Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft
File:                     SeFL929C2k8qwAOmxp1hwjIOLNg.mft (raw, json)
Hash identifier:          xil1OGYg5A9lqUhYO6bJ5Z9tM0xqg00jl6F2oxeHQ7o=
Subject key identifier:   DD:F4:A7:14:AB:43:94:46:46:05:F2:28:60:29:C7:01:0E:7B:87:81
Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Certificate issuer:       /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Certificate serial:       01984664027C45B2F403E13F7C80C485C548
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft
Manifest number:          106E
Signing time:             Sat 26 Jul 2025 11:00:16 +0000
Manifest this update:     Sat 26 Jul 2025 11:00:16 +0000
Manifest next update:     Sun 27 Jul 2025 11:00:16 +0000
Files and hashes:         1: 1JBbxjT9LW1M45TfUBltflWXjYo.roa (hash: +kWM+UT9oOWnxVo332YivS+2g4/PD34pohQWp5gFo5E=)
                          2: Ns_2WTykJXWBKeAZy8ZQQTGIZ4g.roa (hash: zHFP35lrOV5ykmqGRdLeDFScFpQtr+Xab1k7m30xSdw=)
                          3: OANXXNT4d7OJ6o497Ctf48xykTY.roa (hash: aZ2NtskCeNGxotOVm0/S/doAkEWhZqM1q8mtGb9yHS0=)
                          4: RI77ZK3aqTLPg2W-XBkxR7T7p4Q.roa (hash: nk2g70SgrOg1E7ZHO+z50BOPQEJsdzJ7hk5jt1A6+b0=)
                          5: SeFL929C2k8qwAOmxp1hwjIOLNg.crl (hash: 9Z9l68Nhw/b+Jflbc5zX2DVNij2Fh4ewLLJFpJjoQ4M=)
                          6: X6bDse8LmUftPmqQf4kw_btsOvE.roa (hash: j651kWeKBdPGwLMPF+EPghkkL3051eJwiT7QuhCps4o=)
                          7: _GcWVg1NloetvFlVnnsXCsqW9jA.roa (hash: 8fDT+HFMs22XfNV5rWe49DrDAkwxKtbv8tRmabSl16Q=)
                          8: h6nXxCojgmG6H44QUolSl46rG3Q.roa (hash: Jg0E3EWR0gqOThcjNWzxcD0juv44xUicy/wOavdwVH4=)
                          9: kLzXL1ZkV5i7SczjHie-nPdTakk.roa (hash: KSQB5UsbV0dtTyrjqQ8bJx4qGPsJFrVxBc1ZJaVStDg=)
                          10: zGWw5y3QtBedo3lJVh0hQTzv87w.roa (hash: LJqgZZZrONstDDkOQIUQr4bq2xXQX5fdOe5gdv77tuI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:64:02:7c:45:b2:f4:03:e1:3f:7c:80:c4:85:c5:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
        Validity
            Not Before: Jul 26 11:00:16 2025 GMT
            Not After : Jul 27 11:00:16 2025 GMT
        Subject: CN=ddf4a714ab4394464605f2286029c7010e7b8781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:01:72:97:52:70:e3:d8:83:98:b1:5b:3c:ec:
                    dc:6e:c4:42:6a:54:a8:06:c5:73:37:df:2a:05:61:
                    5b:ad:ee:e4:97:d4:98:41:33:d7:a6:fa:03:24:35:
                    b1:00:1b:6a:3d:26:f9:d6:6c:3a:0d:fd:02:5f:ff:
                    ad:9d:b6:43:4a:34:06:f0:80:c8:78:06:ff:70:46:
                    da:18:33:cd:12:93:c9:56:74:f6:f0:c4:40:03:5f:
                    27:f4:81:05:4d:84:08:5b:3b:00:b6:00:53:07:d2:
                    72:a4:57:6c:da:d7:0f:e8:2c:ef:fb:88:d4:a6:4a:
                    48:de:2d:18:d8:29:71:ce:81:23:ab:6f:62:22:0c:
                    47:19:89:90:c2:39:b1:3e:d4:ee:8c:cd:b4:3c:85:
                    c7:15:98:e8:08:48:db:69:9b:c0:0f:83:b9:f1:a9:
                    5a:c7:05:96:93:51:be:03:86:e3:bc:25:55:46:57:
                    ad:87:e0:6f:61:f1:9d:20:06:48:9a:a8:97:9d:fe:
                    bd:02:cf:c2:84:6d:da:54:01:1e:f0:2b:7d:c4:7e:
                    ca:20:33:db:73:b6:30:56:17:0e:39:a5:b0:e6:cc:
                    86:c4:bb:08:86:de:06:56:b5:71:fe:cb:ac:30:dc:
                    eb:a9:4a:e4:07:64:0e:f0:b4:8e:3c:2c:d7:52:12:
                    ed:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F4:A7:14:AB:43:94:46:46:05:F2:28:60:29:C7:01:0E:7B:87:81
            X509v3 Authority Key Identifier:
                keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:0a:fc:1f:27:06:4f:20:a2:b2:8d:6b:d4:db:7b:7f:54:ee:
         b8:ac:b9:28:14:e9:1b:0a:24:f8:61:1c:5c:21:71:a3:33:98:
         47:ff:6f:84:d2:48:0d:1a:06:a3:d9:49:18:17:43:b1:1f:a6:
         89:9e:9a:13:80:ab:76:01:e3:83:53:fd:92:cf:a2:73:ed:7c:
         d8:a2:c3:42:9f:0e:c6:61:61:bb:54:c4:a5:23:87:fd:02:0e:
         c6:df:cf:73:77:e4:18:45:4c:7f:67:3e:18:54:ea:45:c7:7e:
         c7:64:5c:c0:40:8c:49:68:52:fe:2e:44:1b:2f:9e:37:50:77:
         3a:20:cc:42:38:99:1c:d6:7e:d4:30:99:13:67:78:9e:47:02:
         ff:61:38:5b:de:bb:26:e4:e5:55:a7:a4:84:9e:0e:6e:70:60:
         c8:b2:aa:d6:fe:fb:c2:31:6a:de:c1:38:1a:40:85:9f:7f:ab:
         b4:30:7e:db:7e:4c:7f:f6:10:02:76:c9:7a:27:5b:a3:b7:0d:
         ec:75:c3:17:18:66:66:33:43:d5:b1:97:73:36:9b:ee:56:9a:
         c5:9f:0c:2d:60:95:eb:2a:fd:62:e1:4b:ec:95:4f:70:81:5f:
         a7:df:df:7f:d7:b4:a7:44:c4:53:3d:6d:2b:d0:79:15:ae:c0:
         a4:08:ad:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:07:49 2025 by rpki-client