Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft
File:                     laWt9q8fzAVwrfhY_Vv74oeRoYY.mft (raw, json)
Hash identifier:          3JI+6tPn4yllfwTQMwgkuZ/vu1LmQnkOzkZZYTGE1lY=
Subject key identifier:   0F:0D:ED:DA:CE:96:12:BC:12:5E:26:64:D1:D1:F4:C1:ED:81:51:5C
Authority key identifier: 95:A5:AD:F6:AF:1F:CC:05:70:AD:F8:58:FD:5B:FB:E2:87:91:A1:86
Certificate issuer:       /CN=95a5adf6af1fcc0570adf858fd5bfbe28791a186
Certificate serial:       01988A69D626544E8CE533DBB252D6B9D2F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft
Manifest number:          10D2
Signing time:             Fri 08 Aug 2025 16:00:48 +0000
Manifest this update:     Fri 08 Aug 2025 16:00:48 +0000
Manifest next update:     Sat 09 Aug 2025 16:00:48 +0000
Files and hashes:         1: 8PVKdp7jBdhmskcbZzZ5u7sq85c.roa (hash: XnxGpZ/fINBa34w0yMKfzpg9ucbY/sXeEDSMiSeEKsQ=)
                          2: fyoGinJNnbCXVA-FGTyI6g0iqfg.roa (hash: Qmtjez3xLzGPUsipebbDVEIAH1OV1oGj/8BaZ2trCyc=)
                          3: laWt9q8fzAVwrfhY_Vv74oeRoYY.crl (hash: qOt+0R4AVgYH4TvbuhyaBsYxLSBVe54InASSoKQ//WA=)
                          4: w5AAaFloCKYaEQzBxuGEgwR95Zs.roa (hash: By9YcFbFu2q4K1YFFKZKWijRod5KlV5ghhACJNC0MvQ=)
                          5: x31dt52Z2g3npIwXpqoqbTf1V5E.roa (hash: Bh10rXSNlLkfDuHXrFhguJuFLCsObiJGqtV4BpaE0Z8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8a:69:d6:26:54:4e:8c:e5:33:db:b2:52:d6:b9:d2:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a5adf6af1fcc0570adf858fd5bfbe28791a186
        Validity
            Not Before: Aug  8 16:00:48 2025 GMT
            Not After : Aug  9 16:00:48 2025 GMT
        Subject: CN=0f0deddace9612bc125e2664d1d1f4c1ed81515c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e2:9b:9e:8d:c9:0d:b3:9f:67:fd:0a:ee:b3:
                    cf:cf:ff:ad:2c:6d:f7:f8:b9:d7:16:3d:6a:52:2d:
                    62:4d:f1:42:cf:dc:59:15:0a:02:4a:eb:34:4d:af:
                    9c:06:7f:1a:fa:67:53:cf:68:d0:fc:10:bf:0a:2d:
                    57:d7:64:c4:15:71:05:e4:29:8c:65:38:72:90:fd:
                    5d:6a:46:8b:9e:94:04:cd:29:ef:6b:36:0b:bd:8e:
                    f9:89:f7:29:85:f8:2f:6b:f6:8f:cc:24:7b:49:92:
                    eb:21:92:37:6e:25:73:ea:db:3d:c3:72:1e:18:b0:
                    8c:42:44:fe:71:7e:22:21:81:d8:6d:be:70:6a:9e:
                    9a:b9:47:6b:9c:08:17:94:9c:33:f9:b1:38:4f:bf:
                    0a:ff:71:51:72:09:93:f5:70:5f:bf:fd:32:eb:ef:
                    55:46:d3:57:4e:a7:5e:c3:f2:d7:cc:3b:cc:d8:0a:
                    70:52:35:89:4e:8c:95:a1:aa:ba:70:4a:cd:de:40:
                    ac:ec:32:2e:cb:12:14:e1:a6:f9:1c:3e:23:a2:9e:
                    ea:d4:12:71:75:01:12:8b:b4:69:bc:62:65:2b:1b:
                    a5:a8:ed:d2:bb:85:27:ea:ff:b6:50:41:45:0e:18:
                    a9:85:1f:ef:98:2f:3d:e5:01:0f:86:07:7f:41:80:
                    ec:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:0D:ED:DA:CE:96:12:BC:12:5E:26:64:D1:D1:F4:C1:ED:81:51:5C
            X509v3 Authority Key Identifier:
                keyid:95:A5:AD:F6:AF:1F:CC:05:70:AD:F8:58:FD:5B:FB:E2:87:91:A1:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e2:64:61:85:74:8b:df:95:fc:32:a7:c1:dc:c9:6a:21:44:62:
         a0:8f:b9:8f:89:2b:52:ca:1e:67:85:c5:56:d5:70:60:f0:eb:
         7a:f7:81:13:cd:71:1e:af:0c:c0:ce:ac:75:df:a0:e8:90:25:
         52:0d:27:f7:4a:b4:7d:b1:18:18:aa:99:39:ac:e6:8c:b5:e5:
         b0:03:70:42:0d:fd:08:e8:49:3a:7c:15:72:a8:56:58:e3:15:
         b9:d4:b5:07:0e:56:c8:b8:57:cf:24:83:87:04:02:ff:64:98:
         8b:e2:14:49:90:89:21:0e:f2:f5:51:d1:87:cc:73:b5:0f:ef:
         2f:e9:25:3e:79:2b:e1:ff:20:49:7c:41:81:20:16:19:2e:45:
         54:a8:cf:ab:80:61:d6:05:dc:2d:6f:1c:ef:80:3e:24:f8:ea:
         a9:ca:8b:b6:52:ba:0d:0b:95:8a:e9:82:0c:ab:ed:7a:ed:d4:
         e4:5b:ba:ff:10:6f:14:a1:47:5a:4c:c1:bc:d2:32:3f:6b:e2:
         ec:62:30:e7:9e:15:91:ab:30:3f:a7:98:e3:01:4e:39:f4:bb:
         b5:b8:f5:9e:ba:3d:19:d3:89:da:68:e7:3c:2f:c0:8e:30:dc:
         3f:78:85:89:f1:9b:85:fe:5a:b8:43:07:f0:1c:d1:75:f2:e8:
         ba:a8:99:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:56:33 2025 by rpki-client