Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/0/1B6148C827B5EF75B0E94EFBCA4D8F408612BDC9.mft
File:                     1B6148C827B5EF75B0E94EFBCA4D8F408612BDC9.mft (raw, json)
Hash identifier:          AKW6skb/YimkPSmm0WZ2ikcvPdjf87pEA1ZqroMbxN8=
Subject key identifier:   FF:47:73:50:D3:D0:10:B7:51:B3:CC:92:5B:7A:47:36:AF:51:48:87
Authority key identifier: 1B:61:48:C8:27:B5:EF:75:B0:E9:4E:FB:CA:4D:8F:40:86:12:BD:C9
Certificate issuer:       /CN=1b6148c827b5ef75b0e94efbca4d8f408612bdc9
Certificate serial:       69B0404294B6524FA91B546B75AE7AB69DDC2A11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G2FIyCe173Ww6U77yk2PQIYSvck.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/0/1B6148C827B5EF75B0E94EFBCA4D8F408612BDC9.mft
Manifest number:          07
Signing time:             Sun 28 Jun 2026 18:06:06 +0000
Manifest this update:     Sun 28 Jun 2026 18:01:06 +0000
Manifest next update:     Mon 29 Jun 2026 19:30:06 +0000
Files and hashes:         1: 1B6148C827B5EF75B0E94EFBCA4D8F408612BDC9.crl (hash: CcxPvB7Mssk7j4YcuSi8sZAbs3BOIUmExJvMPD4BwTQ=)
                          2: AS197806.asa (hash: jHV7xis+MoPDvNOutQyL0dgCS1fPY3ddXcOfPqbp3E4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/0/1B6148C827B5EF75B0E94EFBCA4D8F408612BDC9.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/0/1B6148C827B5EF75B0E94EFBCA4D8F408612BDC9.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G2FIyCe173Ww6U77yk2PQIYSvck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Jun 2026 19:30:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:b0:40:42:94:b6:52:4f:a9:1b:54:6b:75:ae:7a:b6:9d:dc:2a:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b6148c827b5ef75b0e94efbca4d8f408612bdc9
        Validity
            Not Before: Jun 28 18:01:06 2026 GMT
            Not After : Jun 29 19:30:06 2026 GMT
        Subject: CN=FF477350D3D010B751B3CC925B7A4736AF514887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:fa:d6:6a:6e:03:b6:78:ce:4a:fc:2d:04:23:
                    d5:2b:26:81:4f:01:11:8b:7e:3a:bb:03:14:7a:b7:
                    e1:c6:cc:e6:32:1b:0e:ab:3a:e7:17:b8:36:3d:84:
                    01:1a:db:85:30:cb:b2:ce:89:99:74:1b:d0:2b:a4:
                    3c:70:b8:bd:c8:26:32:a4:58:de:e4:ac:9c:6d:21:
                    05:7d:a7:8a:0d:14:96:a0:2c:c0:5a:7d:8d:4f:48:
                    f3:4f:b2:43:41:22:b6:4d:4a:80:08:0f:0a:ab:d8:
                    be:7a:57:5d:4d:f2:4b:1e:e9:a8:7d:55:37:a6:b6:
                    71:f6:20:55:50:df:71:00:59:ed:8d:65:bf:9e:2d:
                    11:57:e3:f9:a8:4d:b1:1b:7c:b7:4b:11:ab:97:db:
                    e7:06:ce:25:da:86:54:b2:50:77:f7:6f:eb:e7:5a:
                    54:12:77:72:ec:e7:4d:bd:b0:bf:f2:9d:59:bc:74:
                    7b:2e:fe:21:da:54:e3:96:0e:7a:69:38:dc:28:a7:
                    04:11:1c:11:66:12:94:ab:a8:30:e3:20:41:e7:44:
                    ac:f6:39:ca:3a:82:6f:7c:35:46:90:9f:fb:d6:09:
                    c8:b8:1c:84:d3:eb:90:52:b7:46:79:b3:50:7e:4f:
                    57:81:f8:2d:4a:b7:98:64:0d:66:66:7e:00:b9:4d:
                    a1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:47:73:50:D3:D0:10:B7:51:B3:CC:92:5B:7A:47:36:AF:51:48:87
            X509v3 Authority Key Identifier:
                keyid:1B:61:48:C8:27:B5:EF:75:B0:E9:4E:FB:CA:4D:8F:40:86:12:BD:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/0/1B6148C827B5EF75B0E94EFBCA4D8F408612BDC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2FIyCe173Ww6U77yk2PQIYSvck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/0/1B6148C827B5EF75B0E94EFBCA4D8F408612BDC9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:1b:43:86:e5:99:59:be:1b:f8:49:d7:4f:d8:fe:cf:02:d0:
         ad:39:5d:27:ff:02:ab:8c:15:9b:d2:79:77:bd:fe:e9:87:4f:
         42:39:2a:5f:4f:e4:b5:1e:39:ca:ac:86:59:e6:06:04:cb:d0:
         ec:cc:95:94:99:0f:4d:0a:c9:a1:6a:32:68:ed:1c:94:ad:45:
         0d:ef:a0:79:e1:1b:9f:5a:71:1c:79:e4:67:66:aa:c7:26:0c:
         d9:57:1d:c9:1d:96:ec:6f:f3:ed:fd:ec:d0:ba:67:3b:d4:22:
         94:f8:57:c4:fd:e1:4e:32:f9:11:1d:30:8b:51:b7:4f:49:b7:
         93:8f:6b:2a:e9:81:56:96:ad:e6:d7:2e:e0:f9:d2:ed:6a:88:
         3a:b3:a4:0e:13:11:d5:36:49:d0:69:3b:2a:0d:69:bf:04:80:
         ad:2d:84:1a:ff:94:3b:10:f4:df:73:74:7c:29:18:91:67:5b:
         8f:eb:23:1c:b0:55:f5:0c:53:8c:15:e2:77:a0:c0:e1:50:cf:
         e2:84:f5:0c:ce:2c:e6:4c:83:d5:99:8e:dc:93:23:82:e4:c5:
         6d:f9:2a:57:4c:10:15:4b:18:52:86:30:a3:6a:9c:46:fc:59:
         d6:6a:2a:28:2e:ee:2a:bf:a9:cc:4a:f6:5f:d0:b5:2d:5b:c4:
         62:a2:3a:97
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUabBAQpS2Uk+pG1Rrda56tp3cKhEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMWI2MTQ4YzgyN2I1ZWY3NWIwZTk0ZWZiY2E0ZDhmNDA4
NjEyYmRjOTAeFw0yNjA2MjgxODAxMDZaFw0yNjA2MjkxOTMwMDZaMDMxMTAvBgNV
BAMTKEZGNDc3MzUwRDNEMDEwQjc1MUIzQ0M5MjVCN0E0NzM2QUY1MTQ4ODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ+tZqbgO2eM5K/C0EI9UrJoFP
ARGLfjq7AxR6t+HGzOYyGw6rOucXuDY9hAEa24Uwy7LOiZl0G9ArpDxwuL3IJjKk
WN7krJxtIQV9p4oNFJagLMBafY1PSPNPskNBIrZNSoAIDwqr2L56V11N8kse6ah9
VTemtnH2IFVQ33EAWe2NZb+eLRFX4/moTbEbfLdLEauX2+cGziXahlSyUHf3b+vn
WlQSd3Ls5029sL/ynVm8dHsu/iHaVOOWDnppONwopwQRHBFmEpSrqDDjIEHnRKz2
Oco6gm98NUaQn/vWCci4HITT65BSt0Z5s1B+T1eB+C1Kt5hkDWZmfgC5TaEHAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU/0dzUNPQELdRs8ySW3pHNq9RSIcwHwYDVR0j
BBgwFoAUG2FIyCe173Ww6U77yk2PQIYSvckwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjc4MmQzOGItNDAxNi00OTZhLTgyOTgtZTNlOTdiZWU5
N2JkLzAvMUI2MTQ4QzgyN0I1RUY3NUIwRTk0RUZCQ0E0RDhGNDA4NjEyQkRDOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0cyRkl5Q2UxNzNXdzZVNzd5azJQUUlZ
U3Zjay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82NzgyZDM4Yi00
MDE2LTQ5NmEtODI5OC1lM2U5N2JlZTk3YmQvMC8xQjYxNDhDODI3QjVFRjc1QjBF
OTRFRkJDQTREOEY0MDg2MTJCREM5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAextDhuWZWb4b+EnXT9j+
zwLQrTldJ/8Cq4wVm9J5d73+6YdPQjkqX0/ktR45yqyGWeYGBMvQ7MyVlJkPTQrJ
oWoyaO0clK1FDe+geeEbn1pxHHnkZ2aqxyYM2VcdyR2W7G/z7f3s0LpnO9QilPhX
xP3hTjL5ER0wi1G3T0m3k49rKumBVpat5tcu4PnS7WqIOrOkDhMR1TZJ0Gk7Kg1p
vwSArS2EGv+UOxD033N0fCkYkWdbj+sjHLBV9QxTjBXid6DA4VDP4oT1DM4s5kyD
1ZmO3JMjguTFbfkqV0wQFUsYUoYwo2qcRvxZ1moqKC7uKr+pzEr2X9C1LVvEYqI6
lw==
-----END CERTIFICATE-----
Generated at Mon Jun 29 10:30:58 2026 by rpki-client