Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
File:                     L6FqsGAgBndApMH7R6kSYi8dByI.mft (raw, json)
Hash identifier:          pBz8+ANjviqH/z7QETHJXhYD9FDQbGYbK1LeXG2aSMk=
Subject key identifier:   58:DC:5A:DD:26:67:F2:1E:56:76:54:00:89:EB:28:A3:82:60:09:7A
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Certificate issuer:       /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial:       019CBE4D27C0AB7B00495200CBE8DBB27BD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
Manifest number:          18B3
Signing time:             Thu 05 Mar 2026 14:00:53 +0000
Manifest this update:     Thu 05 Mar 2026 14:00:53 +0000
Manifest next update:     Fri 06 Mar 2026 14:00:53 +0000
Files and hashes:         1: 0FVqGtFahGdxcAjyrCXqm-_D_2Y.roa (hash: wbB5r687Xo9TiBjn1MYz/iIirW8EwXDXFQpb0dYotVo=)
                          2: 2lMPUfwDH8K0NAdIPI92MZeaRNo.roa (hash: U4mWJbeH1svHCI4n71GUu9jQHQ+p0m5kueQEDHnX2hA=)
                          3: 3Qr0L0RQ_Z8R5Cc74oenvNgwB5I.roa (hash: pkT85WzVKfS8+6maKuMZ3/z/S227uMf4I4OAK0s81z8=)
                          4: 71fh7xRTZMQEFeADtvBms8Jxriw.roa (hash: TUhapUQZ7I+Jwf6YXi6D4YZvbKOEtBxwBuVU+O4dqaU=)
                          5: 7XKrY6sRi0TOpYVIC72L4eR2QMQ.roa (hash: dRjz/HPxAbIEZD8TfYo3oBDmUxS8I/PLZra+7sLx66k=)
                          6: 8h_MXgB8CHt4pVo3hhkzuVR8UeE.roa (hash: 6zfjT+xp3/NBDc+/uiauLAz/t0qrDE3jLAUyYHa96hI=)
                          7: DEqgDw1OjuvCUcoY_GFoXdYUL-g.roa (hash: uaVIfBigKYn9jPBacBnYHFMS2xbXYfQ5wT7j6FjYz1s=)
                          8: IEYsZgA5S8VfmxdDgbohhLTNNns.roa (hash: iEIpm0ezjdj8b3/qEAPdEkQRFU/FlcYxVmHq5++f9/Q=)
                          9: ITJ_4YK0o5n4s0S4B56m9EJ0ogg.roa (hash: kcpE8+HMiQBohKY0fa+TOjXFBG4SK95c0ErHWF7t+v8=)
                          10: J-fPqsN-bTywutCgBgm0oMsMZn4.roa (hash: GwWRnUTMSKlctTV12vVbv4ww0CbgnMjaJS61PVU8Qu8=)
                          11: L6FqsGAgBndApMH7R6kSYi8dByI.crl (hash: iXtiaku2bZNtTBgTsNTh8UNl1yMe/y8H7z4jQjcm7rI=)
                          12: LY1fBMtbeXqoPs6JAb2Fp7GAya0.roa (hash: Qr2vedHCJgdf38v/J9aAhF6BgY1+sX1GDop+VSlJ8A0=)
                          13: QV6aNnm8UURvRuqfgI_kdEPt9EA.roa (hash: qGBvHUvU86fHU5nWskcmW6tvE6Bk4I7Gn2L3djwCsps=)
                          14: Touy1G_QPr8UYTeYYQtRpqJk_5g.roa (hash: KcWcsKPmd8sllWoi5Lk5MB90LqzJor5vq1GKXnj4Hx8=)
                          15: WA02GFX9SRvxayCo0SId8dfIeH0.roa (hash: 8XxyibdnMfXS5k81Eyo8aEM0J+Lg1bADYv4ZPH2Nugo=)
                          16: fjew1KnVpzzXG6cN5QxMH1dxtZY.roa (hash: CFIRgEEtl7KP9tjWTC+3GBX23co/ZjLI+BaThsq3dao=)
                          17: iFHV-4_PQZAPSbyP-_eKAC5sXQc.roa (hash: YPZedpyXjCCm6shSV1jcGheCVvP+CziI5XLPjJa9XgY=)
                          18: ikqYwXx4ATF9s6KHl2PLmUXCWlM.roa (hash: B0bQ9MUv2KBsMgq8JKkZLtmuuK5t3EQXBliyDo6a9w8=)
                          19: inyGcps89W0KJ12qgHdULfVbny0.roa (hash: u8DcCG0CcvnANGvMJRgwaWdMSpZ52dquk6zoYwmbVJ8=)
                          20: kfRFlh2dLpW8sNJO1buOQVN72X0.roa (hash: BrZj7l3H0Iralufb5r3WkRR6DSVm0J2UClYS0enarOw=)
                          21: o11PYbJBpHt2QD8aP50cnaIP_04.roa (hash: H1LNbj1fgg72IfhiQy+nQ2zyaJ2+S6w+DWXgJAkHuew=)
                          22: otaASQB8GGspCrnWLO5XzeVcDtk.roa (hash: oDtuQThG0LQMGhrXFrB1ol0UNfbRDq15W0nys4vTqB4=)
                          23: r3uWhWQfYQ-7I96xPQgZcGOfgm8.roa (hash: 3XA1JsyB/6+JdqSvjZhGBEJokLbWA2Jq/KVD4Zxhe/g=)
                          24: vnZI4Od1GtuWmbcfTmasYrA2CVc.roa (hash: hJx0ALHEmU6KnL133ic1OuF6Y0ua/ikvZuJIZHg4VQo=)
                          25: yD8rwCazGURL-qhAc90jhAEwq9o.roa (hash: LHXN8XxzRdzCYAz40QAs++VkNLHiQdmdvZb4XlWWfGw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Mar 2026 14:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:be:4d:27:c0:ab:7b:00:49:52:00:cb:e8:db:b2:7b:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
        Validity
            Not Before: Mar  5 14:00:53 2026 GMT
            Not After : Mar  6 14:00:53 2026 GMT
        Subject: CN=58dc5add2667f21e5676540089eb28a38260097a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:aa:f9:a7:30:a3:d3:e5:15:f3:d4:08:ad:57:
                    a2:da:94:21:bf:68:a1:ec:9a:67:1d:9b:d8:12:dd:
                    e8:74:5d:d5:1c:ab:e4:77:2a:e4:12:2e:f7:1f:24:
                    5a:59:71:33:fb:95:a9:d0:f8:a7:63:b9:4e:5f:88:
                    8d:d2:6d:cc:b2:9b:3a:63:43:85:cf:93:ff:19:93:
                    74:a7:c1:52:54:ae:90:33:e5:96:b8:94:98:7e:a5:
                    37:27:80:d7:6a:a7:fc:3c:79:56:82:bf:4e:26:33:
                    b0:d2:9d:09:08:0f:4a:55:3f:6e:e8:bc:c3:c3:6d:
                    45:da:44:cc:92:ff:83:a8:c4:08:5e:66:00:9f:60:
                    ea:2c:c3:dd:eb:ef:96:85:7f:da:58:28:3b:0e:61:
                    ef:5b:59:25:89:34:d7:9e:2d:fa:4e:0b:cf:5b:76:
                    cd:e0:e2:06:27:93:03:18:ae:2f:28:6b:dc:7d:16:
                    f2:00:87:52:e5:e6:03:2e:42:9b:6d:02:6a:cb:d6:
                    ce:c6:2c:18:06:ba:7b:1a:06:49:c3:c5:4e:0f:62:
                    a7:4b:ce:9a:fe:b0:20:70:5d:03:a2:91:5f:f1:0d:
                    35:b5:0d:c0:b0:a2:13:40:46:63:6f:47:d9:96:6a:
                    d8:dc:e2:25:7e:12:d2:8b:dd:42:39:74:38:04:72:
                    19:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:DC:5A:DD:26:67:F2:1E:56:76:54:00:89:EB:28:A3:82:60:09:7A
            X509v3 Authority Key Identifier:
                keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:c0:a5:b8:9a:df:94:b0:4f:5e:c3:0a:dd:d5:5c:79:f1:e8:
         1f:20:1e:35:b0:26:71:33:9d:45:94:7e:0c:29:dd:19:d0:06:
         0e:33:25:93:40:8b:9c:9c:99:bd:3b:11:ce:c6:bc:bd:ec:8f:
         1d:cc:40:3f:0f:7d:1f:fc:12:a0:3f:23:46:63:75:47:2a:d7:
         07:30:2a:c8:3c:8a:a2:4e:5d:2d:67:aa:86:42:08:fb:85:53:
         15:86:f6:e6:11:5c:35:25:21:c9:79:a6:2f:f7:a2:a4:ca:15:
         75:31:71:7b:ea:5e:41:96:cf:9c:91:40:22:61:74:f6:16:d3:
         93:c6:8a:aa:d0:ab:ef:bd:2d:2f:e8:99:5f:51:6f:96:53:02:
         c2:a8:6f:2c:bb:65:aa:3f:93:7c:f6:9b:38:c0:da:dc:9b:97:
         53:c2:0e:e3:da:86:59:e7:8e:2f:c5:68:93:b7:17:b4:a5:80:
         57:18:52:c7:32:79:50:cc:3a:27:69:e4:a0:42:a0:03:31:7b:
         5c:8e:45:e3:25:15:32:27:cb:0c:37:22:5c:67:f8:b7:f2:88:
         67:c6:08:c7:96:25:69:f0:a1:22:02:69:38:e3:eb:77:63:71:
         6e:93:2c:20:64:89:1f:82:81:b1:38:4d:75:4b:53:98:aa:c9:
         40:80:26:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZy+TSfAq3sASVIAy+jbsnvSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYTE2YWIwNjAyMDA2Nzc0MGE0YzFmYjQ3YTkxMjYyMmYx
ZDA3MjIwHhcNMjYwMzA1MTQwMDUzWhcNMjYwMzA2MTQwMDUzWjAzMTEwLwYDVQQD
Eyg1OGRjNWFkZDI2NjdmMjFlNTY3NjU0MDA4OWViMjhhMzgyNjAwOTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ar5pzCj0+UV89QIrVei2pQhv2ih
7JpnHZvYEt3odF3VHKvkdyrkEi73HyRaWXEz+5Wp0PinY7lOX4iN0m3Msps6Y0OF
z5P/GZN0p8FSVK6QM+WWuJSYfqU3J4DXaqf8PHlWgr9OJjOw0p0JCA9KVT9u6LzD
w21F2kTMkv+DqMQIXmYAn2DqLMPd6++WhX/aWCg7DmHvW1kliTTXni36TgvPW3bN
4OIGJ5MDGK4vKGvcfRbyAIdS5eYDLkKbbQJqy9bOxiwYBrp7GgZJw8VOD2KnS86a
/rAgcF0DopFf8Q01tQ3AsKITQEZjb0fZlmrY3OIlfhLSi91COXQ4BHIZPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFjcWt0mZ/IeVnZUAInrKKOCYAl6MB8GA1UdIwQY
MBaAFC+harBgIAZ3QKTB+0epEmIvHQciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUt
ZDI0MmI2ZjNhOGExLzEvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUtZDI0MmI2ZjNhOGEx
LzEvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhMCluJrf
lLBPXsMK3dVcefHoHyAeNbAmcTOdRZR+DCndGdAGDjMlk0CLnJyZvTsRzsa8veyP
HcxAPw99H/wSoD8jRmN1RyrXBzAqyDyKok5dLWeqhkII+4VTFYb25hFcNSUhyXmm
L/eipMoVdTFxe+peQZbPnJFAImF09hbTk8aKqtCr770tL+iZX1FvllMCwqhvLLtl
qj+TfPabOMDa3JuXU8IO49qGWeeOL8Vok7cXtKWAVxhSxzJ5UMw6J2nkoEKgAzF7
XI5F4yUVMifLDDciXGf4t/KIZ8YIx5YlafChIgJpOOPrd2NxbpMsIGSJH4KBsThN
dUtTmKrJQIAmxw==
-----END CERTIFICATE-----
Generated at Thu Mar 5 22:03:15 2026 by rpki-client