Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft
File:                     FaevcHtYSLNTljanQxd51wFM2mE.mft (raw, json)
Hash identifier:          LLbxvP6oV3VsJ/7U7HdYAUAnaH7SAUFiYKEC4WU8VYs=
Subject key identifier:   5C:79:F5:8A:BA:AC:E8:44:D2:BF:68:11:8E:A6:2A:6E:37:9B:E0:6B
Authority key identifier: 15:A7:AF:70:7B:58:48:B3:53:96:36:A7:43:17:79:D7:01:4C:DA:61
Certificate issuer:       /CN=15a7af707b5848b3539636a7431779d7014cda61
Certificate serial:       0198D6CDF88B155E8EFDB85D2F98E3B660BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FaevcHtYSLNTljanQxd51wFM2mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft
Manifest number:          054F
Signing time:             Sat 23 Aug 2025 12:01:19 +0000
Manifest this update:     Sat 23 Aug 2025 12:01:19 +0000
Manifest next update:     Sun 24 Aug 2025 12:01:19 +0000
Files and hashes:         1: FaevcHtYSLNTljanQxd51wFM2mE.crl (hash: tPm4+fGx3qKsNDCyv1zrrFnfMGw/l4/IDRr8j374XtM=)
                          2: bX3oZWjtTuzwx_xG-vCMVNG-cOc.roa (hash: d1VXe5ysdAxKyO5IduA6oLfO1V4ILKmPg+j75Lo6HnE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FaevcHtYSLNTljanQxd51wFM2mE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cd:f8:8b:15:5e:8e:fd:b8:5d:2f:98:e3:b6:60:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15a7af707b5848b3539636a7431779d7014cda61
        Validity
            Not Before: Aug 23 12:01:19 2025 GMT
            Not After : Aug 24 12:01:19 2025 GMT
        Subject: CN=5c79f58abaace844d2bf68118ea62a6e379be06b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5e:cb:c6:94:28:5e:60:e2:5d:d1:37:46:75:
                    0a:47:ee:82:50:3f:2b:c5:bd:85:77:61:00:05:37:
                    d0:b0:4d:af:90:01:f2:24:65:f4:7b:c5:64:54:9b:
                    39:01:9c:fd:9f:da:89:e9:ef:f5:4d:6c:90:21:68:
                    0b:af:f3:d2:49:5b:94:a6:e6:98:07:43:2e:22:fd:
                    13:ad:87:f8:c5:3e:4c:72:f5:58:cc:a5:58:ca:b5:
                    71:8a:58:7c:0a:4f:d3:62:81:a0:37:1b:0f:1d:1b:
                    05:7b:73:85:ed:31:57:d2:b0:7d:b5:c1:64:e2:44:
                    3e:a9:bd:cb:73:10:1b:03:c4:1d:ab:61:d0:1f:bc:
                    00:12:fb:ab:d6:9e:c4:57:c3:68:ba:3b:71:f3:88:
                    25:d0:31:35:f9:6a:a8:77:cf:13:ae:90:35:08:d0:
                    e5:30:53:b1:7a:65:12:8d:ac:7b:c5:7f:e1:3c:4a:
                    d8:cf:f9:6d:d1:44:a6:2c:ce:ca:aa:67:d4:48:2c:
                    57:bb:bc:12:d5:d6:45:97:a1:55:86:0e:ee:da:d0:
                    51:5d:6d:24:c1:8a:fd:31:82:b5:36:ac:8b:1d:89:
                    71:3d:fd:c4:6a:44:08:b7:7e:eb:b2:f1:18:e4:a2:
                    b5:97:2c:e2:dc:0c:60:3a:b3:fe:24:39:2a:ef:5a:
                    ef:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:79:F5:8A:BA:AC:E8:44:D2:BF:68:11:8E:A6:2A:6E:37:9B:E0:6B
            X509v3 Authority Key Identifier:
                keyid:15:A7:AF:70:7B:58:48:B3:53:96:36:A7:43:17:79:D7:01:4C:DA:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FaevcHtYSLNTljanQxd51wFM2mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:06:a9:c5:79:10:b8:af:85:dc:10:fd:45:e6:00:be:6b:2c:
         e9:6b:82:7c:df:e3:0d:6e:eb:d6:8a:19:b6:92:bd:dd:07:06:
         12:d6:0c:70:ec:b7:f6:ec:ab:27:31:83:ad:67:f4:b1:60:8e:
         ef:ef:55:ea:10:18:98:db:0f:b4:99:8e:9a:4c:55:94:3a:aa:
         bb:7b:ea:33:f4:6b:4f:ef:8c:f8:d3:96:46:76:ae:21:37:c9:
         90:2b:64:06:91:93:c7:86:10:45:7e:09:a0:3a:a1:f2:c6:b9:
         92:44:62:4f:8d:74:94:da:44:93:db:d4:da:76:b2:ee:e2:09:
         91:6f:ea:5b:2f:13:93:1a:cf:b0:6e:f6:d7:c0:a0:f9:bc:1a:
         5d:9f:d4:21:ea:a2:80:77:25:72:fb:f7:50:8e:61:f6:11:1a:
         b5:f6:5e:43:2a:2a:cc:47:26:ca:6d:40:7a:33:a5:31:a7:6c:
         69:eb:18:be:66:a3:79:6d:11:85:68:36:2d:de:27:1b:1a:74:
         27:cc:8d:55:51:9c:55:89:4d:49:a7:64:e9:84:e1:12:b8:6d:
         17:08:e6:13:63:b0:b6:d9:af:07:be:f0:38:94:40:3f:13:5c:
         b2:13:93:c2:1e:ba:8e:c0:d0:f9:7c:17:c5:dd:65:72:bc:0c:
         da:e0:31:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:00:03 2025 by rpki-client