Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
File:                     L6FqsGAgBndApMH7R6kSYi8dByI.mft (raw, json)
Hash identifier:          ZdtF9nV61aQbRcLisqAGMQkGTIh6FZUShN86BLzjbY0=
Subject key identifier:   54:90:B1:00:2B:56:98:0A:9B:B7:DF:72:4B:5D:90:F0:D6:8D:F7:A2
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Certificate issuer:       /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial:       0199FC21AC442B763156B0357EBAF27BCF6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
Manifest number:          1739
Signing time:             Sun 19 Oct 2025 11:01:29 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:29 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:29 +0000
Files and hashes:         1: 02fWEW39DtOipFMD6ASDF08vEEo.roa (hash: 1pcwpV4dprUlTN0j3595RWhsxMg7qArA3wLzpHqEd1w=)
                          2: 3p0j32cYUOCnf_3ix5oMK3cKjZU.roa (hash: B5xTeALfTdQDGuz03rj872RqicG0ddnazQY9+v5kIg4=)
                          3: Ca2-ogSZC5B8tEEmtw5KxAEhJPM.roa (hash: 9b2u0lDf0ZcTigZmXHynF17wPQBPLYhpE0B4WDhTJ3Y=)
                          4: IO-WtDQojrXnpAq8np1ov8CUCWc.roa (hash: wK5cAChC2zZKj0xpr4U4SsnHLvY+XqHr++A5Z8gxuX0=)
                          5: JFUqeQihYrWsQpDRqW2ndC2ftBM.roa (hash: QETsS2VFfshpHUU2iSro1FYIHe9IxC8LmTGCg7f72LM=)
                          6: L6FqsGAgBndApMH7R6kSYi8dByI.crl (hash: niGzRReCzZ4RIMquI7Jmq2SxwImWqchPNZbgXU00hnY=)
                          7: NFmYzWkBl0tEXVCAjimOMbeZ05w.roa (hash: R5QkYmdUiNUTOAH1jI8sgRxo6knT03efS63N6kTFh/U=)
                          8: STYQ_SYXh2dq-C7xVZvQixI1Nko.roa (hash: vSZ2A0exPiZDNAtn0sk9ZHsG3cp+DcfIT5Z7upIIwZ4=)
                          9: SW_D2qUYG_GJbG_CnJtWBtVKvgI.roa (hash: /lUDCFHXonIPfSjzQsSAFVK7VYALWQeMdUB54XoyzJM=)
                          10: WhmXlVvWq-vWbYCCUU3N-8AbsTo.roa (hash: WOaGZw2hMcCNM1tk4Bj1gxbSLeClLoXG8ozyPK4gMmg=)
                          11: aqmkhJlTlqxL9qQ_4a7JuspIios.roa (hash: fNPDsnQHTC9xg63koJtaKMKA62LHo0SqQzdTvfn/WNI=)
                          12: dAC2GLLnuP3dogD0JGdrX2daeeM.roa (hash: iM+rgJ0rit47HCIo1jDExJJ2osAP3O/11TPPT1f3tsY=)
                          13: fLg2SaMIQSlzSFYFGBORzBovTYk.roa (hash: rlIWoEzmASI5VouJUKPcFn3tqT/IQL88vIzCEpCaf9k=)
                          14: gUT9YCkZWEcn742oGnu8ZfS34D8.roa (hash: AXHT/3cUQ+5r0lFJfezYLrNvbhUISwKUaKImq/bolQk=)
                          15: hxa6nxs_1z_VP7Dm_9A_jg_pRGc.roa (hash: /c24+EOtA2JGS+IHqjFa+CtjAJ+hAzZO9n24HxrhDss=)
                          16: j5cd0XuMKxAPLktUJpeC_eyx0l0.roa (hash: 3TElHDzA1VIkqHsC6PLR3O0EdrwlVDboD8GMmIMA9ys=)
                          17: jGhXzh2b4PKVeDKStlkuKpWSF1E.roa (hash: UKCCCfaCTIYyvaiefORFa+m9CnomjkMQIkqcoPohqCk=)
                          18: mxKqNAM863ITChJLjCi-JHUSkWw.roa (hash: dI+6FWK1t3x8Piw/q1k50w2Q/hiRygsH9DYBFb0RVSE=)
                          19: pLpqca7Uyo2VN4c7iG8bk7Tvby0.roa (hash: 1CC5QDG9ExxRePRPfGaAzhbKQ4GWSPEJPxG3XPFJoGQ=)
                          20: qrkEYAyWdukZTm5XyqiS-xT8TmY.roa (hash: zSUcH0ExfvbaHK3qrtk/nMWlCvae+aNOPb/D60GUy1g=)
                          21: zxDNDP2egOEw0V5sLdAu4oMRnWM.roa (hash: Z7I636aPHGk4v1Bv5Do5INwvmeV4wKlVVV6TGQXF1pE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:ac:44:2b:76:31:56:b0:35:7e:ba:f2:7b:cf:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
        Validity
            Not Before: Oct 19 11:01:29 2025 GMT
            Not After : Oct 20 11:01:29 2025 GMT
        Subject: CN=5490b1002b56980a9bb7df724b5d90f0d68df7a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6d:7b:c2:d5:1c:39:b7:41:8e:65:cf:b6:15:
                    c1:3b:29:34:81:8b:ac:be:65:69:8b:2e:74:59:c8:
                    8d:23:5a:98:28:f2:e6:57:4b:a7:c2:a1:6f:a6:86:
                    94:fb:6b:ab:e7:e7:18:45:b6:a1:a9:ea:ca:e0:a3:
                    f8:ff:19:33:22:90:9c:f5:9f:81:89:5a:55:6c:ec:
                    1a:68:3b:59:6c:70:a3:db:25:30:31:8d:15:a2:41:
                    99:e5:54:d6:9b:ac:d2:ab:f9:84:50:21:36:9d:a4:
                    89:f4:98:5e:73:2c:76:bb:1b:e7:18:03:53:2e:20:
                    04:13:09:d6:cf:58:d0:b9:0f:81:eb:e2:56:6f:b1:
                    d9:06:af:ea:12:7f:a7:a6:06:85:ba:a1:45:8b:aa:
                    9d:3b:b7:d4:ca:b8:fc:bf:9c:71:b3:2e:47:cc:4e:
                    c3:69:fd:9f:04:19:c7:d4:82:3a:39:fb:8f:ad:e9:
                    e8:72:a7:8a:23:1c:4d:a2:70:ad:59:db:0f:45:24:
                    53:33:99:3a:0b:e7:40:bf:8f:13:9e:f1:3b:95:bd:
                    f4:dc:61:e4:79:7b:9e:32:0b:c3:bd:2f:1e:0c:66:
                    cb:c5:53:0f:6a:b3:0b:2a:e9:ad:bb:2b:08:10:aa:
                    e2:c2:76:55:95:36:67:c4:76:ba:51:4e:60:bf:b5:
                    c0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:90:B1:00:2B:56:98:0A:9B:B7:DF:72:4B:5D:90:F0:D6:8D:F7:A2
            X509v3 Authority Key Identifier:
                keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:aa:2a:15:45:f1:04:bc:b8:14:df:67:12:2f:ba:6b:16:ac:
         35:5b:ea:0b:f7:bd:ce:c6:b0:b7:1d:ff:67:04:99:83:3c:92:
         d1:ec:8f:b0:2c:ef:6c:75:00:ab:af:d8:d1:35:99:54:60:e8:
         d6:61:dd:1c:37:8d:a6:03:50:1b:a1:01:ec:b1:ec:1c:ff:96:
         51:ae:15:b4:5b:a4:66:9f:a9:79:48:7e:29:7e:62:6e:8c:5e:
         9e:ef:03:4b:44:8e:6d:e1:bd:4a:0f:9c:60:fe:ff:b0:8c:c7:
         98:8e:b6:31:df:33:e3:b0:b5:a5:a1:06:4c:83:f2:96:34:38:
         ba:c8:08:65:6c:a6:2d:5d:1e:44:e2:87:42:90:e9:2c:ba:83:
         fa:de:64:88:ba:c4:96:a2:d8:6f:b9:f4:8c:53:80:b9:cc:39:
         e4:4a:23:57:b4:99:25:cd:c9:45:fd:b9:49:a6:4e:19:9d:d5:
         54:c0:de:7e:22:5f:f2:30:a5:85:5b:d0:50:7f:e1:5e:b9:d2:
         dd:61:19:06:50:e6:8f:45:3f:3c:0d:e8:a8:b9:62:51:19:4c:
         49:ac:02:5c:43:67:77:18:29:23:b6:dc:69:8a:b9:ed:7c:48:
         3e:e6:96:f9:5e:5f:d1:89:53:e9:6a:bd:97:f4:9b:69:2e:95:
         aa:cf:45:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:27:25 2025 by rpki-client