Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.mft
File:                     bLm_6TNtoFV5BgineljMq8SWhpQ.mft (raw, json)
Hash identifier:          xokSxBDahqWPeWtzBD/fjv4Xn/8qy0TvACWE2+KRUH8=
Subject key identifier:   56:6F:63:21:29:BE:F2:94:37:17:68:50:9D:87:37:ED:AF:E8:17:92
Authority key identifier: 6C:B9:BF:E9:33:6D:A0:55:79:06:08:A7:7A:58:CC:AB:C4:96:86:94
Certificate issuer:       /CN=6cb9bfe9336da055790608a77a58ccabc4968694
Certificate serial:       019D8FBAD63533BB99009E3CBB4F484197DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bLm_6TNtoFV5BgineljMq8SWhpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.mft
Manifest number:          0F61
Signing time:             Wed 15 Apr 2026 06:01:19 +0000
Manifest this update:     Wed 15 Apr 2026 06:01:19 +0000
Manifest next update:     Thu 16 Apr 2026 06:01:19 +0000
Files and hashes:         1: bLm_6TNtoFV5BgineljMq8SWhpQ.crl (hash: pUBm4zlIlLyuKCGT6XAr3T1oYNseG+4LhOQ1ub+kmB8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:8f:ba:d6:35:33:bb:99:00:9e:3c:bb:4f:48:41:97:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cb9bfe9336da055790608a77a58ccabc4968694
        Validity
            Not Before: Apr 15 06:01:19 2026 GMT
            Not After : Apr 16 06:01:19 2026 GMT
        Subject: CN=566f632129bef294371768509d8737edafe81792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:70:da:c5:f4:81:a8:2b:c6:15:de:92:18:64:
                    16:84:de:26:41:73:89:45:b9:ef:3e:21:4a:d0:3a:
                    87:05:7a:d6:d5:fa:c7:a9:26:9d:13:f7:0b:44:a5:
                    ad:ea:7b:a2:f4:6a:1f:cd:fe:5d:22:8b:84:f5:18:
                    cf:2f:0f:cd:ed:52:dc:29:15:ce:b9:54:23:cf:3e:
                    66:83:2e:dd:19:8c:12:f7:d9:86:cf:2d:aa:3f:f8:
                    23:76:17:e1:74:5e:ce:95:2a:68:0e:d4:3d:91:5a:
                    bc:88:4a:b3:c2:3d:4d:79:39:c6:8b:67:41:03:74:
                    91:49:61:4d:67:72:e9:0c:1b:5b:95:e8:fe:25:b2:
                    ae:ea:f6:be:84:d1:44:07:d6:36:aa:d1:b5:ea:93:
                    a9:00:f3:6f:c5:f6:15:af:de:c1:a6:a7:52:f8:48:
                    b5:28:fc:2d:9b:6c:73:1a:5f:5d:6c:8e:da:a7:4b:
                    fe:5d:3a:5c:47:06:0e:2b:eb:64:b4:79:3a:50:2d:
                    54:a8:32:db:99:14:e0:8c:88:2c:3c:7c:8e:72:bf:
                    86:4b:cc:20:9f:e4:2a:a6:85:66:03:06:bd:71:26:
                    db:5d:d2:6b:1d:de:7e:86:89:d1:22:d9:f3:b2:b3:
                    48:c1:2b:b9:a6:24:ce:09:36:e9:00:b1:2c:f7:0b:
                    52:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:6F:63:21:29:BE:F2:94:37:17:68:50:9D:87:37:ED:AF:E8:17:92
            X509v3 Authority Key Identifier:
                keyid:6C:B9:BF:E9:33:6D:A0:55:79:06:08:A7:7A:58:CC:AB:C4:96:86:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLm_6TNtoFV5BgineljMq8SWhpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:2d:17:52:5e:fa:85:e7:cd:5e:5e:92:cc:5a:3d:c8:bb:22:
         09:04:b4:88:fa:81:6e:3d:a4:3d:d0:bd:b3:ea:e7:05:3a:9c:
         d3:2e:e9:2b:35:88:07:dc:ab:14:cb:44:d5:de:de:ef:42:a1:
         a3:a1:f2:92:10:50:f9:8c:ec:e8:f7:3b:1a:19:37:21:e0:9d:
         91:ec:99:06:01:18:f5:fd:f7:d7:ad:9d:f2:81:c1:dd:76:eb:
         63:95:1a:fd:66:5b:92:0f:d6:93:4d:d5:d1:9c:b6:5e:e9:71:
         a5:4d:a8:32:77:e4:9b:d4:66:9a:a3:c8:4e:72:2d:63:e2:25:
         81:93:40:6f:39:51:95:a1:bc:86:8f:8d:0b:b7:06:7c:35:44:
         68:e7:df:e0:79:19:f3:ce:9c:5b:62:fc:66:0c:51:03:1a:85:
         9b:18:83:4b:8e:48:80:b7:76:28:ce:e2:b1:ad:ef:15:2f:e0:
         7e:9a:e2:52:21:1a:fb:9b:22:93:b3:d7:5e:bc:43:96:88:05:
         f4:c2:9e:14:7c:08:69:b2:6c:ee:a7:ef:2c:c7:55:77:a3:bb:
         17:45:ad:32:05:3d:f3:0f:47:c6:6a:78:df:07:79:67:19:b5:
         7d:da:1f:6c:5b:79:1c:fb:94:b2:71:5b:42:22:ee:13:2c:98:
         bd:ad:92:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:50:56 2026 by rpki-client