Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
File:                     L6FqsGAgBndApMH7R6kSYi8dByI.mft (raw, json)
Hash identifier:          fiHzcEEr0APoKYnuD2iKQ6u25vLthGtttTTT0uZ06SU=
Subject key identifier:   74:F8:7B:1C:92:7D:55:0D:5E:BB:E7:E0:0F:FD:5E:83:4F:7A:78:2C
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Certificate issuer:       /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial:       01976CCF6A164781834F11FB883FBA774EA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
Manifest number:          15E0
Signing time:             Sat 14 Jun 2025 05:00:21 +0000
Manifest this update:     Sat 14 Jun 2025 05:00:21 +0000
Manifest next update:     Sun 15 Jun 2025 05:00:21 +0000
Files and hashes:         1: 02fWEW39DtOipFMD6ASDF08vEEo.roa (hash: 1pcwpV4dprUlTN0j3595RWhsxMg7qArA3wLzpHqEd1w=)
                          2: 3p0j32cYUOCnf_3ix5oMK3cKjZU.roa (hash: B5xTeALfTdQDGuz03rj872RqicG0ddnazQY9+v5kIg4=)
                          3: Ca2-ogSZC5B8tEEmtw5KxAEhJPM.roa (hash: 9b2u0lDf0ZcTigZmXHynF17wPQBPLYhpE0B4WDhTJ3Y=)
                          4: IO-WtDQojrXnpAq8np1ov8CUCWc.roa (hash: wK5cAChC2zZKj0xpr4U4SsnHLvY+XqHr++A5Z8gxuX0=)
                          5: ITMu_9G0gZ7hDjqWsuWYXnKA06k.roa (hash: EJ6xKkVoas6urLwLSHL1qGXfG7nshMzfhgWsYNbJ5+c=)
                          6: L6FqsGAgBndApMH7R6kSYi8dByI.crl (hash: fwn7dhcY/6RxYtq4SipUnNw5ay0VAoEEmKe+M9SRRgs=)
                          7: NFmYzWkBl0tEXVCAjimOMbeZ05w.roa (hash: R5QkYmdUiNUTOAH1jI8sgRxo6knT03efS63N6kTFh/U=)
                          8: ODbto6bcK8aNz52zo3gSzY9ABBA.roa (hash: RO2Q1L8IuswwbS9beUyqLvb6YUHXrI5sMJQ94ealYrM=)
                          9: PAiV7wwH5lDn0JNrrWRqQNYoPCA.roa (hash: U/HM2vtQqlyAA5VvXddzuybceKGB/8tIXNAeUOLwY20=)
                          10: STYQ_SYXh2dq-C7xVZvQixI1Nko.roa (hash: vSZ2A0exPiZDNAtn0sk9ZHsG3cp+DcfIT5Z7upIIwZ4=)
                          11: YM3gYtjsCSk6V1--bovb_wYt7qI.roa (hash: HYnXH43Els8xcyz2VLZSSOsrk9jNKw0kKYdJbAGPWYk=)
                          12: aqmkhJlTlqxL9qQ_4a7JuspIios.roa (hash: fNPDsnQHTC9xg63koJtaKMKA62LHo0SqQzdTvfn/WNI=)
                          13: btdqouSuvTnu5DtsYBtviNCSRGI.roa (hash: 9yhn+ydyEWccKgPvwrADcup6LmhJvAZUr2NpWIGBFR8=)
                          14: fLg2SaMIQSlzSFYFGBORzBovTYk.roa (hash: rlIWoEzmASI5VouJUKPcFn3tqT/IQL88vIzCEpCaf9k=)
                          15: gUT9YCkZWEcn742oGnu8ZfS34D8.roa (hash: AXHT/3cUQ+5r0lFJfezYLrNvbhUISwKUaKImq/bolQk=)
                          16: hxa6nxs_1z_VP7Dm_9A_jg_pRGc.roa (hash: /c24+EOtA2JGS+IHqjFa+CtjAJ+hAzZO9n24HxrhDss=)
                          17: jGhXzh2b4PKVeDKStlkuKpWSF1E.roa (hash: UKCCCfaCTIYyvaiefORFa+m9CnomjkMQIkqcoPohqCk=)
                          18: mxKqNAM863ITChJLjCi-JHUSkWw.roa (hash: dI+6FWK1t3x8Piw/q1k50w2Q/hiRygsH9DYBFb0RVSE=)
                          19: pLpqca7Uyo2VN4c7iG8bk7Tvby0.roa (hash: 1CC5QDG9ExxRePRPfGaAzhbKQ4GWSPEJPxG3XPFJoGQ=)
                          20: qrkEYAyWdukZTm5XyqiS-xT8TmY.roa (hash: zSUcH0ExfvbaHK3qrtk/nMWlCvae+aNOPb/D60GUy1g=)
                          21: wJ7CKKiQXbsPpU2tQu2oYE5Ks50.roa (hash: yANPJHhCtesYANgIrnLFv1j+dF/ic7glBbw6RdagPtI=)
                          22: x58nBW842pZhjhJLCJx9GkCSrU4.roa (hash: yI29HuKDYhaUmkGPwd2s/nIFspAoGLTPT9OHHAMuvaY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:cf:6a:16:47:81:83:4f:11:fb:88:3f:ba:77:4e:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
        Validity
            Not Before: Jun 14 05:00:21 2025 GMT
            Not After : Jun 15 05:00:21 2025 GMT
        Subject: CN=74f87b1c927d550d5ebbe7e00ffd5e834f7a782c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9d:cf:42:90:dc:13:b0:cf:d1:ad:79:99:1c:
                    58:b9:34:bf:8d:54:b5:4f:f4:13:47:cc:15:cc:ed:
                    c4:8a:9f:cc:b4:8b:42:cd:5c:b3:5a:bb:76:bd:64:
                    1a:f7:af:a7:12:83:5d:8c:c7:2b:2e:da:b9:1e:07:
                    97:d4:37:dc:81:c9:a3:60:ff:c2:c7:7d:9d:42:81:
                    7d:2d:e5:52:24:d9:af:5c:ae:dd:d2:82:af:85:2c:
                    6f:35:c3:3d:ea:89:2c:76:a8:31:da:fd:2f:e0:bf:
                    83:26:22:75:e0:39:fe:79:09:fd:3a:03:8b:ee:28:
                    a3:af:48:0b:bc:2a:9c:44:7e:9f:f9:60:2a:54:c9:
                    7b:65:c4:26:b8:8b:01:bb:ff:55:05:07:e4:2c:ea:
                    cf:eb:46:cd:b5:ff:86:bd:ee:a1:41:25:bf:b1:f0:
                    52:03:21:fc:11:7d:f9:ed:a9:08:a9:a0:f7:9d:30:
                    42:97:9c:b2:ef:1b:0a:f6:eb:f6:7b:c2:6a:7f:28:
                    5e:f6:c9:ad:92:7b:9a:f2:03:99:95:3a:04:08:30:
                    71:f0:c4:7d:8f:52:e5:59:7d:90:9e:01:35:5e:93:
                    33:dd:93:9c:de:cf:2c:03:4b:1f:3c:39:c1:0c:75:
                    d9:73:da:d3:de:a4:c3:fa:95:be:d4:e9:b6:3f:ed:
                    50:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F8:7B:1C:92:7D:55:0D:5E:BB:E7:E0:0F:FD:5E:83:4F:7A:78:2C
            X509v3 Authority Key Identifier:
                keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:5e:90:51:c8:4f:c6:f2:05:c2:c5:b8:37:e2:09:6b:54:67:
         76:74:4d:53:19:cf:b0:d8:c3:4e:3e:bf:88:6d:89:40:d9:16:
         52:ab:22:9d:a4:03:23:78:fe:a5:4d:d4:0b:19:85:15:e8:90:
         c4:d2:9d:0f:8b:d8:30:ab:18:66:ae:35:59:62:d6:1b:2d:b3:
         ab:e0:98:a7:5d:4e:d2:d4:51:97:f5:6c:92:47:69:40:24:9c:
         47:d1:02:10:36:a7:a1:ce:2b:8c:dc:d1:37:84:a0:ec:c1:5e:
         22:f9:89:ce:5c:71:1e:a2:8d:d8:aa:0b:d0:29:00:d8:a6:a0:
         6b:f1:6b:3f:43:d3:35:49:fd:bc:38:36:4c:67:77:97:ed:10:
         05:44:3a:be:be:66:71:62:5c:3f:4b:43:b8:1b:44:c0:f2:e4:
         0f:bc:46:27:49:9e:1a:b6:5c:10:81:b8:2d:c1:64:66:6d:78:
         29:ec:66:f8:2e:95:26:1c:57:19:9f:32:18:fc:3d:97:cf:08:
         ea:04:16:8a:2b:25:97:cd:08:f0:7d:9a:de:5c:5c:95:fb:67:
         11:ed:8d:5e:16:fe:49:3f:75:38:ed:75:6e:22:b9:b5:ba:ba:
         98:3c:9d:89:9f:b2:0c:29:a2:2e:07:cc:85:2c:df:7f:f5:1f:
         85:ef:76:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:22:39 2025 by rpki-client