Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/68fc65-d581-4378-b548-d9d6ab982218/1/PeLbtcG00xZ1vJ2hS_zbEApgHtE.mft
File:                     PeLbtcG00xZ1vJ2hS_zbEApgHtE.mft (raw, json)
Hash identifier:          1Qvv/9pKo6/s4COcLvlDZONC4jJYhexWUyDU7Qx6YgM=
Subject key identifier:   6A:C2:BB:53:54:8A:F5:08:B5:92:22:C1:C8:CB:AD:02:FE:B4:75:1E
Authority key identifier: 3D:E2:DB:B5:C1:B4:D3:16:75:BC:9D:A1:4B:FC:DB:10:0A:60:1E:D1
Certificate issuer:       /CN=3de2dbb5c1b4d31675bc9da14bfcdb100a601ed1
Certificate serial:       019D37C05B2D08541105F8534D0EBDCB9626
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PeLbtcG00xZ1vJ2hS_zbEApgHtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/68fc65-d581-4378-b548-d9d6ab982218/1/PeLbtcG00xZ1vJ2hS_zbEApgHtE.mft
Manifest number:          6E
Signing time:             Sun 29 Mar 2026 04:00:46 +0000
Manifest this update:     Sun 29 Mar 2026 04:00:46 +0000
Manifest next update:     Mon 30 Mar 2026 04:00:46 +0000
Files and hashes:         1: PeLbtcG00xZ1vJ2hS_zbEApgHtE.crl (hash: dF6gTGQHVdG8gkqh6xSFMxz1hGlTFmPvYl/dDOGB46o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/68fc65-d581-4378-b548-d9d6ab982218/1/PeLbtcG00xZ1vJ2hS_zbEApgHtE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/68fc65-d581-4378-b548-d9d6ab982218/1/PeLbtcG00xZ1vJ2hS_zbEApgHtE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PeLbtcG00xZ1vJ2hS_zbEApgHtE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:5b:2d:08:54:11:05:f8:53:4d:0e:bd:cb:96:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3de2dbb5c1b4d31675bc9da14bfcdb100a601ed1
        Validity
            Not Before: Mar 29 04:00:46 2026 GMT
            Not After : Mar 30 04:00:46 2026 GMT
        Subject: CN=6ac2bb53548af508b59222c1c8cbad02feb4751e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1b:35:4b:ca:35:04:c9:3c:d8:a3:90:43:18:
                    bd:ca:59:9b:48:12:f1:2d:03:7a:23:78:1a:25:3b:
                    ea:fa:14:42:bf:93:16:d4:60:5c:5d:90:df:7d:68:
                    62:71:4f:a7:26:63:7c:87:8c:2f:30:5c:7b:be:1f:
                    a8:1d:81:f6:a1:55:52:73:d1:0d:47:6b:9e:29:d9:
                    18:3a:2b:11:d4:e5:ed:0f:8a:ea:88:3a:e9:35:98:
                    a1:d1:a9:7c:7c:60:8c:a8:b6:e8:bf:0c:ee:c2:33:
                    64:5b:c3:3e:63:25:c1:28:74:5a:95:51:13:78:ed:
                    7b:1d:9e:d0:fc:d9:f8:09:08:1f:2d:79:0b:65:1a:
                    e6:7e:1a:5c:f2:54:3f:bc:04:ef:de:39:0b:32:12:
                    c8:6b:72:c0:9a:25:26:7e:f1:14:8d:20:a4:a4:67:
                    86:43:1e:b8:a4:8c:c0:70:6c:3f:b6:12:3e:1c:88:
                    ee:5f:84:8d:53:96:9e:9e:8c:dd:5a:b5:06:d3:58:
                    75:81:df:49:ef:4e:0a:9d:80:b0:33:0d:85:cb:8b:
                    85:9a:d6:d0:69:12:88:6d:34:74:ac:65:ba:09:6f:
                    ad:01:80:27:c0:93:cd:90:02:48:78:6a:58:a3:a3:
                    79:5f:55:5b:e7:ad:1c:24:23:ce:50:91:7a:c7:e1:
                    87:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:C2:BB:53:54:8A:F5:08:B5:92:22:C1:C8:CB:AD:02:FE:B4:75:1E
            X509v3 Authority Key Identifier:
                keyid:3D:E2:DB:B5:C1:B4:D3:16:75:BC:9D:A1:4B:FC:DB:10:0A:60:1E:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeLbtcG00xZ1vJ2hS_zbEApgHtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/68fc65-d581-4378-b548-d9d6ab982218/1/PeLbtcG00xZ1vJ2hS_zbEApgHtE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/68fc65-d581-4378-b548-d9d6ab982218/1/PeLbtcG00xZ1vJ2hS_zbEApgHtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:5e:26:99:10:dc:b0:3e:b0:64:59:c6:37:b8:c5:f2:1c:85:
         8c:fb:c3:ac:26:b3:bb:8e:d5:da:e0:fd:90:18:17:75:55:bf:
         8e:a1:2c:d6:df:1b:72:45:cc:86:2a:eb:27:c4:d4:c4:22:9a:
         1d:86:c4:6f:5e:fa:9b:80:81:f8:2e:c4:1f:9a:60:81:5f:12:
         1d:31:81:a6:78:45:b6:e9:58:e9:dc:ce:9c:c3:f3:51:32:37:
         2d:2e:ad:dc:bf:f4:66:bd:7e:20:c0:db:5b:bb:92:8f:34:15:
         37:51:63:d8:34:f3:25:8b:e7:ac:6b:34:50:19:7b:af:53:9b:
         b0:6e:3e:8d:7f:2b:b2:85:73:47:2b:19:25:6c:1a:dc:e0:a2:
         9e:69:b0:24:a7:c9:57:b1:00:90:79:0f:e5:8d:a4:41:7b:4f:
         84:f6:c5:6c:dc:c4:58:0e:98:c8:8d:50:35:aa:bc:81:5f:2c:
         d4:b1:85:f5:b7:32:7f:c7:17:37:51:a8:d8:24:ea:db:58:e0:
         3d:e0:43:fb:eb:8e:b1:53:e7:25:85:29:cc:fd:a2:99:99:dc:
         fe:82:78:3a:d1:ba:9d:df:11:5f:f1:69:b4:46:13:23:f5:e5:
         73:ff:de:a6:3a:24:52:8c:ba:19:9c:16:4d:c2:59:18:b5:d0:
         5b:f3:db:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:28:08 2026 by rpki-client