Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft
File:                     SeFL929C2k8qwAOmxp1hwjIOLNg.mft (raw, json)
Hash identifier:          /b8AxOL4bjduZs1Qk+n0lhHrqumGQ+X3yRt2N11wrVg=
Subject key identifier:   3C:B9:FF:41:0C:0A:12:0D:A2:E6:AE:6C:24:CA:97:FF:A1:4F:72:36
Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Certificate issuer:       /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Certificate serial:       019F9323E63DB5D293BD816456D72F2BFAD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft
Manifest number:          143D
Signing time:             Fri 24 Jul 2026 08:00:31 +0000
Manifest this update:     Fri 24 Jul 2026 08:00:31 +0000
Manifest next update:     Sat 25 Jul 2026 08:00:31 +0000
Files and hashes:         1: 0qv4M2adyHk8d7EeCvFIfdU48N4.roa (hash: wHf9TqZHJ93kXF0WkoV8vR23UCx8MgnFHkCW9uKnTtc=)
                          2: 6lyNrJZc2KgbHUFw9DHupU7_v28.roa (hash: AX1c1nt6sPaC/PWZVy5ukPx0yab2OYoZOn2zfTvXv0Q=)
                          3: JsY1MyZsHL5ANMbfpG-T7jMw_y8.roa (hash: pQyN/5D9ZvxBU6uwZJK5W/iJTHv6a0dHP0ytT676nXk=)
                          4: NrZvHsFOgiPwleOeVbwWyHfV_L4.roa (hash: n6jDQhCNCBmdeDrJBLdu1D1nSKApcLfSNNDXjNz/ofc=)
                          5: Rh6nFKxsMKsnXJYbD_oVhr9Ud1U.roa (hash: JsI2fLRrBOm5bt0cmfaXAQayTYmbH2IpCJK9HVEFdsI=)
                          6: SeFL929C2k8qwAOmxp1hwjIOLNg.crl (hash: db1MKLXAW7z1vZ7FuXZilTlvpECdoXPJ6rZreN5kbTM=)
                          7: VzM1AypggKfmNX2sRS2vbR3TxmA.roa (hash: tqGI7CK0r9DehFNJOqKqldLzD4PgT2jyGQAMyhE+/Zk=)
                          8: WS27Vcn_P-JjEnA1VAgcUUebIxo.roa (hash: q42P5hZCz6I8ZhvA8n9BJnQ0QoqITWfeNIwOtuEADkw=)
                          9: ZcYE9Z8XNL6uDMWvJ-FYS3N0Gq8.roa (hash: 6BoEMgR0PCrMYtIyRtSeyIGPN0PoOmNZmzd0tHXo3EU=)
                          10: f6AT6qK0UAoYxCU6h6a5zuL-r8A.roa (hash: YPztMteEtfkspmy95oH8dq9G9lIhU3ylPMWU2Ebk6Ho=)
                          11: gxhdAMe7wEMvCZhxFngyxSzcIhs.roa (hash: 3BbQpbqM65473F44TzazMsme7vz4RghxlrpvUNHoXkU=)
                          12: j0xdoTaEGOgffNs_VBakKEsMOIw.roa (hash: Vqww+aEljEVXFS4ldAu13uV4iJ+lDj74IOqZmlKaL+A=)
                          13: jKv6ERIQttCpvoILmqEhuMIUCBU.roa (hash: +ApSat9OPhyaIkri75fm7X1omMYQDzXidRYPTlzmNEE=)
                          14: kSQLLzfbaKVkpy2XDmfOOQR4kf0.roa (hash: 4yJ7OIn+C8eTelE1cgdNN4SfqUsa616v8W0PFTdO90c=)
                          15: lAAy6RCY3vPz6nXl4z3OAcWZNWY.roa (hash: UihdJc3+pbTDupOjQZYdSp5xTmQICY00RAj9TUOo7tI=)
                          16: pCqGah-1s51upQgbjtJnrvE6ytI.roa (hash: Gf3M3iObbLHOXyMwNFbb8llJIyyUbbMZ5NBwYoUaQM4=)
                          17: sgFbUhWIlnGwJJ6JNLmJAt2bOWA.roa (hash: xYVDJvZc+IUzCCdzcBxOHRLTNncpeo+GSxRLuB7cQoc=)
                          18: v09PTIiTUZPph3Yi_kEPVgwcIZ4.roa (hash: R9E1aPH0OjxDcZt8lCmTXLarXP9Buf8PvZxVyozlqEs=)
                          19: xqwqkvhEHHtfKMR1DggBvZ_qWNM.roa (hash: t5OZwhX//N0DuIjrzLkQNjBPbXOPV8gkDPE6FX/cXLw=)
                          20: yrkh5a8oa9TAeGqxBHy0VPVJ1U0.roa (hash: NQmFdUWHQfgicwpZ0sRLtZpgVUOak/o9L26iE81cOG4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:23:e6:3d:b5:d2:93:bd:81:64:56:d7:2f:2b:fa:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
        Validity
            Not Before: Jul 24 08:00:31 2026 GMT
            Not After : Jul 25 08:00:31 2026 GMT
        Subject: CN=3cb9ff410c0a120da2e6ae6c24ca97ffa14f7236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:53:c7:33:df:e0:3b:13:37:25:f9:ee:b5:23:
                    f8:89:cf:24:93:cf:82:47:0d:de:05:16:96:bf:c2:
                    d8:54:29:9a:52:52:dc:90:ac:af:22:20:fe:21:f9:
                    7b:28:db:10:70:e0:17:fd:04:b7:58:e2:0f:f1:f3:
                    08:8a:d4:15:61:96:94:07:0f:fd:c0:5d:4e:32:4b:
                    ab:39:b4:96:29:50:06:31:56:68:f8:70:f0:d5:25:
                    5c:ae:d1:a1:e4:3a:b4:23:fb:c3:1d:b6:17:79:5d:
                    2c:f6:21:67:08:24:59:70:28:bd:43:44:89:36:f7:
                    91:f1:71:e1:21:f3:d4:a9:7b:4f:d1:c1:d2:1e:b9:
                    d7:89:07:87:10:2d:9b:54:c0:70:b5:8e:b1:f5:f2:
                    6e:bc:26:0e:33:04:f7:06:78:91:cf:8b:28:6c:16:
                    7d:67:d4:f3:ca:8f:ec:77:00:03:df:ba:40:55:e9:
                    94:16:83:59:6b:63:17:dd:e4:06:49:8f:5c:6c:49:
                    45:13:52:26:de:a7:cc:4c:22:48:a5:5b:b0:c0:ce:
                    4c:12:b0:ef:3e:40:a6:db:87:f7:44:b6:62:65:8d:
                    85:79:d5:ae:61:84:65:a4:83:d9:dc:2a:8c:90:72:
                    bd:4b:a8:b5:e9:dd:45:13:ce:c3:95:fc:ea:3a:e4:
                    6a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:B9:FF:41:0C:0A:12:0D:A2:E6:AE:6C:24:CA:97:FF:A1:4F:72:36
            X509v3 Authority Key Identifier:
                keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:33:79:3e:3e:57:a8:87:a4:48:04:c9:02:c6:d0:8e:ac:29:
         7f:79:d1:46:07:fc:7e:d8:c6:6d:ed:54:7f:be:3f:2d:a1:54:
         e4:78:dc:42:08:6d:68:a1:d8:41:6b:b8:ac:6c:75:08:16:5e:
         fc:cf:83:80:ff:bd:ce:5f:a8:58:30:c3:32:e8:a2:85:56:e3:
         48:4a:88:0c:a5:0a:b1:9a:1a:29:09:7c:d0:f9:8b:35:4a:87:
         1a:3e:19:49:bc:04:90:a5:57:ff:40:a3:e2:a5:e1:98:41:a5:
         fd:b8:30:52:71:32:7f:8c:64:b6:09:b9:75:3f:2e:05:53:0f:
         82:20:42:a3:9b:56:cd:d7:ed:fd:0d:fb:38:4a:9d:63:f4:d3:
         9e:b6:f6:4e:16:3c:93:08:dc:ec:ed:72:13:3e:26:27:d2:70:
         b3:8f:3c:a1:a9:7f:2e:01:49:02:70:5a:4a:9c:27:cf:78:0f:
         e1:9b:0c:a1:2f:02:c5:89:66:c7:29:5b:55:51:1d:91:a9:3f:
         24:91:55:8f:23:24:3d:94:4e:bd:a3:39:69:48:1a:57:f6:b4:
         05:ca:b0:a3:1e:0c:2f:b1:81:30:60:e3:62:5c:21:f9:09:7d:
         a8:80:50:7d:9b:aa:6e:39:42:22:54:72:bf:ab:5f:ca:02:2a:
         59:c5:a7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:42:58 2026 by rpki-client