Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft
File:                     FaevcHtYSLNTljanQxd51wFM2mE.mft (raw, json)
Hash identifier:          Ytk4egcGMhhphtF3Ef0izE2lHNK9XI0J0fwpOXo6oyo=
Subject key identifier:   5E:2C:94:4E:94:6F:77:20:49:58:8F:BB:88:FC:FB:D7:76:4A:D2:9C
Authority key identifier: 15:A7:AF:70:7B:58:48:B3:53:96:36:A7:43:17:79:D7:01:4C:DA:61
Certificate issuer:       /CN=15a7af707b5848b3539636a7431779d7014cda61
Certificate serial:       01A0D75FA511C686BB0E9D3F7EEAC447ADC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FaevcHtYSLNTljanQxd51wFM2mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft
Manifest number:          0974
Signing time:             Fri 25 Sep 2026 07:02:44 +0000
Manifest this update:     Fri 25 Sep 2026 07:02:44 +0000
Manifest next update:     Sat 26 Sep 2026 07:02:44 +0000
Files and hashes:         1: FaevcHtYSLNTljanQxd51wFM2mE.crl (hash: RUbGjZVMBnFDd6HgiH/ngyz6zKXd5KN3c9lK7iKwkx8=)
                          2: aPjK_e6JWAnpVJTimjzF8YUqBy8.roa (hash: CxFxcDSyGy+oCI+MZq7LPshirwWX4b3dsefQvQRFoI4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FaevcHtYSLNTljanQxd51wFM2mE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 07:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d7:5f:a5:11:c6:86:bb:0e:9d:3f:7e:ea:c4:47:ad:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15a7af707b5848b3539636a7431779d7014cda61
        Validity
            Not Before: Sep 25 07:02:44 2026 GMT
            Not After : Sep 26 07:02:44 2026 GMT
        Subject: CN=5e2c944e946f772049588fbb88fcfbd7764ad29c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:09:1c:f6:1d:9e:7b:5f:19:81:0e:a7:05:a1:
                    af:cf:be:a3:b9:6d:6a:40:bf:6e:f6:a2:32:48:d2:
                    d1:20:8f:13:17:e9:b7:0d:4a:49:54:89:53:08:5b:
                    38:bc:51:bb:7b:a2:76:d5:9d:3d:39:fc:05:23:64:
                    60:16:0e:32:10:e1:46:71:01:5c:c6:8f:31:42:05:
                    09:fe:84:03:26:54:57:00:c2:09:ab:b1:bd:75:d7:
                    21:eb:73:a5:8c:94:ff:13:10:7d:8d:fc:7f:e2:55:
                    ac:56:57:b3:e3:ed:45:3e:47:43:a2:a6:1a:c9:b1:
                    49:ff:2d:9f:23:db:21:f3:fa:50:97:57:24:9d:89:
                    5e:25:e7:6a:7a:d8:14:e3:f3:20:03:b0:ed:8a:34:
                    71:47:f1:8d:8e:2c:e3:03:12:b3:7b:be:73:a0:a1:
                    52:f1:f6:a2:09:a4:ab:b4:c4:33:93:f2:88:e7:4d:
                    a9:b8:0b:88:86:c1:83:34:ac:f3:0d:4f:69:1f:55:
                    70:90:e2:73:95:7c:e4:e0:3c:ad:5c:5e:d5:ec:c0:
                    ac:71:75:16:51:f4:ac:72:ce:aa:5d:b0:c5:7d:2a:
                    11:61:f8:c5:dc:86:a4:cb:4a:f8:80:58:f6:82:25:
                    4d:11:e7:dd:d4:13:27:7f:d5:25:fd:93:7d:24:ab:
                    40:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:2C:94:4E:94:6F:77:20:49:58:8F:BB:88:FC:FB:D7:76:4A:D2:9C
            X509v3 Authority Key Identifier:
                keyid:15:A7:AF:70:7B:58:48:B3:53:96:36:A7:43:17:79:D7:01:4C:DA:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FaevcHtYSLNTljanQxd51wFM2mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:68:be:0a:06:42:65:a6:1a:62:e7:03:f4:2c:68:dc:45:ab:
         2b:85:f8:15:84:33:7a:89:3b:e9:0f:30:2f:33:e7:0e:3d:b2:
         74:86:dd:b3:ac:44:c0:d4:6f:1e:8f:88:8d:99:98:8d:93:18:
         6b:e0:9a:d3:eb:a4:79:20:a0:8b:c3:41:45:41:41:4e:10:6c:
         d5:25:29:70:45:e7:41:41:08:70:6a:b4:f8:e3:ec:0c:47:a3:
         7f:15:f4:10:79:b4:98:e5:2f:e1:27:84:5b:01:78:2f:86:4a:
         5c:aa:56:30:be:0d:d6:ca:71:8b:4c:12:82:0d:6c:f1:a0:c2:
         20:1f:de:26:4d:71:07:59:f8:69:df:6a:e8:83:7a:97:08:1d:
         14:01:64:d6:b3:d5:64:d4:97:2c:ff:c6:c0:d0:33:13:53:fe:
         06:35:dc:7a:2c:d5:ef:6b:f1:d0:9c:a2:b7:6b:16:46:c1:86:
         a4:d6:61:90:47:22:ea:3e:d7:84:4e:68:90:12:ee:29:aa:39:
         1d:66:ce:ae:83:4b:4f:2c:e1:8c:8e:c0:df:9a:1c:44:e3:96:
         82:99:16:4e:15:26:2c:8f:de:5b:c4:15:5c:4f:5e:88:82:d0:
         cf:dc:63:56:64:c1:c9:20:cc:14:71:42:c0:72:7f:aa:2c:68:
         59:1d:48:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:42:55 2026 by rpki-client