Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft
File:                     FaevcHtYSLNTljanQxd51wFM2mE.mft (raw, json)
Hash identifier:          ei3RgaB56SdcADWTS2tAdJoeTqGpvgxOxd4LWFRqy+0=
Subject key identifier:   91:E1:D9:D4:20:C9:78:9D:F0:08:7A:03:42:3B:FF:A0:0D:14:8C:60
Authority key identifier: 15:A7:AF:70:7B:58:48:B3:53:96:36:A7:43:17:79:D7:01:4C:DA:61
Certificate issuer:       /CN=15a7af707b5848b3539636a7431779d7014cda61
Certificate serial:       019DA48AD5881B3CBAF68D51BFD3CEA9CA55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FaevcHtYSLNTljanQxd51wFM2mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft
Manifest number:          07CC
Signing time:             Sun 19 Apr 2026 07:00:55 +0000
Manifest this update:     Sun 19 Apr 2026 07:00:55 +0000
Manifest next update:     Mon 20 Apr 2026 07:00:55 +0000
Files and hashes:         1: FaevcHtYSLNTljanQxd51wFM2mE.crl (hash: GDk2QeHPzBx10bqWihLmNR7mBUQ05yFrEwbRqIblCqU=)
                          2: aPjK_e6JWAnpVJTimjzF8YUqBy8.roa (hash: CxFxcDSyGy+oCI+MZq7LPshirwWX4b3dsefQvQRFoI4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FaevcHtYSLNTljanQxd51wFM2mE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:8a:d5:88:1b:3c:ba:f6:8d:51:bf:d3:ce:a9:ca:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15a7af707b5848b3539636a7431779d7014cda61
        Validity
            Not Before: Apr 19 07:00:55 2026 GMT
            Not After : Apr 20 07:00:55 2026 GMT
        Subject: CN=91e1d9d420c9789df0087a03423bffa00d148c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:29:68:e4:3c:53:94:5c:0c:e7:57:91:fa:bb:
                    09:a0:65:f4:84:cc:2c:dc:9f:07:bf:71:51:04:42:
                    9d:44:61:44:7b:58:0b:ed:d6:1d:c8:59:3c:3f:20:
                    d8:78:8d:7f:fe:16:62:db:3c:5f:61:1b:d4:c3:dd:
                    9c:be:dd:f4:c8:fc:fc:48:4c:6c:7f:ed:26:fc:c4:
                    e6:b1:ef:0e:a0:fa:f1:c6:6d:18:41:a8:1b:98:e4:
                    15:a6:44:d4:7c:7b:56:d7:d8:b6:0c:89:c5:69:bd:
                    0f:17:b9:e7:a4:3f:a3:70:46:b9:7d:f9:3e:07:ed:
                    3a:fe:f1:b6:6b:5d:b4:e7:9e:84:32:bf:12:e9:2e:
                    bd:36:9f:c8:a4:d5:cd:9b:78:07:a0:71:33:59:87:
                    94:d3:52:6e:43:2f:51:72:58:5a:c2:f5:50:66:91:
                    80:5c:10:65:90:d4:6a:23:ae:39:11:3c:fa:a0:28:
                    de:3d:12:e5:e0:33:63:c9:51:ca:eb:d9:05:a1:7f:
                    2e:85:ab:80:0a:cd:a8:ed:01:8b:2b:ae:56:ec:a2:
                    fe:4f:77:fc:b8:c9:52:d0:f9:17:f9:43:e7:a2:3c:
                    d6:be:80:fa:3d:e1:ad:23:9a:83:7e:85:86:58:82:
                    26:c3:78:77:45:59:ee:55:0c:68:71:7a:0a:73:64:
                    64:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:E1:D9:D4:20:C9:78:9D:F0:08:7A:03:42:3B:FF:A0:0D:14:8C:60
            X509v3 Authority Key Identifier:
                keyid:15:A7:AF:70:7B:58:48:B3:53:96:36:A7:43:17:79:D7:01:4C:DA:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FaevcHtYSLNTljanQxd51wFM2mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:00:ed:58:51:ff:40:61:e2:fe:d6:23:73:f6:3d:67:c2:6a:
         71:d6:7a:01:29:0a:91:8b:9f:b1:e2:8b:3d:a4:cd:a1:ff:2f:
         6e:e9:c9:54:e1:c1:4f:90:06:7b:cc:d8:08:2f:03:cf:05:d3:
         ec:6a:84:45:a9:4a:18:10:2b:fb:3c:83:11:c2:c8:8f:8e:39:
         47:b5:02:37:29:bb:a7:a5:cc:81:1f:f9:be:ad:9f:54:db:77:
         b3:b4:73:68:2e:0d:00:50:5d:44:4a:d3:6e:a4:20:14:c6:12:
         77:a8:5e:dc:74:dd:a5:60:f2:5d:db:62:50:62:91:02:54:47:
         c1:3a:d9:61:d3:fe:0b:fb:06:dc:f3:94:6d:f4:ea:a6:5c:8c:
         6a:4c:49:f2:50:03:9f:12:31:78:c0:7f:18:50:bc:3b:b3:d5:
         13:3e:80:f3:68:96:11:cd:c9:d3:6b:d1:5b:87:26:a4:8c:a4:
         b6:27:b2:a1:79:b6:25:d6:4a:b7:a7:96:be:13:98:0b:33:70:
         a9:a5:0c:c9:f9:34:b4:65:5a:4b:f6:1a:5a:a5:c9:31:9e:d6:
         54:1a:8e:71:be:89:bb:ca:d5:60:05:10:b2:9c:2d:bc:da:f6:
         5d:ec:cf:10:64:b9:32:02:9b:29:6a:8b:84:68:6a:40:ea:2a:
         e8:4b:35:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:15:32 2026 by rpki-client