Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
File:                     L6FqsGAgBndApMH7R6kSYi8dByI.mft (raw, json)
Hash identifier:          mtTFCom8VRUGsoMf87XZnjdxLDnu7V41AAjRs+0NQ3o=
Subject key identifier:   E7:56:53:3A:60:D2:8B:23:1B:57:C7:C9:6F:7A:DF:22:59:DB:83:C6
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Certificate issuer:       /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial:       019D2696311A6F043EA3488C374FDA377BA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
Manifest number:          18EA
Signing time:             Wed 25 Mar 2026 20:01:10 +0000
Manifest this update:     Wed 25 Mar 2026 20:01:10 +0000
Manifest next update:     Thu 26 Mar 2026 20:01:10 +0000
Files and hashes:         1: 06fSg1kB8ckHlCpjtqtFvEEoGmo.roa (hash: f48NpMpstUXIPO7HPVODVDToQ8B0NiDFbk8U3q4Yolw=)
                          2: 0FVqGtFahGdxcAjyrCXqm-_D_2Y.roa (hash: wbB5r687Xo9TiBjn1MYz/iIirW8EwXDXFQpb0dYotVo=)
                          3: 2lMPUfwDH8K0NAdIPI92MZeaRNo.roa (hash: U4mWJbeH1svHCI4n71GUu9jQHQ+p0m5kueQEDHnX2hA=)
                          4: 3Qr0L0RQ_Z8R5Cc74oenvNgwB5I.roa (hash: pkT85WzVKfS8+6maKuMZ3/z/S227uMf4I4OAK0s81z8=)
                          5: 71fh7xRTZMQEFeADtvBms8Jxriw.roa (hash: TUhapUQZ7I+Jwf6YXi6D4YZvbKOEtBxwBuVU+O4dqaU=)
                          6: 7XKrY6sRi0TOpYVIC72L4eR2QMQ.roa (hash: dRjz/HPxAbIEZD8TfYo3oBDmUxS8I/PLZra+7sLx66k=)
                          7: ABJeZ_3GC1dQAGLc7pryHv5JP4U.roa (hash: b/UMRldynJAJil5wWfl7s30Arkfra6le0omnJrbGF64=)
                          8: DEqgDw1OjuvCUcoY_GFoXdYUL-g.roa (hash: uaVIfBigKYn9jPBacBnYHFMS2xbXYfQ5wT7j6FjYz1s=)
                          9: IEYsZgA5S8VfmxdDgbohhLTNNns.roa (hash: iEIpm0ezjdj8b3/qEAPdEkQRFU/FlcYxVmHq5++f9/Q=)
                          10: ITJ_4YK0o5n4s0S4B56m9EJ0ogg.roa (hash: kcpE8+HMiQBohKY0fa+TOjXFBG4SK95c0ErHWF7t+v8=)
                          11: J-fPqsN-bTywutCgBgm0oMsMZn4.roa (hash: GwWRnUTMSKlctTV12vVbv4ww0CbgnMjaJS61PVU8Qu8=)
                          12: L6FqsGAgBndApMH7R6kSYi8dByI.crl (hash: Sv4XFfoZxkM/dIF68g75bmdvm9+QVOht22/iTLPBGPQ=)
                          13: LY1fBMtbeXqoPs6JAb2Fp7GAya0.roa (hash: Qr2vedHCJgdf38v/J9aAhF6BgY1+sX1GDop+VSlJ8A0=)
                          14: QV6aNnm8UURvRuqfgI_kdEPt9EA.roa (hash: qGBvHUvU86fHU5nWskcmW6tvE6Bk4I7Gn2L3djwCsps=)
                          15: Touy1G_QPr8UYTeYYQtRpqJk_5g.roa (hash: KcWcsKPmd8sllWoi5Lk5MB90LqzJor5vq1GKXnj4Hx8=)
                          16: fjew1KnVpzzXG6cN5QxMH1dxtZY.roa (hash: CFIRgEEtl7KP9tjWTC+3GBX23co/ZjLI+BaThsq3dao=)
                          17: iFHV-4_PQZAPSbyP-_eKAC5sXQc.roa (hash: YPZedpyXjCCm6shSV1jcGheCVvP+CziI5XLPjJa9XgY=)
                          18: ikqYwXx4ATF9s6KHl2PLmUXCWlM.roa (hash: B0bQ9MUv2KBsMgq8JKkZLtmuuK5t3EQXBliyDo6a9w8=)
                          19: inyGcps89W0KJ12qgHdULfVbny0.roa (hash: u8DcCG0CcvnANGvMJRgwaWdMSpZ52dquk6zoYwmbVJ8=)
                          20: ntJmBypWJsX7aOzKTfBq4ZKaaJQ.roa (hash: x9oBOBfjKBk9B39p+PlGDZLBYguT1uhU4ndYq9536DE=)
                          21: otaASQB8GGspCrnWLO5XzeVcDtk.roa (hash: oDtuQThG0LQMGhrXFrB1ol0UNfbRDq15W0nys4vTqB4=)
                          22: r3uWhWQfYQ-7I96xPQgZcGOfgm8.roa (hash: 3XA1JsyB/6+JdqSvjZhGBEJokLbWA2Jq/KVD4Zxhe/g=)
                          23: vnZI4Od1GtuWmbcfTmasYrA2CVc.roa (hash: hJx0ALHEmU6KnL133ic1OuF6Y0ua/ikvZuJIZHg4VQo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 20:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:96:31:1a:6f:04:3e:a3:48:8c:37:4f:da:37:7b:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
        Validity
            Not Before: Mar 25 20:01:10 2026 GMT
            Not After : Mar 26 20:01:10 2026 GMT
        Subject: CN=e756533a60d28b231b57c7c96f7adf2259db83c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:67:9b:3f:0e:a0:5a:42:fb:bf:5c:4b:08:91:
                    29:e3:d8:e3:7e:ca:13:e9:dc:ff:4b:24:a8:8b:12:
                    58:f6:ce:a7:16:16:69:3c:f8:67:7a:ba:38:3b:24:
                    0c:31:82:32:1b:a6:91:ae:b6:b9:9a:5c:80:70:b3:
                    53:74:3b:c6:05:50:14:d8:20:e4:60:b6:ef:b5:6c:
                    62:f6:e2:5f:69:7c:81:b3:50:b0:d0:02:77:45:e9:
                    12:95:7e:53:43:99:83:e1:55:ac:45:92:ad:6f:25:
                    8a:27:d7:99:70:5e:29:5b:57:96:4a:02:97:fe:1f:
                    a3:dd:2f:57:65:69:b2:cd:d7:57:59:4f:45:3b:7e:
                    76:b1:e2:cf:66:26:c0:a1:e2:15:9f:00:3a:7c:ca:
                    f3:a0:b4:48:1c:9f:d5:3c:6c:d5:df:29:b3:80:6c:
                    03:42:af:20:30:dc:11:e4:07:0f:1b:7f:30:c4:b8:
                    f6:f3:b5:2a:bd:e1:89:09:62:a4:af:98:ea:63:2c:
                    32:0d:28:aa:60:4a:65:5f:86:a9:d1:78:f3:58:56:
                    6f:b2:19:5c:06:be:43:7a:c4:81:36:1c:ac:dd:18:
                    5f:5a:ce:52:09:78:97:7f:b8:5f:e6:36:50:5a:9c:
                    11:32:5e:3a:82:3b:a4:3b:a2:d1:26:f7:cb:ee:1a:
                    48:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:56:53:3A:60:D2:8B:23:1B:57:C7:C9:6F:7A:DF:22:59:DB:83:C6
            X509v3 Authority Key Identifier:
                keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:23:d3:4c:6c:b9:0d:30:60:8c:24:d5:92:dc:81:4f:87:78:
         ad:23:0e:d6:b9:d0:8d:62:88:7e:d9:bd:6c:13:b9:95:80:4f:
         ad:f4:23:16:c1:c3:51:0c:bc:2e:4b:67:c4:7f:ac:4b:a7:ae:
         2a:25:c5:4e:26:9f:a7:10:0c:90:93:09:57:d1:a3:04:b5:7b:
         61:8e:8c:06:45:05:b0:e1:6b:9c:7d:7f:74:4d:d0:c4:91:4a:
         10:b4:48:a9:ff:2d:23:b9:a4:e2:ae:df:89:f0:fc:6b:82:f0:
         b2:8e:22:18:e3:2a:3e:1b:a7:c2:30:cf:37:7f:99:40:8f:4c:
         0e:0b:ba:a5:f5:62:fc:94:47:92:06:f8:e6:f3:c9:f2:e2:bb:
         f7:1c:29:5b:76:db:ec:d9:ab:c7:9c:66:b5:74:42:73:e2:7d:
         b4:c2:bf:cf:9f:c8:bd:7b:e9:aa:e2:77:18:fc:6e:1d:86:46:
         bc:fc:07:7f:10:49:3b:76:fa:34:44:fa:8f:bd:2f:30:f4:dc:
         aa:85:98:f2:4e:cf:d5:ed:56:a3:5e:76:2f:9e:62:49:5a:3f:
         88:06:14:63:06:7f:fa:45:9a:1f:97:41:8a:8a:7e:27:c9:26:
         a6:8d:b3:ff:7b:67:06:17:f5:62:47:74:f7:6f:9c:31:1a:27:
         08:cd:62:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mljEabwQ+o0iMN0/aN3ujMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYTE2YWIwNjAyMDA2Nzc0MGE0YzFmYjQ3YTkxMjYyMmYx
ZDA3MjIwHhcNMjYwMzI1MjAwMTEwWhcNMjYwMzI2MjAwMTEwWjAzMTEwLwYDVQQD
EyhlNzU2NTMzYTYwZDI4YjIzMWI1N2M3Yzk2ZjdhZGYyMjU5ZGI4M2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2ebPw6gWkL7v1xLCJEp49jjfsoT
6dz/SySoixJY9s6nFhZpPPhnero4OyQMMYIyG6aRrra5mlyAcLNTdDvGBVAU2CDk
YLbvtWxi9uJfaXyBs1Cw0AJ3RekSlX5TQ5mD4VWsRZKtbyWKJ9eZcF4pW1eWSgKX
/h+j3S9XZWmyzddXWU9FO352seLPZibAoeIVnwA6fMrzoLRIHJ/VPGzV3ymzgGwD
Qq8gMNwR5AcPG38wxLj287UqveGJCWKkr5jqYywyDSiqYEplX4ap0XjzWFZvshlc
Br5DesSBNhys3RhfWs5SCXiXf7hf5jZQWpwRMl46gjukO6LRJvfL7hpIBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOdWUzpg0osjG1fHyW963yJZ24PGMB8GA1UdIwQY
MBaAFC+harBgIAZ3QKTB+0epEmIvHQciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUt
ZDI0MmI2ZjNhOGExLzEvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUtZDI0MmI2ZjNhOGEx
LzEvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuyPTTGy5
DTBgjCTVktyBT4d4rSMO1rnQjWKIftm9bBO5lYBPrfQjFsHDUQy8LktnxH+sS6eu
KiXFTiafpxAMkJMJV9GjBLV7YY6MBkUFsOFrnH1/dE3QxJFKELRIqf8tI7mk4q7f
ifD8a4Lwso4iGOMqPhunwjDPN3+ZQI9MDgu6pfVi/JRHkgb45vPJ8uK79xwpW3bb
7Nmrx5xmtXRCc+J9tMK/z5/IvXvpquJ3GPxuHYZGvPwHfxBJO3b6NET6j70vMPTc
qoWY8k7P1e1Wo152L55iSVo/iAYUYwZ/+kWaH5dBiop+J8kmpo2z/3tnBhf1Ykd0
92+cMRonCM1iVg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:02:56 2026 by rpki-client