Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.mft
File:                     bLm_6TNtoFV5BgineljMq8SWhpQ.mft (raw, json)
Hash identifier:          yiSboE3vNWMaiIfI0HyGflMgSpggBg5ATO2a+x7epCA=
Subject key identifier:   37:ED:E6:E8:DA:E0:1B:F2:40:66:E7:77:56:24:AC:FE:A3:9A:02:BB
Authority key identifier: 6C:B9:BF:E9:33:6D:A0:55:79:06:08:A7:7A:58:CC:AB:C4:96:86:94
Certificate issuer:       /CN=6cb9bfe9336da055790608a77a58ccabc4968694
Certificate serial:       019CABD9C0B3B9FC3B29329A30BE19703772
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bLm_6TNtoFV5BgineljMq8SWhpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.mft
Manifest number:          0EEB
Signing time:             Mon 02 Mar 2026 00:01:40 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:40 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:40 +0000
Files and hashes:         1: bLm_6TNtoFV5BgineljMq8SWhpQ.crl (hash: ujL+pCd6czIayoe7c2uHfsIz0Q70ei+3plitPmccQ0o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bLm_6TNtoFV5BgineljMq8SWhpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:c0:b3:b9:fc:3b:29:32:9a:30:be:19:70:37:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cb9bfe9336da055790608a77a58ccabc4968694
        Validity
            Not Before: Mar  2 00:01:40 2026 GMT
            Not After : Mar  3 00:01:40 2026 GMT
        Subject: CN=37ede6e8dae01bf24066e7775624acfea39a02bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:eb:7c:f6:2d:07:31:51:8d:8a:63:2d:19:0c:
                    08:df:85:21:50:48:b0:d4:78:3e:ed:e9:09:f1:24:
                    bc:21:24:71:ea:e8:d3:fa:f7:d7:23:d2:2f:fa:c2:
                    a0:c4:fb:3b:ac:1b:de:ad:e5:02:1f:cb:33:94:b1:
                    d5:9b:2e:85:00:5a:29:17:97:62:88:dc:46:e4:b1:
                    8c:c8:bf:34:58:a1:a8:a5:b4:f5:66:1d:8e:a9:3c:
                    3d:47:ab:39:a3:b8:94:d4:94:84:13:07:82:af:ef:
                    31:01:7b:7e:e9:5e:42:da:2b:a7:b1:21:89:29:a2:
                    59:7c:e4:1a:c2:98:50:5c:82:e6:17:81:62:b8:3f:
                    08:18:ec:67:84:7e:e7:2a:f9:b4:f5:de:ad:10:88:
                    9a:8c:71:15:0e:dc:58:ce:03:ea:b9:3f:04:95:bc:
                    41:d5:c5:fd:3a:12:2d:5a:bd:17:bb:0d:5d:7e:5a:
                    c0:a1:16:0e:0e:27:ea:85:1d:ed:8b:7e:1d:61:7c:
                    c2:de:b5:eb:48:6f:66:7e:d4:be:24:b2:0c:5e:b9:
                    2e:dc:eb:03:af:89:18:03:67:ae:14:1c:3e:3b:dd:
                    44:78:c0:c5:98:09:51:d9:ba:9c:e4:25:74:40:ae:
                    e1:8d:3a:e2:5c:74:00:14:26:96:23:5b:e0:74:94:
                    0a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:ED:E6:E8:DA:E0:1B:F2:40:66:E7:77:56:24:AC:FE:A3:9A:02:BB
            X509v3 Authority Key Identifier:
                keyid:6C:B9:BF:E9:33:6D:A0:55:79:06:08:A7:7A:58:CC:AB:C4:96:86:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLm_6TNtoFV5BgineljMq8SWhpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:2f:47:c6:93:55:42:cb:98:02:55:ac:67:f0:39:40:ce:01:
         62:aa:77:e0:a2:75:4f:e5:e5:2b:24:27:f7:33:80:35:c6:df:
         e0:06:15:a1:33:86:89:3e:ce:f2:28:59:a7:aa:f0:77:f9:13:
         f5:74:3f:c6:62:e2:22:a0:95:6e:61:e2:94:0d:b0:01:c5:18:
         83:6e:3c:4d:82:cb:91:6f:dc:27:74:59:3b:df:1c:1f:61:5b:
         ee:ce:7e:ac:98:8b:a5:d6:c6:71:45:86:ff:c2:84:72:e1:4e:
         fc:a5:d8:f5:b0:76:ad:cd:f7:c8:8c:33:8c:54:96:52:72:5b:
         e7:7d:4c:0d:e9:e6:5d:ae:04:6d:e0:36:a0:8e:47:b4:12:30:
         74:ca:28:cd:28:b7:86:31:53:ef:49:18:1e:8b:5a:55:73:30:
         05:ad:56:a4:12:8c:ca:f9:cb:d9:44:93:30:78:78:a7:49:09:
         e9:af:9c:7b:6d:e7:3b:bf:7c:c3:14:85:b9:76:43:75:11:6e:
         2a:e4:c3:52:b6:64:6c:0a:83:c2:be:70:25:be:0c:49:c5:41:
         a9:8c:25:7e:ba:1e:45:5d:76:d9:40:b8:94:b5:8e:45:e1:3b:
         09:df:fc:c2:da:63:e3:3b:da:92:48:8d:f4:3f:a8:79:3e:26:
         1e:9a:1f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:38:57 2026 by rpki-client