Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5dc10d-4b67-4ca5-b51b-f4ac04adbd95/1/ISv6b940VbwJkojp_0UNmtghbGA.mft
File:                     ISv6b940VbwJkojp_0UNmtghbGA.mft (raw, json)
Hash identifier:          vAnMMkIDvbwCosiaysXaizqX2BdmP6SHAsnCAUdXlcE=
Subject key identifier:   61:61:BD:D9:07:66:22:39:6C:D4:CC:D8:A2:0D:45:0E:DA:82:23:96
Authority key identifier: 21:2B:FA:6F:DE:34:55:BC:09:92:88:E9:FF:45:0D:9A:D8:21:6C:60
Certificate issuer:       /CN=212bfa6fde3455bc099288e9ff450d9ad8216c60
Certificate serial:       019D9DAD536FD0D0CEC1F80D145CBAD011C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ISv6b940VbwJkojp_0UNmtghbGA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/5dc10d-4b67-4ca5-b51b-f4ac04adbd95/1/ISv6b940VbwJkojp_0UNmtghbGA.mft
Manifest number:          014A
Signing time:             Fri 17 Apr 2026 23:01:14 +0000
Manifest this update:     Fri 17 Apr 2026 23:01:14 +0000
Manifest next update:     Sat 18 Apr 2026 23:01:14 +0000
Files and hashes:         1: ISv6b940VbwJkojp_0UNmtghbGA.crl (hash: XctpJBNHifjmJ/kU7Hu1hXst0OdgN5IYw+n+0CSEgwk=)
                          2: f6k1pb1DyPuipxAIYvQjo8-Zq8Y.asa (hash: Ep14iU2LKva1ADKW9hz7AcyIAFA0LFBAnPYhXaahiMo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/5dc10d-4b67-4ca5-b51b-f4ac04adbd95/1/ISv6b940VbwJkojp_0UNmtghbGA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/5dc10d-4b67-4ca5-b51b-f4ac04adbd95/1/ISv6b940VbwJkojp_0UNmtghbGA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ISv6b940VbwJkojp_0UNmtghbGA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9d:ad:53:6f:d0:d0:ce:c1:f8:0d:14:5c:ba:d0:11:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=212bfa6fde3455bc099288e9ff450d9ad8216c60
        Validity
            Not Before: Apr 17 23:01:14 2026 GMT
            Not After : Apr 18 23:01:14 2026 GMT
        Subject: CN=6161bdd9076622396cd4ccd8a20d450eda822396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:47:a0:c3:36:2d:67:7e:00:89:5f:dd:56:74:
                    b8:88:fc:fa:cf:61:11:c9:35:54:21:b8:43:98:b6:
                    1c:70:e2:a3:72:ca:16:35:de:68:48:1f:a9:b7:eb:
                    85:1c:95:b1:0f:37:69:0d:f7:69:95:a8:d2:cb:83:
                    7b:b7:59:11:88:38:ab:14:56:6d:33:80:67:10:2f:
                    3a:be:6d:0c:67:da:5e:50:da:9e:f1:ab:f9:36:54:
                    d5:b7:6b:40:70:d1:6d:3e:08:9a:10:6e:6f:40:04:
                    4a:eb:81:5c:43:6d:fa:6f:38:9a:9d:af:43:47:e2:
                    3c:84:31:9c:6e:ba:9c:14:03:5e:96:21:4c:6e:70:
                    2c:31:09:25:47:f0:4f:90:b7:59:f9:9b:3c:9b:c7:
                    4b:81:96:1a:65:10:fb:4a:29:b7:1f:16:45:2a:ea:
                    7b:72:01:dd:57:3a:3a:9d:a4:65:63:f5:05:1b:82:
                    43:92:1b:dd:50:bb:a6:fa:69:d5:fd:e7:15:50:44:
                    7c:54:0c:3f:2d:50:08:cc:d9:2d:d1:09:98:3c:61:
                    8e:09:59:52:5e:1f:fd:80:a1:d8:ad:6a:91:54:c2:
                    05:84:14:1f:4b:b8:19:61:da:98:7a:5a:41:ab:1f:
                    73:c6:09:41:6b:8a:a2:58:00:a8:60:47:92:0e:39:
                    c6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:61:BD:D9:07:66:22:39:6C:D4:CC:D8:A2:0D:45:0E:DA:82:23:96
            X509v3 Authority Key Identifier:
                keyid:21:2B:FA:6F:DE:34:55:BC:09:92:88:E9:FF:45:0D:9A:D8:21:6C:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISv6b940VbwJkojp_0UNmtghbGA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5dc10d-4b67-4ca5-b51b-f4ac04adbd95/1/ISv6b940VbwJkojp_0UNmtghbGA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5dc10d-4b67-4ca5-b51b-f4ac04adbd95/1/ISv6b940VbwJkojp_0UNmtghbGA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:f7:47:53:26:cf:88:c9:80:9e:41:89:90:ba:0a:6e:b8:cf:
         11:d2:4d:a9:df:86:64:df:01:9a:84:8e:a6:4a:f4:52:de:55:
         0d:91:fe:ae:2d:88:50:b2:68:33:26:46:cc:38:43:5d:a2:27:
         0a:95:92:ab:3d:b6:21:ff:a9:ed:c7:4d:d0:60:6f:7b:56:59:
         c8:95:a9:08:94:7c:5e:3c:23:c6:75:8c:a5:8e:3d:06:3c:05:
         88:01:ac:7e:1a:4b:85:91:ea:52:e9:eb:91:e3:a8:d6:92:8d:
         d6:e1:ad:66:28:fa:11:e4:8a:af:97:b4:4f:ea:c8:14:8a:ea:
         6f:6a:ba:e2:47:3d:d1:2e:36:08:ce:f1:ff:37:d8:eb:e1:7f:
         1e:4e:72:a9:b0:b1:5e:cc:ec:89:83:75:da:a7:cc:1d:4a:92:
         e1:81:c8:f9:c5:0f:5d:dd:5b:0d:44:ba:61:9a:4c:21:dc:78:
         ac:21:e8:9f:52:57:73:ea:33:bf:48:9b:b6:a5:8c:d7:7c:94:
         36:37:31:c6:7c:4a:9c:e2:36:37:44:d3:ec:c8:30:5e:bb:82:
         8c:34:0a:9e:5c:30:52:4f:02:fd:c5:e1:80:aa:dc:0e:6d:9a:
         b5:3e:16:a0:a5:19:be:38:69:71:99:d7:a4:9a:3d:b5:7a:b2:
         6f:17:a6:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2drVNv0NDOwfgNFFy60BHFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMmJmYTZmZGUzNDU1YmMwOTkyODhlOWZmNDUwZDlhZDgy
MTZjNjAwHhcNMjYwNDE3MjMwMTE0WhcNMjYwNDE4MjMwMTE0WjAzMTEwLwYDVQQD
Eyg2MTYxYmRkOTA3NjYyMjM5NmNkNGNjZDhhMjBkNDUwZWRhODIyMzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEegwzYtZ34AiV/dVnS4iPz6z2ER
yTVUIbhDmLYccOKjcsoWNd5oSB+pt+uFHJWxDzdpDfdplajSy4N7t1kRiDirFFZt
M4BnEC86vm0MZ9peUNqe8av5NlTVt2tAcNFtPgiaEG5vQARK64FcQ236bziana9D
R+I8hDGcbrqcFANeliFMbnAsMQklR/BPkLdZ+Zs8m8dLgZYaZRD7Sim3HxZFKup7
cgHdVzo6naRlY/UFG4JDkhvdULum+mnV/ecVUER8VAw/LVAIzNkt0QmYPGGOCVlS
Xh/9gKHYrWqRVMIFhBQfS7gZYdqYelpBqx9zxglBa4qiWACoYEeSDjnGKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGFhvdkHZiI5bNTM2KINRQ7agiOWMB8GA1UdIwQY
MBaAFCEr+m/eNFW8CZKI6f9FDZrYIWxgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVN2NmI5NDBWYndKa29qcF8wVU5tdGdoYkdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC81ZGMxMGQtNGI2Ny00Y2E1LWI1MWIt
ZjRhYzA0YWRiZDk1LzEvSVN2NmI5NDBWYndKa29qcF8wVU5tdGdoYkdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC81ZGMxMGQtNGI2Ny00Y2E1LWI1MWItZjRhYzA0YWRiZDk1
LzEvSVN2NmI5NDBWYndKa29qcF8wVU5tdGdoYkdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgPdHUybP
iMmAnkGJkLoKbrjPEdJNqd+GZN8BmoSOpkr0Ut5VDZH+ri2IULJoMyZGzDhDXaIn
CpWSqz22If+p7cdN0GBve1ZZyJWpCJR8XjwjxnWMpY49BjwFiAGsfhpLhZHqUunr
keOo1pKN1uGtZij6EeSKr5e0T+rIFIrqb2q64kc90S42CM7x/zfY6+F/Hk5yqbCx
XszsiYN12qfMHUqS4YHI+cUPXd1bDUS6YZpMIdx4rCHon1JXc+ozv0ibtqWM13yU
NjcxxnxKnOI2N0TT7MgwXruCjDQKnlwwUk8C/cXhgKrcDm2atT4WoKUZvjhpcZnX
pJo9tXqybxem+g==
-----END CERTIFICATE-----
Generated at Sat Apr 18 03:59:28 2026 by rpki-client