Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/3008ef-8e3b-43d9-a889-429e7b05e815/1/SEwPoomLCocGbJNT5mk0TKm2Nm8.mft
File:                     SEwPoomLCocGbJNT5mk0TKm2Nm8.mft (raw, json)
Hash identifier:          ZKRaAP45e7Juy2iumFhMpFJQSFgsPrygbmMdu1lKiwY=
Subject key identifier:   9C:25:45:49:D3:9D:29:C4:19:11:F9:87:F0:68:5D:40:92:07:BA:DB
Authority key identifier: 48:4C:0F:A2:89:8B:0A:87:06:6C:93:53:E6:69:34:4C:A9:B6:36:6F
Certificate issuer:       /CN=484c0fa2898b0a87066c9353e669344ca9b6366f
Certificate serial:       01A11C7583D84569A2974B5D099D26FE6951
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SEwPoomLCocGbJNT5mk0TKm2Nm8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/3008ef-8e3b-43d9-a889-429e7b05e815/1/SEwPoomLCocGbJNT5mk0TKm2Nm8.mft
Manifest number:          013B
Signing time:             Thu 08 Oct 2026 17:00:25 +0000
Manifest this update:     Thu 08 Oct 2026 17:00:25 +0000
Manifest next update:     Fri 09 Oct 2026 17:00:25 +0000
Files and hashes:         1: SEwPoomLCocGbJNT5mk0TKm2Nm8.crl (hash: tP9Mwl3Xgy/K/PAP2GznqJuXhdVHN2ioqIQ2kp4R9Oc=)
                          2: u9FRg4HZmYxe88AmtVq7nrsLcrw.roa (hash: H8HNXc9+pLASdlhH9aRSNMbBUgB4ROYUT/WeWXSCWZo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/3008ef-8e3b-43d9-a889-429e7b05e815/1/SEwPoomLCocGbJNT5mk0TKm2Nm8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/3008ef-8e3b-43d9-a889-429e7b05e815/1/SEwPoomLCocGbJNT5mk0TKm2Nm8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SEwPoomLCocGbJNT5mk0TKm2Nm8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 14:16:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1c:75:83:d8:45:69:a2:97:4b:5d:09:9d:26:fe:69:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=484c0fa2898b0a87066c9353e669344ca9b6366f
        Validity
            Not Before: Oct  8 17:00:25 2026 GMT
            Not After : Oct  9 17:00:25 2026 GMT
        Subject: CN=9c254549d39d29c41911f987f0685d409207badb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b4:d9:21:5a:65:84:4a:15:ac:df:3b:ce:f3:
                    12:0b:2d:62:9c:c5:17:65:1d:5a:94:6e:7b:76:53:
                    61:04:56:e4:c6:5b:8e:06:5d:42:7b:75:0e:66:31:
                    70:78:5a:09:b5:59:79:94:ea:0d:00:65:8f:41:8c:
                    16:58:e4:e4:32:4d:f2:d1:21:62:f8:56:13:11:e0:
                    18:ca:2f:bc:4c:af:24:4e:05:d6:cf:49:3c:80:87:
                    9d:65:41:45:37:a3:71:fc:c3:62:0b:ed:49:2f:be:
                    87:6e:60:db:a1:09:34:3a:6a:02:41:a4:a9:c7:c9:
                    52:1c:81:d7:66:98:a5:bd:a0:62:5e:0d:c5:74:f4:
                    5c:16:2e:93:7d:57:89:57:89:60:c9:02:90:17:60:
                    ad:1e:7c:c3:62:42:80:40:02:07:f4:77:35:b9:c2:
                    3a:ea:39:b4:e5:a3:49:6c:be:da:79:cb:a3:08:07:
                    7a:6a:04:78:92:ff:6d:bd:b1:e0:a7:07:de:e1:f8:
                    88:d0:ef:39:2a:16:6e:1b:7d:87:1a:0a:58:01:66:
                    72:d9:b7:7f:13:ee:ec:9e:02:3a:f0:f0:c5:21:b9:
                    3f:14:47:df:a1:ad:cd:39:31:8d:91:5c:ff:06:32:
                    09:d4:09:73:79:55:11:bc:cb:93:0d:b4:9b:68:70:
                    da:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:25:45:49:D3:9D:29:C4:19:11:F9:87:F0:68:5D:40:92:07:BA:DB
            X509v3 Authority Key Identifier:
                keyid:48:4C:0F:A2:89:8B:0A:87:06:6C:93:53:E6:69:34:4C:A9:B6:36:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SEwPoomLCocGbJNT5mk0TKm2Nm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3008ef-8e3b-43d9-a889-429e7b05e815/1/SEwPoomLCocGbJNT5mk0TKm2Nm8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3008ef-8e3b-43d9-a889-429e7b05e815/1/SEwPoomLCocGbJNT5mk0TKm2Nm8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:e7:92:1b:08:68:68:77:d5:17:c8:24:5f:95:c7:b1:4e:f0:
         e1:20:b1:df:08:1d:38:6a:46:81:df:d5:13:e5:98:06:83:73:
         51:ef:69:20:bc:e3:6f:c3:0b:85:97:81:d3:13:95:23:29:f9:
         e5:5a:c9:50:4e:bc:33:ba:32:ed:bb:fa:68:33:25:7b:f6:cb:
         29:fe:8b:8a:9b:ab:ab:2b:f6:1e:3e:81:f0:c6:40:03:45:e3:
         06:6f:d7:98:e1:0b:63:a0:7e:f7:66:2a:99:68:9f:c9:f3:68:
         c7:ac:6f:cd:b1:e2:56:bc:3d:2a:e8:25:bc:49:94:53:bc:70:
         ae:ba:09:3d:40:a7:11:5c:ea:38:e7:76:2f:a7:1d:e4:95:5f:
         9d:3c:e1:41:61:3f:aa:e3:56:23:e2:ba:a1:2f:9f:ee:6b:78:
         f2:df:a9:91:a3:b3:ef:3a:83:ac:b5:19:a3:67:dd:6d:47:8e:
         9e:97:b9:ec:28:3e:7d:4a:6a:33:dd:bc:12:25:60:a7:64:c2:
         c5:ad:29:2e:f5:2d:5c:50:9b:b5:b5:d7:3e:f9:d5:55:47:27:
         bf:61:43:2e:89:81:e4:18:12:bc:53:31:3d:6b:89:39:8f:a4:
         d9:4e:a0:03:e4:67:3f:f8:4d:5d:b8:34:c5:ac:86:57:93:cf:
         ae:e6:39:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEcdYPYRWmil0tdCZ0m/mlRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NGMwZmEyODk4YjBhODcwNjZjOTM1M2U2NjkzNDRjYTli
NjM2NmYwHhcNMjYxMDA4MTcwMDI1WhcNMjYxMDA5MTcwMDI1WjAzMTEwLwYDVQQD
Eyg5YzI1NDU0OWQzOWQyOWM0MTkxMWY5ODdmMDY4NWQ0MDkyMDdiYWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLTZIVplhEoVrN87zvMSCy1inMUX
ZR1alG57dlNhBFbkxluOBl1Ce3UOZjFweFoJtVl5lOoNAGWPQYwWWOTkMk3y0SFi
+FYTEeAYyi+8TK8kTgXWz0k8gIedZUFFN6Nx/MNiC+1JL76HbmDboQk0OmoCQaSp
x8lSHIHXZpilvaBiXg3FdPRcFi6TfVeJV4lgyQKQF2CtHnzDYkKAQAIH9Hc1ucI6
6jm05aNJbL7aecujCAd6agR4kv9tvbHgpwfe4fiI0O85KhZuG32HGgpYAWZy2bd/
E+7sngI68PDFIbk/FEffoa3NOTGNkVz/BjIJ1AlzeVURvMuTDbSbaHDaMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJwlRUnTnSnEGRH5h/BoXUCSB7rbMB8GA1UdIwQY
MBaAFEhMD6KJiwqHBmyTU+ZpNEyptjZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0V3UG9vbUxDb2NHYkpOVDVtazBUS20yTm04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8zMDA4ZWYtOGUzYi00M2Q5LWE4ODkt
NDI5ZTdiMDVlODE1LzEvU0V3UG9vbUxDb2NHYkpOVDVtazBUS20yTm04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS8zMDA4ZWYtOGUzYi00M2Q5LWE4ODktNDI5ZTdiMDVlODE1
LzEvU0V3UG9vbUxDb2NHYkpOVDVtazBUS20yTm04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAieeSGwho
aHfVF8gkX5XHsU7w4SCx3wgdOGpGgd/VE+WYBoNzUe9pILzjb8MLhZeB0xOVIyn5
5VrJUE68M7oy7bv6aDMle/bLKf6Lipurqyv2Hj6B8MZAA0XjBm/XmOELY6B+92Yq
mWifyfNox6xvzbHiVrw9KuglvEmUU7xwrroJPUCnEVzqOOd2L6cd5JVfnTzhQWE/
quNWI+K6oS+f7mt48t+pkaOz7zqDrLUZo2fdbUeOnpe57Cg+fUpqM928EiVgp2TC
xa0pLvUtXFCbtbXXPvnVVUcnv2FDLomB5BgSvFMxPWuJOY+k2U6gA+RnP/hNXbg0
xayGV5PPruY5mQ==
-----END CERTIFICATE-----
Generated at Thu Oct 8 22:25:03 2026 by rpki-client