Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.mft
File:                     RBme-tyIgD3BoGVhD2R8_c4w9UE.mft (raw, json)
Hash identifier:          M84kq1DmW6jimCPBkICeGU77aJJ7A7kXN7Pxf2kQp14=
Subject key identifier:   6B:B6:4A:EA:21:22:95:75:E7:0E:59:74:AF:EF:4D:17:73:8C:38:E5
Authority key identifier: 44:19:9E:FA:DC:88:80:3D:C1:A0:65:61:0F:64:7C:FD:CE:30:F5:41
Certificate issuer:       /CN=44199efadc88803dc1a065610f647cfdce30f541
Certificate serial:       019D2960EDF131A9103D181BCFD926103039
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RBme-tyIgD3BoGVhD2R8_c4w9UE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.mft
Manifest number:          1884
Signing time:             Thu 26 Mar 2026 09:01:51 +0000
Manifest this update:     Thu 26 Mar 2026 09:01:51 +0000
Manifest next update:     Fri 27 Mar 2026 09:01:51 +0000
Files and hashes:         1: RBme-tyIgD3BoGVhD2R8_c4w9UE.crl (hash: 4Tpt3WLdPKCbJaxjTh4+JvEyN2aEBTq0toC0A1vYFkA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RBme-tyIgD3BoGVhD2R8_c4w9UE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:60:ed:f1:31:a9:10:3d:18:1b:cf:d9:26:10:30:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44199efadc88803dc1a065610f647cfdce30f541
        Validity
            Not Before: Mar 26 09:01:51 2026 GMT
            Not After : Mar 27 09:01:51 2026 GMT
        Subject: CN=6bb64aea21229575e70e5974afef4d17738c38e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:96:f2:87:b3:61:98:7f:ac:db:87:82:bf:86:
                    25:db:3f:46:85:fb:17:2f:d4:8f:31:14:24:3a:04:
                    6f:7e:3c:14:0f:1f:a3:7e:69:62:46:1c:4d:53:a2:
                    c8:fb:11:e9:01:22:ee:6e:67:a4:2d:b9:c3:f1:66:
                    57:d6:b4:bd:20:01:6c:45:77:75:58:8b:fc:9f:45:
                    21:ed:b5:2d:8e:34:78:2e:f9:79:ec:e4:9e:5a:2a:
                    52:2a:c5:38:77:37:0d:9b:22:11:f1:5a:6a:69:a7:
                    69:ba:be:bd:fb:b1:11:43:d9:0d:3a:78:23:f4:52:
                    6a:46:ab:9f:29:cc:be:ff:ac:c6:bb:6e:37:94:8e:
                    d6:5f:93:f4:3f:c0:4c:dc:91:41:6f:35:33:aa:8f:
                    75:45:d5:c9:07:bc:0c:e4:8d:18:e6:59:b7:3e:2c:
                    d6:c9:24:b5:17:0f:d7:19:b0:e8:1e:64:8b:61:ef:
                    ea:d8:74:6f:39:12:ec:22:19:c1:6d:ff:6d:92:97:
                    a1:da:56:e8:b8:0a:7c:aa:45:30:0c:f6:3b:71:9f:
                    27:64:42:78:50:98:cc:d8:15:5d:7c:03:96:c0:be:
                    ce:68:af:24:e1:06:bd:a7:da:5f:45:e9:b6:cf:89:
                    9a:0d:af:8f:f6:ac:68:99:7e:a0:c1:c4:30:b8:88:
                    a7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:B6:4A:EA:21:22:95:75:E7:0E:59:74:AF:EF:4D:17:73:8C:38:E5
            X509v3 Authority Key Identifier:
                keyid:44:19:9E:FA:DC:88:80:3D:C1:A0:65:61:0F:64:7C:FD:CE:30:F5:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBme-tyIgD3BoGVhD2R8_c4w9UE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:d9:3f:5f:ce:69:d1:8c:05:b5:d9:3e:a7:c5:27:8f:4b:2a:
         47:37:b9:3c:f2:45:5b:5c:4d:e4:20:01:d1:fc:21:dc:79:86:
         42:04:f9:6a:8e:3b:ba:41:8e:e9:e9:25:3a:f6:17:cf:c1:42:
         c6:39:fd:40:fc:30:2e:0c:73:1a:99:f8:8b:1c:6a:49:42:70:
         be:a5:2f:67:7d:3e:de:7c:b5:13:9c:2c:dd:83:36:25:a6:82:
         49:7b:97:e1:d8:1f:2a:0f:e6:e7:ef:81:f2:d8:91:48:10:29:
         be:2e:40:de:49:c9:03:01:30:d0:f2:9b:b4:94:96:66:c0:8b:
         76:d1:c0:f0:92:0e:ff:03:0b:e2:ba:2f:13:86:38:5a:64:2d:
         fd:2d:2c:7e:34:06:65:65:16:49:fe:12:3a:6d:e8:9b:f1:9f:
         08:08:36:2b:82:5c:1c:ac:81:b7:1b:36:d6:b5:12:94:35:ff:
         2d:e3:7c:e2:e7:5b:e5:1d:f4:fa:31:4d:5d:72:a8:cf:cf:ce:
         03:0d:e4:9e:08:9e:f4:e3:73:2e:e2:50:7b:a5:60:b4:b2:ec:
         eb:25:03:a0:27:13:28:64:b9:1b:05:a4:22:2a:16:31:85:88:
         79:c6:78:02:08:02:d3:ab:88:ff:9f:80:a1:a4:e8:f5:45:a9:
         f8:15:9d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:52:14 2026 by rpki-client