Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft
File:                     FaevcHtYSLNTljanQxd51wFM2mE.mft (raw, json)
Hash identifier:          vfC3ihsj1dW4+xiS9rhIwEeYdCm0WkpiEkVcKyaoONw=
Subject key identifier:   CC:62:74:43:61:D9:20:D8:72:00:B4:8F:E8:CB:C8:F1:10:DA:4A:5D
Authority key identifier: 15:A7:AF:70:7B:58:48:B3:53:96:36:A7:43:17:79:D7:01:4C:DA:61
Certificate issuer:       /CN=15a7af707b5848b3539636a7431779d7014cda61
Certificate serial:       01A0C5FBE79F61571B845F8F9087313C310A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FaevcHtYSLNTljanQxd51wFM2mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft
Manifest number:          096B
Signing time:             Mon 21 Sep 2026 22:00:15 +0000
Manifest this update:     Mon 21 Sep 2026 22:00:15 +0000
Manifest next update:     Tue 22 Sep 2026 22:00:15 +0000
Files and hashes:         1: FaevcHtYSLNTljanQxd51wFM2mE.crl (hash: 9FB2669yDvi708wIWVzoaeK0HoJXrezKErHZ137cBS0=)
                          2: aPjK_e6JWAnpVJTimjzF8YUqBy8.roa (hash: CxFxcDSyGy+oCI+MZq7LPshirwWX4b3dsefQvQRFoI4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FaevcHtYSLNTljanQxd51wFM2mE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 22:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:fb:e7:9f:61:57:1b:84:5f:8f:90:87:31:3c:31:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15a7af707b5848b3539636a7431779d7014cda61
        Validity
            Not Before: Sep 21 22:00:15 2026 GMT
            Not After : Sep 22 22:00:15 2026 GMT
        Subject: CN=cc62744361d920d87200b48fe8cbc8f110da4a5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cb:6c:a0:fe:ef:83:a6:a3:19:69:54:f6:5a:
                    de:be:b0:d6:88:48:b0:5a:7c:a6:7b:33:cc:18:23:
                    1f:32:6a:fa:dd:d0:52:08:1c:f4:9d:47:4c:fd:d8:
                    10:b5:82:ad:1d:49:87:3f:d9:27:87:cc:2b:6e:ec:
                    7b:95:08:a7:75:e6:e7:49:0a:15:2b:18:b2:8b:0a:
                    ea:33:89:1a:7c:27:f0:e3:4e:27:35:e3:f9:0b:bc:
                    80:a6:0e:10:ab:1c:c4:0f:1e:0c:5c:ec:ca:1d:e2:
                    f7:cc:07:58:a5:86:c9:4c:db:bb:3e:84:0e:28:43:
                    df:06:48:35:9a:b7:fe:99:d9:da:6f:bf:b5:e4:97:
                    c5:21:39:48:92:1f:e0:0c:27:50:c3:d1:8a:28:d7:
                    8c:88:97:75:91:a6:77:b8:a8:b4:a8:87:e0:10:ee:
                    9f:e8:90:41:e2:cc:2f:86:c7:d9:01:fc:1f:e3:70:
                    0c:c1:51:25:6f:f3:a8:5c:90:06:85:36:ea:20:39:
                    84:b2:f2:f5:7b:f7:02:a8:1a:18:65:1d:79:ce:92:
                    2f:8e:16:68:35:73:b2:47:6d:5c:65:9d:09:e9:4d:
                    51:55:0b:ff:a5:5c:be:80:d4:69:96:93:5f:a6:21:
                    7b:05:e2:f8:f3:b9:29:7a:99:1e:e1:30:20:09:bd:
                    39:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:62:74:43:61:D9:20:D8:72:00:B4:8F:E8:CB:C8:F1:10:DA:4A:5D
            X509v3 Authority Key Identifier:
                keyid:15:A7:AF:70:7B:58:48:B3:53:96:36:A7:43:17:79:D7:01:4C:DA:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FaevcHtYSLNTljanQxd51wFM2mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:83:ae:c8:fb:88:23:d0:f2:e8:87:be:2b:ef:47:af:e7:3a:
         f1:d4:0a:59:82:98:13:56:b6:58:cd:c9:55:51:ef:e9:30:de:
         04:43:98:57:9b:8a:e0:d7:3a:a1:b1:81:97:54:69:e2:8d:7e:
         06:58:1f:b1:de:1e:29:3f:20:23:14:e8:4b:33:2c:ff:a3:33:
         56:af:89:a3:cc:a4:df:f0:ce:f2:e6:f3:46:38:bb:30:4b:d2:
         84:8b:24:eb:fe:9c:ce:f7:ae:31:ad:21:e0:8e:ce:12:d9:91:
         3b:67:39:3c:ff:ef:b1:bc:4b:4b:8a:98:71:d5:66:59:74:8e:
         7c:8b:c2:60:0d:97:1c:70:c1:c9:8c:7a:b3:fd:16:2a:ad:a9:
         2f:e1:52:2e:20:f4:58:3f:a7:ab:68:e1:6f:e8:fb:6c:51:31:
         d7:91:13:f7:43:97:28:dd:78:46:c6:48:75:09:dc:51:24:70:
         81:6a:b0:6d:81:8c:88:bd:c6:a2:04:35:4d:8a:0a:5e:e0:a4:
         2d:27:73:03:dc:aa:aa:4e:a2:bc:01:f2:5c:8f:2a:22:f9:71:
         23:d8:65:9a:3a:04:e9:ed:9e:ed:40:67:09:f1:4e:e2:bf:24:
         43:7b:44:bf:7c:e8:cc:46:e9:ad:6a:46:5f:2e:3c:ea:82:f0:
         93:72:7e:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDF++efYVcbhF+PkIcxPDEKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1YTdhZjcwN2I1ODQ4YjM1Mzk2MzZhNzQzMTc3OWQ3MDE0
Y2RhNjEwHhcNMjYwOTIxMjIwMDE1WhcNMjYwOTIyMjIwMDE1WjAzMTEwLwYDVQQD
EyhjYzYyNzQ0MzYxZDkyMGQ4NzIwMGI0OGZlOGNiYzhmMTEwZGE0YTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8tsoP7vg6ajGWlU9lrevrDWiEiw
WnymezPMGCMfMmr63dBSCBz0nUdM/dgQtYKtHUmHP9knh8wrbux7lQindebnSQoV
KxiyiwrqM4kafCfw404nNeP5C7yApg4QqxzEDx4MXOzKHeL3zAdYpYbJTNu7PoQO
KEPfBkg1mrf+mdnab7+15JfFITlIkh/gDCdQw9GKKNeMiJd1kaZ3uKi0qIfgEO6f
6JBB4swvhsfZAfwf43AMwVElb/OoXJAGhTbqIDmEsvL1e/cCqBoYZR15zpIvjhZo
NXOyR21cZZ0J6U1RVQv/pVy+gNRplpNfpiF7BeL487kpepke4TAgCb05xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMxidENh2SDYcgC0j+jLyPEQ2kpdMB8GA1UdIwQY
MBaAFBWnr3B7WEizU5Y2p0MXedcBTNphMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmFldmNIdFlTTE5UbGphblF4ZDUxd0ZNMm1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9kZDUwZGUtOGUyYS00OTBjLWE0MTgt
NjAxMTY4NjI2MTZhLzEvRmFldmNIdFlTTE5UbGphblF4ZDUxd0ZNMm1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9kZDUwZGUtOGUyYS00OTBjLWE0MTgtNjAxMTY4NjI2MTZh
LzEvRmFldmNIdFlTTE5UbGphblF4ZDUxd0ZNMm1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs4OuyPuI
I9Dy6Ie+K+9Hr+c68dQKWYKYE1a2WM3JVVHv6TDeBEOYV5uK4Nc6obGBl1Rp4o1+
Blgfsd4eKT8gIxToSzMs/6MzVq+Jo8yk3/DO8ubzRji7MEvShIsk6/6czveuMa0h
4I7OEtmRO2c5PP/vsbxLS4qYcdVmWXSOfIvCYA2XHHDByYx6s/0WKq2pL+FSLiD0
WD+nq2jhb+j7bFEx15ET90OXKN14RsZIdQncUSRwgWqwbYGMiL3GogQ1TYoKXuCk
LSdzA9yqqk6ivAHyXI8qIvlxI9hlmjoE6e2e7UBnCfFO4r8kQ3tEv3zozEbprWpG
Xy486oLwk3J+Tg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 07:49:51 2026 by rpki-client