8:21:af:b6:6c:61:08:fb:dc:fc:9b:1d:2b:4c:1f:
         eb:f7:2c:39:71:91:e3:16:ee:6f:79:d4:04:4f:f6:4f:fd:18:
         52:af:8f:6b:be:61:75:1a:d1:40:24:60:bb:cb:b4:72:3e:38:
         32:8c:c8:1f:92:12:8e:0a:38:35:1d:de:fe:c4:4f:06:18:61:
         61:23:9c:0c:65:5b:c7:46:b8:f1:bf:d9:e7:40:b8:f3:2c:fa:
         9b:8c:97:5c:2f:ec:53:d2:f2:fb:bd:e6:da:77:9a:c3:15:dd:
         0e:db:12:ae:72:93:ea:ad:0f:e1:62:38:08:f8:84:79:72:92:
         bc:e1:95:11:78:7b:d5:c2:eb:24:06:47:95:95:7c:a2:11:2d:
         64:4a:ec:3f:c3:51:c9:5d:d3:43:96:1f:a2:f9:4e:3b:9e:6d:
         26:88:93:32:51:ea:ee:a7:89:89:0e:5a:45:73:48:59:48:b9:
         94:c2:6c:19:ad:a6:be:11:cc:8b:e3:28:d3:66:ec:b3:44:da:
         f2:ad:db:b9:96:a9:07:b3:19:1a:23:0b:ae:73:ba:81:e4:8a:
         46:7c:e8:59:3e:9a:b2:90:d0:63:ce:f8:e0:51:de:87:e0:b2:
         85:8d:0b:4d:66:82:a6:a8:e7:99:e0:f2:95:b6:12:5b:00:32:
         84:a7:14:0b
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgIUJqkRC8u/T7ODqa3Eexh3uRJ1b1MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2
NzExNDJGNTAeFw0yNjAzMjUwNjU5NTZaFw0yNjAzMjYwOTAxNTZaMDMxMTAvBgNV
BAMTKDgxRTg0QkNEMTFEMjQwQkFENDQzNUZBMTQ5NTZGOUFCNUYyQ0FEQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnH89baccFJAhPEZzEbBFigXMk
fmeI4YxCp0XHAr5W4a+/8dhjLi0jWU7rZJbDbJ5mRQXIJhw1p5yawY387fqIHy5D
dHbIY+csHP/71lu83d8O0S3p9UVkZrFd7rGn5cuBg4AA/aeEzDolDB+0YN7v1tFS
lMSjao/ntWa0UO3ofGFIMlqsO+A6cThO8+HIcvCcrJifZaenhcWfiJvnGDukRgVR
2jr0uwAXG8nJwAxyUZsRUhuFBMyzjrvsS9qC+pX6VCYbgBO89NBoguvDdl6LXt0N
TMEkdosCxJkI4Bw8lG/nKFODsj2kAkG3Ua+VjIuihzh4G4S5FcgIecxjX0pVAgMB
AAGjggJ3MIICczAdBgNVHQ4EFgQUgehLzRHSQLrUQ1+hSVb5q18srbcwHwYDVR0j
BBgwFoAUBttpnRkdSwKJkQyI6Zz5SmcRQvUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzAxMTk0NGQtN2ViMy00ZjYzLWExNTktY2ZmMDJjMDI2
YWJmLzIvMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2NzExNDJGNS5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzcvMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2NzEx
NDJGNS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMDExOTQ0ZC03
ZWIzLTRmNjMtYTE1OS1jZmYwMmMwMjZhYmYvMi8wNkRCNjk5RDE5MUQ0QjAyODk5
MTBDODhFOTlDRjk0QTY3MTE0MkY1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYpn6qCGvtmxhCPvc/Jsd
K0wf6/csOXGR4xbub3nUBE/2T/0YUq+Pa75hdRrRQCRgu8u0cj44MozIH5ISjgo4
NR3e/sRPBhhhYSOcDGVbx0a48b/Z50C48yz6m4yXXC/sU9Ly+73m2neawxXdDtsS
rnKT6q0P4WI4CPiEeXKSvOGVEXh71cLrJAZHlZV8ohEtZErsP8NRyV3TQ5YfovlO
O55tJoiTMlHq7qeJiQ5aRXNIWUi5lMJsGa2mvhHMi+Mo02bss0Ta8q3buZapB7MZ
GiMLrnO6geSKRnzoWT6aspDQY8744FHeh+CyhY0LTWaCpqjnmeDylbYSWwAyhKcU
Cw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:01:33 2026 by rpki-client