Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft
File:                     06DB699D191D4B0289910C88E99CF94A671142F5.mft (raw, json)
Hash identifier:          VwYCT0GZ3QqD2A3FtectHFA2aVeaxb4bsBMKxZtVTME=
Subject key identifier:   4F:51:B8:63:49:5E:97:3C:B3:FC:93:49:DC:B5:22:85:A9:A0:23:42
Authority key identifier: 06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5
Certificate issuer:       /CN=06DB699D191D4B0289910C88E99CF94A671142F5
Certificate serial:       1FE2DFF2140FA30948EBE0CC7B5569BDD641567A
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft
Manifest number:          02CB
Signing time:             Tue 10 Nov 2026 04:34:00 +0000
Manifest this update:     Tue 10 Nov 2026 04:29:00 +0000
Manifest next update:     Wed 11 Nov 2026 06:01:00 +0000
Files and hashes:         1: 06DB699D191D4B0289910C88E99CF94A671142F5.crl (hash: aYA3w1kPV+uvQY7/D4n3X3wuAGqm42YOgZG0/Qq9bcA=)
                          2: 326130363a396634363a3a2f33322d3332203d3e20323135303835.roa (hash: KHPMWVPXSNE5MeO2seajbhD7um8es2E6kpPLcpx4Rh4=)
                          3: 326130363a396634313a613a3a2f34382d3438203d3e20323135303835.roa (hash: NbDxV9qrS6TiSjVCZUDuT8o/FjbSqGztLjVZ8dbtZec=)
                          4: 326130363a396634313a613839393a3a2f34382d3438203d3e20323037363832.roa (hash: AsmqfeR8tzd8apPghjomjQ+mrFPKbFgoIC7Ra9M+3/4=)
                          5: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer (hash: zDfWjzGK40zSCpRuFh+A3O83EeUEIjX9jMdsKJlIUSE=)
                          6: 326130363a396634313a613930303a3a2f34382d3438203d3e20323037363832.roa (hash: IPmhuzBuQk0H65gj7yTl9nlDYGhk58il9d6iAo3tkJ8=)
                          7: 38332e3134322e33312e302f32342d3234203d3e20323135303835.roa (hash: c23f5zfF11QepD/hCX1+ZX8Ztc0XcCBU7/BkVhVVOkA=)
                          8: 326130363a396634313a3a2f33322d3332203d3e20323135303835.roa (hash: w9LXZlev+jYtJvMf+j/aVW3fa44UPO/jbZEEVuswcyk=)
                          9: 326130363a396634313a363936393a3a2f34382d3438203d3e20323132323432.roa (hash: AwETYoDWLr+UL+mh9uhHo7iWKly/gsr+Qa4Sf+Pb3lQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Nov 2026 06:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:e2:df:f2:14:0f:a3:09:48:eb:e0:cc:7b:55:69:bd:d6:41:56:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06DB699D191D4B0289910C88E99CF94A671142F5
        Validity
            Not Before: Nov 10 04:29:00 2026 GMT
            Not After : Nov 11 06:01:00 2026 GMT
        Subject: CN=4F51B863495E973CB3FC9349DCB52285A9A02342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c0:b8:0a:10:bd:3a:6a:64:1d:85:d8:cf:65:
                    08:ac:1f:38:0a:e2:a1:e7:4c:a7:fe:ff:09:49:e1:
                    9c:b2:57:71:23:1e:4c:47:4c:b4:c6:4e:59:18:09:
                    3f:37:88:16:42:2b:77:a1:25:6a:be:51:ff:51:6f:
                    bd:f2:3d:94:c3:6a:52:3e:19:c9:17:e3:bf:f5:0c:
                    7a:7c:88:30:42:e6:51:2b:76:55:9c:e7:51:6c:95:
                    21:49:da:1b:84:7d:57:ce:2e:51:87:40:3f:90:f9:
                    d4:61:e5:16:40:fa:24:98:cc:f5:4b:96:be:f3:cb:
                    3a:8e:48:60:7b:63:c8:2b:7e:01:90:f2:49:10:64:
                    42:09:72:9c:74:24:01:ea:a6:a0:4f:c2:a2:d8:e5:
                    49:57:42:ea:3f:9b:fe:0c:44:38:d6:20:84:e3:17:
                    78:30:3e:b7:e2:16:3b:8b:46:6c:f2:24:43:c3:bc:
                    19:6b:6e:ad:63:29:e1:62:39:84:9a:76:c8:a3:c6:
                    19:f3:c3:37:75:1c:5e:52:7b:b2:b7:6d:c2:92:86:
                    c7:40:23:f8:fd:56:15:05:f9:de:ce:bf:08:64:e7:
                    1a:1a:bc:ef:f5:94:8d:db:27:b6:39:ee:b2:60:0b:
                    34:68:ea:da:fd:a5:35:0f:40:d9:07:45:9f:58:14:
                    af:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:51:B8:63:49:5E:97:3C:B3:FC:93:49:DC:B5:22:85:A9:A0:23:42
            X509v3 Authority Key Identifier:
                keyid:06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:7f:cc:23:77:1b:c3:58:d8:43:1e:88:bd:65:94:60:6b:2f:
         95:e6:51:ad:5a:bd:69:71:12:e8:cb:3d:bd:95:0f:04:aa:0e:
         b6:94:b3:56:1e:27:5b:b1:d9:4a:81:55:1c:1a:f4:56:68:5e:
         88:09:62:18:9f:87:23:8b:88:ac:92:6d:c6:71:25:8a:36:91:
         46:18:be:bb:16:6f:65:e8:8f:c3:a8:42:e2:e3:ac:f9:98:37:
         b2:17:97:8a:34:87:ed:a3:68:af:c8:c8:7a:14:5c:41:8f:5a:
         e0:9b:c2:3e:a2:62:45:62:ad:d4:31:e6:88:52:23:92:52:dd:
         b4:38:3c:c0:34:0b:f1:b7:d7:ab:d3:eb:5b:ab:9a:d0:96:8f:
         cb:ea:8d:79:be:48:cc:61:2c:9d:64:4e:0d:62:ed:6e:d6:07:
         5a:8e:3e:b6:d1:1f:50:d7:8f:c2:47:06:1f:51:02:b3:13:f5:
         f5:51:39:bc:54:22:cc:4c:00:0c:9d:8c:be:25:e4:6e:51:2b:
         b4:03:58:21:43:91:dc:2f:47:78:a6:dd:e1:65:58:1d:be:82:
         7d:35:9e:e0:fa:32:45:7d:d3:4a:7f:05:24:c9:2f:c5:9d:ba:
         64:69:f3:ec:1c:d1:8c:11:56:e7:da:9a:10:b6:86:57:18:23:
         ab:58:28:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 19:22:26 2026 by rpki-client