Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft
File:                     FaevcHtYSLNTljanQxd51wFM2mE.mft (raw, json)
Hash identifier:          RNXAaOtFGggWe3TNq+J7yB1+K5cFL5acHfB75TlUovo=
Subject key identifier:   55:FF:9C:C0:FD:A1:1B:FB:97:46:D2:BE:9A:5D:02:DF:34:1A:C6:F8
Authority key identifier: 15:A7:AF:70:7B:58:48:B3:53:96:36:A7:43:17:79:D7:01:4C:DA:61
Certificate issuer:       /CN=15a7af707b5848b3539636a7431779d7014cda61
Certificate serial:       019CAB6BED5D8C093FEBA92B8B67193ECCDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FaevcHtYSLNTljanQxd51wFM2mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft
Manifest number:          074B
Signing time:             Sun 01 Mar 2026 22:01:42 +0000
Manifest this update:     Sun 01 Mar 2026 22:01:42 +0000
Manifest next update:     Mon 02 Mar 2026 22:01:42 +0000
Files and hashes:         1: FaevcHtYSLNTljanQxd51wFM2mE.crl (hash: gvwXg5dNZAZwvm7yJTiS6fd9nxkUpQHTBGt8LuOBcuY=)
                          2: aPjK_e6JWAnpVJTimjzF8YUqBy8.roa (hash: CxFxcDSyGy+oCI+MZq7LPshirwWX4b3dsefQvQRFoI4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FaevcHtYSLNTljanQxd51wFM2mE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:ed:5d:8c:09:3f:eb:a9:2b:8b:67:19:3e:cc:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15a7af707b5848b3539636a7431779d7014cda61
        Validity
            Not Before: Mar  1 22:01:42 2026 GMT
            Not After : Mar  2 22:01:42 2026 GMT
        Subject: CN=55ff9cc0fda11bfb9746d2be9a5d02df341ac6f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:3b:9d:75:73:60:8b:9b:53:26:2f:38:a2:ed:
                    f7:ae:bd:1b:2d:03:09:4b:1f:87:3a:7e:0b:e4:7c:
                    4f:77:7a:38:7e:0e:6e:d1:89:f1:b5:45:b5:33:60:
                    21:a4:8a:9b:08:e7:18:b5:7f:06:5e:55:41:94:87:
                    06:42:f0:e9:ac:9f:dc:85:d2:f5:58:a6:7a:9f:fa:
                    8c:1b:d0:ac:ae:b9:3b:2e:09:41:d2:ad:12:51:9f:
                    f3:64:51:19:4b:9c:d6:a6:09:02:74:3a:02:38:5c:
                    30:c3:89:d9:89:24:07:a1:b8:97:77:87:af:f6:0b:
                    c9:d1:a2:4a:28:91:7e:74:41:a6:ff:43:c5:d9:20:
                    65:18:92:31:16:77:0e:df:36:eb:dc:05:86:22:db:
                    eb:4f:5d:00:79:e7:bb:7c:aa:44:21:7f:6f:2a:d5:
                    49:e6:01:39:75:fe:94:bf:88:06:7e:51:40:d3:d7:
                    57:5f:0e:38:44:86:bf:e1:9b:82:08:42:29:57:95:
                    d4:bb:e8:04:1a:eb:4b:8d:6c:a3:e5:28:06:76:38:
                    fe:82:64:60:6d:42:b1:21:b0:fa:c6:7f:f9:25:c6:
                    54:b3:cb:3b:a3:7c:87:9e:44:2f:c3:bc:fe:61:16:
                    09:14:5d:ab:81:c7:8a:17:49:ab:49:6e:db:68:e7:
                    d9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:FF:9C:C0:FD:A1:1B:FB:97:46:D2:BE:9A:5D:02:DF:34:1A:C6:F8
            X509v3 Authority Key Identifier:
                keyid:15:A7:AF:70:7B:58:48:B3:53:96:36:A7:43:17:79:D7:01:4C:DA:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FaevcHtYSLNTljanQxd51wFM2mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:5a:60:8d:28:00:5b:f0:b0:8a:a3:e7:88:69:4e:e2:54:39:
         ce:b9:04:34:8f:68:05:51:07:63:d6:7d:78:15:db:6e:b3:62:
         57:fe:36:ae:45:23:ef:e8:c0:a7:37:43:f2:37:49:ab:d7:73:
         9a:b9:a3:46:ca:c9:0c:39:ce:68:03:29:18:d6:be:f6:3f:71:
         28:ef:4c:c5:93:b8:af:41:70:86:a2:99:34:cb:7d:44:95:44:
         2f:d8:88:96:8b:27:92:70:4f:b3:51:5f:ac:73:c5:2b:b0:5c:
         0a:35:f5:9e:89:a7:ab:cb:52:75:76:73:f2:c3:ee:75:3f:cd:
         ea:68:6e:64:fb:2c:cb:ba:f7:0f:2b:b4:60:76:5d:87:34:79:
         32:bf:6d:39:ac:b7:95:29:02:4f:c6:a0:2f:c0:0c:6c:c0:e2:
         10:93:e2:d4:7b:1c:46:6a:47:43:fc:27:42:4f:fa:95:17:7c:
         50:a6:5d:fa:de:e4:9a:a3:25:ea:71:73:08:2a:aa:32:25:6e:
         fa:1f:7e:36:a8:4d:7d:67:58:71:3f:e3:42:6e:4a:2e:b9:7d:
         26:56:90:4f:51:37:cd:97:b5:66:31:24:92:d3:c2:31:17:ed:
         7e:3b:ea:e7:14:13:32:e3:b8:c7:9e:bf:13:4b:98:90:9d:97:
         db:9a:98:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:02:03 2026 by rpki-client