Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.mft
File:                     FbpmvA_Dsmut1y-1u4OHttvDP3c.mft (raw, json)
Hash identifier:          Ge5QtA1ydKR8Ay3oeTtfpN4vVJah2TtCz7Lp2a07wrs=
Subject key identifier:   B1:BA:F1:56:51:16:0D:D6:98:86:47:07:00:63:6F:1C:C5:64:41:46
Authority key identifier: 15:BA:66:BC:0F:C3:B2:6B:AD:D7:2F:B5:BB:83:87:B6:DB:C3:3F:77
Certificate issuer:       /CN=15ba66bc0fc3b26badd72fb5bb8387b6dbc33f77
Certificate serial:       0197B7B348F4177DB36BBE935EF0967EAD90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FbpmvA_Dsmut1y-1u4OHttvDP3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.mft
Manifest number:          15B2
Signing time:             Sat 28 Jun 2025 18:01:09 +0000
Manifest this update:     Sat 28 Jun 2025 18:01:09 +0000
Manifest next update:     Sun 29 Jun 2025 18:01:09 +0000
Files and hashes:         1: FbpmvA_Dsmut1y-1u4OHttvDP3c.crl (hash: yuzXeWCHVZrRsDXBCMfJtfNb26+Z2J2kpkDMyNEYe7g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FbpmvA_Dsmut1y-1u4OHttvDP3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b3:48:f4:17:7d:b3:6b:be:93:5e:f0:96:7e:ad:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15ba66bc0fc3b26badd72fb5bb8387b6dbc33f77
        Validity
            Not Before: Jun 28 18:01:09 2025 GMT
            Not After : Jun 29 18:01:09 2025 GMT
        Subject: CN=b1baf15651160dd69886470700636f1cc5644146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9b:93:ab:89:d0:7b:0a:f5:91:cf:70:bc:35:
                    6d:2a:76:cb:0c:d2:50:95:e2:c2:8b:89:27:0c:98:
                    71:10:17:82:44:56:53:d6:af:49:f3:25:2d:83:68:
                    dc:50:75:6a:79:b4:14:e0:29:65:d2:c2:fa:0b:35:
                    c6:32:ec:73:b6:91:c2:99:64:0e:7f:e7:01:73:89:
                    9d:a7:a3:53:8b:9a:89:8c:a6:e2:92:7a:af:0c:25:
                    fb:47:f3:53:de:27:ec:58:db:c6:ef:98:69:3f:03:
                    de:66:68:59:f0:c7:e5:5c:86:24:5c:21:8b:74:1c:
                    0b:b0:83:9a:33:29:09:25:76:39:c1:30:95:9b:4e:
                    15:41:66:e9:85:dc:65:69:43:25:2d:2e:54:49:04:
                    08:91:58:53:0e:db:b2:8e:0b:20:b0:d2:8a:29:29:
                    98:dc:78:f7:5f:e6:8f:c8:13:29:33:66:b3:35:65:
                    57:4b:88:aa:e8:e2:cd:dc:38:5a:66:13:fa:e0:2d:
                    fc:74:fb:08:cb:84:8b:36:e7:ed:28:e3:35:25:32:
                    af:93:6e:c6:05:78:96:3a:c7:97:92:8b:8c:5b:fe:
                    d2:19:28:3b:19:75:71:d9:87:a4:07:42:f6:bd:bf:
                    82:38:98:9c:bc:36:a7:42:08:b2:ff:bc:92:7f:31:
                    ae:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:BA:F1:56:51:16:0D:D6:98:86:47:07:00:63:6F:1C:C5:64:41:46
            X509v3 Authority Key Identifier:
                keyid:15:BA:66:BC:0F:C3:B2:6B:AD:D7:2F:B5:BB:83:87:B6:DB:C3:3F:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FbpmvA_Dsmut1y-1u4OHttvDP3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:46:fc:c4:69:90:dc:dc:c6:65:7c:88:c3:50:7e:3c:a4:75:
         1b:e5:62:c2:70:52:48:2c:3f:3b:7a:e0:b4:38:02:f1:2a:69:
         0e:52:ec:8a:5c:95:d8:90:36:cb:30:e2:13:ae:32:68:dd:46:
         f0:2b:18:60:42:f7:d2:93:ec:06:ee:07:56:db:ac:12:2d:48:
         50:4e:e0:2f:d7:ca:e6:f6:24:cc:25:f5:da:73:f8:8d:ad:8c:
         ff:c1:3d:9f:23:a6:72:97:ea:7d:75:41:b1:b9:c7:d6:1b:c1:
         54:8f:d6:4c:0a:26:26:52:e6:8a:37:cb:b2:7b:b2:c1:e5:b2:
         6f:6f:3e:61:52:29:a6:38:49:50:f2:5e:d5:24:fc:49:a4:d3:
         a6:b9:0e:33:79:76:27:68:67:e4:14:5e:53:f1:b0:e7:65:fd:
         ed:6a:bd:87:27:72:0e:67:82:ea:46:0b:02:98:77:51:1e:0d:
         d6:76:be:16:b9:9d:f3:97:4f:cf:58:68:11:5a:3c:74:01:85:
         38:88:4b:d8:52:d0:02:6a:29:00:cc:34:fe:17:7d:ad:33:69:
         81:fc:5a:73:5f:86:7c:b3:c8:7c:87:86:2b:ae:ed:72:f1:b9:
         d2:f6:02:31:24:3e:8c:83:43:27:32:cd:1a:9b:25:35:3f:f7:
         a7:bd:ef:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:27:32 2025 by rpki-client