Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/a0d19b-5c6f-4814-adf8-1e1934f0e55e/1/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.mft
File:                     6-Pvg7K0wR4HBVs_fFSbUGJGxj4.mft (raw, json)
Hash identifier:          U0Gn2As3+/QuRgqL0oneJ0lPzDiu690vtAyZAkiYImU=
Subject key identifier:   CB:1D:34:04:64:9A:00:7C:D9:57:8A:63:A9:AB:EF:6E:FB:68:03:2C
Authority key identifier: EB:E3:EF:83:B2:B4:C1:1E:07:05:5B:3F:7C:54:9B:50:62:46:C6:3E
Certificate issuer:       /CN=ebe3ef83b2b4c11e07055b3f7c549b506246c63e
Certificate serial:       019F189E0BF9CC58B9E369B32D294CD92842
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/a0d19b-5c6f-4814-adf8-1e1934f0e55e/1/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.mft
Manifest number:          1986
Signing time:             Tue 30 Jun 2026 13:00:38 +0000
Manifest this update:     Tue 30 Jun 2026 13:00:38 +0000
Manifest next update:     Wed 01 Jul 2026 13:00:38 +0000
Files and hashes:         1: 6-Pvg7K0wR4HBVs_fFSbUGJGxj4.crl (hash: yfxtkGkT/FdfD/mBIz6giFUfdf0mmHI+aAnFjwMSg3Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/a0d19b-5c6f-4814-adf8-1e1934f0e55e/1/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/a0d19b-5c6f-4814-adf8-1e1934f0e55e/1/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 13:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:9e:0b:f9:cc:58:b9:e3:69:b3:2d:29:4c:d9:28:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebe3ef83b2b4c11e07055b3f7c549b506246c63e
        Validity
            Not Before: Jun 30 13:00:38 2026 GMT
            Not After : Jul  1 13:00:38 2026 GMT
        Subject: CN=cb1d3404649a007cd9578a63a9abef6efb68032c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d3:3d:7d:27:fc:51:ed:a3:20:db:08:04:35:
                    2d:1a:63:9b:3f:14:79:6e:0a:db:37:ee:a4:80:e8:
                    9b:40:96:e6:35:4c:13:fc:8c:ca:e4:83:54:3e:a1:
                    cf:0d:f9:e6:b6:f7:a0:c7:c2:ac:9e:f6:51:57:fb:
                    8c:4a:bf:34:17:1a:a4:ee:4d:20:9d:c3:02:2b:34:
                    d6:3c:4c:78:75:10:49:b7:2f:7d:60:a5:20:2d:d4:
                    7e:8b:b2:ee:94:8a:dc:e9:13:80:33:2c:70:ba:bc:
                    db:cd:e3:12:3c:23:cf:81:a1:9b:6b:a4:9c:a1:b9:
                    ff:d1:d3:56:c8:cc:21:67:bd:03:d3:a9:89:98:79:
                    79:50:d7:82:69:f6:51:36:50:52:f7:dc:9c:1d:ae:
                    72:6b:e6:e8:2e:ba:65:15:b7:b4:61:ca:3a:e6:b9:
                    3c:c0:22:65:94:a1:c8:69:71:7e:70:a2:db:52:5f:
                    70:cf:7c:26:aa:93:59:4c:a4:c8:4c:94:a7:f2:2e:
                    7e:ae:b0:72:c1:ae:ad:a7:ee:8f:30:c2:28:92:ea:
                    2f:16:3c:ff:df:c7:8b:8d:8d:3d:52:80:52:da:57:
                    d9:d4:f6:b8:4c:39:e6:ce:43:4b:d3:76:af:a7:b1:
                    e0:a7:21:0d:45:79:54:a6:dd:35:20:af:c3:82:26:
                    9b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:1D:34:04:64:9A:00:7C:D9:57:8A:63:A9:AB:EF:6E:FB:68:03:2C
            X509v3 Authority Key Identifier:
                keyid:EB:E3:EF:83:B2:B4:C1:1E:07:05:5B:3F:7C:54:9B:50:62:46:C6:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/a0d19b-5c6f-4814-adf8-1e1934f0e55e/1/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/a0d19b-5c6f-4814-adf8-1e1934f0e55e/1/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:10:c6:ba:74:4a:05:0c:29:3d:76:06:fd:ff:dc:df:4f:a0:
         0c:77:98:93:48:7f:3a:0f:33:c4:71:c2:04:0b:8e:59:31:65:
         98:03:2d:ed:2f:12:e1:32:73:9b:65:43:95:73:51:e8:8c:2c:
         a6:c0:2e:b8:b0:2c:0b:54:85:1e:36:72:90:70:07:e0:70:12:
         03:fe:ef:b6:fa:4a:41:ad:6d:10:73:b5:8f:c4:12:89:de:6a:
         4f:76:57:68:0c:52:33:1e:b2:43:ad:3a:35:cf:45:63:da:58:
         4a:01:0b:2e:ff:e8:bf:1a:fb:10:d9:85:87:47:35:f9:6e:8e:
         09:90:26:33:f1:4f:48:4c:3f:83:b1:53:e2:e3:ba:ab:75:0d:
         27:f7:ad:06:c1:85:12:de:6e:59:71:3f:86:13:1c:dc:db:a5:
         1a:e6:7b:de:e3:d8:8c:d1:2c:08:61:48:c1:b3:b4:f2:76:72:
         2d:e1:46:34:01:99:f8:2c:da:68:ec:1f:04:a0:4d:09:f9:d4:
         a2:68:66:e9:d4:3e:11:5a:f9:c6:9b:51:fe:c6:5c:b6:b8:07:
         24:92:38:30:88:f4:70:fe:c9:ec:65:2a:f3:23:87:83:62:91:
         d0:fb:75:14:5f:70:71:e0:d0:6d:f4:5c:6e:57:a5:c9:94:7d:
         38:14:6e:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Yngv5zFi542mzLSlM2ShCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViZTNlZjgzYjJiNGMxMWUwNzA1NWIzZjdjNTQ5YjUwNjI0
NmM2M2UwHhcNMjYwNjMwMTMwMDM4WhcNMjYwNzAxMTMwMDM4WjAzMTEwLwYDVQQD
EyhjYjFkMzQwNDY0OWEwMDdjZDk1NzhhNjNhOWFiZWY2ZWZiNjgwMzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtM9fSf8Ue2jINsIBDUtGmObPxR5
bgrbN+6kgOibQJbmNUwT/IzK5INUPqHPDfnmtvegx8KsnvZRV/uMSr80Fxqk7k0g
ncMCKzTWPEx4dRBJty99YKUgLdR+i7LulIrc6ROAMyxwurzbzeMSPCPPgaGba6Sc
obn/0dNWyMwhZ70D06mJmHl5UNeCafZRNlBS99ycHa5ya+boLrplFbe0Yco65rk8
wCJllKHIaXF+cKLbUl9wz3wmqpNZTKTITJSn8i5+rrBywa6tp+6PMMIokuovFjz/
38eLjY09UoBS2lfZ1Pa4TDnmzkNL03avp7HgpyENRXlUpt01IK/DgiabfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMsdNARkmgB82VeKY6mr7277aAMsMB8GA1UdIwQY
MBaAFOvj74OytMEeBwVbP3xUm1BiRsY+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNi1Qdmc3SzB3UjRIQlZzX2ZGU2JVR0pHeGo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9hMGQxOWItNWM2Zi00ODE0LWFkZjgt
MWUxOTM0ZjBlNTVlLzEvNi1Qdmc3SzB3UjRIQlZzX2ZGU2JVR0pHeGo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9hMGQxOWItNWM2Zi00ODE0LWFkZjgtMWUxOTM0ZjBlNTVl
LzEvNi1Qdmc3SzB3UjRIQlZzX2ZGU2JVR0pHeGo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALRDGunRK
BQwpPXYG/f/c30+gDHeYk0h/Og8zxHHCBAuOWTFlmAMt7S8S4TJzm2VDlXNR6Iws
psAuuLAsC1SFHjZykHAH4HASA/7vtvpKQa1tEHO1j8QSid5qT3ZXaAxSMx6yQ606
Nc9FY9pYSgELLv/ovxr7ENmFh0c1+W6OCZAmM/FPSEw/g7FT4uO6q3UNJ/etBsGF
Et5uWXE/hhMc3NulGuZ73uPYjNEsCGFIwbO08nZyLeFGNAGZ+CzaaOwfBKBNCfnU
omhm6dQ+EVr5xptR/sZctrgHJJI4MIj0cP7J7GUq8yOHg2KR0Pt1FF9wceDQbfRc
blelyZR9OBRugw==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:01 2026 by rpki-client