Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
File:                     L6FqsGAgBndApMH7R6kSYi8dByI.mft (raw, json)
Hash identifier:          4V2v3OWscHQNOBGTGdf8xSLBEmIXaCWZ1SOgBd5MfKE=
Subject key identifier:   F3:17:25:A5:E1:25:86:C5:BD:64:76:06:A1:3B:D5:52:00:3F:EA:1A
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Certificate issuer:       /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial:       0197462FDD6A2F04E0350C9965374F0B8E11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
Manifest number:          15CC
Signing time:             Fri 06 Jun 2025 17:00:31 +0000
Manifest this update:     Fri 06 Jun 2025 17:00:31 +0000
Manifest next update:     Sat 07 Jun 2025 17:00:31 +0000
Files and hashes:         1: 02fWEW39DtOipFMD6ASDF08vEEo.roa (hash: 1pcwpV4dprUlTN0j3595RWhsxMg7qArA3wLzpHqEd1w=)
                          2: 3p0j32cYUOCnf_3ix5oMK3cKjZU.roa (hash: B5xTeALfTdQDGuz03rj872RqicG0ddnazQY9+v5kIg4=)
                          3: Ca2-ogSZC5B8tEEmtw5KxAEhJPM.roa (hash: 9b2u0lDf0ZcTigZmXHynF17wPQBPLYhpE0B4WDhTJ3Y=)
                          4: IO-WtDQojrXnpAq8np1ov8CUCWc.roa (hash: wK5cAChC2zZKj0xpr4U4SsnHLvY+XqHr++A5Z8gxuX0=)
                          5: ITMu_9G0gZ7hDjqWsuWYXnKA06k.roa (hash: EJ6xKkVoas6urLwLSHL1qGXfG7nshMzfhgWsYNbJ5+c=)
                          6: L6FqsGAgBndApMH7R6kSYi8dByI.crl (hash: M7j7asIv/A2bTc+nFhBDVKXXWLQkEInP2+fJ5rb5JQ0=)
                          7: NFmYzWkBl0tEXVCAjimOMbeZ05w.roa (hash: R5QkYmdUiNUTOAH1jI8sgRxo6knT03efS63N6kTFh/U=)
                          8: ODbto6bcK8aNz52zo3gSzY9ABBA.roa (hash: RO2Q1L8IuswwbS9beUyqLvb6YUHXrI5sMJQ94ealYrM=)
                          9: PAiV7wwH5lDn0JNrrWRqQNYoPCA.roa (hash: U/HM2vtQqlyAA5VvXddzuybceKGB/8tIXNAeUOLwY20=)
                          10: STYQ_SYXh2dq-C7xVZvQixI1Nko.roa (hash: vSZ2A0exPiZDNAtn0sk9ZHsG3cp+DcfIT5Z7upIIwZ4=)
                          11: YM3gYtjsCSk6V1--bovb_wYt7qI.roa (hash: HYnXH43Els8xcyz2VLZSSOsrk9jNKw0kKYdJbAGPWYk=)
                          12: aqmkhJlTlqxL9qQ_4a7JuspIios.roa (hash: fNPDsnQHTC9xg63koJtaKMKA62LHo0SqQzdTvfn/WNI=)
                          13: btdqouSuvTnu5DtsYBtviNCSRGI.roa (hash: 9yhn+ydyEWccKgPvwrADcup6LmhJvAZUr2NpWIGBFR8=)
                          14: fLg2SaMIQSlzSFYFGBORzBovTYk.roa (hash: rlIWoEzmASI5VouJUKPcFn3tqT/IQL88vIzCEpCaf9k=)
                          15: gUT9YCkZWEcn742oGnu8ZfS34D8.roa (hash: AXHT/3cUQ+5r0lFJfezYLrNvbhUISwKUaKImq/bolQk=)
                          16: hxa6nxs_1z_VP7Dm_9A_jg_pRGc.roa (hash: /c24+EOtA2JGS+IHqjFa+CtjAJ+hAzZO9n24HxrhDss=)
                          17: jGhXzh2b4PKVeDKStlkuKpWSF1E.roa (hash: UKCCCfaCTIYyvaiefORFa+m9CnomjkMQIkqcoPohqCk=)
                          18: mxKqNAM863ITChJLjCi-JHUSkWw.roa (hash: dI+6FWK1t3x8Piw/q1k50w2Q/hiRygsH9DYBFb0RVSE=)
                          19: pLpqca7Uyo2VN4c7iG8bk7Tvby0.roa (hash: 1CC5QDG9ExxRePRPfGaAzhbKQ4GWSPEJPxG3XPFJoGQ=)
                          20: qrkEYAyWdukZTm5XyqiS-xT8TmY.roa (hash: zSUcH0ExfvbaHK3qrtk/nMWlCvae+aNOPb/D60GUy1g=)
                          21: wJ7CKKiQXbsPpU2tQu2oYE5Ks50.roa (hash: yANPJHhCtesYANgIrnLFv1j+dF/ic7glBbw6RdagPtI=)
                          22: x58nBW842pZhjhJLCJx9GkCSrU4.roa (hash: yI29HuKDYhaUmkGPwd2s/nIFspAoGLTPT9OHHAMuvaY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 17:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:2f:dd:6a:2f:04:e0:35:0c:99:65:37:4f:0b:8e:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
        Validity
            Not Before: Jun  6 17:00:31 2025 GMT
            Not After : Jun  7 17:00:31 2025 GMT
        Subject: CN=f31725a5e12586c5bd647606a13bd552003fea1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d5:56:85:de:ed:9b:51:76:7d:9e:fb:8c:46:
                    14:b7:f3:19:b6:08:82:5f:e1:3d:58:e4:a6:48:94:
                    d0:35:a6:88:3e:dc:e9:9c:e2:b7:88:f7:4d:28:c5:
                    a9:92:e5:f0:02:76:80:78:82:15:8f:a1:ef:cd:06:
                    32:c5:77:c7:b2:30:cc:14:c7:eb:20:57:ce:e0:d6:
                    a0:47:6a:5d:6d:14:2f:6b:3f:41:36:40:19:ab:d3:
                    9d:c2:44:22:c2:c1:0d:a0:1f:71:79:ce:1c:d7:3d:
                    4d:8d:b5:17:6e:29:c7:34:2e:9c:09:26:41:8e:ba:
                    a3:32:00:1d:cc:2c:f8:c1:b4:73:47:44:3f:e1:7e:
                    c9:9b:93:74:80:00:f2:0e:24:06:4f:4f:6a:78:21:
                    bd:13:07:dd:8c:8e:f1:36:4e:80:32:63:e3:62:17:
                    ac:2d:2e:5f:81:19:c1:cd:23:17:40:f2:2f:c7:1b:
                    e4:b9:e8:d4:64:98:67:17:bc:63:ea:de:6b:45:4f:
                    b7:4b:e2:01:c8:d6:fb:74:75:91:e6:09:47:58:7c:
                    18:d3:c6:41:42:a0:e8:a3:74:f5:e0:62:67:48:4c:
                    c6:ae:27:8e:58:9c:30:94:86:3d:a2:b5:7f:d6:11:
                    19:7d:ab:95:88:a6:cb:1d:b7:ca:6e:f2:1f:90:2a:
                    18:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:17:25:A5:E1:25:86:C5:BD:64:76:06:A1:3B:D5:52:00:3F:EA:1A
            X509v3 Authority Key Identifier:
                keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:c1:5c:2a:1b:46:c7:de:42:89:a1:d9:a8:58:e0:5f:c2:e4:
         08:12:f0:35:a0:68:87:62:54:6f:54:d4:50:b6:8f:9f:bd:c1:
         1c:74:e0:46:fb:48:a7:b9:22:8f:ef:69:e3:7f:10:ad:9d:79:
         97:75:e3:9f:23:9e:b0:ea:a1:95:fc:44:98:1e:56:0f:44:00:
         b8:7c:d3:ed:cf:f2:86:07:f8:08:47:28:1f:8e:2b:6b:5c:63:
         d6:22:7b:3a:5d:cb:c5:31:63:64:e7:f9:9e:4f:1f:d0:fa:14:
         95:f1:40:8f:3e:c9:f8:19:8b:78:89:53:f9:36:78:91:4e:a3:
         e3:74:a8:ad:00:91:0c:44:26:0a:bc:f5:b3:c1:fb:21:94:4c:
         b2:21:bd:c6:1e:97:f4:1b:90:43:fe:b5:42:9f:e2:f7:a9:c7:
         74:cf:15:e9:b9:f1:a4:10:f2:90:e8:c7:cb:6e:ef:f7:88:7f:
         6a:cf:98:e1:94:3b:f4:57:12:8e:a5:77:1d:6f:94:6c:60:fa:
         db:eb:d8:18:5f:43:f2:7a:d4:4c:3b:96:40:e0:3c:0c:50:98:
         f0:9e:bb:6c:ae:34:de:15:27:0c:56:b1:19:e2:3b:a0:0f:6a:
         97:c2:28:74:8a:94:66:c8:15:5c:e3:28:b2:1a:8b:c3:e3:52:
         78:75:5e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:35:01 2025 by rpki-client