Manifest

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft
File:                     5D35939557110CC43429AE301F7CEF0E5889942B.mft (raw, json)
Hash identifier:          iqUdbyzCTd1nwPbb8GeF/uhGyTG0p1Xsrn7EW9O3c4Y=
Subject key identifier:   6F:8E:EE:EA:DA:27:A8:55:68:4E:53:33:59:8C:D3:E7:26:F9:78:59
Authority key identifier: 5D:35:93:95:57:11:0C:C4:34:29:AE:30:1F:7C:EF:0E:58:89:94:2B
Certificate issuer:       /CN=A912C8360000/serialNumber=5D35939557110CC43429AE301F7CEF0E5889942B
Certificate serial:       4A0307BF5569D3E5DFF8501C21B19A74B6157EA9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft
Manifest number:          10CC
Signing time:             Sun 19 Apr 2026 13:29:18 +0000
Manifest this update:     Sun 19 Apr 2026 13:24:18 +0000
Manifest next update:     Mon 20 Apr 2026 17:14:18 +0000
Files and hashes:         1: 5D35939557110CC43429AE301F7CEF0E5889942B.crl (hash: rAmbts6Iv5c6/hO8Ve5BL6oC3kEN+ZsnWiIaIIF/MYw=)
                          2: 3130332e3134342e3137362e302f32332d3234203d3e203533333536.roa (hash: YytRpirPqYvlv61GjwTryxF750xDHjrR2dBNAMmlTNg=)
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 17:14:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:03:07:bf:55:69:d3:e5:df:f8:50:1c:21:b1:9a:74:b6:15:7e:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C8360000, serialNumber=5D35939557110CC43429AE301F7CEF0E5889942B
        Validity
            Not Before: Apr 19 13:24:18 2026 GMT
            Not After : Apr 20 17:14:18 2026 GMT
        Subject: CN=6F8EEEEADA27A855684E5333598CD3E726F97859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:80:ae:b6:0b:fd:c5:b7:7e:20:2d:15:22:76:
                    ec:2f:08:46:04:df:4b:e9:d8:eb:9d:66:ea:1f:b6:
                    02:f2:f8:72:59:a2:85:75:6c:f4:1f:22:15:ac:2f:
                    67:7f:18:4a:d1:52:d2:c5:58:ee:79:a5:5c:a6:08:
                    76:11:ce:6f:a3:50:50:51:95:71:1f:d3:67:8e:6d:
                    e6:d9:9e:f5:0d:0c:a5:70:fa:1f:d3:af:ad:47:40:
                    cb:99:bd:c3:b3:bc:6e:a8:43:cf:33:74:ba:1c:47:
                    de:ac:ac:d2:67:b5:a6:8c:60:6b:c3:4d:1b:28:4e:
                    77:84:3a:94:0a:14:fc:25:c9:45:30:b4:77:e7:bf:
                    b5:bd:a8:4d:ca:f3:25:b9:03:ed:27:f4:03:05:23:
                    dd:41:06:5d:d6:b4:94:76:9f:75:d8:b0:e9:ec:f7:
                    c4:cc:53:a2:f6:c1:d0:91:e2:9b:a6:47:0e:91:36:
                    dc:35:3b:da:50:ba:40:a1:1e:44:8a:c0:0f:44:f8:
                    d9:8e:b0:73:f2:42:20:24:39:fb:a9:62:7c:ab:32:
                    6a:fc:1d:07:49:9c:c0:fa:ac:42:df:01:68:16:17:
                    aa:aa:87:60:70:03:36:82:76:28:8c:bd:f9:b7:ac:
                    be:04:bf:95:c2:be:e6:99:76:3e:bb:44:9a:60:85:
                    66:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:8E:EE:EA:DA:27:A8:55:68:4E:53:33:59:8C:D3:E7:26:F9:78:59
            X509v3 Authority Key Identifier:
                keyid:5D:35:93:95:57:11:0C:C4:34:29:AE:30:1F:7C:EF:0E:58:89:94:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:91:16:5b:08:85:b8:e0:0a:0f:80:bf:2a:89:f0:d7:56:5d:
         9e:45:37:bb:d9:a2:52:da:82:cb:d9:2c:78:bf:22:0c:93:a3:
         fe:11:53:63:70:fa:20:5c:18:17:85:7b:06:75:a4:91:9c:5f:
         76:11:54:27:cf:82:13:d0:a3:44:43:3e:cc:14:5e:e6:5c:f8:
         7e:b8:89:1a:5c:87:74:50:97:9d:55:ee:11:e0:51:70:9f:a6:
         7b:39:15:52:bf:b8:0f:55:c9:df:c9:39:5a:d1:8e:22:1d:1c:
         2a:c6:c3:1f:7c:f3:ab:2d:af:84:e9:53:cc:fb:64:40:9a:c8:
         d1:97:cb:8a:3a:72:95:42:b8:b3:d3:19:36:0b:75:f7:47:99:
         8f:64:e1:72:d9:ac:f9:ea:11:dd:bc:8f:a8:17:2a:c1:6e:57:
         56:07:87:7f:d9:ff:44:7d:41:95:be:ea:20:a9:3d:8e:54:a2:
         1c:10:9f:bf:1c:49:62:a2:4d:9d:d3:62:84:d6:a5:32:ec:12:
         e6:26:dd:da:ff:9f:5c:37:28:ab:8d:1a:93:34:5a:2a:34:a2:
         56:3c:3e:2c:1c:54:9d:7d:22:ac:b4:40:88:11:53:4e:b9:c0:
         ab:68:0c:7f:4e:18:72:10:0f:0d:57:5f:90:d8:7c:4a:ca:9c:
         b8:37:3d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 08:26:12 2026 by rpki-client