Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft
File:                     SeFL929C2k8qwAOmxp1hwjIOLNg.mft (raw, json)
Hash identifier:          eNXutvTWsyNgD7Al0bxvmNuy+lELOqtbZ616vghUTFA=
Subject key identifier:   71:B0:BB:43:B7:60:3C:73:C2:F0:60:36:73:B9:50:B2:D6:CB:C6:11
Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Certificate issuer:       /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Certificate serial:       01A0D04889C036095E6CF5D5FF265A62F803
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft
Manifest number:          14E7
Signing time:             Wed 23 Sep 2026 22:00:09 +0000
Manifest this update:     Wed 23 Sep 2026 22:00:09 +0000
Manifest next update:     Thu 24 Sep 2026 22:00:09 +0000
Files and hashes:         1: 5e2ugPUPxaSeiD5ij4OxwM1PjEc.roa (hash: mugAxfnq0I00dYxeQDOOopWj4Ta0W+HBIr/Eh2y0wV8=)
                          2: 5spmDI70f3Ww1c_jv_t5U1vTThA.roa (hash: S+CiRY/ZN5VUxNrWB67D+LBq4kLRrGAhzLqenBbzrs4=)
                          3: AStgdonopkscysS31vyYsIqk84Q.roa (hash: 61NnxaHUP/0GiJVjlZJly8O/SwR5d2QqekicHIjbroc=)
                          4: DYescTHawV5Bq8gJXe6becMtN3c.roa (hash: 2nSaDquTqoLUpuQfjqWmHYU5croneaYB06N5bKofjFk=)
                          5: NrZvHsFOgiPwleOeVbwWyHfV_L4.roa (hash: n6jDQhCNCBmdeDrJBLdu1D1nSKApcLfSNNDXjNz/ofc=)
                          6: Q8qqkE3sGq5_tEyI3PVhtKVeaQQ.roa (hash: BkCd73oz5cRaHPmyFwOTPb2VJY4uf61F6VeUXU554Y8=)
                          7: QkLFtgv-IA-cYkcQo920BsBxUoU.roa (hash: IphsEweHJQJ8hvz32gaJ9KD0KCw7pLh3MKjLPT6vdok=)
                          8: Rh6nFKxsMKsnXJYbD_oVhr9Ud1U.roa (hash: JsI2fLRrBOm5bt0cmfaXAQayTYmbH2IpCJK9HVEFdsI=)
                          9: SeFL929C2k8qwAOmxp1hwjIOLNg.crl (hash: psAxC9YEquzB4SsHl3Dm1OTYwG9aU8qnGPnI4rCOUxQ=)
                          10: U4Gshg9HikzigHh7vvbv2BXQLao.roa (hash: I5CETIh9+BZCo2XfD0EfCDLFmP3VVG0VaGQ3qRZa1VQ=)
                          11: V3m1MsfPtHCZgvDm04V9UxUStk8.roa (hash: 1ORQHgiLwJEjOt0CQpYp2HSCE8BD0iAFurpSeRHjcCs=)
                          12: VzM1AypggKfmNX2sRS2vbR3TxmA.roa (hash: tqGI7CK0r9DehFNJOqKqldLzD4PgT2jyGQAMyhE+/Zk=)
                          13: ZcYE9Z8XNL6uDMWvJ-FYS3N0Gq8.roa (hash: 6BoEMgR0PCrMYtIyRtSeyIGPN0PoOmNZmzd0tHXo3EU=)
                          14: cIK95HEC9ymTPma61LBpaM1Yung.roa (hash: MjLh0I1gcVcqu6CDJuR82IPY9M9LzPOPMAazoIA8Btk=)
                          15: jKv6ERIQttCpvoILmqEhuMIUCBU.roa (hash: +ApSat9OPhyaIkri75fm7X1omMYQDzXidRYPTlzmNEE=)
                          16: lxfMLWQQncBvzT5T0L7WXPYYRaE.roa (hash: GhJeQx+hG4Ww9rz8ka19pMlPyLM1aVBee7aKROvXSB8=)
                          17: pDiYIp6er_-T1AfamgHnds9XBJg.roa (hash: 0Lv7dffxGo6budWeGj7lDWhuzrUrNjU4jyiJEopdesY=)
                          18: qN51azyMi8RhrnKt2x6SlvGACqw.roa (hash: yCL0DQ+PJsiT11CuzYav2KyAebXQzBs54MSmO9XJsug=)
                          19: r1ydkhmeJ1AML0kHnHxkfYnnwbo.roa (hash: alVa6GGucWk1zjTUEiPjqsk5WFR+galloYl+nJisECk=)
                          20: th4OhWBAlpfypv7EWqlt69eEruk.roa (hash: 9y+RjbFHCYdSplLlHYCKvi36/3xYTcRr+DN5EKnC7XQ=)
                          21: v7M2hUCqapcq9A7wAn2dIYSy_3k.roa (hash: 8lrzBlxIkdiKBIvpA2CLb33d8S7DY91cUEi+IZVVpC0=)
                          22: xqwqkvhEHHtfKMR1DggBvZ_qWNM.roa (hash: t5OZwhX//N0DuIjrzLkQNjBPbXOPV8gkDPE6FX/cXLw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:48:89:c0:36:09:5e:6c:f5:d5:ff:26:5a:62:f8:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
        Validity
            Not Before: Sep 23 22:00:09 2026 GMT
            Not After : Sep 24 22:00:09 2026 GMT
        Subject: CN=71b0bb43b7603c73c2f0603673b950b2d6cbc611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:15:b0:c0:04:fa:61:e0:23:7b:ed:99:65:f9:
                    f4:24:09:0b:40:4e:0b:63:5c:08:14:2a:c4:5e:de:
                    1f:84:74:95:ff:4b:77:c4:94:e7:6a:3e:73:f3:8a:
                    57:2e:ab:95:20:12:5d:d6:97:aa:be:b7:39:00:d7:
                    6c:62:3e:23:8d:c8:89:37:a6:c6:c7:d9:a1:e5:f3:
                    22:b6:2d:30:4c:22:03:6b:51:fa:4e:4c:39:dc:42:
                    98:4c:77:5a:25:3a:e6:ab:a9:5b:d6:3b:8a:34:be:
                    40:fe:ef:66:69:c6:a3:a4:0c:cd:bb:d9:91:d2:ee:
                    c9:fb:d5:cc:e1:60:99:13:d6:4f:6a:56:01:bc:60:
                    a0:bf:f0:c9:99:3e:74:6c:8c:f7:16:a8:a0:4d:60:
                    d7:cf:2f:41:c3:90:63:7b:66:26:9d:78:1d:72:b7:
                    bb:d1:6c:97:b8:bb:f1:8a:f4:fa:e3:5e:1d:e7:9c:
                    42:4a:60:0a:d3:2a:51:d9:11:92:d5:a3:da:9c:a1:
                    e4:f4:64:38:4b:29:44:19:98:85:2e:b3:2d:48:28:
                    7f:06:b5:73:f9:fe:13:8b:af:20:90:6b:6e:f4:14:
                    38:2a:76:40:26:bc:5a:08:33:92:c4:fa:c1:d3:15:
                    3b:16:f6:c8:ca:c2:f5:16:2a:56:93:df:c6:9d:74:
                    e6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:B0:BB:43:B7:60:3C:73:C2:F0:60:36:73:B9:50:B2:D6:CB:C6:11
            X509v3 Authority Key Identifier:
                keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:62:26:10:5e:e2:98:7f:d1:fc:72:b9:bc:45:19:2b:4a:68:
         0b:27:1f:c6:a7:88:ba:26:93:5f:2b:0a:db:7e:38:7e:68:33:
         a9:e6:5a:ea:b3:b7:8b:dd:b3:af:3c:b3:95:21:09:26:43:ac:
         7e:af:e6:2f:d3:9c:c2:81:83:0b:43:f5:b7:9c:a2:8d:ee:db:
         50:96:16:b2:98:17:54:9d:64:31:b4:c7:6a:fa:fc:9a:9d:f8:
         a9:c1:5f:77:26:ef:b6:6e:e2:9b:64:ed:16:c6:41:81:bf:57:
         f4:7f:b9:8c:a3:e2:63:1e:74:3f:b7:a1:c6:b2:ba:29:d1:63:
         39:b4:ef:8d:9d:f1:45:44:fe:93:f4:9b:a6:fe:3d:cf:8d:b8:
         05:84:74:e4:1b:27:c7:fd:e0:40:31:81:9b:30:85:87:20:88:
         c7:96:ce:8b:2d:40:e8:c3:1c:c6:07:05:ec:84:77:a2:54:b5:
         ea:6b:66:24:54:88:66:f7:0b:61:25:89:e3:a1:65:b9:22:60:
         a0:e4:a7:6a:3c:67:e0:32:5b:ff:77:b4:19:85:90:7c:64:9c:
         99:7a:97:59:dc:e2:94:a7:31:a4:19:e5:03:b8:61:19:03:74:
         68:7a:ac:0b:64:4f:6b:57:f0:a4:ff:93:73:7c:d7:e1:35:0c:
         71:15:6d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:06:04 2026 by rpki-client