Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1d44f2-1706-4bf1-b71d-74ca36402a85/1/RBMe6Tam-kL_OvCmrobCxmU91XM.mft
File:                     RBMe6Tam-kL_OvCmrobCxmU91XM.mft (raw, json)
Hash identifier:          DhoenS/lAeHxxohA76ApcgCOdsBsLl1s7N2ybx9yk6U=
Subject key identifier:   85:F3:59:04:A8:DD:C6:97:BF:56:CF:E2:51:AE:B0:BB:21:4E:67:8E
Authority key identifier: 44:13:1E:E9:36:A6:FA:42:FF:3A:F0:A6:AE:86:C2:C6:65:3D:D5:73
Certificate issuer:       /CN=44131ee936a6fa42ff3af0a6ae86c2c6653dd573
Certificate serial:       019D265F5D6FEC4D212A1E3846C8D2C34949
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RBMe6Tam-kL_OvCmrobCxmU91XM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/1d44f2-1706-4bf1-b71d-74ca36402a85/1/RBMe6Tam-kL_OvCmrobCxmU91XM.mft
Manifest number:          1887
Signing time:             Wed 25 Mar 2026 19:01:17 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:17 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:17 +0000
Files and hashes:         1: RBMe6Tam-kL_OvCmrobCxmU91XM.crl (hash: cuEibWGuuuNj2jqSEeS3y4w4DWLcRzh9U7UWs4KPU5M=)
                          2: tHbTG3Z27Xxml2LD62IzLQ8NPpA.roa (hash: 6FrNp4ihw6Akn84W38Q7cORvrRuZSEma+E+FSzurAL8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/1d44f2-1706-4bf1-b71d-74ca36402a85/1/RBMe6Tam-kL_OvCmrobCxmU91XM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/1d44f2-1706-4bf1-b71d-74ca36402a85/1/RBMe6Tam-kL_OvCmrobCxmU91XM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RBMe6Tam-kL_OvCmrobCxmU91XM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:5d:6f:ec:4d:21:2a:1e:38:46:c8:d2:c3:49:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44131ee936a6fa42ff3af0a6ae86c2c6653dd573
        Validity
            Not Before: Mar 25 19:01:17 2026 GMT
            Not After : Mar 26 19:01:17 2026 GMT
        Subject: CN=85f35904a8ddc697bf56cfe251aeb0bb214e678e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ac:b4:b1:b2:74:33:2f:72:c9:f0:7c:2a:46:
                    6e:d6:5c:11:57:c4:44:e6:cf:fd:26:11:8c:1c:8f:
                    5f:9d:95:d4:f9:b1:f4:21:65:0a:41:8d:c3:88:5f:
                    83:9a:7d:ca:7e:c9:c2:35:19:61:0e:9d:4b:81:a3:
                    36:d6:80:e1:6b:72:f9:d7:f6:ac:6c:48:22:ed:c8:
                    23:a0:09:b9:5d:f0:4b:4f:66:08:22:85:20:ef:4f:
                    a2:aa:6e:8f:d2:6c:98:d6:ab:94:6e:4a:ae:67:9f:
                    9f:8f:d0:62:52:73:79:61:34:45:ae:71:fa:c1:31:
                    28:bd:d7:21:3f:66:ba:24:7e:19:67:96:e1:34:58:
                    76:a8:56:73:33:4a:62:0b:87:c8:cf:5c:0f:9e:97:
                    43:28:50:6f:87:10:88:92:04:c0:b6:a0:44:ec:8d:
                    96:10:a5:42:41:79:4e:53:d8:7e:d2:2a:ff:35:88:
                    f7:b8:7c:2f:cf:5d:d6:37:d4:91:c8:90:1d:cb:32:
                    cb:f2:06:19:f7:e1:46:a5:5f:c3:48:4f:48:b4:4e:
                    b5:5e:44:d1:e0:af:27:2a:08:e5:00:08:7d:9c:6b:
                    b4:1d:38:3c:09:0a:e7:d2:f1:80:0f:a3:eb:70:f5:
                    bd:57:d9:e9:51:0b:88:05:61:0f:cf:1f:7c:f5:71:
                    e5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:F3:59:04:A8:DD:C6:97:BF:56:CF:E2:51:AE:B0:BB:21:4E:67:8E
            X509v3 Authority Key Identifier:
                keyid:44:13:1E:E9:36:A6:FA:42:FF:3A:F0:A6:AE:86:C2:C6:65:3D:D5:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBMe6Tam-kL_OvCmrobCxmU91XM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1d44f2-1706-4bf1-b71d-74ca36402a85/1/RBMe6Tam-kL_OvCmrobCxmU91XM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1d44f2-1706-4bf1-b71d-74ca36402a85/1/RBMe6Tam-kL_OvCmrobCxmU91XM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:18:55:97:97:10:64:21:95:31:53:ff:23:bc:78:b3:45:30:
         cc:c4:68:02:da:9e:f9:9b:18:40:36:f6:cf:c9:7d:ac:65:e7:
         90:94:15:c2:6c:d4:80:bd:60:e8:d6:62:69:b5:7e:d6:d1:e2:
         cc:41:a6:5b:53:d7:3d:94:1b:d9:b6:dd:e0:76:7c:90:5d:5c:
         4e:ba:6c:e9:e1:fe:0e:ed:c5:6f:3c:32:38:fd:8e:ff:7e:12:
         3a:7a:ac:6d:4c:54:b9:1d:a0:2c:76:93:f2:fe:18:15:a7:da:
         19:bb:c4:d5:c7:44:07:6e:ab:6a:f6:49:28:61:c3:cf:01:ea:
         99:f3:73:79:e4:0c:4f:9d:a3:56:6a:16:67:d5:29:ea:18:c3:
         4c:54:c9:2f:35:ae:08:e5:a3:a4:db:d6:ac:61:ce:3b:0a:1b:
         38:d9:cc:b9:90:65:fb:0c:e1:c5:c0:4c:94:77:46:b3:31:ed:
         ab:60:2e:f6:2a:f7:8d:75:ad:92:9a:9a:2e:35:dd:03:a3:a8:
         f3:0f:0a:a8:c2:06:d8:3d:ee:36:87:b2:eb:b2:2f:a5:ad:9c:
         16:9d:3b:11:69:0e:47:a5:9e:78:45:37:8d:13:ef:b7:f7:1c:
         f7:1e:03:eb:8d:03:13:18:21:e3:c0:65:6a:5f:27:45:6b:44:
         ee:fc:eb:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:58:44 2026 by rpki-client