Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.mft
File:                     eSMEzs5_tlUdYh4ld0N1PX0-fro.mft (raw, json)
Hash identifier:          +3jtz7uCjzuw4pfvdE5eKgCPT1+oC8vfCrd7gzld48s=
Subject key identifier:   36:5B:BC:99:AD:F6:38:30:25:B5:85:B2:15:B8:81:4D:21:E5:1D:8A
Authority key identifier: 79:23:04:CE:CE:7F:B6:55:1D:62:1E:25:77:43:75:3D:7D:3E:7E:BA
Certificate issuer:       /CN=792304cece7fb6551d621e257743753d7d3e7eba
Certificate serial:       019F129C5494D214CFE45347E4D4CD264118
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eSMEzs5_tlUdYh4ld0N1PX0-fro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.mft
Manifest number:          16CA
Signing time:             Mon 29 Jun 2026 09:01:02 +0000
Manifest this update:     Mon 29 Jun 2026 09:01:02 +0000
Manifest next update:     Tue 30 Jun 2026 09:01:02 +0000
Files and hashes:         1: Gk0VdZH80LfuSionJyzH6apHdMk.roa (hash: v8qmy5Rl4qBq/+q1ZOoFGDMALQWTll59ihxVCNxLx/c=)
                          2: eSMEzs5_tlUdYh4ld0N1PX0-fro.crl (hash: W4d9h2SLX0AzuppXmw4EWr6ySvFV8jGTosb+2bTIkQM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eSMEzs5_tlUdYh4ld0N1PX0-fro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 09:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:9c:54:94:d2:14:cf:e4:53:47:e4:d4:cd:26:41:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=792304cece7fb6551d621e257743753d7d3e7eba
        Validity
            Not Before: Jun 29 09:01:02 2026 GMT
            Not After : Jun 30 09:01:02 2026 GMT
        Subject: CN=365bbc99adf6383025b585b215b8814d21e51d8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f6:0c:39:7b:a5:72:fa:7f:9f:af:66:11:70:
                    f6:36:39:57:0c:cf:ec:b4:34:58:fb:4f:30:8c:0a:
                    5a:c8:78:d7:3e:09:46:b2:38:aa:b5:49:38:fc:60:
                    85:d7:00:db:90:39:19:15:4c:42:b5:cf:32:b5:75:
                    86:1e:e0:16:3f:78:d3:0f:73:96:5a:75:42:bb:e8:
                    61:01:9d:90:77:d5:9e:00:f9:e0:9c:ce:dc:83:ae:
                    70:1b:04:da:61:ef:98:9f:94:35:2f:49:4c:41:bd:
                    39:79:ae:46:78:72:c1:45:0f:d1:f9:89:00:09:86:
                    48:30:fa:35:d8:73:03:83:2a:6d:cc:aa:0f:ee:2d:
                    fe:b9:c0:49:3c:38:5c:c3:67:a0:86:f3:1e:3f:29:
                    1d:8f:77:9a:8e:30:f9:25:75:8a:db:18:b0:5f:fd:
                    99:90:4d:96:20:11:76:09:33:00:8e:be:b3:6b:fe:
                    d1:a0:82:97:5f:53:54:bb:86:b3:22:db:24:67:40:
                    5c:f6:8f:c5:54:87:2a:e6:e1:67:91:eb:0f:c9:3f:
                    e2:71:a6:7a:ec:fd:e6:db:4d:3f:84:fc:f9:e6:83:
                    1a:75:23:8c:f3:06:6e:a3:ff:ad:5d:9e:f9:8b:f5:
                    a1:06:46:02:60:1e:7e:d8:42:ee:f7:02:52:eb:23:
                    cd:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:5B:BC:99:AD:F6:38:30:25:B5:85:B2:15:B8:81:4D:21:E5:1D:8A
            X509v3 Authority Key Identifier:
                keyid:79:23:04:CE:CE:7F:B6:55:1D:62:1E:25:77:43:75:3D:7D:3E:7E:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSMEzs5_tlUdYh4ld0N1PX0-fro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:d7:3b:46:1d:c3:72:98:7d:ae:cf:03:57:2e:c3:27:7e:ea:
         b3:60:6c:25:74:62:0f:1b:6d:b9:4d:3b:d5:67:af:f6:07:9a:
         6a:74:74:85:bf:22:63:b6:a6:13:dc:21:8b:8c:8e:87:f7:ff:
         43:90:ba:05:27:c4:5f:15:b3:18:18:28:0a:42:5b:68:d9:36:
         33:6c:b9:12:0e:7a:50:7f:0f:4a:89:91:99:c2:94:f0:cb:58:
         4c:f4:66:d9:3e:09:9d:60:a2:f8:41:2b:cc:c7:53:28:e3:a1:
         6b:68:ed:cf:2b:db:7c:cd:fb:e9:02:74:ed:08:65:d1:0b:6f:
         fc:2d:18:02:11:b7:e4:06:40:9d:22:50:0d:36:67:d6:86:ba:
         64:a2:ca:15:99:d3:62:4c:30:d5:89:2d:d1:57:80:45:1f:f3:
         6e:02:5f:43:d9:42:2a:5e:b6:a3:b3:20:61:dc:b1:d0:52:64:
         92:b3:14:14:e4:fc:d2:4d:03:c0:34:46:ae:17:54:60:63:16:
         ed:1f:ec:ca:c3:1c:ca:d2:77:ad:a9:bd:3f:4a:78:50:00:12:
         d7:9d:82:f7:3b:5c:2e:7b:10:03:d9:fc:a7:9a:4c:1c:01:1e:
         c9:22:30:8e:5a:40:65:36:86:6b:bd:97:30:91:32:96:20:88:
         1c:15:81:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 16:36:32 2026 by rpki-client