Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft
File:                     FReBYmtMfEio3NUUxqdUn_tPY6o.mft (raw, json)
Hash identifier:          dziem4eUc1lH4zYsWb3Lzofvw4f4XTdT6ked17e1kT8=
Subject key identifier:   14:70:83:C2:7B:0D:2B:55:EE:20:48:25:19:F6:08:F8:58:15:6C:F4
Authority key identifier: 15:17:81:62:6B:4C:7C:48:A8:DC:D5:14:C6:A7:54:9F:FB:4F:63:AA
Certificate issuer:       /CN=151781626b4c7c48a8dcd514c6a7549ffb4f63aa
Certificate serial:       019D9962E9800E63D65093CBA9246E9A97EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FReBYmtMfEio3NUUxqdUn_tPY6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft
Manifest number:          18BF
Signing time:             Fri 17 Apr 2026 03:01:29 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:29 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:29 +0000
Files and hashes:         1: FReBYmtMfEio3NUUxqdUn_tPY6o.crl (hash: l1ZuUWS0GMRuaSxNwNKaZKIRJgHRhbHFypdCnpRFYEs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FReBYmtMfEio3NUUxqdUn_tPY6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:e9:80:0e:63:d6:50:93:cb:a9:24:6e:9a:97:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=151781626b4c7c48a8dcd514c6a7549ffb4f63aa
        Validity
            Not Before: Apr 17 03:01:29 2026 GMT
            Not After : Apr 18 03:01:29 2026 GMT
        Subject: CN=147083c27b0d2b55ee20482519f608f858156cf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e3:19:60:86:ff:af:f9:98:23:22:32:e2:61:
                    b8:75:63:a3:0f:a3:26:7b:93:82:78:d5:d0:0d:b7:
                    26:46:1b:80:53:d2:c1:be:4d:c9:0b:9a:46:54:c0:
                    41:62:ae:8b:eb:b9:d0:b5:a2:32:aa:63:54:00:d1:
                    d5:d9:33:f1:4a:fe:c0:06:0e:2f:1d:a5:b1:a8:4b:
                    76:b6:df:7e:b7:9a:1a:a4:e1:2f:9d:55:4c:da:9f:
                    4e:08:f3:4c:70:ef:19:15:c9:d4:86:81:1a:cd:16:
                    b7:f4:3f:6b:be:42:06:09:77:15:9a:7a:e6:93:b4:
                    3e:20:cb:95:fd:6e:00:2d:66:52:ad:de:0f:c6:92:
                    db:98:28:70:84:60:d4:da:5b:dd:bf:9b:f6:98:16:
                    0b:8b:f5:fc:ec:b0:13:a5:c5:4a:05:cd:9d:45:25:
                    2b:0b:7a:71:c2:8e:20:db:0a:9d:b0:2a:83:40:cd:
                    9d:ad:8c:4a:5f:b9:65:5c:8c:bf:4a:b3:07:e4:ee:
                    d2:ea:b7:1d:e0:d3:b8:e3:03:12:f8:ae:6f:77:6c:
                    46:e1:ac:81:9a:5a:7a:f2:f8:30:8e:58:b7:ce:e2:
                    6b:6c:ef:84:86:04:17:a5:bb:f0:9c:8e:27:5e:af:
                    2b:55:9a:49:0c:39:07:e1:2b:96:91:f7:8c:ca:b7:
                    28:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:70:83:C2:7B:0D:2B:55:EE:20:48:25:19:F6:08:F8:58:15:6C:F4
            X509v3 Authority Key Identifier:
                keyid:15:17:81:62:6B:4C:7C:48:A8:DC:D5:14:C6:A7:54:9F:FB:4F:63:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FReBYmtMfEio3NUUxqdUn_tPY6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:7e:94:af:f5:b1:4d:17:2c:f1:56:41:b8:36:25:8b:74:33:
         fd:fe:0e:08:d0:09:84:b4:bb:d1:77:af:eb:de:f9:1e:d8:d1:
         a9:92:c3:38:1b:64:5d:74:93:79:92:6b:da:ae:6d:c0:07:d1:
         b7:5e:9e:69:45:59:47:39:56:f6:67:9a:aa:dc:00:4c:e6:67:
         43:9b:60:c1:ad:8f:74:6b:8b:5f:e7:ca:53:ae:e1:9c:d4:50:
         66:d1:df:e6:56:1b:17:f0:49:6a:89:5a:78:b9:44:57:14:28:
         0f:86:8c:38:ab:86:78:44:f5:6c:cc:7f:91:c3:9e:cb:d7:46:
         b4:ad:50:a6:b1:5d:bd:7d:80:8e:a2:5a:37:2c:a4:be:7e:e2:
         0f:b7:55:67:33:d5:2c:fc:3c:b2:1c:c4:dd:25:12:e9:59:ef:
         aa:cc:1b:ee:6f:39:62:80:0a:a4:1b:da:be:8f:fe:bb:25:74:
         69:37:68:45:ab:13:c7:b4:d9:93:40:74:ae:c5:33:b4:fb:0b:
         d5:00:b9:d2:7f:24:d4:bd:9e:20:d6:cd:ee:b4:16:9f:ca:6c:
         c2:a8:a2:79:ff:43:97:29:87:5a:c1:7e:cf:2c:62:fd:2e:cf:
         b7:e9:1f:dd:80:b2:fb:5a:00:b5:0d:05:c2:72:2f:7b:b3:62:
         8b:88:06:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:08:46 2026 by rpki-client