Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/bf9999-2341-4acf-84e9-b8866e941963/1/frYDcECoYM2RunejcY7VgMrfXdg.mft
File:                     frYDcECoYM2RunejcY7VgMrfXdg.mft (raw, json)
Hash identifier:          m216LHayPwcyfK52LxYWl3zq0cIIiAQR2rndSZ1TQzk=
Subject key identifier:   D2:E4:FE:15:BC:20:30:4D:52:87:6B:BA:0B:E6:BB:94:5A:CE:19:1A
Authority key identifier: 7E:B6:03:70:40:A8:60:CD:91:BA:77:A3:71:8E:D5:80:CA:DF:5D:D8
Certificate issuer:       /CN=7eb6037040a860cd91ba77a3718ed580cadf5dd8
Certificate serial:       01A08AFA80495A17858119088FC7BF7C6198
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/frYDcECoYM2RunejcY7VgMrfXdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/bf9999-2341-4acf-84e9-b8866e941963/1/frYDcECoYM2RunejcY7VgMrfXdg.mft
Manifest number:          0A29
Signing time:             Thu 10 Sep 2026 11:01:07 +0000
Manifest this update:     Thu 10 Sep 2026 11:01:07 +0000
Manifest next update:     Fri 11 Sep 2026 11:01:07 +0000
Files and hashes:         1: frYDcECoYM2RunejcY7VgMrfXdg.crl (hash: azaZwk3pde0lr3ALY8J5IDA3XLRYOaRcq8v5TGHnhwo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/bf9999-2341-4acf-84e9-b8866e941963/1/frYDcECoYM2RunejcY7VgMrfXdg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/bf9999-2341-4acf-84e9-b8866e941963/1/frYDcECoYM2RunejcY7VgMrfXdg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/frYDcECoYM2RunejcY7VgMrfXdg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 11:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:fa:80:49:5a:17:85:81:19:08:8f:c7:bf:7c:61:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb6037040a860cd91ba77a3718ed580cadf5dd8
        Validity
            Not Before: Sep 10 11:01:07 2026 GMT
            Not After : Sep 11 11:01:07 2026 GMT
        Subject: CN=d2e4fe15bc20304d52876bba0be6bb945ace191a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f9:88:ac:ec:51:1e:7e:ae:57:99:18:fc:b1:
                    07:32:45:8c:fd:73:cf:3f:3c:70:a2:eb:00:e4:30:
                    22:46:da:a1:f7:e7:40:34:ad:17:fa:60:69:de:10:
                    e8:e0:12:e4:32:09:dd:fc:aa:80:40:1a:1b:49:14:
                    aa:58:b2:ac:28:f5:88:47:11:af:c5:84:0b:cb:ad:
                    49:d0:f6:04:43:f2:82:a3:ff:78:18:00:ea:a1:f3:
                    45:35:35:a9:90:20:a0:72:37:3e:63:ed:0b:43:41:
                    2e:4c:23:a8:41:be:44:9f:7e:b9:51:c1:ad:4c:de:
                    b8:36:2e:88:91:79:e0:a1:d7:cd:7b:ee:98:08:27:
                    62:79:23:be:39:c5:e6:4e:8d:f2:30:9d:ac:e4:58:
                    b7:1c:86:89:92:b6:eb:9f:cf:79:b4:74:ce:8b:42:
                    bf:45:07:35:ba:30:28:c3:10:f3:c0:46:a6:1c:49:
                    0e:18:f0:79:d8:1d:55:54:fe:a7:d7:69:52:f4:3a:
                    f2:19:cb:b9:b6:99:26:56:71:25:12:9d:52:8d:39:
                    2d:34:fc:25:df:2b:6e:34:e9:da:7c:6a:9f:60:df:
                    f5:82:ff:e2:73:f1:ee:75:6a:dc:b8:52:6d:2e:20:
                    53:a4:6e:96:cf:62:4d:56:0c:f9:c3:d5:7b:a9:3d:
                    0b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E4:FE:15:BC:20:30:4D:52:87:6B:BA:0B:E6:BB:94:5A:CE:19:1A
            X509v3 Authority Key Identifier:
                keyid:7E:B6:03:70:40:A8:60:CD:91:BA:77:A3:71:8E:D5:80:CA:DF:5D:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/frYDcECoYM2RunejcY7VgMrfXdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf9999-2341-4acf-84e9-b8866e941963/1/frYDcECoYM2RunejcY7VgMrfXdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf9999-2341-4acf-84e9-b8866e941963/1/frYDcECoYM2RunejcY7VgMrfXdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:d8:f9:e4:53:1a:1c:ff:76:cf:da:38:f0:05:d4:ca:d3:d7:
         87:20:f0:d0:df:1a:4a:0f:94:87:e3:6b:32:d2:92:f4:dd:a8:
         6f:7f:c7:a1:53:e9:61:0f:f9:94:fa:fd:ec:64:d0:9f:78:b5:
         2a:e7:16:1e:5b:da:ea:2e:5a:4e:21:ac:bb:dd:6b:c7:56:61:
         b8:9d:92:4e:91:43:96:a3:e3:67:d2:ff:3c:65:c8:25:3b:97:
         56:b0:4c:d3:59:04:8a:e8:96:a5:d3:29:46:40:5d:45:aa:e4:
         9b:f0:6e:4d:db:7a:0c:76:db:c8:9c:7c:9c:39:bf:23:14:fc:
         ee:dd:fa:f9:e5:46:80:6b:83:81:c4:af:ec:af:ec:d5:23:47:
         62:d0:f1:69:34:b2:8d:ab:38:ec:e0:40:a6:ce:4c:57:a2:b0:
         d6:90:70:4b:c7:57:e1:de:dc:71:00:d6:3b:ac:01:b1:a0:28:
         e9:8c:31:33:b3:96:1e:88:80:e1:93:17:5e:13:1c:bd:ee:e9:
         75:b3:c3:1d:80:67:26:bd:65:39:74:7a:fe:ff:49:5f:eb:48:
         79:cc:49:f9:56:fc:97:fe:24:7d:8e:f7:6b:14:f7:c5:b9:77:
         57:80:34:8d:41:f1:d2:74:66:81:b9:fe:18:2d:d4:d5:37:56:
         64:61:11:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:30:50 2026 by rpki-client