Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.mft
File:                     FbpmvA_Dsmut1y-1u4OHttvDP3c.mft (raw, json)
Hash identifier:          oZYIC614kDIUj1FBKJlLuFwEmxrQNNgMGGDeFdZb9dA=
Subject key identifier:   A1:58:31:E6:A7:E7:DA:9C:B8:AA:93:0F:CA:25:59:9A:76:59:25:F0
Authority key identifier: 15:BA:66:BC:0F:C3:B2:6B:AD:D7:2F:B5:BB:83:87:B6:DB:C3:3F:77
Certificate issuer:       /CN=15ba66bc0fc3b26badd72fb5bb8387b6dbc33f77
Certificate serial:       019D2816CBFE0A7E2F2ED92D055F40B46DDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FbpmvA_Dsmut1y-1u4OHttvDP3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.mft
Manifest number:          1883
Signing time:             Thu 26 Mar 2026 03:01:15 +0000
Manifest this update:     Thu 26 Mar 2026 03:01:15 +0000
Manifest next update:     Fri 27 Mar 2026 03:01:15 +0000
Files and hashes:         1: FbpmvA_Dsmut1y-1u4OHttvDP3c.crl (hash: BY0avxXbZwy6VG7SuwWN5fVxcgdPaNHxGxdmYwMIA1g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FbpmvA_Dsmut1y-1u4OHttvDP3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 03:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:cb:fe:0a:7e:2f:2e:d9:2d:05:5f:40:b4:6d:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15ba66bc0fc3b26badd72fb5bb8387b6dbc33f77
        Validity
            Not Before: Mar 26 03:01:15 2026 GMT
            Not After : Mar 27 03:01:15 2026 GMT
        Subject: CN=a15831e6a7e7da9cb8aa930fca25599a765925f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d2:f7:0d:d4:f5:3d:ed:57:61:87:65:4a:97:
                    00:65:78:b5:01:d3:86:2a:09:3c:bc:85:9a:2d:ed:
                    ed:78:f3:22:31:83:a3:99:3a:08:be:63:94:0e:a3:
                    e0:fe:43:31:71:6c:23:e6:3e:d7:30:87:01:2e:86:
                    0b:32:63:cd:91:d9:af:f3:96:47:36:b6:cd:95:65:
                    af:1c:2e:a6:18:7d:4f:4e:cc:ed:3d:2b:02:7b:8c:
                    0f:c5:c7:fb:81:93:a0:df:6a:34:09:2e:27:20:6f:
                    06:a2:b1:84:09:d7:5c:b1:d4:1a:72:3f:3f:04:dc:
                    51:e4:a4:ee:26:f1:cb:bb:71:70:43:77:0b:c7:d2:
                    8b:f0:13:c8:f5:37:c5:13:3d:74:8d:45:43:49:04:
                    b7:2e:88:27:ac:6d:e9:51:17:4f:7a:f1:98:6e:42:
                    00:9e:34:85:e5:18:77:67:6d:92:1c:ba:73:84:c7:
                    85:f5:25:e6:f6:75:f9:b2:7d:87:90:dd:28:91:3e:
                    36:b8:14:a3:f2:67:55:a9:e4:6e:96:a4:06:5e:48:
                    46:13:3c:8b:06:a6:d7:92:0a:38:5d:6f:ea:5f:dc:
                    47:c7:6c:f5:29:72:42:9c:cd:d8:72:ef:10:2a:be:
                    d2:28:70:a3:b2:0b:88:13:44:90:d5:03:ec:88:e4:
                    63:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:58:31:E6:A7:E7:DA:9C:B8:AA:93:0F:CA:25:59:9A:76:59:25:F0
            X509v3 Authority Key Identifier:
                keyid:15:BA:66:BC:0F:C3:B2:6B:AD:D7:2F:B5:BB:83:87:B6:DB:C3:3F:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FbpmvA_Dsmut1y-1u4OHttvDP3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:8a:2b:2e:d8:b9:8f:62:6d:cd:16:05:26:99:c6:59:59:bb:
         b3:7a:97:42:ee:73:8a:9e:8d:df:90:42:41:93:63:95:ce:a8:
         03:3c:c0:c5:fc:a3:58:f2:a3:07:44:a5:88:42:51:5b:71:c2:
         1a:7c:76:30:ca:f5:03:9b:f9:80:08:bf:03:8d:fe:3d:60:af:
         bd:c5:27:43:c1:45:46:3f:dd:ae:1f:e9:b3:4a:b5:12:54:28:
         f4:f5:e6:25:1d:44:c9:df:5b:53:1a:08:4d:3f:99:f5:61:e9:
         12:cd:9e:0e:f1:44:fd:21:69:e1:d9:7d:ac:ce:10:2c:b6:2c:
         47:b5:3d:34:ed:f4:a7:fc:3d:af:2b:21:d7:20:bf:5d:54:e3:
         2c:88:b2:26:ee:08:49:3a:d8:e4:8c:c2:06:95:c3:d3:89:4b:
         f5:fa:ff:f4:5f:fc:73:10:04:d9:4a:5e:a0:63:f7:cc:08:e3:
         97:70:2c:d2:23:60:9d:3d:40:d0:b1:9b:30:ff:8f:3c:1c:d9:
         d1:26:c3:8e:83:3e:a4:42:9f:6a:ca:cc:10:a2:33:c7:40:7d:
         55:13:4f:2b:7c:e4:c8:68:96:4b:35:80:e5:e0:b9:15:0c:b2:
         15:96:b6:f5:01:09:80:03:fa:c8:6d:41:f0:3c:37:a6:d2:19:
         ec:4e:66:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:08:25 2026 by rpki-client