Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1fac4a-aa33-44bc-b6a2-1cf3da6f7d7e/1/6SV01xbLvb9yTXBsEReXD2Z7I34.mft
File:                     6SV01xbLvb9yTXBsEReXD2Z7I34.mft (raw, json)
Hash identifier:          c8lVlH5eslD/41C+UYE7FZX5w4X9npv4QYx1SSwrJPg=
Subject key identifier:   E0:19:F1:DD:BA:13:ED:D6:F9:56:43:18:F6:C0:2F:2B:EB:56:60:43
Authority key identifier: E9:25:74:D7:16:CB:BD:BF:72:4D:70:6C:11:17:97:0F:66:7B:23:7E
Certificate issuer:       /CN=e92574d716cbbdbf724d706c1117970f667b237e
Certificate serial:       019D39AEAD3C2D78AB28B488DCF8B49A475D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6SV01xbLvb9yTXBsEReXD2Z7I34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/1fac4a-aa33-44bc-b6a2-1cf3da6f7d7e/1/6SV01xbLvb9yTXBsEReXD2Z7I34.mft
Manifest number:          086E
Signing time:             Sun 29 Mar 2026 13:00:41 +0000
Manifest this update:     Sun 29 Mar 2026 13:00:41 +0000
Manifest next update:     Mon 30 Mar 2026 13:00:41 +0000
Files and hashes:         1: 6SV01xbLvb9yTXBsEReXD2Z7I34.crl (hash: zAvDoFZBSnmDPr6EyUE0afnPjFAGfcrzycHRU7rP84E=)
                          2: wE_m3PzawUPxAcW_yzrW78mgOTg.roa (hash: 0rkpF2YguxZ08C9vGFT6j8nPqUGLYAFlwBvueLMdE9E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/1fac4a-aa33-44bc-b6a2-1cf3da6f7d7e/1/6SV01xbLvb9yTXBsEReXD2Z7I34.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/1fac4a-aa33-44bc-b6a2-1cf3da6f7d7e/1/6SV01xbLvb9yTXBsEReXD2Z7I34.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6SV01xbLvb9yTXBsEReXD2Z7I34.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 13:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:ae:ad:3c:2d:78:ab:28:b4:88:dc:f8:b4:9a:47:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e92574d716cbbdbf724d706c1117970f667b237e
        Validity
            Not Before: Mar 29 13:00:41 2026 GMT
            Not After : Mar 30 13:00:41 2026 GMT
        Subject: CN=e019f1ddba13edd6f9564318f6c02f2beb566043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3c:8a:88:6f:f4:a6:56:d3:a2:e9:2a:69:6c:
                    00:e6:05:70:e5:71:cd:40:94:b2:7e:7c:c2:84:72:
                    bc:71:6e:71:82:0d:35:e0:5f:e8:cb:a9:c8:47:cf:
                    24:23:f4:c4:0f:a6:52:06:1b:a9:f6:42:3d:81:64:
                    81:dd:d6:dc:c8:3b:0d:75:8b:37:0f:49:98:61:c0:
                    d0:79:d8:0d:05:d3:3f:cf:d4:f3:d6:f5:57:02:93:
                    fe:21:0c:05:83:41:6a:a5:b8:fd:5d:fe:0a:11:63:
                    57:c7:d7:11:43:e1:c1:37:40:a0:1f:0e:91:83:ba:
                    cb:d5:00:12:b5:91:d7:d5:95:4a:2b:99:a0:33:4c:
                    55:ef:86:7b:77:d5:a5:0c:d8:f5:a7:ff:92:3a:f1:
                    fa:b4:c8:d9:77:41:65:75:5c:0a:12:10:8c:c5:a8:
                    1d:90:10:4a:06:ab:00:1a:74:b4:93:3b:e1:84:f3:
                    27:04:56:8b:c3:a4:a9:0a:41:d0:ee:12:30:4b:a6:
                    7e:d5:4a:1c:a2:d6:25:95:11:2b:ab:52:e1:ba:72:
                    3a:8e:f2:25:9b:03:41:d7:1d:65:73:f9:56:8e:8b:
                    cd:f6:a5:dd:ca:e1:2d:f3:75:03:fc:97:da:3f:7c:
                    38:e1:87:ee:e2:bc:f9:c4:07:6e:46:8c:c2:46:fd:
                    53:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:19:F1:DD:BA:13:ED:D6:F9:56:43:18:F6:C0:2F:2B:EB:56:60:43
            X509v3 Authority Key Identifier:
                keyid:E9:25:74:D7:16:CB:BD:BF:72:4D:70:6C:11:17:97:0F:66:7B:23:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SV01xbLvb9yTXBsEReXD2Z7I34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1fac4a-aa33-44bc-b6a2-1cf3da6f7d7e/1/6SV01xbLvb9yTXBsEReXD2Z7I34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1fac4a-aa33-44bc-b6a2-1cf3da6f7d7e/1/6SV01xbLvb9yTXBsEReXD2Z7I34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:35:e7:0c:76:4c:95:40:a0:5b:bf:e6:41:48:62:c4:89:48:
         8f:ba:5f:ef:57:93:66:c1:fa:f9:8d:6b:8c:d6:ff:e9:07:90:
         62:ca:f4:23:7f:d3:58:f1:fb:7d:45:78:59:91:a1:33:a9:cf:
         f0:a4:90:41:04:0e:0c:36:0f:bd:39:70:03:4d:d0:eb:0e:c1:
         4a:2a:09:97:c1:33:ad:aa:4b:2b:64:33:92:9f:3e:59:09:ad:
         a6:64:02:60:c6:af:8a:91:47:f6:3a:d3:e5:16:8a:c4:c1:6d:
         9e:7f:74:19:d2:b5:76:5a:a1:41:e2:ee:ba:85:d3:01:69:2a:
         4f:b0:c0:5f:c1:e3:0f:b5:3b:5f:9c:7b:88:43:85:3e:af:f0:
         e1:47:4d:cc:29:b1:c4:36:f8:9f:b7:55:c8:f5:e4:7d:36:74:
         eb:dc:6c:05:7e:88:eb:04:b1:6a:94:f2:40:09:92:9b:0e:df:
         67:ac:17:7b:12:76:6c:fa:6d:c2:68:20:27:67:18:73:28:63:
         29:87:50:dc:b7:8b:12:7e:de:08:37:01:27:d1:7c:a7:86:11:
         d3:5a:9b:05:0c:2c:12:d7:b8:5b:b3:db:14:15:87:53:34:b2:
         30:2a:51:a4:a8:0c:a2:fe:b3:d4:f8:85:a5:58:ae:df:2e:c6:
         65:da:6f:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rq08LXirKLSI3Pi0mkddMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MjU3NGQ3MTZjYmJkYmY3MjRkNzA2YzExMTc5NzBmNjY3
YjIzN2UwHhcNMjYwMzI5MTMwMDQxWhcNMjYwMzMwMTMwMDQxWjAzMTEwLwYDVQQD
EyhlMDE5ZjFkZGJhMTNlZGQ2Zjk1NjQzMThmNmMwMmYyYmViNTY2MDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDyKiG/0plbToukqaWwA5gVw5XHN
QJSyfnzChHK8cW5xgg014F/oy6nIR88kI/TED6ZSBhup9kI9gWSB3dbcyDsNdYs3
D0mYYcDQedgNBdM/z9Tz1vVXApP+IQwFg0Fqpbj9Xf4KEWNXx9cRQ+HBN0CgHw6R
g7rL1QAStZHX1ZVKK5mgM0xV74Z7d9WlDNj1p/+SOvH6tMjZd0FldVwKEhCMxagd
kBBKBqsAGnS0kzvhhPMnBFaLw6SpCkHQ7hIwS6Z+1UocotYllRErq1LhunI6jvIl
mwNB1x1lc/lWjovN9qXdyuEt83UD/JfaP3w44Yfu4rz5xAduRozCRv1TmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOAZ8d26E+3W+VZDGPbALyvrVmBDMB8GA1UdIwQY
MBaAFOkldNcWy72/ck1wbBEXlw9meyN+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlNWMDF4Ykx2Yjl5VFhCc0VSZVhEMlo3STM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xZmFjNGEtYWEzMy00NGJjLWI2YTIt
MWNmM2RhNmY3ZDdlLzEvNlNWMDF4Ykx2Yjl5VFhCc0VSZVhEMlo3STM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8xZmFjNGEtYWEzMy00NGJjLWI2YTItMWNmM2RhNmY3ZDdl
LzEvNlNWMDF4Ykx2Yjl5VFhCc0VSZVhEMlo3STM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAijXnDHZM
lUCgW7/mQUhixIlIj7pf71eTZsH6+Y1rjNb/6QeQYsr0I3/TWPH7fUV4WZGhM6nP
8KSQQQQODDYPvTlwA03Q6w7BSioJl8EzrapLK2Qzkp8+WQmtpmQCYMavipFH9jrT
5RaKxMFtnn90GdK1dlqhQeLuuoXTAWkqT7DAX8HjD7U7X5x7iEOFPq/w4UdNzCmx
xDb4n7dVyPXkfTZ069xsBX6I6wSxapTyQAmSmw7fZ6wXexJ2bPptwmggJ2cYcyhj
KYdQ3LeLEn7eCDcBJ9F8p4YR01qbBQwsEte4W7PbFBWHUzSyMCpRpKgMov6z1PiF
pViu3y7GZdpvHw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 21:27:31 2026 by rpki-client