Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.mft
File:                     RBme-tyIgD3BoGVhD2R8_c4w9UE.mft (raw, json)
Hash identifier:          pW+4D4R2iZWWebReyTyja0W4NwRZoipP2TyhjI4hXZU=
Subject key identifier:   6C:55:E7:71:85:50:1C:25:C3:B2:62:5E:CE:EF:CD:36:7C:47:4C:F6
Authority key identifier: 44:19:9E:FA:DC:88:80:3D:C1:A0:65:61:0F:64:7C:FD:CE:30:F5:41
Certificate issuer:       /CN=44199efadc88803dc1a065610f647cfdce30f541
Certificate serial:       019CA9EAFCD6D4312279489462CF5D984EC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RBme-tyIgD3BoGVhD2R8_c4w9UE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.mft
Manifest number:          1842
Signing time:             Sun 01 Mar 2026 15:01:15 +0000
Manifest this update:     Sun 01 Mar 2026 15:01:15 +0000
Manifest next update:     Mon 02 Mar 2026 15:01:15 +0000
Files and hashes:         1: RBme-tyIgD3BoGVhD2R8_c4w9UE.crl (hash: i0tsWI8HllU2wAX9G864xQtfdT3nCaYf7ZL/V/IG0yw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RBme-tyIgD3BoGVhD2R8_c4w9UE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:ea:fc:d6:d4:31:22:79:48:94:62:cf:5d:98:4e:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44199efadc88803dc1a065610f647cfdce30f541
        Validity
            Not Before: Mar  1 15:01:15 2026 GMT
            Not After : Mar  2 15:01:15 2026 GMT
        Subject: CN=6c55e77185501c25c3b2625eceefcd367c474cf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:69:5b:79:a5:10:e4:29:63:f2:7e:13:36:44:
                    e5:6a:53:02:0c:ea:d9:55:0e:af:29:49:1c:27:86:
                    36:44:18:6a:ba:94:97:a0:77:6e:ff:37:71:c1:15:
                    8a:59:b4:f3:49:7c:9a:d7:ca:65:c2:ea:a9:36:80:
                    c6:83:c0:e9:16:b5:37:c4:8e:57:e1:67:a9:18:93:
                    6c:64:a1:21:1a:10:24:ce:3e:4c:5c:7f:97:83:be:
                    de:15:cd:cc:79:fb:51:69:fd:b9:e9:ed:d4:f0:53:
                    83:c0:5f:95:8e:43:d8:3c:0e:4d:ea:63:7a:30:3d:
                    91:4d:31:13:97:17:da:cb:d1:a3:2b:d1:25:a5:34:
                    ca:7b:bc:a8:18:42:3d:03:fe:f4:0d:5b:cb:55:59:
                    1a:dd:ac:bb:e3:93:40:b3:03:60:73:fd:a4:0c:5a:
                    e3:8c:0c:de:7e:8f:7f:c7:2e:9f:5a:3b:56:d8:6e:
                    f3:44:2f:12:42:43:7f:a9:e2:f7:83:99:71:9b:56:
                    46:98:41:8b:5b:b5:53:f2:18:db:a5:ae:d4:16:56:
                    5e:7e:7c:00:e5:69:b6:1c:e9:20:97:92:cb:8d:9b:
                    ec:f4:06:2d:32:4b:e6:bb:0e:3a:3b:b7:5a:fd:82:
                    a2:ee:76:77:cc:43:64:bf:42:32:01:cb:5d:11:28:
                    3e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:55:E7:71:85:50:1C:25:C3:B2:62:5E:CE:EF:CD:36:7C:47:4C:F6
            X509v3 Authority Key Identifier:
                keyid:44:19:9E:FA:DC:88:80:3D:C1:A0:65:61:0F:64:7C:FD:CE:30:F5:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBme-tyIgD3BoGVhD2R8_c4w9UE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:9b:51:98:33:4e:bd:b8:90:57:fe:9b:3a:98:ed:d5:18:fd:
         94:08:9d:e3:10:62:ee:20:0e:14:ab:e0:0f:9c:4a:72:37:66:
         eb:d8:90:58:6a:63:71:b0:19:32:42:d5:bd:3f:f2:54:37:a4:
         ff:31:77:47:fb:01:16:69:00:52:73:fc:72:24:10:b4:9a:4c:
         b9:08:a0:b0:e9:d8:94:27:c3:18:1d:28:86:a7:81:4f:52:5a:
         d4:74:ea:fe:8b:ba:35:40:c1:e4:a3:81:a8:97:b7:d3:dc:c2:
         f5:6b:87:c4:a9:69:b1:d9:5d:3b:2e:eb:f6:5a:64:d0:c4:db:
         89:d5:8d:d9:34:38:7b:bb:ac:95:47:0b:78:55:1a:af:ab:1b:
         62:5d:bb:b9:e5:6c:b3:84:17:5d:e0:15:36:55:bd:77:62:2b:
         f7:11:69:dd:c1:0e:f7:7e:66:73:81:94:6a:bd:5d:a0:fd:f6:
         87:b4:d3:4e:4a:56:44:7f:96:72:93:b6:29:80:9f:43:8a:9b:
         d2:1d:fc:86:28:fc:25:db:0d:41:3d:be:ee:02:ac:f0:3f:dc:
         b3:3f:86:1d:79:d3:ec:af:95:97:2b:e5:06:9d:bf:f6:51:0c:
         55:0d:f6:73:f0:5a:90:19:07:76:73:3e:fd:0e:d3:8d:82:44:
         a0:0e:e3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:52:00 2026 by rpki-client