Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft
File:                     SeFL929C2k8qwAOmxp1hwjIOLNg.mft (raw, json)
Hash identifier:          VnnzXjGn/JxUbd/FcyZ1KQcmLTb/Uag4wudcxtVFd/Q=
Subject key identifier:   CF:13:72:EC:F3:E3:09:14:59:76:DD:AB:BF:D6:86:C1:3B:77:A2:C1
Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Certificate issuer:       /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Certificate serial:       019F9135D40113F834BF7464E6C816509A41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft
Manifest number:          143C
Signing time:             Thu 23 Jul 2026 23:00:51 +0000
Manifest this update:     Thu 23 Jul 2026 23:00:51 +0000
Manifest next update:     Fri 24 Jul 2026 23:00:51 +0000
Files and hashes:         1: 0qv4M2adyHk8d7EeCvFIfdU48N4.roa (hash: wHf9TqZHJ93kXF0WkoV8vR23UCx8MgnFHkCW9uKnTtc=)
                          2: 6lyNrJZc2KgbHUFw9DHupU7_v28.roa (hash: AX1c1nt6sPaC/PWZVy5ukPx0yab2OYoZOn2zfTvXv0Q=)
                          3: JsY1MyZsHL5ANMbfpG-T7jMw_y8.roa (hash: pQyN/5D9ZvxBU6uwZJK5W/iJTHv6a0dHP0ytT676nXk=)
                          4: NrZvHsFOgiPwleOeVbwWyHfV_L4.roa (hash: n6jDQhCNCBmdeDrJBLdu1D1nSKApcLfSNNDXjNz/ofc=)
                          5: Rh6nFKxsMKsnXJYbD_oVhr9Ud1U.roa (hash: JsI2fLRrBOm5bt0cmfaXAQayTYmbH2IpCJK9HVEFdsI=)
                          6: SeFL929C2k8qwAOmxp1hwjIOLNg.crl (hash: 9H/U49Qms6Sy0Cj8fWWVFwxZooc/HC/OuuZJRXhTqP0=)
                          7: VzM1AypggKfmNX2sRS2vbR3TxmA.roa (hash: tqGI7CK0r9DehFNJOqKqldLzD4PgT2jyGQAMyhE+/Zk=)
                          8: WS27Vcn_P-JjEnA1VAgcUUebIxo.roa (hash: q42P5hZCz6I8ZhvA8n9BJnQ0QoqITWfeNIwOtuEADkw=)
                          9: ZcYE9Z8XNL6uDMWvJ-FYS3N0Gq8.roa (hash: 6BoEMgR0PCrMYtIyRtSeyIGPN0PoOmNZmzd0tHXo3EU=)
                          10: f6AT6qK0UAoYxCU6h6a5zuL-r8A.roa (hash: YPztMteEtfkspmy95oH8dq9G9lIhU3ylPMWU2Ebk6Ho=)
                          11: gxhdAMe7wEMvCZhxFngyxSzcIhs.roa (hash: 3BbQpbqM65473F44TzazMsme7vz4RghxlrpvUNHoXkU=)
                          12: j0xdoTaEGOgffNs_VBakKEsMOIw.roa (hash: Vqww+aEljEVXFS4ldAu13uV4iJ+lDj74IOqZmlKaL+A=)
                          13: jKv6ERIQttCpvoILmqEhuMIUCBU.roa (hash: +ApSat9OPhyaIkri75fm7X1omMYQDzXidRYPTlzmNEE=)
                          14: kSQLLzfbaKVkpy2XDmfOOQR4kf0.roa (hash: 4yJ7OIn+C8eTelE1cgdNN4SfqUsa616v8W0PFTdO90c=)
                          15: lAAy6RCY3vPz6nXl4z3OAcWZNWY.roa (hash: UihdJc3+pbTDupOjQZYdSp5xTmQICY00RAj9TUOo7tI=)
                          16: pCqGah-1s51upQgbjtJnrvE6ytI.roa (hash: Gf3M3iObbLHOXyMwNFbb8llJIyyUbbMZ5NBwYoUaQM4=)
                          17: sgFbUhWIlnGwJJ6JNLmJAt2bOWA.roa (hash: xYVDJvZc+IUzCCdzcBxOHRLTNncpeo+GSxRLuB7cQoc=)
                          18: v09PTIiTUZPph3Yi_kEPVgwcIZ4.roa (hash: R9E1aPH0OjxDcZt8lCmTXLarXP9Buf8PvZxVyozlqEs=)
                          19: xqwqkvhEHHtfKMR1DggBvZ_qWNM.roa (hash: t5OZwhX//N0DuIjrzLkQNjBPbXOPV8gkDPE6FX/cXLw=)
                          20: yrkh5a8oa9TAeGqxBHy0VPVJ1U0.roa (hash: NQmFdUWHQfgicwpZ0sRLtZpgVUOak/o9L26iE81cOG4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:d4:01:13:f8:34:bf:74:64:e6:c8:16:50:9a:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
        Validity
            Not Before: Jul 23 23:00:51 2026 GMT
            Not After : Jul 24 23:00:51 2026 GMT
        Subject: CN=cf1372ecf3e309145976ddabbfd686c13b77a2c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f0:59:ba:c9:32:48:08:85:8b:ae:22:49:8c:
                    4b:e9:e6:03:66:ba:d0:27:ff:af:39:2a:c1:28:ba:
                    07:2c:8c:5e:4d:2b:9d:60:d8:81:9c:9c:aa:17:90:
                    86:27:55:e9:f7:1b:83:d1:81:ba:d3:01:e5:37:66:
                    f4:45:ef:09:ab:ec:be:0d:7d:2a:9b:d9:1c:c2:7e:
                    6b:36:bb:ad:da:69:46:7e:f1:4a:5b:4f:aa:11:f7:
                    8e:87:4d:16:53:3a:37:c0:7c:77:3c:5a:13:45:ff:
                    8c:31:27:97:8b:fc:1c:0c:4e:dc:68:4e:fd:0c:02:
                    de:08:da:98:b7:ad:2f:bf:5c:2b:41:ac:61:c9:aa:
                    38:25:1d:0b:68:aa:60:73:97:50:2b:c9:76:5b:ab:
                    7b:aa:c1:5e:e5:fe:b6:a9:51:59:02:13:9d:70:38:
                    a8:02:10:aa:bd:39:f1:18:7e:c0:fd:e5:73:0a:31:
                    03:d9:d7:7f:bc:3f:c0:e8:44:56:41:85:6c:78:01:
                    d0:2f:37:ef:e2:1d:59:52:6f:b8:fb:93:9d:56:0e:
                    72:82:78:1b:22:13:d6:6b:1c:1b:ea:f6:95:97:72:
                    02:30:5a:59:2c:c5:00:c6:6f:a8:a2:29:c2:32:c0:
                    3d:9e:c4:84:cc:bb:dd:d8:0c:7d:9a:da:2a:94:e1:
                    fa:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:13:72:EC:F3:E3:09:14:59:76:DD:AB:BF:D6:86:C1:3B:77:A2:C1
            X509v3 Authority Key Identifier:
                keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:55:c4:be:c4:da:d9:49:f4:70:39:b7:f6:4c:10:12:be:a1:
         1b:36:de:2c:f2:36:64:d6:49:b9:91:df:d9:c3:a4:49:02:c0:
         1a:51:2d:8c:a2:03:89:37:e1:98:96:4c:c6:74:45:d7:2d:5f:
         ef:17:ee:75:64:40:91:e3:b6:f4:6c:aa:dd:40:95:ac:10:45:
         6c:75:90:8a:73:8c:c2:fa:de:de:72:69:94:e6:f4:26:61:b5:
         13:c0:f0:ae:e7:26:42:d6:93:fc:43:e4:0a:5f:1a:71:be:e3:
         e8:90:73:94:f7:f1:fe:e0:b2:31:70:23:75:cd:59:c8:3e:a2:
         8a:f2:62:41:33:00:7a:65:98:cf:08:8e:36:66:d3:ad:41:97:
         cd:e6:df:a3:b3:1e:a8:15:6b:cb:bb:58:64:58:65:6b:57:f8:
         e6:9b:31:d5:3c:ae:1d:2c:f1:9a:1d:2b:93:0d:4e:92:36:4d:
         b5:7f:ca:10:45:35:d1:8d:ab:e1:83:8c:2c:1d:19:81:f8:b1:
         8c:77:53:db:3d:a1:6a:5f:5d:95:42:11:ec:89:89:66:a5:de:
         10:83:e7:83:ec:5a:da:55:35:13:f5:da:02:7d:b5:ae:63:e1:
         f1:03:11:37:82:20:cd:cd:11:55:ef:49:3c:4c:36:07:f9:76:
         7d:f9:2b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:23:48 2026 by rpki-client