Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5dc10d-4b67-4ca5-b51b-f4ac04adbd95/1/ISv6b940VbwJkojp_0UNmtghbGA.mft
File:                     ISv6b940VbwJkojp_0UNmtghbGA.mft (raw, json)
Hash identifier:          4FY+ebuckLbpsr+o/sUAliBu9MApISHWdplB8bmpfps=
Subject key identifier:   D2:01:2C:1C:2C:03:DE:00:B5:BF:40:DA:3A:DE:3C:41:28:D0:98:11
Authority key identifier: 21:2B:FA:6F:DE:34:55:BC:09:92:88:E9:FF:45:0D:9A:D8:21:6C:60
Certificate issuer:       /CN=212bfa6fde3455bc099288e9ff450d9ad8216c60
Certificate serial:       019FA86206F6959CA20D4FD7B987F83108BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ISv6b940VbwJkojp_0UNmtghbGA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/5dc10d-4b67-4ca5-b51b-f4ac04adbd95/1/ISv6b940VbwJkojp_0UNmtghbGA.mft
Manifest number:          0259
Signing time:             Tue 28 Jul 2026 11:00:24 +0000
Manifest this update:     Tue 28 Jul 2026 11:00:24 +0000
Manifest next update:     Wed 29 Jul 2026 11:00:24 +0000
Files and hashes:         1: Ac0Vp77j_gd7efi18NIp69shGJI.asa (hash: c6J2S86+6Fr+X3dELm6oa+hnK83dExkyOr3DlTV80eE=)
                          2: ISv6b940VbwJkojp_0UNmtghbGA.crl (hash: Mzd7FXhfT/iD+JyyTbiSaehqFR2OqLEzDfYWjqKbqVA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/5dc10d-4b67-4ca5-b51b-f4ac04adbd95/1/ISv6b940VbwJkojp_0UNmtghbGA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/5dc10d-4b67-4ca5-b51b-f4ac04adbd95/1/ISv6b940VbwJkojp_0UNmtghbGA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ISv6b940VbwJkojp_0UNmtghbGA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:62:06:f6:95:9c:a2:0d:4f:d7:b9:87:f8:31:08:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=212bfa6fde3455bc099288e9ff450d9ad8216c60
        Validity
            Not Before: Jul 28 11:00:24 2026 GMT
            Not After : Jul 29 11:00:24 2026 GMT
        Subject: CN=d2012c1c2c03de00b5bf40da3ade3c4128d09811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:89:7b:d1:b2:44:7f:c4:bb:51:4f:5b:18:9d:
                    ff:9e:de:33:d9:07:58:07:89:b6:7c:59:d3:5e:d0:
                    09:4d:d9:58:6f:a4:d2:cb:1b:76:74:ea:5f:cf:24:
                    0a:b4:67:19:ef:51:89:35:c8:ec:f6:72:2b:b6:28:
                    eb:7b:f8:47:2e:64:58:6d:7e:2c:9f:d1:74:d3:29:
                    51:bf:27:cc:97:49:e4:18:67:80:6a:d9:77:ea:65:
                    85:cc:42:89:c4:a4:88:cb:df:c2:1c:1d:b0:e5:d8:
                    66:6b:dc:85:39:e4:44:ef:55:93:93:57:cc:2c:c5:
                    db:9b:76:4f:12:3e:35:04:5c:3b:27:5a:32:31:db:
                    f2:ca:cc:66:b0:d1:aa:c2:04:c5:97:b6:c0:be:28:
                    84:03:b9:6b:d5:0d:b9:08:f3:d9:2e:62:1e:2b:07:
                    cb:14:32:70:63:1a:b8:53:81:27:84:75:7e:47:ae:
                    0b:f2:af:89:a4:ce:a7:9d:ca:3f:4a:7c:04:df:01:
                    01:dd:b5:9e:7f:f1:9d:1d:b2:f5:89:53:a4:21:42:
                    a2:c9:b7:82:49:bf:d7:f9:6b:05:d5:ac:bf:8b:50:
                    6a:1c:ba:ef:a5:f3:3e:df:16:4f:63:6c:60:23:e1:
                    ed:2f:ae:fd:b9:1b:21:00:1d:fa:f4:02:e1:e0:ba:
                    9a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:01:2C:1C:2C:03:DE:00:B5:BF:40:DA:3A:DE:3C:41:28:D0:98:11
            X509v3 Authority Key Identifier:
                keyid:21:2B:FA:6F:DE:34:55:BC:09:92:88:E9:FF:45:0D:9A:D8:21:6C:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISv6b940VbwJkojp_0UNmtghbGA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5dc10d-4b67-4ca5-b51b-f4ac04adbd95/1/ISv6b940VbwJkojp_0UNmtghbGA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5dc10d-4b67-4ca5-b51b-f4ac04adbd95/1/ISv6b940VbwJkojp_0UNmtghbGA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:57:f8:2e:f1:9e:02:44:a7:b8:1d:7a:20:28:b6:4d:fd:09:
         e5:e1:54:d9:f3:9d:4e:a0:db:7f:26:8e:e9:91:64:44:b7:ee:
         5a:bd:9d:a7:93:8f:84:41:57:6e:2b:e1:01:8d:01:a2:51:a0:
         9a:9c:81:48:1c:19:d1:a5:76:f9:46:73:bc:f5:33:ba:c0:58:
         cc:21:f0:e9:86:d8:a0:de:54:f4:b2:0b:a5:98:f0:d9:f2:2f:
         aa:39:fd:0a:f0:14:9c:a5:11:32:31:fb:3d:21:54:28:c1:78:
         67:a9:5f:24:f2:2a:1c:8d:40:dc:7f:15:8c:a3:a2:30:3a:88:
         c2:9f:e5:1f:8b:76:6b:0c:b1:dc:b3:97:82:5e:3d:92:8d:25:
         e2:25:ca:31:d8:5b:3b:bc:dc:91:d0:fe:81:2a:26:e4:72:43:
         15:e2:f4:8f:21:f1:b6:8f:ab:f8:93:73:18:ac:e9:ba:12:93:
         b9:7a:88:06:1d:3d:59:ce:99:40:b3:05:42:61:74:9b:7b:89:
         60:16:df:60:fa:3d:4a:2e:9d:f6:31:b8:5e:40:3b:ee:01:26:
         94:2f:e2:7b:57:05:b4:6c:2c:28:05:ef:54:f9:ce:68:61:b1:
         5f:f4:9c:cb:4b:20:6b:2b:7e:92:10:06:65:e4:58:a2:7a:e9:
         4d:3c:dc:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+oYgb2lZyiDU/XuYf4MQi9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMmJmYTZmZGUzNDU1YmMwOTkyODhlOWZmNDUwZDlhZDgy
MTZjNjAwHhcNMjYwNzI4MTEwMDI0WhcNMjYwNzI5MTEwMDI0WjAzMTEwLwYDVQQD
EyhkMjAxMmMxYzJjMDNkZTAwYjViZjQwZGEzYWRlM2M0MTI4ZDA5ODExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIl70bJEf8S7UU9bGJ3/nt4z2QdY
B4m2fFnTXtAJTdlYb6TSyxt2dOpfzyQKtGcZ71GJNcjs9nIrtijre/hHLmRYbX4s
n9F00ylRvyfMl0nkGGeAatl36mWFzEKJxKSIy9/CHB2w5dhma9yFOeRE71WTk1fM
LMXbm3ZPEj41BFw7J1oyMdvyysxmsNGqwgTFl7bAviiEA7lr1Q25CPPZLmIeKwfL
FDJwYxq4U4EnhHV+R64L8q+JpM6nnco/SnwE3wEB3bWef/GdHbL1iVOkIUKiybeC
Sb/X+WsF1ay/i1BqHLrvpfM+3xZPY2xgI+HtL679uRshAB369ALh4LqauwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNIBLBwsA94Atb9A2jrePEEo0JgRMB8GA1UdIwQY
MBaAFCEr+m/eNFW8CZKI6f9FDZrYIWxgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVN2NmI5NDBWYndKa29qcF8wVU5tdGdoYkdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC81ZGMxMGQtNGI2Ny00Y2E1LWI1MWIt
ZjRhYzA0YWRiZDk1LzEvSVN2NmI5NDBWYndKa29qcF8wVU5tdGdoYkdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC81ZGMxMGQtNGI2Ny00Y2E1LWI1MWItZjRhYzA0YWRiZDk1
LzEvSVN2NmI5NDBWYndKa29qcF8wVU5tdGdoYkdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY1f4LvGe
AkSnuB16ICi2Tf0J5eFU2fOdTqDbfyaO6ZFkRLfuWr2dp5OPhEFXbivhAY0BolGg
mpyBSBwZ0aV2+UZzvPUzusBYzCHw6YbYoN5U9LILpZjw2fIvqjn9CvAUnKURMjH7
PSFUKMF4Z6lfJPIqHI1A3H8VjKOiMDqIwp/lH4t2awyx3LOXgl49ko0l4iXKMdhb
O7zckdD+gSom5HJDFeL0jyHxto+r+JNzGKzpuhKTuXqIBh09Wc6ZQLMFQmF0m3uJ
YBbfYPo9Si6d9jG4XkA77gEmlC/ie1cFtGwsKAXvVPnOaGGxX/Scy0sgayt+khAG
ZeRYonrpTTzcrw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 16:57:49 2026 by rpki-client