Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft
File:                     SeFL929C2k8qwAOmxp1hwjIOLNg.mft (raw, json)
Hash identifier:          T+Q8Hl7sLcP3pddsCLkFx5byudD0M5H/T4+tgxNTtes=
Subject key identifier:   07:EF:E1:54:94:8A:72:CD:FE:22:BC:8F:B1:4B:00:26:FE:48:4C:08
Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Certificate issuer:       /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Certificate serial:       0199FEB4EEC1F9595ACD48EEC22DF9B26942
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft
Manifest number:          1152
Signing time:             Sun 19 Oct 2025 23:01:34 +0000
Manifest this update:     Sun 19 Oct 2025 23:01:34 +0000
Manifest next update:     Mon 20 Oct 2025 23:01:34 +0000
Files and hashes:         1: 1JBbxjT9LW1M45TfUBltflWXjYo.roa (hash: +kWM+UT9oOWnxVo332YivS+2g4/PD34pohQWp5gFo5E=)
                          2: Ns_2WTykJXWBKeAZy8ZQQTGIZ4g.roa (hash: zHFP35lrOV5ykmqGRdLeDFScFpQtr+Xab1k7m30xSdw=)
                          3: OANXXNT4d7OJ6o497Ctf48xykTY.roa (hash: aZ2NtskCeNGxotOVm0/S/doAkEWhZqM1q8mtGb9yHS0=)
                          4: RI77ZK3aqTLPg2W-XBkxR7T7p4Q.roa (hash: nk2g70SgrOg1E7ZHO+z50BOPQEJsdzJ7hk5jt1A6+b0=)
                          5: SeFL929C2k8qwAOmxp1hwjIOLNg.crl (hash: T/Y2fUyNeWaK2j5tln/FKoLfmnyLY8ckDmHykxX6Fxg=)
                          6: X6bDse8LmUftPmqQf4kw_btsOvE.roa (hash: j651kWeKBdPGwLMPF+EPghkkL3051eJwiT7QuhCps4o=)
                          7: _GcWVg1NloetvFlVnnsXCsqW9jA.roa (hash: 8fDT+HFMs22XfNV5rWe49DrDAkwxKtbv8tRmabSl16Q=)
                          8: h6nXxCojgmG6H44QUolSl46rG3Q.roa (hash: Jg0E3EWR0gqOThcjNWzxcD0juv44xUicy/wOavdwVH4=)
                          9: kLzXL1ZkV5i7SczjHie-nPdTakk.roa (hash: KSQB5UsbV0dtTyrjqQ8bJx4qGPsJFrVxBc1ZJaVStDg=)
                          10: zGWw5y3QtBedo3lJVh0hQTzv87w.roa (hash: LJqgZZZrONstDDkOQIUQr4bq2xXQX5fdOe5gdv77tuI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:b4:ee:c1:f9:59:5a:cd:48:ee:c2:2d:f9:b2:69:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
        Validity
            Not Before: Oct 19 23:01:34 2025 GMT
            Not After : Oct 20 23:01:34 2025 GMT
        Subject: CN=07efe154948a72cdfe22bc8fb14b0026fe484c08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:09:06:5f:60:99:65:9f:3e:1f:66:2e:b5:ce:
                    39:5d:e2:28:89:2c:17:7f:c3:ab:c0:19:cd:cd:ed:
                    9d:e3:eb:e5:c1:3b:14:95:64:98:04:31:08:73:38:
                    52:14:6a:3c:7d:9b:bf:9b:e6:22:81:1f:60:1b:dc:
                    76:c3:15:05:f9:0e:c9:2a:2e:86:a6:45:ce:27:5b:
                    de:39:0f:35:67:95:36:52:9a:6d:8c:79:a6:01:7e:
                    94:ab:8d:62:af:49:bb:71:cb:5b:8a:f9:62:54:39:
                    5e:dd:f1:8b:b7:df:17:d4:9c:6a:e1:d5:8c:6c:00:
                    16:62:19:ad:48:71:fc:1c:73:94:b6:93:45:3e:32:
                    9e:ba:98:16:78:39:54:1f:44:ca:19:85:74:17:4f:
                    e7:45:ab:9c:dd:73:2f:6f:61:71:6f:cc:0f:84:d1:
                    30:61:40:40:dd:f3:57:4e:d3:9c:d5:dd:a5:14:0a:
                    98:b6:e0:be:cd:38:31:88:76:8e:ae:f0:25:6d:ef:
                    c4:cc:0b:c5:9a:88:6b:23:97:ac:43:12:a1:aa:ee:
                    1f:ea:7e:13:00:dc:d4:68:24:c1:9f:ae:f2:a6:1f:
                    13:d2:9e:c9:d6:45:fb:f3:4f:7d:b7:09:d2:90:b5:
                    5a:92:82:4e:fd:71:ea:bf:3c:0e:42:49:f6:16:c8:
                    0f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:EF:E1:54:94:8A:72:CD:FE:22:BC:8F:B1:4B:00:26:FE:48:4C:08
            X509v3 Authority Key Identifier:
                keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:e7:20:04:81:0d:70:1d:9e:fc:71:b0:60:5d:7d:a8:81:5c:
         7c:bc:cf:6c:24:38:73:97:bd:a3:b5:77:17:22:d8:cd:4b:6d:
         35:aa:c5:8d:1e:8c:45:e5:85:c1:dc:2e:b7:a8:89:c8:4b:50:
         02:bf:f6:9c:72:87:44:b1:8a:73:4c:67:3a:9b:de:7b:95:48:
         12:4b:dd:21:97:73:ef:bf:d5:a0:dc:25:5e:c8:c4:ce:71:f0:
         59:ee:c3:c6:e9:5a:e6:f4:8c:8e:df:06:7e:4a:d4:e1:3f:13:
         49:a1:31:7e:dc:26:00:82:62:92:61:20:54:72:49:ed:5c:93:
         9f:3a:80:cd:3a:ca:9d:75:6e:33:fb:be:ac:d8:eb:97:29:ea:
         a8:b9:8c:00:08:ba:71:72:e2:66:69:a3:5f:f7:6e:f0:05:1b:
         be:1b:d8:57:51:05:21:d4:52:0b:97:49:03:1d:be:57:38:e3:
         21:5a:72:90:16:09:d7:7d:5d:b7:60:bd:59:ad:3a:c9:c6:c3:
         fa:c2:c9:3a:f9:0a:41:59:f0:c2:b3:e3:e0:6a:2f:86:9f:dc:
         2a:e1:6f:f8:a5:46:b2:e6:ea:56:d7:5c:3f:88:07:7e:c9:bf:
         7c:c7:9b:c3:e1:f4:cd:45:c2:b2:ae:08:45:2e:f1:8b:3e:53:
         af:4d:f1:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:35:52 2025 by rpki-client