Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
File:                     L6FqsGAgBndApMH7R6kSYi8dByI.mft (raw, json)
Hash identifier:          t+8C9IzSprymdM/NX7e5tH3jlzgWNVBYfa5uyd/gfqc=
Subject key identifier:   96:15:6B:9F:17:B9:4B:24:92:2B:B2:B0:02:AD:D9:22:48:32:6A:76
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Certificate issuer:       /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial:       019830EF52DCAFBA39B540E031CB58796DA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
Manifest number:          1647
Signing time:             Tue 22 Jul 2025 07:00:47 +0000
Manifest this update:     Tue 22 Jul 2025 07:00:47 +0000
Manifest next update:     Wed 23 Jul 2025 07:00:47 +0000
Files and hashes:         1: 02fWEW39DtOipFMD6ASDF08vEEo.roa (hash: 1pcwpV4dprUlTN0j3595RWhsxMg7qArA3wLzpHqEd1w=)
                          2: 3p0j32cYUOCnf_3ix5oMK3cKjZU.roa (hash: B5xTeALfTdQDGuz03rj872RqicG0ddnazQY9+v5kIg4=)
                          3: Ca2-ogSZC5B8tEEmtw5KxAEhJPM.roa (hash: 9b2u0lDf0ZcTigZmXHynF17wPQBPLYhpE0B4WDhTJ3Y=)
                          4: IO-WtDQojrXnpAq8np1ov8CUCWc.roa (hash: wK5cAChC2zZKj0xpr4U4SsnHLvY+XqHr++A5Z8gxuX0=)
                          5: ITMu_9G0gZ7hDjqWsuWYXnKA06k.roa (hash: EJ6xKkVoas6urLwLSHL1qGXfG7nshMzfhgWsYNbJ5+c=)
                          6: L6FqsGAgBndApMH7R6kSYi8dByI.crl (hash: Tel3i4VFey+gpu9doMsk80jNUdLLml48l4oVqKv/QrA=)
                          7: NFmYzWkBl0tEXVCAjimOMbeZ05w.roa (hash: R5QkYmdUiNUTOAH1jI8sgRxo6knT03efS63N6kTFh/U=)
                          8: ODbto6bcK8aNz52zo3gSzY9ABBA.roa (hash: RO2Q1L8IuswwbS9beUyqLvb6YUHXrI5sMJQ94ealYrM=)
                          9: PAiV7wwH5lDn0JNrrWRqQNYoPCA.roa (hash: U/HM2vtQqlyAA5VvXddzuybceKGB/8tIXNAeUOLwY20=)
                          10: STYQ_SYXh2dq-C7xVZvQixI1Nko.roa (hash: vSZ2A0exPiZDNAtn0sk9ZHsG3cp+DcfIT5Z7upIIwZ4=)
                          11: YM3gYtjsCSk6V1--bovb_wYt7qI.roa (hash: HYnXH43Els8xcyz2VLZSSOsrk9jNKw0kKYdJbAGPWYk=)
                          12: aqmkhJlTlqxL9qQ_4a7JuspIios.roa (hash: fNPDsnQHTC9xg63koJtaKMKA62LHo0SqQzdTvfn/WNI=)
                          13: fLg2SaMIQSlzSFYFGBORzBovTYk.roa (hash: rlIWoEzmASI5VouJUKPcFn3tqT/IQL88vIzCEpCaf9k=)
                          14: gUT9YCkZWEcn742oGnu8ZfS34D8.roa (hash: AXHT/3cUQ+5r0lFJfezYLrNvbhUISwKUaKImq/bolQk=)
                          15: hxa6nxs_1z_VP7Dm_9A_jg_pRGc.roa (hash: /c24+EOtA2JGS+IHqjFa+CtjAJ+hAzZO9n24HxrhDss=)
                          16: jGhXzh2b4PKVeDKStlkuKpWSF1E.roa (hash: UKCCCfaCTIYyvaiefORFa+m9CnomjkMQIkqcoPohqCk=)
                          17: mxKqNAM863ITChJLjCi-JHUSkWw.roa (hash: dI+6FWK1t3x8Piw/q1k50w2Q/hiRygsH9DYBFb0RVSE=)
                          18: nwqJacIADazQWceEk0i_DcrEc18.roa (hash: cp3YvvxeAAf8S+OmYqsXjGDrz235C7l7AfhzBUVjgXU=)
                          19: pLpqca7Uyo2VN4c7iG8bk7Tvby0.roa (hash: 1CC5QDG9ExxRePRPfGaAzhbKQ4GWSPEJPxG3XPFJoGQ=)
                          20: qrkEYAyWdukZTm5XyqiS-xT8TmY.roa (hash: zSUcH0ExfvbaHK3qrtk/nMWlCvae+aNOPb/D60GUy1g=)
                          21: x58nBW842pZhjhJLCJx9GkCSrU4.roa (hash: yI29HuKDYhaUmkGPwd2s/nIFspAoGLTPT9OHHAMuvaY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 07:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:30:ef:52:dc:af:ba:39:b5:40:e0:31:cb:58:79:6d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
        Validity
            Not Before: Jul 22 07:00:47 2025 GMT
            Not After : Jul 23 07:00:47 2025 GMT
        Subject: CN=96156b9f17b94b24922bb2b002add92248326a76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4f:c1:95:64:b5:7a:ec:38:ea:3c:2d:3c:d3:
                    7a:c3:15:d8:bc:67:8a:fe:64:40:54:1e:88:31:31:
                    e2:a7:b3:51:53:f1:00:2e:75:d5:48:4c:9c:7b:f7:
                    96:4a:f6:53:ed:ea:ed:c4:b9:eb:1a:c8:a2:ae:66:
                    06:86:48:83:3a:50:7e:c3:7e:de:8a:c5:53:96:df:
                    02:26:ba:be:a1:d7:90:68:81:44:b7:09:b6:c2:b6:
                    b0:bf:bc:79:2e:a4:a3:10:fa:b3:02:c6:a3:2c:97:
                    f4:26:5a:55:6e:d9:c9:7d:0c:90:be:61:40:b2:3d:
                    c8:93:f0:27:20:09:df:bd:6c:2b:dd:a0:01:9a:aa:
                    22:50:28:81:0e:6d:bb:00:ee:a4:b2:74:44:fa:47:
                    88:63:b1:8c:31:b7:f0:79:07:b6:96:4b:72:86:4d:
                    e6:45:1b:e3:ad:3f:20:d3:42:36:6e:e7:05:40:fe:
                    cc:b3:3d:5c:3c:00:c1:d0:ac:c8:00:67:41:f6:ca:
                    03:bf:ac:11:10:78:00:37:df:15:07:9f:96:2f:02:
                    38:05:98:5f:3e:4e:a8:45:7a:17:7a:77:5b:4a:9a:
                    c7:02:b1:3c:2a:d6:2e:57:7e:7e:f6:ce:23:54:24:
                    e2:de:92:9c:11:3e:cf:89:b8:db:d9:22:f5:fb:26:
                    41:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:15:6B:9F:17:B9:4B:24:92:2B:B2:B0:02:AD:D9:22:48:32:6A:76
            X509v3 Authority Key Identifier:
                keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:e8:bb:80:99:c8:ea:bb:bd:e0:ea:6f:95:8b:c1:02:2d:57:
         0c:37:10:01:a2:93:8b:c7:84:6b:70:88:57:25:aa:9e:5e:e7:
         44:f9:ff:20:7f:4a:c4:53:ce:33:d3:04:3c:0e:53:11:a4:77:
         f8:96:a4:2a:cf:e2:20:1d:fd:d1:e0:57:f5:23:c8:3b:a0:b3:
         d2:69:7e:fb:95:ef:2c:97:51:7c:e6:6f:30:b2:ec:40:5c:1c:
         8f:28:07:d7:ff:16:94:24:6b:2b:7f:8b:86:a7:cc:ac:43:fd:
         cb:2f:20:b4:69:5e:93:04:be:d4:8b:4f:af:54:f7:49:e1:3d:
         18:97:3b:fd:8a:44:95:8c:b6:68:6c:87:64:bd:5a:2f:47:31:
         38:87:49:7e:d1:be:83:6d:65:0c:89:a6:1b:a4:1b:db:8e:e2:
         e0:57:a6:21:53:8c:7d:5f:95:5e:44:99:9c:1a:f2:1c:8b:ee:
         e7:8a:ba:c7:e5:8a:6a:bf:8a:d1:c4:62:e7:32:02:ab:f8:0a:
         58:88:4f:59:4f:e1:e3:1e:4a:2d:c3:fc:9f:43:dc:e6:71:65:
         46:18:ed:bb:07:ad:a8:4e:48:bc:0f:d2:9b:46:54:b9:39:45:
         bf:d3:cc:61:04:73:23:1c:ac:68:d5:47:99:f8:dc:db:72:3d:
         c4:3b:f1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:46:08 2025 by rpki-client