Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/a98239-6179-4cdc-8b94-0a4424ff2a1f/1/laaF1WN0LJza4cNZU2at7NCpO6U.mft
File:                     laaF1WN0LJza4cNZU2at7NCpO6U.mft (raw, json)
Hash identifier:          E+X+x8mIGG8Je48YJhWDgAYJ33WCXoWOCDhbzVYMI/M=
Subject key identifier:   5E:33:24:3D:C8:AA:6F:57:4F:16:42:17:08:BF:D2:A1:D2:8C:AB:DD
Authority key identifier: 95:A6:85:D5:63:74:2C:9C:DA:E1:C3:59:53:66:AD:EC:D0:A9:3B:A5
Certificate issuer:       /CN=95a685d563742c9cdae1c3595366adecd0a93ba5
Certificate serial:       01987B9C459D30C2100768E8B95ED9A5D758
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/laaF1WN0LJza4cNZU2at7NCpO6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/a98239-6179-4cdc-8b94-0a4424ff2a1f/1/laaF1WN0LJza4cNZU2at7NCpO6U.mft
Manifest number:          0DB4
Signing time:             Tue 05 Aug 2025 19:01:35 +0000
Manifest this update:     Tue 05 Aug 2025 19:01:35 +0000
Manifest next update:     Wed 06 Aug 2025 19:01:35 +0000
Files and hashes:         1: laaF1WN0LJza4cNZU2at7NCpO6U.crl (hash: 9tpiDzJux6eRBlxYaBX/CSoqmmaEhXhJ7NrVvs4I8z4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/a98239-6179-4cdc-8b94-0a4424ff2a1f/1/laaF1WN0LJza4cNZU2at7NCpO6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/a98239-6179-4cdc-8b94-0a4424ff2a1f/1/laaF1WN0LJza4cNZU2at7NCpO6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/laaF1WN0LJza4cNZU2at7NCpO6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 19:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7b:9c:45:9d:30:c2:10:07:68:e8:b9:5e:d9:a5:d7:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a685d563742c9cdae1c3595366adecd0a93ba5
        Validity
            Not Before: Aug  5 19:01:35 2025 GMT
            Not After : Aug  6 19:01:35 2025 GMT
        Subject: CN=5e33243dc8aa6f574f16421708bfd2a1d28cabdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fc:1c:d5:6c:5c:b2:9a:cb:b6:d2:bd:c5:a7:
                    aa:22:ef:fc:c4:06:cb:d5:3a:a5:58:d8:2b:aa:63:
                    2d:d8:0e:e0:aa:f1:79:2f:83:51:15:27:09:4a:e8:
                    de:6f:33:a1:28:d2:f2:22:3c:a8:3b:25:d7:42:23:
                    d4:50:af:05:1b:0b:32:df:96:3b:db:2d:c6:33:77:
                    95:4b:9f:61:ee:af:ee:19:29:ed:4a:3b:d3:cf:6e:
                    ec:15:7c:cc:30:d2:f2:7f:7a:36:b9:d8:79:6b:2a:
                    13:69:b7:cc:b7:7f:dd:0c:57:4f:f7:61:f3:75:86:
                    11:47:c8:55:74:18:f6:e1:56:0b:62:fd:43:d3:b0:
                    e9:03:72:b5:52:5a:88:c3:88:2f:84:ce:f3:2f:d0:
                    09:05:8f:7a:de:45:47:95:48:b7:f6:a0:1a:cb:69:
                    90:7a:93:4c:24:0d:b1:1e:38:2a:84:c3:89:bf:12:
                    c3:a2:d0:b2:f6:a1:e7:87:8d:6f:37:7d:50:8c:0b:
                    97:f8:e5:49:df:d7:88:63:8f:34:56:7d:7b:7b:96:
                    13:7e:c0:b9:98:3e:7e:4d:89:e4:7d:85:e1:59:48:
                    62:48:3b:46:1c:75:f8:dd:eb:31:15:55:ee:4e:d8:
                    97:16:41:7a:43:2c:1d:c5:7b:c6:95:7b:56:b5:51:
                    88:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:33:24:3D:C8:AA:6F:57:4F:16:42:17:08:BF:D2:A1:D2:8C:AB:DD
            X509v3 Authority Key Identifier:
                keyid:95:A6:85:D5:63:74:2C:9C:DA:E1:C3:59:53:66:AD:EC:D0:A9:3B:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laaF1WN0LJza4cNZU2at7NCpO6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a98239-6179-4cdc-8b94-0a4424ff2a1f/1/laaF1WN0LJza4cNZU2at7NCpO6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a98239-6179-4cdc-8b94-0a4424ff2a1f/1/laaF1WN0LJza4cNZU2at7NCpO6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:36:77:1c:df:3c:f4:a4:f6:6c:7f:d8:71:34:4a:f9:74:3d:
         a8:12:74:6b:5d:9e:a6:a8:6f:03:51:9c:ce:36:90:a6:33:70:
         57:15:16:07:67:49:0c:ed:91:c3:32:1c:d9:d5:b6:a9:6f:36:
         8d:e1:8d:52:54:d7:94:1e:d3:1e:de:25:02:e3:bd:04:73:68:
         f4:99:47:5a:44:de:0d:2f:aa:da:ca:de:48:49:2b:e6:fb:03:
         93:74:66:39:b5:f0:df:da:00:f2:72:12:77:2b:53:a0:5d:5d:
         94:80:bd:ad:2f:05:a3:e5:f2:ad:37:50:09:ff:a1:2c:eb:6d:
         09:90:8c:54:7f:02:b8:b9:7e:82:40:15:c6:a5:15:87:06:6d:
         15:72:f6:b7:a9:78:4a:e1:46:70:e1:98:10:05:7d:e4:93:05:
         f5:e1:15:65:da:1f:f6:a5:d0:d5:5b:7a:dc:75:41:81:33:bb:
         32:d8:4e:76:38:67:00:a3:1f:15:2b:d4:29:6c:52:75:29:88:
         5f:55:19:1c:44:31:2c:ba:87:68:df:c6:6c:bc:e9:58:a2:e7:
         e3:43:ab:f8:8d:73:dd:6d:f1:61:d3:da:40:67:bc:32:2c:31:
         63:b7:c3:ba:1d:0e:d4:af:f9:3e:02:29:54:c9:95:7d:fd:52:
         6e:a2:0c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:19:37 2025 by rpki-client