Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft
File:                     laWt9q8fzAVwrfhY_Vv74oeRoYY.mft (raw, json)
Hash identifier:          Z5QtIap0HWhJWkhJFcQuKQePTvx/kPOAiKgr72Ro6AE=
Subject key identifier:   5A:EC:9B:2E:49:A7:D1:17:C0:5D:67:BB:35:3C:6B:0F:2A:95:1B:4B
Authority key identifier: 95:A5:AD:F6:AF:1F:CC:05:70:AD:F8:58:FD:5B:FB:E2:87:91:A1:86
Certificate issuer:       /CN=95a5adf6af1fcc0570adf858fd5bfbe28791a186
Certificate serial:       0197CFBC9E8BEB2F86A9D597128AD25CA74A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft
Manifest number:          1071
Signing time:             Thu 03 Jul 2025 10:02:14 +0000
Manifest this update:     Thu 03 Jul 2025 10:02:14 +0000
Manifest next update:     Fri 04 Jul 2025 10:02:14 +0000
Files and hashes:         1: 8PVKdp7jBdhmskcbZzZ5u7sq85c.roa (hash: XnxGpZ/fINBa34w0yMKfzpg9ucbY/sXeEDSMiSeEKsQ=)
                          2: LSUjY22nbXmiCbKYSvjkpLOlwJ0.roa (hash: 2B/DnJQQcDMoJmbD3yPRvJKI69sYoXHy9Xbk2/LXV1M=)
                          3: LfyCocTCxKL8V3zHoX1xFiZMk8Q.roa (hash: V9KPs5yiTRXqdL9lcAPgAPfn6nhC2WxPwKEIJHJAwEE=)
                          4: fyoGinJNnbCXVA-FGTyI6g0iqfg.roa (hash: Qmtjez3xLzGPUsipebbDVEIAH1OV1oGj/8BaZ2trCyc=)
                          5: laWt9q8fzAVwrfhY_Vv74oeRoYY.crl (hash: 2UB8YANaP4Wn0y/mnB3oS7rQA4CLJkOLYOEmrOm6Qg8=)
                          6: w5AAaFloCKYaEQzBxuGEgwR95Zs.roa (hash: By9YcFbFu2q4K1YFFKZKWijRod5KlV5ghhACJNC0MvQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 04 Jul 2025 10:02:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:cf:bc:9e:8b:eb:2f:86:a9:d5:97:12:8a:d2:5c:a7:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a5adf6af1fcc0570adf858fd5bfbe28791a186
        Validity
            Not Before: Jul  3 10:02:14 2025 GMT
            Not After : Jul  4 10:02:14 2025 GMT
        Subject: CN=5aec9b2e49a7d117c05d67bb353c6b0f2a951b4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f3:6c:9f:3c:8f:b1:a3:7f:55:78:78:13:a3:
                    c4:b1:33:be:4f:6b:42:82:40:40:e5:38:28:8f:88:
                    44:35:86:81:bf:d2:cc:cc:89:f4:3a:20:2e:e6:19:
                    66:97:c1:fc:2f:f9:c7:b6:41:1f:6c:9a:23:52:a3:
                    80:2a:67:45:37:34:2d:8f:23:c7:a2:54:2d:4b:d9:
                    f7:97:d3:a5:e6:0a:54:5b:84:0d:a3:95:b9:46:b8:
                    98:21:49:ca:b2:24:94:b7:6f:72:76:36:ab:34:1b:
                    ef:8c:81:46:1e:f5:6d:23:30:7d:0c:51:2a:7c:f1:
                    f0:26:a3:34:44:20:a7:6e:7c:00:43:e0:df:f4:6e:
                    13:79:3a:87:3c:dc:1a:3e:6b:2b:52:97:65:1c:ff:
                    02:58:c8:6d:1a:43:3c:da:04:9b:07:cb:1f:0f:85:
                    ea:17:6a:b2:44:04:d8:a8:6d:4c:42:38:35:56:09:
                    2a:fc:05:55:c0:24:09:2b:0a:cd:8a:5e:fc:d5:3f:
                    a4:82:6b:bb:c9:d4:43:a4:53:4a:b6:39:91:97:0b:
                    6a:b1:34:f5:68:fa:c9:71:ce:75:93:ac:ce:2f:6b:
                    0d:46:88:ec:cb:3b:32:20:bf:38:a8:d3:f7:9f:e0:
                    43:c2:0d:08:b5:a9:11:43:6f:7e:ae:98:a9:62:d5:
                    97:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:EC:9B:2E:49:A7:D1:17:C0:5D:67:BB:35:3C:6B:0F:2A:95:1B:4B
            X509v3 Authority Key Identifier:
                keyid:95:A5:AD:F6:AF:1F:CC:05:70:AD:F8:58:FD:5B:FB:E2:87:91:A1:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:f2:46:22:a7:89:6d:ad:fe:50:be:98:7e:34:cc:12:da:61:
         7e:92:97:94:6b:7c:77:a5:af:21:1f:cd:03:96:01:50:74:31:
         88:a4:6d:30:1d:2d:9e:68:00:b6:29:c9:3d:a9:b7:cb:f5:94:
         10:8f:4d:81:63:a8:3e:51:c6:e4:bd:79:17:f9:71:b8:ed:b6:
         14:8f:c9:10:bb:ec:e0:16:3b:34:38:f1:b5:13:ff:0f:5c:6d:
         f7:31:2a:fa:01:3c:0f:35:2a:7d:03:df:1c:80:39:16:1b:4c:
         e2:0f:69:5f:b4:ae:52:25:13:a9:f2:b8:f4:12:09:d5:83:7d:
         0c:c7:be:14:77:dc:4e:05:01:e8:94:be:a6:3a:5c:94:2b:15:
         7a:66:d5:48:7a:c3:35:ff:f1:4d:d9:de:37:46:ca:c5:09:63:
         d4:eb:1e:8d:62:56:4f:83:26:82:54:71:00:e5:50:12:bd:07:
         8f:0c:67:c0:73:08:da:03:e3:78:8e:9f:f2:3a:b1:04:2f:68:
         9a:74:86:5b:c7:c2:42:10:b0:29:7d:ee:aa:97:23:94:61:a0:
         27:1f:87:ef:51:64:ca:4b:98:e0:67:eb:0b:9a:1a:57:99:83:
         60:64:c8:41:c9:2c:17:8a:dd:52:96:31:82:e2:4d:e1:1a:5c:
         e8:0e:7f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 16:45:46 2025 by rpki-client