Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.mft
File:                     FRXi_vTTEkXcZwGL78M3TcDx7Gg.mft (raw, json)
Hash identifier:          qhF3zPevWS/9FeBQpTKCi4WCz9chFn37SKCNgCuNEaQ=
Subject key identifier:   6F:C7:BB:91:D8:E2:76:4C:BC:BF:C0:E3:02:28:D6:13:59:5C:12:5D
Authority key identifier: 15:15:E2:FE:F4:D3:12:45:DC:67:01:8B:EF:C3:37:4D:C0:F1:EC:68
Certificate issuer:       /CN=1515e2fef4d31245dc67018befc3374dc0f1ec68
Certificate serial:       019FA2CEE94782BE57D78FB521660E292477
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FRXi_vTTEkXcZwGL78M3TcDx7Gg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.mft
Manifest number:          19CC
Signing time:             Mon 27 Jul 2026 09:01:36 +0000
Manifest this update:     Mon 27 Jul 2026 09:01:36 +0000
Manifest next update:     Tue 28 Jul 2026 09:01:36 +0000
Files and hashes:         1: FRXi_vTTEkXcZwGL78M3TcDx7Gg.crl (hash: KRUlY4xKoGUFwc2SwV4U91x3HLE5ee8iDqhhxQQF390=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FRXi_vTTEkXcZwGL78M3TcDx7Gg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:ce:e9:47:82:be:57:d7:8f:b5:21:66:0e:29:24:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1515e2fef4d31245dc67018befc3374dc0f1ec68
        Validity
            Not Before: Jul 27 09:01:36 2026 GMT
            Not After : Jul 28 09:01:36 2026 GMT
        Subject: CN=6fc7bb91d8e2764cbcbfc0e30228d613595c125d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:69:91:f3:4f:f2:a0:51:88:7c:ef:5f:12:b1:
                    3c:f7:51:5b:48:0a:6b:38:de:37:99:3f:06:92:f9:
                    20:e4:ed:e3:bc:82:eb:24:dd:36:59:af:f9:b8:32:
                    6c:bd:13:b8:c2:9b:f1:98:16:96:57:5d:51:42:41:
                    22:81:fe:b2:e1:4c:8c:29:d2:06:99:e9:9d:6a:3f:
                    1b:82:74:52:a6:32:4e:9a:cb:18:19:64:5c:97:1f:
                    2a:00:9d:83:46:60:03:c3:21:2b:48:44:6e:0d:d6:
                    4f:fa:a7:32:28:f6:fa:2f:cf:f8:2d:96:ca:20:6f:
                    e0:b0:0d:95:d2:3a:d9:6f:bf:89:a7:f1:28:e1:f1:
                    c7:1a:2a:88:9a:73:ed:f2:a3:ed:ed:b8:fa:af:a5:
                    64:29:d5:5f:a8:0f:d1:aa:91:bc:bb:83:bf:1c:0a:
                    36:04:87:62:1a:ff:66:bc:e9:a9:eb:d2:f6:48:3b:
                    e9:34:56:af:cc:87:29:66:94:c1:e3:03:5e:db:ce:
                    4b:99:ce:eb:d9:b6:5a:e6:29:2c:7e:e7:ee:9a:72:
                    2b:06:4e:fb:86:0f:8b:cf:ff:ab:82:55:d4:cd:19:
                    a8:9a:59:1b:2e:59:a9:ab:9d:9a:d4:22:c2:c5:52:
                    ca:83:7d:16:b8:f6:a2:dc:21:7d:99:0d:72:31:0d:
                    d7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C7:BB:91:D8:E2:76:4C:BC:BF:C0:E3:02:28:D6:13:59:5C:12:5D
            X509v3 Authority Key Identifier:
                keyid:15:15:E2:FE:F4:D3:12:45:DC:67:01:8B:EF:C3:37:4D:C0:F1:EC:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FRXi_vTTEkXcZwGL78M3TcDx7Gg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:88:00:a9:f2:73:16:ce:41:11:11:7b:9c:fb:7f:8f:e6:37:
         0d:8c:03:f0:a6:31:96:ce:4e:fa:57:c3:bd:cd:7f:b3:b1:76:
         ab:94:d5:af:d0:73:b8:ea:06:c8:a7:30:29:1b:e7:04:af:c1:
         a2:d2:b2:09:5d:06:a0:1d:18:dc:7b:22:11:95:20:5a:dc:39:
         60:b8:51:9f:6c:55:b2:50:91:2c:eb:d6:60:64:94:d4:68:bd:
         1a:b9:ad:96:f9:bd:ff:7c:15:c4:cc:de:74:f7:a0:87:13:ff:
         2b:d2:8d:02:0e:5f:f0:64:6d:eb:2c:6d:ad:da:6b:f2:cf:35:
         e1:47:76:5e:04:24:33:4f:f0:0e:f4:87:f9:3e:36:df:2b:ac:
         b0:4c:0f:d4:95:f7:0a:67:f3:82:d8:c0:5c:a3:a6:e6:fe:7d:
         4f:61:da:08:53:30:98:36:94:fb:a5:f8:19:44:50:91:ce:58:
         a2:84:46:8e:11:af:64:5e:e1:32:b7:39:43:96:65:d1:55:04:
         fe:46:fb:f4:16:e4:c4:76:b5:83:18:52:0b:fe:ae:e3:37:bd:
         6f:e0:2e:aa:13:78:d9:fe:70:da:2d:15:86:84:af:4b:43:6a:
         75:3a:fe:5a:be:f8:bb:4f:6d:8d:e1:44:f2:65:8d:c2:56:24:
         e8:48:b6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:27:12 2026 by rpki-client