Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/7e0435-81eb-41d7-a01c-f12a76b17794/1/frzfht-AMLBc8PKqtbiehaeJSis.mft
File:                     frzfht-AMLBc8PKqtbiehaeJSis.mft (raw, json)
Hash identifier:          VJ6Hoh2ycZZ4RME6gp2YUMSMaQpyrDkWhhuzZ6vS5wY=
Subject key identifier:   4B:E2:17:E8:80:49:C3:9C:AE:73:32:16:0B:F2:1D:71:00:DA:06:21
Authority key identifier: 7E:BC:DF:86:DF:80:30:B0:5C:F0:F2:AA:B5:B8:9E:85:A7:89:4A:2B
Certificate issuer:       /CN=7ebcdf86df8030b05cf0f2aab5b89e85a7894a2b
Certificate serial:       01A1DE704CC083BBFE4512DF404DD6329796
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/frzfht-AMLBc8PKqtbiehaeJSis.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/7e0435-81eb-41d7-a01c-f12a76b17794/1/frzfht-AMLBc8PKqtbiehaeJSis.mft
Manifest number:          0171
Signing time:             Sun 15 Nov 2026 09:01:03 +0000
Manifest this update:     Sun 15 Nov 2026 09:01:03 +0000
Manifest next update:     Mon 16 Nov 2026 09:01:03 +0000
Files and hashes:         1: IeIctkgaKIoSXl0xABO5D4aMGm0.roa (hash: alUr92oBh+5kupDZ2cQazjDVzl26/j9Q/Em8OPc6Eg4=)
                          2: frzfht-AMLBc8PKqtbiehaeJSis.crl (hash: HIR2in5wV1QAtO/09jwMOSXY1yK972cqoft/HYFTUXU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/7e0435-81eb-41d7-a01c-f12a76b17794/1/frzfht-AMLBc8PKqtbiehaeJSis.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/7e0435-81eb-41d7-a01c-f12a76b17794/1/frzfht-AMLBc8PKqtbiehaeJSis.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/frzfht-AMLBc8PKqtbiehaeJSis.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 09:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:70:4c:c0:83:bb:fe:45:12:df:40:4d:d6:32:97:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ebcdf86df8030b05cf0f2aab5b89e85a7894a2b
        Validity
            Not Before: Nov 15 09:01:03 2026 GMT
            Not After : Nov 16 09:01:03 2026 GMT
        Subject: CN=4be217e88049c39cae7332160bf21d7100da0621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:65:db:a0:cc:3d:d6:bf:2f:7d:f5:7d:66:44:
                    dd:a9:af:d7:97:29:5b:93:1a:09:fa:89:91:30:80:
                    ee:57:fd:0b:5d:02:53:4c:ee:ce:8c:44:80:ed:41:
                    bd:b3:6e:63:52:5f:1b:81:fe:42:cc:8d:cb:bc:c3:
                    88:ac:c5:75:9a:16:4a:d1:ec:28:6e:4c:a4:4d:2f:
                    d5:fe:22:88:7d:04:4d:87:2d:48:7a:18:7a:29:52:
                    9e:b4:1a:4b:12:86:7d:93:a0:04:71:75:46:11:a2:
                    a9:2d:d1:69:68:aa:7c:80:18:7b:98:c3:e2:36:b6:
                    6f:ee:f2:5a:07:82:1f:9c:16:76:2f:c5:33:8e:45:
                    3f:ce:1a:b9:6b:90:3a:02:ab:ce:7b:5b:d2:f5:30:
                    55:cd:89:03:fd:ea:4e:ae:37:1e:9a:25:7b:61:52:
                    d7:f4:76:da:91:8b:52:9a:f0:5c:38:da:0e:40:02:
                    fc:05:33:92:d3:4f:8c:34:b5:7b:33:6d:af:62:5e:
                    2e:50:6f:11:6d:b1:e7:21:8f:46:81:f9:26:21:58:
                    79:03:fd:8b:94:bc:87:71:0e:e1:27:17:96:5b:bc:
                    09:d7:1a:f6:04:fd:13:93:8d:ca:8f:e9:ab:94:55:
                    7a:5f:de:24:d1:4e:7e:f9:a9:02:3a:0b:0c:d4:11:
                    61:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:E2:17:E8:80:49:C3:9C:AE:73:32:16:0B:F2:1D:71:00:DA:06:21
            X509v3 Authority Key Identifier:
                keyid:7E:BC:DF:86:DF:80:30:B0:5C:F0:F2:AA:B5:B8:9E:85:A7:89:4A:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/frzfht-AMLBc8PKqtbiehaeJSis.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7e0435-81eb-41d7-a01c-f12a76b17794/1/frzfht-AMLBc8PKqtbiehaeJSis.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7e0435-81eb-41d7-a01c-f12a76b17794/1/frzfht-AMLBc8PKqtbiehaeJSis.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:e2:d5:53:61:a0:01:24:94:2b:04:9b:58:fc:e3:10:64:cd:
         47:14:ef:66:e3:83:0f:c5:a3:0f:e8:77:02:0b:9c:59:7c:24:
         d7:e2:49:e9:ca:0d:48:99:9f:b3:2a:18:79:d9:4d:97:73:35:
         88:6d:6e:ae:a1:b4:0b:2a:8d:3c:f3:61:f8:6c:af:49:ed:52:
         74:68:59:67:61:c1:a8:21:5e:04:e7:98:50:cb:86:4a:d5:12:
         50:fb:c1:20:87:b0:fc:80:e0:ae:a4:8e:24:85:2c:ae:3b:04:
         88:ed:e4:38:da:d1:0b:2b:bf:af:e1:b0:b8:cb:bd:7f:b6:d7:
         91:56:4a:98:75:4a:87:2f:9e:ca:f8:39:42:ad:ce:6c:f7:f5:
         df:45:89:a2:29:8b:9c:a7:8b:e0:c6:76:ef:56:1c:dc:78:47:
         47:fb:38:95:c7:08:a2:d4:43:01:37:33:92:ef:53:1e:05:62:
         48:e8:ae:e3:7b:0a:75:f1:df:3c:7f:61:46:fb:81:70:0c:b2:
         f6:7c:09:cb:b6:f6:45:29:c3:9b:15:0b:b7:ae:fb:3d:f6:de:
         fb:78:df:fc:29:e3:73:3e:7c:2c:d8:a9:f2:24:54:b7:5d:44:
         0d:36:9e:e1:1b:11:af:9f:1b:33:eb:ed:cf:c1:25:29:f3:2a:
         eb:40:c6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:38:01 2026 by rpki-client