Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft
File:                     06DB699D191D4B0289910C88E99CF94A671142F5.mft (raw, json)
Hash identifier:          MjYevmnkxtqp9PUnTRj8tgQAefKEIMn0eNEf1Le1OYk=
Subject key identifier:   67:D7:15:D3:90:69:CD:39:CE:3E:2B:49:4B:93:F7:1C:83:94:B9:E6
Authority key identifier: 06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5
Certificate issuer:       /CN=06DB699D191D4B0289910C88E99CF94A671142F5
Certificate serial:       6C0FD80888ECC69D800827741AF1D612A4E01A5F
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft
Manifest number:          0286
Signing time:             Wed 23 Sep 2026 22:28:27 +0000
Manifest this update:     Wed 23 Sep 2026 22:23:27 +0000
Manifest next update:     Fri 25 Sep 2026 02:26:27 +0000
Files and hashes:         1: 38332e3134322e33312e302f32342d3234203d3e20323135303835.roa (hash: c23f5zfF11QepD/hCX1+ZX8Ztc0XcCBU7/BkVhVVOkA=)
                          2: 326130363a396634313a3930303a3a2f34302d3438203d3e20323134393239.roa (hash: +AMN4bGgppj9vi32rQAsxbtShvgpXDGYgBVZExdRGNA=)
                          3: 326130363a396634363a3a2f33322d3332203d3e20323135303835.roa (hash: KHPMWVPXSNE5MeO2seajbhD7um8es2E6kpPLcpx4Rh4=)
                          4: 326130363a396634313a613930303a3a2f34382d3438203d3e20323037363832.roa (hash: IPmhuzBuQk0H65gj7yTl9nlDYGhk58il9d6iAo3tkJ8=)
                          5: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer (hash: zDfWjzGK40zSCpRuFh+A3O83EeUEIjX9jMdsKJlIUSE=)
                          6: 326130363a396634313a613a3a2f34382d3438203d3e20323135303835.roa (hash: NbDxV9qrS6TiSjVCZUDuT8o/FjbSqGztLjVZ8dbtZec=)
                          7: 326130363a396634313a363936393a3a2f34382d3438203d3e20323132323432.roa (hash: AwETYoDWLr+UL+mh9uhHo7iWKly/gsr+Qa4Sf+Pb3lQ=)
                          8: 06DB699D191D4B0289910C88E99CF94A671142F5.crl (hash: 5/QTPjX2chdVDQBVjj8GuCEoZIVi48x1Kh0Bvm0HKdw=)
                          9: 326130363a396634313a613839393a3a2f34382d3438203d3e20323037363832.roa (hash: AsmqfeR8tzd8apPghjomjQ+mrFPKbFgoIC7Ra9M+3/4=)
                          10: 326130363a396634313a3330303a3a2f34302d3438203d3e20323134393239.roa (hash: iVfsjGUvTt7XJSqNB1gfJbq7PcNxzcp6mUdRwbAEvfI=)
                          11: 326130363a396634313a3530303a3a2f34302d3438203d3e20323134393239.roa (hash: vhj3ge0HFLUitKaN+s5zDz0PPLk5IVtPYbDDdzjfCRg=)
                          12: 326130363a396634313a3a2f33322d3332203d3e20323135303835.roa (hash: oQiFmCDOiC8wMUPyhseeYgHp6yjZLGbjApAcNJ0LBoc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 02:26:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:0f:d8:08:88:ec:c6:9d:80:08:27:74:1a:f1:d6:12:a4:e0:1a:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06DB699D191D4B0289910C88E99CF94A671142F5
        Validity
            Not Before: Sep 23 22:23:27 2026 GMT
            Not After : Sep 25 02:26:27 2026 GMT
        Subject: CN=67D715D39069CD39CE3E2B494B93F71C8394B9E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f9:84:9c:01:1c:39:1a:cc:a9:93:52:f5:31:
                    13:ff:aa:bd:17:20:0a:0e:48:60:12:51:7e:76:6b:
                    b0:07:19:b0:29:3c:a0:e0:c6:96:65:3b:f5:ae:a9:
                    2d:c6:3e:81:f0:9f:06:e2:94:86:ce:8c:b2:92:16:
                    26:dd:2c:03:c1:16:d4:cb:08:13:d2:5d:8b:27:fd:
                    c2:b9:9e:a2:f6:2a:5b:63:8b:2d:08:07:07:e9:1c:
                    ee:31:ed:f8:e7:4c:b4:ec:85:c7:e9:04:3a:ef:c9:
                    cf:3a:69:aa:cf:4c:09:d5:b9:81:70:91:47:c6:be:
                    b0:92:82:00:51:d7:31:2b:f8:df:8a:e2:5d:32:53:
                    c7:58:4e:71:53:2b:c9:9d:06:f4:f7:4d:d4:64:a3:
                    55:19:92:71:15:f4:24:2e:ee:e4:77:77:d6:48:31:
                    6e:7c:c3:1d:c2:70:95:fd:3c:9b:17:cc:1c:e6:e2:
                    c0:56:5a:4d:18:e0:ee:4c:be:36:6e:2f:b2:24:3d:
                    f3:3f:07:62:81:23:d4:b3:48:bc:3d:51:79:24:50:
                    27:02:1c:58:b1:e9:25:e6:6a:04:81:30:61:15:e5:
                    78:3a:84:83:9a:99:1e:d2:25:32:93:23:45:63:fb:
                    29:c5:8d:60:70:c0:d5:53:44:32:f0:18:ed:06:02:
                    4a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:D7:15:D3:90:69:CD:39:CE:3E:2B:49:4B:93:F7:1C:83:94:B9:E6
            X509v3 Authority Key Identifier:
                keyid:06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:ce:6c:a9:51:e5:71:25:5b:74:06:b0:b3:78:4a:39:db:57:
         14:3b:1b:14:c2:33:ec:a5:27:bf:ed:c7:25:a2:df:24:e0:6a:
         ee:86:53:e5:47:2d:84:d4:32:f2:2c:db:b5:82:d9:4f:5a:96:
         d8:af:c2:4b:e6:30:25:ef:62:54:bb:be:bf:7c:4b:b2:ea:c2:
         ce:b4:41:d0:28:8d:8a:e1:2d:25:c3:e5:46:1c:68:92:d0:d9:
         9e:44:ba:f6:48:e2:01:a5:19:f7:30:e3:4d:cb:0c:d2:17:e1:
         98:ee:4f:c1:72:aa:dc:31:4e:68:24:ba:d2:6d:9a:0e:8a:a2:
         58:1a:bc:9a:50:7c:47:b2:bb:65:d1:7b:71:4f:98:79:c8:d1:
         13:aa:04:60:b2:4c:f4:fa:1f:75:c6:e8:f0:35:a6:60:8d:6b:
         21:73:c1:3e:58:ef:bb:a4:f8:d6:1e:08:6a:ad:9c:8a:d3:13:
         7f:a2:ae:8e:3b:56:88:5b:6c:ad:95:df:d3:da:ce:3e:6a:de:
         b2:49:2a:b8:94:3e:3f:73:8c:bf:0d:16:d6:be:26:49:57:34:
         8d:d9:2f:8f:28:21:ea:54:d1:6f:18:58:0e:7d:f0:fb:b3:34:
         1f:bf:89:cd:34:ce:6c:e8:40:8e:fb:2f:dc:9e:df:9e:ac:88:
         fa:6b:3e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:12:21 2026 by rpki-client