Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
File:                     L6FqsGAgBndApMH7R6kSYi8dByI.mft (raw, json)
Hash identifier:          OXx+F0WaG7pCEJn80DEGlITUAX8dIwChNohjAgGCe4s=
Subject key identifier:   0D:9E:44:B1:03:FA:AB:9E:F6:68:32:DF:94:B1:AF:3B:07:0D:F7:D2
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Certificate issuer:       /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial:       019A4E4FD82289F21841F179B95718A8BB15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
Manifest number:          1765
Signing time:             Tue 04 Nov 2025 10:00:46 +0000
Manifest this update:     Tue 04 Nov 2025 10:00:46 +0000
Manifest next update:     Wed 05 Nov 2025 10:00:46 +0000
Files and hashes:         1: 02fWEW39DtOipFMD6ASDF08vEEo.roa (hash: 1pcwpV4dprUlTN0j3595RWhsxMg7qArA3wLzpHqEd1w=)
                          2: 3p0j32cYUOCnf_3ix5oMK3cKjZU.roa (hash: B5xTeALfTdQDGuz03rj872RqicG0ddnazQY9+v5kIg4=)
                          3: Ca2-ogSZC5B8tEEmtw5KxAEhJPM.roa (hash: 9b2u0lDf0ZcTigZmXHynF17wPQBPLYhpE0B4WDhTJ3Y=)
                          4: D9Tgl1iqPVqzogreZQaLciUO1Ak.roa (hash: ALXBuyDrvec1RQ7PDmdQXAupe4CfkfhDi04uH+kRt5M=)
                          5: IO-WtDQojrXnpAq8np1ov8CUCWc.roa (hash: wK5cAChC2zZKj0xpr4U4SsnHLvY+XqHr++A5Z8gxuX0=)
                          6: L6FqsGAgBndApMH7R6kSYi8dByI.crl (hash: ruWP1SBj0EgLpakJTm0Tn06WGwJ3TFcezXEKzpb+aB8=)
                          7: NFmYzWkBl0tEXVCAjimOMbeZ05w.roa (hash: R5QkYmdUiNUTOAH1jI8sgRxo6knT03efS63N6kTFh/U=)
                          8: NdE7_aVOasdjLTrUFo34L8XDskM.roa (hash: Rpe05oJlIyYdtATGAHAsssRayQgvtIFe7+sN5fARdgw=)
                          9: STYQ_SYXh2dq-C7xVZvQixI1Nko.roa (hash: vSZ2A0exPiZDNAtn0sk9ZHsG3cp+DcfIT5Z7upIIwZ4=)
                          10: SW_D2qUYG_GJbG_CnJtWBtVKvgI.roa (hash: /lUDCFHXonIPfSjzQsSAFVK7VYALWQeMdUB54XoyzJM=)
                          11: WhmXlVvWq-vWbYCCUU3N-8AbsTo.roa (hash: WOaGZw2hMcCNM1tk4Bj1gxbSLeClLoXG8ozyPK4gMmg=)
                          12: aqmkhJlTlqxL9qQ_4a7JuspIios.roa (hash: fNPDsnQHTC9xg63koJtaKMKA62LHo0SqQzdTvfn/WNI=)
                          13: c_19Vx--kByJ3CPnE7fV-9YqsIY.roa (hash: rJLkbkwSaNNZ3V0/FlZ9GpdAVCm/X795+DoI8i7OpAM=)
                          14: dAC2GLLnuP3dogD0JGdrX2daeeM.roa (hash: iM+rgJ0rit47HCIo1jDExJJ2osAP3O/11TPPT1f3tsY=)
                          15: fLg2SaMIQSlzSFYFGBORzBovTYk.roa (hash: rlIWoEzmASI5VouJUKPcFn3tqT/IQL88vIzCEpCaf9k=)
                          16: gUT9YCkZWEcn742oGnu8ZfS34D8.roa (hash: AXHT/3cUQ+5r0lFJfezYLrNvbhUISwKUaKImq/bolQk=)
                          17: hxa6nxs_1z_VP7Dm_9A_jg_pRGc.roa (hash: /c24+EOtA2JGS+IHqjFa+CtjAJ+hAzZO9n24HxrhDss=)
                          18: jGhXzh2b4PKVeDKStlkuKpWSF1E.roa (hash: UKCCCfaCTIYyvaiefORFa+m9CnomjkMQIkqcoPohqCk=)
                          19: mxKqNAM863ITChJLjCi-JHUSkWw.roa (hash: dI+6FWK1t3x8Piw/q1k50w2Q/hiRygsH9DYBFb0RVSE=)
                          20: pLpqca7Uyo2VN4c7iG8bk7Tvby0.roa (hash: 1CC5QDG9ExxRePRPfGaAzhbKQ4GWSPEJPxG3XPFJoGQ=)
                          21: qrkEYAyWdukZTm5XyqiS-xT8TmY.roa (hash: zSUcH0ExfvbaHK3qrtk/nMWlCvae+aNOPb/D60GUy1g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:4f:d8:22:89:f2:18:41:f1:79:b9:57:18:a8:bb:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
        Validity
            Not Before: Nov  4 10:00:46 2025 GMT
            Not After : Nov  5 10:00:46 2025 GMT
        Subject: CN=0d9e44b103faab9ef66832df94b1af3b070df7d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:14:f9:34:a5:2a:28:c5:1e:10:8f:f6:9d:1e:
                    0d:d4:d6:9d:96:a1:98:f4:af:41:9b:f1:56:f4:13:
                    ec:e8:a0:10:bc:85:1a:ee:4c:ac:a9:0a:5b:9c:bc:
                    a9:43:e9:93:ca:7e:92:db:76:74:d4:87:d0:20:de:
                    ff:f1:df:d0:91:54:e2:ce:27:52:c0:27:50:a5:73:
                    50:e7:69:32:fc:eb:2f:2b:a0:b8:2e:e4:37:9d:4b:
                    f0:85:8c:75:06:f8:e5:c9:62:93:16:63:3b:c1:5e:
                    d3:f4:37:c6:04:91:86:84:60:0d:58:8d:25:3b:27:
                    7b:6e:ab:bc:27:0d:07:07:b6:ce:0a:1b:bb:9d:e1:
                    91:e6:01:25:6e:ff:3c:21:0f:2b:d6:94:9c:6c:03:
                    16:66:a3:23:9c:4a:d2:02:6f:df:bb:cf:10:b7:e6:
                    4e:71:58:56:df:90:05:5e:9e:ad:1d:26:76:ae:2b:
                    b8:16:58:60:1a:f2:0e:c8:ff:34:7f:a3:6c:55:73:
                    93:58:4f:3b:30:34:fb:6b:0b:ea:29:6f:5c:15:2c:
                    98:ab:6d:03:2a:d2:4d:09:e9:1a:90:7a:03:0d:47:
                    9a:0e:12:d6:21:d4:bf:16:f7:06:20:62:cb:3e:1a:
                    7c:4c:9a:73:88:ac:f4:3b:1d:5a:33:6a:f2:d1:6c:
                    95:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:9E:44:B1:03:FA:AB:9E:F6:68:32:DF:94:B1:AF:3B:07:0D:F7:D2
            X509v3 Authority Key Identifier:
                keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:e2:a0:16:0f:4a:a4:e7:42:a3:a6:be:98:08:ec:51:fc:f9:
         04:06:fa:87:05:3c:0c:f4:b7:49:bd:83:52:7b:f7:be:73:4b:
         08:de:5d:45:a5:32:da:4a:37:10:c5:05:7a:6d:36:75:0c:a5:
         2b:f5:ea:4e:a1:7a:85:6d:bb:e8:87:87:d9:85:fd:12:ae:72:
         93:a5:54:67:fe:73:96:4f:81:ba:54:c1:a3:d6:1d:1e:ca:6d:
         b1:0c:b0:b9:08:61:a1:31:fa:18:2f:2b:ac:2f:eb:7b:70:7d:
         87:1d:53:5b:45:94:9c:41:c6:02:8b:2f:2f:89:28:1a:3f:8b:
         07:36:62:02:18:c5:c5:91:38:ae:6e:16:1d:47:82:a3:6d:e4:
         0d:81:24:63:4f:c0:f7:ca:61:02:62:9a:de:0e:53:c8:6a:d9:
         2c:1e:29:d8:f6:7e:a6:6f:45:c4:ed:d0:4f:54:89:2e:c6:82:
         86:af:4b:52:8a:c1:4d:08:02:f7:92:10:0d:1a:f3:af:3a:a0:
         e8:c1:18:e0:0b:7c:44:e9:92:d3:2b:00:30:c5:33:bc:c2:ad:
         d9:02:04:07:91:29:8c:6f:24:31:b2:79:30:99:9e:b5:81:ce:
         fd:2d:c7:98:8d:e2:91:a7:ce:a6:65:f9:40:a8:68:af:43:6c:
         39:e3:dc:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:42:53 2025 by rpki-client