Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
File:                     L6FqsGAgBndApMH7R6kSYi8dByI.mft (raw, json)
Hash identifier:          tdk8Lyk6K5vDxFxXmOMZnyqf/xu21eEb4Sont6uqqsA=
Subject key identifier:   3C:70:B6:CA:D6:62:97:70:72:29:10:56:50:F2:EC:37:31:46:49:A8
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Certificate issuer:       /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial:       01A15F319424C5A88BC019D275CA437D7FC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
Manifest number:          1B28
Signing time:             Wed 21 Oct 2026 16:00:46 +0000
Manifest this update:     Wed 21 Oct 2026 16:00:46 +0000
Manifest next update:     Thu 22 Oct 2026 16:00:46 +0000
Files and hashes:         1: 06fSg1kB8ckHlCpjtqtFvEEoGmo.roa (hash: f48NpMpstUXIPO7HPVODVDToQ8B0NiDFbk8U3q4Yolw=)
                          2: 1zTKaDP4-Zj9mUt7-S5YAcY_mVo.roa (hash: 5+5yfPGg5lDhghBfx+dnbTS3tC9lex/WG7QMbZj26A4=)
                          3: 3Qr0L0RQ_Z8R5Cc74oenvNgwB5I.roa (hash: pkT85WzVKfS8+6maKuMZ3/z/S227uMf4I4OAK0s81z8=)
                          4: 71fh7xRTZMQEFeADtvBms8Jxriw.roa (hash: TUhapUQZ7I+Jwf6YXi6D4YZvbKOEtBxwBuVU+O4dqaU=)
                          5: 7XKrY6sRi0TOpYVIC72L4eR2QMQ.roa (hash: dRjz/HPxAbIEZD8TfYo3oBDmUxS8I/PLZra+7sLx66k=)
                          6: DEqgDw1OjuvCUcoY_GFoXdYUL-g.roa (hash: uaVIfBigKYn9jPBacBnYHFMS2xbXYfQ5wT7j6FjYz1s=)
                          7: F8keXq_pkJusVqvderyweZtB2hk.roa (hash: ovV/OvBeut4vp6yHx2cmk6UbzzFtHIGDrJbtwTxbjVE=)
                          8: IEYsZgA5S8VfmxdDgbohhLTNNns.roa (hash: iEIpm0ezjdj8b3/qEAPdEkQRFU/FlcYxVmHq5++f9/Q=)
                          9: ITJ_4YK0o5n4s0S4B56m9EJ0ogg.roa (hash: kcpE8+HMiQBohKY0fa+TOjXFBG4SK95c0ErHWF7t+v8=)
                          10: KH7cexp6-l1q-hMz0XztCASAh_0.roa (hash: n04fnnbHSBbrosj8SpMmI2CoVRjTOGfNu9TSTWPU2ig=)
                          11: L6FqsGAgBndApMH7R6kSYi8dByI.crl (hash: 9PFjEhTTiacCAxFE3LgPWmMk6MqH3VuSXEn1fOq5RDg=)
                          12: LY1fBMtbeXqoPs6JAb2Fp7GAya0.roa (hash: Qr2vedHCJgdf38v/J9aAhF6BgY1+sX1GDop+VSlJ8A0=)
                          13: QV6aNnm8UURvRuqfgI_kdEPt9EA.roa (hash: qGBvHUvU86fHU5nWskcmW6tvE6Bk4I7Gn2L3djwCsps=)
                          14: V8TjE8GSvc9ONWfF8MfeHY4oWQs.roa (hash: 9uicU4yqb0Tj4JLITI3tteffnbMalR8FCLnIsA3xkvU=)
                          15: a4eZtsxSoUsQLsQJUSldo0nW-QE.roa (hash: qETNMjbbv6m9d693TJqiz1wFLU2GtcYO5aUb7bDUTdw=)
                          16: bJtdlvLOuI3jh0oA1qNjEc_zfm8.roa (hash: Tnj06f7lntlh33HAIiByCN+U6C3df5AhbW5/3LmR9bI=)
                          17: g40iPVEhhkZlqmHJ3xh2amLoibs.roa (hash: pvCD4+RtH1lI+E7q9BwSzx1vYXeOz4FdgT7fvEqT8VE=)
                          18: hFeItkl0pbB5nCfvB89ws2sKfzE.roa (hash: kvSCEFvXk3oziU8gPMJaY3o3CdcxI9qbdV8zeD0Zlr0=)
                          19: iFHV-4_PQZAPSbyP-_eKAC5sXQc.roa (hash: YPZedpyXjCCm6shSV1jcGheCVvP+CziI5XLPjJa9XgY=)
                          20: ikqYwXx4ATF9s6KHl2PLmUXCWlM.roa (hash: B0bQ9MUv2KBsMgq8JKkZLtmuuK5t3EQXBliyDo6a9w8=)
                          21: inyGcps89W0KJ12qgHdULfVbny0.roa (hash: u8DcCG0CcvnANGvMJRgwaWdMSpZ52dquk6zoYwmbVJ8=)
                          22: lFBHMnGh4Uq2zrWIYArDZMiTAZ4.roa (hash: 59RbvFMy9HBXnfUPqwhzkRhjnBuLtkItjt3L2lY9NsA=)
                          23: otaASQB8GGspCrnWLO5XzeVcDtk.roa (hash: oDtuQThG0LQMGhrXFrB1ol0UNfbRDq15W0nys4vTqB4=)
                          24: r3uWhWQfYQ-7I96xPQgZcGOfgm8.roa (hash: 3XA1JsyB/6+JdqSvjZhGBEJokLbWA2Jq/KVD4Zxhe/g=)
                          25: vnZI4Od1GtuWmbcfTmasYrA2CVc.roa (hash: hJx0ALHEmU6KnL133ic1OuF6Y0ua/ikvZuJIZHg4VQo=)
                          26: wnrT0lCYLHW2wtAS-UsPdzbCuE4.roa (hash: BRm89z/l+kKbdn26JzqMifrc7bDhOG/Y4poCpOQIQ3U=)
                          27: yUTmeS-NkDfKbmdfTdkhxc4774c.roa (hash: agdIY8JzBTM9yK+Bw0ruFZ9HCc1JBNpz+/JAwoXldN8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Oct 2026 16:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:5f:31:94:24:c5:a8:8b:c0:19:d2:75:ca:43:7d:7f:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
        Validity
            Not Before: Oct 21 16:00:46 2026 GMT
            Not After : Oct 22 16:00:46 2026 GMT
        Subject: CN=3c70b6cad66297707229105650f2ec37314649a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5f:b1:fa:bf:71:c6:77:93:8b:51:7a:b6:94:
                    e1:3e:b9:5c:a6:1e:fb:7b:1e:f3:d3:b2:ec:a1:b3:
                    12:20:86:c9:6f:fe:a6:9c:96:f6:ab:69:f9:93:67:
                    b7:15:00:90:54:2b:61:ca:c0:52:cd:f5:44:c8:52:
                    77:fb:29:82:e5:e6:7c:48:f6:54:99:83:4e:2e:1f:
                    31:29:98:d1:75:f9:0c:e3:10:2d:cb:2f:10:9c:91:
                    43:b6:81:c5:2c:82:f9:de:9e:0a:81:ed:cb:27:d4:
                    b0:ce:f3:ae:d3:52:21:a2:9d:1f:bb:f6:b2:72:98:
                    07:7b:de:b3:83:ec:c5:03:26:39:fb:87:74:7c:6c:
                    20:e0:f9:5e:71:e8:77:90:52:ab:c4:20:59:ce:98:
                    0f:3c:ca:b4:fa:27:a8:06:00:54:43:d0:19:d4:85:
                    80:ec:4a:f9:8f:bd:68:21:8f:ba:fb:6d:1b:f0:df:
                    37:11:c0:16:97:2e:dc:b7:60:17:bf:55:12:69:1f:
                    47:8e:84:76:05:83:a0:fd:de:dd:31:7a:e1:14:6b:
                    fc:fa:92:41:c5:66:5c:b4:b5:bd:07:06:1f:0e:d4:
                    6f:5a:57:99:e9:1c:31:7e:60:08:0e:a9:14:22:bb:
                    a0:87:52:b0:df:bc:f8:62:1e:62:74:ea:2d:43:45:
                    eb:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:70:B6:CA:D6:62:97:70:72:29:10:56:50:F2:EC:37:31:46:49:A8
            X509v3 Authority Key Identifier:
                keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:cb:ef:fb:78:0c:76:4f:53:6b:78:51:8c:49:69:1a:20:82:
         cc:f0:fd:1f:b6:08:be:e4:12:ef:72:ff:1f:e5:2e:6f:11:7b:
         63:db:c8:09:23:d2:82:f5:b3:c7:07:6c:9c:ae:44:b8:92:34:
         e3:39:d9:90:9e:67:40:9d:98:42:37:dd:66:63:bd:d4:24:c0:
         34:5e:fa:09:ed:af:37:3a:65:9c:85:76:3a:c5:d7:96:3e:cf:
         9f:6c:1d:fb:c9:3f:68:d2:a4:f7:14:5f:25:2c:c8:80:d9:88:
         a9:88:14:d0:14:92:e9:79:8c:9a:67:1b:17:cb:81:3d:14:bb:
         6a:50:48:00:e6:be:f0:73:e1:fc:0f:5c:36:77:aa:21:7c:a0:
         71:50:fe:b7:ed:b6:57:9a:40:09:de:c1:0d:86:03:2e:3f:6b:
         25:6f:a2:f3:82:ea:c2:ff:b4:35:17:98:90:d2:04:e7:b3:d9:
         12:a6:31:68:1a:22:30:33:a5:b8:10:c5:d8:e5:aa:6b:7f:a9:
         90:01:f9:5e:fa:10:87:33:50:5e:ad:d3:12:89:40:e2:9e:ea:
         44:25:0f:62:d9:ca:64:fe:1e:e2:23:7f:02:60:25:1f:35:81:
         b8:67:b7:d8:79:2f:ec:f5:67:3d:28:3e:88:1a:b1:d8:3c:ae:
         b6:c9:01:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 02:08:09 2026 by rpki-client