Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5dc10d-4b67-4ca5-b51b-f4ac04adbd95/1/ISv6b940VbwJkojp_0UNmtghbGA.mft
File:                     ISv6b940VbwJkojp_0UNmtghbGA.mft (raw, json)
Hash identifier:          peK4mbD5Fy2OI4p1SL8bC9xBpbE1VxtP6e16Yk6NuVU=
Subject key identifier:   BB:3A:AB:8A:48:75:9E:04:8A:8D:E5:88:39:65:90:20:76:49:C8:00
Authority key identifier: 21:2B:FA:6F:DE:34:55:BC:09:92:88:E9:FF:45:0D:9A:D8:21:6C:60
Certificate issuer:       /CN=212bfa6fde3455bc099288e9ff450d9ad8216c60
Certificate serial:       019EFD26F43637F6770A31F370DDAA468C8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ISv6b940VbwJkojp_0UNmtghbGA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/5dc10d-4b67-4ca5-b51b-f4ac04adbd95/1/ISv6b940VbwJkojp_0UNmtghbGA.mft
Manifest number:          0200
Signing time:             Thu 25 Jun 2026 05:00:49 +0000
Manifest this update:     Thu 25 Jun 2026 05:00:49 +0000
Manifest next update:     Fri 26 Jun 2026 05:00:49 +0000
Files and hashes:         1: ISv6b940VbwJkojp_0UNmtghbGA.crl (hash: Ekq07LAFYayjyOxyANz8rNF1va1WkxCInTc+EgmSDMQ=)
                          2: f6k1pb1DyPuipxAIYvQjo8-Zq8Y.asa (hash: Ep14iU2LKva1ADKW9hz7AcyIAFA0LFBAnPYhXaahiMo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/5dc10d-4b67-4ca5-b51b-f4ac04adbd95/1/ISv6b940VbwJkojp_0UNmtghbGA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/5dc10d-4b67-4ca5-b51b-f4ac04adbd95/1/ISv6b940VbwJkojp_0UNmtghbGA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ISv6b940VbwJkojp_0UNmtghbGA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:fd:26:f4:36:37:f6:77:0a:31:f3:70:dd:aa:46:8c:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=212bfa6fde3455bc099288e9ff450d9ad8216c60
        Validity
            Not Before: Jun 25 05:00:49 2026 GMT
            Not After : Jun 26 05:00:49 2026 GMT
        Subject: CN=bb3aab8a48759e048a8de588396590207649c800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a7:6e:a8:07:e6:bc:d0:3f:d8:5d:ef:b6:06:
                    28:0f:c8:39:c4:ed:3a:6a:a7:6e:0e:55:a2:e1:3a:
                    60:a3:51:6a:1f:4b:50:b4:31:79:ad:58:13:7b:47:
                    93:e2:6e:1d:e1:ed:f5:2b:fa:12:e8:9f:38:cf:85:
                    b6:70:ca:c7:92:4b:55:e2:d5:da:a0:f4:a3:7e:86:
                    df:00:db:8c:41:13:8b:f3:85:36:e1:20:b7:51:1d:
                    71:00:33:7e:78:32:6b:dd:a1:85:97:52:c6:54:5c:
                    fd:21:6c:20:ba:a6:86:0e:55:3a:c8:9c:d4:0a:be:
                    70:be:b2:5c:d0:9c:ce:fa:c7:8d:86:22:5f:6b:42:
                    84:39:e7:bd:bd:23:44:82:f2:fd:b5:4e:c6:a7:e9:
                    cc:8d:f6:d4:d4:7e:f1:66:9a:3c:94:f0:17:38:a0:
                    04:d7:84:32:b1:0d:d9:42:9a:dd:60:c9:c8:c8:d5:
                    9c:83:7f:66:c0:f1:0b:b8:fd:a8:49:07:ab:a2:8e:
                    bf:6a:ad:08:70:9a:33:01:bc:88:45:ee:42:e9:04:
                    54:04:c3:bb:61:56:d0:1f:9f:20:b5:5c:f8:0f:93:
                    27:ab:0c:9c:df:a9:c1:ab:14:31:03:ef:c3:b9:25:
                    16:5e:9f:62:2f:73:65:88:17:7e:c8:ea:14:04:b6:
                    b9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:3A:AB:8A:48:75:9E:04:8A:8D:E5:88:39:65:90:20:76:49:C8:00
            X509v3 Authority Key Identifier:
                keyid:21:2B:FA:6F:DE:34:55:BC:09:92:88:E9:FF:45:0D:9A:D8:21:6C:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISv6b940VbwJkojp_0UNmtghbGA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5dc10d-4b67-4ca5-b51b-f4ac04adbd95/1/ISv6b940VbwJkojp_0UNmtghbGA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5dc10d-4b67-4ca5-b51b-f4ac04adbd95/1/ISv6b940VbwJkojp_0UNmtghbGA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:bf:49:01:c9:45:bb:31:cd:8c:77:d7:45:6d:f4:0a:25:36:
         01:6a:19:2c:34:a7:09:90:e6:10:3d:6b:ef:e2:e7:56:7e:0c:
         22:1c:f6:16:3b:ea:cc:fb:6c:3b:e2:6c:90:05:10:1d:57:ff:
         71:c9:6c:26:bf:1b:85:ac:51:31:0f:46:29:f0:d0:a9:38:f2:
         29:e8:bf:80:54:42:0b:ee:34:63:71:45:37:ec:a6:42:47:2e:
         e0:d5:93:7b:a3:ac:c0:aa:de:f5:85:8c:c1:91:53:94:6b:25:
         c2:aa:3b:9a:ca:cb:57:9d:8f:d9:55:a6:93:b6:d9:e1:e4:2c:
         64:9f:a4:c0:3a:ad:6c:40:18:0b:d3:5f:39:ec:83:9d:81:4f:
         a6:3e:e0:23:b4:e3:13:58:5e:75:b1:56:09:e5:47:b5:9d:fb:
         91:48:b0:f3:2b:28:f1:59:9c:72:d0:9f:cf:49:ec:3e:3a:a0:
         97:da:be:b9:64:27:7f:70:b6:1d:2f:06:b6:2d:ea:be:e5:2b:
         65:d4:8a:a3:bb:13:5d:19:c3:97:db:76:a2:a8:b2:13:b0:47:
         bf:86:d3:b2:14:8d:fa:68:cc:9e:fc:e8:c6:88:b1:74:9e:4d:
         2c:77:d2:0b:ca:a2:90:b8:b4:4f:a3:e8:d2:69:bb:c0:1b:05:
         04:45:e5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:28:15 2026 by rpki-client