Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
File:                     L6FqsGAgBndApMH7R6kSYi8dByI.mft (raw, json)
Hash identifier:          1V/Juz09hKLqmMOo39xdWyiqyUHfevvkcsk/oa/5saY=
Subject key identifier:   00:F2:93:94:91:90:12:95:97:B3:F7:2A:AB:EB:87:C8:42:58:1E:6F
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Certificate issuer:       /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial:       01987605354EB0E5B926B49466410DA7729A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
Manifest number:          166B
Signing time:             Mon 04 Aug 2025 16:58:29 +0000
Manifest this update:     Mon 04 Aug 2025 16:58:29 +0000
Manifest next update:     Tue 05 Aug 2025 16:58:29 +0000
Files and hashes:         1: 02fWEW39DtOipFMD6ASDF08vEEo.roa (hash: 1pcwpV4dprUlTN0j3595RWhsxMg7qArA3wLzpHqEd1w=)
                          2: 3p0j32cYUOCnf_3ix5oMK3cKjZU.roa (hash: B5xTeALfTdQDGuz03rj872RqicG0ddnazQY9+v5kIg4=)
                          3: 9rXFP--lxmX7iHGh7HVsJ9PUPS8.roa (hash: xRkVXBq99M1ki5WFm8xjsUq6rF/BGplKNymIGwJhLL8=)
                          4: Ca2-ogSZC5B8tEEmtw5KxAEhJPM.roa (hash: 9b2u0lDf0ZcTigZmXHynF17wPQBPLYhpE0B4WDhTJ3Y=)
                          5: IO-WtDQojrXnpAq8np1ov8CUCWc.roa (hash: wK5cAChC2zZKj0xpr4U4SsnHLvY+XqHr++A5Z8gxuX0=)
                          6: ITMu_9G0gZ7hDjqWsuWYXnKA06k.roa (hash: EJ6xKkVoas6urLwLSHL1qGXfG7nshMzfhgWsYNbJ5+c=)
                          7: L6FqsGAgBndApMH7R6kSYi8dByI.crl (hash: YKal1sjJz3KjJofCRdzS044c23XI2u7D1tHvUni1oHU=)
                          8: NFmYzWkBl0tEXVCAjimOMbeZ05w.roa (hash: R5QkYmdUiNUTOAH1jI8sgRxo6knT03efS63N6kTFh/U=)
                          9: PAiV7wwH5lDn0JNrrWRqQNYoPCA.roa (hash: U/HM2vtQqlyAA5VvXddzuybceKGB/8tIXNAeUOLwY20=)
                          10: STYQ_SYXh2dq-C7xVZvQixI1Nko.roa (hash: vSZ2A0exPiZDNAtn0sk9ZHsG3cp+DcfIT5Z7upIIwZ4=)
                          11: YM3gYtjsCSk6V1--bovb_wYt7qI.roa (hash: HYnXH43Els8xcyz2VLZSSOsrk9jNKw0kKYdJbAGPWYk=)
                          12: aqmkhJlTlqxL9qQ_4a7JuspIios.roa (hash: fNPDsnQHTC9xg63koJtaKMKA62LHo0SqQzdTvfn/WNI=)
                          13: fLg2SaMIQSlzSFYFGBORzBovTYk.roa (hash: rlIWoEzmASI5VouJUKPcFn3tqT/IQL88vIzCEpCaf9k=)
                          14: gUT9YCkZWEcn742oGnu8ZfS34D8.roa (hash: AXHT/3cUQ+5r0lFJfezYLrNvbhUISwKUaKImq/bolQk=)
                          15: hxa6nxs_1z_VP7Dm_9A_jg_pRGc.roa (hash: /c24+EOtA2JGS+IHqjFa+CtjAJ+hAzZO9n24HxrhDss=)
                          16: jGhXzh2b4PKVeDKStlkuKpWSF1E.roa (hash: UKCCCfaCTIYyvaiefORFa+m9CnomjkMQIkqcoPohqCk=)
                          17: mxKqNAM863ITChJLjCi-JHUSkWw.roa (hash: dI+6FWK1t3x8Piw/q1k50w2Q/hiRygsH9DYBFb0RVSE=)
                          18: pLpqca7Uyo2VN4c7iG8bk7Tvby0.roa (hash: 1CC5QDG9ExxRePRPfGaAzhbKQ4GWSPEJPxG3XPFJoGQ=)
                          19: qrkEYAyWdukZTm5XyqiS-xT8TmY.roa (hash: zSUcH0ExfvbaHK3qrtk/nMWlCvae+aNOPb/D60GUy1g=)
                          20: qy54wvD-UqyI03aLQcqKG-q0PRw.roa (hash: yKYBGINVrUtVUmFPJ4gA643gf/r/PoTI448Js0/vezM=)
                          21: x58nBW842pZhjhJLCJx9GkCSrU4.roa (hash: yI29HuKDYhaUmkGPwd2s/nIFspAoGLTPT9OHHAMuvaY=)
                          22: z5n7P_P-VsaJlXRYUQIOPasmiEg.roa (hash: aE4YE3VEUQItwRJA7QaxxE/zzpEVrkDD4qmofAvWPXA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:76:05:35:4e:b0:e5:b9:26:b4:94:66:41:0d:a7:72:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
        Validity
            Not Before: Aug  4 16:58:29 2025 GMT
            Not After : Aug  5 16:58:29 2025 GMT
        Subject: CN=00f293949190129597b3f72aabeb87c842581e6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d6:cc:42:c8:96:4a:9a:83:70:b0:14:80:35:
                    46:99:fb:2d:15:d6:af:1c:da:63:88:6b:44:37:91:
                    8e:ee:f5:01:57:9f:70:49:79:66:fd:ad:75:12:e4:
                    b7:b4:6e:89:71:b3:13:f7:a9:7a:3b:d7:8c:4e:cc:
                    d0:9a:31:a5:a0:4d:60:ac:dd:94:c6:1b:de:a1:f4:
                    88:49:54:3c:91:db:97:ae:50:16:af:2a:bd:7f:ff:
                    54:72:1a:09:ce:0b:66:6e:56:a5:05:0b:0d:63:08:
                    73:2f:0a:e0:a0:34:19:da:75:e8:ea:b9:dd:c1:97:
                    a7:26:95:8f:52:d4:88:50:47:34:18:6b:17:5e:26:
                    92:97:e7:9c:19:94:6a:7a:ae:9c:77:f3:81:26:df:
                    e5:5f:0c:5f:67:3c:fc:d1:02:d0:43:65:5e:ee:5b:
                    bb:44:79:2f:ce:aa:67:99:69:97:08:ca:40:98:07:
                    5b:a7:98:d8:da:07:9d:7e:2e:78:10:f7:68:51:46:
                    11:c5:23:55:26:90:aa:aa:3e:e7:8b:a1:c6:38:36:
                    7e:0e:ba:f7:33:bc:b5:ba:ea:64:a9:1b:42:b4:6f:
                    f1:9d:02:fc:6a:90:31:b1:9e:2f:ad:b9:58:c4:d9:
                    9c:30:a7:64:cc:79:1d:44:6d:80:60:f1:f2:3a:6f:
                    14:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F2:93:94:91:90:12:95:97:B3:F7:2A:AB:EB:87:C8:42:58:1E:6F
            X509v3 Authority Key Identifier:
                keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:b6:e3:bf:e3:4f:da:ce:05:91:c0:12:4d:2f:d5:3d:6c:74:
         d0:10:2d:81:cc:9b:09:a0:6b:36:8b:d4:14:a5:e2:d6:be:da:
         2b:09:00:72:68:9e:6c:be:9e:98:eb:5b:34:59:73:2c:71:5e:
         40:26:9d:66:e7:15:a1:8b:52:0e:bf:44:9c:82:fb:a9:e5:77:
         47:11:9f:1c:23:dc:d2:f1:6a:13:6d:aa:a9:ee:42:d0:9e:c8:
         39:2d:90:ad:db:21:93:5b:6f:61:24:04:1a:eb:29:79:d7:5c:
         e1:ac:a0:d2:a3:04:17:b7:bf:9a:8d:ea:50:65:c3:1a:90:ee:
         0c:8e:78:c2:70:f4:09:3e:94:99:7e:a6:d8:ef:cb:63:9f:c6:
         af:d0:c1:0e:52:77:66:b4:35:8f:b8:e5:ff:57:aa:76:ef:a6:
         d7:8a:b4:2a:91:41:c0:ef:52:c9:e9:5d:8a:94:51:dd:8c:72:
         a9:f3:c7:35:64:68:11:56:34:8c:80:21:a7:93:c3:95:4e:0c:
         04:0c:d9:d0:52:89:6b:79:5b:1a:3f:66:fc:bf:dc:d7:62:fe:
         d4:00:d0:4f:16:52:7c:a7:6f:6c:19:9f:b6:5f:94:93:38:47:
         85:f3:94:a1:ef:78:61:77:9d:95:f7:e9:8a:d9:a5:5b:9c:21:
         3f:07:df:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:30:28 2025 by rpki-client