Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
File:                     L6FqsGAgBndApMH7R6kSYi8dByI.mft (raw, json)
Hash identifier:          4vEjl9/e2KS9qA0W27qBUj7PkoK5hvkapUX+GmHKsTo=
Subject key identifier:   08:E4:4E:EF:15:A2:DA:33:CF:EB:F1:1E:20:8C:92:B6:47:5D:E8:F3
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Certificate issuer:       /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial:       01A0724E0F233BC2B7B0368F1C899A098417
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
Manifest number:          1AAA
Signing time:             Sat 05 Sep 2026 16:01:53 +0000
Manifest this update:     Sat 05 Sep 2026 16:01:53 +0000
Manifest next update:     Sun 06 Sep 2026 16:01:53 +0000
Files and hashes:         1: 06fSg1kB8ckHlCpjtqtFvEEoGmo.roa (hash: f48NpMpstUXIPO7HPVODVDToQ8B0NiDFbk8U3q4Yolw=)
                          2: 1zTKaDP4-Zj9mUt7-S5YAcY_mVo.roa (hash: 5+5yfPGg5lDhghBfx+dnbTS3tC9lex/WG7QMbZj26A4=)
                          3: 3Qr0L0RQ_Z8R5Cc74oenvNgwB5I.roa (hash: pkT85WzVKfS8+6maKuMZ3/z/S227uMf4I4OAK0s81z8=)
                          4: 71fh7xRTZMQEFeADtvBms8Jxriw.roa (hash: TUhapUQZ7I+Jwf6YXi6D4YZvbKOEtBxwBuVU+O4dqaU=)
                          5: 7XKrY6sRi0TOpYVIC72L4eR2QMQ.roa (hash: dRjz/HPxAbIEZD8TfYo3oBDmUxS8I/PLZra+7sLx66k=)
                          6: DEqgDw1OjuvCUcoY_GFoXdYUL-g.roa (hash: uaVIfBigKYn9jPBacBnYHFMS2xbXYfQ5wT7j6FjYz1s=)
                          7: IEYsZgA5S8VfmxdDgbohhLTNNns.roa (hash: iEIpm0ezjdj8b3/qEAPdEkQRFU/FlcYxVmHq5++f9/Q=)
                          8: ITJ_4YK0o5n4s0S4B56m9EJ0ogg.roa (hash: kcpE8+HMiQBohKY0fa+TOjXFBG4SK95c0ErHWF7t+v8=)
                          9: J-fPqsN-bTywutCgBgm0oMsMZn4.roa (hash: GwWRnUTMSKlctTV12vVbv4ww0CbgnMjaJS61PVU8Qu8=)
                          10: KH7cexp6-l1q-hMz0XztCASAh_0.roa (hash: n04fnnbHSBbrosj8SpMmI2CoVRjTOGfNu9TSTWPU2ig=)
                          11: L6FqsGAgBndApMH7R6kSYi8dByI.crl (hash: dnP62gl2dGZHoydMwKqYokuJepk+rO+9Pz+gtZcoKao=)
                          12: LY1fBMtbeXqoPs6JAb2Fp7GAya0.roa (hash: Qr2vedHCJgdf38v/J9aAhF6BgY1+sX1GDop+VSlJ8A0=)
                          13: QV6aNnm8UURvRuqfgI_kdEPt9EA.roa (hash: qGBvHUvU86fHU5nWskcmW6tvE6Bk4I7Gn2L3djwCsps=)
                          14: Touy1G_QPr8UYTeYYQtRpqJk_5g.roa (hash: KcWcsKPmd8sllWoi5Lk5MB90LqzJor5vq1GKXnj4Hx8=)
                          15: UY0wDVQF1SMA4v3hodoenfyrm2o.roa (hash: A1SEc2uoU9trsZSrKCtC+EzyCf/Gy64XR4zhl7vE57Y=)
                          16: a4eZtsxSoUsQLsQJUSldo0nW-QE.roa (hash: qETNMjbbv6m9d693TJqiz1wFLU2GtcYO5aUb7bDUTdw=)
                          17: iFHV-4_PQZAPSbyP-_eKAC5sXQc.roa (hash: YPZedpyXjCCm6shSV1jcGheCVvP+CziI5XLPjJa9XgY=)
                          18: ikqYwXx4ATF9s6KHl2PLmUXCWlM.roa (hash: B0bQ9MUv2KBsMgq8JKkZLtmuuK5t3EQXBliyDo6a9w8=)
                          19: inyGcps89W0KJ12qgHdULfVbny0.roa (hash: u8DcCG0CcvnANGvMJRgwaWdMSpZ52dquk6zoYwmbVJ8=)
                          20: otaASQB8GGspCrnWLO5XzeVcDtk.roa (hash: oDtuQThG0LQMGhrXFrB1ol0UNfbRDq15W0nys4vTqB4=)
                          21: r3uWhWQfYQ-7I96xPQgZcGOfgm8.roa (hash: 3XA1JsyB/6+JdqSvjZhGBEJokLbWA2Jq/KVD4Zxhe/g=)
                          22: vnZI4Od1GtuWmbcfTmasYrA2CVc.roa (hash: hJx0ALHEmU6KnL133ic1OuF6Y0ua/ikvZuJIZHg4VQo=)
                          23: wnrT0lCYLHW2wtAS-UsPdzbCuE4.roa (hash: BRm89z/l+kKbdn26JzqMifrc7bDhOG/Y4poCpOQIQ3U=)
                          24: yUTmeS-NkDfKbmdfTdkhxc4774c.roa (hash: agdIY8JzBTM9yK+Bw0ruFZ9HCc1JBNpz+/JAwoXldN8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Sep 2026 16:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:72:4e:0f:23:3b:c2:b7:b0:36:8f:1c:89:9a:09:84:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
        Validity
            Not Before: Sep  5 16:01:53 2026 GMT
            Not After : Sep  6 16:01:53 2026 GMT
        Subject: CN=08e44eef15a2da33cfebf11e208c92b6475de8f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b6:6e:f6:04:d2:a9:ab:fb:cd:fc:bc:5d:65:
                    28:de:4f:6f:b2:08:48:89:24:d3:d5:36:a8:c3:6f:
                    f3:98:e1:c1:dd:24:ae:01:62:98:c9:a0:0a:46:e8:
                    bf:2e:60:62:ef:7d:2a:f6:77:2b:d7:2c:d1:3e:be:
                    35:42:b4:b1:c9:49:f3:a0:70:f5:4a:a0:8d:b1:bb:
                    2c:b5:11:29:f1:e8:08:02:86:6f:a5:06:e7:6b:7c:
                    36:20:95:89:38:cc:2d:4a:0a:94:51:48:a7:e4:69:
                    7d:35:2b:23:d2:75:e9:f4:74:17:b7:c7:d2:af:29:
                    98:b0:1c:72:f9:88:af:85:ef:02:34:30:ff:47:b0:
                    55:19:87:3a:bd:52:dc:95:cb:3e:d5:98:ef:e9:f5:
                    92:56:e4:93:7f:19:11:f8:96:4e:18:d3:b1:6e:3d:
                    c2:f4:b7:8c:7d:41:68:98:11:2e:dc:42:bc:bd:b9:
                    1b:02:ea:05:b5:7b:29:df:1a:9b:3f:e3:5a:bf:20:
                    6e:1d:f4:44:08:0a:c0:21:11:1b:9a:fb:33:33:70:
                    ba:36:1a:c4:82:87:10:9e:b3:4c:65:74:ee:13:0a:
                    83:e1:48:05:e9:89:c7:fc:f0:1b:73:af:03:a7:ef:
                    cc:56:9e:4e:b6:af:3a:64:38:6f:13:96:b0:17:3f:
                    fa:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:E4:4E:EF:15:A2:DA:33:CF:EB:F1:1E:20:8C:92:B6:47:5D:E8:F3
            X509v3 Authority Key Identifier:
                keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ed:a5:eb:04:a5:b1:77:11:73:04:ec:e3:1c:20:2c:c7:97:60:
         6d:b8:03:41:da:a7:bb:ed:42:8e:5b:cc:77:4f:37:c7:b8:ec:
         11:09:cb:d7:4b:64:1e:3a:46:1e:3f:a2:c4:f3:c4:72:14:ed:
         27:4f:f7:61:50:8a:22:60:3a:82:94:51:27:65:2d:47:69:26:
         5f:e2:7d:30:14:2c:40:e7:45:6e:56:64:fe:4e:47:b9:cc:3d:
         08:55:18:f8:b8:e2:ca:b8:38:a2:5e:e5:1e:26:fa:7f:32:f5:
         78:21:6b:bb:74:48:eb:b4:6e:ae:f7:2f:e2:95:15:8f:f9:13:
         4d:fa:c3:8a:08:ca:8c:21:d3:9f:c3:ac:a8:2f:ca:69:30:8b:
         71:41:be:17:f2:e7:95:00:2f:19:e4:f8:c8:86:b7:93:86:e0:
         9e:52:64:9c:87:bf:09:ab:46:49:08:a4:9e:1b:89:03:54:36:
         c5:59:d0:72:b7:68:c0:47:65:59:bf:50:14:50:b1:eb:e1:94:
         c7:f2:7c:89:dc:a1:ae:e6:31:3b:30:84:8d:8d:f1:8e:ae:09:
         f4:e9:10:72:58:db:98:09:6c:27:3e:8c:e8:be:26:b1:3d:35:
         35:8d:58:5a:3b:24:06:4c:a5:1a:3c:30:8a:7a:12:c1:53:10:
         d9:73:e7:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaByTg8jO8K3sDaPHImaCYQXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYTE2YWIwNjAyMDA2Nzc0MGE0YzFmYjQ3YTkxMjYyMmYx
ZDA3MjIwHhcNMjYwOTA1MTYwMTUzWhcNMjYwOTA2MTYwMTUzWjAzMTEwLwYDVQQD
EygwOGU0NGVlZjE1YTJkYTMzY2ZlYmYxMWUyMDhjOTJiNjQ3NWRlOGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLZu9gTSqav7zfy8XWUo3k9vsghI
iSTT1Taow2/zmOHB3SSuAWKYyaAKRui/LmBi730q9ncr1yzRPr41QrSxyUnzoHD1
SqCNsbsstREp8egIAoZvpQbna3w2IJWJOMwtSgqUUUin5Gl9NSsj0nXp9HQXt8fS
rymYsBxy+Yivhe8CNDD/R7BVGYc6vVLclcs+1Zjv6fWSVuSTfxkR+JZOGNOxbj3C
9LeMfUFomBEu3EK8vbkbAuoFtXsp3xqbP+NavyBuHfRECArAIREbmvszM3C6NhrE
gocQnrNMZXTuEwqD4UgF6YnH/PAbc68Dp+/MVp5Otq86ZDhvE5awFz/66wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAjkTu8Votozz+vxHiCMkrZHXejzMB8GA1UdIwQY
MBaAFC+harBgIAZ3QKTB+0epEmIvHQciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUt
ZDI0MmI2ZjNhOGExLzEvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUtZDI0MmI2ZjNhOGEx
LzEvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA7aXrBKWx
dxFzBOzjHCAsx5dgbbgDQdqnu+1CjlvMd083x7jsEQnL10tkHjpGHj+ixPPEchTt
J0/3YVCKImA6gpRRJ2UtR2kmX+J9MBQsQOdFblZk/k5Hucw9CFUY+Ljiyrg4ol7l
Hib6fzL1eCFru3RI67Rurvcv4pUVj/kTTfrDigjKjCHTn8OsqC/KaTCLcUG+F/Ln
lQAvGeT4yIa3k4bgnlJknIe/CatGSQiknhuJA1Q2xVnQcrdowEdlWb9QFFCx6+GU
x/J8idyhruYxOzCEjY3xjq4J9OkQcljbmAlsJz6M6L4msT01NY1YWjskBkylGjww
inoSwVMQ2XPnZQ==
-----END CERTIFICATE-----
Generated at Sat Sep 5 21:58:22 2026 by rpki-client