Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/a98239-6179-4cdc-8b94-0a4424ff2a1f/1/laaF1WN0LJza4cNZU2at7NCpO6U.mft
File:                     laaF1WN0LJza4cNZU2at7NCpO6U.mft (raw, json)
Hash identifier:          q2l/119MrUcmNsZ6lTL/pLkWrqwDOXwhh56lPurYP8c=
Subject key identifier:   BD:8A:82:2E:FD:6C:58:B6:7C:19:11:0B:4F:93:0B:CD:71:8C:D8:50
Authority key identifier: 95:A6:85:D5:63:74:2C:9C:DA:E1:C3:59:53:66:AD:EC:D0:A9:3B:A5
Certificate issuer:       /CN=95a685d563742c9cdae1c3595366adecd0a93ba5
Certificate serial:       019D98F51C9379ED8B934EAF8F266DF970E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/laaF1WN0LJza4cNZU2at7NCpO6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/a98239-6179-4cdc-8b94-0a4424ff2a1f/1/laaF1WN0LJza4cNZU2at7NCpO6U.mft
Manifest number:          105A
Signing time:             Fri 17 Apr 2026 01:01:33 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:33 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:33 +0000
Files and hashes:         1: laaF1WN0LJza4cNZU2at7NCpO6U.crl (hash: m3scyOCNf1eIcA0snW62v4cTUGsiz94/UhSLg3fWhlg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/a98239-6179-4cdc-8b94-0a4424ff2a1f/1/laaF1WN0LJza4cNZU2at7NCpO6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/a98239-6179-4cdc-8b94-0a4424ff2a1f/1/laaF1WN0LJza4cNZU2at7NCpO6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/laaF1WN0LJza4cNZU2at7NCpO6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 01:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f5:1c:93:79:ed:8b:93:4e:af:8f:26:6d:f9:70:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a685d563742c9cdae1c3595366adecd0a93ba5
        Validity
            Not Before: Apr 17 01:01:33 2026 GMT
            Not After : Apr 18 01:01:33 2026 GMT
        Subject: CN=bd8a822efd6c58b67c19110b4f930bcd718cd850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c8:3e:4f:e0:55:5c:d5:3c:b0:46:c2:c5:73:
                    b6:04:d4:f1:62:96:e5:1b:11:45:13:c4:d4:90:96:
                    fd:6d:9a:b1:08:9d:b0:fe:54:0a:5d:f9:01:e3:75:
                    04:2f:48:8b:4b:67:26:50:0e:34:64:c9:5e:ec:2c:
                    6e:10:be:55:6a:36:ca:bb:ca:99:09:6f:f1:c1:2d:
                    b8:32:28:a1:79:63:5e:3a:1d:ff:c8:a6:c6:f1:fd:
                    f9:ed:ca:05:fd:97:93:71:04:c7:da:b8:7d:cd:68:
                    02:7d:6d:b0:58:e0:58:0c:b8:81:77:d3:17:d0:7e:
                    c1:39:40:8e:df:7c:33:4d:08:42:d3:8a:f5:20:df:
                    22:12:59:00:60:98:c2:7c:ed:e6:ed:0f:89:6c:2b:
                    6d:c4:f3:89:53:dd:54:82:0c:1c:81:40:fc:24:ed:
                    0a:e8:6b:73:7a:16:55:9f:86:28:37:28:d0:38:47:
                    3d:2b:e0:c4:ba:88:9a:4f:a6:6f:ab:2c:92:ee:5c:
                    d3:4e:be:bc:2a:35:66:fe:67:bb:aa:cb:e3:a3:dd:
                    9f:60:cc:aa:5a:90:18:01:22:69:ba:0d:e2:3b:74:
                    f4:06:83:5b:8c:42:74:c3:18:11:c6:6b:64:15:9a:
                    fc:25:3e:32:8d:f1:c4:a4:fd:f0:94:79:f8:66:33:
                    d9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:8A:82:2E:FD:6C:58:B6:7C:19:11:0B:4F:93:0B:CD:71:8C:D8:50
            X509v3 Authority Key Identifier:
                keyid:95:A6:85:D5:63:74:2C:9C:DA:E1:C3:59:53:66:AD:EC:D0:A9:3B:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laaF1WN0LJza4cNZU2at7NCpO6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a98239-6179-4cdc-8b94-0a4424ff2a1f/1/laaF1WN0LJza4cNZU2at7NCpO6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a98239-6179-4cdc-8b94-0a4424ff2a1f/1/laaF1WN0LJza4cNZU2at7NCpO6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:94:0a:33:1b:c1:d6:a8:55:d0:04:23:18:5f:9a:8e:5b:89:
         b6:fb:d1:17:1d:82:ee:d5:73:85:65:a0:27:8a:ab:2b:b7:e3:
         19:96:ef:a4:a7:25:5f:34:c1:7f:f4:bf:78:4f:19:26:03:03:
         b8:c8:9a:00:d4:15:88:43:08:41:8e:bf:3c:b8:c3:7f:69:51:
         76:8b:e0:b6:53:e0:ea:a8:93:90:69:f1:c8:3c:c9:d6:1a:5f:
         97:d0:0b:e7:bd:ac:67:b2:3e:d9:1a:a7:79:0a:71:59:8a:7b:
         f0:d0:26:59:0f:88:02:0a:a2:f0:5c:67:45:bf:ed:bf:f5:76:
         98:ff:36:05:5b:30:02:89:fb:86:dc:a5:81:35:0c:de:44:68:
         4a:dd:64:71:ee:e3:30:c2:10:0e:21:51:5f:fb:a0:bf:99:c5:
         c8:ec:48:6d:fc:4b:e6:37:c4:e6:74:7d:e5:4d:83:43:af:71:
         fa:f3:a0:c2:e4:fe:d0:61:f6:4c:a7:c1:c2:af:ad:78:36:6b:
         32:a3:43:8d:ff:a8:71:c1:9c:c7:47:9f:3f:b2:88:3e:a0:a0:
         44:85:43:e4:60:a7:23:49:07:3f:48:a3:8c:13:c7:ea:8b:ad:
         6d:40:65:a4:70:a4:52:0e:41:24:26:be:4b:fa:21:b6:b1:7f:
         ac:24:7c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----