Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.mft
File:                     FbpmvA_Dsmut1y-1u4OHttvDP3c.mft (raw, json)
Hash identifier:          TxFJH1PAAj1ruAFUdjHSs4F4ryiTv6x3t8g/8eyGfzs=
Subject key identifier:   22:5B:55:2F:41:2F:93:19:B7:62:4D:94:BB:12:91:F1:CC:3C:A4:DD
Authority key identifier: 15:BA:66:BC:0F:C3:B2:6B:AD:D7:2F:B5:BB:83:87:B6:DB:C3:3F:77
Certificate issuer:       /CN=15ba66bc0fc3b26badd72fb5bb8387b6dbc33f77
Certificate serial:       019D3977EABA4FFA8AFB1389C588E7297F56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FbpmvA_Dsmut1y-1u4OHttvDP3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.mft
Manifest number:          188C
Signing time:             Sun 29 Mar 2026 12:00:53 +0000
Manifest this update:     Sun 29 Mar 2026 12:00:53 +0000
Manifest next update:     Mon 30 Mar 2026 12:00:53 +0000
Files and hashes:         1: FbpmvA_Dsmut1y-1u4OHttvDP3c.crl (hash: R+7fIhiIkxSxAqYZDk19yUH88KBiB8RUwvA6Fp9CcBg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FbpmvA_Dsmut1y-1u4OHttvDP3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:77:ea:ba:4f:fa:8a:fb:13:89:c5:88:e7:29:7f:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15ba66bc0fc3b26badd72fb5bb8387b6dbc33f77
        Validity
            Not Before: Mar 29 12:00:53 2026 GMT
            Not After : Mar 30 12:00:53 2026 GMT
        Subject: CN=225b552f412f9319b7624d94bb1291f1cc3ca4dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ce:83:19:b7:bc:2b:75:84:b7:e1:a6:e7:4c:
                    ef:08:3f:72:66:b4:9e:0a:6e:ce:51:58:93:18:91:
                    fb:b8:a5:24:3e:d6:20:8a:14:47:98:a0:7e:f5:e6:
                    94:7a:57:14:26:1f:3f:8c:8e:ee:3a:5a:86:7a:a6:
                    cd:3c:95:75:55:f5:62:cc:fe:8d:5f:fa:88:dc:e4:
                    ad:02:9c:f7:22:9c:b4:e7:46:2e:32:ed:d6:86:bc:
                    9d:ff:11:20:c2:42:25:98:cb:d2:5f:95:6a:fc:82:
                    b1:f9:2a:b2:a5:f3:52:ff:fc:dd:b4:e0:45:a9:c9:
                    67:0c:ea:67:27:62:26:10:ca:d6:e0:77:e9:f3:ee:
                    d2:02:15:d4:1d:f0:a2:ca:b4:54:de:4d:b1:dd:e3:
                    ba:94:e6:6f:18:f1:8c:18:d8:03:0a:83:81:5f:1f:
                    6e:15:6c:e7:f0:21:22:f8:c3:5d:f0:68:e4:dd:79:
                    fb:2a:4e:43:11:7b:35:79:79:a3:d0:5d:00:41:6f:
                    80:54:92:52:aa:d8:6c:9f:2a:c5:2b:95:ae:d4:a4:
                    0a:36:78:c2:38:ff:8f:b7:15:c3:3b:5d:be:24:1e:
                    8f:06:fc:ba:e2:da:79:9b:96:13:a5:f9:ef:6e:15:
                    e7:e7:15:83:27:de:85:89:3d:05:f6:e5:84:5e:6d:
                    eb:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:5B:55:2F:41:2F:93:19:B7:62:4D:94:BB:12:91:F1:CC:3C:A4:DD
            X509v3 Authority Key Identifier:
                keyid:15:BA:66:BC:0F:C3:B2:6B:AD:D7:2F:B5:BB:83:87:B6:DB:C3:3F:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FbpmvA_Dsmut1y-1u4OHttvDP3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:8d:90:f9:cb:a4:1b:9c:c0:40:05:06:9f:e0:33:df:f2:a0:
         40:60:62:df:b5:a1:40:69:54:85:7d:db:b2:a1:54:e8:88:78:
         b7:17:de:e4:67:32:e5:e3:20:a8:09:74:93:cc:c1:40:f1:1a:
         16:54:4f:4e:94:98:b7:02:b4:9c:ab:5e:a0:7d:1e:61:46:3f:
         b2:c6:2b:12:9c:ac:3b:39:e2:c1:e6:39:fc:92:fe:28:cc:fb:
         07:48:df:13:c3:d7:35:d5:13:84:e7:8b:90:eb:e0:62:86:5c:
         e5:58:45:aa:b7:c8:7d:f1:8a:f2:92:85:8e:ac:96:4a:82:bb:
         69:c9:cf:d2:b5:7f:b4:f0:15:f3:45:6a:10:f8:5c:06:a0:23:
         cf:23:0a:77:82:a3:1f:9e:5e:3d:c3:c4:9b:98:26:b6:7c:50:
         f3:5f:16:1e:3d:c0:3b:e4:97:27:60:17:aa:03:f0:cc:61:9c:
         cd:66:55:e2:aa:c6:a5:52:b9:5c:73:12:01:01:bc:7d:01:57:
         db:84:73:53:84:b9:32:87:66:09:54:45:94:cf:32:82:28:ff:
         0f:85:7b:53:5c:4e:fa:7f:31:2e:af:63:71:0b:0d:9f:f4:a6:
         56:cc:f4:ae:fe:ac:ec:15:4f:f1:d9:59:75:6a:c8:bc:1f:9b:
         4e:66:72:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:06 2026 by rpki-client