Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7e0435-81eb-41d7-a01c-f12a76b17794/1/frzfht-AMLBc8PKqtbiehaeJSis.mft
File:                     frzfht-AMLBc8PKqtbiehaeJSis.mft (raw, json)
Hash identifier:          yY6loSL2qFzdL0zRkREH+pZgwXUSfJp03Le9uj8bDHo=
Subject key identifier:   04:B7:65:80:B2:02:2E:94:51:A3:62:A7:AD:8C:E5:75:09:D2:A8:1C
Authority key identifier: 7E:BC:DF:86:DF:80:30:B0:5C:F0:F2:AA:B5:B8:9E:85:A7:89:4A:2B
Certificate issuer:       /CN=7ebcdf86df8030b05cf0f2aab5b89e85a7894a2b
Certificate serial:       019FA0E05B6F5A4DA7D2DDB9F13E78A9C621
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/frzfht-AMLBc8PKqtbiehaeJSis.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/7e0435-81eb-41d7-a01c-f12a76b17794/1/frzfht-AMLBc8PKqtbiehaeJSis.mft
Manifest number:          48
Signing time:             Mon 27 Jul 2026 00:01:25 +0000
Manifest this update:     Mon 27 Jul 2026 00:01:25 +0000
Manifest next update:     Tue 28 Jul 2026 00:01:25 +0000
Files and hashes:         1: IeIctkgaKIoSXl0xABO5D4aMGm0.roa (hash: alUr92oBh+5kupDZ2cQazjDVzl26/j9Q/Em8OPc6Eg4=)
                          2: frzfht-AMLBc8PKqtbiehaeJSis.crl (hash: RI6bEhrtxJxpNuwdoxy10ZrLvt0zkdzning48cYXGxM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/7e0435-81eb-41d7-a01c-f12a76b17794/1/frzfht-AMLBc8PKqtbiehaeJSis.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/7e0435-81eb-41d7-a01c-f12a76b17794/1/frzfht-AMLBc8PKqtbiehaeJSis.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/frzfht-AMLBc8PKqtbiehaeJSis.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:e0:5b:6f:5a:4d:a7:d2:dd:b9:f1:3e:78:a9:c6:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ebcdf86df8030b05cf0f2aab5b89e85a7894a2b
        Validity
            Not Before: Jul 27 00:01:25 2026 GMT
            Not After : Jul 28 00:01:25 2026 GMT
        Subject: CN=04b76580b2022e9451a362a7ad8ce57509d2a81c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4a:d8:1c:53:c6:f9:06:f5:e1:1b:ea:98:ac:
                    ce:88:eb:fd:a1:b1:e9:07:a4:55:4f:f7:8e:c0:d2:
                    0b:76:0b:2e:52:ef:8d:f0:4d:df:28:1d:69:55:66:
                    ec:0a:e5:3b:19:ca:34:ea:b8:8e:88:f9:a2:3d:e0:
                    6f:8c:04:f0:b6:34:0e:48:39:40:2a:fa:93:ff:40:
                    d3:0d:7e:8c:2e:74:b6:88:f1:7c:18:f7:96:7b:e3:
                    57:b1:a8:ea:c9:f6:f2:e2:7a:1f:73:c9:ee:30:f9:
                    af:75:06:f8:b9:4a:bc:c0:af:f7:84:8d:37:2a:99:
                    bb:4e:37:c7:0c:70:82:6f:2c:7d:a0:5d:2c:37:77:
                    6e:f0:20:80:7c:08:6c:49:ba:38:ca:fc:5a:df:9a:
                    b2:67:9f:82:0e:be:30:ce:82:ce:87:c4:ac:df:15:
                    c2:5d:f7:aa:52:af:00:1a:05:45:2a:0f:31:b7:85:
                    8d:ed:f2:5c:ca:b6:ee:d8:5a:5f:22:c2:5f:88:bb:
                    18:b7:44:4b:a2:2e:31:88:d5:bb:e6:87:48:9a:dd:
                    27:d1:ec:eb:4c:37:47:50:40:13:6a:c4:90:4f:6e:
                    f6:7b:03:1f:e6:f9:e6:36:ba:e8:95:85:9e:e7:72:
                    ab:de:f1:c3:31:ba:b9:96:a2:64:0e:3a:94:d4:7c:
                    d0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:B7:65:80:B2:02:2E:94:51:A3:62:A7:AD:8C:E5:75:09:D2:A8:1C
            X509v3 Authority Key Identifier:
                keyid:7E:BC:DF:86:DF:80:30:B0:5C:F0:F2:AA:B5:B8:9E:85:A7:89:4A:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/frzfht-AMLBc8PKqtbiehaeJSis.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7e0435-81eb-41d7-a01c-f12a76b17794/1/frzfht-AMLBc8PKqtbiehaeJSis.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7e0435-81eb-41d7-a01c-f12a76b17794/1/frzfht-AMLBc8PKqtbiehaeJSis.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:f6:f2:17:95:be:77:54:9e:bb:8b:03:03:4d:23:bb:7c:38:
         a3:18:a7:06:94:1a:c4:11:d8:92:7b:9c:b0:97:e6:70:af:2f:
         52:ab:1e:1c:a2:72:a5:13:86:71:a5:94:d4:e7:1f:51:90:fd:
         e3:f2:0f:a4:d5:a7:a0:c3:0f:f7:eb:25:e3:17:3c:ba:e8:8e:
         f8:cb:b7:26:23:fc:4a:2e:92:14:d9:46:ca:44:8d:84:cc:4f:
         58:27:4f:e7:af:5b:40:7d:9b:01:3e:79:06:81:78:13:0f:68:
         84:00:d0:76:92:67:35:f6:05:7f:ea:ca:4a:96:83:06:c8:d9:
         55:ae:9c:96:ca:61:d3:b0:fc:7f:42:02:2b:fd:d9:b7:48:f1:
         57:d2:89:2a:94:8c:8f:ba:97:29:52:54:af:04:40:7a:7b:95:
         72:ff:23:b1:28:08:5d:f3:d8:05:6d:9b:10:f3:86:1d:21:65:
         f3:be:f5:08:c6:90:c5:f7:45:09:5f:09:35:a9:e6:69:9c:ef:
         b0:56:37:86:92:97:76:bd:6e:8d:c0:e2:78:60:dc:36:b6:ea:
         ff:c2:dd:6f:af:9e:a1:d1:67:78:29:60:26:7c:31:46:36:c4:
         54:24:26:56:1d:b9:67:33:f6:0c:3c:3c:00:b8:51:ab:6a:c4:
         e4:9a:a0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:49:47 2026 by rpki-client