Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft
File:                     FReBYmtMfEio3NUUxqdUn_tPY6o.mft (raw, json)
Hash identifier:          EnE6YPXxu9gK6JBD+AY6QQNC2B5sFzBwGzT2lUgvI0k=
Subject key identifier:   06:00:15:4E:0D:16:39:5A:68:CD:77:B8:A7:0B:58:BA:48:9F:24:D5
Authority key identifier: 15:17:81:62:6B:4C:7C:48:A8:DC:D5:14:C6:A7:54:9F:FB:4F:63:AA
Certificate issuer:       /CN=151781626b4c7c48a8dcd514c6a7549ffb4f63aa
Certificate serial:       019D2772B7F444C9F1342D3185F648801FC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FReBYmtMfEio3NUUxqdUn_tPY6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft
Manifest number:          1884
Signing time:             Thu 26 Mar 2026 00:02:02 +0000
Manifest this update:     Thu 26 Mar 2026 00:02:02 +0000
Manifest next update:     Fri 27 Mar 2026 00:02:02 +0000
Files and hashes:         1: FReBYmtMfEio3NUUxqdUn_tPY6o.crl (hash: LjyXo4BjSFJprJBwBVofR/pbNOP5ZHav3ivqLZUgnYE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FReBYmtMfEio3NUUxqdUn_tPY6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:b7:f4:44:c9:f1:34:2d:31:85:f6:48:80:1f:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=151781626b4c7c48a8dcd514c6a7549ffb4f63aa
        Validity
            Not Before: Mar 26 00:02:02 2026 GMT
            Not After : Mar 27 00:02:02 2026 GMT
        Subject: CN=0600154e0d16395a68cd77b8a70b58ba489f24d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e9:81:85:c7:0d:cd:fb:ea:ac:65:3e:ac:4f:
                    2b:03:b7:27:78:e0:90:8a:f6:44:4d:a8:4c:87:b8:
                    7a:03:70:6f:96:ae:0e:69:a8:b6:bd:e7:1d:40:fc:
                    5d:5c:e2:46:2b:60:e3:c1:36:be:1c:c4:b9:2e:74:
                    23:f5:a9:d2:34:4a:85:81:ae:24:2a:cc:4c:e1:29:
                    51:eb:26:24:09:fd:4e:69:11:96:7e:f3:8b:38:91:
                    27:9c:52:0f:9d:77:50:84:a0:98:62:cf:97:7f:a7:
                    c7:53:71:99:16:61:81:a3:bf:a9:3e:42:42:2d:2e:
                    7d:89:56:a0:73:72:ef:27:55:4e:a8:b1:3d:4b:a4:
                    ab:f3:75:f0:33:0b:dd:4f:0f:0d:50:a7:81:b5:d8:
                    8c:bb:cd:e3:2d:b4:5f:a1:5d:78:f7:bf:63:20:a7:
                    c2:f5:66:69:25:ab:28:71:d2:f7:50:76:72:26:93:
                    67:28:0f:83:a9:60:f7:99:6e:86:fd:54:a9:d8:8c:
                    60:e9:0c:51:b6:9c:b8:69:95:c8:c8:f6:bc:bc:99:
                    d5:7a:52:a3:70:c4:62:f9:8d:08:35:e7:aa:a7:de:
                    83:17:57:1e:25:c5:34:33:32:e2:4b:e8:e3:a8:a2:
                    e7:a0:3d:48:b6:be:82:d4:f3:e9:d4:b4:be:fd:b1:
                    6b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:00:15:4E:0D:16:39:5A:68:CD:77:B8:A7:0B:58:BA:48:9F:24:D5
            X509v3 Authority Key Identifier:
                keyid:15:17:81:62:6B:4C:7C:48:A8:DC:D5:14:C6:A7:54:9F:FB:4F:63:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FReBYmtMfEio3NUUxqdUn_tPY6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:b9:04:14:3c:9a:92:25:eb:d9:0b:6a:4d:75:c0:5f:2a:5c:
         4e:27:57:4a:60:91:19:dc:1c:fd:9e:07:08:bb:cc:04:cb:71:
         b1:f8:3c:be:98:6b:40:bf:3f:51:af:33:08:e4:a6:43:b5:76:
         d4:21:2e:cf:9d:77:3c:10:c4:ce:b9:50:ab:5c:a4:ff:7d:e7:
         ec:45:b6:5f:e5:5a:4c:ca:4b:55:50:6f:2e:4a:ba:29:98:ce:
         58:f2:b6:0c:87:81:6d:28:9f:4d:a3:92:35:c1:bc:9c:7b:63:
         6f:e4:54:58:4d:0e:16:17:5d:d0:00:a5:f8:f9:b6:6a:6b:ef:
         5f:91:79:0d:de:9b:25:49:c9:65:26:13:67:32:31:87:49:ec:
         20:7c:d5:81:e8:1f:34:72:b2:5e:6a:e2:90:3e:30:a2:93:9f:
         a7:33:8e:17:ab:77:3b:1b:af:97:74:23:d1:39:24:cd:11:78:
         c3:b2:64:f8:f7:dc:1f:47:9d:74:d1:b3:e4:a6:2d:70:ce:cc:
         bd:63:ff:27:86:81:86:f1:96:69:99:cc:63:21:fd:52:0b:84:
         d8:4e:b5:7a:af:c1:01:ea:5f:ae:f1:0f:b6:89:b6:60:78:09:
         d1:f2:de:15:2d:31:dc:7d:3e:bf:da:14:8c:eb:dd:51:6d:cb:
         4b:42:7c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:39:05 2026 by rpki-client