Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3008ef-8e3b-43d9-a889-429e7b05e815/1/SEwPoomLCocGbJNT5mk0TKm2Nm8.mft
File:                     SEwPoomLCocGbJNT5mk0TKm2Nm8.mft (raw, json)
Hash identifier:          qF3DBr1sD9weaU1li+8PQG0TyFhd0ctaj4Q0zb1pWfg=
Subject key identifier:   FF:18:B5:A4:B5:35:9F:0F:A2:D3:64:D7:D0:E6:FF:E1:E0:28:13:E6
Authority key identifier: 48:4C:0F:A2:89:8B:0A:87:06:6C:93:53:E6:69:34:4C:A9:B6:36:6F
Certificate issuer:       /CN=484c0fa2898b0a87066c9353e669344ca9b6366f
Certificate serial:       019F946D9BA94895384C8133B73873E7C365
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SEwPoomLCocGbJNT5mk0TKm2Nm8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/3008ef-8e3b-43d9-a889-429e7b05e815/1/SEwPoomLCocGbJNT5mk0TKm2Nm8.mft
Manifest number:          70
Signing time:             Fri 24 Jul 2026 14:00:38 +0000
Manifest this update:     Fri 24 Jul 2026 14:00:38 +0000
Manifest next update:     Sat 25 Jul 2026 14:00:38 +0000
Files and hashes:         1: SEwPoomLCocGbJNT5mk0TKm2Nm8.crl (hash: K7c2YTVxNBuxMxsFgUCql1CjjXw1VCQ/ibnQ02k6IJs=)
                          2: u9FRg4HZmYxe88AmtVq7nrsLcrw.roa (hash: H8HNXc9+pLASdlhH9aRSNMbBUgB4ROYUT/WeWXSCWZo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/3008ef-8e3b-43d9-a889-429e7b05e815/1/SEwPoomLCocGbJNT5mk0TKm2Nm8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/3008ef-8e3b-43d9-a889-429e7b05e815/1/SEwPoomLCocGbJNT5mk0TKm2Nm8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SEwPoomLCocGbJNT5mk0TKm2Nm8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:6d:9b:a9:48:95:38:4c:81:33:b7:38:73:e7:c3:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=484c0fa2898b0a87066c9353e669344ca9b6366f
        Validity
            Not Before: Jul 24 14:00:38 2026 GMT
            Not After : Jul 25 14:00:38 2026 GMT
        Subject: CN=ff18b5a4b5359f0fa2d364d7d0e6ffe1e02813e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d5:36:ae:5d:c1:97:8e:c2:c4:0f:bb:cb:a7:
                    a3:d4:a8:b2:e3:80:49:c5:b3:57:b6:e7:db:71:aa:
                    65:0c:34:c0:4e:34:c4:1b:3b:fb:c2:22:85:84:48:
                    6b:0d:73:b8:63:46:85:f9:d9:31:34:0f:ab:7f:b0:
                    02:16:64:57:1c:d2:29:35:6e:36:0f:ea:e5:05:6c:
                    62:2b:c6:b5:54:ad:c9:d6:0f:9f:91:86:35:25:0e:
                    18:93:14:90:c3:56:09:30:67:12:24:09:25:56:dd:
                    81:85:6f:e5:6b:c2:34:dd:f8:ed:1e:95:dc:27:82:
                    66:8f:1e:33:08:67:ce:5b:2d:03:f8:57:64:30:8f:
                    32:39:03:68:c8:38:e1:1e:87:5b:1c:c3:62:ba:a2:
                    14:20:7b:5e:db:76:a1:58:02:0c:e3:b0:92:87:57:
                    22:cf:6e:ac:80:be:9b:55:ed:04:91:d6:2a:8b:45:
                    de:66:ec:44:0f:d7:4f:ae:d3:d0:48:8a:05:c4:de:
                    5f:17:aa:86:e8:fd:b1:5e:14:69:df:40:48:4f:ca:
                    f5:e0:3a:54:b7:d2:c2:d9:a3:7f:20:af:55:47:43:
                    69:46:92:4b:1f:00:98:43:5a:89:90:5b:c6:b2:01:
                    ba:4b:b8:b1:96:ef:8f:e8:1a:44:16:78:e4:53:fe:
                    cb:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:18:B5:A4:B5:35:9F:0F:A2:D3:64:D7:D0:E6:FF:E1:E0:28:13:E6
            X509v3 Authority Key Identifier:
                keyid:48:4C:0F:A2:89:8B:0A:87:06:6C:93:53:E6:69:34:4C:A9:B6:36:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SEwPoomLCocGbJNT5mk0TKm2Nm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3008ef-8e3b-43d9-a889-429e7b05e815/1/SEwPoomLCocGbJNT5mk0TKm2Nm8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3008ef-8e3b-43d9-a889-429e7b05e815/1/SEwPoomLCocGbJNT5mk0TKm2Nm8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:03:66:a6:db:c6:e9:e2:17:db:40:66:48:50:0a:d9:cb:31:
         97:29:8e:1f:2a:76:c7:c6:fe:5f:0c:e9:e9:e0:da:2e:6c:b7:
         ab:a7:52:cd:6e:fb:79:52:bf:6c:0d:9e:ba:ac:2a:d8:49:92:
         be:ef:ad:2c:cf:2e:91:6e:0b:2c:ec:1c:04:4b:0a:a0:36:60:
         a0:89:d8:a1:a5:2b:40:e7:ee:2b:06:f3:a4:25:36:22:58:46:
         d3:bc:48:f6:91:29:f9:56:b3:08:a2:8a:7a:61:83:b0:62:04:
         46:d5:f9:6a:76:c4:4a:01:2b:67:dc:c6:c0:08:da:01:6f:d6:
         9e:c9:c7:aa:8d:07:cd:99:18:a6:c1:25:ec:20:69:51:90:88:
         c5:94:3e:34:12:04:5f:16:bd:16:ae:05:25:65:b0:5a:62:41:
         f1:92:3a:6c:d4:da:3d:cd:39:c0:86:ff:9a:57:48:4c:48:c2:
         f3:f8:f8:d6:5c:71:b5:ee:1c:66:72:a7:ee:c0:68:c9:87:aa:
         39:9c:25:42:51:01:d5:44:35:b4:93:76:ec:d9:22:51:00:e9:
         58:b8:5e:9e:8f:d2:77:0e:26:62:62:4c:a1:b6:a9:dc:4e:49:
         d1:ca:cf:34:89:c4:3e:06:99:47:05:23:d8:60:fb:d1:70:1a:
         78:6c:7f:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UbZupSJU4TIEztzhz58NlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NGMwZmEyODk4YjBhODcwNjZjOTM1M2U2NjkzNDRjYTli
NjM2NmYwHhcNMjYwNzI0MTQwMDM4WhcNMjYwNzI1MTQwMDM4WjAzMTEwLwYDVQQD
EyhmZjE4YjVhNGI1MzU5ZjBmYTJkMzY0ZDdkMGU2ZmZlMWUwMjgxM2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtU2rl3Bl47CxA+7y6ej1Kiy44BJ
xbNXtufbcaplDDTATjTEGzv7wiKFhEhrDXO4Y0aF+dkxNA+rf7ACFmRXHNIpNW42
D+rlBWxiK8a1VK3J1g+fkYY1JQ4YkxSQw1YJMGcSJAklVt2BhW/la8I03fjtHpXc
J4Jmjx4zCGfOWy0D+FdkMI8yOQNoyDjhHodbHMNiuqIUIHte23ahWAIM47CSh1ci
z26sgL6bVe0EkdYqi0XeZuxED9dPrtPQSIoFxN5fF6qG6P2xXhRp30BIT8r14DpU
t9LC2aN/IK9VR0NpRpJLHwCYQ1qJkFvGsgG6S7ixlu+P6BpEFnjkU/7LiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP8YtaS1NZ8PotNk19Dm/+HgKBPmMB8GA1UdIwQY
MBaAFEhMD6KJiwqHBmyTU+ZpNEyptjZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0V3UG9vbUxDb2NHYkpOVDVtazBUS20yTm04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8zMDA4ZWYtOGUzYi00M2Q5LWE4ODkt
NDI5ZTdiMDVlODE1LzEvU0V3UG9vbUxDb2NHYkpOVDVtazBUS20yTm04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS8zMDA4ZWYtOGUzYi00M2Q5LWE4ODktNDI5ZTdiMDVlODE1
LzEvU0V3UG9vbUxDb2NHYkpOVDVtazBUS20yTm04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFANmptvG
6eIX20BmSFAK2csxlymOHyp2x8b+Xwzp6eDaLmy3q6dSzW77eVK/bA2euqwq2EmS
vu+tLM8ukW4LLOwcBEsKoDZgoInYoaUrQOfuKwbzpCU2IlhG07xI9pEp+VazCKKK
emGDsGIERtX5anbESgErZ9zGwAjaAW/WnsnHqo0HzZkYpsEl7CBpUZCIxZQ+NBIE
Xxa9Fq4FJWWwWmJB8ZI6bNTaPc05wIb/mldITEjC8/j41lxxte4cZnKn7sBoyYeq
OZwlQlEB1UQ1tJN27NkiUQDpWLheno/Sdw4mYmJMobap3E5J0crPNInEPgaZRwUj
2GD70XAaeGx/+w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:24:03 2026 by rpki-client